[renovate]

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
agno	==3.1.9 → ==3.1.10
anthropic	==2.1.0 → ==2.3.0
boto3	==1.43.116 → ==1.43.118
crewai	==1.15.28 → ==1.15.30
fastapi (changelog)	==0.161.0 → ==0.162.0
google-adk (changelog)	==2.12.0 → ==2.13.0
google-genai	==2.32.0 → ==2.33.0
litellm	==1.105.0 → ==1.106.4
mistralai	==3.3.0 → ==3.4.0
openinference-instrumentation-anthropic	==3.0.3 → ==3.1.0
openinference-instrumentation-bedrock	==0.1.60 → ==0.1.61
openinference-instrumentation-google-adk	==1.0.4 → ==1.0.5
openinference-instrumentation-google-genai	==1.4.13 → ==1.4.14
openinference-instrumentation-langchain	==0.1.79 → ==0.1.80
openinference-instrumentation-litellm	==0.1.50 → ==0.1.51
openinference-instrumentation-llama-index	==4.6.0 → ==4.6.1
openinference-instrumentation-ollama	==0.1.12 → ==0.1.13
openinference-instrumentation-openai	==0.1.65 → ==0.1.66
openinference-instrumentation-openai-agents	==2.5.3 → ==2.6.0
openinference-instrumentation-together	==0.1.12 → ==0.1.13
opentelemetry-instrumentation-genai-agno	==1.2b0 → ==1.3b0
opentelemetry-instrumentation-genai-anthropic	==1.2b0 → ==1.3b0
opentelemetry-instrumentation-genai-bedrock	==1.2b0 → ==1.3b0
opentelemetry-instrumentation-genai-langchain	==1.2b0 → ==1.3b0
opentelemetry-instrumentation-genai-llama-index	==1.2b0 → ==1.3b0
opentelemetry-instrumentation-genai-openai	==1.2b0 → ==1.3b0
opentelemetry-instrumentation-genai-openai-agents	==1.2b0 → ==1.3b0
opentelemetry-instrumentation-genai-portkey	==1.2b0 → ==1.3b0
opentelemetry-instrumentation-genai-qwen-agent	==1.2b0 → ==1.3b0
opentelemetry-instrumentation-google-genai	==1.2b0 → ==1.3b0
opentelemetry-util-genai	==1.2b0 → ==1.3b0
pydantic-ai-slim (source, changelog)	==2.59.0 → ==2.61.0
starlette (changelog)	==1.9.0 → ==1.10.0

---

Release Notes

agno-agi/agno (agno)

v3.1.10

Compare Source

Changelog

Bug Fixes:

• CodexAgent: Now signs in automatically with OPENAI_API_KEY, and keeps an existing ChatGPT or other login.
• OS Manager: OS Manager now lists and runs external agents such as ClaudeAgent and CodexAgent registered in AgentOS(agents=[...]), by name or ID.
• Knowledge Upload: POST /knowledge/content now returns a clear 400 message when an upload has no file, text_content or URL, or when url is not a single URL.
• Tracing: Spans from AgentOS(tracing=True) and setup_tracing() now keep up to 1,024 attributes, so model spans keep their full input and message history on runs with many tool calls. OTEL_SPAN_ATTRIBUTE_COUNT_LIMIT and OTEL_ATTRIBUTE_COUNT_LIMIT still take precedence.

What's Changed

• chore: log replica-local queue stream notice at info level by @​ysolanky in #​11264
• fix: reword the no-authorization user isolation warning by @​SamJupe in #​11263
• fix: authenticate Codex automatically with OPENAI_API_KEY by @​ashpreetbedi in #​11249
• fix: let OS Manager discover and run external agents by @​ashpreetbedi in #​11247
• fix: clarify accepted Company Task execution by @​ashpreetbedi in #​11261
• fix: reject knowledge uploads without a content source by @​ashpreetbedi in #​11259
• fix: clarify readable Company sources for agents by @​ashpreetbedi in #​11256
• fix: reject unsupported knowledge URL input types by @​ashpreetbedi in #​11260
• fix: use LLM-appropriate tracing attribute limits by @​ashpreetbedi in #​11255
• fix: keep Company Task projection off the queue's critical path by @​ysolanky in #​11188
• fix: allow authorized members to trigger Company routines by @​ashpreetbedi in #​11254
• feat: govern Company writes by scope instead of ownership by @​SamJupe in #​11270
• chore: Release v3.1.10 by @​harshsinha03 in #​11265

Full Changelog: agno-agi/agno@v3.1.9...v3.1.10

anthropics/anthropic-sdk-python (anthropic)

v2.3.0

Compare Source

Features

• api: add Claude Tag endpoints for Claude Enterprise organizations

Bug Fixes

• google-cloud: send user profiles requests to the organization endpoint

Chores

• client: stop sending query params hardcoded in endpoint paths
• docs: improve the descriptions of the code execution tool and its encrypted results
• docs: reword work queue, skill and external key descriptions
• docs: update descriptions of the per-user usage and cost reports
• internal: carry endpoint path query params to the request layer
• internal: check the repository by owner and public name in workflows
• internal: read the beta route qualifier instead of the beta=true query
• internal: remove preview build upload from CI
• internal: stop sending the beta query param from parse and stream

Documentation

• mcp: remove the stray await from the async tool_runner examples
• google-cloud: update the product name
• client: link the Bedrock and Vertex raw response docstrings to the SDK documentation
• update the README and the example request

v2.2.0

Compare Source

Features

• api: add support for message threads
• api: add usage and cost reports by dimension, mark older reports legacy

Bug Fixes

• client: stop suggesting math.inf in the max_retries error message
• tools: leave the tool runner's history to the caller after append_messages(), and keep the current reply out of the set_messages_params() callback
• tools: keep running the tool runner's function tools when set_messages_params() gives tools as definitions, and stop running one it takes out of tools
• tools: give the set_messages_params() callback of a tool runner its tools as definitions again
• tools: keep a tool runner's betas, user_profile_id and workspace_id when set_messages_params() leaves them out

Chores

• deps: bump certifi in the dev lockfile
• docs: clarify plugin content scan and validation descriptions
• docs: clarify plugin served_version_pinned and updated_at
• docs: fix usage and cost report examples and ending_at docs
• docs: rate limit model lists vary by organization and workspace

boto/boto3 (boto3)

v1.43.118

Compare Source

========

• api-change:bedrock-agentcore: [botocore] Adds the dimension name to evaluation results and batch evaluation summaries. For multi-dimensional LLM-as-a-Judge evaluators, each result and summary now identifies which dimension it corresponds to.
• api-change:bedrock-agentcore-control: [botocore] Adds model-based routing and fallback to AgentCore Gateway rules. Rules can match the requested model, route to a specific model, and fall back across inference targets with an optional circuit breaker. Adds multi-dimensional rating scales for AgentCore Evaluations LLM-as-a-Judge evaluators.
• api-change:connect: [botocore] Adds support for customer queryable replication errors.
• api-change:continuum: [botocore] Releasing Continuum for Code Vulnerabilities APIs for SDKs
• api-change:ec2: [botocore] AWS Transit Gateway now provides managed one-to-one NAT directly on its attachments, through integration with Regional Private NAT Gateway. Use ModifyTransitGatewayAttachmentNatConfiguration to enable NAT and configure NAT rules, and GetTransitGatewayAttachmentNatConfiguration to view them.
• api-change:elementalinference: [botocore] Elemental Inference now supports feed scheduling, letting you apply feed configuration changes at a time you choose instead of building your own automation.
• api-change:endpoint-rules: [botocore] Update endpoint-rules client to latest version
• api-change:glue: [botocore] Add support for large worker types in AWS Glue
• api-change:ivs-realtime: [botocore] Adds RevokeConnectionToken operation for Amazon IVS Real-Time Streaming.
• api-change:kafkaconnect: [botocore] Amazon MSK Connect now supports pausing and resuming connectors via the asynchronous PauseConnector and ResumeConnector APIs. Paused connectors keep their configuration and committed offsets and resume where they left off. Each call returns an operation ARN to track with DescribeConnectorOperation.
• api-change:lambda: [botocore] AWS Lambda durable functions now supports payloads up to 1 MB for checkpoints, callback completion, and error details.
• api-change:networkmanager: [botocore] AWS Cloud WAN now provides managed one-to-one NAT directly on it's core network attachments, through integration with Regional Private NAT Gateway. Use UpdateAttachmentNatConfiguration to enable NAT and configure NAT rules, and ListAttachmentNatConfigurations to view them.
• api-change:opensearchserverless: [botocore] Adds APIs to create, get, list, and cancel ingestion jobs, and to create, get, list, and delete ingestion streams, for ingesting data from Amazon S3 into OpenSearch Serverless collections.

v1.43.117

Compare Source

========

• api-change:autoscaling: [botocore] EC2 Auto Scaling now supports account settings, letting you manage account-level configuration for Auto Scaling.
• api-change:connect: [botocore] Added support for AWS-managed security profiles.
• api-change:datazone: [botocore] Added custom designations support with new CRUD APIs. The designation field in project membership and policy grant APIs supports a new enum for custom designations. These APIs also support a new field for custom designation id.
• api-change:devops-agent: [botocore] Adds support for Microsoft Teams as a notification service. Associations can now be created and updated with a Microsoft Teams team and channel configuration using the DevOps Agent API and SDKs.
• api-change:ec2: [botocore] Adds new response fields to DescribeInstanceStatus and Network Insights analysis results.
• api-change:finspace: [botocore] The finspace and finspace-data clients have been removed following the deprecation of the service.
• api-change:healthlake: [botocore] Update the UpdateProfileWithAgent API to return a streaming response to provide more frequent updates on what the agent is doing.
• api-change:lexv2-models: [botocore] Adds support for Assisted NLU - Dialog Manager mode allowing usage of LLMs as the default NLU system and dialog management
• api-change:lightsail: [botocore] This release adds support for metrics related to system-disk performance.
• api-change:mediaconvert: [botocore] Adds AV1 CBR rate control and scene change detection. New sliding window peak bitrate setting for all codecs. DASH adaptation set grouping update. Option to disable the AV1 perceptual quality filter. Support for vertical (portrait) AV1 encoding.
• api-change:network-firewall: [botocore] Adds support for Network Firewall Resolved IP validation.
• api-change:polly: [botocore] Added support for the new voices - Kenneth (en-US), Nate (en-US), Tina (de-DE), Carlos (es-US), Carolina (pt-BR), Leo (pt-BR), Curtis (en-AU), Kiara (en-IN), Arjun (en-IN) and Hyunduk (ko-KR). They are available as a Generative voices only.
• api-change:quicksight: [botocore] Adds support for SharePoint and OneDrive two-legged OAuth certificate credentials and Google Workspace service account credentials when creating data sources
• api-change:redshift-data: [botocore] Add Redshift QueryUUID field to DescribeStatement response
• api-change:stepfunctions: [botocore] Release minor updates to API model
• api-change:tnb: [botocore] The tnb client has been removed following the deprecation of the service.
• bugfix:TLS: [botocore] Removes the AAA Certificate Services root from botocore's vendored CA bundle in response to the eMudhra/emSign CA incident. Sectigo used this root to cross-sign eMudhra intermediate CAs whose private keys were compromised. The vendored bundle is only used when certifi isn't installed; certifi users should upgrade to certifi>=2026.10.19. See #&#8203;3838 <https://github.com/boto/botocore/pull/3838>__.

crewAIInc/crewAI (crewai)

v1.15.30

Compare Source

What's Changed

Bug Fixes

• Fix AGENTS.md to start the login process while evaluating and stop after three rounds.

Documentation

• Update snapshot and changelog for v1.15.29.

Contributors

@​joaomdmoura

v1.15.29

Compare Source

What's Changed

Features

• Add support for LiteLLM-compatible kwargs.
• Implement platform application search in CLI.
• Highlight action picker search in CLI.
• Trace conversation routes and public replies in flow.
• Select organization during login in CLI.
• Add offline jev routing and guardrail evaluation runner.
• Run integration app actions directly with call: tool.
• Promote AgentExecutor out of experimental status.
• Add Azure DocumentDB vector search integration.
• Add read-only notebook text loader and standard-library jsonl loader.
• Ensure crewAI eval keeps the evaluation's full data in the project.
• Enable crewAI eval to run the crew itself for verdict from one command.
• Allow crewAI eval to export evaluations as files.

Bug Fixes

• Fix platform integration token derivation from login.
• Resolve logging issues by preserving JSON logs on serialization errors.
• Skip non-UTF-8 cached skill metadata.
• Fix tool actions to honor failure policies and get fresh usage budgets per kickoff.
• Prevent private memories without a source from leaking to every recall.
• Fix memory record retrieval order in LanceDBStorage.
• Restore task description when replanning fails.
• Stop agents from repeating the same tool call.
• Escape scope and id values in LanceDB filters.

Documentation

• Update broken links in crewAI examples and observability guides.
• Fix dead links in tools documentation.

Refactoring

• Refactor context compaction to be a BaseLLM capability.

Contributors

@​Akaliup, @​Arxsher, @​Copilot, @​D41910, @​LindseyZ1205, @​RaycarlLei, @​Rohitkanithi, @​Sakura-798, @​Vidit-Ostwal, @​Wilson0511, @​Winoren, @​abdullahajaz14, @​bballhaus, @​gabemilani, @​iris-clawd, @​joaomdmoura, @​leom1919, @​lorenzejay, @​marcreniel, @​mattatcha, @​reubenjrouse, @​rohitkanithi, @​sandeepsnairms, @​stepchanges, @​subhashpolisetti, @​theCyberTech, @​vatsalyd

fastapi/fastapi (fastapi)

v0.162.0

Compare Source

Omitted bool and bool | None form fields now use their declared defaults or produce missing-field errors, consistent with other fields and Pydantic behavior. FastAPI no longer infers False for omitted booleans. This applies to individual form parameters, form models, and unions of form models.

Omitted boolean model fields are excluded from model_dump(exclude_unset=True), and their defaults no longer count as submitted fields during union selection. Default factories and validate_default follow the usual rules.

For HTML checkboxes, declare a boolean with a default of False. See Boolean Form Fields.

Breaking Changes

• 🐛 Restore default handling for omitted boolean form fields. PR #​16605 by @​tiangolo.

v0.161.1

Compare Source

Fixes

• 🐛 Fix OpenAPI schemas for standalone nullable form unions. PR #​16598 by @​tiangolo.

google/adk-python (google-adk)

v2.13.0

Compare Source

Highlights

This release stabilizes core features while introducing TypeSafe workflow classification, live audio interactions, MongoDB integrations, and execution performance improvements.

• Stability: Access 12 mature experimental features now promoted to stable status. See the unit guide for more details. (ea298d4)
• Classifiers: Route workflows with TypeSafe's Jev models via the new TypesafeClassifier and ClassifierNode. Jev returns calibrated probabilities in a single forward pass, much faster than an LLM. See the unit guide for more details. (ddf8c55, e8c4bac)
• Live Audio: Enable natural real-time voice interactions with barge-in support alongside Gemini speech-to-text and text-to-speech integration. See the unit guide for more details. (2e7ef92)
• MongoDB Sessions & Memory: Persist sessions in MongoDB and share them across runner replicas with the new MongoDbSessionService. Add long-term memory without an embedding model using MongoDbMemoryService, which recalls past turns by keyword match on any MongoDB deployment, with no vector index needed. Both are experimental. See the session service and memory service guides for more details. (0df43f5, e40e349)
• MongoDB: Deploy MongoDbToolset to Agent Engine without packaging your connection string, and let Atlas Automated Embedding embed search queries server-side, with no Google embedding call or credentials needed. See the unit guide for more details. (bc3773f, 2f6c666, 8bbfc33)
• Performance: Enjoy up to 8x faster execution turns for string-model agents and reduced event-loading overhead. (772f139)

Breaking changes

• Telemetry: Defaults to OpenTelemetry GenAI v2 (otel_semconv_1_44, removing call_llm); set ADK_TELEMETRY_SCHEMA_VERSION_OPT_IN=otel_semconv_1_36 to keep the legacy v1 schema. See the unit guide for more details. (7838488)

All changes

⚠ BREAKING CHANGES

• telemetry: deprecate call_llm span and OpenTelemetry 1.36 GenAI semconv

Features

• add delete_memory api to BaseMemoryService (41e5c7b), closes #​6949
• add MongoDB-backed memory service (e40e349)
• add MongoDB-backed session service (0df43f5)
• add OpenSandbox environment (69d1c90), closes #​6758
• classifiers: add BaseClassifier and typed question/answer types (773418f)
• classifiers: add ClassifierNode for workflow routing (e8c4bac)
• classifiers: add LlmClassifier (772b577)
• eval: split invocation duration into model, tool and framework time (e3797a4)
• features: promote 12 mature experimental features to stable (ea298d4)
• honor ADK_SUPPRESS_EXPERIMENTAL_FEATURE_WARNINGS (b592dee), closes #​5114
• integrations: add TypesafeClassifier for TypeSafe's Jev models (ddf8c55)
• integrations: keep MongoDB credentials out of Agent Engine packages (ab5cb45)
• live: add barge-in support to CascadeLiveConnection (2e7ef92)
• live: add Gemini speech-to-text and text-to-speech for CascadeLive (f78149a)
• live: add ZIP_STORED visual frame pack and unpack helpers (17d8a5a)
• make MongoDbToolset picklable for Agent Engine (2f6c666)
• plugins: add agent evaluation session and turn trace views (ab9c994)
• plugins: classify error-bearing tool results and extract shared callback helpers (a4b8ee9), closes #​7112
• plugins: classify write-time 403 and 404 drops in BigQueryAgentAnalyticsPlugin (d5c87a6)
• plugins: log terminations, node results and tool result errors in the logging plugins (6a77d48)
• record google_search grounding on LLM spans (ead208a), closes #​7345
• samples: add Secret Manager and Parameter Manager integration samples (7391411), closes #​7582
• seed adk web sessions from initial_state.json (3c8c63e), closes #​4961
• support Atlas Automated Embedding in MongoDB search (8bbfc33)
• support BaseLlm instances in evaluation and user simulation (cb48b91), closes #​3400
• support extra packages in cloud deployments (18a41a5), closes #​4980
• surface Vertex rubric verdicts and explanations in eval results (bc220d2), closes #​7350
• telemetry: count conversation compactions per workflow (d01d5d8)
• telemetry: report tool call content under the semconv attributes (5f0babc)
• telemetry: serve the elided LLM content to the ADK Web UI (f7e3f12)
• tools: add ForceEscalationPlugin for deterministic model consultation (a84d978)
• tools: infer Workflow input_schema from START successors in NodeTool (4ec4af1)
• tools: measure model consultation escalations, tokens, and cost (f02b89c)
• tools: support Gemini 3.x computer use browser action schemas (b90e4a5)
• vmaas: add AgentEngineEnvironment (3800f06)
• vmaas: add command and readiness helpers to the sandbox manager (46edd25)
• workflow: honor tool_thread_pool_config for synchronous workflow nodes (3f11cb3)

Bug Fixes

• accept Gemini 3 and later in the CFC and example gates (f1c23e3)
• add SSRF protection to RestApiTool (30726ea)
• adk eval process exit code now reflects passed/failed (c2ff634)
• agents: restore ToolUnion parameter type on _convert_tool_union_to_tools (8ef71d5)
• align MCP auth and header provider precedence (f82aa22), closes #​7548
• align shipped AgentConfig.json schema with runtime validation (33453d8)
• allow custom name/description when VertexAiSearchTool is swapped (aa9af7b)
• bind sandbox resources per tool call, not per computer (facaf29)
• cap litellm below 1.106.3 (efbb072)
• cap the google-genai instrumentor below 1.0 in the test extra (0e96818)
• classify artifact MIME types without case sensitivity (a468d5a)
• clear strict mypy errors in model connectors and telemetry (6e02699)
• clear strict mypy errors in the adk cli and web server (7296062)
• cli: serialize BaseNode instances in serialize_node_like (53e962f)
• compaction: isolate event compaction by isolation_scope (dd9ca6f)
• consume AGENT_GATEWAY_ROOT_CERTIFICATES in deploy Dockerfile (2ba3e2d)
• copy events and search results in InMemoryMemoryService (77a74f0), closes #​7565
• core: stop the unsafe local code executor waiting forever (1def14b)
• disambiguate colliding truncated OpenAPI tool names (b310c30), closes #​7281
• do not resolve Bigtable view parameters from session state (57e8bc6)
• drop plain execute_sql when Bigtable view parameters are set (3893d7f)
• evaluation: reject drive-qualified app and eval set ids (29bb053)
• features: fail fast when feature decorators are misused (0491606)
• find stored words with a capital dotted I in sqlite memory (2416f66), closes #​7540
• finish runner cleanup when close is cancelled (e342a14)
• flows: isolate parallel single-turn node events across branches and node_paths (1360dda), closes #​7488
• flows: preserve completed sibling tool responses on NodeInterruptedError (cb47e7b)
• flows: read interrupt ids through the shared extractor in the agent flow (0798b2c)
• forward thinking_config to litellm reasoning params (dd80f8f), closes #​7360
• give each retry of a dynamic function node fresh arguments (13dde39)
• give each seeded environment-simulation injection its own generator (52cc2d8)
• honor an output schema on Claude when the request carries no tools (97af1ff)
• honor each metric's own eval_status in AgentEvaluator.evaluate() (5bf7f12)
• ignore OAuth credentials without access tokens in McpTool (dc78d0a), closes #​7587
• integrations: lazy-import google-cloud clients in gcs, secret_manager and parameter_manager (cb54727), closes #​7581
• integrations: use the mTLS Model Armor endpoint when mTLS is enabled (3139855), closes #​7553
• keep a streamed thought signature sent without the call's name (557743c)
• keep ADK tracking headers and http options when client_kwargs sets http_options (8197c10)
• keep client token usage when the last response has none (8ff9941), closes #​7560
• keep every artifact when converting an A2A task to an event (e3e6581)
• keep every tool call in a finish-bearing stream chunk (74d0eff), closes #​7004
• keep finished parallel tool results when a sibling raises (7d3658e), closes #​7428
• keep integers outside 64 bits exact in SqliteSessionService state (db432db), closes #​7576
• keep sticky routing when a sub-agent runs in task mode (c5ee35e)
• key Eventarc client cache by full credential identity and scopes (67b816b)
• let operation parameters override path-level ones (6563a09), closes #​7205
• live: stop adding set_model_response to live sessions (8fbcd42)
• load the whole session when rewinding (8431830)
• make JoinNode in a loop wait for each iteration's predecessors (a6ed859), closes #​7498 #​7515
• merge tracking headers regardless of casing (377306e)
• otel: degrade gracefully when OTel exporter packages are missing (a221ccd)
• pin certifi 2026.10.19 in the constraints files (62be742)
• plugins: match credential key names that use hyphens (e4165d0)
• point litellm install hints at google-adk[extensions] (18d2032)
• present the mTLS client certificate from OAuth2 metadata discovery (a3b1515)
• present the mTLS client certificate from RestApiTool's default client (a8fa294)
• preserve Annotated text and content schemas (04b8b60)
• preserve custom client factories (1daa0ec), closes #​3158
• raise a clear error when an agentplatform older than 2.2 loads (270ef5e)
• record a nested state write only when its container converts to JSON unchanged (662b017)
• record a write into a nested state container as a state change (ce2fdc5)
• record artifact_delta from before and after agent callbacks (019387c), closes #​7478
• recover the correct occurrence of reused compacted tool calls (626bd20)
• refuse internal agents with a 403 on a non-loopback dev server (c08225d)
• reject empty train eval cases and honor empty validation case IDs in LocalEvalSampler (d9fe639), closes #​7168
• reject whitespace-only path segments in artifact validation (0c94967)
• report cached and detailed token usage for the Interactions API (d57f0cb)
• require authlib 1.9.1 or newer for CVE fixes (ef3e80a)
• resolve JSON Pointer $ref in _dereference_schema (59fe93b)
• retry a rejected dynamic child instead of replaying it (e2dbc0f)
• return 404 when adding a session to a missing eval set (7d6637c)
• return 404 when an eval result or session is missing (c2dcb75)
• route next turn to target of unfinished transfer_to_agent (bb353c8), closes #​7458
• route the turn after a paused single_turn sub-agent to its delegator (6727f8f), closes #​7602
• run a task delegation sent in the same turn as finish_task (486ef30)
• samples: prevent comment spam alerts from labeling entire issue as spam (05355fd)
• sanitize GCS blob names to prevent path traversal in skill loading (20a5a0c)
• send adk run queries as messages after a pause is answered (23bc0bb)
• serve dev UI behind prefix-stripping proxies (b60b44f), closes #​7439
• sessions: purge events before deleting session row in DatabaseSessionService (3b2b949)
• share event id across streamed A2A artifact chunks (5d40869), closes #​7395
• source MCP destination ID from RuntimeReference.uri (2802834), closes #​7196
• spanner: validate the database id used in the create statement (456d2cb)
• stop persisting an OAuth2 credential whose code was never redeemed ([7fca46f](https://redirect.github.com/google/adk-pyth

[!IMPORTANT]
✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 8am every weekday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[opentelemetry-pr-dashboard]

Pull request dashboard status

Waiting on reviewers · refreshed 2026-10-25 15:09 UTC

Review the latest changes.

Also blocked by: 1 required status check is failing.

Status above doesn't look right?

• Just replied or pushed? Anything around or after the refresh time above may not be picked up yet — give it a few minutes.
• Anything look wrong? Report it with what you expected; it helps us improve the dashboard.

[Copilot]

🔵 Needs a closer look

Human review of conformance CI results is needed to confirm instrumentation compatibility and that committed generated data remains current after the upgrades.

No open issues 🎉

What changed in this PR

Updates Python dependencies used by the HTTP and GenAI conformance scenarios, keeping package pins and lockfiles aligned across instrumentation implementations.

Changes:

• Upgrades FastAPI from 0.161.0 to 0.161.1.
• Upgrades LiteLLM from 1.105.0 to 1.106.2 across three implementations.
• Upgrades Google GenAI from 2.32.0 to 2.33.0 across three implementations.

File	Description
scenarios/​http/​python/​fastapi/​opentelemetry-fastapi/​server/​uv.lock	Updates FastAPI artifacts and locked version.
scenarios/​http/​python/​fastapi/​opentelemetry-fastapi/​server/​pyproject.toml	Pins FastAPI to 0.161.1.
scenarios/​gen-ai/​python/​litellm/​openllmetry/​uv.lock	Updates LiteLLM artifacts and adds its typing-extensions dependency.
scenarios/​gen-ai/​python/​litellm/​openllmetry/​pyproject.toml	Pins LiteLLM to 1.106.2 for OpenLLMetry.
scenarios/​gen-ai/​python/​litellm/​openinference/​uv.lock	Updates LiteLLM artifacts and adds its typing-extensions dependency.
scenarios/​gen-ai/​python/​litellm/​openinference/​pyproject.toml	Pins LiteLLM to 1.106.2 for OpenInference.
scenarios/​gen-ai/​python/​litellm/​native/​uv.lock	Updates LiteLLM artifacts and adds its typing-extensions dependency.
scenarios/​gen-ai/​python/​litellm/​native/​pyproject.toml	Pins LiteLLM to 1.106.2 for native instrumentation.
scenarios/​gen-ai/​python/​google-genai/​opentelemetry-google-genai/​uv.lock	Updates Google GenAI artifacts and locked version.
scenarios/​gen-ai/​python/​google-genai/​opentelemetry-google-genai/​pyproject.toml	Pins Google GenAI to 2.33.0 for OpenTelemetry.
scenarios/​gen-ai/​python/​google-genai/​openllmetry/​uv.lock	Updates Google GenAI artifacts and locked version.
scenarios/​gen-ai/​python/​google-genai/​openllmetry/​pyproject.toml	Pins Google GenAI to 2.33.0 for OpenLLMetry.
scenarios/​gen-ai/​python/​google-genai/​openinference/​uv.lock	Updates Google GenAI artifacts and locked version.
scenarios/​gen-ai/​python/​google-genai/​openinference/​pyproject.toml	Pins Google GenAI to 2.33.0 for OpenInference.

_{Review effort: Balanced}

[renovate]

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: scenarios/gen-ai/python/crewai/openinference/uv.lock

Using CPython 3.13.17 interpreter at: /opt/containerbase/tools/python/3.13.17/bin/python3
error: No solution found when resolving dependencies for split (markers: python_full_version == '3.13.*')
  cause: Because crewai>=1.15.30 depends on opentelemetry-sdk>=1.45.1,<2 and your project depends on crewai==1.15.30, we can conclude that your project depends on opentelemetry-sdk>=1.45.1,<2.
         And because your project depends on opentelemetry-sdk==1.42.0, we can conclude that your project's requirements are unsatisfiable.

File name: scenarios/gen-ai/python/crewai/openllmetry/uv.lock

Using CPython 3.13.17 interpreter at: /opt/containerbase/tools/python/3.13.17/bin/python3
error: No solution found when resolving dependencies for split (markers: python_full_version == '3.13.*')
  cause: Because crewai>=1.15.30 depends on opentelemetry-sdk>=1.45.1,<2 and your project depends on crewai==1.15.30, we can conclude that your project depends on opentelemetry-sdk>=1.45.1,<2.
         And because your project depends on opentelemetry-sdk==1.42.1, we can conclude that your project's requirements are unsatisfiable.