chore(deps): Bump the minor-and-patch group across 1 directory with 11 updates

[dependabot]

Bumps the minor-and-patch group with 10 updates in the /a2a/a2a_currency_converter directory:

Package	From	To
langchain-google-genai	4.2.7	4.3.3
langgraph	1.2.9	1.2.10
uvicorn	0.51.0	0.52.1
langchain-openai	1.3.4	1.4.3
pydantic-settings	2.14.2	2.15.0
openinference-instrumentation-langchain	0.1.67	0.1.70
opentelemetry-exporter-otlp	1.43.0	1.44.0
starlette	1.3.1	1.6.0
langgraph-checkpoint	4.1.1	4.2.0
langsmith	0.10.1	0.10.17

Updates langchain-google-genai from 4.2.7 to 4.3.3

Release notes

Sourced from langchain-google-genai's releases.

langchain-google-genai==4.3.3

Changes since libs/genai/v4.3.2

release(genai): 4.3.3 (#1936) fix: normalize empty AI content for Vertex (#1935) chore: bump types-requests from 2.33.0.20260518 to 2.33.0.20260712 in /libs/genai (#1918) chore: bump cryptography from 48.0.1 to 50.0.0 in /libs/genai (#1925)

langchain-google-genai==4.3.2

Changes since libs/genai/v4.3.1

release(genai): 4.3.2 (#1911) feat(genai): support langsmith gateway through env var (#1907) chore: bump pyasn1 from 0.6.3 to 0.6.4 in /libs/genai (#1901)

langchain-google-genai==4.3.1

Changes since libs/genai/v4.3.0

release(genai): 4.3.1 (#1900) fix(genai): align reasoning effort profiles with Gemini docs (#1899)

langchain-google-genai==4.3.0

Changes since libs/genai/v4.2.7

fix(genai): handle request rules for new Gemini models (#1897) chore(model-profiles): refresh model profile data (#1879) release(genai): 4.3.0 (#1896) feat(genai): add reasoning_effort as a standard chat model parameter (#1895) test(genai): retry flaky structured output streaming tests (#1893) fix(genai): remove default temperature for gemini models (#1882) chore: bump the minor-and-patch group across 1 directory with 6 updates (#1876)

Commits

• af46f84 release(genai): 4.3.3 (#1936)
• c638727 fix: normalize empty AI content for Vertex (#1935)
• 508acdd chore: bump types-requests from 2.33.0.20260518 to 2.33.0.20260712 in /libs/c...
• 67abfcd chore: bump aiohttp from 3.14.1 to 3.14.3 in /libs/community (#1926)
• 126c389 chore: bump types-google-cloud-ndb from 2.4.0.20260518 to 2.4.0.20260724 in /...
• f7952fc chore: bump cryptography from 48.0.1 to 50.0.0 in /libs/vertexai (#1924)
• 8b014ca chore: bump types-requests from 2.33.0.20260518 to 2.33.0.20260712 in /libs/g...
• 8e2fadd chore: bump cryptography from 48.0.1 to 50.0.0 in /libs/genai (#1925)
• 7ff75b1 chore: bump cryptography from 48.0.1 to 50.0.0 in /libs/community (#1927)
• 0d5990f fix(vertexai): use Vertex profiles (#1913)
• Additional commits viewable in compare view

Updates langgraph from 1.2.9 to 1.2.10

Release notes

Sourced from langgraph's releases.

langgraph==1.2.10

Changes since 1.2.9

• release(langgraph): 1.2.10 (#8462)
• chore(deps): bump jupyterlab from 4.5.9 to 4.5.10 in /libs/langgraph (#8440)
• chore(deps): bump setuptools from 80.9.0 to 83.0.0 in /libs/langgraph (#8435)
• feat(langgraph): type v3 stream_events return and native projections (#8389)
• revert(langgraph): delete TracePolicy (#8403)
• feat(langgraph): drop tags from TracePolicy (#8402)
• feat(langgraph): expose trace_policy on add_node (#8362)
• chore(deps): bump mistune from 3.2.1 to 3.3.0 in /libs/langgraph (#8317)
• chore(deps): bump soupsieve from 2.8.1 to 2.8.4 in /libs/langgraph (#8318)
• chore(cli): allow langgraph-api versions up to 1.0.0 (#8319)

Commits

• 4134145 release(langgraph): 1.2.10 (#8462)
• 30c4d58 chore(deps): bump jupyterlab from 4.5.9 to 4.5.10 in /libs/langgraph (#8440)
• 1f2f88b chore(deps): bump js-yaml from 4.2.0 to 4.3.0 in /libs/cli/js-monorepo-exampl...
• 2708203 chore(deps): bump setuptools from 82.0.1 to 83.0.0 in /libs/cli (#8434)
• 9f1e40b chore(deps): bump setuptools from 80.9.0 to 83.0.0 in /libs/langgraph (#8435)
• 1e1ca88 feat(langgraph): type v3 stream_events return and native projections (#8389)
• 31f90df revert(langgraph): delete TracePolicy (#8403)
• f02c0f0 feat(langgraph): drop tags from TracePolicy (#8402)
• 8b39db3 feat(langgraph): expose trace_policy on add_node (#8362)
• 9578140 feat(checkpoint,checkpoint-postgres): add opt-in omit_expired to skip expired...
• Additional commits viewable in compare view

Updates uvicorn from 0.51.0 to 0.52.1

Release notes

Sourced from uvicorn's releases.

Version 0.52.1

Fixed

• Complete the closing handshake on server-initiated WebSocket closes in the websockets-sansio and wsproto implementations, waiting for the client's close reply with a 10 second timeout instead of resetting the connection (#3053)
• Add missing write flow control to the websockets-sansio implementation, preventing data truncation on server-initiated closes with large in-flight payloads (#3048)
• Handle connection loss while a WebSocket write is waiting on backpressure (#3050)
• Remove duplicate Content-Type and Content-Length headers from WebSocket denial responses on the websockets-sansio implementation, and deliver non-UTF-8 denial bodies intact (#3041)

Full Changelog: Kludex/uvicorn@0.52.0...0.52.1

Version 0.52.0

This release adds an experimental HTTP/1.1 implementation backed by zttp, a sans-IO HTTP parser I've been developing on the side: a core written in Zig, with bindings to Python. It has been running under a fuzzer for some weeks now, and has been through multiple rounds of security auditing.

It is still experimental, so don't put it in front of production traffic yet. Try it with --http zttp, and please send any feedback to the issue tracker.

Added

• Add an experimental zttp HTTP/1.1 implementation, selectable with --http zttp (#2979)

Fixed

• Keep non-ASCII WebSocket request headers intact with websockets 17.0, which encodes them with ISO-8859-1 (#3036)

Full Changelog: Kludex/uvicorn@0.51.0...0.52.0

Changelog

Sourced from uvicorn's changelog.

0.52.1 (August 1, 2026)

Fixed

• Complete the closing handshake on server-initiated WebSocket closes in the websockets-sansio and wsproto implementations, waiting for the client's close reply with a 10 second timeout instead of resetting the connection (#3053)
• Add missing write flow control to the websockets-sansio implementation, preventing data truncation on server-initiated closes with large in-flight payloads (#3048)
• Handle connection loss while a WebSocket write is waiting on backpressure (#3050)
• Remove duplicate Content-Type and Content-Length headers from WebSocket denial responses on the websockets-sansio implementation, and deliver non-UTF-8 denial bodies intact (#3041)

0.52.0 (July 29, 2026)

This release adds an experimental HTTP/1.1 implementation backed by zttp, a sans-IO HTTP parser I've been developing on the side: a core written in Zig, with bindings to Python. It has been running under a fuzzer for some weeks now, and has been through multiple rounds of security auditing.

It is still experimental, so don't put it in front of production traffic yet. Try it with --http zttp, and please send any feedback to the issue tracker.

Added

• Add an experimental zttp HTTP/1.1 implementation, selectable with --http zttp (#2979)

Fixed

• Keep non-ASCII WebSocket request headers intact with websockets 17.0, which encodes them with ISO-8859-1 (#3036)

Commits

• ee8e45c Version 0.52.1 (#3056)
• b57926d Remove duplicate content headers from WebSocket denial responses on websocket...
• 49de1b9 chore(deps): bump pymdown-extensions from 10.21.3 to 11.0 (#3042)
• 2f3fa3a Complete server-initiated closes in SansIO WebSocket protocols (#3053)
• 8c59d55 chore(deps): bump the github-actions group with 5 updates (#3054)
• e148451 Handle connection loss during WebSocket write backpressure (#3050)
• e16a69b Add missing write flow control to websockets-sansio (#3048)
• ef1dd44 Fold the zttp-only tests back into the HTTP test suite (#3046)
• 8f1b884 Version 0.52.0 (#3044)
• f6833db Add experimental zttp HTTP/1.1 protocol (#2979)
• Additional commits viewable in compare view

Updates langchain-openai from 1.3.4 to 1.4.3

Release notes

Sourced from langchain-openai's releases.

langchain-openai==1.4.3

Changes since langchain-openai==1.4.2

release(openai): 1.4.3 (#39485) fix(openai): filter invalid tool calls from content (#39366) chore(openai): update guidance for responses API for OpenAI-compatible providers (#39327) chore(openai): update docstring for include_response_headers (#39326)

langchain-openai==1.4.2

Changes since langchain-openai==1.4.1

release(openai): 1.4.2 (#39322) fix(openai): handle ContextWindowExceededError (#39300) chore: bump the minor-and-patch group across 3 directories with 7 updates (#39187) fix(openai): filter langchain-generated content block IDs (#39209) fix(openai): preserve Responses text options (#39204) fix(openai): redact MCP authorization (#39155) chore(model-profiles): refresh model profile data (#39050)

langchain-openai==1.4.1

Changes since langchain-openai==1.4.0

release(openai): 1.4.1 (#39045) feat(anthropic,fireworks,openai): support langsmith gateway through env var (#38742) fix(openai): correct gpt-5.3-chat-latest profile (#39009)

langchain-openai==1.4.0

Changes since langchain-openai==1.3.5

release(openai): 1.4.0 (#38983) chore: bump pillow from 12.2.0 to 12.3.0 in /libs/partners/openai (#38999) feat(core): add reasoning_effort as a standard chat model parameter (#38887) chore(model-profiles): refresh model profile data (#38797)

langchain-openai==1.3.5

Changes since langchain-openai==1.3.4

release(openai): 1.3.5 (#38785) feat(openai): support explicit prompt caching (#38762) chore(model-profiles): refresh model profile data (#38774)

Commits

• 56daacc release(openai): 1.4.3 (#39485)
• 24e8d2b chore(model-profiles): refresh model profile data (#39344)
• 9b4ef2a fix(openai): filter invalid tool calls from content (#39366)
• 9f738f5 fix(core): compat with pydantic 2.14 (#39328)
• d048fbe chore: bump h2 from 4.3.0 to 4.4.1 in /libs/langchain (#39325)
• a0a434c chore: bump h2 from 4.3.0 to 4.4.1 in /libs/langchain_v1 (#39324)
• c318abe fix(text-splitters): raise TypeError for non-dict, non-convertible input to R...
• 1499aa9 fix(core): stop StructuredPrompt from mutating caller kwargs (#39174)
• 0424e03 fix(core): preserve flat tool args schema for RootModel runnables (#39307)
• bc16168 fix(langchain): preserve history on SummarizationMiddleware summary failure...
• Additional commits viewable in compare view

Updates pydantic-settings from 2.14.2 to 2.15.0

Release notes

Sourced from pydantic-settings's releases.

v2.15.0

Highlights

Behavior changes

• case_sensitive now applies to init kwargs and config-file sources (#900). InitSettingsSource and the JSON/TOML/YAML config sources previously ignored case_sensitive. Since it defaults to False, case-insensitive matching is now the default for these sources — e.g. Settings(TeSt=...) now populates a test field where it previously did not. Nested keys are still matched case-sensitively.
• Fields with unresolved forward references now emit a warning (#901). Settings sources can silently fail to resolve such fields; they now raise IncompleteFieldDefinitionWarning telling you to call model_rebuild(). If you have filterwarnings = error configured, this may surface as a new failure.
• Non-JSON env values for strict fields now raise ValidationError (#926) instead of a less specific error.

New features

• Show environment variable names in CLI help via cli_show_env_vars=True (#860), so generated --help output doubles as configuration documentation.
• PYDANTIC_SETTINGS_DEBUG for debugging settings resolution (#906, #913). Set it to a truthy value with DEBUG logging enabled to see each source's contribution in priority order, which source won for each value, and which env_file/secret files were probed, loaded, or skipped — the long-standing "why isn't my .env being picked up?" question.
• toml_table_header for regular TOML files (#882, #886, #887), letting you root settings at a nested table in any TOML file, not just pyproject.toml.
• Traversable support for JSON/TOML/YAML file sources (#902), so you can load config packaged inside a distribution — including files inside a zip or wheel — via importlib.resources.files(...) without casting to Path.
• GCP: project_id can come from an earlier settings source (#878), rather than only from the constructor or GOOGLE_CLOUD_PROJECT.

Bug fixes

• Fix env vars not loading on Windows with case_sensitive=True (#894). Windows upper-cases os.environ keys, so fields raised Field required instead of picking up their values.
• Read secret files as UTF-8 instead of the platform locale encoding (#917). On Windows code pages such as cp1252 this silently corrupted non-ASCII secrets.
• Fix AliasPath on nested model fields not JSON-decoding env values (#898).
• Fix case-insensitive matching for optional nested models (#905).
• Fix dotenv extras being wrongly claimed by a complex field sharing a name prefix (#912) — e.g. dbx_token being swallowed by a db: dict field.
• Fix nested_model_default_partial_update=True corrupting discriminated unions (#876).
• Fix Secret subclasses crashing when loaded from the environment (#920).
• Fix enum names not parsing through nested annotations such as Optional[Annotated[MyEnum, ...]] with env_parse_enums=True (#910).
• An empty yaml_config_section now falls back to defaults instead of raising AttributeError: 'NoneType' object has no attribute 'keys' (#914).
• NestedSecretsSettingsSource no longer follows symlinks pointing outside secrets_dir (#889).
• GCP: skip the list_secrets call when case_sensitive=True (#862), lowering the required IAM permissions to just roles/secretmanager.secretAccessor.
• AWS: types-boto3[secretsmanager] is no longer required at runtime (#880).

Documentation

• Document JSON parsing of complex env values, plus a comma-separated-values recipe (#919).
• Recommend an async settings loading pattern (#908).
• Clarify behavior when an unprefixed value is present in a dotenv file (#895).
• Clarify environment variable helper descriptions (#867) and fix assorted typos (#904).

What's Changed

• Update documentation link for Pydantic settings by @​hramezani in pydantic/pydantic-settings#863
• Bump the python-packages group with 4 updates by @​dependabot[bot] in pydantic/pydantic-settings#865
• docs: clarify environment variable helper descriptions by @​vip892766gma in pydantic/pydantic-settings#867
• Bump the python-packages group with 4 updates by @​dependabot[bot] in pydantic/pydantic-settings#870
• Bump the python-packages group with 4 updates by @​dependabot[bot] in pydantic/pydantic-settings#875
• Skip list_secrets call when case_sensitive=True by @​ecerulm in pydantic/pydantic-settings#862
• GoogleSecretManagerSettingsSource: read project_id from previous sources by @​ecerulm in pydantic/pydantic-settings#878

... (truncated)

Commits

• f725ca1 Prepare release 2.15.0 (#930)
• 28f35c2 Bump the python-packages group with 4 updates (#929)
• 9056db0 test: move function-local imports to the top of test modules (#927)
• f077e3a fix: raise ValidationError for non-JSON env values on strict fields (#926)
• ae25d70 fix: treat Secret subclasses as non-complex fields (#716) (#920)
• 798dcea Bump the python-packages group with 4 updates (#924)
• a190041 Bump the github-actions group with 4 updates (#925)
• 5d93332 Bump the python-packages group with 4 updates (#921)
• d2fdeda fix: read secret files as UTF-8 instead of the locale encoding (#917)
• 2256a4e Bump the python-packages group with 3 updates (#915)
• Additional commits viewable in compare view

Updates openinference-instrumentation-langchain from 0.1.67 to 0.1.70

Release notes

Sourced from openinference-instrumentation-langchain's releases.

python-openinference-instrumentation-langchain: v0.1.70

0.1.70 (2026-08-07)

Features

• langchain: Add Finish Reason Attribute (#3454) (51c459d)

Bug Fixes

• bump openinference-semantic-conventions minimum to >=0.1.31 (#3474) (5398a80)

python-openinference-instrumentation-langchain: v0.1.69

0.1.69 (2026-08-04)

Bug Fixes

• langchain: map unknown run types (parser) to CHAIN instead of UNKNOWN (#3486) (84df77e)

python-openinference-instrumentation-langchain: v0.1.68

0.1.68 (2026-07-30)

Bug Fixes

• langchain: accept LangGraph interrupt and resume callbacks (#3308) (c5bbce6)

Documentation

• link Arize AX alongside Phoenix across all READMEs (#3330) (0433526)

Commits

• 5b9114c chore: release main (#3495)
• 3ae875d chore(pydantic-ai): restore genai-prices compatibility ceiling (#3520)
• d4a4a6a fix(openllmetry): map retrieval task spans (#3424)
• 98e30b5 chore(deps): update anthropic requirement from <0.117 to <0.121 in /python/in...
• bbdcfd2 fix(agno): guard model_dump_json on non-pydantic run response content (#3270)
• 1f57c59 chore(deps): update websockets requirement from <17.0,>=13.1 to >=13.1,<18.0 ...
• 7af2f99 chore(deps): update genai-prices requirement from <0.1 to <0.2 in /python/ins...
• 2b2d78f feat(ag2): add first-class instrumentation (#3379)
• 0406932 feat(cohere): add Cohere instrumentor (#3349)
• 5dc8cbd chore(deps): update opentelemetry-instrumentation requirement from >=0.57b0 t...
• Additional commits viewable in compare view

Updates opentelemetry-exporter-otlp from 1.43.0 to 1.44.0

Release notes

Sourced from opentelemetry-exporter-otlp's releases.

Version 1.44.0/0.65b0

Added

• opentelemetry-docker-tests: Refactor Docker tests to properly validate contents of exported telemetry (#5220)
• opentelemetry-exporter-otlp-common: add shared package for common OTLP utilities (#5252)
• opentelemetry-sdk: add MissingDependencyError exception for declarative configuration and use it for missing optional dependency errors (#5265)
• opentelemetry-sdk: Add ability to refresh process dependent Resource attributes (#5280)
• opentelemetry-sdk: add force_flush method to LogRecordExporter ABC (#5294)
• opentelemetry-sdk: Make it possible to limit the size of stored spans in InMemorySpanExporter (#5296)
• opentelemetry-sdk: add log record limits environment variables OTEL_LOGRECORD_ATTRIBUTE_COUNT_LIMIT and OTEL_LOGRECORD_ATTRIBUTE_VALUE_LENGTH_LIMIT (#5300)
• opentelemetry-sdk: add support for file exporter with declarative config (#5311)
• opentelemetry-sdk: expose SynchronousMultiLogRecordProcessor and ConcurrentMultiLogRecordProcessor publicly (#5327)
• opentelemetry-sdk: point the declarative configuration package README at the shared language support status matrix in the opentelemetry-configuration repo, so Python conformance status lives alongside the other languages instead of being duplicated per language SDK. (#5347)
• opentelemetry-sdk: document that Python-implementation extensions (OTEL_PYTHON_* variables) are bypassed when OTEL_CONFIG_FILE is set. The env-var initialisation path is skipped entirely in favour of the declarative file; honouring these alongside a config file is tracked as a follow-up. (#5353)
• opentelemetry-sdk: wire id_generator from declarative configuration to TracerProvider (#5363)
• opentelemetry-sdk: Add support for activating instrumentors from a declarative configuration file via the instrumentation/development.python section. Instrumentors can declare a configuration attribute to have their options validated through the same type-coercion pipeline used for SDK component configuration. (#5372)
• opentelemetry-sdk: add record_min_max option to ExponentialBucketHistogramAggregation, matching the option already available on ExplicitBucketHistogramAggregation and required by the specification (#5377)

Changed

• opentelemetry-sdk: revert BoundedAttributes RLock back to Lock (#5329)
• docs: update logs example to use opentelemetry-instrumentation-logging (#5344)
• opentelemetry-sdk: bump declarative configuration schema to v1.1.0 (#5345)
• opentelemetry-configuration: declarative configuration moves from opentelemetry.sdk._configuration into the new public opentelemetry-configuration package (opentelemetry.configuration namespace), published experimentally. opentelemetry-sdk[file-configuration] continues to work as an alias that installs opentelemetry-configuration alongside the SDK. (#5356)
• opentelemetry-api: remove env carrier environment snapshot caching, you now have to pass explicitly the mapping where to get the environment variables from as the EnvironmentGetter.get first argument. (#5366)
• opentelemetry-semantic-conventions: bump to 1.42.0 (#5410)
• opentelemetry-semantic-conventions: bump to 1.43.0 (#5413)

Removed

• opentelemetry-api, opentelemetry-sdk: Removed deprecated Events API/SDK. Use LogRecord with the event_name field set instead. (#5293)

Fixed

• opentelemetry-sdk: Optimize LogRecord memory in BatchLogRecordProcessor by clearing the Context object before buffering. This is a potentially breaking change for custom log exporters that access context from the exported ReadableLogRecord, as the context will now be an empty Context() instead of the original. (#4977)
• opentelemetry-sdk: drop non-finite measurements (NaN and Inf) at the instrument level to prevent permanent aggregation poisoning (#5336)
• opentelemetry-sdk: raise ValueError when ExplicitBucketHistogramAggregation boundaries are not strictly increasing or finite (#5340)
• opentelemetry-sdk: ProcessResourceDetector no longer collects or emits process.command_args and process.command_line by default since the values are not sanitized and may contain sensitive information. Users who depend on these resource attributes must pass include_command_args=True. (#5364)
• opentelemetry-exporter-otlp-proto-http: fix the OTLP HTTP metric exporter self-observability metrics over-counting data points when max_export_batch_size splits a batch; each split now reports its own data-point count instead of the whole-batch count. (#5370)
• opentelemetry-api: Prevent in-place mutation of Context via inherited dict methods (#5399)

Changelog

Sourced from opentelemetry-exporter-otlp's changelog.

Version 1.44.0/0.65b0 (2026-07-16)

Added

• opentelemetry-docker-tests: Refactor Docker tests to properly validate contents of exported telemetry (#5220)
• opentelemetry-exporter-otlp-common: add shared package for common OTLP utilities (#5252)
• opentelemetry-sdk: add MissingDependencyError exception for declarative configuration and use it for missing optional dependency errors (#5265)
• opentelemetry-sdk: Add ability to refresh process dependent Resource attributes (#5280)
• opentelemetry-sdk: add force_flush method to LogRecordExporter ABC (#5294)
• opentelemetry-sdk: Make it possible to limit the size of stored spans in InMemorySpanExporter (#5296)
• opentelemetry-sdk: add log record limits environment variables OTEL_LOGRECORD_ATTRIBUTE_COUNT_LIMIT and OTEL_LOGRECORD_ATTRIBUTE_VALUE_LENGTH_LIMIT (#5300)
• opentelemetry-sdk: add support for file exporter with declarative config (#5311)
• opentelemetry-sdk: expose SynchronousMultiLogRecordProcessor and ConcurrentMultiLogRecordProcessor publicly (#5327)
• opentelemetry-sdk: point the declarative configuration package README at the shared language support status matrix in the opentelemetry-configuration repo, so Python conformance status lives alongside the other languages instead of being duplicated per language SDK. (#5347)
• opentelemetry-sdk: document that Python-implementation extensions (OTEL_PYTHON_* variables) are bypassed when OTEL_CONFIG_FILE is set. The env-var initialisation path is skipped entirely in favour of the declarative file; honouring these alongside a config file is tracked as a follow-up. (#5353)
• opentelemetry-sdk: wire id_generator from declarative configuration to TracerProvider (#5363)
• opentelemetry-sdk: Add support for activating instrumentors from a declarative configuration file via the instrumentation/development.python section. Instrumentors can declare a configuration attribute to have their options validated through the same type-coercion pipeline used for SDK component configuration. (#5372)

... (truncated)

Commits

• 53a5a40 Prepare release 1.44.0/0.65b0 (#5422)
• d9f34e7 Fixup eachdist.py handling of package names (#5417)
• d10f472 opentelemetry-semantic-conventions: Bump to 1.43.0 (#5413)
• ae8feeb Update otelbot token workflows to use client IDs (#5404)
• 67a2abd Fix Context in-place mutability bypass via inherited dict methods (#5399)
• 87baad9 Bump semconv to 1.42.0 (#5410)
• 23dc0b2 opentelemetry-sdk: add 'force_flush' method to LogRecordExporter ABC (#5294)
• bec55fd opentelemetry-sdk: expose SynchronousMultiLogRecordProcessor and ConcurrentMu...
• 55d0b7a opentelemetry-sdk: Add ability to refresh process sensitive Resource attribut...
• 6115db2 opentelemetry-sdk: add log record limits environment variables (#5300)
• Additional commits viewable in compare view

Updates starlette from 1.3.1 to 1.6.0

Release notes

Sourced from starlette's releases.

Version 1.6.0

What's Changed

• Add max_body_size to Starlette and route classes by @​Kludex in Kludex/starlette#3431
• Expose http.response.debug info via response extensions by @​y2kbugger in Kludex/starlette#3130

New Contributors

• @​y2kbugger made their first contribution in Kludex/starlette#3130

Full Changelog: Kludex/starlette@1.5.1...1.6.0

Version 1.5.1

What's Changed

• Reject inverted single-byte Range like bytes=5-4 by @​nikolauspschuetz in encode/starlette#3389
• Limit FileResponse to 100 ranges by @​Kludex in encode/starlette#3430

Full Changelog: Kludex/starlette@1.5.0...1.5.1

Version 1.5.0

This release is all about giving GZipMiddleware some love. 🗜️

What's Changed

• Add exclude_content_types parameter to GZipMiddleware by @​Kludex in encode/starlette#3418
• Flush GZip output for each streamed chunk by @​Kludex in encode/starlette#3419
• Skip compression of partial responses in GZipMiddleware by @​Kludex in encode/starlette#3420
• Expand default excluded content types in GZipMiddleware by @​Kludex in encode/starlette#3421

Full Changelog: Kludex/starlette@1.4.1...1.5.0

Version 1.4.1

What's Changed

• Default thread_minimum_size in GZipResponder by @​Kludex in Kludex/starlette#3415

Full Changelog: Kludex/starlette@1.4.0...1.4.1

Version 1.4.0

What's Changed

• Lazily allocate GZipMiddleware compression resources by @​Kludex in Kludex/starlette#3407
• Use zlib.compressobj instead of GzipFile in GZipMiddleware by @​Kludex in Kludex/starlette#3411
• Offload large GZip compression by @​Kludex in Kludex/starlette#3410

New Contributors

• @​benberryallwood made their first contribution in Kludex/starlette#3334
• @​lkk7 made their first contribution in Kludex/starlette#3359

Full Changelog: Kludex/starlette@1.3.1...1.4.0

Changelog

Sourced from starlette's changelog.

1.6.0 (August 8, 2026)

Added

• Add max_body_size to Starlette and route classes #3431.
• Expose http.response.debug information via response extensions #3130.

1.5.1 (August 8, 2026)

Fixed

• Reject inverted single-byte ranges in FileResponse #3389.
• Limit FileResponse to 100 ranges #3430.

1.5.0 (August 8, 2026)

Added

• Add exclude_content_types parameter to GZipMiddleware #3418.

Changed

• Expand default excluded content types in GZipMiddleware #3421.

Fixed

• Flush GZip output for each streamed chunk #3419.
• Skip compression of partial responses in GZipMiddleware #3420.

1.4.1 (August 5, 2026)

Fixed

• Default thread_minimum_size to 128 KiB in GZipResponder, keeping it usable without the new keyword argument #3415.

1.4.0 (August 5, 2026)

Added

• Offload large GZip compression to a worker thread, keeping the event loop responsive. GZipMiddl...

  Description has been truncated