[dependabot]

Bumps langgraph-sdk from 0.3.12 to 0.4.6.

Release notes

Sourced from langgraph-sdk's releases.

langgraph-sdk==0.4.6

Changes since sdk==0.4.5

• release(sdk-py): 0.4.6 (#9214)
• fix(sdk-py): percent-encode thread_id and assistant_id in thread stream requests (#9213)
• release(langgraph): 1.2.13 (#9205)
• chore(deps): bump the minor-and-patch group in /libs/sdk-py with 5 updates (#9149)
• chore(deps): bump urllib3 from 2.7.0 to 2.8.0 in /libs/sdk-py (#9134)

langgraph-sdk==0.4.5

Changes since sdk==0.4.4

• release(sdk-py): 0.4.5 (#8988)
• release(langgraph): 1.2.12 (#8987)
• chore(deps): bump anyio from 4.14.2 to 4.15.1 in /libs/sdk-py (#8997)
• chore(deps): bump anyio from 4.13.0 to 4.14.2 in /libs/cli (#8998)
• chore(deps): bump anyio from 4.12.1 to 4.14.2 in /libs/sdk-py (#8994)
• feat(langgraph): add response_schema to interrupt() (#8886)
• chore(deps): bump the minor-and-patch group across 1 directory with 7 updates (#8779)
• chore(deps): bump websockets from 16.0 to 16.1.1 in /libs/sdk-py in the major group (#8781)

langgraph-sdk==0.4.4

Changes since sdk==0.4.3

• release(sdk-py): 0.4.4 (#8738)
• Merge commit from fork
• feat: route LangSmith traces from thread streams (#8723)

langgraph-sdk==0.4.3

Changes since sdk==0.4.2

• release(sdk-py): 0.4.3 (#8657)
• feat(sdk-py): add decrypt replacement result (#8598)
• release(langgraph): 1.2.11 (#8595)
• chore(deps): bump the minor-and-patch group across 1 directory with 5 updates (#8532)
• release(checkpoint): 4.2.0 (#8563)
• chore: enforce PLC0415 in tests for the remaining packages (#8547)
• release(langgraph): 1.2.10 (#8462)
• chore(deps): bump websockets from 15.0.1 to 16.0 in /libs/sdk-py in the major group (#8253)
• fix(sdk-py): support clearing cron end_time via update(end_time=None) (#8334)
• release(langgraph): 1.2.9 (#8316)
• release(langgraph): 1.2.8 (#8292)
• chore(deps): bump websockets from 15.0.1 to 16.0 in /libs/langgraph in the major group (#8256)
• chore(deps): bump the minor-and-patch group in /libs/sdk-py with 9 updates (#8252)
• release(langgraph): 1.2.7 (#8223)
• chore(deps-dev): bump starlette from 1.0.1 to 1.3.1 in /libs/sdk-py (#8104)
• chore(deps): bump langsmith from 0.8.0 to 0.8.18 in /libs/sdk-py (#8174)
• release(langgraph): 1.2.6 (#8139)
• docs: standardize package README.md structure (#8064)
• release(langgraph): 1.2.5 (#8062)

... (truncated)

Commits

• ade3f37 0.4.6
• bece43d Fix
• 913b8d5 Lint
• 3c0d934 Add sync test
• 0ebb78d Fix
• 70153ce Fix exception handling for imperative tasks
• a9c87ed prebuilt: release 0.2.1 (#4801)
• 837fe59 prebuilt: support provider builtin tools in create_react_agent (#4800)
• aff3be0 prebuilt: release 0.2.0 (#4793)
• 10c6ed7 Code review
• Additional commits viewable in compare view

[claude]

LGTM. This is a lockfile-only bump of dev-group dependencies, and the resolution is consistent.

What was reviewed:

• The bumped LangChain/LangGraph packages (langchain 1.4.3, langgraph 1.2.13, langchain-core 1.6.6) still fall within the dev-group ranges in pyproject.toml (langchain>=1,<2, langgraph>=1,<2).
• The two new transitive packages, langchain-protocol and websockets, are required by the new langgraph-sdk and langchain-core releases. Every new artifact comes from files.pythonhosted.org with a sha256 hash.
• The newest new artifact is langgraph 1.2.13, uploaded 2026-10-05, which is still inside the 7-day exclude-newer window. The [options] header moving to the relative-span placeholder format looks like a newer uv lock format, not a policy change.

Extended reasoning...

Only uv.lock changes. It moves langgraph-sdk and the related LangChain/LangGraph packages to newer versions and adds langchain-protocol and websockets as transitive dependencies. These packages come from the dev dependency group, so the change affects the test and dev environment, not the published package's runtime requirements. It touches no security-sensitive surface, the changed path isn't covered by an active CODEOWNERS rule, and there are no prior reviews or objections. Approved because this is a mechanical dependency bump within the declared version ranges, and the existing langchain integration tests in CI will exercise the newer langchain-core.