chore(deps): Bump the minor-and-patch group across 1 directory with 19 updates

[dependabot]

Bumps the minor-and-patch group with 18 updates in the /a2a/weather_service directory:

Package	From	To
a2a-sdk	1.1.0	1.1.2
langgraph	1.2.9	1.2.11
langchain-core	1.4.9	1.6.1
langchain-openai	1.3.5	1.6.0
pydantic-settings	2.14.2	2.15.0
langchain-mcp-adapters	0.3.0	0.3.2
opentelemetry-exporter-otlp	1.43.0	1.44.0
opentelemetry-instrumentation-openai	0.62.1	0.62.3
openinference-semantic-conventions	0.1.30	0.1.33
openinference-instrumentation-langchain	0.1.67	0.1.73
langgraph-checkpoint	4.1.1	4.2.0
starlette	1.3.1	1.6.0
aiohttp	3.14.1	3.14.3
gitpython	3.1.51	3.1.61
langsmith	0.10.3	0.11.2
mako	1.3.12	1.4.1
marshmallow	4.3.0	4.3.1
python-dotenv	1.2.2	1.2.3

Updates a2a-sdk from 1.1.0 to 1.1.2

Release notes

Sourced from a2a-sdk's releases.

v1.1.2

1.1.2 (2026-07-20)

Features

• server: add aclose() to drain ActiveTask background tasks (#1101) (#1105) (9801f46)

Bug Fixes

• agent_execution: resolve ActiveTask 'destroyed but pending' warning during teardown (#1122) (d19c4d2)
• persist early producer failure as FAILED with originating message (#1106) (4e3d724)

v1.1.1

1.1.1 (2026-07-15)

Bug Fixes

• server: improve Swagger /docs example annotations for A2A routes (#1092) (46b292b)

Miscellaneous Chores

• grpc: eliminate third-party grpcio-status dependency (#1130) (723880e)
• http: eliminate httpx-sse dependency (#1132) (0d82ab9)

Changelog

Sourced from a2a-sdk's changelog.

1.1.2 (2026-07-20)

Features

• server: add aclose() to drain ActiveTask background tasks (#1101) (#1105) (9801f46)

Bug Fixes

• agent_execution: resolve ActiveTask 'destroyed but pending' warning during teardown (#1122) (d19c4d2)
• persist early producer failure as FAILED with originating message (#1106) (4e3d724)

1.1.1 (2026-07-15)

Bug Fixes

• server: improve Swagger /docs example annotations for A2A routes (#1092) (46b292b)

Miscellaneous Chores

• grpc: eliminate third-party grpcio-status dependency (#1130) (723880e)
• http: eliminate httpx-sse dependency (#1132) (0d82ab9)

Commits

• 3e6fa6a chore(main): release 1.1.2 (#1139)
• 9801f46 feat(server): add aclose() to drain ActiveTask background tasks (#1101) (#1105)
• d19c4d2 fix(agent_execution): resolve ActiveTask 'destroyed but pending' warning duri...
• 4e3d724 fix: persist early producer failure as FAILED with originating message (#1106)
• 86c6b0d chore(main): release 1.1.1 (#1103)
• 0d82ab9 refactor(http): eliminate third-party httpx-sse dependency (#1132)
• 723880e refactor(grpc): remove grpcio-status dependency (#1130)
• 343373b test: expand itk scenarios with ts java and rust agents (#1129)
• e7eafe3 chore(deps): bump cryptography from 48.0.0 to 48.0.1 (#1109)
• 46b292b fix(server): improve Swagger /docs example annotations for A2A routes (#1092)
• Additional commits viewable in compare view

Updates langgraph from 1.2.9 to 1.2.11

Release notes

Sourced from langgraph's releases.

langgraph==1.2.11

Changes since 1.2.10

• release(langgraph): 1.2.11 (#8595)
• feat(langgraph): expose trace_policy on add_node (#8523)
• chore(deps): bump the minor-and-patch group across 1 directory with 7 updates (#8533)
• chore(deps): bump the minor-and-patch group across 1 directory with 5 updates (#8532)
• release(checkpoint-postgres): 3.1.2 (#8565)
• release(checkpoint): 4.2.0 (#8563)
• fix(checkpoint): collect writes at plain-value seed in delta channel history (#8526)
• chore: enforce PLC0415 in tests for the remaining packages (#8547)
• test(checkpoint-postgres,checkpoint-sqlite): run the conformance suite (#8537)
• chore: enable RUF100 and clear unused noqa directives (#8546)
• chore(deps-dev): bump types-requests from 2.33.0.20260518 to 2.33.0.20260712 in /libs/langgraph (#8502)
• chore(deps): bump cryptography from 48.0.1 to 50.0.0 in /libs/langgraph (#8528)
• release(checkpoint-sqlite): 3.1.1 (#8481)
• release(checkpoint-postgres): 3.1.1 (#8480)

langgraph==1.2.10

Changes since 1.2.9

• release(langgraph): 1.2.10 (#8462)
• chore(deps): bump jupyterlab from 4.5.9 to 4.5.10 in /libs/langgraph (#8440)
• chore(deps): bump setuptools from 80.9.0 to 83.0.0 in /libs/langgraph (#8435)
• feat(langgraph): type v3 stream_events return and native projections (#8389)
• revert(langgraph): delete TracePolicy (#8403)
• feat(langgraph): drop tags from TracePolicy (#8402)
• feat(langgraph): expose trace_policy on add_node (#8362)
• chore(deps): bump mistune from 3.2.1 to 3.3.0 in /libs/langgraph (#8317)
• chore(deps): bump soupsieve from 2.8.1 to 2.8.4 in /libs/langgraph (#8318)
• chore(cli): allow langgraph-api versions up to 1.0.0 (#8319)

Commits

• 644815f release(langgraph): 1.2.11 (#8595)
• 7d6b579 feat(langgraph): expose trace_policy on add_node (#8523)
• d56666f chore(deps): bump the minor-and-patch group across 1 directory with 7 updates...
• 6a2822d chore(deps): bump the minor-and-patch group across 1 directory with 5 updates...
• fde3068 release(checkpoint-postgres): 3.1.2 (#8565)
• f55e772 release(checkpoint): 4.2.0 (#8563)
• a90ab44 fix(checkpoint): collect writes at plain-value seed in delta channel history ...
• ea5f9cc chore: enforce PLC0415 in tests for the remaining packages (#8547)
• 36a505a test(checkpoint-postgres,checkpoint-sqlite): run the conformance suite (#8537)
• d569e18 fix(checkpoint-postgres): find plain-value seeds when walking delta history (...
• Additional commits viewable in compare view

Updates langchain-core from 1.4.9 to 1.6.1

Release notes

Sourced from langchain-core's releases.

langchain-core==1.6.1

Changes since langchain-core==1.6.0

revert: release(core): 1.6.2 (#39971) release(core): 1.6.2 (#39967) fix(core): shore up indexing in genai v1 streaming content (#39964) fix(core): make StructuredTool JSON-serializable (#39631) chore(deps): bump minor and patch dependencies (#39869) release(core): 1.6.1 (#39832) feat(core): propagate gateway information on error path (#39829)

langchain-core==1.6.0

Changes since langchain-core==1.5.6

release(core): 1.6.0 (#39760) fix(core): resolve postponed annotations in StructuredTool._injected_args_keys (#39602) feat(core): add standard model exception types (#39538) fix(core): allow deserializing RunnablePick (#39753) fix(core): make convert_to_openai_function handle callables and non-dict mappings (#39750) fix(core): make subprocess and temporary file tests portable on Windows (#39664) fix(core): fail fast when tool schemas can't resolve forward refs during serialization (#39570) test(core): avoid version-dependent runnable snapshots (#39705) fix(core): require all nested properties for strict tool schemas (#39306) fix(core): remove stale sync-stream xfail [closes #39720] (#39723) perf(core): Lazily import transformers (#38037) fix(core): accept non-dict Mapping values in mustache templates (#39680) docs(core): clarify Runnable pipe coercion [closes #39075] (#39707) fix(core): finalize chain-group runs on BaseException (#39699)

langchain-core==1.5.6

Changes since langchain-core==1.5.5

chore(core): release 1.5.6 (#39704) feat(core): incorporate gateway metadata to traces (#39703)

langchain-core==1.5.5

Changes since langchain-core==1.5.4

release(core): 1.5.5 (#39655) fix(core): make abatch_iterate consistent with batch_iterate for None and zero size (#39367) fix(core): respect pydantic aliases when validating tool inputs (#39572) fix(core): issues in merging chunks (#39535) fix(core): handle v1 base model validation in async path (#39576) fix(core): handle tool descriptions for infer_schema=False (#39573) fix(core): clear usage metadata callback on exceptions in context manager (#39616) fix(core): handle falsy LLM and chat model caches (#39283) chore(core): add httpx as an explicit dep (#39612) fix(core): preserve non-str/non-dict items in DictPromptTemplate list values (#39588) fix(core): raise ValueError when explicit tool_outputs length mismatches tool_calls in tool_example_to_messages (#39142) fix(core): guard malformed Anthropic content blocks (#38670)

... (truncated)

Commits

• 4fe9d30 chore(openai): fix tests (#39972)
• 8fa38dc revert: release(core): 1.6.2 (#39971)
• 122030d release(core): 1.6.2 (#39967)
• 7d4b42b release(langchain): 1.3.18 (#39966)
• 4a66e35 fix(langchain): preserve content-block shape in PIIMiddleware redaction (#39894)
• 38e2113 fix(core): shore up indexing in genai v1 streaming content (#39964)
• 13b1b2f fix(core): make StructuredTool JSON-serializable (#39631)
• 3b3b308 release(anthropic): 1.7.0 (#39963)
• e3f6adf feat(anthropic): support top-level param for skills via container; `updates...
• c253f54 fix(openai): correct reasoning_effort_levels for gpt-5 and gpt-5.1 profiles...
• Additional commits viewable in compare view

Updates langchain-openai from 1.3.5 to 1.6.0

Release notes

Sourced from langchain-openai's releases.

langchain-openai==1.6.0

Changes since langchain-openai==1.5.2

release(openai): 1.6.0 (#39762) feat(core): add standard model exception types (#39538) fix(openai): raise clear error on unexpected response type in _create_chat_result (#39731)

langchain-openai==1.5.2

Changes since langchain-openai==1.5.1

release(openai): 1.5.2 (#39719) fix(openai): preserve reasoning item boundaries (#39278) release(openai): 1.5.2a1 (#39709) feat(openai): extract gateway metadata from response headers when available (#39706) chore(openai): update snapshots (#39657) fix(openai): support o-series models in get_num_tokens_from_messages (#38710)

langchain-openai==1.5.2a1

Initial release

release(openai): 1.5.2a1 (#39709) feat(openai): extract gateway metadata from response headers when available (#39706) chore(openai): update snapshots (#39657) fix(openai): support o-series models in get_num_tokens_from_messages (#38710) release(openai): 1.5.1 (#39653) fix(openai): preserve streamed encrypted reasoning (#39635) chore(infra): support langsmith gateway in CI (#39651) release(openai): 1.5.0 (#39629) feat(openai): support openai 3.0 SDK (#39613) chore(partners): bump langgraph floor in openai and huggingface lockfiles (#39617) release(openai): 1.4.3 (#39485) fix(openai): filter invalid tool calls from content (#39366) chore(openai): update guidance for responses API for OpenAI-compatible providers (#39327) chore(openai): update docstring for include_response_headers (#39326) release(openai): 1.4.2 (#39322) fix(openai): handle ContextWindowExceededError (#39300) chore: bump the minor-and-patch group across 3 directories with 7 updates (#39187) fix(openai): filter langchain-generated content block IDs (#39209) fix(openai): preserve Responses text options (#39204) fix(openai): redact MCP authorization (#39155) chore(model-profiles): refresh model profile data (#39050) release(openai): 1.4.1 (#39045) feat(anthropic,fireworks,openai): support langsmith gateway through env var (#38742) fix(openai): correct gpt-5.3-chat-latest profile (#39009) release(openai): 1.4.0 (#38983) chore: bump pillow from 12.2.0 to 12.3.0 in /libs/partners/openai (#38999) feat(core): add reasoning_effort as a standard chat model parameter (#38887) chore(model-profiles): refresh model profile data (#38797) release(openai): 1.3.5 (#38785) feat(openai): support explicit prompt caching (#38762)

... (truncated)

Commits

• 3478c28 release(anthropic): 1.6.0 (#39763)
• 420dfc9 release(openai): 1.6.0 (#39762)
• 85602c3 release(core): 1.6.0 (#39760)
• 5c3538e fix(core): resolve postponed annotations in `StructuredTool._injected_args_ke...
• 9984a87 feat(core): add standard model exception types (#39538)
• b3e9eef chore(model-profiles): refresh model profile data (#39751)
• ded2a1f fix(core): allow deserializing RunnablePick (#39753)
• 04ae744 fix(core): make convert_to_openai_function handle callables and non-dict ma...
• 37f2662 feat(langchain): support custom token_counter in ContextEditingMiddleware (#3...
• 2019bf5 fix(openai): raise clear error on unexpected response type in `_create_chat_r...
• Additional commits viewable in compare view

Updates pydantic-settings from 2.14.2 to 2.15.0

Release notes

Sourced from pydantic-settings's releases.

v2.15.0

Highlights

Behavior changes

• case_sensitive now applies to init kwargs and config-file sources (#900). InitSettingsSource and the JSON/TOML/YAML config sources previously ignored case_sensitive. Since it defaults to False, case-insensitive matching is now the default for these sources — e.g. Settings(TeSt=...) now populates a test field where it previously did not. Nested keys are still matched case-sensitively.
• Fields with unresolved forward references now emit a warning (#901). Settings sources can silently fail to resolve such fields; they now raise IncompleteFieldDefinitionWarning telling you to call model_rebuild(). If you have filterwarnings = error configured, this may surface as a new failure.
• Non-JSON env values for strict fields now raise ValidationError (#926) instead of a less specific error.

New features

• Show environment variable names in CLI help via cli_show_env_vars=True (#860), so generated --help output doubles as configuration documentation.
• PYDANTIC_SETTINGS_DEBUG for debugging settings resolution (#906, #913). Set it to a truthy value with DEBUG logging enabled to see each source's contribution in priority order, which source won for each value, and which env_file/secret files were probed, loaded, or skipped — the long-standing "why isn't my .env being picked up?" question.
• toml_table_header for regular TOML files (#882, #886, #887), letting you root settings at a nested table in any TOML file, not just pyproject.toml.
• Traversable support for JSON/TOML/YAML file sources (#902), so you can load config packaged inside a distribution — including files inside a zip or wheel — via importlib.resources.files(...) without casting to Path.
• GCP: project_id can come from an earlier settings source (#878), rather than only from the constructor or GOOGLE_CLOUD_PROJECT.

Bug fixes

• Fix env vars not loading on Windows with case_sensitive=True (#894). Windows upper-cases os.environ keys, so fields raised Field required instead of picking up their values.
• Read secret files as UTF-8 instead of the platform locale encoding (#917). On Windows code pages such as cp1252 this silently corrupted non-ASCII secrets.
• Fix AliasPath on nested model fields not JSON-decoding env values (#898).
• Fix case-insensitive matching for optional nested models (#905).
• Fix dotenv extras being wrongly claimed by a complex field sharing a name prefix (#912) — e.g. dbx_token being swallowed by a db: dict field.
• Fix nested_model_default_partial_update=True corrupting discriminated unions (#876).
• Fix Secret subclasses crashing when loaded from the environment (#920).
• Fix enum names not parsing through nested annotations such as Optional[Annotated[MyEnum, ...]] with env_parse_enums=True (#910).
• An empty yaml_config_section now falls back to defaults instead of raising AttributeError: 'NoneType' object has no attribute 'keys' (#914).
• NestedSecretsSettingsSource no longer follows symlinks pointing outside secrets_dir (#889).
• GCP: skip the list_secrets call when case_sensitive=True (#862), lowering the required IAM permissions to just roles/secretmanager.secretAccessor.
• AWS: types-boto3[secretsmanager] is no longer required at runtime (#880).

Documentation

• Document JSON parsing of complex env values, plus a comma-separated-values recipe (#919).
• Recommend an async settings loading pattern (#908).
• Clarify behavior when an unprefixed value is present in a dotenv file (#895).
• Clarify environment variable helper descriptions (#867) and fix assorted typos (#904).

What's Changed

• Update documentation link for Pydantic settings by @​hramezani in pydantic/pydantic-settings#863
• Bump the python-packages group with 4 updates by @​dependabot[bot] in pydantic/pydantic-settings#865
• docs: clarify environment variable helper descriptions by @​vip892766gma in pydantic/pydantic-settings#867
• Bump the python-packages group with 4 updates by @​dependabot[bot] in pydantic/pydantic-settings#870
• Bump the python-packages group with 4 updates by @​dependabot[bot] in pydantic/pydantic-settings#875
• Skip list_secrets call when case_sensitive=True by @​ecerulm in pydantic/pydantic-settings#862
• GoogleSecretManagerSettingsSource: read project_id from previous sources by @​ecerulm in pydantic/pydantic-settings#878

... (truncated)

Commits

• f725ca1 Prepare release 2.15.0 (#930)
• 28f35c2 Bump the python-packages group with 4 updates (#929)
• 9056db0 test: move function-local imports to the top of test modules (#927)
• f077e3a fix: raise ValidationError for non-JSON env values on strict fields (#926)
• ae25d70 fix: treat Secret subclasses as non-complex fields (#716) (#920)
• 798dcea Bump the python-packages group with 4 updates (#924)
• a190041 Bump the github-actions group with 4 updates (#925)
• 5d93332 Bump the python-packages group with 4 updates (#921)
• d2fdeda fix: read secret files as UTF-8 instead of the locale encoding (#917)
• 2256a4e Bump the python-packages group with 3 updates (#915)
• Additional commits viewable in compare view

Updates langchain-mcp-adapters from 0.3.0 to 0.3.2

Release notes

Sourced from langchain-mcp-adapters's releases.

langchain-mcp-adapters==0.3.2

What's Changed

• build(deps): bump cryptography from 48.0.1 to 50.0.0 in /examples/servers/streamable-http-stateless by @​dependabot[bot] in langchain-ai/langchain-mcp-adapters#600
• build(deps): bump cryptography from 48.0.1 to 50.0.0 by @​dependabot[bot] in langchain-ai/langchain-mcp-adapters#599
• fix(deps): cap mcp below 2.0.0 to prevent import failures by @​syf2211 in langchain-ai/langchain-mcp-adapters#590
• release: 0.3.2 by @​mdrxy in langchain-ai/langchain-mcp-adapters#604

New Contributors

• @​syf2211 made their first contribution in langchain-ai/langchain-mcp-adapters#590

Full Changelog: langchain-ai/langchain-mcp-adapters@langchain-mcp-adapters==0.3.1...langchain-mcp-adapters==0.3.2

langchain-mcp-adapters==0.3.1

What's Changed

• build(deps): bump pyjwt from 2.12.1 to 2.13.0 by @​dependabot[bot] in langchain-ai/langchain-mcp-adapters#544
• build(deps): bump python-multipart from 0.0.27 to 0.0.31 by @​dependabot[bot] in langchain-ai/langchain-mcp-adapters#546
• build(deps): bump pyjwt from 2.12.1 to 2.13.0 in /examples/servers/streamable-http-stateless in the uv group across 1 directory by @​dependabot[bot] in langchain-ai/langchain-mcp-adapters#545
• build(deps): bump cryptography from 46.0.7 to 48.0.1 by @​dependabot[bot] in langchain-ai/langchain-mcp-adapters#547
• build(deps): bump starlette from 1.0.1 to 1.3.1 by @​dependabot[bot] in langchain-ai/langchain-mcp-adapters#548
• build(deps): bump the uv group across 1 directory with 3 updates by @​dependabot[bot] in langchain-ai/langchain-mcp-adapters#549
• build(deps): bump langsmith from 0.8.0 to 0.8.18 by @​dependabot[bot] in langchain-ai/langchain-mcp-adapters#552
• build(deps): bump langgraph-sdk from 0.3.9 to 0.3.15 by @​dependabot[bot] in langchain-ai/langchain-mcp-adapters#559
• build(deps): bump langgraph-checkpoint from 4.0.0 to 4.1.1 by @​dependabot[bot] in langchain-ai/langchain-mcp-adapters#558
• build(deps): bump actions/checkout from 6 to 7 in the major group by @​dependabot[bot] in langchain-ai/langchain-mcp-adapters#562
• build(deps): bump the minor-and-patch group with 3 updates by @​dependabot[bot] in langchain-ai/langchain-mcp-adapters#563
• Patch LangChain Dependabot alerts by @​langsmith-fleet[bot] in langchain-ai/langchain-mcp-adapters#570
• Pin setup-uv GitHub Action by @​jkennedyvz in langchain-ai/langchain-mcp-adapters#572
• build(deps): bump mcp from 1.23.0 to 1.27.2 in /examples/servers/streamable-http-stateless in the uv group across 1 directory by @​dependabot[bot] in langchain-ai/langchain-mcp-adapters#573
• build(deps): bump mcp from 1.27.2 to 1.28.1 in /examples/servers/streamable-http-stateless in the uv group across 1 directory by @​dependabot[bot] in langchain-ai/langchain-mcp-adapters#574
• Add Dependabot coverage for example server by @​jkennedyvz in langchain-ai/langchain-mcp-adapters#582
• build(deps-dev): bump types-setuptools from 82.0.0.20260518 to 83.0.0.20260724 in the major group by @​dependabot[bot] in langchain-ai/langchain-mcp-adapters#586
• build(deps): bump the minor-and-patch group in /examples/servers/streamable-http-stateless with 3 updates by @​dependabot[bot] in langchain-ai/langchain-mcp-adapters#584
• build(deps): bump pypa/gh-action-pypi-publish from 1.14.0 to 1.14.1 in the minor-and-patch group by @​dependabot[bot] in langchain-ai/langchain-mcp-adapters#583
• build(deps): bump the minor-and-patch group with 3 updates by @​dependabot[bot] in langchain-ai/langchain-mcp-adapters#585
• feat: add get_server_info to retrieve MCP server metadata by @​umbilnm in langchain-ai/langchain-mcp-adapters#430
• release: 0.3.1 by @​mdrxy in langchain-ai/langchain-mcp-adapters#587

New Contributors

• @​langsmith-fleet[bot] made their first contribution in langchain-ai/langchain-mcp-adapters#570
• @​umbilnm made their first contribution in langchain-ai/langchain-mcp-adapters#430

Full Changelog: langchain-ai/langchain-mcp-adapters@langchain-mcp-adapters==0.3.0...langchain-mcp-adapters==0.3.1

Commits

• cc0f284 release: 0.3.2 (#604)
• d4a1caa fix(deps): cap mcp below 2.0.0 to prevent import failures (#590)
• a060231 build(deps): bump cryptography from 48.0.1 to 50.0.0 (#599)
• c50072a build(deps): bump cryptography from 48.0.1 to 50.0.0 in /examples/servers/str...
• e81a81b release: 0.3.1 (#587)
• d4c6611 feat: add get_server_info to retrieve MCP server metadata (#430)
• 9735d27 build(deps): bump the minor-and-patch group with 3 updates (#585)
• 04e2703 build(deps): bump pypa/gh-action-pypi-publish from 1.14.0 to 1.14.1 in the mi...
• 4f17623 build(deps): bump the minor-and-patch group in /examples/servers/streamable-h...
• e5c7e5f build(deps-dev): bump types-setuptools from 82.0.0.20260518 to 83.0.0.2026072...
• Additional commits viewable in compare view

Updates opentelemetry-exporter-otlp from 1.43.0 to 1.44.0

Release notes

Sourced from opentelemetry-exporter-otlp's releases.

Version 1.44.0/0.65b0

Added

• opentelemetry-docker-tests: Refactor Docker tests to properly validate contents of exported telemetry (#5220)
• opentelemetry-exporter-otlp-common: add shared package for common OTLP utilities (#5252)
• opentelemetry-sdk: add MissingDependencyError exception for declarative configuration and use it for missing optional dependency errors (#5265)
• opentelemetry-sdk: Add ability to refresh process dependent Resource attributes (#5280)
• opentelemetry-sdk: add force_flush method to LogRecordExporter ABC (#5294)
• opentelemetry-sdk: Make it possible to limit the size of stored spans in InMemorySpanExporter (#5296)
• opentelemetry-sdk: add log record limits environment variables OTEL_LOGRECORD_ATTRIBUTE_COUNT_LIMIT and OTEL_LOGRECORD_ATTRIBUTE_VALUE_LENGTH_LIMIT (#5300)
• opentelemetry-sdk: add support for file exporter with declarative config (#5311)
• opentelemetry-sdk: expose SynchronousMultiLogRecordProcessor and ConcurrentMultiLogRecordProcessor publicly (#5327)
• opentelemetry-sdk: point the declarative configuration package README at the shared language support status matrix in the opentelemetry-configuration repo, so Python conformance status lives alongside the other languages instead of being duplicated per language SDK. (#5347)
• opentelemetry-sdk: document that Python-implementation extensions (OTEL_PYTHON_* variables) are bypassed when OTEL_CONFIG_FILE is set. The env-var initialisation path is skipped entirely in favour of the declarative file; honouring these alongside a config file is tracked as a follow-up. (#5353)
• opentelemetry-sdk: wire id_generator from declarative configuration to TracerProvider (#5363)
• opentelemetry-sdk: Add support for activating instrumentors from a declarative configuration file via the instrumentation/development.python section. Instrumentors can declare a configuration attribute to have their options validated through the same type-coercion pipeline used for SDK component configuration. (#5372)
• opentelemetry-sdk: add record_min_max option to ExponentialBucketHistogramAggregation, matching the option already available on ExplicitBucketHistogramAggregation and required by the specification (#5377)

Changed

• opentelemetry-sdk: revert BoundedAttributes RLock back to Lock (#5329)
• docs: update logs example to use opentelemetry-instrumentation-logging (#5344)
• opentelemetry-sdk: bump declarative configuration schema to v1.1.0 (#5345)
• opentelemetry-configuration: declarative configuration moves from opentelemetry.sdk._configuration into the new public opentelemetry-configuration package (opentelemetry.configuration namespace), published experimentally. opentelemetry-sdk[file-configuration] continues to work as an alias that installs opentelemetry-configuration alongside the SDK. (#5356)
• opentelemetry-api: remove env carrier environment snapshot caching, you now have to pass explicitly the mapping where to get the environment variables from as the EnvironmentGetter.get first argument. (#5366)
• opentelemetry-semantic-conventions: bump to 1.42.0 (#5410)
• opentelemetry-semantic-conventions: bump to 1.43.0 (#5413)

Removed

• opentelemetry-api, opentelemetry-sdk: Removed deprecated Events API/SDK. Use LogRecord with the event_name field set instead. (#5293)

Fixed

• opentelemetry-sdk: Optimize LogRecord memory in BatchLogRecordProcessor by clearing the Context object before buffering. This is a potentially breaking change for custom log exporters that access context from the exported ReadableLogRecord, as the context will now be an empty Context() instead of the original. (#4977)
• opentelemetry-sdk: drop non-finite measurements (NaN and Inf) at the instrument level to prevent permanent aggregation poisoning (#5336)
• opentelemetry-sdk: raise ValueError when ExplicitBucketHistogramAggregation boundaries are not strictly increasing or finite (#5340)
• opentelemetry-sdk: ProcessResourceDetector no longer collects or emits process.command_args and process.command_line by default since the values are not sanitized and may contain sensitive information. Users who depend on these resource attributes must pass include_command_args=True. (#5364)
• opentelemetry-exporter-otlp-proto-http: fix the OTLP HTTP metric exporter self-observability metrics over-counting data points when max_export_batch_size splits a batch; each split now reports its own data-point count instead of the whole-batch count. (#5370)
• opentelemetry-api: Prevent in-...

  Description has been truncated

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.