build(deps): update haystack-ai requirement from <3,>=2.8 to >=2.8,<4 in /integrations/cvfile-haystack

[dependabot]

Updates the requirements on haystack-ai to permit the latest version.

Release notes

Sourced from haystack-ai's releases.

v3.0.0

⭐️ Highlights

Haystack 3.0 is a major release for building production-grade agents with full control and flexibility. It ships a wave of new capabilities: a more capable Agent with hooks and first-class skills, built-in run introspection, first-class async for serving, a leaner core, and safer pipeline loading.

A few small, intentional breaking changes come with it but our Migration Guide and Upgrading to Haystack 3.0 make it easy to upgrade.

🤖 A more capable, adaptable Agent

The Agent gained a general-purpose hooks system and now owns tool execution end to end (the standalone ToolInvoker has been removed). Hooks at before_run, before_llm, before_tool, after_tool, on_exit, and after_run let you shape behavior, enforce guardrails, and add human-in-the-loop checkpoints without touching the agent's internals:

from haystack.components.agents import Agent
from haystack.components.generators.chat import OpenAIChatGenerator
from haystack.hooks import hook
@​hook
def audit_tool_calls(state):
pending = state.data["messages"][-1].tool_calls
print(f"about to run: {[tc.tool_name for tc in pending]}")
agent = Agent(
chat_generator=OpenAIChatGenerator(),
tools=[...],
hooks={"before_tool": [audit_tool_calls]},
)

Built on this foundation:

• Skills as first-class citizens — SkillToolset discovers skills through progressive disclosure, so the model sees only names and one-line descriptions until it loads one, keeping context lean.
• Dynamic tool selection at runtime — pass tools=... to run / run_async so one reusable Agent serves different teams, tenants, and tasks.
• Native async tools — @tool routes async def callables to a Tool's new async_function.
• Human-in-the-Loop is now a before_tool hook (ConfirmationHook). ⚠️
• Tool result offloading (ToolResultOffloadHook) writes large results to a store and leaves a compact pointer in the conversation.

🔎 Built-in introspection and observability

Agents now expose step_count, token_usage, and tool_call_counts as built-in state. React to them to compact context when the window fills, cap runaway tool loops, or route to a cheaper approach past a budget threshold. Tracing now emits dedicated step-level spans (haystack.agent.step with nested .llm / .tool children) tagged with the tools actually used, so you can see exactly what your agent did. ⚠️

⚡ A core built for serving: first-class async

Pipeline and AsyncPipeline are now one class — no more switching between them. A single Pipeline exposes run, run_async, run_async_generator, and stream; serialized pipelines, SuperComponents, and PipelineTools load as Pipeline instances. ⚠️

from haystack import Pipeline
pipeline = Pipeline()
result = pipeline.run(data)                 # synchronous
result = await pipeline.run_async(data)     # asynchronous
</tr></table>

... (truncated)

Commits

• 86e06ee bump version to 3.0.0
• b54cb9e Add the agent skill to docs (#12073)
• 7908606 docs: add banner for launch week (#12070)
• 25545e7 bump version to 3.0.0-rc1
• 20d9bc4 fix: apply FilterPolicy.MERGE correctly in in-memory retrievers (#12066)
• 38144f9 docs: add documentation pages for the Agent pack (#12057)
• c0f2488 docs: sync Core Integrations API reference (jina) on Docusaurus (#12068)
• 9638ff1 fix: honor custom timeout on every attempt in request_with_retry (#11998)
• 07b5ef4 fix: treat [0] document references as out of range in AnswerBuilder (#12061)
• 007c66b build(deps): bump oss-fuzz-base/base-builder-python from bfc9a98 to `5a4612...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
cvfile-docs	Ignored	Preview	Jul 23, 2026 3:36pm