build(deps): bump the minor-and-patch group across 1 directory with 6 updates (#135)

Bumps the minor-and-patch group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [langchain-core](https://github.com/langchain-ai/langchain) | `1.6.7`
| `1.6.10` |
| [langchain-openai](https://github.com/langchain-ai/langchain) |
`1.6.7` | `1.7.1` |
| [langgraph](https://github.com/langchain-ai/langgraph) | `1.2.14` |
`1.2.15` |
| [nbconvert](https://github.com/jupyter/nbconvert) | `7.17.1` |
`7.17.2` |
| [ruff](https://github.com/astral-sh/ruff) | `0.16.10` | `0.17.0` |
| llama-index-llms-openai | `0.8.2` | `0.8.3` |


Updates `langchain-core` from 1.6.7 to 1.6.10
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/langchain/releases">langchain-core's
releases</a>.</em></p>
<blockquote>
<h2>langchain-core==1.6.10</h2>
<p>Changes since langchain-core==1.6.9</p>
<p>release(core): 1.6.10 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/41220">#41220</a>)
feat(core,anthropic,openai): declare mid-conversation support in model
profiles (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/41180">#41180</a>)</p>
<h2>langchain-core==1.6.9</h2>
<p>Changes since langchain-core==1.6.8</p>
<p>release(core): 1.6.9 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/41160">#41160</a>)
feat(core): accept a callable in with_retry (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/41158">#41158</a>)</p>
<h2>langchain-core==1.6.8</h2>
<p>Changes since langchain-core==1.6.7</p>
<p>release(core): 1.6.8 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/41153">#41153</a>)
fix(core): harden scoped and compatible IPv6 SSRF checks (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/41151">#41151</a>)</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/langchain-ai/langchain/commit/fddca066031a2122b3562485bd9c961a46978a1e"><code>fddca06</code></a>
release(core): 1.6.10 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/41220">#41220</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/e4b143729ffb3c6307376909d3aa9921b360c1f5"><code>e4b1437</code></a>
chore(model-profiles): refresh model profile data (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/41145">#41145</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/b060a7466482ed5dac5fa1ef12e3ad21cccce385"><code>b060a74</code></a>
feat(core,anthropic,openai): declare mid-conversation support in model
profil...</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/34489d61433cbf5044a630de2e7797e361672900"><code>34489d6</code></a>
release(langchain): 1.4.4 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/41163">#41163</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/e7ca68b92062312221d7768a9d731a2d4942416b"><code>e7ca68b</code></a>
fix(langchain): (SummarizationMiddleware) retry summary step on context
overf...</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/fc7dc7757a46ebb444be1ead0efdeab5ca7ad8ce"><code>fc7dc77</code></a>
release(core): 1.6.9 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/41160">#41160</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/a055e836fd4ff75bfc2fe4adda33d06f0d625a63"><code>a055e83</code></a>
feat(core): accept a callable in with_retry (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/41158">#41158</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/2baf2f33c72cf027383a0b123e9be5077eb483d5"><code>2baf2f3</code></a>
release(openai): 1.7.0 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/41154">#41154</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/4acca6482ca3fefca9cfa2f961bbd8819eaa23ae"><code>4acca64</code></a>
release(core): 1.6.8 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/41153">#41153</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/b53209be4c01f17217ac0a00ef679f493dde23b3"><code>b53209b</code></a>
feat(openai): support decisions api (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/41125">#41125</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/langchain-ai/langchain/compare/langchain-core==1.6.7...langchain-core==1.6.10">compare
view</a></li>
</ul>
</details>
<br />

Updates `langchain-openai` from 1.6.7 to 1.7.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/langchain/releases">langchain-openai's
releases</a>.</em></p>
<blockquote>
<h2>langchain-openai==1.7.1</h2>
<p>Changes since langchain-openai==1.7.0</p>
<p>release(openai): 1.7.1 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/41222">#41222</a>)
feat(core,anthropic,openai): declare mid-conversation support in model
profiles (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/41180">#41180</a>)</p>
<h2>langchain-openai==1.7.0</h2>
<p>Changes since langchain-openai==1.6.7</p>
<p>release(openai): 1.7.0 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/41154">#41154</a>)
feat(openai): support decisions api (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/41125">#41125</a>)
chore(deps): bump langgraph-sdk from 0.4.4 to 0.4.6 in
/libs/partners/openai (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/41096">#41096</a>)
chore(deps): bump langgraph-sdk from 0.4.2 to 0.4.4 in
/libs/partners/openai (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/41072">#41072</a>)
chore(deps): bump pyjwt from 2.15.0 to 2.15.1 in /libs/partners/openai
(<a
href="https://redirect.github.com/langchain-ai/langchain/issues/40951">#40951</a>)
chore(deps): bump urllib3 from 2.7.0 to 2.8.0 in /libs/partners/openai
(<a
href="https://redirect.github.com/langchain-ai/langchain/issues/40952">#40952</a>)</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/langchain-ai/langchain/commit/85e0b7da58c32922d8f991962739e9789eb1f649"><code>85e0b7d</code></a>
release(openai): 1.7.1 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/41222">#41222</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/fddca066031a2122b3562485bd9c961a46978a1e"><code>fddca06</code></a>
release(core): 1.6.10 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/41220">#41220</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/e4b143729ffb3c6307376909d3aa9921b360c1f5"><code>e4b1437</code></a>
chore(model-profiles): refresh model profile data (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/41145">#41145</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/b060a7466482ed5dac5fa1ef12e3ad21cccce385"><code>b060a74</code></a>
feat(core,anthropic,openai): declare mid-conversation support in model
profil...</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/34489d61433cbf5044a630de2e7797e361672900"><code>34489d6</code></a>
release(langchain): 1.4.4 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/41163">#41163</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/e7ca68b92062312221d7768a9d731a2d4942416b"><code>e7ca68b</code></a>
fix(langchain): (SummarizationMiddleware) retry summary step on context
overf...</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/fc7dc7757a46ebb444be1ead0efdeab5ca7ad8ce"><code>fc7dc77</code></a>
release(core): 1.6.9 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/41160">#41160</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/a055e836fd4ff75bfc2fe4adda33d06f0d625a63"><code>a055e83</code></a>
feat(core): accept a callable in with_retry (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/41158">#41158</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/2baf2f33c72cf027383a0b123e9be5077eb483d5"><code>2baf2f3</code></a>
release(openai): 1.7.0 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/41154">#41154</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/4acca6482ca3fefca9cfa2f961bbd8819eaa23ae"><code>4acca64</code></a>
release(core): 1.6.8 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/41153">#41153</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/langchain-ai/langchain/compare/langchain-openai==1.6.7...langchain-openai==1.7.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `langgraph` from 1.2.14 to 1.2.15
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/langgraph/releases">langgraph's
releases</a>.</em></p>
<blockquote>
<h2>langgraph==1.2.15</h2>
<p>Changes since 1.2.14</p>
<ul>
<li>release(langgraph): 1.2.15 (<a
href="https://redirect.github.com/langchain-ai/langgraph/issues/9283">#9283</a>)</li>
<li>fix(langgraph): give every message written to a messages
DeltaChannel an id (<a
href="https://redirect.github.com/langchain-ai/langgraph/issues/9275">#9275</a>)</li>
<li>fix(langgraph): save a cached node's writes like a node that ran (<a
href="https://redirect.github.com/langchain-ai/langgraph/issues/9259">#9259</a>)</li>
<li>fix(langgraph): stop at an interrupt_before breakpoint when a drain
is requested before it (<a
href="https://redirect.github.com/langchain-ai/langgraph/issues/9281">#9281</a>)</li>
<li>fix(langgraph): keep an exit run from a checkpoint the thread moved
past out of its newer branch (<a
href="https://redirect.github.com/langchain-ai/langgraph/issues/9269">#9269</a>)</li>
<li>fix(langgraph): store an update_state input's writes on the
checkpoint it updates (<a
href="https://redirect.github.com/langchain-ai/langgraph/issues/9258">#9258</a>)</li>
<li>fix(langgraph): read a run's DeltaChannel input back only on its own
checkpoints (<a
href="https://redirect.github.com/langchain-ai/langgraph/issues/9260">#9260</a>)</li>
<li>fix(langgraph): snapshot a DeltaChannel that an update_state
Overwrite resets (<a
href="https://redirect.github.com/langchain-ai/langgraph/issues/9263">#9263</a>)</li>
<li>fix(langgraph): keep a fork's DeltaChannel snapshot from starting
nodes that never ran (<a
href="https://redirect.github.com/langchain-ai/langgraph/issues/9264">#9264</a>)</li>
<li>fix(langgraph): don't save a checkpoint past a failed DeltaChannel
write (<a
href="https://redirect.github.com/langchain-ai/langgraph/issues/9235">#9235</a>)</li>
<li>fix(langgraph,prebuilt): stop ToolNode from swallowing invalid
resume values (<a
href="https://redirect.github.com/langchain-ai/langgraph/issues/9232">#9232</a>)</li>
<li>fix(langgraph): never store exit-mode delta writes under the null
task id (<a
href="https://redirect.github.com/langchain-ai/langgraph/issues/9229">#9229</a>)</li>
<li>fix(langgraph): stop astream_events dropping control/interrupts on
v1/v2 (<a
href="https://redirect.github.com/langchain-ai/langgraph/issues/9219">#9219</a>)</li>
<li>chore(deps): bump notebook from 7.5.7 to 7.6.3 in /libs/langgraph
(<a
href="https://redirect.github.com/langchain-ai/langgraph/issues/9206">#9206</a>)</li>
<li>fix(langgraph): give each bulk_update_state update its own task id
(<a
href="https://redirect.github.com/langchain-ai/langgraph/issues/9128">#9128</a>)</li>
<li>fix(langgraph): replay a resumed exit-mode run's delta writes in
live order (<a
href="https://redirect.github.com/langchain-ai/langgraph/issues/9114">#9114</a>)</li>
<li>fix: order delta channel replay by task path (<a
href="https://redirect.github.com/langchain-ai/langgraph/issues/8544">#8544</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/langchain-ai/langgraph/commit/08a345637fb2bd499f69c90056a22c478a468817"><code>08a3456</code></a>
release(langgraph): 1.2.15 (<a
href="https://redirect.github.com/langchain-ai/langgraph/issues/9283">#9283</a>)</li>
<li><a
href="https://github.com/langchain-ai/langgraph/commit/b7d053b256157ac6b8e8ff5a0783f8a446a9c89e"><code>b7d053b</code></a>
fix(langgraph): give every message written to a messages DeltaChannel an
id (...</li>
<li><a
href="https://github.com/langchain-ai/langgraph/commit/395c145c047aaf962a4f599582bbc8d717bd9fa1"><code>395c145</code></a>
fix(langgraph): save a cached node's writes like a node that ran (<a
href="https://redirect.github.com/langchain-ai/langgraph/issues/9259">#9259</a>)</li>
<li><a
href="https://github.com/langchain-ai/langgraph/commit/10f1fabb3b2f2d550b8133fba1217391c27694c4"><code>10f1fab</code></a>
fix(langgraph): stop at an interrupt_before breakpoint when a drain is
reques...</li>
<li><a
href="https://github.com/langchain-ai/langgraph/commit/799c2f04fd3a56186e24e9fb8bbf3568e543cfbe"><code>799c2f0</code></a>
fix(langgraph): keep an exit run from a checkpoint the thread moved past
out ...</li>
<li><a
href="https://github.com/langchain-ai/langgraph/commit/b4991f1ba36a2449ab59c38ab71828ee865bff84"><code>b4991f1</code></a>
fix(langgraph): store an update_state input's writes on the checkpoint
it upd...</li>
<li><a
href="https://github.com/langchain-ai/langgraph/commit/6aa0afba682b0308fbcace31f66fb532978d4dca"><code>6aa0afb</code></a>
fix(checkpoint): default InMemorySaver delta history to the latest
checkpoint...</li>
<li><a
href="https://github.com/langchain-ai/langgraph/commit/12aeb0fddb5e835a5745a10a72358c2de37a66a6"><code>12aeb0f</code></a>
fix(langgraph): read a run's DeltaChannel input back only on its own
checkpoi...</li>
<li><a
href="https://github.com/langchain-ai/langgraph/commit/d05236f8050c28d38449f81e25382d5991a29223"><code>d05236f</code></a>
fix(langgraph): snapshot a DeltaChannel that an update_state Overwrite
resets...</li>
<li><a
href="https://github.com/langchain-ai/langgraph/commit/9d92f33cca143926c563deb87ce377397883cd92"><code>9d92f33</code></a>
fix(langgraph): keep a fork's DeltaChannel snapshot from starting nodes
that ...</li>
<li>Additional commits viewable in <a
href="https://github.com/langchain-ai/langgraph/compare/1.2.14...1.2.15">compare
view</a></li>
</ul>
</details>
<br />

Updates `nbconvert` from 7.17.1 to 7.17.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/jupyter/nbconvert/releases">nbconvert's
releases</a>.</em></p>
<blockquote>
<h2>v7.17.2</h2>
<h2>7.17.2</h2>
<p>(<a
href="https://github.com/jupyter/nbconvert/compare/v7.17.1...8685e15e2d924fa39be38aeafb6ac859fc254ccc">Full
Changelog</a>)</p>
<h3>Maintenance and upkeep improvements</h3>
<ul>
<li>Fix CI: fetch the classic CSS from PyPI, update dead links <a
href="https://redirect.github.com/jupyter/nbconvert/pull/2327">#2327</a>
(<a href="https://github.com/Yann-P"><code>@​Yann-P</code></a>, <a
href="https://github.com/Carreau"><code>@​Carreau</code></a>, <a
href="https://github.com/claude"><code>@​claude</code></a>)</li>
</ul>
<h3>Other merged PRs</h3>
<ul>
<li>Use org-level security policy (jupyter/.github/SECURITY.md) <a
href="https://redirect.github.com/jupyter/nbconvert/pull/2318">#2318</a>
(<a href="https://github.com/Yann-P"><code>@​Yann-P</code></a>, <a
href="https://github.com/minrk"><code>@​minrk</code></a>)</li>
</ul>
<h3>Contributors to this release</h3>
<p>The following people contributed discussions, new ideas, code and
documentation contributions, and review.
See <a
href="https://github-activity.readthedocs.io/en/latest/use/#how-does-this-tool-define-contributions-in-the-reports">our
definition of contributors</a>.</p>
<p>(<a
href="https://github.com/jupyter/nbconvert/graphs/contributors?from=2026-04-08&amp;to=2026-10-12&amp;type=c">GitHub
contributors page for this release</a>)</p>
<p><a href="https://github.com/Carreau"><code>@​Carreau</code></a> (<a
href="https://github.com/search?q=repo%3Ajupyter%2Fnbconvert+involves%3ACarreau+updated%3A2026-04-08..2026-10-12&amp;type=Issues">activity</a>)
| <a href="https://github.com/claude"><code>@​claude</code></a> (<a
href="https://github.com/search?q=repo%3Ajupyter%2Fnbconvert+involves%3Aclaude+updated%3A2026-04-08..2026-10-12&amp;type=Issues">activity</a>)
| <a
href="https://github.com/GruffElixir"><code>@​GruffElixir</code></a> (<a
href="https://github.com/search?q=repo%3Ajupyter%2Fnbconvert+involves%3AGruffElixir+updated%3A2026-04-08..2026-10-12&amp;type=Issues">activity</a>)
| <a href="https://github.com/minrk"><code>@​minrk</code></a> (<a
href="https://github.com/search?q=repo%3Ajupyter%2Fnbconvert+involves%3Aminrk+updated%3A2026-04-08..2026-10-12&amp;type=Issues">activity</a>)
| <a href="https://github.com/Yann-P"><code>@​Yann-P</code></a> (<a
href="https://github.com/search?q=repo%3Ajupyter%2Fnbconvert+involves%3AYann-P+updated%3A2026-04-08..2026-10-12&amp;type=Issues">activity</a>)</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/jupyter/nbconvert/blob/main/CHANGELOG.md">nbconvert's
changelog</a>.</em></p>
<blockquote>
<h2>7.17.2</h2>
<p>(<a
href="https://github.com/jupyter/nbconvert/compare/v7.17.1...8685e15e2d924fa39be38aeafb6ac859fc254ccc">Full
Changelog</a>)</p>
<h3>Maintenance and upkeep improvements</h3>
<ul>
<li>Fix CI: fetch the classic CSS from PyPI, update dead links <a
href="https://redirect.github.com/jupyter/nbconvert/pull/2327">#2327</a>
(<a href="https://github.com/Yann-P"><code>@​Yann-P</code></a>, <a
href="https://github.com/Carreau"><code>@​Carreau</code></a>, <a
href="https://github.com/claude"><code>@​claude</code></a>)</li>
</ul>
<h3>Other merged PRs</h3>
<ul>
<li>Use org-level security policy (jupyter/.github/SECURITY.md) <a
href="https://redirect.github.com/jupyter/nbconvert/pull/2318">#2318</a>
(<a href="https://github.com/Yann-P"><code>@​Yann-P</code></a>, <a
href="https://github.com/minrk"><code>@​minrk</code></a>)</li>
</ul>
<h3>Contributors to this release</h3>
<p>The following people contributed discussions, new ideas, code and
documentation contributions, and review.
See <a
href="https://github-activity.readthedocs.io/en/latest/use/#how-does-this-tool-define-contributions-in-the-reports">our
definition of contributors</a>.</p>
<p>(<a
href="https://github.com/jupyter/nbconvert/graphs/contributors?from=2026-04-08&amp;to=2026-10-12&amp;type=c">GitHub
contributors page for this release</a>)</p>
<p><a href="https://github.com/Carreau"><code>@​Carreau</code></a> (<a
href="https://github.com/search?q=repo%3Ajupyter%2Fnbconvert+involves%3ACarreau+updated%3A2026-04-08..2026-10-12&amp;type=Issues">activity</a>)
| <a href="https://github.com/claude"><code>@​claude</code></a> (<a
href="https://github.com/search?q=repo%3Ajupyter%2Fnbconvert+involves%3Aclaude+updated%3A2026-04-08..2026-10-12&amp;type=Issues">activity</a>)
| <a
href="https://github.com/GruffElixir"><code>@​GruffElixir</code></a> (<a
href="https://github.com/search?q=repo%3Ajupyter%2Fnbconvert+involves%3AGruffElixir+updated%3A2026-04-08..2026-10-12&amp;type=Issues">activity</a>)
| <a href="https://github.com/minrk"><code>@​minrk</code></a> (<a
href="https://github.com/search?q=repo%3Ajupyter%2Fnbconvert+involves%3Aminrk+updated%3A2026-04-08..2026-10-12&amp;type=Issues">activity</a>)
| <a href="https://github.com/Yann-P"><code>@​Yann-P</code></a> (<a
href="https://github.com/search?q=repo%3Ajupyter%2Fnbconvert+involves%3AYann-P+updated%3A2026-04-08..2026-10-12&amp;type=Issues">activity</a>)</p>
<!-- raw HTML omitted -->
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/jupyter/nbconvert/commit/e681152f214b65387f875aad96a4726994533a0b"><code>e681152</code></a>
Publish 7.17.2</li>
<li><a
href="https://github.com/jupyter/nbconvert/commit/8685e15e2d924fa39be38aeafb6ac859fc254ccc"><code>8685e15</code></a>
Fix CI: fetch the classic CSS from PyPI, update dead links</li>
<li><a
href="https://github.com/jupyter/nbconvert/commit/ce4bd99aec31d81d759fa8eeb8643179392ec66f"><code>ce4bd99</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/jupyter/nbconvert/commit/1ff189e1b30f0820238e95427c035a9150a5e43f"><code>1ff189e</code></a>
Use org-level security policy (jupyter/.github/SECURITY.md) (<a
href="https://redirect.github.com/jupyter/nbconvert/issues/2318">#2318</a>)</li>
<li>See full diff in <a
href="https://github.com/jupyter/nbconvert/compare/v7.17.1...v7.17.2">compare
view</a></li>
</ul>
</details>
<br />

Updates `ruff` from 0.16.10 to 0.17.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/astral-sh/ruff/releases">ruff's
releases</a>.</em></p>
<blockquote>
<h2>0.17.0</h2>
<h2>Release Notes</h2>
<p>Released on 2026-10-09.</p>
<p>The executables in our macOS and Windows release archives and
<code>ruff</code> wheels are now code-signed. macOS executables are
signed with an Apple Developer ID certificate and notarized by Apple.
Windows executables have timestamped Authenticode signatures from Azure
Artifact Signing. This enables verification of the release publisher and
binary integrity, supports publisher-based allowlisting, and should
reduce security warnings and antivirus false positives.</p>
<h3>Breaking changes</h3>
<ul>
<li>
<p>Update the default and latest Python versions for 3.15 (<a
href="https://redirect.github.com/astral-sh/ruff/pull/28792">#28792</a>)</p>
<p>Ruff now defaults to Python 3.11 instead of 3.10 when no Python
version is configured through <a
href="https://docs.astral.sh/ruff/settings/#target-version"><code>target-version</code></a>
or <a
href="https://docs.astral.sh/ruff/configuration/#inferring-the-python-version"><code>requires-python</code></a>.
When checking for syntax errors without a configured Python version,
Ruff now defaults to Python 3.15 instead of 3.14.</p>
</li>
<li>
<p>Update the default rule set (<a
href="https://redirect.github.com/astral-sh/ruff/pull/28786">#28786</a>)</p>
<p>Several of the <code>flake8-datetimez</code> rules (<a
href="https://docs.astral.sh/ruff/rules/call-datetime-without-tzinfo/"><code>DTZ001</code></a>,
<a
href="https://docs.astral.sh/ruff/rules/call-datetime-now-without-tzinfo/"><code>DTZ005</code></a>,
<a
href="https://docs.astral.sh/ruff/rules/call-datetime-fromtimestamp/"><code>DTZ006</code></a>,
<a
href="https://docs.astral.sh/ruff/rules/call-datetime-strptime-without-zone/"><code>DTZ007</code></a>,
<a
href="https://docs.astral.sh/ruff/rules/call-date-today/"><code>DTZ011</code></a>,
<a
href="https://docs.astral.sh/ruff/rules/call-date-fromtimestamp/"><code>DTZ012</code></a>,
and <a
href="https://docs.astral.sh/ruff/rules/datetime-min-max/"><code>DTZ901</code></a>)
are no longer enabled by default, while <a
href="https://docs.astral.sh/ruff/rules/undefined-local-with-nested-import-star-usage/"><code>undefined-local-with-nested-import-star-usage</code></a>
(<code>F406</code>), which corresponds to a syntax error, is now enabled
by default.</p>
</li>
<li>
<p>Update Rust crate quick-junit to 0.8.0 (<a
href="https://redirect.github.com/astral-sh/ruff/pull/27295">#27295</a>)</p>
<p>JUnit output now uses a <code>skipped</code> attribute instead of
<code>disabled</code> on <code>&lt;testsuite&gt;</code> elements and
includes a <code>skipped</code> attribute on the root
<code>&lt;testsuites&gt;</code> element.</p>
</li>
<li>
<p>[<code>flake8-import-conventions</code>] Add <code>datetime as
dt</code> as a conventional alias (<code>ICN001</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/28790">#28790</a>)</p>
</li>
<li>
<p>Support Unicode dummy variable names (<a
href="https://redirect.github.com/astral-sh/ruff/pull/28722">#28722</a>)</p>
<p>The default <a
href="https://docs.astral.sh/ruff/settings/#lint_dummy-variable-rgx"><code>lint.dummy-variable-rgx</code></a>
now recognizes underscore-prefixed Unicode names, such as
<code>_次</code>, as dummy variables.</p>
</li>
<li>
<p>Update to Unicode 17 (<a
href="https://redirect.github.com/astral-sh/ruff/pull/21229">#21229</a>,
<a
href="https://redirect.github.com/astral-sh/ruff/pull/28784">#28784</a>)</p>
<p>Ruff now uses Unicode 17 data for identifier normalization and named
character escapes (<code>&quot;\N{...}&quot;</code>).</p>
</li>
<li>
<p>Always show unsafe and display-only fixes in the CLI (<a
href="https://redirect.github.com/astral-sh/ruff/pull/27810">#27810</a>)</p>
<p>The default <code>full</code> output format now shows unsafe fixes
and suggestions requiring manual review, regardless of the <a
href="https://docs.astral.sh/ruff/settings/#unsafe-fixes"><code>unsafe-fixes</code></a>
setting. Actually applying unsafe fixes still requires explicit
opt-in.</p>
</li>
<li>
<p>Remove the Python dependency from conda-forge builds (<a
href="https://redirect.github.com/conda-forge/ruff-feedstock/pull/361">conda-forge/ruff-feedstock#361</a>)</p>
<p>The conda-forge build no longer depends on Python, now supports
linux-riscv64, win-arm64, and linux-ppc64le platforms, and now includes
shell completions. However, no longer depending on Python means that
<code>python -m ruff</code> and <code>import ruff</code> will no longer
work. Use <code>ruff</code> directly from <code>PATH</code> instead.
PyPI installations and those from the standalone installer are
unaffected.</p>
</li>
<li>
<p>Remove support for ruff-lsp (<a
href="https://redirect.github.com/astral-sh/ruff/pull/28750">#28750</a>)</p>
<p>Support for <code>ruff-lsp</code>, the legacy Python language server
<a
href="https://github.com/astral-sh/ruff/releases/tag/0.9.5">deprecated
in Ruff v0.9.5</a>, has been removed. The Ruff VS Code extension now
always uses the native language server; <code>ruff.nativeServer</code>
is deprecated and ignored. See the <a
href="https://docs.astral.sh/ruff/editors/migration/">migration
guide</a>.</p>
</li>
</ul>
<h3>Stabilization</h3>
<p>The following rules have been stabilized and are no longer in
preview:</p>
<ul>
<li><a
href="https://docs.astral.sh/ruff/rules/lazy-import-mismatch"><code>lazy-import-mismatch</code></a>
(<code>TID254</code>)</li>
<li><a
href="https://docs.astral.sh/ruff/rules/lazy-import-immediately-resolved"><code>lazy-import-immediately-resolved</code></a>
(<code>TID255</code>)</li>
<li><a
href="https://docs.astral.sh/ruff/rules/os-path-commonprefix"><code>os-path-commonprefix</code></a>
(<code>RUF071</code>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md">ruff's
changelog</a>.</em></p>
<blockquote>
<h2>0.17.0</h2>
<p>Released on 2026-10-09.</p>
<p>The executables in our macOS and Windows release archives and
<code>ruff</code> wheels are now code-signed.
macOS executables are signed with an Apple Developer ID certificate and
notarized by Apple. Windows
executables have timestamped Authenticode signatures from Azure Artifact
Signing. This enables
verification of the release publisher and binary integrity, supports
publisher-based allowlisting,
and should reduce security warnings and antivirus false positives.</p>
<h3>Breaking changes</h3>
<ul>
<li>
<p>Update the default and latest Python versions for 3.15 (<a
href="https://redirect.github.com/astral-sh/ruff/pull/28792">#28792</a>)</p>
<p>Ruff now defaults to Python 3.11 instead of 3.10 when no Python
version is configured through
<a
href="https://docs.astral.sh/ruff/settings/#target-version"><code>target-version</code></a>
or
<a
href="https://docs.astral.sh/ruff/configuration/#inferring-the-python-version"><code>requires-python</code></a>.
When
checking for syntax errors without a configured Python version, Ruff now
defaults to Python 3.15
instead of 3.14.</p>
</li>
<li>
<p>Update the default rule set (<a
href="https://redirect.github.com/astral-sh/ruff/pull/28786">#28786</a>)</p>
<p>Several of the <code>flake8-datetimez</code> rules
(<a
href="https://docs.astral.sh/ruff/rules/call-datetime-without-tzinfo/"><code>DTZ001</code></a>,
<a
href="https://docs.astral.sh/ruff/rules/call-datetime-now-without-tzinfo/"><code>DTZ005</code></a>,
<a
href="https://docs.astral.sh/ruff/rules/call-datetime-fromtimestamp/"><code>DTZ006</code></a>,
<a
href="https://docs.astral.sh/ruff/rules/call-datetime-strptime-without-zone/"><code>DTZ007</code></a>,
<a
href="https://docs.astral.sh/ruff/rules/call-date-today/"><code>DTZ011</code></a>,
<a
href="https://docs.astral.sh/ruff/rules/call-date-fromtimestamp/"><code>DTZ012</code></a>,
and
<a
href="https://docs.astral.sh/ruff/rules/datetime-min-max/"><code>DTZ901</code></a>)
are no longer enabled by default,
while <a
href="https://docs.astral.sh/ruff/rules/undefined-local-with-nested-import-star-usage/"><code>undefined-local-with-nested-import-star-usage</code></a>
(<code>F406</code>), which corresponds to a syntax error, is now enabled
by default.</p>
</li>
<li>
<p>Update Rust crate quick-junit to 0.8.0 (<a
href="https://redirect.github.com/astral-sh/ruff/pull/27295">#27295</a>)</p>
<p>JUnit output now uses a <code>skipped</code> attribute instead of
<code>disabled</code> on <code>&lt;testsuite&gt;</code> elements and
includes a <code>skipped</code> attribute on the root
<code>&lt;testsuites&gt;</code> element.</p>
</li>
<li>
<p>[<code>flake8-import-conventions</code>] Add <code>datetime as
dt</code> as a conventional alias (<code>ICN001</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/28790">#28790</a>)</p>
</li>
<li>
<p>Support Unicode dummy variable names (<a
href="https://redirect.github.com/astral-sh/ruff/pull/28722">#28722</a>)</p>
<p>The default <a
href="https://docs.astral.sh/ruff/settings/#lint_dummy-variable-rgx"><code>lint.dummy-variable-rgx</code></a>
now recognizes underscore-prefixed Unicode names, such as
<code>_次</code>, as dummy variables.</p>
</li>
<li>
<p>Update to Unicode 17 (<a
href="https://redirect.github.com/astral-sh/ruff/pull/21229">#21229</a>,
<a
href="https://redirect.github.com/astral-sh/ruff/pull/28784">#28784</a>)</p>
<p>Ruff now uses Unicode 17 data for identifier normalization and named
character escapes (<code>&quot;\N{...}&quot;</code>).</p>
</li>
<li>
<p>Always show unsafe and display-only fixes in the CLI (<a
href="https://redirect.github.com/astral-sh/ruff/pull/27810">#27810</a>)</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/astral-sh/ruff/commit/5b27c1ccfaa230fb195855f5cf3404a21e3379cd"><code>5b27c1c</code></a>
Bump version to 0.17.0 (<a
href="https://redirect.github.com/astral-sh/ruff/issues/29259">#29259</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/8f362bf4cb5dbad095ac416602496705d41fc843"><code>8f362bf</code></a>
Integrate vendored Unicode names into Ruff</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/88a50d695c1142294bb4c780fad47d3306173885"><code>88a50d6</code></a>
Revert upstream Unicode loose matching</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/276832aa91f2086a6ec880884fcdd987991cddf2"><code>276832a</code></a>
Revert upstream Unicode alias normalization</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/26911caa2800758779965510d2f222b438abbb38"><code>26911ca</code></a>
Vendor unicode_names2 from upstream</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/27e3797508d1a7ad69e4900d51e38d78785aaf73"><code>27e3797</code></a>
[<code>ruff</code>] Stabilize <code>os-path-commonprefix</code>
(<code>RUF071</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/issues/28764">#28764</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/bbb52c1267cf39aba67e54c2b5800878d23073a9"><code>bbb52c1</code></a>
[<code>flake8-tidy-imports</code>] Stabilize
<code>lazy-import-immediately-resolved</code> (`TID255...</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/5aa9cbd3a49d32b24ac21fa7797ca87a330792a2"><code>5aa9cbd</code></a>
[<code>flake8-tidy-imports</code>] Stabilize
<code>lazy-import-mismatch</code> (<code>TID254</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/issues/28760">#28760</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/dba1bc893aedfeea2064c4e8e764135f0d44dc3f"><code>dba1bc8</code></a>
[<code>flake8-import-conventions</code>] Add <code>datetime as dt</code>
as a conventional alias (`...</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/ef23c9c39eb3029bab0139c3ea7ae6d95c4131e0"><code>ef23c9c</code></a>
Update default and latest Python versions for 3.15 (<a
href="https://redirect.github.com/astral-sh/ruff/issues/28792">#28792</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/astral-sh/ruff/compare/0.16.10...0.17.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `llama-index-llms-openai` from 0.8.2 to 0.8.3


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

coordinode/pyproject.toml

@@ -39,7 +39,7 @@ dev = [
     "grpcio-tools>=1.84.0",
     "pytest>=9",
     "pytest-asyncio>=1.4",
-    "ruff>=0.16",
+    "ruff>=0.17.0",
 ]
 
 [project.urls]

pyproject.toml

@@ -45,16 +45,16 @@ dev = [
     "ipykernel>=7.3.0",
     "langchain>=1.0",
     "langchain-community>=0.3",
-    "langchain-core>=1.3.3",
-    "langchain-openai>=1.0",
-    "langgraph>=1.0",
+    "langchain-core>=1.6.10",
+    "langchain-openai>=1.7.1",
+    "langgraph>=1.2.15",
     "llama-index-core>=0.14",
-    "nbconvert>=7.17.1",
+    "nbconvert>=7.17.2",
     "nest-asyncio>=1.6.0",
     "pytest>=9",
     "pytest-asyncio>=1.4",
     "pytest-timeout>=2.4",
-    "ruff>=0.16",
+    "ruff>=0.17.0",
 ]
 # What the demo image installs, exported from this lock at build time. The
 # three workspace members bring their own dependencies in (the export leaves
@@ -72,10 +72,10 @@ demo = [
     "hatchling>=1.27",
     "langchain>=1.0",
     "langchain-community>=0.3",
-    "langchain-openai>=1.0",
-    "langgraph>=1.0",
+    "langchain-openai>=1.7.1",
+    "langgraph>=1.2.15",
     "llama-index-core>=0.14",
     "llama-index-embeddings-openai>=0.7",
-    "llama-index-llms-openai>=0.8",
+    "llama-index-llms-openai>=0.8.3",
     "nest-asyncio>=1.6.0",
 ]