chore(deps): bump langsmith from 0.7.22 to 0.8.0#1653
Conversation
dependabot
Bot
added
dependencies
![claude[bot]](https://avatars.githubusercontent.com/in/1236702?s=60&v=4){kind=small}
There was a problem hiding this comment.
LGTM — transitive dependency lock-file bump; langsmith is not directly imported by langfuse.
Extended reasoning...
Overview
This is a Dependabot-generated PR bumping langsmith from 0.7.22 to 0.8.0 in uv.lock only. It also includes a metadata tweak from uv itself: exclude-newer switched to a no-op sentinel value with a comment noting backwards compatibility for relative exclude-newer-span values.
Security risks
None apparent. langsmith is a transitive dependency (pulled in via langchain) and is not directly imported by langfuse — the only repo reference is the string literal "langsmith:hidden" used as a tag in the langchain CallbackHandler. The upgrade includes maintenance fixes and additive features (strands OTEL exporter, Pydantic input/output fix, Claude Agent SDK concurrency fix); nothing in the release notes appears security-sensitive.
Level of scrutiny
Low. This is a routine, mechanical bot dependency bump touching only uv.lock. No runtime code, no public API, no security-sensitive surfaces are affected.
Other factors
The exclude-newer lockfile metadata change looks unusual at first glance but is a known no-op marker emitted by recent uv versions; the inline comment in the lock confirms the intent. CI on the PR will exercise the langchain integration test paths.
Bumps [langsmith](https://github.com/langchain-ai/langsmith-sdk) from 0.7.22 to 0.8.0. - [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases) - [Commits](langchain-ai/langsmith-sdk@v0.7.22...v0.8.0) --- updated-dependencies: - dependency-name: langsmith dependency-version: 0.8.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/uv/langsmith-0.8.0
branch
from
6c2e25e to
c7c0f8f
Compare
Bumps [langsmith](https://github.com/langchain-ai/langsmith-sdk) from 0.7.22 to 0.8.0. - [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases) - [Commits](langchain-ai/langsmith-sdk@v0.7.22...v0.8.0) --- updated-dependencies: - dependency-name: langsmith dependency-version: 0.8.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 participant
Bumps langsmith from 0.7.22 to 0.8.0.
Release notes
Sourced from langsmith's releases.
... (truncated)
Commits
cf01c87release(py): 0.8.0 (#2833)fd049c8release(js): 0.6.0 (#2832)092a886feat(js,py): JS 0.6.0, Py 0.8.0 (#2831)ff180c0release(py): 0.7.38 (#2825)d9de3carelease(js): 0.5.26 (#2824)1428394fix(js): Pull Claude Agent SDK subagent runs from transcript, add tool span f...838e957chore: add apac support (#2821)003f22afix(py): fix RunTree ValidationError when inputs or outputs is a Pydantic Bas...8f5ef27chore(js): Switch to oxfmt and oxlint (#2819)9873633feat(py): Adds strands OTEL exporter (#2817)