Skip to content

chore(deps): bump the minor-and-patch group across 1 directory with 2 updates - #242

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/v4/minor-and-patch-c910e0c484
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/v4/minor-and-patch-c910e0c484

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 26, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 2 updates in the /v4 directory: matplotlib and langchain.

Updates matplotlib from 3.11.1 to 3.11.2

Release notes

Sourced from matplotlib's releases.

REL: v3.11.2

This is the second bugfix release of the 3.11.x series.

This release contains several bug-fixes and adjustments:

  • Speed up RGBA-stage image resampling
  • Fix hexbin clipping in PDF output
  • Fix \text with internal braces
  • Fix some crashes and make some checks more robust to unlikely cases
  • Fix frame skew when saving GIF animations with PillowWriter
  • Fix HiDPI handling in Qt toolbar and WebAgg embeddings
  • Fix ResizeEvent handling for TextBox
  • Fix bug with PGF hatch linewidth and color
  • Fix a bug with drawing an empty Collection
  • Fix incorrect glyphs in Cairo backends
  • Improve build system to prevent conflicts between wheels and system libraries
Commits
  • d3ca917 REL: v3.11.2
  • b76fea9 DOC: Set current version to 3.11.2
  • 39c7f06 DOC: Prepare GitHub stats for 3.11.2
  • 5dd13e3 Merge branch 'v3.11.1-doc' into release-3.11.2
  • aa484be Merge branch 'v3.11.0-doc' into v3.11.1-doc
  • 0e10f83 Merge pull request #32330 from meeseeksmachine/auto-backport-of-pr-32324-on-v...
  • ebe947b Backport PR #32324: Don't force any diagnostics to be errors in bundled Harfbuzz
  • 8f4b7c5 Merge pull request #32322 from meeseeksmachine/auto-backport-of-pr-32321-on-v...
  • 93278ad Backport PR #32321: DOC: correct note about PyOS_InputHook
  • b0aee78 Merge pull request #32319 from meeseeksmachine/auto-backport-of-pr-32305-on-v...
  • Additional commits viewable in compare view

Updates langchain from 1.4.0 to 1.4.2

Release notes

Sourced from langchain's releases.

langchain-openai==1.4.2

Changes since langchain-openai==1.4.1

release(openai): 1.4.2 (#39322) fix(openai): handle ContextWindowExceededError (#39300) chore: bump the minor-and-patch group across 3 directories with 7 updates (#39187) fix(openai): filter langchain-generated content block IDs (#39209) fix(openai): preserve Responses text options (#39204) fix(openai): redact MCP authorization (#39155) chore(model-profiles): refresh model profile data (#39050)

langchain==1.4.2

Changes since langchain==1.4.1

release(langchain): 1.4.2 (#40621) fix(langchain): preserve model-generated tool calls in HITL tool call edits and add notice to ToolMessage (#40463)

langchain-openai==1.4.1

Changes since langchain-openai==1.4.0

release(openai): 1.4.1 (#39045) feat(anthropic,fireworks,openai): support langsmith gateway through env var (#38742) fix(openai): correct gpt-5.3-chat-latest profile (#39009)

langchain-perplexity==1.4.1

Changes since langchain-perplexity==1.4.0

release(perplexity): 1.4.1 (#39826) fix(perplexity): include type="message" on Responses input items (#39774) fix(perplexity): preserve caller extra_body (#39203) chore: bump pillow from 12.2.0 to 12.3.0 in /libs/partners/perplexity (#38991) chore(deps): refresh lockfiles (#38746) fix(perplexity): use supported Responses API model (#38337) chore: bump vcrpy from 8.1.1 to 8.2.1 in /libs/partners/perplexity (#38290) chore: bump langsmith from 0.8.5 to 0.8.18 in /libs/partners/perplexity (#38289) docs: refresh README installation and resources (#38119) release(core): 1.4.7 (#38111) fix(core,partners): rename package version trace metadata (#38110) style(core,langchain,langchain-classic,partners): replace double backticks in docstrings (#38095) release(core): 1.4.6 (#38061) feat(core,partners): add package version tracking to tracing metadata (#35295) chore(infra): bump mypy to 2.1 and unify type-check config across the monorepo (#36470) feat(standard-tests): validate tool call chunks during streaming (#34707) chore(partners): bump locks (#38052)

langchain==1.4.1

Changes since langchain==1.4.0

release(langchain): 1.4.1 (#40498) fix(langchain): preserve open MCP object arguments (#40414)

... (truncated)

Commits
  • a18de59 release(langchain): 1.4.2 (#40621)
  • 5bf6a15 fix(langchain): preserve model-generated tool calls in HITL tool call edits a...
  • a893bbd chore(model-profiles): refresh model profile data (#40600)
  • fd4f161 chore(deps): bump soupsieve from 2.8.4 to 2.9 in /libs/text-splitters (#40579)
  • 3b81e02 chore(deps): bump urllib3 from 2.7.0 to 2.8.0 in /libs/partners/chroma (#40582)
  • fa369c9 chore(deps): bump langsmith from 0.12.1 to 0.12.6 in /libs/partners/chroma (#...
  • eb544d3 chore(deps): bump urllib3 from 2.7.0 to 2.8.0 in /libs/partners/fireworks (#4...
  • 5e8888f chore(deps): bump filelock from 3.32.5 to 4.0.0 in /libs/partners/chroma (#40...
  • a62361a chore(deps): bump langsmith from 0.12.1 to 0.12.6 in /libs/partners/fireworks...
  • e2d39c4 chore(deps): bump pygments from 2.20.0 to 2.21.0 in /libs/partners/fireworks ...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… updates

Bumps the minor-and-patch group with 2 updates in the /v4 directory: [matplotlib](https://github.com/matplotlib/matplotlib) and [langchain](https://github.com/langchain-ai/langchain).


Updates `matplotlib` from 3.11.1 to 3.11.2
- [Release notes](https://github.com/matplotlib/matplotlib/releases)
- [Commits](matplotlib/matplotlib@v3.11.1...v3.11.2)

Updates `langchain` from 1.4.0 to 1.4.2
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain==1.4.0...langchain==1.4.2)

---
updated-dependencies:
- dependency-name: matplotlib
  dependency-version: 3.11.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: langchain
  dependency-version: 1.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 26, 2026
@dependabot
dependabot Bot requested a review from MSKazemi as a code owner September 26, 2026 06:58
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 26, 2026
@github-actions

Copy link
Copy Markdown

🎉 Thank you for your first pull request to KubeIntellect.

Please read this one thing — it will look like something is broken, and it isn't:

On a fork PR from a first-time contributor, GitHub runs no CI at all until a
maintainer clicks "Approve and run workflows". Your PR will sit with no checks
and a blocked merge box. That is expected and it is not your fault. You don't
need to do anything — a maintainer will approve the run.

While you wait, the things most likely to come up in review:

  • Did you run the gates? make setup from the repo root runs six of the nine
    checks main requires (ruff, mypy, both test suites, file modes, syntax
    warnings) and needs no cluster and no API key. The remaining three — the
    install smoke test and both suites on Python 3.13 — run only in CI, so a
    green local run does not guarantee a green PR.
  • Does your change include a test that fails before it and passes after?
  • If your change touches a command that emits a diagnosis, report, or summary:
    please run it against a deliberately absent resource (a made-up id, no
    cluster) and confirm it refuses rather than returning a plausible-looking result.
    This is the one failure mode this project cannot ship, and CI cannot catch it.
  • Substantial AI assistance is welcome — please just
    disclose it
    in the description so reviewers know where to look.

Contributors are credited in CHANGELOG.md and in the release notes.

@github-actions

Copy link
Copy Markdown

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
pip/langchain >= 1.4.2 UnknownUnknown
pip/langchain 1.4.2 UnknownUnknown
pip/langchain-core 1.6.5 UnknownUnknown
pip/langchain-openai 1.6.4 UnknownUnknown
pip/langfuse 4.15.4 UnknownUnknown
pip/langgraph 1.2.12 UnknownUnknown
pip/langsmith 0.14.0 UnknownUnknown
pip/matplotlib 3.11.2 UnknownUnknown

Scanned Files

  • v4/packages/kubeintellect-server/pyproject.toml
  • v4/uv.lock

@github-actions
github-actions Bot enabled auto-merge (squash) September 26, 2026 06:58
@github-actions github-actions Bot added area/server kubeintellect-server area/packaging Snap, PyPI, Homebrew, container images labels Sep 26, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/packaging Snap, PyPI, Homebrew, container images area/server kubeintellect-server dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants