[devin-ai-integration]

CI pins abatilo/actions-poetry by SHA at v3.0.0 (Jan 2024); this moves the pin to the latest v3 patch, v3.0.2, which carries two fixes to the Ubuntu pipx install path the ubuntu-latest runner uses.

-      uses: abatilo/actions-poetry@7b6d33e44b4f08d7021a1dee3c044e9c253d6439  # v3.0.0
+      uses: abatilo/actions-poetry@65c61eae400c65c9510a584af85138c1ae19bbc0  # v3.0.2

• CI-only change; no example code, dependency constraint, or documented requirement is touched.
• Stays inside major v3 — v4.0.0 exists but is a deliberate major upgrade left for a human.
• The other two action pins (actions/checkout@v4, actions/setup-python@v5) are several majors behind latest (v7) and are likewise left for a human, since this repo has no Dependabot config.
• No dependency bumps were needed this week: every manifest uses floor/caret constraints with poetry.lock gitignored, so poetry install already resolves the latest within-major releases.

Implementation details

Why v3.0.2: v3.0.1 fixes "ubuntu pipx installation by calling pip from python3" (#71) and v3.0.2 reverts a breaking removal of pipx from the composite steps (#87). Both are relevant to this workflow, which runs poetry -C <dir> install on ubuntu-latest.

Dependency sweep (no changes): resolved versions installed today in the example virtualenvs are all the latest published releases — launchdarkly-server-sdk-ai 1.2.0, launchdarkly-server-sdk-ai-openai 0.7.0, launchdarkly-server-sdk-ai-langchain 0.8.0, launchdarkly-observability 1.3.3, launchdarkly-server-sdk 9.17.0, langchain 1.4.0, langchain-core 1.6.3, langgraph 1.2.11, openai 3.13.0, boto3 1.43.93. Deliberately skipped as major jumps beyond the declared range: google-genai ^1.30.0 (latest 2.23.0) and mcp >=1.28.1,<2.0.0 (latest 2.2.0).

Testing:

• poetry -C <dir> install in all 10 example directories (exactly what CI runs) — all succeeded against today's latest published dependencies.
• Imported every example module with DeprecationWarnings enabled: no deprecated LaunchDarkly API usage. The only warnings come from launchdarkly-observability's generated GraphQL client importing websockets.client / websockets.legacy — upstream, not fixable here.
• Ran the LangGraph ReAct agent path end-to-end with a real SDK key and an enabled AIAgentConfigDefault (Anthropic claude-sonnet-4-5): agent answered, tracker reported success=True, 1228/68/1296 tokens.
• langgraph.prebuilt.create_react_agent still emits LangGraphDeprecatedSinceV10 on langgraph 1.2.11, so open PR fix: replace deprecated create_react_agent with langchain create_agent #41 (switch to langchain.agents.create_agent) is still the right fix and was left alone; PR chore: add ANTHROPIC_API_KEY to langchain example .env.example #40 (ANTHROPIC_API_KEY in the LangChain .env.example) is likewise still unlanded and untouched.

No screenshots: these examples are console applications.

Link to Devin session: https://app.devin.ai/sessions/2ecee237ac4d4ffd9e268e7450e12a3e
Open in Devin Desktop: https://app.devin.ai/desktop/session/2ecee237ac4d4ffd9e268e7450e12a3e?variant=devin

[devin-ai-integration]

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

• Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
• Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

• Disable automatic comment, CI, and merge conflict monitoring

[devin-ai-integration]

@cursor review