chore(deps): Bump the minor-and-patch group across 1 directory with 13 updates

[dependabot]

Bumps the minor-and-patch group with 12 updates in the /a2a/a2a_currency_converter directory:

Package	From	To
langchain-google-genai	4.2.7	4.3.5
langgraph	1.2.9	1.2.11
python-dotenv	1.2.2	1.2.3
uvicorn	0.51.0	0.52.4
langchain-openai	1.3.4	1.6.0
pydantic-settings	2.14.2	2.15.0
openinference-instrumentation-langchain	0.1.67	0.1.71
opentelemetry-exporter-otlp	1.43.0	1.44.0
starlette	1.3.1	1.6.0
langgraph-checkpoint	4.1.1	4.2.0
orjson	3.11.9	3.12.0
langsmith	0.10.1	0.11.1

Updates langchain-google-genai from 4.2.7 to 4.3.5

Release notes

Sourced from langchain-google-genai's releases.

langchain-google-genai==4.3.5

Changes since libs/genai/v4.3.4

release(genai): 4.3.5 (#1955) feat(genai): support standard chat model exception types (#1952)

langchain-google-genai==4.3.4

Changes since libs/genai/v4.3.3

release(genai): 4.3.4 (#1946) chore(model-profiles): refresh model profile data (#1906) chore(genai): update tests for LangSmith gateway (#1944)

langchain-google-genai==4.3.3

Changes since libs/genai/v4.3.2

release(genai): 4.3.3 (#1936) fix: normalize empty AI content for Vertex (#1935) chore: bump types-requests from 2.33.0.20260518 to 2.33.0.20260712 in /libs/genai (#1918) chore: bump cryptography from 48.0.1 to 50.0.0 in /libs/genai (#1925)

langchain-google-genai==4.3.2

Changes since libs/genai/v4.3.1

release(genai): 4.3.2 (#1911) feat(genai): support langsmith gateway through env var (#1907) chore: bump pyasn1 from 0.6.3 to 0.6.4 in /libs/genai (#1901)

langchain-google-genai==4.3.1

Changes since libs/genai/v4.3.0

release(genai): 4.3.1 (#1900) fix(genai): align reasoning effort profiles with Gemini docs (#1899)

langchain-google-genai==4.3.0

Changes since libs/genai/v4.2.7

fix(genai): handle request rules for new Gemini models (#1897) chore(model-profiles): refresh model profile data (#1879) release(genai): 4.3.0 (#1896) feat(genai): add reasoning_effort as a standard chat model parameter (#1895) test(genai): retry flaky structured output streaming tests (#1893) fix(genai): remove default temperature for gemini models (#1882) chore: bump the minor-and-patch group across 1 directory with 6 updates (#1876)

Commits

• 75f7581 release(genai): 4.3.5 (#1955)
• fb266fe feat(genai): support standard chat model exception types (#1952)
• da7a42e release(genai): 4.3.4 (#1946)
• 7b7be53 chore(model-profiles): refresh model profile data (#1906)
• b276bb5 chore(genai): update tests for LangSmith gateway (#1944)
• af46f84 release(genai): 4.3.3 (#1936)
• c638727 fix: normalize empty AI content for Vertex (#1935)
• 508acdd chore: bump types-requests from 2.33.0.20260518 to 2.33.0.20260712 in /libs/c...
• 67abfcd chore: bump aiohttp from 3.14.1 to 3.14.3 in /libs/community (#1926)
• 126c389 chore: bump types-google-cloud-ndb from 2.4.0.20260518 to 2.4.0.20260724 in /...
• Additional commits viewable in compare view

Updates langgraph from 1.2.9 to 1.2.11

Release notes

Sourced from langgraph's releases.

langgraph==1.2.11

Changes since 1.2.10

• release(langgraph): 1.2.11 (#8595)
• feat(langgraph): expose trace_policy on add_node (#8523)
• chore(deps): bump the minor-and-patch group across 1 directory with 7 updates (#8533)
• chore(deps): bump the minor-and-patch group across 1 directory with 5 updates (#8532)
• release(checkpoint-postgres): 3.1.2 (#8565)
• release(checkpoint): 4.2.0 (#8563)
• fix(checkpoint): collect writes at plain-value seed in delta channel history (#8526)
• chore: enforce PLC0415 in tests for the remaining packages (#8547)
• test(checkpoint-postgres,checkpoint-sqlite): run the conformance suite (#8537)
• chore: enable RUF100 and clear unused noqa directives (#8546)
• chore(deps-dev): bump types-requests from 2.33.0.20260518 to 2.33.0.20260712 in /libs/langgraph (#8502)
• chore(deps): bump cryptography from 48.0.1 to 50.0.0 in /libs/langgraph (#8528)
• release(checkpoint-sqlite): 3.1.1 (#8481)
• release(checkpoint-postgres): 3.1.1 (#8480)

langgraph==1.2.10

Changes since 1.2.9

• release(langgraph): 1.2.10 (#8462)
• chore(deps): bump jupyterlab from 4.5.9 to 4.5.10 in /libs/langgraph (#8440)
• chore(deps): bump setuptools from 80.9.0 to 83.0.0 in /libs/langgraph (#8435)
• feat(langgraph): type v3 stream_events return and native projections (#8389)
• revert(langgraph): delete TracePolicy (#8403)
• feat(langgraph): drop tags from TracePolicy (#8402)
• feat(langgraph): expose trace_policy on add_node (#8362)
• chore(deps): bump mistune from 3.2.1 to 3.3.0 in /libs/langgraph (#8317)
• chore(deps): bump soupsieve from 2.8.1 to 2.8.4 in /libs/langgraph (#8318)
• chore(cli): allow langgraph-api versions up to 1.0.0 (#8319)

Commits

• 644815f release(langgraph): 1.2.11 (#8595)
• 7d6b579 feat(langgraph): expose trace_policy on add_node (#8523)
• d56666f chore(deps): bump the minor-and-patch group across 1 directory with 7 updates...
• 6a2822d chore(deps): bump the minor-and-patch group across 1 directory with 5 updates...
• fde3068 release(checkpoint-postgres): 3.1.2 (#8565)
• f55e772 release(checkpoint): 4.2.0 (#8563)
• a90ab44 fix(checkpoint): collect writes at plain-value seed in delta channel history ...
• ea5f9cc chore: enforce PLC0415 in tests for the remaining packages (#8547)
• 36a505a test(checkpoint-postgres,checkpoint-sqlite): run the conformance suite (#8537)
• d569e18 fix(checkpoint-postgres): find plain-value seeds when walking delta history (...
• Additional commits viewable in compare view

Updates python-dotenv from 1.2.2 to 1.2.3

Release notes

Sourced from python-dotenv's releases.

v1.2.3

Fixed

• Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@​h1whelan] in #640
• set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@​dchaudhari7177] in #680
• dotenv run now prints a friendly error instead of a traceback when no command is given by [@​bbc2] in #606
• Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@​ReinerBRO] in #638

Changelog

Sourced from python-dotenv's changelog.

[1.2.3] - 2026-08-16

Fixed

• Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@​h1whelan] in #640
• set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@​dchaudhari7177] in #680
• dotenv run now prints a friendly error instead of a traceback when no command is given by [@​bbc2] in #606
• Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@​ReinerBRO] in #638

Commits

• 49515af Bump version: 1.2.2 → 1.2.3
• 8ac846f chore: add release runbook (RELEASING.md) and make release target
• bb31c94 docs: add 1.2.3 release notes (#606, #638, #680)
• f7b18d9 fix: round-trip backslashes through set_key (#680)
• 751f8c1 ci(deps): bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions gro...
• f1937b6 chore(deps): update mkdocs-include-markdown-plugin requirement from >=6.0.0 t...
• 45b9372 chore(deps): update pytest requirement from >=3.9 to >=9.0.3 (#653)
• 72896e9 docs: fix broken mkdocs link in CONTRIBUTING.md (#636)
• 72754a1 ci(deps): bump peaceiris/actions-gh-pages from 4.0.0 to 4.1.0 in the github-a...
• 078325e ci(security): harden CI/CD supply chain with SHA pinning and least-privilege ...
• Additional commits viewable in compare view

Updates uvicorn from 0.51.0 to 0.52.4

Release notes

Sourced from uvicorn's releases.

Version 0.52.4

Fixed

• Remove duplicate Date headers from accepted WebSocket handshakes with websockets-sansio (#3078)

Full Changelog: Kludex/uvicorn@0.52.3...0.52.4

Version 0.52.3

Changed

• Update zttp to 0.0.24 and use its combined receive path, improving HTTP/1.1 request parsing performance (#3067)

Full Changelog: Kludex/uvicorn@0.52.2...0.52.3

Version 0.52.2

Fixed

• Update zttp to 0.0.22, fixing bodyless request receives and improving HTTP/1 request parsing performance (#3063)

Full Changelog: Kludex/uvicorn@0.52.1...0.52.2

Version 0.52.1

Fixed

• Complete the closing handshake on server-initiated WebSocket closes in the websockets-sansio and wsproto implementations, waiting for the client's close reply with a 10 second timeout instead of resetting the connection (#3053)
• Add missing write flow control to the websockets-sansio implementation, preventing data truncation on server-initiated closes with large in-flight payloads (#3048)
• Handle connection loss while a WebSocket write is waiting on backpressure (#3050)
• Remove duplicate Content-Type and Content-Length headers from WebSocket denial responses on the websockets-sansio implementation, and deliver non-UTF-8 denial bodies intact (#3041)

Full Changelog: Kludex/uvicorn@0.52.0...0.52.1

Version 0.52.0

This release adds an experimental HTTP/1.1 implementation backed by zttp, a sans-IO HTTP parser I've been developing on the side: a core written in Zig, with bindings to Python. It has been running under a fuzzer for some weeks now, and has been through multiple rounds of security auditing.

It is still experimental, so don't put it in front of production traffic yet. Try it with --http zttp, and please send any feedback to the issue tracker.

Added

• Add an experimental zttp HTTP/1.1 implementation, selectable with --http zttp (#2979)

Fixed

• Keep non-ASCII WebSocket request headers intact with websockets 17.0, which encodes them with ISO-8859-1 (#3036)

Full Changelog: Kludex/uvicorn@0.51.0...0.52.0

Changelog

Sourced from uvicorn's changelog.

0.52.4 (August 18, 2026)

Fixed

• Remove duplicate Date headers from accepted WebSocket handshakes with websockets-sansio (#3078)

0.52.3 (August 13, 2026)

Changed

• Update zttp to 0.0.24 and use its combined receive path, improving HTTP/1.1 request parsing performance (#3067)

0.52.2 (August 13, 2026)

Fixed

• Update zttp to 0.0.22, fixing bodyless request receives and improving HTTP/1 request parsing performance (#3063)

0.52.1 (August 1, 2026)

Fixed

• Complete the closing handshake on server-initiated WebSocket closes in the websockets-sansio and wsproto implementations, waiting for the client's close reply with a 10 second timeout instead of resetting the connection (#3053)
• Add missing write flow control to the websockets-sansio implementation, preventing data truncation on server-initiated closes with large in-flight payloads (#3048)
• Handle connection loss while a WebSocket write is waiting on backpressure (#3050)
• Remove duplicate Content-Type and Content-Length headers from WebSocket denial responses on the websockets-sansio implementation, and deliver non-UTF-8 denial bodies intact (#3041)

0.52.0 (July 29, 2026)

This release adds an experimental HTTP/1.1 implementation backed by zttp, a sans-IO HTTP parser I've been developing on the side: a core written in Zig, with bindings to Python. It has been running under a fuzzer for some weeks now, and has been through multiple rounds of security auditing.

It is still experimental, so don't put it in front of production traffic yet. Try it with --http zttp, and please send any feedback to the issue tracker.

Added

• Add an experimental zttp HTTP/1.1 implementation, selectable with --http zttp (#2979)

Fixed

• Keep non-ASCII WebSocket request headers intact with websockets 17.0, which encodes them with ISO-8859-1 (#3036)

Commits

• 8988c23 Stabilize macOS Python 3.13 signal shutdown tests (#3084)
• 898ddca Update PyPI publish action to version 1.14.2 (#3083)
• 3869f8a Restore Mermaid diagram rendering (#3080)
• 64148a9 Version 0.52.4 (#3079)
• 9e9e569 docs: correct release example PR number (#3072)
• b783dac Remove duplicate Date header from SansIO WebSocket handshakes (#3078)
• 27019b2 chore(deps): bump the python-packages group across 1 directory with 11 update...
• 1b64273 Fix a typo in index.md (#3006)
• a68da60 Version 0.52.3 (#3068)
• 6e3bb4c Use zttp 0.0.24 fast receive path (#3067)
• Additional commits viewable in compare view

Updates langchain-openai from 1.3.4 to 1.6.0

Release notes

Sourced from langchain-openai's releases.

langchain-openai==1.6.0

Changes since langchain-openai==1.5.2

release(openai): 1.6.0 (#39762) feat(core): add standard model exception types (#39538) fix(openai): raise clear error on unexpected response type in _create_chat_result (#39731)

langchain-openai==1.5.2

Changes since langchain-openai==1.5.1

release(openai): 1.5.2 (#39719) fix(openai): preserve reasoning item boundaries (#39278) release(openai): 1.5.2a1 (#39709) feat(openai): extract gateway metadata from response headers when available (#39706) chore(openai): update snapshots (#39657) fix(openai): support o-series models in get_num_tokens_from_messages (#38710)

langchain-openai==1.5.2a1

Initial release

release(openai): 1.5.2a1 (#39709) feat(openai): extract gateway metadata from response headers when available (#39706) chore(openai): update snapshots (#39657) fix(openai): support o-series models in get_num_tokens_from_messages (#38710) release(openai): 1.5.1 (#39653) fix(openai): preserve streamed encrypted reasoning (#39635) chore(infra): support langsmith gateway in CI (#39651) release(openai): 1.5.0 (#39629) feat(openai): support openai 3.0 SDK (#39613) chore(partners): bump langgraph floor in openai and huggingface lockfiles (#39617) release(openai): 1.4.3 (#39485) fix(openai): filter invalid tool calls from content (#39366) chore(openai): update guidance for responses API for OpenAI-compatible providers (#39327) chore(openai): update docstring for include_response_headers (#39326) release(openai): 1.4.2 (#39322) fix(openai): handle ContextWindowExceededError (#39300) chore: bump the minor-and-patch group across 3 directories with 7 updates (#39187) fix(openai): filter langchain-generated content block IDs (#39209) fix(openai): preserve Responses text options (#39204) fix(openai): redact MCP authorization (#39155) chore(model-profiles): refresh model profile data (#39050) release(openai): 1.4.1 (#39045) feat(anthropic,fireworks,openai): support langsmith gateway through env var (#38742) fix(openai): correct gpt-5.3-chat-latest profile (#39009) release(openai): 1.4.0 (#38983) chore: bump pillow from 12.2.0 to 12.3.0 in /libs/partners/openai (#38999) feat(core): add reasoning_effort as a standard chat model parameter (#38887) chore(model-profiles): refresh model profile data (#38797) release(openai): 1.3.5 (#38785) feat(openai): support explicit prompt caching (#38762)

... (truncated)

Commits

• 3478c28 release(anthropic): 1.6.0 (#39763)
• 420dfc9 release(openai): 1.6.0 (#39762)
• 85602c3 release(core): 1.6.0 (#39760)
• 5c3538e fix(core): resolve postponed annotations in `StructuredTool._injected_args_ke...
• 9984a87 feat(core): add standard model exception types (#39538)
• b3e9eef chore(model-profiles): refresh model profile data (#39751)
• ded2a1f fix(core): allow deserializing RunnablePick (#39753)
• 04ae744 fix(core): make convert_to_openai_function handle callables and non-dict ma...
• 37f2662 feat(langchain): support custom token_counter in ContextEditingMiddleware (#3...
• 2019bf5 fix(openai): raise clear error on unexpected response type in `_create_chat_r...
• Additional commits viewable in compare view

Updates pydantic-settings from 2.14.2 to 2.15.0

Release notes

Sourced from pydantic-settings's releases.

v2.15.0

Highlights

Behavior changes

• case_sensitive now applies to init kwargs and config-file sources (#900). InitSettingsSource and the JSON/TOML/YAML config sources previously ignored case_sensitive. Since it defaults to False, case-insensitive matching is now the default for these sources — e.g. Settings(TeSt=...) now populates a test field where it previously did not. Nested keys are still matched case-sensitively.
• Fields with unresolved forward references now emit a warning (#901). Settings sources can silently fail to resolve such fields; they now raise IncompleteFieldDefinitionWarning telling you to call model_rebuild(). If you have filterwarnings = error configured, this may surface as a new failure.
• Non-JSON env values for strict fields now raise ValidationError (#926) instead of a less specific error.

New features

• Show environment variable names in CLI help via cli_show_env_vars=True (#860), so generated --help output doubles as configuration documentation.
• PYDANTIC_SETTINGS_DEBUG for debugging settings resolution (#906, #913). Set it to a truthy value with DEBUG logging enabled to see each source's contribution in priority order, which source won for each value, and which env_file/secret files were probed, loaded, or skipped — the long-standing "why isn't my .env being picked up?" question.
• toml_table_header for regular TOML files (#882, #886, #887), letting you root settings at a nested table in any TOML file, not just pyproject.toml.
• Traversable support for JSON/TOML/YAML file sources (#902), so you can load config packaged inside a distribution — including files inside a zip or wheel — via importlib.resources.files(...) without casting to Path.
• GCP: project_id can come from an earlier settings source (#878), rather than only from the constructor or GOOGLE_CLOUD_PROJECT.

Bug fixes

• Fix env vars not loading on Windows with case_sensitive=True (#894). Windows upper-cases os.environ keys, so fields raised Field required instead of picking up their values.
• Read secret files as UTF-8 instead of the platform locale encoding (#917). On Windows code pages such as cp1252 this silently corrupted non-ASCII secrets.
• Fix AliasPath on nested model fields not JSON-decoding env values (#898).
• Fix case-insensitive matching for optional nested models (#905).
• Fix dotenv extras being wrongly claimed by a complex field sharing a name prefix (#912) — e.g. dbx_token being swallowed by a db: dict field.
• Fix nested_model_default_partial_update=True corrupting discriminated unions (#876).
• Fix Secret subclasses crashing when loaded from the environment (#920).
• Fix enum names not parsing through nested annotations such as Optional[Annotated[MyEnum, ...]] with env_parse_enums=True (#910).
• An empty yaml_config_section now falls back to defaults instead of raising AttributeError: 'NoneType' object has no attribute 'keys' (#914).
• NestedSecretsSettingsSource no longer follows symlinks pointing outside secrets_dir (#889).
• GCP: skip the list_secrets call when case_sensitive=True (#862), lowering the required IAM permissions to just roles/secretmanager.secretAccessor.
• AWS: types-boto3[secretsmanager] is no longer required at runtime (#880).

Documentation

• Document JSON parsing of complex env values, plus a comma-separated-values recipe (#919).
• Recommend an async settings loading pattern (#908).
• Clarify behavior when an unprefixed value is present in a dotenv file (#895).
• Clarify environment variable helper descriptions (#867) and fix assorted typos (#904).

What's Changed

• Update documentation link for Pydantic settings by @​hramezani in pydantic/pydantic-settings#863
• Bump the python-packages group with 4 updates by @​dependabot[bot] in pydantic/pydantic-settings#865
• docs: clarify environment variable helper descriptions by @​vip892766gma in pydantic/pydantic-settings#867
• Bump the python-packages group with 4 updates by @​dependabot[bot] in pydantic/pydantic-settings#870
• Bump the python-packages group with 4 updates by @​dependabot[bot] in pydantic/pydantic-settings#875
• Skip list_secrets call when case_sensitive=True by @​ecerulm in pydantic/pydantic-settings#862
• GoogleSecretManagerSettingsSource: read project_id from previous sources by @​ecerulm in pydantic/pydantic-settings#878

... (truncated)

Commits

• f725ca1 Prepare release 2.15.0 (#930)
• 28f35c2 Bump the python-packages group with 4 updates (#929)
• 9056db0 test: move function-local imports to the top of test modules (#927)
• f077e3a fix: raise ValidationError for non-JSON env values on strict fields (#926)
• ae25d70 fix: treat Secret subclasses as non-complex fields (#716) (#920)
• 798dcea Bump the python-packages group with 4 updates (#924)
• a190041 Bump the github-actions group with 4 updates (#925)
• 5d93332 Bump the python-packages group with 4 updates (#921)
• d2fdeda fix: read secret files as UTF-8 instead of the locale encoding (#917)
• 2256a4e Bump the python-packages group with 3 updates (#915)
• Additional commits viewable in compare view

Updates openinference-instrumentation-langchain from 0.1.67 to 0.1.71

Release notes

Sourced from openinference-instrumentation-langchain's releases.

python-openinference-instrumentation-langchain: v0.1.71

0.1.71 (2026-08-24)

Documentation

• point Arize AX links at the product page with UTM parameters (#3587) (cae8ec9)

Commits

• d10212b chore: release main (#3588)
• 5d50132 fix(anthropic)!: require Anthropic v1 and remove legacy Text Completions inst...
• 58053bf fix(bedrock): handle new anthropic "file" image source type in message extrac...
• 99e05ae test(llama_index): support Anthropic v1 in latest canary (#3604)
• c63bd91 test(langchain): accept OpenAIInvalidRequestError from langchain-openai >= 1....
• cae8ec9 docs: point Arize AX links at the product page with UTM parameters (#3587)
• d0ec025 chore: release main (#3580)
• e333dbc fix(google_genai): record tool parameters from parameters_json_schema for goo...
• b2ae24d chore: release main (#3568)
• bfee9db test(openai): support openai 3.x httpx2 migration in test harness (#3576)
• Additional commits viewable in compare view

Updates opentelemetry-exporter-otlp from 1.43.0 to 1.44.0

Release notes

Sourced from opentelemetry-exporter-otlp's releases.

Version 1.44.0/0.65b0

Added

• opentelemetry-docker-tests: Refactor Docker tests to properly validate contents of exported telemetry (#5220)
• opentelemetry-exporter-otlp-common: add shared package for common OTLP utilities (#5252)
• opentelemetry-sdk: add MissingDependencyError exception for declarative configuration and use it for missing optional dependency errors (#5265)
• opentelemetry-sdk: Add ability to refresh process dependent Resource attributes (#5280)
• opentelemetry-sdk: add force_flush method to LogRecordExporter ABC (#5294)
• opentelemetry-sdk: Make it possible to limit the size of stored spans in InMemorySpanExporter (#5296)
• opentelemetry-sdk: add log record limits environment variables OTEL_LOGRECORD_ATTRIBUTE_COUNT_LIMIT and OTEL_LOGRECORD_ATTRIBUTE_VALUE_LENGTH_LIMIT (#5300)
• opentelemetry-sdk: add support for file exporter with declarative config (#5311)
• opentelemetry-sdk: expose SynchronousMultiLogRecordProcessor and ConcurrentMultiLogRecordProcessor publicly (#5327)
• opentelemetry-sdk: point the declarative configuration package README at the shared language support status matrix in the opentelemetry-configuration repo, so Python conformance status lives alongside the other languages instead of being duplicated per language SDK. (#5347)
• opentelemetry-sdk: document that Python-implementation extensions (OTEL_PYTHON_* variables) are bypassed when OTEL_CONFIG_FILE is set. The env-var initialisation path is skipped entirely in favour of the declarative file; honouring these alongside a config file is tracked as a follow-up. (#5353)
• opentelemetry-sdk: wire id_generator from declarative configuration to TracerProvider (#5363)
• opentelemetry-sdk: Add support for activating instrumentors from a declarative configuration file via the instrumentation/development.python section. Instrumentors can declare a configuration attribute to have their options validated through the same type-coercion pipeline used for SDK component configuration. (#5372)
• opentelemetry-sdk: add record_min_max option to ExponentialBucketHistogramAggregation, matching the option already available on ExplicitBucketHistogramAggregation and required by the specification (#5377)

Changed

• opentelemetry-sdk: revert BoundedAttributes RLock back to Lock (#5329)
• docs: update logs example to use opentelemetry-instrumentation-logging (#5344)
• opentelemetry-sdk: bump declarative configuration schema to v1.1.0 (#5345)
• opentelemetry-configuration: declarative configuration moves from opentelemetry.sdk._configuration into the new public opentelemetry-configuration package (opentelemetry.configuration namespace), published experimentally. opentelemetry-sdk[file-configuration] continues to work as an alias that installs opentelemetry-configuration alongside the SDK. (#5356)
• opentelemetry-api: remove env carrier environment snapshot caching, you now have to pass explicitly the mapping where to get the environment variables from as the EnvironmentGetter.get first argument. (#5366)
• opentelemetry-semantic-conventions: bump to 1.42.0 (#5410)
• opentelemetry-semantic-conventions: bump to 1.43.0 (#5413)

Removed

• opentelemetry-api, opentelemetry-sdk: Removed deprecated Events API/SDK. Use LogRecord with the event_name field set instead. (#5293)

Fixed

• opentelemetry-sdk: Optimize LogRecord memory in BatchLogRecordProcessor by clearing the Context object before buffering. This is a potentially breaking change for custom log exporters that access context from the exported ReadableLogRecord, as the context will now be an empty Context() instead of the original. (#4977)
• opentelemetry-sdk: drop non-finite measurements (NaN and Inf) at the instrument level to prevent permanent aggregation poisoning (#5336)
• opentelemetry-sdk: raise ValueError when ExplicitBucketHistogramAggregation boundaries are not strictly increasing or finite (#5340)
• opentelemetry-sdk: ProcessResourceDetector no longer collects or emits process.command_args and process.command_line by default since the values are not sanitized and may contain sensitive information. Users who depend on these resource attributes must pass include_command_args=True. (#5364)
• opentelemetry-exporter-otlp-proto-http: fix the OTLP HTTP metric exporter self-observability metrics over-counting data points when max_export_batch_size splits a batch; each split now reports its own data-point count instead of the whole-batch count. (#5370)
• opentelemetry-api: Prevent in-place mutation of Context via inherited dict methods (#5399)

Changelog

Sourced from opentelemetry-exporter-otlp's changelog.

Version 1.44.0/0.65b0 (2026-07-16)

Added

• opentelemetry-docker-tests: Refactor Docker tests to properly validate contents of exported telemetry (#5220)
• opentelemetry-exporter-otlp-common: add shared package for common OTLP utilities (#5252)
• opentelemetry-sdk: add MissingDependencyError exception for declarative configuration and use it for missing optional dependency errors (#5265)
• opentelemetry-sdk: Add ability to refresh process dependent Resource attributes (#5280)
• opentelemetry-sdk: add force_flush method to LogRecordExporter ABC (#5294)
• opentelemetry-sdk: Make it possible to limit the size of stored spans in InMemorySpanExporter (#5296)
• opentelemetry-sdk: add log record limits environment variables OTEL_LOGRECORD_ATTRIBUTE_COUNT_LIMIT and OTEL_LOGRECORD_ATTRIBUTE_VALUE_LENGTH_LIMIT (#5300)
• opentelemetry-sdk: add support for file exporter with declarative config (#5311)
• opentelemetry-sdk: expose SynchronousMultiLogRecordProcessor and ConcurrentMultiLogRecordProcessor publicly (#5327)
• opentelemetry-sdk: point the declarative configuration package README at the shared language support status matrix in the opentelemetry-configuration repo, so Python conformance status lives alongside the other languages instead of being duplicated per language SDK. (Description has been truncated