[dependabot]

Bumps the backend-major group in /backend with 22 updates:

Package	From	To
aiofiles	23.2.1	25.1.0
anthropic	0.18.0	2.7.0
bcrypt	4.1.2	5.0.0
duckdb	1.5.6	2.0.0
langchain-core	0.1.20	1.7.7
langchain-openai	0.0.5	1.7.4
langchain-text-splitters	0.0.1	1.1.3
multidict	6.9.1	7.2.1
openai	1.10.0	3.49.0
pillow	12.3.0	13.0.0
pypdf	6.20.0	7.0.0
python-dateutil	2.9.0.post0	4.0.0
redis	5.0.1	8.1.0
stripe	7.10.0	16.1.0
uuid-utils	0.17.1	1.2.0
websockets	16.1.1	17.4
pytest	8.0.0	9.2.0
pytest-asyncio	0.23.3	1.4.1.post1
pytest-cov	4.1.0	7.1.0
sentence-transformers	2.3.1	6.2.0
langchain	0.1.4	1.4.9
browser-use	0.1.11	1.0.0

Updates aiofiles from 23.2.1 to 25.1.0

Release notes

Sourced from aiofiles's releases.

v25.1.0

• Switch to uv + add Python v3.14 support. (#219)
• Add ruff formatter and linter. #216
• Drop Python 3.8 support. If you require it, use version 24.1.0. #204

New Contributors

• @​danielsmyers made their first contribution in Tinche/aiofiles#185
• @​stankudrow made their first contribution in Tinche/aiofiles#192
• @​waketzheng made their first contribution in Tinche/aiofiles#221

Full Changelog: Tinche/aiofiles@v24.1.0...v25.1.0

24.1.0

• Import os.link conditionally to fix importing on android. #175
• Remove spurious items from aiofiles.os.__all__ when running on Windows.
• Switch to more modern async idioms: Remove types.coroutine and make AiofilesContextManager an awaitable instead a coroutine.
• Add aiofiles.os.path.abspath and aiofiles.os.getcwd. #174
• aiofiles is now tested on Python 3.13 too. #184
• Dropped Python 3.7 support. If you require it, use version 23.2.1.

Changelog

Sourced from aiofiles's changelog.

25.1.0 (2025-10-09)

• Switch to uv + add Python v3.14 support. (#219)
• Add ruff formatter and linter. #216
• Drop Python 3.8 support. If you require it, use version 24.1.0. #204

24.1.0 (2024-06-24)

• Import os.link conditionally to fix importing on android. #175
• Remove spurious items from aiofiles.os.__all__ when running on Windows.
• Switch to more modern async idioms: Remove types.coroutine and make AiofilesContextManager an awaitable instead a coroutine.
• Add aiofiles.os.path.abspath and aiofiles.os.getcwd. #174
• aiofiles is now tested on Python 3.13 too. #184
• Drop Python 3.7 support. If you require it, use version 23.2.1.

Commits

• 348f5ef v25.1.0
• 5e1bb8f docs: update readme to use ruff badge (#221)
• 6fdc25c Move to uv. (#219)
• 1989132 set 'function' as a default fixture loop scope value
• 8986452 add the 'asyncio_default_fixture_loop_scope=session' option
• ccab1ff update pytest-asyncio==1.0.0
• 8727c96 add PR #216 into the CHANGELOG
• a9388e5 add TID and ignore TID252
• 7603664 remove [ruff].exclude keyval
• 7c49a5c add final newlines
• Additional commits viewable in compare view

Updates anthropic from 0.18.0 to 2.7.0

Release notes

Sourced from anthropic's releases.

v2.7.0

Features

• api: accept user_profile.program_status_updated on organization webhook endpoints
• api: add claude-fable-5-2 and claude-mythos-5-2
• api: add parent organization filtering and grouping to the usage and cost reports
• api: add the sandbox_egress_restricted error to Admin API write methods
• api: add the user_profile.program_status_updated webhook event

Bug Fixes

• bedrock,vertex: add the parse and count_tokens methods missing from beta.messages.with_raw_response and with_streaming_response
• bedrock,vertex: send the X-Stainless-Async header and stream raw requests that name no stream class
• bedrock: sign requests that have no Connection header instead of raising KeyError
• bedrock: write a list in a query as a[]=1&a[]=2 on the Bedrock Mantle clients, as Anthropic does
• client: allow API errors to be unpickled and copied
• client: read ANTHROPIC_CUSTOM_HEADERS on the Bedrock, Bedrock Mantle and Vertex clients
• foundry: stop copy, with_options and with_middleware from raising when ANTHROPIC_FOUNDRY_RESOURCE is set
• parse: keep const in structured output schemas, and drop type beside const and enum

Chores

• api: remove some error detail types and update descriptions
• docs: say when a work heartbeat does not compare its value
• internal: add this repository's review rules
• internal: remove two comments from the error classes

v2.6.0

Features

• api: add error code for ramp limit errors
• api: add error codes for External Key validation failures
• api: add support for signing organization members out everywhere

Bug Fixes

• bedrock,vertex: raise error-code and status exception classes on platform clients
• bedrock: keep a custom http_client and aws_profile on copies made with copy and with_options

Chores

• client: stop recording sampling parameters on OpenTelemetry spans
• docs: describe the type and message of API errors
• internal: define the status error mapping once on the base client
• internal: tell contributors when a runtime type check belongs
• tests: remove ambient ANTHROPIC_ and AWS_ variables before the tests run

... (truncated)

Changelog

Sourced from anthropic's changelog.

2.7.0 (2026-11-09)

Features

• api: accept user_profile.program_status_updated on organization webhook endpoints
• api: add claude-fable-5-2 and claude-mythos-5-2
• api: add parent organization filtering and grouping to the usage and cost reports
• api: add the sandbox_egress_restricted error to Admin API write methods
• api: add the user_profile.program_status_updated webhook event

Bug Fixes

• bedrock,vertex: add the parse and count_tokens methods missing from beta.messages.with_raw_response and with_streaming_response
• bedrock,vertex: send the X-Stainless-Async header and stream raw requests that name no stream class
• bedrock: sign requests that have no Connection header instead of raising KeyError
• bedrock: write a list in a query as a[]=1&a[]=2 on the Bedrock Mantle clients, as Anthropic does
• client: allow API errors to be unpickled and copied
• client: read ANTHROPIC_CUSTOM_HEADERS on the Bedrock, Bedrock Mantle and Vertex clients
• foundry: stop copy, with_options and with_middleware from raising when ANTHROPIC_FOUNDRY_RESOURCE is set
• parse: keep const in structured output schemas, and drop type beside const and enum

Chores

• api: remove some error detail types and update descriptions
• docs: say when a work heartbeat does not compare its value
• internal: add this repository's review rules
• internal: remove two comments from the error classes

2.6.0 (2026-11-05)

Features

• api: add error code for ramp limit errors
• api: add error codes for External Key validation failures
• api: add support for signing organization members out everywhere

Bug Fixes

• bedrock,vertex: raise error-code and status exception classes on platform clients
• bedrock: keep a custom http_client and aws_profile on copies made with copy and with_options

Chores

• client: stop recording sampling parameters on OpenTelemetry spans
• docs: describe the type and message of API errors
• internal: define the status error mapping once on the base client

... (truncated)

Commits

• d497641 release: 2.7.0
• c5b4194 Merge pull request #1112 from anthropics/synced/published
• 7ac597f codegen metadata
• 8a168a8 feat(api): add claude-fable-5-2 and claude-mythos-5-2
• d37ebd6 feat(api): add parent organization filtering and grouping to the usage and co...
• 53fbb9b feat(api): add the sandbox_egress_restricted error to Admin API write methods
• b0a7c23 fix(parse): keep const in structured output schemas, and drop type beside con...
• 34faa4f chore(internal): add this repository's review rules (#1086)
• 42accc2 codegen metadata
• eb012aa codegen metadata
• Additional commits viewable in compare view

Updates bcrypt from 4.1.2 to 5.0.0

Changelog

Sourced from bcrypt's changelog.

5.0.0

• Bumped MSRV to 1.74.
• Added support for Python 3.14 and free-threaded Python 3.14.
• Added support for Windows on ARM.
• Passing hashpw a password longer than 72 bytes now raises a ValueError. Previously the password was silently truncated, following the behavior of the original OpenBSD bcrypt implementation.

4.3.0

• Dropped support for Python 3.7.
• We now support free-threaded Python 3.13.
• We now support PyPy 3.11.
• We now publish wheels for free-threaded Python 3.13, for PyPy 3.11 on manylinux, and for ARMv7l on manylinux.

4.2.1

• Bump Rust dependency versions - this should resolve crashes on Python 3.13 free-threaded builds.
• We no longer build manylinux wheels for PyPy 3.9.

4.2.0

• Bump Rust dependency versions
• Removed the BCRYPT_ALLOW_RUST_163 environment variable.

4.1.3

• Bump Rust dependency versions

Commits

• 5060bce 5.0.0 release (#1078)
• e43f568 Bump actions/cache from 4.2.4 to 4.3.0 (#1077)
• fc9f680 Bump libc from 0.2.175 to 0.2.176 in /src/_bcrypt (#1075)
• 633f46f Add support for Python 3.14 (#1073)
• a2fefbb Remove pypy310 builds (#1074)
• f60707e Bump wasi from 0.14.5+wasi-0.2.4 to 0.14.7+wasi-0.2.4 in /src/_bcrypt (#1071)
• c790eed Bump unicode-ident from 1.0.18 to 1.0.19 in /src/_bcrypt (#1070)
• 122cbdc Bump target-lexicon from 0.13.2 to 0.13.3 in /src/_bcrypt (#1069)
• 2bd208d Bump wasi from 0.14.4+wasi-0.2.4 to 0.14.5+wasi-0.2.4 in /src/_bcrypt (#1068)
• e1aa9e8 remove poinless cargo cache paths from CI (#1067)
• Additional commits viewable in compare view

Updates duckdb from 1.5.6 to 2.0.0

Release notes

Sourced from duckdb's releases.

DuckDB v2.0.0

duckdb-python 2.0.0 is the Python package for DuckDB 2.0. It supports Python >= 3.11 and drops Python 3.10. From Python 3.12 on, one wheel per platform serves every Python version. The binding layer was rewritten on nanobind, query results stream instead of being collected up front, the relational API was rebuilt on SQL text, and the way DataFrames, Arrow data and polars frames are read was replaced. Many long-standing bugs are fixed, and moving data in and out of Python is much faster. The engine is DuckDB 2.0.0; see its release notes for what changed in SQL and storage.

Highlights

• Moving data is much faster. Numeric exports to numpy, pandas, Arrow and polars take a quarter to two fifths of the 1.5 time; in-memory Arrow, polars and pandas 3 inputs are scanned on all threads, 8x to 20x faster; Arrow UDFs run about 20x faster; draining an Arrow reader on 16 threads takes an eighth of the time. (#693, #697, #700)
• Results stream. con.execute() starts the query and you read rows as you fetch them; con.complete() and con.abort() finish or cancel an open result, and an open result or Arrow reader owns the connection until it is done.
• The relational API is rebuilt on SQL text. A relation is a lazy query, bound at every step so its schema is known; rel.sql_query() shows exactly what will run. Many new methods and expression helpers (col, lit, when, window functions). One semantic change: a plain string in an expression is a value, not a column name. (#697)
• A new Appender for fast bulk inserts: with con.appender("t") as a: a.append_row(...), under a microsecond per row. (#661)
• One stable ABI wheel per platform for Python 3.12 and later, so a new Python release works on day one. Python 3.15 is supported. (#672, #673, #684)
• Arrow export on con.execute() results changed: fetch_arrow_table, fetch_record_batch and arrow(n) are gone; use con.sql(query).to_arrow_table() or .to_arrow_reader(). (#702)
• The experimental Spark API is brought up to date: it is now compatible with PySpark 4.2.0 and 3.5.9 (#686). We would love your input on whether to continue support or to drop it in future releases.

Upgrading from 1.x: what to check

1. Make sure you run Python 3.11 or later.
2. If you call fetch_arrow_table, fetch_record_batch, arrow(n) or pl() on the result of con.execute(), switch to con.sql(query).to_arrow_table(), to_arrow_reader() or pl(). Libraries that call the removed names on an execute result need an update. (#702)
3. If you call fetchone(), fetchmany(), fetch_df_chunk() or execute() on a relation, use rel.limit(n).fetchall(), rel.to_arrow_reader(), rel.materialize(), or run the query through con.execute(). (#697)
4. If you compare a relation column with a plain string, col("s") == "x" now compares with the text x. Wrap column names in col(). (#697)
5. If you rely on import duckdb having opened the default database, note that it happens on the first duckdb.sql() or duckdb.connect() call instead. (#680)
6. If you pass Decimal values with a positive exponent, such as Decimal("1E+2"), they now arrive as the number they denote, 100, where 1.5 produced 1.00. (#654)
7. If you write files with overwrite=False, an existing file is now refused instead of replaced. (#668)
8. If a test or script depends on str(rel) being free, note that it runs the query each time now.

Breaking changes

Arrow export on DB-API results (#702)

Results of con.execute() are now read row by row and are not kept in memory, so they cannot hand their data to Arrow for free. fetch_arrow_table, fetch_record_batch, arrow(rows_per_batch) and pl() on a DB-API result are removed; they had been deprecated. to_arrow_table() and to_arrow_reader() remain, also as duckdb.to_arrow_table() and duckdb.to_arrow_reader(), but they materialize the rows twice, once as the result and once as Arrow, and emit a UserWarning pointing at the relational path, con.sql(query).to_arrow_table(), which we recommend instead. The reader no longer streams: its first batch arrives after the whole query ran. After a partial fetchone or fetchmany the Arrow call returns the remaining rows instead of raising. With preserve_insertion_order off, the row order can differ between calls. duckdb.arrow(n) with an integer is gone; duckdb.arrow(arrow_object) still builds a relation.

# 1.5
table = con.execute("SELECT * FROM t").fetch_arrow_table()
reader = con.execute("SELECT * FROM t").fetch_record_batch(10_000)
2.0
table = con.sql("SELECT * FROM t").to_arrow_table()
reader = con.sql("SELECT * FROM t").to_arrow_reader(10_000)

Relations are SQL text (#697)

The relational API is a query building API, not an execution API. A relation is a piece of SQL text with a schema bound once when it is built, so every step knows its columns and types. It runs nothing until you ask for data, and it runs again on every read; rel.sql_query() returns exactly the text that runs, as one SELECT per group of steps and a common table expression where the order of clauses breaks. The engine's binder decides every column name and type; nothing is renamed by the client.

What you are most likely to notice:

• A bare string operand of an expression is a value, not a column. For one release a warning is raised when the string matches a column name; the warning goes in 2.1. A dotted string is not split into parts; pass the parts separately.

... (truncated)

Commits

• 83c7199 Build the dictionary test's indices with a 64 bit arange (#705)
• b12fd55 Build the dictionary test's indices with a 64 bit arange
• 6aa2ce3 Build the Linux and macOS wheels with clang and ThinLTO (#703)
• 2f0ac79 Pin submodule to v2.0.0 hash
• f7826ad Fix wrong values and lost parallelism in the pandas, numpy and Arrow input sc...
• 2f2a0dd Bring back to_arrow_table and to_arrow_reader on DB-API results over a re-fee...
• 6086a15 Keep the macOS wheels native, like the engine's release
• 07ee3e2 Build the Linux and macOS wheels with clang and ThinLTO
• a2c151f Register the linked extensions when the module loads, not only on import (#701)
• dd2a3e9 Read numpy masks a word at a time
• Additional commits viewable in compare view

Updates langchain-core from 0.1.20 to 1.7.7

Release notes

Sourced from langchain-core's releases.

langchain-core==1.7.7

Changes since langchain-core==1.7.6

release(core): 1.7.7 (#41776) fix(core): cap nesting depth in load() (#41742) chore(deps): patch newer-python security lock resolutions (#41585)

langchain-core==1.7.6

Changes since langchain-core==1.7.5

release(core): 1.7.6 (#41698) perf(core): merge streamed AIMessageChunks once when accumulating runnable streams (#41697) perf(core): stop parse_partial_json from retrying one character at a time (#41467)

langchain-core==1.7.5

Changes since langchain-core==1.7.4

release(core): 1.7.5 (#41665) feat(core): translate Gemini safety blocks to refusal content blocks (#41658) fix(core): end tool run on cancellation (#41660) feat(core): standardize model refusal content blocks (#41582) fix(core): load RemoveMessage serialized by LangChain.js (#41642)

langchain-core==1.7.4

[!WARNING] Python 3.10 support will be dropped in langchain-core 1.8.0 and langchain 1.5.0. The current minor versions are the last to support Python 3.10. Please upgrade to Python 3.11 or later.

Changes since langchain-core==1.7.3

release(core): 1.7.4 (#41635) fix(core): avoid mutating message content in Anthropic translator (#40213)

langchain-core==1.7.3

Changes since langchain-core==1.7.2

release(core): 1.7.3 (#41564)

langchain-core==1.7.2

Changes since langchain-core==1.7.1

release(core): 1.7.2 (#41562) feat(core): add add_notification_metadata and get_notification_metadata (#41540) fix(core): stop merge_content from changing the first message's content (#41502)

langchain-core==1.7.1

Changes since langchain-core==1.7.0

release(core): version 1.7.1 (#41548) fix(core): preserve gateway tracing metadata in v3 streams (#41504) fix(core): escape node metadata in Mermaid labels (#41512)

... (truncated)

Commits

• 1a41b51 release(core): 1.7.7 (#41776)
• afae7c9 docs: update OpenWiki (#41747)
• 23bacbe fix(langchain): keep middleware-internal model calls off the messages strea...
• 1b88280 fix(core): cap nesting depth in load() (#41742)
• bc027f2 release(fireworks): 1.7.3 (#41773)
• 674e9c7 fix(fireworks): default max_tokens from model profiles (#41772)
• 19af939 chore(model-profiles): refresh model profile data (#41762)
• 82f2e3f chore(model-profiles): refresh model profile data (#41745)
• d9caf08 docs: update OpenWiki (#41726)
• 989f2a8 chore(model-profiles): refresh model profile data (#41725)
• Additional commits viewable in compare view

Updates langchain-openai from 0.0.5 to 1.7.4

Release notes

Sourced from langchain-openai's releases.

langchain-openai==1.7.4

Changes since langchain-openai==1.7.3

release(openai): 1.7.4 (#41683) chore(deps): require langchain-core>=1.7.5 for refusal handling (#41682) feat(core): standardize model refusal content blocks (#41582) chore(model-profiles): refresh model profile data (#41556)

langchain-openai==1.7.3

Changes since langchain-openai==1.7.2

test(openai): use current lightweight model in integration tests (#41509) release(openai): 1.7.3 (#41506) chore(model-profiles): refresh openai model profile data (#41505) build(infra): patch test-only Pillow without dropping Python 3.10 (#41484) revert: patch vulnerable integration dependencies (#41481) build(deps): patch vulnerable integration dependencies (#41473) chore(infra): relax third-party dependency upper bounds (#41407) chore(deps): bump aiohttp from 3.14.4 to 3.14.5 in /libs/partners/openai (#41379) chore(deps): bump certifi from 2025.10.5 to 2026.10.19 in /libs/partners/openai (#41380) chore(deps): bump aiohttp from 3.14.3 to 3.14.4 in /libs/partners/openai (#41362) chore(model-profiles): refresh model profile data (#41325) chore(deps): bump pytest from 9.0.3 to 9.1.1 in /libs/partners/openai (#41328) chore(deps): bump pygments from 2.20.0 to 2.21.0 in /libs/partners/openai (#41333) chore(deps): bump requests from 2.33.0 to 2.34.2 in /libs/partners/openai (#41331) chore(deps): bump orjson from 3.11.6 to 3.13.0 in /libs/partners/openai (#41329) fix: fix dependencies in some partner packages (#41266)

langchain-openai==1.7.2

Changes since langchain-openai==1.7.1

release(openai): 1.7.2 (#41245) fix(openai): keep Responses stream items on one block when output_index drifts (#41121)

langchain-openai==1.7.1

Changes since langchain-openai==1.7.0

release(openai): 1.7.1 (#41222) feat(core,anthropic,openai): declare mid-conversation support in model profiles (#41180)

langchain-openai==1.7.0

Changes since langchain-openai==1.6.7

release(openai): 1.7.0 (#41154) feat(openai): support decisions api (#41125) chore(deps): bump langgraph-sdk from 0.4.4 to 0.4.6 in /libs/partners/openai (#41096) chore(deps): bump langgraph-sdk from 0.4.2 to 0.4.4 in /libs/partners/openai (#41072) chore(deps): bump pyjwt from 2.15.0 to 2.15.1 in /libs/partners/openai (#40951) chore(deps): bump urllib3 from 2.7.0 to 2.8.0 in /libs/partners/openai (#40952)

... (truncated)

Commits

• 16a08bd release(openai): 1.7.4 (#41683)
• d5a9cd5 chore(deps): require langchain-core>=1.7.5 for refusal handling (#41682)
• 504fd5c chore(model-profiles): refresh model profile data (#41669)
• aa2528f feat(typesafe): accept a classifier in experimental middleware (#41657)
• 49b9dfb release(core): 1.7.5 (#41665)
• f1ca47a feat(core): translate Gemini safety blocks to refusal content blocks (#41658)
• 4a9d4da fix(infra): pin optional deps in min-version release checks (#41661)
• 67f17db fix(core): end tool run on cancellation (#41660)
• 0cc6e7c release(typesafe): 0.0.1 (#41650)
• ddd7303 feat(core): standardize model refusal content blocks (#41582)
• Additional commits viewable in compare view

Updates langchain-text-splitters from 0.0.1 to 1.1.3

Release notes

Sourced from langchain-text-splitters's releases.

langchain-text-splitters==1.1.3

Changes since langchain-text-splitters==1.1.2

release(text-splitters): 1.1.3 (#41001) chore(deps): bump the minor-and-patch group across 3 directories with 4 updates (#40969) chore(deps): bump tornado from 6.5.9 to 6.5.10 in /libs/text-splitters (#40971) chore(deps): bump urllib3 from 2.7.0 to 2.8.0 in /libs/text-splitters (#40938) chore(deps): bump tornado from 6.5.8 to 6.5.9 in /libs/text-splitters (#40940) chore(deps): bump anyio from 4.14.2 to 4.15.1 in /libs/text-splitters (#40645) chore(deps): bump anyio from 4.11.0 to 4.14.2 in /libs/text-splitters (#40624) chore(deps): bump soupsieve from 2.8.4 to 2.9 in /libs/text-splitters (#40579) chore(deps): bump the minor-and-patch group across 3 directories with 5 updates (#40566) chore(deps): bump types-requests from 2.33.0.20260712 to 2.33.0.20260906 in /libs/text-splitters (#40568) chore(deps): update lxml requirement from <7.0,>=6.1.2 to >=6.1.3,<7.0 in /libs/text-splitters (#40569) chore(deps): bump mistune from 3.3.0 to 3.3.3 in /libs/text-splitters (#40148) chore(deps): bump the minor-and-patch group across 3 directories with 5 updates (#40085) chore(deps): update lxml requirement from <7.0,>=6.1.0 to >=6.1.2,<7.0 in /libs/text-splitters (#40087) chore(deps): bump tornado from 6.5.7 to 6.5.8 in /libs/text-splitters (#40112) chore: bump the minor-and-patch group across 3 directories with 8 updates (#39863) chore: bump the major group across 2 directories with 2 updates (#39864) chore: bump types-requests from 2.33.0.20260518 to 2.33.0.20260712 in /libs/text-splitters (#39867) fix(text-splitters): raise TypeError for non-dict, non-convertible input to RecursiveJsonSplitter (#39238) chore: bump the minor-and-patch group across 3 directories with 7 updates (#39187) chore(infra): add missing LICENSE files to publishable packages (#39146) chore: bump jupyterlab from 4.5.9 to 4.5.10 in /libs/text-splitters (#39028) chore: bump setuptools from 80.9.0 to 83.0.0 in /libs/text-splitters (#39029) chore: bump torch from 2.12.1 to 2.13.0 in /libs/text-splitters (#38946) chore: bump soupsieve from 2.8 to 2.8.4 in /libs/text-splitters (#38748) chore: bump nltk from 3.9.4 to 3.10.0 in /libs/text-splitters (#38747) chore: bump mistune from 3.2.1 to 3.3.0 in /libs/text-splitters (#38826) chore(deps): refresh lockfiles (#38746) fix(text-splitters): restore lazy imports for heavy optional dependencies (#35469) feat(text-splitters): replace mypy by ty for type checking (#38658) chore: bump the minor-and-patch group across 3 directories with 11 updates (#38587) chore: bump pytest from 9.1.0 to 9.1.1 in /libs/text-splitters (#38299) chore: bump jupyterlab from 4.5.7 to 4.5.9 in /libs/text-splitters (#38296) chore: bump langsmith from 0.8.5 to 0.8.18 in /libs/text-splitters (#38301) chore: bump tornado from 6.5.6 to 6.5.7 in /libs/text-splitters (#38175) chore: bump bleach from 6.2.0 to 6.4.0 in /libs/text-splitters (#38195) chore: bump torch from 2.9.1 to 2.12.1 in /libs/text-splitters (#38231) chore: bump pytest from 9.0.3 to 9.1.0 in /libs/text-splitters (#38232) chore: bump jupyter-server from 2.18.0 to 2.20.0 in /libs/text-splitters (#38250) docs: refresh README installation and resources (#38119) chore: bump tornado from 6.5.5 to 6.5.6 in /libs/text-splitters (#38112) release(core): 1.4.7 (#38111) release(core): 1.4.6 (#38061) chore(infra): bump mypy to 2.1 and unify type-check config across the monorepo (#36470) fix(langchain): tighten structured output model fallbacks (#38042) hotfix(core): bump lockfile(s) (#38032) chore(core): fix some any generics (#34545)

... (truncated)

Commits

• e2db474 release(text-splitters): 1.1.3 (#41001)
• 0f13669 chore(model-profiles): refresh model profile data (#40994)
• ff46bb4 fix(ollama): raise ollama floor to 0.6.3 for thinking levels (#40986)
• 884d2d6 chore(deps): bump uv to 0.12.21 (#40975)
• 6f258ae chore(model-profiles): refresh model profile data (#40974)
• 0904175 chore(deps): bump urllib3 from 2.7.0 to 2.8.0 in /libs/core (#40972)
• ba41751 chore(deps): bump the minor-and-patch group across 3 directories with 4 updat...
• dc7b1d8 chore(deps): bump aws-actions/configure-aws-credentials from 6.2.4 to 6.3.0 i...
• 402dfa6 chore(deps): bump tornado from 6.5.9 to 6.5.10 in /libs/text-splitters (#40971)
• 79aa9cf chore(deps): bump tornado from 6.5.8 to 6.5.9 in /libs/core (#40970)
• Additional commits viewable in compare view

Updates multidict from 6.9.1 to 7.2.1
Updates openai from 1.10.0 to 3.49.0

Release notes

Sourced from openai's releases.

v3.49.0

3.49.0 (2026-11-10)

Features

• api: add typed async function tools (#4264) (ea07983)

Bug Fixes

• encode microphone recordings as valid PCM WAV (#3900) (13c000d)

v3.48.0

3.48.0 (2026-11-09)

Features

• api: add stream options for agent sessions (#4251) (c6fc264)
• api: recognize gpt-6-rosalind in beta Responses (#4257) (3774b7e)

Chores

• api: retain agent scheduling support (#4255) (a1175a3)
• deps: bump locked multidict from 6.9.1 to 7.1.0 (#4259) (28cdb1b)
• deps-dev: bump the python-maintenance group with 5 updates (#4258) (4b10e22)
• deps-dev: bump types-requests from 2.33.0.20261006 to 2.33.0.20261030 (#4260) (de498d7)

Documentation

• consolidate AGENTS.md guidance (#4254) (44b1555)

v3.47.0

3.47.0 (2026-11-05)

Features

• api: add a model option for Responses (#4249) (090098f)

v3.46.0

3.46.0 (2026-11-05)

Features

• api: add Australia, India, and Japan residency options (#4246) (2634b87)

... (truncated)

Changelog

Sourced from openai's changelog.

3.49.0 (2026-11-10)

Features

• api: add typed async function tools (#4264) (ea07983)

Bug Fixes

• encode microphone recordings as valid PCM WAV (#3900) (13c000d)

3.48.0 (2026-11-09)

Features

• api: add stream options for agent sessions (#4251) (c6fc264)
• api: recognize gpt-6-rosalind in beta Responses (#4257) (3774b7e)

Chores

• api: retain agent scheduling support (#4255) (a1175a3)
• deps: bump locked multidict from 6.9.1 to 7.1.0 (#4259) (28cdb1b)
• deps-dev: bump the python-maintenance group with 5 updates (#4258) (4b10e22)
• deps-dev: bump types-requests from 2.33.0.20261006 to 2.33.0.20261030 (#4260) (de498d7)

Documentation

• consolidate AGENTS.md guidance (#4254) (44b1555)

3.47.0 (2026-11-05)

Features

• api: add a model option for Responses (#4249) (090098f)

3.46.0 (2026-11-05)

Features

• api: add Australia, India, and Japan residency options (#4246) (2634b87)
• api: add GPT-6 Rosalind to the model catalog (#4243) (0f8e5f3)
• api: add image complexity and GIF and SVG output controls (#4247) (0152e3a)
• api: expand agent turn errors and image and audio options (#4245) (1b2fb74)

... (truncated)

Commits

• 3d573c0 release: 3.49.0 (#4263)
• ea07983 feat(api): add typed async function tools (#4264)
• 13c000d fix: encode microphone recordings as valid PCM WAV (#3900)