Skip to content

Python: Update google-genai requirement from <2.23,>=1.51 to >=1.51,<2.30 in /python - #14598

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python/google-genai-gte-1.51-and-lt-2.30
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python/google-genai-gte-1.51-and-lt-2.30

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on google-genai to permit the latest version.

Release notes

Sourced from google-genai's releases.

v2.29.0

2.29.0 (2026-10-07)

Features

  • Support "allowlist": "disabled" in environment network config. (fa4acc7)
  • Update discovery doc (84bf19c)

Bug Fixes

  • Only log direct AFC warning when functions are present in the config (6e36aaa)

Documentation

  • Refresh docs for 2.28.0 (618f0aa)
  • Update code samples to gemini-flash-latest, gemini-3.1-flash-lite-image, and gemini-3.8-flash-tts (5673494)
  • Update generated SDK docstring examples to use gemini-flash-latest (28e0915)
Changelog

Sourced from google-genai's changelog.

2.29.0 (2026-10-07)

Features

  • Support "allowlist": "disabled" in environment network config. (fa4acc7)
  • Update discovery doc (84bf19c)

Bug Fixes

  • Only log direct AFC warning when functions are present in the config (6e36aaa)

Documentation

  • Refresh docs for 2.28.0 (618f0aa)
  • Update code samples to gemini-flash-latest, gemini-3.1-flash-lite-image, and gemini-3.8-flash-tts (5673494)
  • Update generated SDK docstring examples to use gemini-flash-latest (28e0915)

2.28.0 (2026-10-02)

Features

  • Add lyria-3.5, gemini-omni-1.1-flash, and gemini-omni-flash-preview to Interactions Model enum (1e8c0cc)
  • Support continuation_token in Interactions (d40ca70)

2.27.0 (2026-10-01)

Features

  • Support continuation_token in GenerateContent (3931b29)

Documentation

2.26.0 (2026-09-30)

Features

  • Add gcs_metrics_uri for exporting tuning job metrics. (b6535e8)
  • Add Gemini 3.8 Flash TTS and Gemini 3.8 Flash Lite TTS models to SDKs (0cad6ca)
  • genai-sdk: Add environments dedicated module and from_environment support (7672ff6)
  • Include labels for LiveClientSetup (4742c9a)
  • Support labels for Gemini API GenerateContent (81ffa26)

... (truncated)

Commits
  • e81ca4a chore(main): release 2.29.0 (#3046)
  • a70095d chore: Add gemini-nano-banana-2.1 and gemini-3.1-flash-lite-image to supporte...
  • 28e0915 docs: update generated SDK docstring examples to use gemini-flash-latest
  • fa4acc7 feat: Support "allowlist": "disabled" in environment network config.
  • 84bf19c feat: update discovery doc
  • 6e36aaa fix: only log direct AFC warning when functions are present in the config
  • 5673494 docs: Update code samples to gemini-flash-latest, gemini-3.1-flash-lite-image...
  • 5d38785 test(openapi): speakeasy generator version.
  • 618f0aa docs: Refresh docs for 2.28.0
  • 6d13650 chore(main): release 2.28.0 (#3038)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Updates the requirements on [google-genai](https://github.com/googleapis/python-genai) to permit the latest version.
- [Release notes](https://github.com/googleapis/python-genai/releases)
- [Changelog](https://github.com/googleapis/python-genai/blob/main/CHANGELOG.md)
- [Commits](googleapis/python-genai@v1.51.0...v2.29.0)

---
updated-dependencies:
- dependency-name: google-genai
  dependency-version: 2.29.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team as a code owner October 14, 2026 06:51
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file. Used by Dependabot. label Oct 14, 2026
Copilot AI balanced review requested due to automatic review settings October 14, 2026 06:51
@dependabot dependabot Bot added the python Pull requests for the Python Semantic Kernel label Oct 14, 2026
@dependabot
dependabot Bot temporarily deployed to github-app-auth October 14, 2026 06:51 Inactive
@dependabot
dependabot Bot temporarily deployed to github-app-auth October 14, 2026 06:52 Inactive
@github-actions github-actions Bot changed the title Update google-genai requirement from <2.23,>=1.51 to >=1.51,<2.30 in /python Python: Update google-genai requirement from <2.23,>=1.51 to >=1.51,<2.30 in /python Oct 14, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Changes recommended

python/uv.lock remains stale and must be regenerated and committed.

1 open finding
What changed in this PR

Expands supported google-genai versions through 2.29.x.

Changes:

  • Raises the upper bound from <2.23 to <2.30.
File Description
python/​pyproject.toml Updates the optional Google dependency constraint.

🧠 Review effort: Balanced


💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Comment thread python/pyproject.toml
google = [
"google-cloud-aiplatform>=1.114,<1.134",
"google-genai >= 1.51,< 2.23"
"google-genai >= 1.51,< 2.30"
@eavanvalkenburg

Copy link
Copy Markdown
Member

Consolidated into #14720 for the Python 1.47.0 release, including the dependency changes and regenerated lockfiles. The release branch includes the merged Python 3.10 removal from #14708. Closing this PR as superseded; the combined changes remain under review in #14720.

@dependabot @github

dependabot Bot commented on behalf of github Nov 4, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/pip/python/google-genai-gte-1.51-and-lt-2.30 branch November 4, 2026 14:47
westey (westey-m) pushed a commit to westey-m/semantic-kernel-1 that referenced this pull request Nov 5, 2026
…crosoft#14720)

### Motivation and Context

<!-- Thank you for your contribution to the semantic-kernel repo!
Please help reviewers and future users, providing the following
information:
  1. Why is this change required?
  2. What problem does it solve?
  3. What scenario does it contribute to?
  4. If it fixes an open issue, please link to the issue here.
-->

Prepare the Semantic Kernel Python package for the `1.47.0` release and
consolidate all six open Python package Dependabot updates into one
validated change.

The prerequisite microsoft#14708 has merged and is included in this branch.
Python 3.10 support is removed; the package now requires Python 3.11+
and advertises support through Python 3.14. This compatibility change is
the reason for the minor release.

Other Python changes already merged since `python-1.46.0` include fixes
for MCP initialization and prompt arguments, Redis vector search, Google
AI embeddings and token usage, Mistral settings and finish reasons, SQL
Server handling, OpenAPI URL matching, schema generation, chat history
and tool results, Handlebars helpers, and empty in-memory searches.

### Description

<!-- Describe your changes, the overall approach, the underlying design.
These notes will help understanding how your code works. Thanks! -->

- Update `semantic_kernel.__version__` from `1.46.0` to `1.47.0`.
- Allow `flit-core >=3.9,<5.0`; verified the build with Flit Core 4.2.0.
Supersedes microsoft#14596.
- Expand the boto3 upper bound to `<1.44.0` and lock boto3/botocore
1.43.123 with s3transfer 0.19.3. Supersedes microsoft#14597.
- Expand the google-genai upper bound to `<2.30`. The combined Google
extra still resolves google-genai 1.75.0 because google-cloud-aiplatform
requires `<2.0.0`. Supersedes microsoft#14598.
- Expand the Redis upper bound to `<9`; lock Redis 8.1.0 and compatible
redisvl 0.30.0. Supersedes microsoft#14599.
- Pin ONNX Runtime GenAI to 0.18.0 and lock its required ONNX Runtime
1.31.1. No Python 3.10 compatibility pins remain. Supersedes microsoft#14600.
- Update the MCP OAuth sample lockfile from MCP 1.28.1 to 1.30.0.
Supersedes microsoft#14627.
- Regenerate both affected lockfiles. Preserve exact original lock
entries, including registry URLs and artifact metadata, for every
unchanged SDK dependency. New package versions use PyPI because the
existing proxy returned a metadata 404 for the new ONNX GenAI wheel.

Validation:

- `uv build --project python --no-sources` — passed; built the `1.47.0`
wheel and source distribution. The build selected Flit Core 4.2.0. uv
reports the existing prerelease-mode deprecation warning.
- `cd python && uv run --no-sync pytest tests/unit/connectors/ai/bedrock
tests/unit/connectors/ai/google/google_ai tests/unit/connectors/ai/onnx
tests/unit/connectors/memory/test_redis_store.py
tests/unit/connectors/mcp --disable-warnings -q` — passed on Python
3.14.0rc3 with boto3 1.43.123, Redis 8.1.0, redisvl 0.30.0, ONNX Runtime
GenAI 0.18.0, and ONNX Runtime 1.31.1 installed.
- `python/.venv/bin/pre-commit run --files python/pyproject.toml
python/semantic_kernel/__init__.py python/uv.lock
python/samples/demos/mcp_with_oauth/uv.lock --config
python/.pre-commit-config.yaml` — passed for all applicable hooks.
- `uvx --from uv==0.5.30 uv lock --project python --check` — passed,
using the SDK's pre-commit resolver version.
- `uv lock --project python/samples/demos/mcp_with_oauth --check` —
passed.
- `git diff --check` — passed.
- Parsed wheel `METADATA` and source `PKG-INFO` — passed: version
`1.47.0`, `Requires-Python: >=3.11`, and all requested runtime
dependency bounds are present.
- Asserted that all unchanged SDK dependencies retain their exact
original lock entries and that both affected lockfiles contain the
requested updates — passed.

The full unit-test suite and live-service integration tests were not run
locally. This PR remains a draft pending release review and CI; it does
not publish a release.

### Contribution Checklist

<!-- Before submitting this PR, please make sure: -->

- [ ] The code builds clean without any errors or warnings
- [x] The PR follows the [SK Contribution
Guidelines](https://github.com/microsoft/semantic-kernel/blob/main/CONTRIBUTING.md)
and the [pre-submission formatting
script](https://github.com/microsoft/semantic-kernel/blob/main/CONTRIBUTING.md#development-scripts)
raises no violations
- [ ] All unit tests pass, and I have added new tests where possible
- [ ] I didn't break anyone 😄

This branch was previously deployed

1 inactive deployment
github-app-auth — 0fad8315 Deployed Oct 14, 2026 by dependabot[bot] via team_check #623
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file. Used by Dependabot. python Pull requests for the Python Semantic Kernel

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants