ci(infra): harden Dependabot version-bound preservation (#37510)

Dependabot has been stripping upper/lower bounds from internal
`langchain-*` deps in partner `pyproject.toml` files (e.g. #37288
reduced `langchain-core>=1.3.2,<2.0.0` to bare `langchain-core`). Locks
down the config so bumps preserve existing specifiers, and restores the
bounds it already mangled across the monorepo.

## Changes
- Add `versioning-strategy: increase` to every `uv` ecosystem block in
`.github/dependabot.yml` so future bumps move the lower bound in place
instead of rewriting the constraint.
- Ignore workspace-internal packages (`langchain-core`, `langchain`,
`langchain-classic`, `langchain-text-splitters`, `langchain-tests`,
`langchain-model-profiles`) on every `uv` block — these are editable
installs from local paths and their published constraints are
hand-curated for release, not Dependabot's to bump.
- Restore stripped bounds across all `libs/` packages — runtime
`dependencies` and every dep group (`test`, `dev`, `test_integration`,
`typing`, `lint`) — to `>=1.4.0,<2.0.0` for `langchain-core` and
`>=1.0.0,<2.0.0` for the other internal packages.
This commit is contained in:
Mason Daugherty
2026-05-18 15:24:19 -07:00
committed by GitHub
parent 2458a7912e
commit abd9d4ce31
24 changed files with 142 additions and 117 deletions

View File

@@ -24,7 +24,7 @@ version = "1.4.3"
requires-python = ">=3.10.0,<4.0.0"
dependencies = [
"anthropic>=0.96.0,<1.0.0",
"langchain-core",
"langchain-core>=1.4.0,<2.0.0",
"pydantic>=2.7.4,<3.0.0",
]
@@ -54,17 +54,17 @@ test = [
"pytest-xdist>=3.8.0,<4.0.0",
"vcrpy>=8.0.0,<9.0.0",
"langgraph-prebuilt>=0.7.0a2", # set explicitly until we have a stable version
"langchain-core",
"langchain-tests",
"langchain",
"langchain-core>=1.4.0,<2.0.0",
"langchain-tests>=1.0.0,<2.0.0",
"langchain>=1.0.0,<2.0.0",
]
lint = ["ruff>=0.13.1,<0.14.0"]
dev = ["langchain-core"]
test_integration = ["requests>=2.32.3,<3.0.0", "langchain-core"]
dev = ["langchain-core>=1.4.0,<2.0.0"]
test_integration = ["requests>=2.32.3,<3.0.0", "langchain-core>=1.4.0,<2.0.0"]
typing = [
"mypy>=1.17.1,<2.0.0",
"types-requests>=2.31.0,<3.0.0",
"langchain-core",
"langchain-core>=1.4.0,<2.0.0",
]