chore: enable LiteLLM on Python 3.14 (#14170)

erichare · web-flow · commit 6c0d9eca330a · 2026-07-20T13:22:11.000-07:00
* chore: enable LiteLLM on Python 3.14

* test: clarify optional dependency availability
diff --git a/pyproject.toml b/pyproject.toml
@@ -223,9 +223,8 @@ override-dependencies = [
     "dynaconf>=3.2.13",
     "pillow>=12.1.1",  # Force Pillow 12.1.1+ to prevent CVE-vulnerable versions
     "playwright>=1.59.0",  # Latest available on PyPI; ensures updated Chromium with CVE fixes
-    # Keep uv workspace resolution on the supported LiteLLM floor without forcing
-    # an upstream package that declares Requires-Python <3.14 onto Python 3.14.
-    "litellm>=1.85.1,<2.0.0; python_version < '3.14'",
+    # Keep uv workspace resolution on the Python 3.14-compatible LiteLLM floor.
+    "litellm>=1.93.0,<2.0.0",
     # Transitive dependency CVE fixes
     "lxml>=6.1.0,<7.0.0",  # CVE-2026-41066
     "mako>=1.3.12,<2.0.0",  # CVE-2026-44307
diff --git a/scripts/ci/test_update_lf_base_dependency.py b/scripts/ci/test_update_lf_base_dependency.py
@@ -31,7 +31,7 @@ def pyproject(tmp_path: Path, monkeypatch: pytest.MonkeyPatch) -> Path:
         "\n"
         "[project.optional-dependencies]\n"
         'cassandra = ["lfx[cassandra]~=1.11.0"]\n'
-        "toolguard = [\"lfx[toolguard]~=1.11.0; python_version < '3.14'\"]\n"
+        "toolguard = [\"lfx[toolguard]~=1.11.0; sys_platform != 'win32'\"]\n"
         'beautifulsoup = ["lfx~=1.11.0"]\n'
     )
     path = tmp_path / "pyproject.toml"
@@ -48,7 +48,7 @@ def test_pins_bare_and_extras_lfx_to_exact_dev(pyproject: Path) -> None:
     # Every lfx reference -- bare and with extras -- is pinned to the exact dev version.
     assert '"lfx==1.11.0.dev26"' in result
     assert '"lfx[cassandra]==1.11.0.dev26"' in result
-    assert "\"lfx[toolguard]==1.11.0.dev26; python_version < '3.14'\"" in result
+    assert "\"lfx[toolguard]==1.11.0.dev26; sys_platform != 'win32'\"" in result
 
     # No `~=` floor survives -- a surviving floor is exactly what makes the nightly
     # resolve unsatisfiable.
diff --git a/scripts/ci/test_update_lfx_pre_release_dependency.py b/scripts/ci/test_update_lfx_pre_release_dependency.py
@@ -5,15 +5,15 @@ def test_preserves_lfx_extras_and_markers():
     content = """
 dependencies = ["lfx~=1.11.0"]
 cassandra = ["lfx[cassandra]~=1.11.0"]
-toolguard = ["lfx[toolguard]>=1.11.0; python_version < '3.14'"]
+toolguard = ["lfx[toolguard]>=1.11.0; sys_platform != 'win32'"]
 provider = ["lfx-openai>=0.1.0,<1.0.0"]
 """
 
     result = update_lfx_requirements(content, "1.11.0rc2")
 
     assert '"lfx>=1.11.0rc2,<1.12.dev0"' in result
     assert '"lfx[cassandra]>=1.11.0rc2,<1.12.dev0"' in result
-    assert "\"lfx[toolguard]>=1.11.0rc2,<1.12.dev0; python_version < '3.14'\"" in result
+    assert "\"lfx[toolguard]>=1.11.0rc2,<1.12.dev0; sys_platform != 'win32'\"" in result
     assert '"lfx-openai>=0.1.0,<1.0.0"' in result
 
 
diff --git a/scripts/ci/update_lf_base_dependency.py b/scripts/ci/update_lf_base_dependency.py
@@ -46,7 +46,7 @@ def update_lfx_dep_in_base(pyproject_path: str, lfx_version: str) -> None:
 
     # Updated pattern to handle PEP 440 version suffixes, both ~= and == version specifiers,
     # both lfx and lfx-nightly names, extras (e.g. lfx[cassandra], lfx[toolguard]), and
-    # trailing markers (e.g. `; python_version < '3.14'`).
+    # trailing markers (e.g. `; sys_platform != 'win32'`).
     # The extras group (1) MUST be preserved: base's `[complete]` extra pulls these
     # `lfx[extra]` references, and if they keep a `~=X.Y.0` floor while base's bare `lfx`
     # dep is pinned to `==X.Y.0.devN`, the floor (>=X.Y.0) excludes the dev release and
diff --git a/scripts/migrate/consolidate_bundles.py b/scripts/migrate/consolidate_bundles.py
@@ -142,10 +142,8 @@
         "google-auth-oauthlib>=1.2.0,<2.0.0",
     ],
     "vertexai": ["langchain-google-vertexai>=3.2.0"],
-    # ALTK depends on litellm, whose current Rust extension does not build on Python 3.14.
     "altk": [
-        "agent-lifecycle-toolkit>=0.10.1,<1.0; "
-        "(sys_platform != 'darwin' or platform_machine != 'x86_64') and python_version < '3.14'",
+        "agent-lifecycle-toolkit>=0.10.1,<1.0; sys_platform != 'darwin' or platform_machine != 'x86_64'",
     ],
     "codeagents": [
         "smolagents>=1.8.0",
diff --git a/src/backend/base/pyproject.toml b/src/backend/base/pyproject.toml
@@ -304,12 +304,7 @@ numexpr = ["numexpr>=2.10.2"]
 qianfan = ["qianfan==0.3.5"]
 pgvector = ["pgvector>=0.4.2"]
 litellm = [
-    # litellm has no Python 3.14-compatible release: every version from 1.83.8
-    # onward declares Requires-Python <3.14, so nothing satisfying our >=1.85.1
-    # floor installs on 3.14 (the newest 3.14-installable litellm is 1.83.7).
-    # Gate it off on 3.14 so `pip install langflow` resolves there instead of
-    # dead-ending; drop the marker once upstream ships a 3.14-compatible litellm.
-    "litellm>=1.85.1,<2.0.0; python_version < '3.14'",
+    "litellm>=1.93.0,<2.0.0",
     # Runtime deps from litellm[proxy] that langflow-ide hits when logging
     # to langfuse via litellm.proxy.proxy_server (issue #12228). The full
     # Pull in only the modules Langflow uses from litellm[proxy] rather than
@@ -343,17 +338,10 @@ spider = ["spider-client>=0.0.27,<1.0.0"]
 # Updated to 0.10.1+ for PyTorch 2.6.0 compatibility (addresses torch.load RCE vulnerability)
 # Upper bound prevents breaking changes in future major versions
 # Excluded on macOS x86_64: PyTorch dropped Intel Mac wheel builds after v2.2.2
-# Python 3.14: re-gated off 3.14. altk 0.10.x itself supports 3.14 (requires-python
-# >=3.10) and no longer depends on OpenDsStar, but it depends on litellm<2.0.0, and
-# litellm has no 3.14-compatible release (every version from 1.83.8 on caps at <3.14,
-# see the litellm extra below). Without this gate the resolver pins an uninstallable
-# litellm on 3.14. Re-enable once upstream litellm supports 3.14.
-altk = ["agent-lifecycle-toolkit>=0.10.1,<1.0; (sys_platform != 'darwin' or platform_machine != 'x86_64') and python_version < '3.14'"]
+altk = ["agent-lifecycle-toolkit>=0.10.1,<1.0; sys_platform != 'darwin' or platform_machine != 'x86_64'"]
 
 # Toolguard Integration
-# Gated off 3.14: lfx[toolguard] pulls the ToolGuard Policies component, which
-# depends on litellm. Re-enable once upstream litellm supports 3.14.
-toolguard = ["lfx[toolguard]~=1.11.0; python_version < '3.14'"]  # toolguard relocated to lfx
+toolguard = ["lfx[toolguard]~=1.11.0"]  # toolguard relocated to lfx
 
 # Additional LangChain integrations
 # Excluded on macOS x86_64: transitive torch dependency (via sentence-transformers) has no Intel Mac wheels
@@ -364,11 +352,7 @@ langchain-unstructured = ["langchain-unstructured~=1.0.0"]
 langchain-mcp-adapters = ["langchain-mcp-adapters>=0.1.14,<0.2.0"]
 
 # Additional monitoring
-# Gated off 3.14: opik depends on litellm unconditionally, and litellm has no
-# 3.14-compatible release (see the litellm extra above), so allowing it on 3.14
-# would drag in an uninstallable / sub-floor litellm. Re-enable once upstream
-# litellm supports 3.14.
-opik = ["opik>=2.0.0,<3.0.0; python_version < '3.14'"]
+opik = ["opik>=2.0.0,<3.0.0"]
 traceloop = ["traceloop-sdk>=0.43.1,<1.0.0"]
 openlayer = ["openlayer>=0.9.0,<1.0.0"]
 
diff --git a/src/backend/tests/unit/components/models_and_agents/policies/test_guarded_tool.py b/src/backend/tests/unit/components/models_and_agents/policies/test_guarded_tool.py
@@ -1,15 +1,6 @@
 from unittest.mock import AsyncMock, MagicMock
 
 import pytest
-
-try:
-    import toolguard  # noqa: F401
-except ImportError:
-    # toolguard is an optional extra (langflow-base[toolguard]); skip if not
-    # installed. Gated off Python 3.14 because it depends on litellm, which has
-    # no 3.14-compatible release (see langflow-base pyproject).
-    pytest.skip("toolguard not available", allow_module_level=True)
-
 from langchain_core.tools import StructuredTool
 from lfx.components.models_and_agents.policies.guarded_tool import GuardedTool
 from pydantic import BaseModel
diff --git a/src/backend/tests/unit/components/models_and_agents/policies/test_llm_wrapper.py b/src/backend/tests/unit/components/models_and_agents/policies/test_llm_wrapper.py
@@ -1,16 +1,6 @@
 from unittest.mock import AsyncMock, MagicMock
 
 import pytest
-
-try:
-    import toolguard  # noqa: F401
-except ImportError:
-    # toolguard is an optional extra (langflow-base[toolguard]); skip if not
-    # installed. Gated off Python 3.14 because it depends on litellm, which has
-    # no 3.14-compatible release (see langflow-base pyproject). The component
-    # imported below pulls in toolguard at module load.
-    pytest.skip("toolguard not available", allow_module_level=True)
-
 from langchain_core.messages import AIMessage
 from langchain_core.outputs import ChatGeneration, LLMResult
 from lfx.components.models_and_agents.policies.llm_wrapper import LangchainModelWrapper
diff --git a/src/backend/tests/unit/components/models_and_agents/policies/test_tool_invoker.py b/src/backend/tests/unit/components/models_and_agents/policies/test_tool_invoker.py
@@ -1,16 +1,6 @@
 from unittest.mock import AsyncMock, MagicMock
 
 import pytest
-
-try:
-    import toolguard  # noqa: F401
-except ImportError:
-    # toolguard is an optional extra (langflow-base[toolguard]); skip if not
-    # installed. Gated off Python 3.14 because it depends on litellm, which has
-    # no 3.14-compatible release (see langflow-base pyproject). The component
-    # imported below pulls in toolguard at module load.
-    pytest.skip("toolguard not available", allow_module_level=True)
-
 from lfx.components.models_and_agents.policies.tool_invoker import ToolInvoker
 from mcp.types import CallToolResult
 from pydantic import BaseModel
diff --git a/src/backend/tests/unit/components/test_all_modules_importable.py b/src/backend/tests/unit/components/test_all_modules_importable.py
@@ -68,22 +68,6 @@ def test_all_component_categories_importable(self):
 
     def test_all_components_in_categories_importable(self):
         """Test that all components in each category's __all__ can be imported."""
-        import sys
-
-        # Components whose underlying packages are gated to python_version<'3.14'
-        # in pyproject.toml because upstream pins exclude 3.14. These are expected
-        # to fail import on 3.14 until the upstreams adapt.
-        # NOTE: ibm.* moved to the lfx-ibm bundle (src/bundles/ibm) and is no
-        # longer iterated through ``langflow.components``; the watsonx
-        # 3.14-gating moved with them.
-        gated_on_py314 = {
-            "altk.ALTKAgentComponent",
-            "crewai.CrewAIAgentComponent",
-            "crewai.HierarchicalCrewComponent",
-            "crewai.SequentialCrewComponent",
-        }
-        on_py314 = sys.version_info >= (3, 14)
-
         failed_imports = []
         successful_imports = 0
 
@@ -108,9 +92,6 @@ def test_all_components_in_categories_importable(self):
                             successful_imports += 1
 
                         except Exception as e:
-                            if on_py314 and qualified in gated_on_py314:
-                                print(f"SKIPPED on 3.14: {qualified}: {e!s}")  # noqa: T201
-                                continue
                             failed_imports.append(f"{qualified}: {e!s}")
                             print(f"FAILED: {qualified}: {e!s}")  # noqa: T201
                 else:
@@ -448,8 +429,7 @@ async def import_module_async(modname):
                         "redis",
                         "elasticsearch",
                         "langchain_community",
-                        # Gated to python_version<'3.14' in pyproject.toml until
-                        # upstream caps lift.
+                        # ALTK is excluded on Intel macOS; the IBM integrations remain optional.
                         "altk",
                         "langchain_ibm",
                         "ibm_watsonx_ai",
@@ -458,12 +438,6 @@ async def import_module_async(modname):
                         "lfx-openai",
                         "lfx-datastax",
                         "lfx-oracle",
-                        # litellm has no 3.14-compatible release, so it is gated to
-                        # python_version<'3.14'. Its absence surfaces transitively
-                        # via crewai (``from crewai import Agent`` -> litellm) and
-                        # via toolguard (the policies components import it directly).
-                        "litellm",
-                        "toolguard",
                     ]
                 ):
                     return ("skipped", modname, "missing optional dependency")
diff --git a/src/backend/tests/unit/test_lfx_bundles_extras.py b/src/backend/tests/unit/test_lfx_bundles_extras.py
@@ -15,8 +15,8 @@
     4. normalized extra keys are collision-free,
     5. the metapackage provider set stays disjoint from the graduated
        partner distributions (no double-ship; manifest would shadow),
-    6. ALTK stays gated off Python 3.14 while its LiteLLM dependency cannot
-       build there.
+    6. ALTK remains available on Python 3.14 while preserving its Intel macOS
+       exclusion.
 """
 
 from __future__ import annotations
@@ -111,8 +111,8 @@ def test_metapackage_providers_disjoint_from_graduated_partners() -> None:
     assert not overlap, f"providers shipped from both lfx-bundles and a graduated package: {sorted(overlap)}"
 
 
-def test_altk_dependency_is_gated_off_python_314() -> None:
-    """ALTK must not transitively install LiteLLM on unsupported Python 3.14."""
+def test_altk_dependency_supports_python_314() -> None:
+    """ALTK supports Python 3.14 everywhere except unsupported Intel macOS."""
     requirements = (Requirement(dependency) for dependency in _load_extras()["altk"])
     altk = next(requirement for requirement in requirements if requirement.name == "agent-lifecycle-toolkit")
     assert altk.marker is not None
@@ -127,14 +127,14 @@ def test_altk_dependency_is_gated_off_python_314() -> None:
                 "platform_machine": platform_machine,
             }
         )
-        assert not altk.marker.evaluate(environment)
+        assert altk.marker.evaluate(environment)
 
     environment.update(
         {
-            "python_full_version": "3.13.0",
-            "python_version": "3.13",
-            "sys_platform": "linux",
+            "python_full_version": "3.14.0",
+            "python_version": "3.14",
+            "sys_platform": "darwin",
             "platform_machine": "x86_64",
         }
     )
-    assert altk.marker.evaluate(environment)
+    assert not altk.marker.evaluate(environment)
diff --git a/src/backend/tests/unit/test_litellm_proxy_extra.py b/src/backend/tests/unit/test_litellm_proxy_extra.py
@@ -12,6 +12,8 @@
 import sys
 from pathlib import Path
 
+from packaging.requirements import Requirement
+
 if sys.version_info >= (3, 11):
     import tomllib
 else:
@@ -49,3 +51,19 @@ def test_litellm_optional_dependency_includes_runtime_proxy_modules() -> None:
         f"These are needed when langflow-ide invokes litellm's proxy server module for logging "
         f"(see issue #12228). Current specs: {litellm_specs}"
     )
+
+
+def test_litellm_dependent_extras_are_available_on_python_314() -> None:
+    """LiteLLM and the extras that require it must not retain a Python 3.14 gate."""
+    optional = _load_base_pyproject()["project"]["optional-dependencies"]
+
+    litellm = next(Requirement(spec) for spec in optional["litellm"] if Requirement(spec).name == "litellm")
+    assert any(spec.operator == ">=" and spec.version == "1.93.0" for spec in litellm.specifier)
+    assert litellm.marker is None
+
+    opik = next(Requirement(spec) for spec in optional["opik"] if Requirement(spec).name == "opik")
+    assert opik.marker is None
+
+    toolguard = next(Requirement(spec) for spec in optional["toolguard"] if Requirement(spec).name == "lfx")
+    assert "toolguard" in toolguard.extras
+    assert toolguard.marker is None
diff --git a/src/backend/tests/unit/test_load_components.py b/src/backend/tests/unit/test_load_components.py
@@ -153,7 +153,7 @@ async def test_process_single_module_missing_optional_dep_logs_single_warning(se
         """A ModuleNotFoundError during import is an expected condition (optional dependency absent).
 
         It must produce a single-line warning without a traceback, not an error with exc_info
-        (e.g. litellm/toolguard are deliberately excluded from Python 3.14 images).
+        (for example, when a provider extra is absent from a minimal installation).
         """
         from unittest.mock import MagicMock, patch
 
diff --git a/src/bundles/lfx-bundles/pyproject.toml b/src/bundles/lfx-bundles/pyproject.toml
@@ -30,7 +30,7 @@ dependencies = [
 # superset for slim/CPU images. Managed by scripts/migrate/consolidate_bundles.py.
 agentql = []
 aiml = ["langchain-openai>=1.1.6", "openai>=1.68.2,<3.0.0"]
-altk = ["agent-lifecycle-toolkit>=0.10.1,<1.0; (sys_platform != 'darwin' or platform_machine != 'x86_64') and python_version < '3.14'"]
+altk = ["agent-lifecycle-toolkit>=0.10.1,<1.0; sys_platform != 'darwin' or platform_machine != 'x86_64'"]
 apify = ["apify-client>=1.8.1", "langchain-community>=0.4.1,<1.0.0"]
 assemblyai = ["assemblyai>=0.33.0,<1.0.0"]
 azure = ["langchain-openai>=1.1.6", "langchain-azure-ai>=1.1.0,<2"]
diff --git a/src/lfx/pyproject.toml b/src/lfx/pyproject.toml
@@ -79,8 +79,7 @@ opendsstar = [
 # Relocated out of langflow-base[complete], where they were the de-facto provider
 # for these lfx-core components after the bundle split.
 cassandra = ["cassio>=0.1.7"]  # Cassandra vector-store / chat-memory components
-# Gated off 3.14 because ToolGuard depends on litellm.
-toolguard = ["toolguard>=0.2.20,<1.0.0; python_version < '3.14'"]  # ToolGuard Policies component
+toolguard = ["toolguard>=0.2.20,<1.0.0"]  # ToolGuard Policies component
 # Engine-only by default: ``pip install lfx`` ships NO bundles.  This optional
 # extra pulls the long-tail metapackage for users who want the provider
 # components without the full ``langflow`` server install:
diff --git a/src/lfx/src/lfx/interface/components.py b/src/lfx/src/lfx/interface/components.py
@@ -654,9 +654,8 @@ def _process_single_module(modname: str) -> tuple[str, dict] | None:
     try:
         module = importlib.import_module(modname)
     except ModuleNotFoundError as e:
-        # Expected when a component's optional dependency isn't installed (e.g. litellm and
-        # toolguard are excluded on Python 3.14 images), so a one-line warning is enough --
-        # a full traceback per affected module would flood startup logs for a normal condition.
+        # Expected when a component's optional dependency isn't installed, so a one-line
+        # warning is enough; a full traceback per affected module would flood startup logs.
         logger.warning(f"Skipping component module {modname}: missing optional dependency ({e.name or e})")
         return None
     except Exception as e:  # noqa: BLE001
diff --git a/uv.lock b/uv.lock
