Bump langsmith from 0.8.16 to 0.8.18 - #52
Conversation
Bumps [langsmith](https://github.com/langchain-ai/langsmith-sdk) from 0.8.16 to 0.8.18. - [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases) - [Commits](langchain-ai/langsmith-sdk@v0.8.16...v0.8.18) --- updated-dependencies: - dependency-name: langsmith dependency-version: 0.8.18 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
![claude[bot]](https://avatars.githubusercontent.com/in/1236702?s=60&v=4){kind=small}
There was a problem hiding this comment.
LGTM — straightforward Dependabot patch bump of langsmith (0.8.16 → 0.8.18), lockfile-only change.
Extended reasoning...
Overview
This PR is a Dependabot patch-level dependency update for langsmith from 0.8.16 to 0.8.18, modifying only uv.lock (version + sdist/wheel URL and hashes). No source code, configuration, or transitive dependency changes are present in the diff.
Security risks
None apparent. The upgrade pulls in upstream sub-dependency bumps (cryptography, aiohttp, starlette, pyjwt, python-multipart) which are generally security-positive. Hashes are pinned in the lockfile and Dependabot signs/verifies the PR.
Level of scrutiny
Low. Lockfile-only patch bump of a well-known library used for LangChain tracing/observability. The PR carries the Patch and dependencies labels and matches the standard automated-merge pattern for this repo.
Other factors
No bugs reported by the bug-hunting system, no prior reviewer comments, and no outstanding discussion threads. Safe to shadow-approve.
1 participant
Bumps langsmith from 0.8.16 to 0.8.18.
Release notes
Sourced from langsmith's releases.
Commits
31c2bf6release(py): 0.8.18 (#3063)8955b68chore: reconcile bumpversion config and mandate release process for agents (#...411401ftest(python): fix integration assertions for updated attachment error message...9c55156Merge commit from fork5b2bd8dchore(deps): bump the npm_and_yarn group across 2 directories with 2 updates ...d8642f9chore(deps): bump the npm_and_yarn group across 4 directories with 4 updates ...953c2e5chore(deps-dev): bump langchain-anthropic from 1.4.4 to 1.4.6 in /python (#3044)5513699chore(deps): bump starlette from 1.0.1 to 1.3.1 in /python (#3039)8becdefchore(deps): bump cryptography from 46.0.7 to 48.0.1 in /python (#3038)1a9c522chore(deps): bump aiohttp from 3.14.0 to 3.14.1 in /python (#3037)You can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.