chore(deps): bump the ai-providers group with 6 updates

[dependabot]

Bumps the ai-providers group with 6 updates:

Package	From	To
langchain	1.3.6	1.3.9
openai	2.41.0	2.41.1
langgraph	1.2.4	1.2.5
langchain-core	1.4.3	1.4.7
langchain-openai	1.3.0	1.3.2
langchain-anthropic	1.4.4	1.4.6

Updates langchain from 1.3.6 to 1.3.9

Release notes

Sourced from langchain's releases.

langchain==1.3.9

Changes since langchain==1.3.8

release(anthropic): 1.4.6 (#38105) release(langchain): 1.3.9 (#38104) fix(langchain,anthropic): confine file-search results and tighten anthropic allowed_prefixes (#38106)

langchain==1.3.8

Changes since langchain==1.3.7

release(langchain): 1.3.8 (#38096) style(core,langchain,langchain-classic,partners): replace double backticks in docstrings (#38095) release(core): 1.4.6 (#38061) chore(langchain): add overloads to create_agent (#34309) chore(infra): bump mypy to 2.1 and unify type-check config across the monorepo (#36470) fix(langchain): support async middleware decorator typing (#34584) fix(langchain): tighten structured output model fallbacks (#38042) release(anthropic): 1.4.5 (#38036) hotfix(core): bump lockfile(s) (#38032) refactor(langchain): refactor test_create_agent_tool_validation (#34443)

langchain==1.3.7

Changes since langchain==1.3.6

release(langchain): 1.3.7 (#38024) style(langchain): add ruff rules ARG (#34435) feat(langchain): add ProviderToolSearchMiddleware (#37969) chore(langchain): activate mypy warn_return_any (#34249) test(langchain): mark legacy trigger view for 2.0 removal (#38002)

Commits

• 3bfb6a3 release(langchain): 1.3.9 (#38104)
• dcaf779 fix(langchain,anthropic): confine file-search results and tighten anthropic `...
• 0392b6b fix(core): fix Pydantic v1 support in tools/runnable (#33698)
• f6d63bc release(langchain): 1.3.8 (#38096)
• 5d20596 style(core,langchain,langchain-classic,partners): replace double backticks in...
• fb55c66 chore: bump langsmith from 0.8.9 to 0.8.14 in /libs/partners/huggingface (#38...
• 51daae5 chore: bump langsmith from 0.8.9 to 0.8.14 in /libs/partners/chroma (#38092)
• 70e9579 chore: bump langsmith from 0.8.9 to 0.8.14 in /libs/partners/fireworks (#38093)
• 6c0e9af chore: bump langsmith from 0.8.9 to 0.8.14 in /libs/partners/xai (#38094)
• 222dc84 ci(infra): clarify early PR auto-close guidance (#38090)
• Additional commits viewable in compare view

Updates openai from 2.41.0 to 2.41.1

Release notes

Sourced from openai's releases.

v2.41.1

2.41.1 (2026-06-05)

Full Changelog: v2.41.0...v2.41.1

Build System

• Remove scheduled release workflow trigger (#3366) (2a91011)

Changelog

Sourced from openai's changelog.

2.41.1 (2026-06-05)

Full Changelog: v2.41.0...v2.41.1

Build System

• Remove scheduled release workflow trigger (#3366) (2a91011)

Commits

• 7198756 release: 2.41.1
• 3842a5e ci: use PyPI trusted publishing (#3365)
• 2a91011 build: Remove scheduled release workflow trigger (#3366)
• See full diff in compare view

Updates langgraph from 1.2.4 to 1.2.5

Release notes

Sourced from langgraph's releases.

langgraph==1.2.5

Changes since 1.2.4

• release(langgraph): 1.2.5 (#8062)
• fix(langgraph): merge lc_versions config metadata (#8052)
• release(cli): 0.4.28 (#8041)
• fix: updateState bug for deltaChannel on empty thread (#8011)
• chore: migrate Python type checking to ty (#8002)
• chore(deps-dev): bump types-requests from 2.33.0.20260408 to 2.33.0.20260518 in /libs/langgraph (#7977)
• chore(deps): bump the minor-and-patch group in /libs/langgraph with 14 updates (#7975)

Commits

• 7ab79f9 release(langgraph): 1.2.5 (#8062)
• 385033f fix(langgraph): merge lc_versions config metadata (#8052)
• 93307d6 release(cli): 0.4.29 (#8046)
• e05ba29 feat(cli): add support for passing certfile and cert key to run dev server un...
• f0e8147 release(cli): 0.4.28 (#8041)
• d57a74f fix: updateState bug for deltaChannel on empty thread (#8011)
• 6f83cc9 chore(deps): bump starlette from 1.0.0 to 1.0.1 in /libs/cli (#8005)
• 2ae62c6 chore(deps-dev): bump starlette from 1.0.0 to 1.0.1 in /libs/sdk-py (#8006)
• 2b1abc8 chore: migrate Python type checking to ty (#8002)
• 43682f0 chore(deps): bump the minor-and-patch group in /libs/cli with 4 updates (#7962)
• Additional commits viewable in compare view

Updates langchain-core from 1.4.3 to 1.4.7

Release notes

Sourced from langchain-core's releases.

langchain-core==1.4.7

Changes since langchain-core==1.4.6

chore: bump tornado from 6.5.5 to 6.5.6 in /libs/core (#38115) release(core): 1.4.7 (#38111) fix(core,partners): rename package version trace metadata (#38110) fix(core): fix Pydantic v1 support in tools/runnable (#33698) style(core,langchain,langchain-classic,partners): replace double backticks in docstrings (#38095)

langchain-core==1.4.6

Changes since langchain-core==1.4.5

release(core): 1.4.6 (#38061) feat(core,partners): add package version tracking to tracing metadata (#35295) fix(core,openai): normalize v1 streamed tool calls (#35983) chore(infra): bump mypy to 2.1 and unify type-check config across the monorepo (#36470)

langchain-core==1.4.5

Changes since langchain-core==1.4.4

release(core): 1.4.5 (#38056) feat(standard-tests): validate tool call chunks during streaming (#34707) fix(core): async tracer on_chat_model_start fallback in sync context (#35233) fix(langchain): tighten structured output model fallbacks (#38042)

langchain-core==1.4.4

Changes since langchain-core==1.4.3

hotfix(core): bump lockfile(s) (#38032) release(core): 1.4.4 (#38031) fix(core): support content block tokens in callbacks (#34739) chore(core): improve typing of Runnable __or__ (#34530) chore(core): fix some any generics (#34545) fix(core): accept sequence tool error content (#38005) fix(core): type structured tool error handler output (#38003) docs(core): document multimodal handling in get_buffer_string (#37994)

Commits

• 5157828 chore(infra): allow skipping prior partner release checks (#38117)
• 8b7979c chore: bump tornado from 6.5.5 to 6.5.6 in /libs/partners/huggingface (#38113)
• f8fef83 chore: bump tornado from 6.5.5 to 6.5.6 in /libs/text-splitters (#38112)
• 2be6ae1 chore: bump tornado from 6.5.5 to 6.5.6 in /libs/langchain (#38114)
• 7bae111 chore: bump tornado from 6.5.5 to 6.5.6 in /libs/core (#38115)
• 4108c07 release(core): 1.4.7 (#38111)
• 8837163 fix(core,partners): rename package version trace metadata (#38110)
• 8d7961b chore(model-profiles): refresh model profile data (#38100)
• c9f98c1 release(anthropic): 1.4.6 (#38105)
• 3bfb6a3 release(langchain): 1.3.9 (#38104)
• Additional commits viewable in compare view

Updates langchain-openai from 1.3.0 to 1.3.2

Release notes

Sourced from langchain-openai's releases.

langchain-openai==1.3.2

Changes since langchain-openai==1.3.1

release(openai): 1.3.2 (#38130)

langchain-openai==1.3.1

Changes since langchain-openai==1.3.0

docs: refresh README installation and resources (#38119) test(core,langchain): update tests for explicit deserialization allowlists (#38118) release(core): 1.4.7 (#38111) fix(core,partners): rename package version trace metadata (#38110) style(core,langchain,langchain-classic,partners): replace double backticks in docstrings (#38095) test(openai): use gpt-4o for image token counting (#38089) release(core): 1.4.6 (#38061) feat(core,partners): add package version tracking to tracing metadata (#35295) fix(core,openai): normalize v1 streamed tool calls (#35983) chore(infra): bump mypy to 2.1 and unify type-check config across the monorepo (#36470) feat(standard-tests): validate tool call chunks during streaming (#34707) fix(langchain): tighten structured output model fallbacks (#38042)

Commits

• 879cad0 release(openai): 1.3.2 (#38130)
• 37b339f fix(openai): build Codex async headers off the event loop in _agenerate (#3...
• 11429a9 fix(openai): avoid sync token reads in Codex streaming (#38128)
• 454e195 hotfix(openai): skip Codex live integration tests in CI (#38124)
• 9e6f58b hotfix(openai): switch version (#38123)
• bf7b018 refactor(openai): mark Codex OAuth classes private (#38122)
• 34af883 chore(infra): wire up per-partner version-consistency pre-commit hooks (#38121)
• 8180a09 release(openai): 1.4.0 (#38120)
• 6c2b70e feat(openai): add ChatGPT OAuth-backed ChatOpenAICodex chat model (#37569)
• 63cc1f4 docs: refresh README installation and resources (#38119)
• Additional commits viewable in compare view

Updates langchain-anthropic from 1.4.4 to 1.4.6

Release notes

Sourced from langchain-anthropic's releases.

langchain-anthropic==1.4.6

Changes since langchain-anthropic==1.4.5

release(anthropic): 1.4.6 (#38105) fix(langchain,anthropic): confine file-search results and tighten anthropic allowed_prefixes (#38106) release(core): 1.4.6 (#38061) feat(core,partners): add package version tracking to tracing metadata (#35295) chore(infra): bump mypy to 2.1 and unify type-check config across the monorepo (#36470) feat(standard-tests): validate tool call chunks during streaming (#34707) test(anthropic): make expected warnings explicit (#38044) test(anthropic): make tests robust to gateway base URL (#38043)

langchain-anthropic==1.4.5

Changes since langchain-anthropic==1.4.4

release(anthropic): 1.4.5 (#38036) fix(core): support content block tokens in callbacks (#34739) chore(model-profiles): refresh model profile data (#38012) hotfix(openai): min core dep (#37990) test(langchain,partners): disable pytest-benchmark under xdist to silence PytestBenchmarkWarning (#37901) chore(model-profiles): refresh model profile data (#37895) chore(model-profiles): refresh model profile data (#37771)

Commits

• c9f98c1 release(anthropic): 1.4.6 (#38105)
• 3bfb6a3 release(langchain): 1.3.9 (#38104)
• dcaf779 fix(langchain,anthropic): confine file-search results and tighten anthropic `...
• 0392b6b fix(core): fix Pydantic v1 support in tools/runnable (#33698)
• f6d63bc release(langchain): 1.3.8 (#38096)
• 5d20596 style(core,langchain,langchain-classic,partners): replace double backticks in...
• fb55c66 chore: bump langsmith from 0.8.9 to 0.8.14 in /libs/partners/huggingface (#38...
• 51daae5 chore: bump langsmith from 0.8.9 to 0.8.14 in /libs/partners/chroma (#38092)
• 70e9579 chore: bump langsmith from 0.8.9 to 0.8.14 in /libs/partners/fireworks (#38093)
• 6c0e9af chore: bump langsmith from 0.8.9 to 0.8.14 in /libs/partners/xai (#38094)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

posthog-python Compliance Report

Date: 2026-06-22 10:20:08 UTC
Duration: 530116ms

✅ All Tests Passed!

45/45 tests passed

---

Capture Tests

✅ 29/29 tests passed

View Details

Test	Status	Duration
Format Validation.Event Has Required Fields	✅	517ms
Format Validation.Event Has Uuid	✅	10007ms
Format Validation.Event Has Lib Properties	✅	10006ms
Format Validation.Distinct Id Is String	✅	10007ms
Format Validation.Token Is Present	✅	10007ms
Format Validation.Custom Properties Preserved	✅	10007ms
Format Validation.Event Has Timestamp	✅	10007ms
Retry Behavior.Retries On 503	✅	18019ms
Retry Behavior.Does Not Retry On 400	✅	12002ms
Retry Behavior.Does Not Retry On 401	✅	10007ms
Retry Behavior.Respects Retry After Header	✅	16014ms
Retry Behavior.Implements Backoff	✅	30018ms
Retry Behavior.Retries On 500	✅	13010ms
Retry Behavior.Retries On 502	✅	16011ms
Retry Behavior.Retries On 504	✅	16009ms
Retry Behavior.Max Retries Respected	✅	30018ms
Deduplication.Generates Unique Uuids	✅	7001ms
Deduplication.Preserves Uuid On Retry	✅	16016ms
Deduplication.Preserves Uuid And Timestamp On Retry	✅	23019ms
Deduplication.Preserves Uuid And Timestamp On Batch Retry	✅	16005ms
Deduplication.No Duplicate Events In Batch	✅	10002ms
Deduplication.Different Events Have Different Uuids	✅	10006ms
Compression.Sends Gzip When Enabled	✅	10007ms
Batch Format.Uses Proper Batch Structure	✅	10007ms
Batch Format.Flush With No Events Sends Nothing	✅	5005ms
Batch Format.Multiple Events Batched Together	✅	10005ms
Error Handling.Does Not Retry On 403	✅	12008ms
Error Handling.Does Not Retry On 413	✅	10008ms
Error Handling.Retries On 408	✅	14013ms

Feature_Flags Tests

✅ 16/16 tests passed

View Details

Test	Status	Duration
Request Payload.Request With Person Properties Device Id	✅	9502ms
Request Payload.Flags Request Uses V2 Query Param	✅	10006ms
Request Payload.Flags Request Hits Flags Path Not Decide	✅	10007ms
Request Payload.Flags Request Omits Authorization Header	✅	10006ms
Request Payload.Token In Flags Body Matches Init	✅	10007ms
Request Payload.Groups Round Trip	✅	10007ms
Request Payload.Groups Default To Empty Object	✅	10007ms
Request Payload.Person Properties Distinct Id Auto Populated When Caller Omits It	✅	10006ms
Request Payload.Disable Geoip False Propagates As Geoip Disable False	✅	10007ms
Request Payload.Disable Geoip Omitted Defaults To False	✅	10007ms
Request Payload.Flag Keys To Evaluate Contains Only Requested Key	✅	10006ms
Request Lifecycle.No Flags Request On Init Alone	✅	5003ms
Request Lifecycle.No Flags Request On Normal Capture	✅	10508ms
Request Lifecycle.Two Flag Calls Produce Two Remote Requests	✅	9510ms
Request Lifecycle.Mock Response Value Is Returned To Caller	✅	10003ms
Side Effect Events.Get Feature Flag Captures Feature Flag Called Event	✅	10509ms