diff --git a/a2a/weather_service/pyproject.toml b/a2a/weather_service/pyproject.toml index db73662b..8beab31e 100644 --- a/a2a/weather_service/pyproject.toml +++ b/a2a/weather_service/pyproject.toml @@ -10,11 +10,11 @@ license = { text = "Apache" } requires-python = ">=3.11" dependencies = [ "a2a-sdk>=1.1.0,<2", - "langgraph>=1.2.7", - "langchain-core>=1.4.0", + "langgraph>=1.2.9", + "langchain-core>=1.4.9", "langchain-community>=0.4.2", "langchain-ollama>=1.1.0", - "langchain-openai>=1.3.3", + "langchain-openai>=1.3.4", "mlflow[langchain,kubernetes]>=3.13.0,<4", "pydantic-settings>=2.14.2", "langchain-mcp-adapters>=0.3.0", @@ -35,11 +35,11 @@ dependencies = [ "mcp>=1.28.1", # Indirect; prevents CVE-2025-66416 "protobuf>=6.33.5", # Indirect; prevents CVE-2026-0994 "starlette>=1.3.1", # Indirect; prevents CVE-2025-62727 - "pyasn1>=0.6.3", # Indirect; prevents CVE-2026-30922 + "pyasn1>=0.6.4", # Indirect; prevents CVE-2026-30922 "aiohttp>=3.14.1", # Indirect; prevents CVE-2025-69223 "gitpython>=3.1.47", # Indirect; prevents CVE-2026-42215, CVE-2026-42284 "langchain-text-splitters>=1.1.2", # Indirect; prevents CVE-2026-41481 - "langsmith>=0.9.5", # Indirect; prevents CVE-2026-41182 + "langsmith>=0.10.1", # Indirect; prevents CVE-2026-41182 "langchain-classic>=1.0.8", # Indirect; prevents CVE-2026-45134 "mako>=1.3.12", # Indirect; prevents CVE-2026-41205 "marshmallow>=4.3.0", # Indirect; prevents CVE-2025-68480 diff --git a/a2a/weather_service/uv.lock b/a2a/weather_service/uv.lock index 03775280..196c7e8e 100644 --- a/a2a/weather_service/uv.lock +++ b/a2a/weather_service/uv.lock @@ -1514,7 +1514,7 @@ wheels = [ [[package]] name = "langchain-core" -version = "1.4.8" +version = "1.4.9" source = { registry = "https://pypi.org/simple" } dependencies = [ { name = "jsonpatch" }, @@ -1528,9 +1528,9 @@ dependencies = [ { name = "typing-extensions" }, { name = "uuid-utils" }, ] -sdist = { url = "https://files.pythonhosted.org/packages/12/e3/bea6d0080acf183332f24dcd74c208aee5857cf8f783c3fb0bd86027d8fb/langchain_core-1.4.8.tar.gz", hash = "sha256:5bf1f8411077c904182ad8f975943d36adcbf579c4e017b3a118b719229ebf9a", size = 957974, upload-time = "2026-06-18T19:39:23.636Z" } +sdist = { url = "https://files.pythonhosted.org/packages/2a/b9/e937d0a90b26540bff07e7a7c64349f3b29c2dcc36257cd1cd3fdce17f2a/langchain_core-1.4.9.tar.gz", hash = "sha256:f8078901145bed0466755277500a5a22822a7b628808c4c0a28d4fc88895fcf2", size = 967294, upload-time = "2026-07-08T20:06:54.191Z" } wheels = [ - { url = "https://files.pythonhosted.org/packages/13/d6/bdf6f0481cc57ef300d6b1eb48cf1400c0409be715d6eb3cabadd1142a09/langchain_core-1.4.8-py3-none-any.whl", hash = "sha256:d84c28b05e3ba8d4271d0827aad5b592ccdaaf986e76768c23503f0a2045e8aa", size = 557416, upload-time = "2026-06-18T19:39:21.902Z" }, + { url = "https://files.pythonhosted.org/packages/84/70/ade2fada52772798ef815b6352b59e71b116aa0c32c3aef5be3dc2cbed12/langchain_core-1.4.9-py3-none-any.whl", hash = "sha256:28e3909e2a10cc81504952d795ac0a9e014c0018121ef89d48dd396fa09ec624", size = 558293, upload-time = "2026-07-08T20:06:52.382Z" }, ] [[package]] @@ -1562,16 +1562,16 @@ wheels = [ [[package]] name = "langchain-openai" -version = "1.3.3" +version = "1.3.4" source = { registry = "https://pypi.org/simple" } dependencies = [ { name = "langchain-core" }, { name = "openai" }, { name = "tiktoken" }, ] -sdist = { url = "https://files.pythonhosted.org/packages/d0/f3/b38e052f943a75ba0e6762c0a50b6f1d6bcd52a9ce63386d8803c2ff506e/langchain_openai-1.3.3.tar.gz", hash = "sha256:143769bf943820b80db769e47ca8fd0aac08ed18714519333b044c4431e9aa67", size = 3256559, upload-time = "2026-06-22T22:54:05.445Z" } +sdist = { url = "https://files.pythonhosted.org/packages/2a/fe/cfd11b9ebc54f7667e3c8f847f64246fad169ad998b8a08d7c3c9d9bccaf/langchain_openai-1.3.4.tar.gz", hash = "sha256:d888d5f39c2a8c3d0d8aa88f5cf50e58a8e7d242f3f15e39422add520eec8e31", size = 3258207, upload-time = "2026-07-08T22:59:50.651Z" } wheels = [ - { url = "https://files.pythonhosted.org/packages/2f/4b/7520114de1ce36bb17cbc98d0fcda048a9f755bedaeb73b92137aeaaf1db/langchain_openai-1.3.3-py3-none-any.whl", hash = "sha256:e469659862c8aabba4f6653df973206e7be54f98cf2275c86be7f06b7abe20d7", size = 120437, upload-time = "2026-06-22T22:54:03.8Z" }, + { url = "https://files.pythonhosted.org/packages/51/6e/f8f47f2c6976a4520b5416eaeeaee5e6aa7dd906b39685dc1ad4ef6d1ba2/langchain_openai-1.3.4-py3-none-any.whl", hash = "sha256:3241b8392b29c1af233b902b7d9a84bfc5fe26ccb210a7febdfc3972af7e5771", size = 120529, upload-time = "2026-07-08T22:59:49.451Z" }, ] [[package]] @@ -1600,7 +1600,7 @@ wheels = [ [[package]] name = "langgraph" -version = "1.2.7" +version = "1.2.9" source = { registry = "https://pypi.org/simple" } dependencies = [ { name = "langchain-core" }, @@ -1611,9 +1611,9 @@ dependencies = [ { name = "pydantic", version = "2.13.4", source = { registry = "https://pypi.org/simple" }, marker = "python_full_version >= '3.14'" }, { name = "xxhash" }, ] -sdist = { url = "https://files.pythonhosted.org/packages/bf/11/c3961537ac7577125aabba68effc33ecc3dc0962e2d287d734dbd61caad7/langgraph-1.2.7.tar.gz", hash = "sha256:dcdf5b441bf8c7c7c154e603b302c9dbfbfd2d11e1b7ae7d93a5aba979dc87bd", size = 721385, upload-time = "2026-06-30T01:24:12.528Z" } +sdist = { url = "https://files.pythonhosted.org/packages/41/4b/0d1130e26b41a99dcc88353bbe7162a1f255c4db746bd94024268e6af27b/langgraph-1.2.9.tar.gz", hash = "sha256:385f87bc1802c35af7e0aa479278ecba8582d103515eb48256cb2ddcd42d0bd4", size = 722869, upload-time = "2026-07-10T01:30:14.985Z" } wheels = [ - { url = "https://files.pythonhosted.org/packages/16/5d/19de0c674cf2d8bc95b25cdb4c13ba3f4fbe0f35bf2224ef19cc46bbb4cd/langgraph-1.2.7-py3-none-any.whl", hash = "sha256:249349a5d6a32cb0aa2304a8fb6529bd0cf56db8780d21db9e086e5383668f89", size = 246930, upload-time = "2026-06-30T01:24:11.15Z" }, + { url = "https://files.pythonhosted.org/packages/41/16/0b8dc48823f1326f3e0c8012a3c07a40da6f194299e2ec080df236287baf/langgraph-1.2.9-py3-none-any.whl", hash = "sha256:c2d98ad94333937922ba04148641c1da2bfe45b5b8e55d7b6dcb0bb2df809e76", size = 247473, upload-time = "2026-07-10T01:30:13.733Z" }, ] [[package]] @@ -1660,7 +1660,7 @@ wheels = [ [[package]] name = "langsmith" -version = "0.9.5" +version = "0.10.1" source = { registry = "https://pypi.org/simple" } dependencies = [ { name = "anyio" }, @@ -1679,9 +1679,9 @@ dependencies = [ { name = "xxhash" }, { name = "zstandard" }, ] -sdist = { url = "https://files.pythonhosted.org/packages/89/05/04a1371a13be979750c2987dfbbe71c163ae2aa1b4b1f57e20be8c8fd052/langsmith-0.9.5.tar.gz", hash = "sha256:2429122dc24a77b712e3982e44789dfec85b1ed6d0a542529d5373498c939c9d", size = 4577515, upload-time = "2026-07-01T16:17:05.609Z" } +sdist = { url = "https://files.pythonhosted.org/packages/5a/18/f9c960784ffd3a50b46f8fce04dd557a97caf9869ab9435e87c79b5bc37d/langsmith-0.10.1.tar.gz", hash = "sha256:b8b8981b4623bd0fc96609c90ef6afd9241a036922c58a5f1f4591616e2670e0", size = 4709885, upload-time = "2026-07-09T17:14:01.988Z" } wheels = [ - { url = "https://files.pythonhosted.org/packages/c2/22/0e6177f5f4377cd112766b610c232214b175f3cd427aab86c497745aada3/langsmith-0.9.5-py3-none-any.whl", hash = "sha256:2b1c20c80ef58ca6a0d603b0df3c82ee4bfdeadbd5de560fa3cc1d90bff2dc44", size = 603917, upload-time = "2026-07-01T16:17:03.693Z" }, + { url = "https://files.pythonhosted.org/packages/b3/a5/c0a12ee0455baf2de2411832b456fe226e0667ecc7e39524faa464e27ba1/langsmith-0.10.1-py3-none-any.whl", hash = "sha256:565f6ab9c1e3cea4d0a7da2c0b535b3d8acd291a0df51b39e9e25b7b14c4b56d", size = 653374, upload-time = "2026-07-09T17:14:00.238Z" }, ] [[package]] @@ -2780,11 +2780,11 @@ wheels = [ [[package]] name = "pyasn1" -version = "0.6.3" +version = "0.6.4" source = { registry = "https://pypi.org/simple" } -sdist = { url = "https://files.pythonhosted.org/packages/5c/5f/6583902b6f79b399c9c40674ac384fd9cd77805f9e6205075f828ef11fb2/pyasn1-0.6.3.tar.gz", hash = "sha256:697a8ecd6d98891189184ca1fa05d1bb00e2f84b5977c481452050549c8a72cf", size = 148685, upload-time = "2026-03-17T01:06:53.382Z" } +sdist = { url = "https://files.pythonhosted.org/packages/a4/9a/23310166d960def5897e91fe20e5b724601b02a22e84ba1f94232c0b7f67/pyasn1-0.6.4.tar.gz", hash = "sha256:9c447d8431c947fe4c8febc4ed9e760bc29011a5b01e5c74b67025bd9fb8ce81", size = 151262, upload-time = "2026-07-09T01:12:33.988Z" } wheels = [ - { url = "https://files.pythonhosted.org/packages/5d/a0/7d793dce3fa811fe047d6ae2431c672364b462850c6235ae306c0efd025f/pyasn1-0.6.3-py3-none-any.whl", hash = "sha256:a80184d120f0864a52a073acc6fc642847d0be408e7c7252f31390c0f4eadcde", size = 83997, upload-time = "2026-03-17T01:06:52.036Z" }, + { url = "https://files.pythonhosted.org/packages/9a/3b/6163796d69c3977d1e4287bea4a6979161cbbdd170ebb430511e8e1999ce/pyasn1-0.6.4-py3-none-any.whl", hash = "sha256:deda9277cfd454080ec40b207fb6df82206a3a2688735233cdcd8d3d565f088b", size = 84410, upload-time = "2026-07-09T01:12:32.92Z" }, ] [[package]] @@ -3833,14 +3833,14 @@ requires-dist = [ { name = "gitpython", specifier = ">=3.1.47" }, { name = "langchain-classic", specifier = ">=1.0.8" }, { name = "langchain-community", specifier = ">=0.4.2" }, - { name = "langchain-core", specifier = ">=1.4.0" }, + { name = "langchain-core", specifier = ">=1.4.9" }, { name = "langchain-mcp-adapters", specifier = ">=0.3.0" }, { name = "langchain-ollama", specifier = ">=1.1.0" }, - { name = "langchain-openai", specifier = ">=1.3.3" }, + { name = "langchain-openai", specifier = ">=1.3.4" }, { name = "langchain-text-splitters", specifier = ">=1.1.2" }, - { name = "langgraph", specifier = ">=1.2.7" }, + { name = "langgraph", specifier = ">=1.2.9" }, { name = "langgraph-checkpoint", specifier = ">=4.1.1" }, - { name = "langsmith", specifier = ">=0.9.5" }, + { name = "langsmith", specifier = ">=0.10.1" }, { name = "mako", specifier = ">=1.3.12" }, { name = "marshmallow", specifier = ">=4.3.0" }, { name = "mcp", specifier = ">=1.28.1" }, @@ -3851,7 +3851,7 @@ requires-dist = [ { name = "opentelemetry-instrumentation-httpx", specifier = ">=0.49b0" }, { name = "opentelemetry-instrumentation-openai", specifier = ">=0.62.1" }, { name = "protobuf", specifier = ">=6.33.5" }, - { name = "pyasn1", specifier = ">=0.6.3" }, + { name = "pyasn1", specifier = ">=0.6.4" }, { name = "pydantic-settings", specifier = ">=2.14.2" }, { name = "python-dotenv", specifier = ">=1.2.2" }, { name = "python-keycloak", specifier = ">=7.1.1" },