Skip to content

Dependency sweep: bump litellm and refresh lockfile - #2543

Draft
Derek Worthen (dworthen) with Copilot wants to merge 2 commits into
mainfrom
copilot/update-dependencies-sweep-another-one
Draft

Dependency sweep: bump litellm and refresh lockfile#2543
Derek Worthen (dworthen) with Copilot wants to merge 2 commits into
mainfrom
copilot/update-dependencies-sweep-another-one

Conversation

Copilot AI commented Sep 7, 2026

Copy link
Copy Markdown
Contributor

Description

Automated dependency sweep raising versions across the uv workspace to the latest allowed (>7-day-old) releases on the Microsoft feed proxy, then re-locking and re-syncing.

Related Issues

Proposed Changes

  • Specifier bump: litellm ==1.97.0==1.98.0 in packages/graphrag-llm/pyproject.toml — the only non-held direct dependency behind its pin.
  • Lockfile refresh (uv lock --upgrade): latest in-range transitive/patch upgrades, incl. ruff 0.16.3→0.16.5, spacy 3.8.15→3.8.16, tiktoken 0.13.0→0.14.0, pydantic 2.13.4→2.13.5, plus cryptography, huggingface-hub, coverage, and others.
  • Held pins untouched: graspologic-native>=1.2,<1.3 and nltk~=3.9.0 (both break golden regression data); all graphrag-*==3.1.2 cross-package pins and version fields left to the release process.
  • Added semversioner patch changelog entry.

Checklist

  • I have tested these changes locally.
  • I have reviewed the code changes.
  • I have updated the documentation (if necessary).
  • I have added appropriate unit tests (if applicable).

Additional Notes

No source logic changed. poe check (ruff format/lint, pyright), test_unit (317 passed), and test_verbs (15 passed) are green.

Co-authored-by: dworthen <624870+dworthen@users.noreply.github.com>
Copilot AI changed the title [WIP] Update dependencies to the latest versions Dependency sweep: bump litellm and refresh lockfile Sep 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Update Dependencies Sweep

2 participants