Update all patch versions

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
boto3	==1.43.71 → ==1.43.74
claude-agent-sdk	>=0.2.138 → >=0.2.140
langchain-aws	==1.7.0 → ==1.7.2
langchain-google-genai (source, changelog)	==4.3.3 → ==4.3.4
python-dotenv	>=1.2.2 → >=1.2.3

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

boto/boto3 (boto3)

v1.43.74

Compare Source

=======

• api-change:batch: [botocore] Update AWS Batch documentation with newer Fargate Supported configurations, notes, and fix broken Docker link re-directs.
• api-change:ec2: [botocore] Doc release for CreateImage support for instances with local snapshots in Outpost
• api-change:endpoint-rules: [botocore] Update endpoint-rules client to latest version
• api-change:entityresolution: [botocore] Added ResourceNotFoundException to DeleteSchemaMapping, DeleteMatchingWorkflow, DeleteIdMappingWorkflow, and DeleteIdNamespace. These operations now return a 404 ResourceNotFoundException (previously a 200 Success) when the target resource does not exist.
• api-change:marketplace-catalog: [botocore] Introducing two new APIs, DescribeAssessment and ListAssessments. These APIs expose validation issues on Marketplace resources. The validation issues are exposed via a newly created resource called Assessment.
• api-change:medialive: [botocore] AWS Elemental MediaLive now supports SCTE-35 marker passthrough without IDR frame insertion for CMAF Ingest, MediaPackage V2, and transport stream outputs.
• api-change:outposts: [botocore] AWS Outposts now supports VPC Endpoint configuration in CreatePrivateConnectivityConfig, enabling scoped private connectivity with provisioning role creation for secure outpost installations
• api-change:workspaces: [botocore] Amazon WorkSpaces now supports nested virtualization, allowing you to run hypervisors and virtualization-based workloads within your WorkSpaces. You can enable or disable nested virtualization when creating a WorkSpace or by modifying an existing WorkSpace's properties.

v1.43.73

Compare Source

=======

• api-change:bedrock-agentcore-control: [botocore] Adds implementations of third-party evaluators, both managed-as-a-service and as templates within custom evaluators.
• api-change:bedrock-agent-runtime: [botocore] AgenticRetrieveStream API now supports Amazon Bedrock AgentCore Memory. Use the new memoryConfiguration parameter to continue a session from short-term memory and retrieve from long-term memory.
• api-change:connect: [botocore] This release adds new APIs to create, describe, update, delete, and list extraction definitions, enabling customers to manage lifecycle of extraction definition resources. Additionally, this release adds new event sources for Rules related to ACW and new action to Extract Information.
• api-change:drs: [botocore] AWS Elastic Disaster Recovery (AWS DRS) now offers Recovery Plans to recover multi-server applications in the right order in one action. Define the launch sequence once, with ordered steps and wait times, and DRS runs it automatically. Validate with non-disruptive drills and monitor in real time.
• api-change:ecr: [botocore] Documentation update for the ECR PutReplicationConfiguration API to increase the replication rule limit from 10 to 25
• api-change:endpoint-rules: [botocore] Update endpoint-rules client to latest version
• api-change:geo-maps: [botocore] Amazon Location Service now supports POI density and category filtering on dynamic maps. The GetStyleDescriptor API adds two optional parameters. PoiDensity (Off to VeryDense) controls POI volume, and PoiCategories filters by up to nine categories. Available on HERE and Grab map styles.
• api-change:organizations: [botocore] Add new Transfer Responsibility error codes and document related CloudTrail events for accepting and terminating a Transfer Responsibility.

v1.43.72

Compare Source

=======

• api-change:bedrock-agentcore: [botocore] Add support for the Machine Payments Protocol (MPP) and x402 upto scheme payments protocol in Amazon Bedrock AgentCore Payments. Customers can now pay for MPP-gated resources and also pay services which requires upto scheme in x402
• api-change:bedrock-agentcore-control: [botocore] Adds AgentCore Payments support for CMK, Marketplace Subscriptions and QuickCreate
• api-change:bedrock-agent-runtime: [botocore] Adds CheckIngestedDocumentAcl and GetIngestedDocumentAcl APIs to Amazon Bedrock Knowledge Bases. Customers can verify user access to documents based on ingested ACLs and retrieve full ACL details including allow and deny entries, enabling validation of ACL ingestion without test retrievals.
• api-change:glue: [botocore] Added support for associating glossary terms with iterable form items, such as table columns.
• api-change:mwaa-serverless: [botocore] Adds support for Consuming code for MWAA Serverless
• api-change:observabilityadmin: [botocore] CloudWatch Logs centralization rules now support tag propagation. You can configure a TagPropagationConfiguration on your centralization rule to automatically sync resource tags from source to destination log groups, with configurable conflict resolution strategies.
• api-change:redshift: [botocore] Amazon Redshift now unlocks a locked admin user account and resets the failed-login counter when you update the admin password using the ModifyCluster API. This option is available only when account lockout security is enabled.
• api-change:redshift-serverless: [botocore] Amazon Redshift now unlocks a locked admin user account and resets the failed-login counter when you update the admin password using the UpdateNamespace API. This option is available only when account lockout security is enabled.
• api-change:sagemaker: [botocore] Release support for g7.2xlarge, g7.4xlarge, g7.8xlarge, g7.12xlarge, g7.24xlarge, and g7.48xlarge instance types for SageMaker HyperPod

anthropics/claude-agent-sdk-python (claude-agent-sdk)

v0.2.140

Compare Source

New Features

• MCP 2.x support for in-process SDK MCP servers: The SDK now supports mcp 2.x alongside 1.x (dependency widened to mcp>=1.23.0,<3.0.0). In-process servers are served over mcp's own in-memory transport instead of hand-rolled JSON-RPC dispatch, so hand-built mcp.server.Server instances now work at full fidelity — resources, prompts, and all result content types reach the CLI verbatim. Tool cancellation on interrupt is supported on mcp 2.x. claude_agent_sdk.ToolAnnotations accepts both camelCase and snake_case hint names on every mcp version (#​1218)
• forward_subagent_text option: New forward_subagent_text boolean on ClaudeAgentOptions forwards a subagent's text and thinking blocks as messages in the stream, so consumers can render the full nested transcript. Matches the TypeScript SDK's forwardSubagentText (#​1206)
• ResultError exception with structured error payload: When the CLI exits after a terminal error result, the SDK now raises ResultError (a subclass of ProcessError) instead of a bare "exit code 1" error. Carries subtype, errors, result, api_error_status, terminal_reason, session_id, and the raw data dict so callers can branch on failure reason without string matching. New exported types: ResultError (#​1205)
• can_use_tool callback support for query() and string prompts: The can_use_tool permission callback now works with string prompts (not just ClaudeSDKClient), and stdin is kept open so the CLI can send permission requests over the control protocol (#​1204)

Bug Fixes

• Recover parent_tool_use_id when reading subagent transcripts: get_subagent_messages() and get_subagent_messages_from_store() now recover the parent_tool_use_id from the subagent's metadata, linking each subagent's messages to the Agent tool_use block in the parent session. SessionMessage also gains a parent_agent_id field for the spawning agent's id (#​1207)

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.235

v0.2.139

Compare Source

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.233

theskumar/python-dotenv (python-dotenv)

v1.2.3

Compare Source

Fixed

• Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@​h1whelan] in [#​640]
• set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@​dchaudhari7177] in [#​680]
• dotenv run now prints a friendly error instead of a traceback when no command is given by [@​bbc2] in [#​606]
• Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@​ReinerBRO] in [#​638]

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 8am every weekday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[Copilot]

Pull request overview

Note

Copilot could not run the full agentic suite for this review because it was automatically requested on a bot-authored pull request. Request a review from Copilot under Reviewers to retry with the full agentic suite. Improved support for bot-authored pull requests is coming soon.

Updates several example and test requirement files to newer dependency versions for the GenAI instrumentation packages.

Changes:

• Bump python-dotenv minimum version in OpenAI Agents examples.
• Update claude-agent-sdk minimum version in Claude Agent SDK examples and docs requirements.
• Refresh a few pinned “latest” test dependencies for the LangChain instrumentation.

Reviewed changes

Copilot reviewed 6 out of 6 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
instrumentation/opentelemetry-instrumentation-genai-openai-agents/examples/zero-code/requirements.txt	Bumps python-dotenv minimum for the zero-code OpenAI Agents example.
instrumentation/opentelemetry-instrumentation-genai-openai-agents/examples/manual/requirements.txt	Bumps python-dotenv minimum for the manual OpenAI Agents example.
instrumentation/opentelemetry-instrumentation-genai-langchain/tests/requirements.latest.txt	Updates pinned “latest” versions for LangChain-related test deps.
instrumentation/opentelemetry-instrumentation-genai-claude-agent-sdk/examples/zero-code/requirements.txt	Bumps claude-agent-sdk minimum for the zero-code Claude example.
instrumentation/opentelemetry-instrumentation-genai-claude-agent-sdk/examples/manual/requirements.txt	Bumps claude-agent-sdk minimum for the manual Claude example.
docs-requirements.txt	Aligns docs build requirements to newer claude-agent-sdk minimum.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[opentelemetry-pr-dashboard]

Pull request dashboard status

Waiting on maintainers · refreshed 2026-08-19 05:29 UTC

Merge when ready.

Status above doesn't look right?

• Just replied or pushed? Anything around or after the refresh time above may not be picked up yet — give it a few minutes.
• Anything look wrong? Report it with what you expected; it helps us improve the dashboard.