chore(deps): bump the pip group across 1 directory with 19 updates

[dependabot]

Updates the requirements on gitpython, click, cryptography, firecrawl-py, firebase-admin, langchain, langchain-anthropic, langchain-community, langchain-core, langchain-mcp-adapters, langgraph, pandas, litellm, pytest, boto3, pillow-heif, pillow, z3-solver and tree-sitter to permit the latest version.
Updates gitpython from 3.1.50 to 3.1.58

Release notes

Sourced from gitpython's releases.

Security and Fixes

What's Changed

• test: allow Python startup before timeout by @​Byron in gitpython-developers/GitPython#2195
• Resolve Windows hook Bash through PATH by @​Byron in gitpython-developers/GitPython#2199
• Revert "Resolve Windows hook Bash through PATH" by @​Byron in gitpython-developers/GitPython#2200
• test: focus pytest summary on unexpected failures by @​raisulchowdhury in gitpython-developers/GitPython#2203
• Validate submodule names before filesystem operations by @​Byron in gitpython-developers/GitPython#2202
• Handle invalid submodule names during recursive updates by @​Byron in gitpython-developers/GitPython#2205
• Fix Windows path handling on Python 3.13+ by @​Byron in gitpython-developers/GitPython#2196
• fixup 2202 by @​Byron in gitpython-developers/GitPython#2206
• Correct Windows hook Bash precedence by @​Byron in gitpython-developers/GitPython#2201
• Harden config and Git option validation by @​Byron in gitpython-developers/GitPython#2204
• Skip tests that need symlink privileges instead of erroring by @​Cyrus580529 in gitpython-developers/GitPython#2197

New Contributors

• @​raisulchowdhury made their first contribution in gitpython-developers/GitPython#2203
• @​Cyrus580529 made their first contribution in gitpython-developers/GitPython#2197

Full Changelog: gitpython-developers/GitPython@3.1.57...3.1.58

3.1.57 - Security and Fixes

What's Changed

• Merge gitdb and smmap into the GitPython repository by @​Byron in gitpython-developers/GitPython#2179
• build(deps): bump actions/setup-python from 6 to 7 by @​dependabot[bot] in gitpython-developers/GitPython#2185
• build(deps): bump the pre-commit group with 2 updates by @​dependabot[bot] in gitpython-developers/GitPython#2186
• Bump Vampire/setup-wsl from 6.0.0 to 7.0.0 by @​dependabot[bot] in gitpython-developers/GitPython#2124
• Render protected Traversable methods in the reference by @​pick7 in gitpython-developers/GitPython#2192
• Use standard prefixes for parsed patch diffs by @​pick7 in gitpython-developers/GitPython#2191
• Honor kill_after_timeout with output streams by @​pick7 in gitpython-developers/GitPython#2189
• Redact Authorization extra headers from command errors by @​pick7 in gitpython-developers/GitPython#2188
• Improve RemoteProgress parse return typing by @​pick7 in gitpython-developers/GitPython#2187
• Adopt basedpyright with a legacy baseline by @​Byron in gitpython-developers/GitPython#2194
• Block unsafe Git file and URL options by @​Byron in gitpython-developers/GitPython#2193

New Contributors

• @​pick7 made their first contribution in gitpython-developers/GitPython#2192

Full Changelog: gitpython-developers/GitPython@3.1.56...3.1.57

3.1.56 - SECURITY

What's Changed

• Add support for Python 3.15 by @​hugovk in gitpython-developers/GitPython#2183
• fix: reject unsafe output options in Commit.count by @​Byron in gitpython-developers/GitPython#2184

Full Changelog: gitpython-developers/GitPython@3.1.55...3.1.56

3.1.55 - Security

What's Changed

• fix: prevent environment expansion in remote URLs by @​Byron in gitpython-developers/GitPython#2181

... (truncated)

Commits

• 30be45d prepare changelog for upcoming release
• fc2f02c Merge pull request #2197 from Cyrus580529/shared-symlink-guard
• b10e250 test: use the shared guard instead of local copies
• e3e5da8 test: skip tests that need symlink privileges
• 30d05e3 test: add a shared symlink capability guard
• 9a8f6fe Merge pull request #2204 from gitpython-developers/security-fixes
• f2550b6 Guard pathspec file inputs in high-level commands
• d9ddb55 Guard unsafe git init options
• 9b5dcaf Guard read-tree index output paths
• 96a888f Check joined short-option values before Git execution
• Additional commits viewable in compare view

Updates click from 8.4.1 to 8.4.2

Release notes

Sourced from click's releases.

8.4.2

This is the Click 8.4.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.4.2/ Changes: https://click.palletsprojects.com/page/changes/#version-8-4-2 Milestone: https://github.com/pallets/click/milestone/34

• Fix Fish shell completion broken in 8.4.0 by #3126. Newlines and tabs in option help text are now escaped, keeping the original completion format while still supporting multi-line help. #3502 #3043 #3504 #3508
• Deprecated commands and options with empty or missing help text no longer render a stray leading space before the (DEPRECATED) label. #3509
• A {class}Group with invoke_without_command=True marks its subcommand as optional in the usage help, showing [COMMAND] instead of COMMAND. #3059 #3507
• echo_via_pager flushes after each write, so passing a generator streams output to the pager incrementally instead of staying hidden until the pipe buffer fills. #3242 #2542 #3534
• echo_via_pager and get_pager_file no longer close a borrowed stdout stream when no external pager runs, completing the partial I/O operation on closed file fix from #3482. #3449 #3533
• Fix CLI usage symopsis for optional arguments producing double square brackets [[a|b|c]]... whose type already brackets their metavar. #3578
• {func}version_option resolves a package_name that does not match an installed distribution as an import (top-level module) name via {func}importlib.metadata.packages_distributions. Packages whose top-level module name differs from their distribution name (PIL vs Pillow, jwt vs PyJWT) no longer raise RuntimeError out of the box. #2331 #1884 #3125 #3582

Changelog

Sourced from click's changelog.

Version 8.4.2

Released 2026-06-24

• Fix Fish shell completion broken in 8.4.0 by {pr}3126. Newlines and tabs in option help text are now escaped, keeping the original completion format while still supporting multi-line help. {issue}3502 {issue}3043 {pr}3504 {pr}3508
• Deprecated commands and options with empty or missing help text no longer render a stray leading space before the (DEPRECATED) label. {pr}3509
• A {class}Group with invoke_without_command=True marks its subcommand as optional in the usage help, showing [COMMAND] instead of COMMAND. {issue}3059 {pr}3507
• echo_via_pager flushes after each write, so passing a generator streams output to the pager incrementally instead of staying hidden until the pipe buffer fills. {issue}3242 {issue}2542 {pr}3534
• echo_via_pager and get_pager_file no longer close a borrowed stdout stream when no external pager runs, completing the partial I/O operation on closed file fix from {pr}3482. {issue}3449 {pr}3533
• Fix CLI usage symopsis for optional arguments producing double square brackets [[a|b|c]]... whose type already brackets their metavar. {pr}3578
• {func}version_option resolves a package_name that does not match an installed distribution as an import (top-level module) name via {func}importlib.metadata.packages_distributions. Packages whose top-level module name differs from their distribution name (PIL vs Pillow, jwt vs PyJWT) no longer raise RuntimeError out of the box. {issue}2331 {issue}1884 {issue}3125 {pr}3582

Commits

• b2e30a1 Release version 8.4.2
• 7a16b20 Fix package_name resolution when module differs from distribution name (#3582)
• bec5928 Fix package_name resolution when top-level module differs from distribution...
• 916883a Fix tests to not rely on -Wdefault option (#3591)
• 09195f6 Fix double-bracketing of choices in synopsis (#3578)
• 1557e26 Check for warning exception with idiomatic context manager
• d9ff133 Static typing improvements in click.shell_completion (#3460)
• 762c97e Fix double-bracketing of choices in synopsis
• 8929d39 Convert changes to markdown. (#3559)
• 237be50 Move changes headings down a level.
• Additional commits viewable in compare view

Updates cryptography to 50.0.0

Changelog

Sourced from cryptography's changelog.

50.0.0 - 2026-07-31

* **SECURITY ISSUE**:
  :func:`~cryptography.hazmat.primitives.serialization.pkcs7.pkcs7_decrypt_der`
  and its PEM and S/MIME variants no longer expose distinguishable errors or
  timing when unwrapping a ``RecipientInfo``'s ``encryptedKey``, which could
  act as a Bleichenbacher oracle for callers that decrypt untrusted messages.
  A random key is now substituted on failure, as described in :rfc:`3218`.
  Credit to **@X1AOxiang** for reporting the issue. **CVE-2026-69247**
* Deprecated Diffie-Hellman key exchange over finite fields (FFDH).
  Everything FFDH is deprecated, including the types in
  ``cryptography.hazmat.primitives.asymmetric.dh`` and loading FFDH keys or
  parameters with the key loading APIs. Users should migrate to a more
  modern key exchange algorithm.
* Added ``xof()`` class methods to
  :class:`~cryptography.hazmat.primitives.hashes.SHAKE128` and
  :class:`~cryptography.hazmat.primitives.hashes.SHAKE256` for constructing
  algorithm instances configured for use with
  :class:`~cryptography.hazmat.primitives.hashes.XOFHash`.
* The :mod:`X.509 verification <cryptography.x509.verification>` APIs are now
  considered stable and are subject to our API stability policy.
* Added the :doc:`/cobblestone` recipe, an implementation of the
  Cobblestone-128 and Cobblestone-256 instantiations of the `C2SP
  chunked-encryption specification
  <https://c2sp.org/chunked-encryption>`_ for streaming authenticated
  encryption of large messages.
* Parsing a Signed Certificate Timestamp list now rejects encodings that
  carry trailing bytes after the list or after an individual SCT, instead of
  silently ignoring them.
* Added support for using :class:`~cryptography.x509.Name` as a field type in
  the :doc:`/hazmat/asn1/index` module.
* Loading a public key or an EC private key now rejects DER where the
  ``subjectPublicKey`` (or EC ``publicKey``) ``BIT STRING`` declares a non-zero
  number of unused bits, instead of silently ignoring it.
* Parsing a CRL entry's ``InvalidityDate`` extension now rejects a
  ``GeneralizedTime`` that carries fractional seconds or another non-DER form,
  matching the strict encoding already required for every other X.509 time
  field.
* :func:`~cryptography.x509.ocsp.load_der_ocsp_request` and
  :func:`~cryptography.x509.ocsp.load_der_ocsp_response` now reject a request
  or response whose ``version`` field is not ``v1``, the only version defined
  by RFC 6960, matching the version validation already performed when loading
  certificates, CSRs and CRLs.
* :class:`~cryptography.hazmat.primitives.hashes.XOFHash` is now supported
  when building against AWS-LC.
* HMAC (and therefore PBKDF2-HMAC) with SHA-3 hashes is now supported when
  building against AWS-LC.
* Diffie-Hellman (:doc:`/hazmat/primitives/asymmetric/dh`) is now supported
  when building against AWS-LC.
</tr></table> 

... (truncated)

Commits

• dcb7050 Prepare for 50.0.0 release (#15372)
• 53fccd9 Don't leak how PKCS#7 encryptedKey decryption failed (#15369)
• d472f97 Add from __future__ import annotations to all src/ Python files (#15371)
• 908773d Bump downstream dependencies in CI (#15368)
• 2cc07cc Bump BoringSSL, OpenSSL, AWS-LC in CI (#15367)
• c94ede9 chore(deps): bump ruff from 0.16.0 to 0.16.1 (#15366)
• 67a8308 chore(deps): bump virtualenv from 21.7.0 to 21.7.1 (#15365)
• 95018ff Release the GIL in one-shot AEAD encrypt/decrypt (#15361)
• 6954733 Release the GIL during DH and DSA parameter generation (#15364)
• 6893b94 Import _serialization instead of serialization in x509/extensions (#15363)
• Additional commits viewable in compare view

Updates firecrawl-py from 4.28.0 to 4.34.0

Commits

• See full diff in compare view

Updates firebase-admin from 7.4.0 to 7.5.0

Release notes

Sourced from firebase-admin's releases.

Firebase Admin Python SDK v7.5.0

New Features

• feat(fcm): Enable fid and deprecate token for Send API (#951)

Bug Fixes

• fix(deps): Added universe_domain override to MockGoogleComputeEngineCredential (#954)

Miscellaneous

• [chore] Release 7.5.0 (#958)
• chore(deps): update pytest-mock requirement from >=3.6.1 to >=3.15.1 (#959)
• chore(deps): update pytest-localserver requirement (#961)
• chore(deps): update pytest requirement from >=8.2.2 to >=8.4.2 (#946)
• chore(deps): update google-cloud-firestore requirement (#947)
• chore(deps): update pyjwt requirement from >=2.10.1 to >=2.12.1 (#948)
• chore: Pinned cryptography version for older PyPy interpreters (#952)

Commits

• c5e66f8 [chore] Release 7.5.0 (#958)
• 0656dc2 chore(deps): update pytest-mock requirement from >=3.6.1 to >=3.15.1 (#959)
• a013e56 chore(deps): update pytest-localserver requirement (#961)
• 6d3fc8e chore(deps): update pytest requirement from >=8.2.2 to >=8.4.2 (#946)
• a157407 chore(deps): update google-cloud-firestore requirement (#947)
• e989b13 chore(deps): update pyjwt requirement from >=2.10.1 to >=2.12.1 (#948)
• aa001ce fix(deps): Added universe_domain override to MockGoogleComputeEngineCredentia...
• 44f7246 feat(fcm): Enable fid and deprecate token for Send API (#951)
• f493fb0 chore: Pinned cryptography version for older PyPy interpreters (#952)
• See full diff in compare view

Updates langchain to 1.3.14

Release notes

Sourced from langchain's releases.

langchain==1.3.14

Changes since langchain==1.3.13

release(langchain): 1.3.14 (#38883) fix(langchain): only retry retryable exceptions in ToolRetryMiddleware (#38845) feat(langchain): ToolErrorMiddleware (#38781)

Commits

• 185119f release(langchain): 1.3.14 (#38883)
• 0a3bde6 fix(langchain): only retry retryable exceptions in ToolRetryMiddleware (#38...
• 7bf8fe2 chore(model-profiles): refresh model profile data (#38856)
• 2286932 fix: patch Dependabot dependency vulnerabilities (#38853)
• d260c52 chore: bump soupsieve from 2.8 to 2.8.4 in /libs/core (#38750)
• ceb1e4e feat(langchain): ToolErrorMiddleware (#38781)
• 2f29107 chore: bump soupsieve from 2.8 to 2.8.4 in /libs/langchain (#38749)
• 6cd44e0 chore: bump soupsieve from 2.8 to 2.8.4 in /libs/text-splitters (#38748)
• 4e57abd chore: bump nltk from 3.9.4 to 3.10.0 in /libs/text-splitters (#38747)
• 3e983cb chore: bump mistune from 3.2.1 to 3.3.0 in /libs/text-splitters (#38826)
• Additional commits viewable in compare view

Updates langchain-anthropic to 1.5.3

Release notes

Sourced from langchain-anthropic's releases.

langchain-anthropic==1.5.3

Changes since langchain-anthropic==1.5.2

release(anthropic): 1.5.3 (#39109) fix(anthropic): preserve empty thinking field in signature_delta streaming (#38765) fix(anthropic): strip unsupported fields from system message content blocks (#39101)

Commits

• 835c85a release(anthropic): 1.5.3 (#39109)
• c1ab807 release(core): 1.5.2 (#39108)
• 3132233 fix(anthropic): preserve empty thinking field in signature_delta streaming (#...
• b3a6d9a chore(model-profiles): refresh model profile data (#39105)
• 447b51a fix(anthropic): strip unsupported fields from system message content blocks (...
• 55af8a4 fix(core): handle empty string in gateway env vars (#39107)
• 7316020 fix(ci): repair model profile refresh workflow expressions (#39095)
• a24f9eb ci: add provider filter to model profile refresh workflow (#39094)
• 40956c3 release(fireworks): 1.5.2 (#39093)
• 828335a chore(model-profiles): refresh model profile data (#39092)
• Additional commits viewable in compare view

Updates langchain-community to 0.4.2

Release notes

Sourced from langchain-community's releases.

langchain-community==0.4.2

Sunsetting langchain-community

langchain-community is being sunset. See langchain-ai/langchain-community#674 for details and guidance. Thank you to everyone who has contributed integrations, fixes, reviews, and maintenance over the years.

What's Changed

• chore: modernize infra by @​mdrxy in langchain-ai/langchain-community#402
• Add PMID from PubMedAPIWrapper utility by @​davale88 in langchain-ai/langchain-community#43
• gitlab api wrapper[patch]: fix create_file eats the first letter by @​martra in langchain-ai/langchain-community#153
• Update lancedb.py by @​AmirBraham in langchain-ai/langchain-community#108
• Correcting OpenSearchVectorStore documentation for AsyncClient import problem by @​georg-wind in langchain-ai/langchain-community#252
• Update test_duckduckdgo_search_api.py import by @​theprashasst in langchain-ai/langchain-community#248
• Fixed typos. by @​oumizx in langchain-ai/langchain-community#277
• Correct misleading CosmosDB connection string validation error message by @​lasagna0 in langchain-ai/langchain-community#315
• fix: fix score threshold is zero scenario by @​MichaelLi65535 in langchain-ai/langchain-community#398
• Fix broken link of partition docs of unstructured package by @​mhihasan in langchain-ai/langchain-community#354
• fix(loader): fix TextLoader doc string indentation by @​vneogi199 in langchain-ai/langchain-community#360
• Fixed Syntax Error in Trino dialect by @​saathwik-tk in langchain-ai/langchain-community#399
• fix: message line regex by @​martinschaer in langchain-ai/langchain-community#196
• community: remove integration as the product has changed by @​Xe in langchain-ai/langchain-community#159
• Update sql_database.py to support materialized view by @​groundrace in langchain-ai/langchain-community#281
• RSS Feed Document Loader Publish Date Fallback by @​mariomeyer in langchain-ai/langchain-community#219
• fix: lint by @​mdrxy in langchain-ai/langchain-community#405
• chore(infra): add auto-labelers by @​mdrxy in langchain-ai/langchain-community#406
• feat: add cost by 1k tokens for sonnet 4.5 by @​higorgardin in langchain-ai/langchain-community#391
• fix: Refactor query_builder to use limit method by @​userNanni in langchain-ai/langchain-community#377
• feat: migrate document_loaders from rapidocr_onnxruntime to rapidocr by @​athoik in langchain-ai/langchain-community#375
• Deprecate Oracle AI Vector Search classes by @​fileames in langchain-ai/langchain-community#283
• Fix: Add default factory to api_wrapper of GoogleSerperRun by @​duccm94 in langchain-ai/langchain-community#157
• community[fix]: support spark x1 reasoning model's 'reasoning_content' field. by @​vsxd in langchain-ai/langchain-community#251
• fix: use uuid1() instead of uuid4() for Cassandra TIMEUUID columns by @​woohhan in langchain-ai/langchain-community#225
• Import chat_models from langchain_community in langchain-ai/langchain-community#198
• fix: Retrieve all Slack channels visible to the client by @​m1kl0sh in langchain-ai/langchain-community#146
• feat: fix elevenlabs >=2.3.0 api change by @​ebwood in langchain-ai/langchain-community#102
• fix: write image data to buffer before checking for empty BytesIO in image extraction by @​mighoocool in langchain-ai/langchain-community#193
• align SupabaseVectorStore ID handling with JS lib by @​taishikato in langchain-ai/langchain-community#137
• fix(document_loaders): yt api as per latest version by @​lokeshparab in langchain-ai/langchain-community#206
• feat: Add comprehensive routing support to OpenSearchVectorSearch by @​yukiharada1228 in langchain-ai/langchain-community#349
• fix(chat_models): parallel tool calls in ChatTongyi when incremental streaming output is enabled. by @​TBice123123 in langchain-ai/langchain-community#111
• fix(infra): remove unused dataclasses-json dependency by @​noirbee in langchain-ai/langchain-community#270
• chore: update README.md by @​mdrxy in langchain-ai/langchain-community#408
• feat(agent_toolkits): Make WebClient injectable for Slack toolkit by @​m1kl0sh in langchain-ai/langchain-community#145
• feat(document_loaders): add flexible timeout to PlaywrightURLLoader by @​parthsompura in langchain-ai/langchain-community#104
• feat: add SSL verification option to recursive link fetching by @​rajasblack in langchain-ai/langchain-community#46
• chore: some cleanup by @​mdrxy in langchain-ai/langchain-community#412
• fix(azure): Fix key assignment logic by @​yashovardhan99 in langchain-ai/langchain-community#418
• feat(vectorstores): add routing support for hybrid search by @​yukiharada1228 in langchain-ai/langchain-community#416
• nit: use american english by @​mdrxy in langchain-ai/langchain-community#419
• chore(infra): clarify allowed scopes section in PR linting workflow by @​mdrxy in langchain-ai/langchain-community#420
• chore: update README.md by @​mdrxy in langchain-ai/langchain-community#422

... (truncated)

Commits

• 7c10a5f fix: bump deps and fix test (#676)
• 0d3630d fix: sunset package (#675)
• 3ade247 chore(deps): bump urllib3 from 2.6.3 to 2.7.0 in /libs/community (#662)
• 27c60ba chore(deps): bump langsmith from 0.7.31 to 0.8.4 in /libs/community (#666)
• 2e8d934 chore(deps): bump jupyter-server from 2.17.0 to 2.18.0 in /libs/community (#654)
• f0b16c2 chore(deps): bump mistune from 3.2.0 to 3.2.1 in /libs/community (#656)
• bfbfe3f chore(deps): update scikit-learn requirement from <2,>=1.2.2 to >=1.7.2,<2 in...
• 4cbef29 chore(deps): update hdbcli requirement from <3,>=2.19.21 to >=2.28.20,<3 in /...
• 22377e1 chore(deps): update keybert requirement from >=0.8.5 to >=0.9.0 in /libs/comm...
• c4dbaa2 chore(deps): bump notebook from 7.5.4 to 7.5.6 in /libs/community (#646)
• Additional commits viewable in compare view

Updates langchain-core to 1.5.3

Release notes

Sourced from langchain-core's releases.

langchain-core==1.5.3

Changes since langchain-core==1.5.2

release(core): 1.5.3 (#39145) fix(core): fall back to LANGSMITH_API_KEY for gateway (#39115)

Commits

• 01d8481 release(core): 1.5.3 (#39145)
• b8a6e36 chore(model-profiles): refresh model profile data (#39141)
• cdca311 fix(core): fall back to LANGSMITH_API_KEY for gateway (#39115)
• a5a8762 ci: annotate uv bump workflow with PR links (#39112)
• 557c0a9 chore(deps): bump uv to 0.12.0 (#39111)
• 835c85a release(anthropic): 1.5.3 (#39109)
• c1ab807 release(core): 1.5.2 (#39108)
• 3132233 fix(anthropic): preserve empty thinking field in signature_delta streaming (#...
• b3a6d9a chore(model-profiles): refresh model profile data (#39105)
• 447b51a fix(anthropic): strip unsupported fields from system message content blocks (...
• Additional commits viewable in compare view

Updates langchain-mcp-adapters to 0.3.1

Release notes

Sourced from langchain-mcp-adapters's releases.

langchain-mcp-adapters==0.3.1

What's Changed

• build(deps): bump pyjwt from 2.12.1 to 2.13.0 by @​dependabot[bot] in langchain-ai/langchain-mcp-adapters#544
• build(deps): bump python-multipart from 0.0.27 to 0.0.31 by @​dependabot[bot] in langchain-ai/langchain-mcp-adapters#546
• build(deps): bump pyjwt from 2.12.1 to 2.13.0 in /examples/servers/streamable-http-stateless in the uv group across 1 directory by @​dependabot[bot] in langchain-ai/langchain-mcp-adapters#545
• build(deps): bump cryptography from 46.0.7 to 48.0.1 by @​dependabot[bot] in langchain-ai/langchain-mcp-adapters#547
• build(deps): bump starlette from 1.0.1 to 1.3.1 by @​dependabot[bot] in langchain-ai/langchain-mcp-adapters#548
• build(deps): bump the uv group across 1 directory with 3 updates by @​dependabot[bot] in langchain-ai/langchain-mcp-adapters#549
• build(deps): bump langsmith from 0.8.0 to 0.8.18 by @​dependabot[bot] in langchain-ai/langchain-mcp-adapters#552
• build(deps): bump langgraph-sdk from 0.3.9 to 0.3.15 by @​dependabot[bot] in langchain-ai/langchain-mcp-adapters#559
• build(deps): bump langgraph-checkpoint from 4.0.0 to 4.1.1 by @​dependabot[bot] in langchain-ai/langchain-mcp-adapters#558
• build(deps): bump actions/checkout from 6 to 7 in the major group by @​dependabot[bot] in langchain-ai/langchain-mcp-adapters#562
• build(deps): bump the minor-and-patch group with 3 updates by @​dependabot[bot] in langchain-ai/langchain-mcp-adapters#563
• Patch LangChain Dependabot alerts by @​langsmith-fleet[bot] in langchain-ai/langchain-mcp-adapters#570
• Pin setup-uv GitHub Action by @​jkennedyvz in langchain-ai/langchain-mcp-adapters#572
• build(deps): bump mcp from 1.23.0 to 1.27.2 in /examples/servers/streamable-http-stateless in the uv group across 1 directory by @​dependabot[bot] in langchain-ai/langchain-mcp-adapters#573
• build(deps): bump mcp from 1.27.2 to 1.28.1 in /examples/servers/streamable-http-stateless in the uv group across 1 directory by @​dependabot[bot] in langchain-ai/langchain-mcp-adapters#574
• Add Dependabot coverage for example server by @​jkennedyvz in langchain-ai/langchain-mcp-adapters#582
• build(deps-dev): bump types-setuptools from 82.0.0.20260518 to 83.0.0.20260724 in the major group by @​dependabot[bot] in langchain-ai/langchain-mcp-adapters#586
• build(deps): bump the minor-and-patch group in /examples/servers/streamable-http-stateless with 3 updates by @​dependabot[bot] in langchain-ai/langchain-mcp-adapters#584
• build(deps): bump pypa/gh-action-pypi-publish from 1.14.0 to 1.14.1 in the minor-and-patch group by @​dependabot[bot] in langchain-ai/langchain-mcp-adapters#583
• build(deps): bump the minor-and-patch group with 3 updates by @​dependabot[bot] in langchain-ai/langchain-mcp-adapters#585
• feat: add get_server_info to retrieve MCP server metadata by @​umbilnm in langchain-ai/langchain-mcp-adapters#430
• release: 0.3.1 by @​mdrxy in langchain-ai/langchain-mcp-adapters#587

New Contributors

• @​langsmith-fleet[bot] made their first contribution in langchain-ai/langchain-mcp-adapters#570
• @​umbilnm made their first contribution in langchain-ai/langchain-mcp-adapters#430

Full Changelog: langchain-ai/langchain-mcp-adapters@langchain-mcp-adapters==0.3.0...langchain-mcp-adapters==0.3.1

Commits

• e81a81b release: 0.3.1 (#587)
• d4c6611 feat: add get_server_info to retrieve MCP server metadata (#430)
• 9735d27 build(deps): bump the minor-and-patch group with 3 updates (#585)
• 04e2703 build(deps): bump pypa/gh-action-pypi-publish from 1.14.0 to 1.14.1 in the mi...
• 4f17623 build(deps): bump the minor-and-patch group in /examples/servers/streamable-h...
• e5c7e5f build(deps-dev): bump types-setuptools from 82.0.0.20260518 to 83.0.0.2026072...
• 105d8d2 Add Dependabot coverage for example server (#582)
• 710271f build(deps): bump mcp from 1.27.2 to 1.28.1 in /e...

  Description has been truncated