Skip to content

chore(deps): bump langgraph-sdk from 0.3.12 to 0.4.4 - #1983

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/langgraph-sdk-0.4.4
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/langgraph-sdk-0.4.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 13, 2026 •

Copy link
Copy Markdown
Contributor

Bumps langgraph-sdk from 0.3.12 to 0.4.4.

Release notes

Sourced from langgraph-sdk's releases.

langgraph-sdk==0.4.4

Changes since sdk==0.4.3

  • release(sdk-py): 0.4.4 (#8738)
  • Merge commit from fork
  • feat: route LangSmith traces from thread streams (#8723)

langgraph-sdk==0.4.3

Changes since sdk==0.4.2

  • release(sdk-py): 0.4.3 (#8657)
  • feat(sdk-py): add decrypt replacement result (#8598)
  • release(langgraph): 1.2.11 (#8595)
  • chore(deps): bump the minor-and-patch group across 1 directory with 5 updates (#8532)
  • release(checkpoint): 4.2.0 (#8563)
  • chore: enforce PLC0415 in tests for the remaining packages (#8547)
  • release(langgraph): 1.2.10 (#8462)
  • chore(deps): bump websockets from 15.0.1 to 16.0 in /libs/sdk-py in the major group (#8253)
  • fix(sdk-py): support clearing cron end_time via update(end_time=None) (#8334)
  • release(langgraph): 1.2.9 (#8316)
  • release(langgraph): 1.2.8 (#8292)
  • chore(deps): bump websockets from 15.0.1 to 16.0 in /libs/langgraph in the major group (#8256)
  • chore(deps): bump the minor-and-patch group in /libs/sdk-py with 9 updates (#8252)
  • release(langgraph): 1.2.7 (#8223)
  • chore(deps-dev): bump starlette from 1.0.1 to 1.3.1 in /libs/sdk-py (#8104)
  • chore(deps): bump langsmith from 0.8.0 to 0.8.18 in /libs/sdk-py (#8174)
  • release(langgraph): 1.2.6 (#8139)
  • docs: standardize package README.md structure (#8064)
  • release(langgraph): 1.2.5 (#8062)
  • fix(langgraph): merge lc_versions config metadata (#8052)
  • chore(deps-dev): bump starlette from 1.0.0 to 1.0.1 in /libs/sdk-py (#8006)
  • chore: migrate Python type checking to ty (#8002)
  • release(langgraph): 1.2.4 (#7991)
  • test(sdk-py): add factory-graph integration test exercising the server factory path (#7978)
  • release(langgraph): 1.2.3 (#7945)

langgraph-sdk==0.4.2

Changes since sdk==0.4.1

  • release(sdk-py): 0.4.2 (#7955)
  • fix(sdk-py): percent-encode thread_id in v3 stream transport default paths (#7954)

langgraph-sdk==0.4.1

Changes since sdk==0.4.0

  • release(sdk-py): 0.4.1 (#7944)
  • feat(sdk-py): extract stream decoders and add interleave_projections (#7935)
  • feat(langgraph): add v3 streaming support to RemoteGraph (#7927)
  • fix(sdk-py): make tools_agent fake model stateless (#7930)

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Oct 13, 2026

@claude claude Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM. This is a lockfile-only bump of dev-group dependencies, and the resolution is consistent.

What was reviewed:

  • The bumped LangChain/LangGraph packages (langchain 1.4.3, langgraph 1.2.13, langchain-core 1.6.6) still fall within the dev-group ranges in pyproject.toml (langchain>=1,<2, langgraph>=1,<2).
  • The two new transitive packages, langchain-protocol and websockets, are required by the new langgraph-sdk and langchain-core releases. Every new artifact comes from files.pythonhosted.org with a sha256 hash.
  • The newest new artifact is langgraph 1.2.13, uploaded 2026-10-05, which is still inside the 7-day exclude-newer window. The [options] header moving to the relative-span placeholder format looks like a newer uv lock format, not a policy change.
Extended reasoning...

Only uv.lock changes. It moves langgraph-sdk and the related LangChain/LangGraph packages to newer versions and adds langchain-protocol and websockets as transitive dependencies. These packages come from the dev dependency group, so the change affects the test and dev environment, not the published package's runtime requirements. It touches no security-sensitive surface, the changed path isn't covered by an active CODEOWNERS rule, and there are no prior reviews or objections. Approved because this is a mechanical dependency bump within the declared version ranges, and the existing langchain integration tests in CI will exercise the newer langchain-core.

Bumps [langgraph-sdk](https://github.com/langchain-ai/langgraph) from 0.3.12 to 0.4.4.
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@0.3.12...0.4.4)

---
updated-dependencies:
- dependency-name: langgraph-sdk
  dependency-version: 0.4.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/uv/langgraph-sdk-0.4.4 branch from dd78a63 to 445b8de Compare October 14, 2026 16:08

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants