Update @elastic/appex-ai-infra dependencies (main) by dev-mend-for-git.832008.xyz[bot] · Pull Request #42 · amaybaum-dev/kibana2

dev-mend-for-git.832008.xyz · 2025-11-01T09:28:14Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@arizeai/openinference-semantic-conventions (source)	`^1.1.0` → `^2.3.0`
@arizeai/phoenix-client (source)	`^4.0.3` → `^6.9.2`
@huggingface/hub	`^2.2.0` → `^2.11.2`
@smithy/eventstream-serde-node (source)	`^4.0.5` → `^4.3.0`
@smithy/node-http-handler (source)	`^4.0.1` → `^4.7.0`
@smithy/types (source)	`^4.1.0` → `^4.14.1`
@types/aws4 (source)	`^1.5.0` → `^1.11.6`
ajv (source)	`^8.17.1` → `^8.20.0`
cache-manager (source)	`^7.0.0` → `^7.2.8`
cache-manager-fs-hash	`^2.0.0` → `^3.0.0`
eventsource-parser	`^3.0.0` → `^3.0.8`
fast-glob	`^3.3.2` → `^3.3.3`
gpt-tokenizer	`^2.6.2` → `^3.4.0`
keyv	`^5.3.4` → `^5.6.0`
langsmith	`^0.3.72` → `^0.6.3`
openai	`^4.72.0` → `^6.37.0`
table	`^6.8.2` → `^6.9.0`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

Arize-ai/phoenix (@arizeai/phoenix-client)

`v6.2.0`

Features

client: add timeout parameters to log_evaluations, get_evaluations (#5646) (c388a9b)
components: add story book and ComboBox (#5609) (4981f41)
playground: pull prompt template variables from span and capture on playground spans (#5642) (d6382dc)

Bug Fixes

fixing other slack link in readme (#5643) (94cd150)
Intel x86_64 macOS issue with wrapt 1.17 (#5657) (c1aa93d)
postgresql url query param (#5659) (5f51386)
slack link (df503fa)
styling of experiment sequence numbers (#5622) (42a67d4)
Update README.md (#5644) (016ca63)

`v6.1.0`

Features

Add cancel button to playground runs (#5566) (6bafa46)
Show invocation param errors within form (#5559) (eac071f)

Bug Fixes

add copy to clipboard icon for experiment ids on experiment compare page (#5596) (6a62bd2)
playground: handle experiment id's for non streaming (#5601) (1a51350)
Remove deadzone when hovering example table cells (#5363) (03179f4)

Documentation

update feature table on README to include prompt playground (#5579) (fc66650)

`v6.0.0`

⚠ BREAKING CHANGES

Sandboxing and Code Evaluators (#13290)

Features

agents: Enable provider native web search / fetch when available (#13333) (41eb4fc)
Sandboxing and Code Evaluators (#13290) (e294d93)

Bug Fixes

agents: Prevent broken tool groups (#13387) (78d1e96)

`v5.9.0`

Features

agents: backfill TOOL spans for external tool returns in agent wrapper (#13185) (4b221b9)

Bug Fixes

agent: clarify PXI remote trace sharing consent (#13219) (f5da114)
handle invalid GraphQL node ids (#13210) (35c8f3d)

Documentation

skills: weekly audit — 2026-05-13 (#13214) (8349361)

`v5.8.0`

Features

agents: populate project_sessions for /chat and /summary traces (#13187) (11275b4)
playground: Add Anthropic and Google thinking controls (#13164) (c132f0c)
pxi tool layout rebalancing (#13168) (d8d5322)

Bug Fixes

cost: update built-in model token prices (#13203) (dde26f6)
prevent prototype pollution in DatasetPreviewTable (#13199) (f0a2f9e)
validate projection expressions and sandbox eval globals (#13213) (9ca0a3f)

`v5.7.0`

Features

add trace user feedback annotations (#13099) (3797110)
agents: rip v1 /chat route and associated code (#13140) (71ceeb3)
make session turn messages expandable (#13057) (f898dc0)
session-tagged identifiers for open/axial coding workflows (#13083) (6dceb10)
ui: move toasts to top-center with sonner-style stacking (#13177) (1cc1ce7)

Bug Fixes

keep PXI send button in stop mode while streaming (#13188) (73b0d62)
prevent format-string injection in f-string template formatter (#13197) (e7224a6)
surface playground validation errors (#13139) (44b07ac)

`v5.6.0`

Features

agents: add /agents/{agent_id}/sessions/{session_id}/summary endpoint (#13095) (419c3a0)
agents: Playground manipulation tools w/ confirmation (#13093) (37dc417)
playground: default provider/model as a user preference (#13135) (4487740)
tracing: always show metrics aside, remove legacy stats header (#13134) (ea3d7e7)

Bug Fixes

pxi: resolve interrupted tool calls (#13123) (d37dfa0)

Documentation

fill 6 documentation gaps from weekly audit (closes #13072) (#13133) (0883fa7)

`v5.5.1`

Bug Fixes

evaluators: preserve built-in evaluator on dataset evaluator delete (#13104) (9c8068b)

`v5.5.0`

Features

agents: wire /chat-v2 with tools behind experimental toggle (#13009) (7706554)
app: type frontend REST calls against the OpenAPI schema (#13060) (590669d)
support x-project-name HTTP header for OTLP trace ingestion (#12865) (7d10386)
Update session details turns layout (#13042) (a1be820)

Bug Fixes

add types-aiobotocore-bedrock-runtime in container/aws extras (#13113) (0e2c175)
deps: bump litellm floor to 1.83.14 to fix multiple CVEs (#13020) (ccf1880)

Documentation

Add Phoenix release notes for 04-29-2026 through 05-05-2026 (#13058) (bdb6684)
add REST API pages for filter-based annotation DELETE endpoints (#13075) (e8c3b13)
disable sidebar drilldown navigation (#13049) (fc01ed7)
skills: weekly audit — 2026-05-06 (#13074) (a5d970b)

`v5.4.0`

Features

agents: agent set_time_range tool with hardened context injection (#13022) (115c08b)
agents: ToolPart styles and subcomponents (#12894) (0d4e16b)
api: add filter-based DELETE endpoints for span/trace/session annotations (#12928) (12779fb)
rest-api: include token counts in span/trace/session payloads (#12926) (c0c0edb)
simplify trace/span status icons, use status badge in panel views (#12972) (d8e3915)
vendor passthrough tools support (#12533) (41e8fe0)

Bug Fixes

select traces within session view (#12950) (99209e8)

`v5.3.0`

Features

agent: remove user instructions from PXI (#13010) (6062d64)
chat empty state shader (#12990) (5c643d9)

Bug Fixes

api: include dataset metadata in experiment CSV export (#12897) (64cb481)
deps: update arize-phoenix-client to 2.4.0 (#12799) (1300763)
deps: update arize-phoenix-otel to 0.16.1 (#12997) (7bff140)

Documentation

add LinkedIn social links alongside X/Bluesky (#12993) (5d14f23)
document all REST API endpoints and index them in llms.txt (#12999) (2ec728a)

`v5.2.1`

Bug Fixes

handle badly ingested llm spans gracefully (#4915) (b008d11)

Documentation

js: add langchain deno notebook (#4848) (9bb57b7)

`v5.2.0`

Features

add TanStack AI tracing integration (#12984) (382b165)
agents: Move PXI prompt assembly server-side and cache prompts (#12959) (f223f92)
enhance filter condition filter (#12938) (b92bfbc)

Bug Fixes

agents: drop user-supplied connection params from /chat (SSRF) (#12974) (775b270)
cost: update built-in model token prices (#12960) (746247c)
replace crypto.randomUUID with a context-safe fallback (#12987) (#12988) (62b6ace)
ui: remove redundant Ask PXI button from trace details drawer (#12957) (863e9ca)

Documentation

add network security guide for self-hosted deployments (#12968) (aed96fd)

`v5.1.1`

Bug Fixes

support numpy 2 (#4798) (c4baea4)

`v5.1.0`

Features

api: query annotations by identifier on GET endpoints (#12952) (e2a1de9)
cli: add named auth profile management (#12529) (ab62d3d)
cli: add session annotations and notes (#12925) (4e20267)
phoenix-client: add TS trace annotations + clarify note semantics + skills audit (#12923) (2993b04)

Bug Fixes

playground: accept unwrapped AWS Bedrock tool schemas (#12937) (b450f10)
ui: remove unused sticky positioning on Drawer dialog header (#12954) (d6a5f90), closes #12953

Documentation

Add Phoenix release notes for 04-24-2026 through 04-28-2026 (#12914) (ceeb89b)
add phoenix-release-please skill and note no v15 migration (#12932) (4bd2b43)
skills: add open-coding and axial-coding references to phoenix-cli skill (#12869) (0972f3d)

`v5.0.0`

⚠ BREAKING CHANGES

dataset upsert (#11860)

Features

dataset upsert (#11860) (9575738)
extend db prompt types for invocation paramaters (#12855) (1499ca9)

`v4.2.0`

Features

add /redirects/projects/:project_name for name-based project URLs (#12593) (afd9584)

Documentation

Add Phoenix release notes for 04-02-2026 through 04-07-2026 (#12588) (3a55bae)

`v4.1.0`

Features

agent: Push chat runtime out of panel, share it with trace slideover (#12579) (30dfdb5)

Bug Fixes

add valid OpenAPI examples for span creation endpoint (#12371) (d74be37)
agent: surface backend tool loop exhaustion (#12569) (c887c93)
normalize empty PHOENIX_SQL_DATABASE_SCHEMA to None (#12582) (cd0dfaa)

smithy-lang/smithy-typescript (@smithy/eventstream-serde-node)

`v4.3.0`

Compare Source

Minor Changes

cad44fc: consolidate core/event-streams

Patch Changes

0be0b36: clean up exported API surface
Updated dependencies [ee92b6b]
Updated dependencies [540aeb4]
Updated dependencies [0be0b36]
Updated dependencies [4f30af1]
Updated dependencies [8963b91]
Updated dependencies [fb323fb]
Updated dependencies [9194e9f]
Updated dependencies [7ec62a0]
Updated dependencies [62fed78]
Updated dependencies [cad44fc]
Updated dependencies [545589a]
Updated dependencies [f21bf6b]
Updated dependencies [7fd6ac0]
- @smithy/core@3.24.0

Patch Changes

a4d95e6: Set downlevel types to be used in typescript@'<4.5'
Updated dependencies [a4d95e6]
- @smithy/eventstream-serde-universal@4.2.11

`v4.2.10`

Compare Source

Patch Changes

Updated dependencies [d0954cc]
- @smithy/types@4.13.0
- @smithy/eventstream-serde-universal@4.2.10

`v4.2.9`

Compare Source

Patch Changes

03c3dc8: update for rollup build externalLiveBindings=false
Updated dependencies [03c3dc8]
- @smithy/eventstream-serde-universal@4.2.9
- @smithy/types@4.12.1

`v4.2.8`

Compare Source

Patch Changes

Updated dependencies [745867a]
- @smithy/types@4.12.0
- @smithy/eventstream-serde-universal@4.2.8

`v4.2.7`

Compare Source

Patch Changes

Updated dependencies [9ccb841]
- @smithy/types@4.11.0
- @smithy/eventstream-serde-universal@4.2.7

`v4.2.6`

Compare Source

Patch Changes

Updated dependencies [5a56762]
- @smithy/types@4.10.0
- @smithy/eventstream-serde-universal@4.2.6

`v4.2.5`

Compare Source

Patch Changes

Updated dependencies [3926fd7]
- @smithy/types@4.9.0
- @smithy/eventstream-serde-universal@4.2.5

`v4.2.4`

Compare Source

Patch Changes

Updated dependencies [6da0ab3]
- @smithy/types@4.8.1
- @smithy/eventstream-serde-universal@4.2.4

`v4.2.3`

Compare Source

Patch Changes

Updated dependencies [8a2a912]
- @smithy/types@4.8.0
- @smithy/eventstream-serde-universal@4.2.3

`v4.2.2`

Compare Source

Patch Changes

Updated dependencies [052d261]
- @smithy/types@4.7.1
- @smithy/eventstream-serde-universal@4.2.2

`v4.2.1`

Compare Source

Patch Changes

Updated dependencies [761d89c]
Updated dependencies [7f8af58]
- @smithy/types@4.7.0
- @smithy/eventstream-serde-universal@4.2.1

`v4.2.0`

Compare Source

Minor Changes

45ee67f: update dist-cjs generation to use rollup

Patch Changes

Updated dependencies [45ee67f]
- @smithy/eventstream-serde-universal@4.2.0
- @smithy/types@4.6.0

smithy-lang/smithy-typescript (@smithy/node-http-handler)

`v4.7.0`

Compare Source

Minor Changes

9194e9f: consolidate into core/endpoints

Patch Changes

da4e89e: Avoid array allocation in header transform
5329323: Remove empty object allocation in hot paths
09093fb: Support passing options through to Node's http2.connect
75603d4: Replace timeouts array with individual variables
Updated dependencies [ee92b6b]
Updated dependencies [540aeb4]
Updated dependencies [0be0b36]
Updated dependencies [4f30af1]
Updated dependencies [8963b91]
Updated dependencies [fb323fb]
Updated dependencies [9194e9f]
Updated dependencies [7ec62a0]
Updated dependencies [62fed78]
Updated dependencies [cad44fc]
Updated dependencies [545589a]
Updated dependencies [f21bf6b]
Updated dependencies [7fd6ac0]
- @smithy/core@3.24.0

`v4.6.1`

Compare Source

Patch Changes

769ed47: update http2 session closure to prefer session.close() on goaway rather than immediately invoking session.destroy()

`v4.6.0`

Compare Source

Minor Changes

60d13c8: adds ref-counting logic for http2 sessions in the client connection pool.

`v4.5.3`

Compare Source

Patch Changes

131fce4: add eventStream indicator signal for NodeHttp2ConnectionManager so it does not reuse connections for event streams
Updated dependencies [131fce4]
Updated dependencies [52b4789]
- @smithy/types@4.14.1
- @smithy/protocol-http@5.3.14
- @smithy/querystring-builder@4.2.14

`v4.5.2`

Compare Source

Patch Changes

Updated dependencies [cffd868]
- @smithy/types@4.14.0
- @smithy/protocol-http@5.3.13
- @smithy/querystring-builder@4.2.13

`v4.5.1`

Compare Source

Patch Changes

fac1a34: Move @smithy/abort-controller to devDeps

`v4.5.0`

Compare Source

Minor Changes

4e7fa38: defer loading of node:http module

`v4.4.16`

Compare Source

Patch Changes

dab22f1: fix: do not return caller's Error directly from buildAbortError

Always create a new mutable Error when the abort reason is an Error, preserving the original via .cause. Fixes TypeError when retry middleware tries to set $metadata on a frozen/sealed abort reason.

`v4.4.15`

Compare Source

Patch Changes

Updated dependencies [5340b11]
- @smithy/types@4.13.1
- @smithy/abort-controller@4.2.12
- @smithy/protocol-http@5.3.12
- @smithy/querystring-builder@4.2.12

`v4.4.14`

Compare Source

Patch Changes

a4d95e6: Set downlevel types to be used in typescript@'<4.5'
Updated dependencies [a4d95e6]
- @smithy/querystring-builder@4.2.11
- @smithy/abort-controller@4.2.11
- @smithy/protocol-http@5.3.11

`v4.4.13`

Compare Source

Patch Changes

9bf9ae2: fix: reject aborted requests with AbortSignal.reason instead of a generic Error

`v4.4.12`

Compare Source

Patch Changes

Updated dependencies [d0954cc]
- @smithy/types@4.13.0
- @smithy/abort-controller@4.2.10
- @smithy/protocol-http@5.3.10
- @smithy/querystring-builder@4.2.10

`v4.4.11`

Compare Source

Patch Changes

03c3dc8: update for rollup build externalLiveBindings=false
Updated dependencies [03c3dc8]
- @smithy/abort-controller@4.2.9
- @smithy/protocol-http@5.3.9
- @smithy/querystring-builder@4.2.9
- @smithy/types@4.12.1

`v4.4.10`

Compare Source

Patch Changes

f6f0de9: write request.end() with no arg if empty buffer

`v4.4.9`

Compare Source

Patch Changes

3ee4e66: Use configured logger when provided.

`v4.4.8`

[Compare Source](h

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

dev-mend-for-git.832008.xyz Bot added backport:all-open release_note:skip Team:AI Infra labels Nov 1, 2025

dev-mend-for-git.832008.xyz Bot force-pushed the whitesource-remediate/main-@elasticappex-ai-infra-dependencies branch 6 times, most recently from ab18cf8 to c8e1903 Compare November 10, 2025 16:42

dev-mend-for-git.832008.xyz Bot force-pushed the whitesource-remediate/main-@elasticappex-ai-infra-dependencies branch 8 times, most recently from 324f3c8 to a5949ca Compare November 18, 2025 22:35

dev-mend-for-git.832008.xyz Bot force-pushed the whitesource-remediate/main-@elasticappex-ai-infra-dependencies branch 7 times, most recently from d9dd61b to de8bedb Compare November 25, 2025 20:05

dev-mend-for-git.832008.xyz Bot force-pushed the whitesource-remediate/main-@elasticappex-ai-infra-dependencies branch 3 times, most recently from b3a8af1 to 00318af Compare November 30, 2025 18:06

dev-mend-for-git.832008.xyz Bot force-pushed the whitesource-remediate/main-@elasticappex-ai-infra-dependencies branch 6 times, most recently from aabc297 to 141dc74 Compare December 25, 2025 03:05

dev-mend-for-git.832008.xyz Bot force-pushed the whitesource-remediate/main-@elasticappex-ai-infra-dependencies branch 10 times, most recently from e821881 to 91c7b94 Compare January 1, 2026 20:35

dev-mend-for-git.832008.xyz Bot force-pushed the whitesource-remediate/main-@elasticappex-ai-infra-dependencies branch 4 times, most recently from 7fcf649 to 951164e Compare January 5, 2026 23:23

dev-mend-for-git.832008.xyz Bot force-pushed the whitesource-remediate/main-@elasticappex-ai-infra-dependencies branch 2 times, most recently from 8279798 to bb47fba Compare January 14, 2026 03:10

dev-mend-for-git.832008.xyz Bot force-pushed the whitesource-remediate/main-@elasticappex-ai-infra-dependencies branch 5 times, most recently from 3031b01 to 080c1e1 Compare January 27, 2026 18:54

dev-mend-for-git.832008.xyz Bot force-pushed the whitesource-remediate/main-@elasticappex-ai-infra-dependencies branch 2 times, most recently from 0711517 to 69f144e Compare January 29, 2026 06:06

Update @elastic/appex-ai-infra dependencies

3a4ff8d

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update @elastic/appex-ai-infra dependencies (main)#42

Update @elastic/appex-ai-infra dependencies (main)#42
dev-mend-for-git.832008.xyz[bot] wants to merge 1 commit into
mainfrom
whitesource-remediate/main-@elasticappex-ai-infra-dependencies

dev-mend-for-git.832008.xyz Bot commented Nov 1, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dev-mend-for-git.832008.xyz Bot commented Nov 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Features

Bug Fixes

Features

Bug Fixes

Documentation

⚠ BREAKING CHANGES

Features

Bug Fixes

Features

Bug Fixes

Documentation

Features

Bug Fixes

Features

Bug Fixes

Features

Bug Fixes

Documentation

Bug Fixes

Features

Bug Fixes

Documentation

Features

Bug Fixes

Features

Bug Fixes

Documentation

Bug Fixes

Documentation

Features

Bug Fixes

Documentation

Bug Fixes

Features

Bug Fixes

Documentation

⚠ BREAKING CHANGES

Features

Features

Documentation

Features

Bug Fixes

Minor Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Minor Changes

Patch Changes

Minor Changes

Patch Changes

Patch Changes

Minor Changes

Patch Changes

Patch Changes

Patch Changes

Minor Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

dev-mend-for-git.832008.xyz Bot commented Nov 1, 2025 •

edited

Loading