Dependabot does not update Poetry core dependencies

[amotl]

Problem

Despite Dependabot finds langchain-core's most recent version

Latest version is 1.1.3

it says:

updater | 2025/12/10 13:16:01 INFO <job_1179376614> No update needed for langchain-core 

Why?

Details

That's the dependency package definition.

langchain-cratedb/pyproject.toml

Lines 91 to 96 in f89680b

	[tool.poetry.dependencies]
	python = ">=3.9,<4.0"
	langchain-community = "<0.4"
	langchain-core = "<0.4"
	langchain-postgres = "==0.0.16"
	sqlalchemy-cratedb = ">=0.40.1"

[amotl]

In recent times, only one dependency was bumped by Dependabot.

Maybe the Poetry updater mode only knows how to bump strict version pinnings?

[amotl]

Others are reporting they also have problems with Dependabot, and recommend to use Renovate instead.

• https://julien.danjou.info/p/whats-going-on-with-dependabot

[amotl]

A new wave of Dependabot updates again only takes care about bumping packages located within the test group.

• Chore(deps-dev): Update langchain-tests requirement from ==0.3.22 to ==1.1.0 #77
• Chore(deps-dev): Update langchain-openai requirement from <0.4 to <1.2 #78
• Chore(deps-dev): Update pytest-asyncio requirement from <1.3 to <1.4 #79