Skip to content

chore(deps): weekly dependency update - #966

Merged
Abhijeet Prasad (AbhiPrasad) merged 7 commits into
mainfrom
deps/weekly-update-2026-10-19
Oct 19, 2026
Merged

Abhijeet Prasad (AbhiPrasad) merged 7 commits into
mainfrom
deps/weekly-update-2026-10-19

Conversation

@github-actions

Copy link
Copy Markdown
Contributor

Automated weekly dependency update via python scripts/update-matrix-latest.py, advancing the uv exclude-newer cutoff, and uv lock --upgrade.

⚠️ Provider SDK packages changed. A human needs to re-record cassettes locally before merging.

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 19, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ⚠️ Failed 2026-10-19T06:05:46.538956Z 6731878 PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

The TypeSafe matrix tested 0.7.4 as its older version, but the
integration declares min_version 0.6.0, so the supported floor went
untested. Pin the matrix to 0.6.0 and re-record its cassettes.

TypeSafe 0.6.0 uses msgspec and does not install pydantic, so import
BaseModel inside the box/image test, which already skips below 0.7.5.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Re-record the latest cassettes for the minor provider bumps in this
update: openai 3.35.1, anthropic 1.15.0, openai-agents 0.24.0, litellm
1.106.0, strands-agents 1.61.1, pydantic-ai 2.57.0, google-genai 2.31.0
and google-adk 2.12.0. dspy is re-recorded too because its session
installs the litellm latest pin.

File lists are unchanged. Cassettes that cannot be re-recorded against
the live APIs keep their previous recordings.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
sessions_by_integration only scanned functions that call _run_tests, so
it missed the sessions registered through _register_matrix_sessions
(ai_sdk, anthropic, cohere, bedrock_runtime, instructor and openai).
Their cassettes were reported as unused, and --clean would delete them.

Also read the name, tests and env of each spec passed to
_register_matrix_sessions.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
litellm 1.106.0 imports mcp whenever completion() gets tools, but only
declares it in the mcp and proxy extras
(BerriAI/litellm#46045). Without it, the tool
call and Responses API tests fail with ModuleNotFoundError.

Add mcp 2.x to the test-litellm group. It conflicts with test-mcp-v1,
which pins mcp 1.x for older provider versions, so declare the groups
as conflicting.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
The locked test-livekit-agents group pinned the 1.3.x plugins and capped
OpenTelemetry below 1.39 for every version. Installed after the matrix
pin, it downgraded livekit-agents to 1.3.5, so both the latest and 1.3.1
sessions ran 1.3.5. With livekit-agents 1.8.8 the downgrade also left
OpenTelemetry packages behind, and the session failed `uv pip check`.

Split the group by version. Latest gets plugin floors so the lock stays
on the 1.8 line. The new test-livekit-agents-1-3 group pins 1.3.1 and
keeps the OpenTelemetry caps. Install the group before the matrix pin
so the matrix version always wins. This also removes the uninstall
workaround for orphaned exporters.

Running the real versions exposed two wrong test assumptions:
- Silero <1.3.4 resets speech_duration to 0 before emitting
  END_OF_SPEECH, so only assert it from 1.3.4 on.
- LiveKit only reports STT tokens for streamed recognition, so only
  check them on streamed STT spans.

Re-record the latest cassettes against livekit-agents 1.8.8.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
google-adk 2.12.0 requires Python >=3.11, so installing the latest pin
fails on 3.10. That broke test_google_adk(latest) in the 3.10 nox shards
and the pylint session in static_checks (3.10).

Mark the latest session as requiring 3.11, skip it in test_google_adk
when incompatible, and skip the latest install in pylint on 3.10. The
lint group still installs a 3.10-compatible google-adk, so the ADK
integration is still linted there.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@AbhiPrasad
Abhijeet Prasad (AbhiPrasad) merged commit 9be379b into main Oct 19, 2026
98 checks passed
@AbhiPrasad
Abhijeet Prasad (AbhiPrasad) deleted the deps/weekly-update-2026-10-19 branch October 19, 2026 17:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant