Bump the python-minor-patch group with 6 updates by dependabot[bot] · Pull Request #584 · OpenFn/apollo

dependabot · 2026-07-10T14:36:39Z

Bumps the python-minor-patch group with 6 updates:

Package	From	To
openai	`2.44.0`	`2.45.0`
langchain-core	`1.4.8`	`1.4.9`
langchain-openai	`1.3.3`	`1.3.4`
nltk	`3.9.4`	`3.10.0`
langfuse	`4.13.0`	`4.14.0`
ruff	`0.15.20`	`0.15.21`

Updates openai from 2.44.0 to 2.45.0

Release notes

Sourced from openai's releases.

v2.45.0

2.45.0 (2026-07-09)

Full Changelog: v2.44.0...v2.45.0

Features

api: gpt-5.6-sol updates (039d1fe)

Bug Fixes

api: restore beta resource accessors (2dfc130)

Chores

retrigger release automation (7b61351)

Changelog

Sourced from openai's changelog.

2.45.0 (2026-07-09)

Full Changelog: v2.44.0...v2.45.0

Features

api: gpt-5.6-sol updates (039d1fe)

Bug Fixes

api: restore beta resource accessors (2dfc130)

Chores

retrigger release automation (7b61351)

Commits

f16fbbd release: 2.45.0 (#3478)
See full diff in compare view

Updates langchain-core from 1.4.8 to 1.4.9

Release notes

Sourced from langchain-core's releases.

langchain-core==1.4.9

Changes since langchain-core==1.4.8

release(core): 1.4.9 (#38728) fix(core): improve langsmith loader error messages (#35648) fix(core): output parser bugs in xml.py and pydantic.py (#35641) style(core): fix some ruff preview rules (#38656) fix(core): avoid dict shadowing in language models (#38480) fix(core): _parse_google_docstring mishandling continuation lines with colons (#35680) fix(core): add messages to bare raise ValueError calls (#38158) fix(core): use asyncio.get_running_loop() in async contexts (#38157) chore: bump langsmith from 0.8.0 to 0.8.18 in /libs/core (#38319) chore: bump jupyterlab from 4.5.7 to 4.5.9 in /libs/core (#38326) chore: bump vcrpy from 8.1.1 to 8.2.1 in /libs/core (#38327)

Commits

1c3a418 release(core): 1.4.9 (#38728)
1619f3d chore(standard-tests): fix some typings detected by ty (#38707)
a6f0369 chore(qdrant): bump fastembed to latest (#38726)
fca0a97 fix(langchain): propagate interrupts through ToolRetryMiddleware (#38722)
874bada chore(model-profiles): refresh model profile data (#38712)
6e51a7e chore(model-profiles): refresh model profile data (#38699)
2d8100c fix(langchain-classic): fix Chain.save() regression from dict-to-`model_dum...
b08c391 test(openai): skip Codex VCR tests before cassette setup (#38690)
83386b5 chore(model-profiles): refresh model profile data (#38689)
701cc0e test(deps): Include Python 3.14 in integration test matrix (#34993)
Additional commits viewable in compare view

Updates langchain-openai from 1.3.3 to 1.3.4

Release notes

Sourced from langchain-openai's releases.

langchain-openai==1.3.4

Changes since langchain-openai==1.3.3

release(openai): 1.3.4 (#38731) fix(openai): suppress Pydantic serializer warning on structured output parsed field (#37727) test(openai): skip Codex VCR tests before cassette setup (#38690) chore: bump the minor-and-patch group across 3 directories with 11 updates (#38587) chore: bump langgraph-checkpoint from 4.1.0 to 4.1.1 in /libs/partners/openai (#38476) fix(core): use asyncio.get_running_loop() in async contexts (#38157) test(openai): clarify async API key sync failure trace (#38379)

Commits

bc15400 release(openai): 1.3.4 (#38731)
123d832 release(langchain): 1.3.12 (#38730)
fa01145 fix(openai): suppress Pydantic serializer warning on structured output parsed...
af3de98 docs(infra): clarify uv.lock step in release process guide (#38729)
1c3a418 release(core): 1.4.9 (#38728)
1619f3d chore(standard-tests): fix some typings detected by ty (#38707)
a6f0369 chore(qdrant): bump fastembed to latest (#38726)
fca0a97 fix(langchain): propagate interrupts through ToolRetryMiddleware (#38722)
874bada chore(model-profiles): refresh model profile data (#38712)
6e51a7e chore(model-profiles): refresh model profile data (#38699)
Additional commits viewable in compare view

Updates nltk from 3.9.4 to 3.10.0

Release notes

Sourced from nltk's releases.

v3.10.0-rc1

What's Changed

CHILDES corpus reader: lazy loading (fixes #1340) by @nschneid in nltk/nltk#1341

Stanseg by @casperlehmann in nltk/nltk#1350

Add optional CCG semantics computation by @tanin47 in nltk/nltk#1321

address of free software foundation updated by @Lightyagami1 in nltk/nltk#1347

Added a verification for empty tokens by @gnardari in nltk/nltk#1353

use data.load for vader lexicon by @afgiel in nltk/nltk#1303

Ensure that proper exceptions are caught correctly by @pombredanne in nltk/nltk#1343

Reset CCGVar everytime we invoke lexicon.fromstring() and skip the unicode test because it fails on python2.7 by @tanin47 in nltk/nltk#1354

Add tanin as an author :) by @tanin47 in nltk/nltk#1355

framenet.py: remove unnecessary str() call that causes problems for names with Unicode characters by @nschneid in nltk/nltk#1360

remove u because it doesn't work in Python 3.0 to 3.2 by @tanin47 in nltk/nltk#1362

moved the import for dispersion_plot out of the else block by @dennisobrien in nltk/nltk#1364

Raise warning for infinite recursion by @alvations in nltk/nltk#1365

Patch None TypeError in align_blocks() by @alvations in nltk/nltk#1366

Safer try-except for catching infinite recursion by @alvations in nltk/nltk#1368

Collections refactor by @nschneid in nltk/nltk#1382

Handles fringe cases in BLEU by @alvations in nltk/nltk#1383

Allow specifying substitution cost in edit distance by @dnc1994 in nltk/nltk#1386

Pl196x fixes by @pkasprzyk in nltk/nltk#1359

Docs/ngrams by @ColCarroll in nltk/nltk#1403

Fix conll.py by @germanferrero in nltk/nltk#1402

Aline by @geoffbacon in nltk/nltk#1407

Handle empty files in a corpus by @alexisdimi in nltk/nltk#1411

fixed bug: StackDecoder would throw exception if it's unable to finish… by @hikui in nltk/nltk#1405

add hikui to authors by @hikui in nltk/nltk#1412

removes download-cache pip flag from tox config by @fievelk in nltk/nltk#1415

Added three tokenizers, one detokenizer and two tokenizer-related word/char list corpora by @alvations in nltk/nltk#1282

Much faster Vader sentiment tagging by @georgeberry in nltk/nltk#1409

Fixes doctest in is_cjk() and REPP tokenizer wrapper by @alvations in nltk/nltk#1420

Fixed doctest for UnicharsCorpusReader and NonbreakingPrefixesCorpusReader by @alvations in nltk/nltk#1422

Updated senna version in docstring by @alvations in nltk/nltk#1431

Removes Python 2.6 and Python 3.1-3.3 code, Improves Python 3.5 syntax by @adamn in nltk/nltk#1429

Cleanup by @dimazest in nltk/nltk#1432

Fix zero division & log(0) in PunktTrainer._col_log_likelihood by @mrecachinas in nltk/nltk#1247

Update stanford_segmenter.py by @janissl in nltk/nltk#1444

explained data format for constructor by @drevicko in nltk/nltk#1450

Use a more efficient idiom for flattening nested lists by @rmalouf in nltk/nltk#1447

improved documentation of load_array() by @drevicko in nltk/nltk#1452

changed "list or iterator" to "sequence" by @drevicko in nltk/nltk#1453

Deal gracefully with degenerate cases. by @drevicko in nltk/nltk#1454

deal with (hopefully) all degenerate cases by @drevicko in nltk/nltk#1455

Enable unordered comparison for gaac clustering by @alvations in nltk/nltk#1456

Rewrite porter.py by @ExplodingCabbage in nltk/nltk#1261

Update naivebayes.py by @andyreagan in nltk/nltk#1461

Fixes bug where download status not returned. by @nsfabina in nltk/nltk#1468

Use lcon and rcon variables in conllned() when trace is False - Issue #1474 by @timleslie in nltk/nltk#1475

Use shutil.copyfileobj for unzipping by @ikorolev93 in nltk/nltk#1478

Fixing Chen&Cherry method 6 smoothing in BLEU score by @alvations in nltk/nltk#1477

... (truncated)

Changelog

Sourced from nltk's changelog.

Version 3.10.0 2026-06-11

Enforce the stricter nltk.pathsec security policy by default

Document the new security model and migration guidance

Harden resource loading against path traversal and SSRF/DNS-rebinding

Harden downloader path handling and block XML entity expansion

Close remaining corpus-reader security edge cases

Replace unsafe exec() usage in the utility CLI

Warn on unpickling user-provided pickles

Add HuggingFace datasets integration (nltk.huggingface)

Align TnT with Brants (2000) specifications

Fix PorterStemmer irregular-form lowercasing in NLTK mode

Fix TransitionParser sparse index dtype for scikit-learn 1.9

Fix TextCat tie handling

Fix WordNet object comparisons for incompatible types

Cache WordNet max depth lazily for lch_similarity()

Fix CCG variable direction, substitution, and type-raising bugs

Fix Jaro similarity for single-character and empty-string cases

Improve CI and release-maintenance workflows

Thanks to the following contributors to 3.10.0: 13rac1, alvations, bowiechen, devesh-2002, ekaf, elias-ba, haosenwang1018, HyperPS, ihitamandal, jancallewaert, jhnwnstd, JuanIMartinezB, Lemm1, LinZiyuu, Mr-Neutr0n, PastelStorm, scruge1, Syzygy2048, ylwango613, yzhaoinuw

Version 3.9.4 2026-03-24

Support Python 3.14

Fix bug in Levenshtein distance when substitution_cost > 2

Fix bug in Treebank detokeniser re quote ordering

Fix bug in Jaro similarity for empty strings

Several security enhancements

Fix GHSA-rf74-v2fm-23pw: unbounded recursion in JSONTaggedDecoder

Implement TextTiling vocabulary introduction method (Hearst 1997)

Fix ALINE feature matrix errors and add comprehensive tests

Support multiple VerbNet versions, fix longid/shortid regex for VerbNet ids

Let downloader fallback to md5 when sha256 is unavailable

Several other minor bugfixes and code cleanups

Thanks to the following contributors to 3.9.4: Min-Yen Kan, Eric Kafe, Emily Voss, bowiechen, Hrudhai01, jancallewaert, Mr-Neutr0n, pollak.peter89, ylwango613,

Version 3.9.3 2026-02-21

Fix CVE-2025-14009: secure ZIP extraction in nltk.downloader (#3468)

Block path traversal/arbitrary reads in nltk.data for protocol-less refs (#3467)

Block path traversal/abs paths in corpus readers and FS pointers (#3479, #3480)

Validate external StanfordSegmenter JARs using SHA256 (#3477)

... (truncated)

Commits

bd49f90 allow escaped brackets in Tree.fromstring (#3694)
27b8ad6 don't crash chomsky_normal_form on terminals with siblings (#3693)
52227d2 Use os.name for Windows path handling (#3605)
06c0e2c Avoid RIBES zero division on empty inputs (#3604)
a167389 Treat missing unzip output as stale (#3607)
c94c967 Fix EOF empty document bug in IEER corpus reader (#3648)
94a259c Enforce restrictive primitive type checking in pathsec wrappers (#3692)
5ac475d fix(security): isolate Stanford Java options and clean temp files (#3683)
986f26e ci(deps): bump the github-actions group with 3 updates (#3691)
f26b375 fix(security): prevent pickle RCE in TransitionParser model loading (CWE-502)...
Additional commits viewable in compare view

Updates langfuse from 4.13.0 to 4.14.0

Commits

See full diff in compare view

Updates ruff from 0.15.20 to 0.15.21

Release notes

Sourced from ruff's releases.

0.15.21

Release Notes

Released on 2026-07-09.

Preview features

Add --add-ignore for adding ruff:ignore comments (#26346)

[flake8-comprehensions] Drop C409 tuple comprehension preview behavior (#25707)

Avoid whitespace normalization when formatting comments (#26455)

[pyupgrade] Lint and fix use of deprecated abc decorators (UP051) (#26417)

Bug fixes

Refine non-empty f-string detection (#26526)

Detect syntax errors in individual notebook cells (#26419)

[flake8-implicit-str-concat] Fix ISC003 autofix incorrectly stripping + from comments (#26554)

Rule changes

[flake8-executable] Mark EXE004 fix as unsafe (#26033)

[flake8-pyi] Mark PYI061 fixes as unsafe in Python files (#26533)

[pydocstyle] Skip overload-with-docstring in stub files (D418) (#26318)

Performance

Avoid per-token source index visitor calls (#26506)

Cache parenthesized expression boundaries in the formatter (#26344)

Improve performance of rendering edits in preview mode (#26565)

Inline fits_element in formatter (#26429)

Inline formatter printing hot paths (#26504)

Lazily create builtin bindings (#26510)

Skip empty trivia scans in the source indexer (#26507)

Use ICF for macOS release builds (#25780)

Formatter

Add --extend-exclude to ruff format (#26372)

Documentation

Add "How does Ruff's import sorting compare to isort?" link to README (#26530)

Fix Mozilla Firefox repository link in README (#26537)

[flake8-bandit] Fix misleading docstring for mako-templates (S702) (#26432)

[ruff] Fix non-triggering example for if-key-in-dict-del (RUF051) (#26433)

Contributors

@EkriirkE

@tingerrr

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.21

Released on 2026-07-09.

Preview features

Add --add-ignore for adding ruff:ignore comments (#26346)

[flake8-comprehensions] Drop C409 tuple comprehension preview behavior (#25707)

Avoid whitespace normalization when formatting comments (#26455)

[pyupgrade] Lint and fix use of deprecated abc decorators (UP051) (#26417)

Bug fixes

Refine non-empty f-string detection (#26526)

Detect syntax errors in individual notebook cells (#26419)

[flake8-implicit-str-concat] Fix ISC003 autofix incorrectly stripping + from comments (#26554)

Rule changes

[flake8-executable] Mark EXE004 fix as unsafe (#26033)

[flake8-pyi] Mark PYI061 fixes as unsafe in Python files (#26533)

[pydocstyle] Skip overload-with-docstring in stub files (D418) (#26318)

Performance

Avoid per-token source index visitor calls (#26506)

Cache parenthesized expression boundaries in the formatter (#26344)

Improve performance of rendering edits in preview mode (#26565)

Inline fits_element in formatter (#26429)

Inline formatter printing hot paths (#26504)

Lazily create builtin bindings (#26510)

Skip empty trivia scans in the source indexer (#26507)

Use ICF for macOS release builds (#25780)

Formatter

Add --extend-exclude to ruff format (#26372)

Documentation

Add "How does Ruff's import sorting compare to isort?" link to README (#26530)

Fix Mozilla Firefox repository link in README (#26537)

[flake8-bandit] Fix misleading docstring for mako-templates (S702) (#26432)

[ruff] Fix non-triggering example for if-key-in-dict-del (RUF051) (#26433)

Contributors

@EkriirkE

@tingerrr

@s-rigaud

... (truncated)

Commits

3e1f636 Bump 0.15.21 (#26676)
4059807 [ty] Infer metaclass-declared attributes on class instances (#26512)
013e5d0 [ty] Use a dedicated project name type (#26665)
7ad39ad [ty] Avoid allocating decorated parameter names (#26666)
c36f662 Improve performance of rendering edits in preview mode (#26565)
ad26408 [ty] Gate membership narrowing on __contains__ semantics (#25964)
4594ca7 [ty] Add variant discriminators for CodeGeneratorKind (#26659)
1af03da [ty] Pydantic: Fix float conversion in unions (#26655)
a004a36 [ty] Handle callable classes in solver (#26090)
d8ef3b0 [ty] Parse all supported Google docstring sections. (#26653)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python-minor-patch group with 6 updates: | Package | From | To | | --- | --- | --- | | [openai](https://github.com/openai/openai-python) | `2.44.0` | `2.45.0` | | [langchain-core](https://github.com/langchain-ai/langchain) | `1.4.8` | `1.4.9` | | [langchain-openai](https://github.com/langchain-ai/langchain) | `1.3.3` | `1.3.4` | | [nltk](https://github.com/nltk/nltk) | `3.9.4` | `3.10.0` | | [langfuse](https://github.com/langfuse/langfuse) | `4.13.0` | `4.14.0` | | [ruff](https://github.com/astral-sh/ruff) | `0.15.20` | `0.15.21` | Updates `openai` from 2.44.0 to 2.45.0 - [Release notes](https://github.com/openai/openai-python/releases) - [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md) - [Commits](openai/openai-python@v2.44.0...v2.45.0) Updates `langchain-core` from 1.4.8 to 1.4.9 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==1.4.8...langchain-core==1.4.9) Updates `langchain-openai` from 1.3.3 to 1.3.4 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-openai==1.3.3...langchain-openai==1.3.4) Updates `nltk` from 3.9.4 to 3.10.0 - [Release notes](https://github.com/nltk/nltk/releases) - [Changelog](https://github.com/nltk/nltk/blob/develop/ChangeLog) - [Commits](nltk/nltk@3.9.4...v3.10.0) Updates `langfuse` from 4.13.0 to 4.14.0 - [Release notes](https://github.com/langfuse/langfuse/releases) - [Commits](https://github.com/langfuse/langfuse/commits) Updates `ruff` from 0.15.20 to 0.15.21 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.15.20...0.15.21) --- updated-dependencies: - dependency-name: openai dependency-version: 2.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor-patch - dependency-name: langchain-core dependency-version: 1.4.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-minor-patch - dependency-name: langchain-openai dependency-version: 1.3.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-minor-patch - dependency-name: nltk dependency-version: 3.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor-patch - dependency-name: langfuse dependency-version: 4.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor-patch - dependency-name: ruff dependency-version: 0.15.21 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file python An issue related to python/ML services labels Jul 10, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the python-minor-patch group with 6 updates#584

Bump the python-minor-patch group with 6 updates#584
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python-minor-patch-00468b976c

dependabot Bot commented on behalf of github Jul 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 10, 2026

v2.45.0

2.45.0 (2026-07-09)

Features

Bug Fixes

Chores

2.45.0 (2026-07-09)

Features

Bug Fixes

Chores

langchain-core==1.4.9

langchain-openai==1.3.4

v3.10.0-rc1

What's Changed

0.15.21

Release Notes

Preview features

Bug fixes

Rule changes

Performance

Formatter

Documentation

Contributors

0.15.21

Preview features

Bug fixes

Rule changes

Performance

Formatter

Documentation

Contributors

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants