build: bump the backend-deps group across 1 directory with 18 updates

[dependabot]

Bumps the backend-deps group with 18 updates in the /src/api directory:

Package	From	To
cachetools	7.1.4	7.1.6
fastapi	0.136.3	0.140.13
uvicorn	0.48.0	0.52.0
types-requests	2.33.0.20260518	2.33.0.20260712
aiohttp	3.14.0	3.14.3
azure-ai-projects	2.2.0	2.4.0
agent-framework-core	1.7.0	1.12.1
azure-cosmos	4.16.1	4.16.2
openai	2.40.0	2.50.0
pandas	3.0.3	3.0.5
opentelemetry-exporter-otlp-proto-grpc	1.42.1	1.44.0
opentelemetry-exporter-otlp-proto-http	1.42.1	1.44.0
opentelemetry-sdk	1.42.1	1.44.0
opentelemetry-api	1.42.1	1.44.0
opentelemetry-semantic-conventions	0.63b1	0.65b0
opentelemetry-instrumentation	0.63b1	0.65b0
azure-monitor-opentelemetry	1.8.8	1.8.9
pytest	9.0.3	9.1.1

Updates cachetools from 7.1.4 to 7.1.6

Changelog

Sourced from cachetools's changelog.

v7.1.6 (2026-07-24)

• Minor style improvements to keep ruff happy.

v7.1.5 (2026-07-23)

• Fix TLRUCache silently keeping stale values on expired overwrites.

• Reject negative cache item getsizeof values.

• Update build environment.

Commits

• 13bb86a Minor style improvements to keep ruff happy.
• e2250be Fix RTD version handling.
• 0d2a6ea Release v7.1.5.
• d64cf80 Prepare v7.1.5.
• fcbb0de Fix #406: Merge branch 'gaoflow-fix-tlru-overwrite-expired-stale-value' into ...
• c0fdf6a Fix TLRUCache silently keeping stale value on expired overwrite
• 978d34d Bump actions/setup-python from 6.2.0 to 6.3.0
• d5c7eea Reject negative cache item sizes
• 578e976 Update build environment.
• e164b70 Bump codecov/codecov-action from 6.0.0 to 7.0.0
• Additional commits viewable in compare view

Updates fastapi from 0.136.3 to 0.140.13

Release notes

Sourced from fastapi's releases.

0.140.13

Fixes

• 🐛 Fix status_code being ignored for SSE and JSONL streaming endpoints. PR #15937 by @​SAURABHSALVE.

Docs

• 📝 Fix format_sse_event docstring rendering of \n\n terminator. PR #15613 by @​AshNicolus.
• 📝 Add API reference page for fastapi.sse. PR #15930 by @​SAURABHSALVE.

0.140.12

Fixes

• 🐛 Fix line splitting in format_sse_event to comply with SSE spec. PR #15515 by @​Zawwarsami16.

0.140.11

Fixes

• 🐛 Fix response_model_* params ignored for non-generator endpoints with Iterable[..] return type. PR #15093 by @​YuriiMotov.

0.140.10

Fixes

• 🐛 Fix handling sequences with nested Annotated types. PR #14874 by @​YuriiMotov.

Internal

• 🐛 Accept any base test failure as regression. PR #16092 by @​tiangolo.
• 🐛 Preserve pytest exit code in regression check. PR #16091 by @​tiangolo.
• ✅ Test PR regressions against base code. PR #16090 by @​tiangolo.

0.140.9

Fixes

• 🐛 Fix exclude_defaults not propagated to dict keys and values in jsonable_encoder. PR #16043 by @​MBGrao.

Internal

• ⬆ Bump gitpython from 3.1.50 to 3.1.54. PR #16047 by @​dependabot[bot].
• ⬆ Bump pymdown-extensions from 10.21.3 to 11.0. PR #16048 by @​dependabot[bot].
• ⬆ Bump pyasn1 from 0.6.3 to 0.6.4. PR #16045 by @​dependabot[bot].

0.140.8

Fixes

• 🐛 Fix stream item type lost when using include_router(). PR #15077 by @​alex-raw.

0.140.6

Refactors

... (truncated)

Commits

• 628663f 🔖 Release version 0.140.13 (#16096)
• 0b54fd0 📝 Update release notes
• e92a0dc 🐛 Fix status_code being ignored for SSE and JSONL streaming endpoints (#15937)
• 6215d8a 📝 Update release notes
• 12242c4 📝 Fix format_sse_event docstring rendering of \n\n terminator (#15613)
• 70a8f3d 📝 Update release notes
• 4f0152c 📝 Add API reference page for fastapi.sse (#15930)
• 5f25505 🔖 Release version 0.140.12 (#16095)
• 76e2c83 📝 Update release notes
• 0f3e7bd 🐛 Fix line splitting in format_sse_event to comply with SSE spec (#15515)
• Additional commits viewable in compare view

Updates uvicorn from 0.48.0 to 0.52.0

Release notes

Sourced from uvicorn's releases.

Version 0.52.0

This release adds an experimental HTTP/1.1 implementation backed by zttp, a sans-IO HTTP parser I've been developing on the side: a core written in Zig, with bindings to Python. It has been running under a fuzzer for some weeks now, and has been through multiple rounds of security auditing.

It is still experimental, so don't put it in front of production traffic yet. Try it with --http zttp, and please send any feedback to the issue tracker.

Added

• Add an experimental zttp HTTP/1.1 implementation, selectable with --http zttp (#2979)

Fixed

• Keep non-ASCII WebSocket request headers intact with websockets 17.0, which encodes them with ISO-8859-1 (#3036)

Full Changelog: Kludex/uvicorn@0.51.0...0.52.0

Version 0.51.0

What's Changed

• Restart workers with overlap on SIGHUP for near-zero-downtime reloads by @​Kludex in Kludex/uvicorn#3025
• Remove colorama from the standard extra by @​Kludex in Kludex/uvicorn#3027

Full Changelog: Kludex/uvicorn@0.50.2...0.51.0

Version 0.50.1

What's Changed

• Split comma-separated Sec-WebSocket-Protocol values in the websockets-sansio implementation by @​Aayush7352 in Kludex/uvicorn#3019

New Contributors

• @​Aayush7352 made their first contribution in Kludex/uvicorn#3019

Full Changelog: Kludex/uvicorn@0.50.0...0.50.1

Version 0.50.0

What's Changed

• Memoize trusted host checks to avoid re-parsing the client IP per request by @​Kludex in Kludex/uvicorn#2970
• Cache the asgi scope sub-dict per connection by @​Kludex in Kludex/uvicorn#2976
• Build a fresh asgi scope dict per request by @​Kludex in Kludex/uvicorn#2977
• Replace click.style with an internal ANSI style helper by @​Kludex in Kludex/uvicorn#2981
• Avoid copying single-frame WebSocket payloads in websockets-sansio by @​Kludex in Kludex/uvicorn#2983
• Deprecate the legacy websockets implementation and default auto to websockets-sansio by @​Kludex in Kludex/uvicorn#2985
• Exit with a dedicated code on startup failure and stop the supervisor when a worker can't boot by @​Kludex in Kludex/uvicorn#3001
• Skip the eager app import in the parent when spawning workers by @​Kludex in Kludex/uvicorn#3012

Full Changelog: Kludex/uvicorn@0.49.0...0.50.0

Version 0.49.0

What's Changed

• Bump httptools minimum version to 0.8.0 by @​Kludex in Kludex/uvicorn#2962

... (truncated)

Changelog

Sourced from uvicorn's changelog.

0.52.0 (July 29, 2026)

This release adds an experimental HTTP/1.1 implementation backed by zttp, a sans-IO HTTP parser I've been developing on the side: a core written in Zig, with bindings to Python. It has been running under a fuzzer for some weeks now, and has been through multiple rounds of security auditing.

It is still experimental, so don't put it in front of production traffic yet. Try it with --http zttp, and please send any feedback to the issue tracker.

Added

• Add an experimental zttp HTTP/1.1 implementation, selectable with --http zttp (#2979)

Fixed

• Keep non-ASCII WebSocket request headers intact with websockets 17.0, which encodes them with ISO-8859-1 (#3036)

0.51.0 (July 8, 2026)

Added

• Restart workers one at a time on SIGHUP, bringing each replacement up before retiring the old worker, so reloads no longer drop requests (#3025)

Removed

• Remove colorama from the standard extra (#3027)

0.50.2 (July 6, 2026)

Fixed

• Require websockets>=13.0, which the default websockets-sansio implementation needs (#3021)

0.50.1 (July 6, 2026)

Fixed

• Split comma-separated Sec-WebSocket-Protocol values in the websockets-sansio implementation (#3019)

0.50.0 (July 4, 2026)

If you use WebSockets, note that --ws auto now picks the websockets-sansio implementation. You shouldn't need it, but you can pin --ws websockets to get the deprecated legacy one back.

Changed

• Exit with the dedicated code 3 on any startup failure: app loading, socket bind and lifespan startup errors previously exited with a mix of 0, 1 and 3 (#3001)
• Stop the multiprocess supervisor when a worker exits with code 3 instead of restarting it forever (#3001)
• Default --ws auto to websockets-sansio when websockets is installed (#2985)
• Skip the eager app import in the parent process with --reload or --workers, fixing a memory regression introduced in 0.47.0 (#3012)
• Build a fresh asgi scope dict per request (#2977)
• Cache the asgi scope sub-dict per connection (#2976)
• Avoid copying single-frame WebSocket payloads in websockets-sansio (#2983)
• Memoize trusted host checks in ProxyHeadersMiddleware (#2970)

... (truncated)

Commits

• 8f1b884 Version 0.52.0 (#3044)
• f6833db Add experimental zttp HTTP/1.1 protocol (#2979)
• d26c85c Prepare compatibility with websockets 17.0. (#3036)
• 7e11cc6 Clarify how limit_concurrency and backlog differ (#3029)
• e4d0b05 Version 0.51.0 (#3028)
• 944e43d Remove colorama from the standard extra (#3027)
• 2e78770 Restart workers with overlap on SIGHUP for near-zero-downtime reloads (#3025)
• a1b570c Version 0.50.2 (#3022)
• 83c7da7 Require websockets>=13.0 for the default sansio implementation (#3021)
• b4d0116 Version 0.50.1 (#3020)
• Additional commits viewable in compare view

Updates types-requests from 2.33.0.20260518 to 2.33.0.20260712

Commits

• See full diff in compare view

Updates aiohttp from 3.14.0 to 3.14.3

Changelog

Sourced from aiohttp's changelog.

3.14.3 (2026-07-22)

Bug fixes

• Fixed the client dropping only the first Authorization, Cookie and Proxy-Authorization header when a redirect crossed an origin -- by :user:arshsmith1.

  Related issues and pull requests on GitHub: :issue:13180.

• Fixed error message construction in the C HTTP parser -- by :user:bdraco.

  Related issues and pull requests on GitHub: :issue:13222.

---

3.14.2 (2026-07-20)

Bug fixes

• Fixed :py:attr:~aiohttp.web.StreamResponse.last_modified rounding a :class:datetime.datetime with a fractional second down.

  Related issues and pull requests on GitHub: :issue:5303.

• Fixed resolving localhost on Windows to fall back without AI_ADDRCONFIG when the first lookup fails, so localhost still works without an active network.

  Related issues and pull requests on GitHub: :issue:5357.

... (truncated)

Commits

• 5e392ce Release v3.14.3 (#13225)
• 49f65d5 [PR #13222/f4866933 backport][3.14] Build C parser error message from bounded...
• 240099e [PR #13180/ee53d655 backport][3.14] drop every copy of credential headers on ...
• d93f30a Bump version (#13202)
• c1b9212 Release v3.14.2 (#13201)
• 380d4b5 [PR #13054/ed8b040c backport][3.14] escape backslashes in digest auth quoted-...
• e1e1bee Make llhttp method array size dynamic (#13174) (#13196)
• aa4cf29 [PR #13170/2b906869 backport][3.14] Fix StreamResponse.last_modified rounding...
• 71b57b4 [PR #13172/a57747ed backport][3.14] Fix C parser folding fragment into query_...
• 64a03fb [PR #13169/1adc0cd7 backport][3.14] Upgrade http:// to https:// in README.rst...
• Additional commits viewable in compare view

Updates azure-ai-projects from 2.2.0 to 2.4.0

Updates agent-framework-core from 1.7.0 to 1.12.1

Release notes

Sourced from agent-framework-core's releases.

python-1.12.1

[1.12.1] - 2026-07-22

Added

• agent-framework-openai: Add explicit prompt cache breakpoints for GPT-5.6 models and a usage sample (#7163)

Changed

• agent-framework-ag-ui: Promote the package from release candidate to stable
• agent-framework-core: Add security guidance for custom MCP Streamable HTTP clients (#7245)

Fixed

• agent-framework-gemini: Preserve Gemini 3 thought signatures across function-call replays (#7095)
• agent-framework-core, agent-framework-foundry, agent-framework-foundry-hosting, agent-framework-openai: Fix stateless replay of reasoning-paired tool calls (#7233)

Full Changelog: microsoft/agent-framework@python-1.12.0...python-1.12.1

python-1.12.0

[1.12.0] - 2026-07-21

Added

• agent-framework-azure-cosmos-memory: Add an alpha Azure Cosmos DB semantic-memory context provider with fact extraction, user profiles, samples, and integration coverage (#6719)
• agent-framework-azurefunctions, agent-framework-core, agent-framework-durabletask: Add HITL response-URL addressing for requests raised from inside workflows (#7001)
• agent-framework-core: Add cross-session origin attribution to context-injected messages (#7041)
• agent-framework-core, agent-framework-tools: Warn when auto-approved tools have name collisions (#7090)
• agent-framework-core: Add a session_provider option to MCPSkillsSource and MCPSkill (mutually exclusive with client) that resolves the MCP session on every fetch, keeping cached skills reconnect-safe when the underlying session is replaced (#7135)
• agent-framework-hosting-a2a: Add app-owned A2A hosting helpers (#7050)
• agent-framework-hosting-mcp: Add app-owned MCP hosting helpers for exposing agents and workflows as native MCP tools (#7209)
• agent-framework-hosting-responses: [BREAKING] Add Responses conversation ID creation and parsing helpers, and distinguish conversation IDs from previous response IDs (#7234)
• agent-framework-hosting-telegram: Add Telegram hosting helpers and samples (#7047)
• samples: Add a Microsoft OpenTelemetry Distro observability sample (#5632)

Changed

• agent-framework-ag-ui: [BREAKING] Emit TOOL_CALL events for workflow participant tool calls (#7039)
• agent-framework-a2a: Reduce A2AExecutor log noise for content types without protocol mappings (#7034)
• agent-framework-ag-ui, agent-framework-core: Optimize shared serialization paths (#7165)
• agent-framework-ag-ui, agent-framework-bedrock, agent-framework-claude, agent-framework-core, agent-framework-github-copilot, agent-framework-ollama, agent-framework-openai: Normalize chat finish reasons across providers (#7105)
• agent-framework-anthropic, agent-framework-azure-contentunderstanding, agent-framework-azure-cosmos, agent-framework-core, agent-framework-declarative, agent-framework-devui, agent-framework-foundry, agent-framework: Update Microsoft Foundry branding in shipped APIs and package documentation (#6999)
• agent-framework-azure-contentunderstanding, agent-framework-azure-cosmos-memory, agent-framework-chatkit, agent-framework-core, agent-framework-durabletask, agent-framework-foundry, agent-framework-foundry-hosting, agent-framework-gemini, agent-framework-hyperlight, agent-framework-lab, agent-framework-monty, agent-framework-openai, agent-framework-tools, agent-framework: Consolidate dependency updates and compatibility adjustments (#7204)
• agent-framework-azurefunctions, agent-framework-devui, agent-framework-foundry, agent-framework-hosting-responses, agent-framework-lab, agent-framework-mistral, agent-framework: Clean up dependency groups and compatibility handling (#7046)
• agent-framework-azurefunctions, agent-framework-durabletask: Normalize initial durable workflow inputs across hosting paths (#7205)
• agent-framework-core: [BREAKING — experimental] Correct harness before-strategy compaction when state persists per service call (#7055)
• agent-framework-core: [BREAKING] Graduate create_harness_agent from experimental to stable (#7120)
• agent-framework-core: Graduate the mode and todo providers from experimental to stable (#7053)
• agent-framework-core: Graduate ToolApprovalMiddleware from experimental to stable (#7106)
• agent-framework-core: Graduate FileMemoryProvider from experimental to stable (#7113)
• agent-framework-core: Make FileAccessProvider opt-in for harness agents (#7094)
• agent-framework-core: Serialize tool definitions best-effort for observability (#7029)
• agent-framework-declarative: Promote declarative workflows from release candidate to stable (#7065)
• agent-framework-devui: Refine request logging (#7083)
• agent-framework-foundry-hosting: Promote the package to beta and add it to the main installation surface; make the Foundry Toolbox MCP skills sample self-contained (#7099)

... (truncated)

Commits

• 711d6f2 Bump Python package versions for 1.12.1 release (#7273)
• bd17a64 Restore dedicated DevFlow Copilot authentication (#7276)
• 5147579 Python: Enforce package coverage by lifecycle (#7261)
• 2d34dee Reduce workflow credential exposure (#7270)
• a2927c1 Python: Fix stateless replay of reasoning-paired tool calls (#7233)
• c68c099 .NET: Fix expensive logging (#7268)
• 6180272 Python: Support prompt cache breakpoints for GPT-5.6 models in OpenAI clients...
• ddb0622 .NET: Added GettingStarted example demonstrating Dapr as an agent provider (#...
• 12b2325 Updating dotnet version for release. (#7265)
• bfc73a5 .NET: Fix declarative autosend output (#7217)
• Additional commits viewable in compare view

Updates azure-cosmos from 4.16.1 to 4.16.2

Release notes

Sourced from azure-cosmos's releases.

azure-cosmos_4.16.2

4.16.2 (2026-07-15)

Features Added

• Added GlobalSecondaryIndexDefinition class and global_secondary_index keyword to create_container, create_container_if_not_exists, and replace_container methods for creating Global Secondary Index (GSI) containers. See PR 47468.

Bugs Fixed

• Fixed KeyError: 'version' in SessionContainer.get_session_token (sync and async) when the container's partitionKey definition returned by the service does not include the optional version field. The error was silently swallowed by a broad except, causing the client to send no x-ms-session-token header on subsequent reads. Against the Dedicated Gateway, this turned every Session-consistency read into an Integrated Cache miss. partitionKey.version is now treated as optional and defaults to 1, matching how PartitionKey handles a missing version. See PR 47143

Commits

• eb67b14 Revert "Add CFSClean enforcement (#48061)" (#48080)
• c839b8b Cosmos: update changelog for release (#48005)
• f0ac2f5 [ServiceBus] Document aiohttp>=3.14.0 recommendation for AmqpOverWebsocket (#...
• c91747d Fix OneSettings validation logic to match schema (#48059)
• 3eeccbb Add CFSClean enforcement (#48061)
• 8f8855b [Service Bus] Drain receive link and release messages on receiver close (#42917)
• 777741b Sync eng/common directory with azure-sdk-tools for PR 16342 (#48074)
• ebe3b5e update autorelease resolve step as authenticated step (#48073)
• e5f122a [monitor opentelemetry exporter] Handle ServiceResponseError as retryable to ...
• 2cad71a Bump TypeSpec Python emitter to 0.63.3 (#48068)
• Additional commits viewable in compare view

Updates openai from 2.40.0 to 2.50.0

Release notes

Sourced from openai's releases.

v2.50.0

2.50.0 (2026-07-28)

Full Changelog: v2.49.0...v2.50.0

Features

• api: transcription model updates (fd57393)

Bug Fixes

• audio: restore transcription keyword overload (713a262)

v2.49.0

2.49.0 (2026-07-27)

Full Changelog: v2.48.0...v2.49.0

Features

• require Python 3.10 and automate version reviews (#3537) (d4c151d)

v2.48.0

2.48.0 (2026-07-23)

Full Changelog: v2.47.0...v2.48.0

Features

• api: accept None for prompt_cache_key/safety_identifier (36820e6)
• api: add support for spend_limit admin apis (1ff13af)

v2.47.0

2.47.0 (2026-07-21)

Full Changelog: v2.46.0...v2.47.0

Features

• client: Add experimental runtime support for HTTPX2 clients (#3524) (317260c)
• stlc: configurable CI runner and private-production-repo support in workflow templates (4303e97)

Bug Fixes

• deps: require patched aiohttp on Python 3.10+ (#3515) (d4dceb2)

v2.46.0

2.46.0 (2026-07-17)

... (truncated)

Changelog

Sourced from openai's changelog.

2.50.0 (2026-07-28)

Full Changelog: v2.49.0...v2.50.0

Features

• api: transcription model updates (fd57393)

Bug Fixes

• audio: restore transcription keyword overload (713a262)

2.49.0 (2026-07-27)

Full Changelog: v2.48.0...v2.49.0

Features

• require Python 3.10 and automate version reviews (#3537) (d4c151d)

2.48.0 (2026-07-23)

Full Changelog: v2.47.0...v2.48.0

Features

• api: accept None for prompt_cache_key/safety_identifier (36820e6)
• api: add support for spend_limit admin apis (1ff13af)

2.47.0 (2026-07-21)

Full Changelog: v2.46.0...v2.47.0

Features

• client: Add experimental runtime support for HTTPX2 clients (#3524) (317260c)
• stlc: configurable CI runner and private-production-repo support in workflow templates (4303e97)

Bug Fixes

• deps: require patched aiohttp on Python 3.10+ (#3515) (d4dceb2)

2.46.0 (2026-07-17)

Full Changelog: v2.45.0...v2.46.0

Features

... (truncated)

Commits

• 4f40426 release: 2.50.0
• 92594f1 fix(audio): restore transcription keyword overload
• 59ed1dc feat(api): transcription model updates
• 6ba31bc release: 2.49.0 (#3539)
• 90483ad test: support a hermetic local API reference (#3542)
• d4c151d feat: require Python 3.10 and automate version reviews (#3537)
• 8a6adcb release: 2.48.0
• cbd2fba feat(api): add support for spend_limit admin apis
• 00709f2 feat(api): accept None for prompt_cache_key/safety_identifier
• e67afa8 release: 2.47.0
• Additional commits viewable in compare view

Updates pandas from 3.0.3 to 3.0.5

Release notes

Sourced from pandas's releases.

pandas 3.0.5

We are pleased to announce the release of pandas 3.0.5. This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version.

See the full whatsnew for a list of all the changes.

Pandas 3.0 supports Python 3.11 and higher. The release can be installed from PyPI:

python -m pip install --upgrade pandas==3.0.*

Or from conda-forge

conda install -c conda-forge pandas=3.0

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

pandas 3.0.4

We are pleased to announce the release of pandas 3.0.4. This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version.

See the full whatsnew for a list of all the changes.

Pandas 3.0 supports Python 3.11 and higher. The release can be installed from PyPI:

python -m pip install --upgrade pandas==3.0.*

Or from conda-forge

conda install -c conda-forge pandas=3.0

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

Commits

• e68db09 RLS: 3.0.5
• 0697623 Backport PR #66428: DOC: update whatsnew for 3.0.5 (#66430)
• 5d846d0 Backport PR #66090 on branch 3.0.x (BLD: exclude numpy 2.5.0 when building wh...
• bef7a2b Backport PR #66169 on branch 3.0.x (CI: Fix pyarrow-nightly job (stale nightl...
• 8188eb1 RLS: 3.0.4 (#66079)
• bd35f15 [3.0.x] BUG: fix CoW issue in eval() (#66072)
• 6195872 [backport 3.0.x] BUG: anchor whole alternation in Series.str.match for PyArro...
• 70313be Backport PR #66051 on branch 3.0.x (BUG: fix regression in DataFrame setitem ...
• 57ed3e2 [backport 3.0.x] Bump pypa/cibuildwheel from 3.4.1 to 4.1.0 (#65934) (#66026)
• f9693fc [backport 3.0.x] BUG(pandas 3.0 regression): drop(index=...) doesn't accept N...
• Additional commits viewable in compare view

Updates opentelemetry-exporter-otlp-proto-grpc from 1.42.1 to 1.44.0

Changelog

Sourced from opentelemetry-exporter-otlp-proto-grpc's changelog.

Version 1.44.0/0.65b0 (2026-07-16)

Added

• opentelemetry-docker-tests: Refactor Docker tests to properly validate contents of exported telemetry (#5220)
• opentelemetry-exporter-otlp-common: add shared package for common OTLP utilities (#5252)
• opentelemetry-sdk: add MissingDependencyError exception for declarative configuration and use it for missing optional dependency errors (#5265)
• opentelemetry-sdk: Add ability to refresh process dependent Resource attributes (#5280)
• opentelemetry-sdk: add force_flush method to LogRecordExporter ABC (#5294)
• opentelemetry-sdk: Make it possible to limit the size of stored spans in InMemorySpanExporter (#5296)
• opentelemetry-sdk: add log record limits environment variables OTEL_LOGRECORD_ATTRIBUTE_COUNT_LIMIT and OTEL_LOGRECORD_ATTRIBUTE_VALUE_LENGTH_LIMIT (#5300)
• opentelemetry-sdk: add support for file exporter with declarative config (#5311)
• opentelemetry-sdk: expose SynchronousMultiLogRecordProcessor and ConcurrentMultiLogRecordProcessor publicly (#5327)
• opentelemetry-sdk: point the declarative configuration package README at the shared language support status matrix in the opentelemetry-configuration repo, so Python conformance status lives alongside the other languages instead of being duplicated per language SDK. (#5347)
• opentelemetry-sdk: document that Python-implementation extensions (OTEL_PYTHON_* variables) are bypassed when OTEL_CONFIG_FILE is set. The env-var initialisation path is skipped entirely in favour of the declarative file; honouring these alongside a config file is tracked as a follow-up. (#5353)
• opentelemetry-sdk: wire id_generator from declarative configuration to TracerProvider (#5363)
• opentelemetry-sdk: Add support for activating instrumentors from a declarative configuration file via the instrumentation/development.python section. Instrumentors can declare a configuration attribute to have their options validated through the same type-coercion pipeline used for SDK component configuration. (#5372)

... (truncated)

Commits

• 53a5a40 Prepare release 1.44.0/0.65b0 (#5422)
• d9f34e7 Fixup eachdist.py handling of package names (#5417)
• d10f472 opentelemetry-semantic-conventions: Bump to 1.43.0 (#5413)
• ae8feeb Update otelbot token workflows to use client IDs (#5404)
• 67a2abd Fix Context in-place mutability bypass via inherited dict methods (#5399)
• 87baad9 Bump semconv to 1.42.0 (#5410)
• 23dc0b2 opentelemetry-sdk: add 'force_flush' method to LogRecordExporter ABC (#5294)
• bec55fd opentelemetry-sdk: expose SynchronousMultiLogRecordProcessor and ConcurrentMu...
• 55d0b7a opentelemetry-sdk: Add ability to refresh process sensitive Resource attribut...
• 6115db2 opentelemetry-sdk: add log record limits environment variables (#5300)
• Additional commits viewable in compare view

Updates opentelemetry-exporter-otlp-proto-http from 1.42.1 to 1.44.0

Changelog

Sourced from opentelemetry-exporter-otlp-proto-http's changelog.

Version 1.44.0/0.65b0 (2026-07-16)

Added

• opentelemetry-docker-tests: Refactor Docker tests to properly validate contents of exported telemetry (#5220)
• opentelemetry-exporter-otlp-common: add shared package for common OTLP utilities (#5252)
• opentelemetry-sdk: add MissingDependencyError exception for declarative configuration and use it for missing optional dependency errors (#5265)
• opentelemetry-sdk: Add ability to refresh process dependent Resource attributes (#5280)
• opentelemetry-sdk: add force_flush method to LogRecordExporter ABC (#5294)
• opentelemetry-sdk: Make it possible to limit the size of stored spans in InMemorySpanExporter (#5296)
• opentelemetry-sdk: add log record limits environment variables OTEL_LOGRECORD_ATTRIBUTE_COUNT_LIMIT and OTEL_LOGRECORD_ATTRIBUTE_VALUE_LENGTH_LIMIT ...

  Description has been truncated