[dependabot]

Bumps the python-minor-and-patch group with 10 updates:

Package	From	To
pydantic	2.14.2	2.14.3
anyio	4.15.1	4.16.0
langgraph	1.2.18	1.2.20
langgraph-checkpoint-sqlite	3.1.2	3.1.3
python-multipart	0.0.32	0.0.33
langgraph-sdk	0.4.10	0.4.14
langsmith	0.14.16	0.14.17
anthropic	2.3.0	2.6.0
openai	3.41.0	3.46.0
jsonpath-ng	1.15.0	1.16.0

Updates pydantic from 2.14.2 to 2.14.3

Release notes

Sourced from pydantic's releases.

v2.14.3 2026-11-04

v2.14.3 (2026-11-04)

What's Changed

Packaging

• Build wheels for GraalPy 3.13 by @​msimacek in #14136.

  The previous v2.14.2 release published GraalPy 3.11 wheels, which were not working due to a PyO3 version bump. A CI workflow issue made it so that the wheel wasn't tested before publishing. This is now fixed: starting in v2.14.3, we no longer publish GraalPy 3.11 wheels, and GraalPy 3.13 wheels are now published together with the existing 3.12 one.

Performance

• Improve schema generation for fixed type handlers by @​alexmojaki in #14130
• Skip general schema dispatch for builtin scalars by @​alexmojaki in #14141
• Skip annotation handler setup when annotations are empty by @​alexmojaki in #14149
• Fix quadratic serialization time with per-index include/exclude on sequences by @​Viicos in #14160
• Avoid type lookups when checking for None during serialization by @​Viicos in #14167
• Improve performance of model serialization by @​Viicos in #14171
• Improve performance of dict serialization by @​Viicos in #14172
• Improve performance of type inference during serialization by @​Viicos in #14173
• Avoid cloning the field name when using the default value during validation by @​Viicos in #14175
• Do not evaluate model_config annotations by @​Viicos in #14195
• Avoid slow runtime Protocol check when expanding GroupedMetadata annotations by @​Viicos in #14196
• Use a lightweight @contextmanager implementation internally by @​Viicos in #14199

Fixes

• Fix various issues about GC tracking in pydantic-core by @​Viicos in #13819
• Include null in serialization JSON Schema for unless-none field serializers by @​Kropiunig in #13848
• Fix RecursionError when copying or unpickling models with defer_build by @​Viicos in #14115
• Remove dead default_factory check in unsupported Field() attribute by @​owtaylor in #14129
• Disallow non string extra keys during validation by @​Viicos in #14135
• Fix deeply nested data being reported as a cyclic reference by @​Viicos in #14164

New Contributors

• @​owtaylor made their first contribution in #14129

Changelog

Sourced from pydantic's changelog.

v2.14.0 (2026-10-08)

GitHub release

What's Changed

The highlights of the v2.14 release are available in the blog post. Several minor changes (considered non-breaking changes according to our versioning policy) are also included in this release. Make sure to look into them before upgrading.

This release drops support for Python 3.9 and adds support for Python 3.15.

New Features

• Add support for multiple_of constraint in fraction and timedelta core schemas by @​Viicos in #13873
• Add __namespace__ parameter to create_model() by @​Viicos in #13895

Changes

• Add an ordered-dict core schema by @​Viicos in #13796
• Add a counter core schema by @​Viicos in #13824
• Do not mutate model_config attribute by @​Viicos in #13825
• Reject newlines in NameEmail validation by @​Viicos in #13897

Fixes

• Call enum constructors in both validation modes by @​Viicos in #13792
• Fix documentation examples not raising and remove unused string_sub_type unused error code by @​Viicos in #13821
• Catch OverflowError during ByteSize validation by @​Viicos in #13850
• Require multiple_of constraints to be positive by @​Viicos in #13862
• Always pop field name and model type stacks during schema generation by @​saquibjawedbit in #13859
• Handle TypeError gracefully during docstring extraction by @​Viicos in #13874
• Fix config propagation of stdlib dataclasses and TypedDicts in JSON Schema by @​Viicos in #13891
• Don't apply ser_json_timedelta to all datetime types in serialization inference by @​Viicos in #13892
• Encode JSON Schema defaults with a consistent configuration by @​Viicos in #13893
• Propagate init and kw_only=False from Field() to stdlib dataclass fields by @​Viicos in #13898
• Respect propagated extra config in the JSON Schema of stdlib dataclasses by @​Viicos in #13899
• Handle OS errors during ZoneInfo validation by @​Viicos in #13912
• Handle exceptions during Decimal validation by @​Viicos in #13940
• Rebuild incomplete types during serialization inference by @​Viicos in #13922
• Reject large exponents in Fraction validation by @​Viicos in #13944
• Avoid validating URL prefix multiple times in multi host URLs by @​Viicos in #13945

New Contributors

• @​saquibjawedbit made their first contribution in #13859

... (truncated)

Commits

• ea492e0 Bump pydantic-core to v2.50.4
• 4f4a33f Prepare release v2.14.3
• dca067b Benchmark TypedDict schema generation across builds
• a2d1f6c Skip annotation handler setup when annotations are empty
• 3ae0a40 Construct builtin scalar union schemas directly
• 358d36f Skip general schema dispatch for builtin scalars
• 3cc701a Improve schema generation for fixed type handlers
• 762db7e Remove redundant None check in union schema generation
• c214986 Bump pytest-codspeed to v5.0.4
• 038ee97 Bump typing-inspection to v0.4.5
• Additional commits viewable in compare view

Updates anyio from 4.15.1 to 4.16.0

Release notes

Sourced from anyio's releases.

4.16.0

New features

• Added BlockingPortal.call_async() for asynchronously calling into an event loop with optional abandonment on cancellation (#1342; PR by @​davidbrochart)
• Added SOCK_SEQPACKET support to connect_unix() and create_unix_listener() (#1349; PR by @​theunkn0wn1)

Other changes

• Changed UDP sockets on the asyncio backend to make send() wait until the datagram has been passed to the operating system (#1294; PR by @​graingert)

Bug fixes

• Fixed documentation implying that use_uvloop=True falls back to the standard event loop when uvloop (winloop on Windows) is not installed, and showed how to skip the corresponding pytest backend variant when the dependency is missing (#645; PR by @​GruffElixir)
• Fixed get_current_task() on the asyncio backend raising an opaque TypeError: cannot create weak reference to 'NoneType' object instead of a clear error when called from a callback scheduled via loop.call_soon_threadsafe() (e.g. from within from_thread.run_sync()), where asyncio.current_task() is legitimately None (#773; PR by @​AmirF194)
• Fixed CancelScope on the asyncio backend swallowing a native Task.cancel() that was delivered in the same event loop iteration as the scope's own cancellation (such as a move_on_after() deadline expiring), which left the host task with a pending cancellation request that never raised CancelledError (#1214)
• Fixed UDP socket closing hanging if a datagram send was still in flight (#1237; PR by @​graingert)
• Fixed concurrent aclose_forcefully() calls on asyncio socket streams returning before the underlying socket was closed (#1273; PR by @​graingert)
• Fixed aclose() on sockets not checkpointing, and thus failing to raise a cancellation exception when called inside a cancelled scope (affected UNIX socket streams and UNIX datagram sockets on asyncio, and all sockets on Trio) (#1288; PR by @​graingert)
• Fixed aclose() on asyncio TCP socket listeners not checkpointing, and leaking the listening socket if cancelled while another task was waiting in accept() (#1289; PR by @​graingert)
• Fixed accept() on asyncio UNIX socket listeners hanging forever, and leaving the listening socket registered with the event loop, when the listener was closed by another task (#1289; PR by @​graingert)
• Fixed send() on asyncio TCP and UDP sockets returning normally, despite the data being discarded, when the socket was closed by another task (or, for TCP, the connection was lost) while send() was waiting for the operating system to accept the data (#1289; PR by @​graingert)
• Fixed SocketStream.send() on the asyncio backend handing its data to a paused transport after a previous send() was cancelled (#1299; PR by @​graingert)
• Fixed sleep() treating a negative delay (including -inf) inconsistently across backends (asyncio returned immediately; Trio raised ValueError) by raising ValueError on all backends (#1306; PR by @​BetterAndBetterII)
• Fixed create_tcp_listener() occasionally failing with a message like Could not create 2 listeners with a consistent port when an ephemeral port is requested and IPv6 is enabled and the dual-stack path is not available or a specific local host name was given (#1313)
• Fixed AsyncFile not shielding against cancellation while closing (#1314)
• Fixed TemporaryDirectory.cleanup() reacting to cancellation prematurely when the host task was already cancelled, causing the actual cleanup operation to be skipped (#1316; PR by @​Yasser-Ameur)
• Fixed a NaN deadline being accepted on asyncio while Trio raised ValueError, which silently disabled the timeout (fail_after(math.nan) returned instead of raising TimeoutError); CancelScope now rejects it on both backends (#1317; PR by @​dylanpulver)
• Fixed FileReadStream and FileWriteStream leaving files open when cancelled during context manager exit, including unflushed writes (#1318; PR by @​Kuang-xianxin)
• Fixed Condition.notify() and Condition.notify_all() failing when the underlying lock was acquired directly rather than through the condition (#1319; PR by @​GruffElixir)
• Fixed importing AnyIO with loaders that do not provide __file__, such as PyOxidizer, raising TypeError instead of falling back to eager imports (#1322; PR by @​skulitom)
• Fixed text receive streams silently discarding incomplete characters at end-of-file instead of applying the configured decoding error handler (#1339; PR by @​Aurelucien)
• Fixed Semaphore(fast_acquire=True) losing its fast-acquire behavior when instantiated outside a running event loop (#1348; PR by @​feiiiiii5)
• Fixed BlockingPortalProvider permanently failing with an AttributeError on every subsequent use if the first attempt to start its blocking portal failed (#1350; PR by @​Yasser-Ameur)
• Fixed create_udp_socket() silently ignoring the local_port argument when local_host was omitted, making the socket bind to a random ephemeral port instead of the requested one (#1351; PR by @​januththedev)
• Fixed worker threads on the asyncio backend never returning to the idle pool (and thus never being reused or pruned) when a to_thread.run_sync() call was cancelled after it had been queued for the worker but before the worker thread had picked it up (#1352; PR by @​Zac-HD)
• Fixed pytest plugin running Hypothesis async tests only on the first parametrized backend instead of each backend (#1353; PR by @​DYNOSuprovo)
• Fixed TypeError when subclassing an existing TypedAttributeSet subclass, and this subclass contains type annotations (#1358; PR by @​pasmud)
• Fixed Lock.locked() (and Condition.locked()) raising NoEventLoopError when the lock was created outside a running event loop (#1362; PR by @​00200200)
• Fixed connect_tcp() leaking a connected socket when an enclosing cancel scope was cancelled before the connection attempt task group exited (#1364; PR by @​charan-rathore)
• Fixed create_connected_udp_socket() silently ignoring local_port when local_host was not given: the local address was left unset, so the OS picked an ephemeral port instead of the requested one (#1365; PR by @​feiiiiii5)
• Fixed BlockingPortalProvider not passing the exception raised in its with block on to the start_blocking_portal() context manager it wraps (#1366; PR by @​feiiiiii5)
• Fixed anyio.itertools.islice() not consuming the first start items when stop <= start (#1372; PR by @​Rodrigo-Palma)
• Fixed BufferedByteReceiveStream.receive_exactly() and receive_until() returning buffered data after explicit closure instead of raising ClosedResourceError (#1378; PR by @​kokotatan)
• Fixed a TLS stream sending records the peer could no longer decrypt after a cancelled send() lost an already-encrypted record; the stream now raises BrokenResourceError on further use instead (#1385; PR by @​Kayvan-Zahiri)
• Fixed close() on memory object streams not waking up tasks blocked in send() or receive() on the same stream (#1391)
• Fixed anyio.itertools.product() acquiring and consuming unused input iterables when repeat=0 (#1394; PR by @​sricharanreddycheruku)
• Fixed SpooledTemporaryFile rolling over to disk on writes when max_size is zero (the default) (#1397; PR by @​fhgffy)
• Fixed Trio UDP sockets remaining open when initialization failed or was cancelled (#1400; PR by @​adenzhou1350)
• Fixed SpooledTemporaryFile.rollover() moving the current file position to the end of the file (#1401; PR by @​fhgffy)
• Fixed cancellation during temporary directory creation leaving the directory behind while its context manager is retained (#1403; PR by @​adenzhou1350)

... (truncated)

Commits

• 0ddd02d Released version 4.16.0
• 576892e Fixed certain pending tasks not woken up by the closing of memory object stre...
• 02ff4f8 Added BlockingPortal.call_async() (#1343)
• 1af29a4 Moved documentation code snippets into separate, checked files (#1445)
• f01c041 [pre-commit.ci] pre-commit autoupdate (#1448)
• 95a0143 Test with blockbuster and uvloop on Python 3.15 too
• 4d51154 Modernized the memory object stream tests
• 1e4b448 Fixed the as_connectable() example in the networking docs (#1442)
• cd21b36 Fixed TypedAttributeSet not collecting annotations from superclasses (#1358)
• b7f8c68 [pre-commit.ci] pre-commit autoupdate (#1431)
• Additional commits viewable in compare view

Updates langgraph from 1.2.18 to 1.2.20

Release notes

Sourced from langgraph's releases.

langgraph==1.2.20

Changes since 1.2.19

• release(langgraph): 1.2.20 (#9595)
• feat(langgraph): give each interrupt() in a task its own id (#9589)
• fix(langgraph): point the multiple-interrupts error at the current docs (#9590)
• feat(langgraph): add a strict resume mode that refuses stale interrupt answers (#9574)
• chore(deps-dev): bump types-requests from 2.33.0.20260906 to 2.33.0.20261006 in /libs/langgraph (#9535)
• chore(deps-dev): bump pycryptodome from 3.23.0 to 4.2.0 in /libs/langgraph in the major group (#9534)

langgraph==1.2.19

Changes since 1.2.18

• release(langgraph): 1.2.19 (#9504)
• release(checkpoint-sqlite): 3.1.3 (#9505)
• fix(langgraph): keep trace_policy from rewriting streamed node payloads (#9486)
• fix(langgraph): give messages and tools events the namespace of their graph (#9458)
• chore(deps): bump setuptools from 83.0.0 to 84.1.0 in /libs/langgraph (#9433)
• fix(langgraph): emit node-output messages from a graph streamed inside a node (#9463)
• fix(langgraph): respect subgraphs=False in RemoteGraph.stream under a streaming parent (#9453)
• fix(langgraph): don't report a paused tool as failed on the tools stream (#9406)
• fix(langgraph): return an awaited @​task's value while streaming (#9407)
• feat(langgraph): list ToolNode tool names in graph node metadata (#9449)

Commits

• a4d4187 release(langgraph): 1.2.20 (#9595)
• 572e83c release(sdk-py): 0.4.13 (#9594)
• 6ea1751 feat(langgraph): give each interrupt() in a task its own id (#9589)
• 22ac52e fix(langgraph): point the multiple-interrupts error at the current docs (#9590)
• dbc60dd feat(langgraph): add a strict resume mode that refuses stale interrupt answer...
• b1baa6e feat(sdk-py): add cancel_reason to Run (#9571)
• 25ccdc8 docs(sdk-py): show the run's status in the stream example's end event (#9588)
• ec72ddf feat(sdk-py): add select to threads.get_state and get_history (#9568)
• 5db97b9 release(sdk-py): 0.4.12 (#9569)
• 3c916d7 feat(sdk-py): remove fairness_weight from PrioritySettings (#9441)
• Additional commits viewable in compare view

Updates langgraph-checkpoint-sqlite from 3.1.2 to 3.1.3

Release notes

Sourced from langgraph-checkpoint-sqlite's releases.

langgraph-checkpoint-postgres==3.1.3

Changes since checkpointpostgres==3.1.2

• release(checkpoint-postgres): 3.1.3 (#9287)
• fix(checkpoint-postgres,checkpoint-sqlite): treat an empty checkpoint_id as the latest in delta history (#9262)
• perf(checkpoint-postgres): start the delta walk at the target (#9248)
• fix(checkpoint,checkpoint-postgres,checkpoint-sqlite): validate namespace labels before store dispatch (#9217)
• fix: order delta channel replay by task path (#8544)
• chore(deps): bump the minor-and-patch group in /libs/checkpoint-postgres with 6 updates (#9147)
• chore(deps): bump urllib3 from 2.7.0 to 2.8.0 in /libs/checkpoint-postgres (#9132)
• fix(checkpoint-postgres): derive the delta walk cursor once the target loads (#8556)
• chore(deps): bump the minor-and-patch group in /libs/checkpoint-postgres with 3 updates (#8773)
• fix(checkpoint): widen Store put value type to Mapping[str, Any] (#8617)

langgraph-checkpoint-sqlite==3.1.3

Changes since checkpointsqlite==3.1.2

• release(checkpoint-sqlite): 3.1.3 (#9505)
• release(checkpoint): 4.3.1 (#9447)
• fix(checkpoint): reject NUL bytes in namespace labels (#9383)
• chore(deps): bump certifi from 2026.1.4 to 2026.10.19 in /libs/checkpoint-sqlite (#9368)

Commits

• 5bd231c release(langgraph): 1.2.19 (#9504)
• 3eaf06c release(checkpoint-sqlite): 3.1.3 (#9505)
• 6fab323 release(sdk-py): 0.4.11 (#9503)
• 8d5637b fix(langgraph): keep trace_policy from rewriting streamed node payloads (#9486)
• 1f0cf81 fix(langgraph): give messages and tools events the namespace of their graph (...
• 6f2df05 test(sdk-py): check that a reconnect loop resumes after the newest event (#9483)
• ffc3336 fix(sdk-py): retry runs.wait, join and cancel(wait=True) reconnects with back...
• 5f4b28a fix(sdk-py): warn when a stream reconnects without a Last-Event-ID (#9482)
• 5c96bce chore(deps): bump setuptools from 83.0.0 to 84.1.0 in /libs/langgraph (#9433)
• 2f46bb3 fix(sdk-py): preserve SSE data and cursor state across chunks (#9477)
• Additional commits viewable in compare view

Updates python-multipart from 0.0.32 to 0.0.33

Release notes

Sourced from python-multipart's releases.

Version 0.0.33

🛡️ Safer form parsing

This release lets you cap URL-encoded form fields as they stream in, and fixes several upload and decoding edge cases. It also drops Python 3.10 and adds Python 3.15.

pip install python-multipart==0.0.33

• Limit URL-encoded fields while streaming (#333). The new opt-in MAX_FIELDS and MAX_FIELD_SIZE options for FormParser raise FormParserError before oversized data is buffered. Both default to no limit, and multipart forms are unaffected.
• Nameless uploads no longer crash when spilled to disk (#343). Uploads without a filename used to raise AttributeError when UPLOAD_KEEP_EXTENSIONS or UPLOAD_KEEP_FILENAME was set.
• UPLOAD_DIR accepts str with UPLOAD_KEEP_FILENAME (#335). A str upload directory used to fail on the first write to disk.
• Decoded data is complete before callbacks run (#336, #355). Content-Transfer-Encoding decoders are finalized at the end of each part, and quoted-printable escapes split across writes decode correctly.
• parse_options_header lowercases content types with parameters (#287). Multipart/Form-Data; boundary=abc now returns multipart/form-data, the same as headers without parameters.

⚡ Faster parsing

• Faster opening boundary matching (#328). Complete boundaries are matched in one step.
• Faster parser state lookups (#330). Parser states are module-level enum members, so their repr is now multipart.END instead of <MultipartState.END: 12>.
• Faster querystring callback dispatch (#316).

🐍 Python support

• Python 3.10 is no longer supported (#329). Python 3.11 is now the minimum.
• Python 3.15 is supported (#350).

💜 Thank you

Thanks to @​Edneam, @​sungbin1015, @​carlok, and @​fjvbn2003 for contributing to this release.

Thanks to the individual sponsors who contributed $134.00 to support this work. If python-multipart is useful to you, consider sponsoring me on GitHub.

Full changelog: 0.0.32...0.0.33

Changelog

Sourced from python-multipart's changelog.

0.0.33 (2026-10-31)

• Drop Python 3.10 support #329.
• Add Python 3.15 support #350.
• Add opt-in field-count and field-size limits for URL-encoded forms in FormParser #333.
• Normalize the content type returned by parse_options_header when the header has parameters #287.
• Finalize Content-Transfer-Encoding decoding before invoking field and file callbacks #336.
• Keep only the incomplete escape when quoted-printable data is split across writes #355.
• Handle nameless uploads when UPLOAD_KEEP_FILENAME or UPLOAD_KEEP_EXTENSIONS is set #343.
• Accept a str UPLOAD_DIR when UPLOAD_KEEP_FILENAME is set #335.
• Speed up parser state lookups #330.
• Speed up opening boundary matching #328.
• Speed up querystring callback dispatch #316.

Commits

• 9217f26 Bump version to 0.0.33 (#357)
• d0344c1 Keep only the incomplete escape when quoted-printable data is split (#355)
• 44871df Handle nameless uploads when keeping the filename or extension (#343)
• b21ea59 Add streaming field limits to FormParser (#333)
• 48f9e21 Fix the In-Depth Example in the docs to return bytes (#338)
• 12a2f8f Accept a str UPLOAD_DIR when UPLOAD_KEEP_FILENAME is set (#335)
• 95f6376 Use the shared security policy (#353)
• 8ec84ef Migrate documentation from MkDocs to Zensical (#352)
• d7af81c Rewrite README for newcomers (#351)
• b035d14 Add Python 3.15 classifier (#350)
• Additional commits viewable in compare view

Updates langgraph-sdk from 0.4.10 to 0.4.14

Release notes

Sourced from langgraph-sdk's releases.

langgraph-sdk==0.4.14

Changes since sdk==0.4.13

• release(sdk-py): 0.4.14 (#9610)
• feat(sdk-py): add strict_resume to runs.create, stream and wait (#9599)
• feat(sdk-py): add tools and lifecycle to StreamMode (#9601)

langgraph-sdk==0.4.13

Changes since sdk==0.4.12

• release(langgraph): 1.2.20 (#9595)
• release(sdk-py): 0.4.13 (#9594)
• feat(sdk-py): add cancel_reason to Run (#9571)
• docs(sdk-py): show the run's status in the stream example's end event (#9588)
• feat(sdk-py): add select to threads.get_state and get_history (#9568)

langgraph-sdk==0.4.12

Changes since sdk==0.4.11

• release(sdk-py): 0.4.12 (#9569)
• feat(sdk-py): remove fairness_weight from PrioritySettings (#9441)
• fix(sdk-py): rejoin a run stream that closes before the run ends (#9554)

langgraph-sdk==0.4.11

Changes since sdk==0.4.10

• release(langgraph): 1.2.19 (#9504)
• release(sdk-py): 0.4.11 (#9503)
• test(sdk-py): check that a reconnect loop resumes after the newest event (#9483)
• fix(sdk-py): retry runs.wait, join and cancel(wait=True) reconnects with backoff (#9481)
• fix(sdk-py): warn when a stream reconnects without a Last-Event-ID (#9482)
• fix(sdk-py): preserve SSE data and cursor state across chunks (#9477)
• fix(sdk-py): retry failed stream reconnects with backoff (#9462)
• fix(sdk-py): match Auth.on overload to optional resources (#9450)
• fix(sdk-py): reset the reconnect cursor on every empty id (#9440)

Commits

• a382339 chore(cli): pass checkpointer config to CLI (#7003)
• 79a7564 fix: bump minimatch to resolve CVE-2026-26996, CVE-2026-27903, CVE-2026-27904...
• cdda595 release(langgraph) 1.0.10 (#6967)
• 7895051 release(checkpoint): 0.4.1 (#6966)
• 901ab6b chore: add serde events (#6954)
• adb953d chore: update defaults (#6953)
• 5ddfce1 chore: support workflow dispatch on ci (#6952)
• 1b37ece release: rc2 (#6949)
• e2e90da chore: improve subclass handling (#6948)
• d542d8a chore(deps-dev): bump the all-dependencies group across 1 directory with 3 up...
• Additional commits viewable in compare view

Updates langsmith from 0.14.16 to 0.14.17

Release notes

Sourced from langsmith's releases.

v0.14.17

0.14.17 (2026-11-02)

Features

• cli: add langsmith evaluators create-decision-model (534a040)
• sandboxes: AWS session tags on proxy role rules (bc15831)
• sdk: read profile api_key_env in Python, JS and Java SDKs (ce4946f)

Bug Fixes

• evaluators: show the effective spend limit in the evaluator tables (b00e161)
• expose v1 session creation and updates in Python and TypeScript SDKs (LSO-4121, LSO-4130) (de2293b)
• restore disposable Engine sandboxes with released SDK (6529456)
• sdks: unify shared-profile OAuth refresh locking (d9c5731)

Chores

• deps-dev: bump types-requests from 2.33.0.20260906 to 2.33.0.20261006 in /sdks/python (6c9be7b)

Documentation

• sandboxes: document match_paths on proxy rules (b764565)

Build System

• refresh CA bundles for dev ops (b202202)

Changelog

Sourced from langsmith's changelog.

0.14.17 (2026-11-02)

Features

• cli: add langsmith evaluators create-decision-model (534a040)
• sandboxes: AWS session tags on proxy role rules (bc15831)
• sdk: read profile api_key_env in Python, JS and Java SDKs (ce4946f)

Bug Fixes

• evaluators: show the effective spend limit in the evaluator tables (b00e161)
• expose v1 session creation and updates in Python and TypeScript SDKs (LSO-4121, LSO-4130) (de2293b)
• restore disposable Engine sandboxes with released SDK (6529456)
• sdks: unify shared-profile OAuth refresh locking (d9c5731)

Chores

• deps-dev: bump types-requests from 2.33.0.20260906 to 2.33.0.20261006 in /sdks/python (6c9be7b)

Documentation

• sandboxes: document match_paths on proxy rules (b764565)

Build System

• refresh CA bundles for dev ops (b202202)

Commits

• 15dd2a7 Merge pull request #85 from langchain-ai/release-please--branches--main
• 00ee905 release: 0.14.17
• 6c9be7b chore(deps-dev): bump types-requests from 2.33.0.20260906 to 2.33.0.20261006 ...
• d9c5731 fix(sdks): unify shared-profile OAuth refresh locking
• de2293b fix: expose v1 session creation and updates in Python and TypeScript SDKs (LS...
• b00e161 fix(evaluators): show the effective spend limit in the evaluator tables
• bc15831 feat(sandboxes): AWS session tags on proxy role rules
• b202202 build: refresh CA bundles for dev ops
• 5b1280f test: gate sparse example tests on supporting server versions
• b764565 docs(sandboxes): document match_paths on proxy rules
• Additional commits viewable in compare view

Updates anthropic from 2.3.0 to 2.6.0

Release notes

Sourced from anthropic's releases.

v2.6.0

Features

• api: add error code for ramp limit errors
• api: add error codes for External Key validation failures
• api: add support for signing organization members out everywhere

Bug Fixes

• bedrock,vertex: raise error-code and status exception classes on platform clients
• bedrock: keep a custom http_client and aws_profile on copies made with copy and with_options

Chores

• client: stop recording sampling parameters on OpenTelemetry spans
• Description has been truncated

[github-actions]

Auto-approved: version-update:semver-minor bump of pydantic, anyio, langgraph, langgraph-checkpoint-sqlite, python-multipart, langgraph-sdk, langsmith, anthropic, openai, jsonpath-ng.

[github-actions]

✅ Approved

🤖 Claude Sonnet 4.6 (claude-sonnet-4-6) via claude-bridge · mode: council (specialists + arbiter) · run

Routine patch/minor dependency bump across 10 Python packages (pydantic, anyio, langgraph family, langsmith, anthropic, openai, jsonpath-ng). All changes are manifest/lockfile-only with no call-site modifications in the diff. No specialist findings were raised.

No blocking findings — clean diff.

---

Gate wrong or a false positive? Do not edit this workflow to pass — open an issue on lagowski/pr-review-gate.