diff --git a/.gitignore b/.gitignore
index b2492fb7d29..f7a2fe3992b 100644
--- a/.gitignore
+++ b/.gitignore
@@ -113,6 +113,7 @@ celerybeat.pid
 
 # Environments
 .env
+.env.*
 .envrc
 .venv*
 venv*
@@ -120,6 +121,12 @@ env/
 ENV/
 env.bak/
 
+# Credentials and certificates
+*.pem
+*.key
+*.crt
+credentials.json
+
 # Spyder project settings
 .spyderproject
 .spyproject
diff --git a/libs/core/tests/unit_tests/utils/test_gateway.py b/libs/core/tests/unit_tests/utils/test_gateway.py
index 35127d0ba75..0f5b3a2fb3e 100644
--- a/libs/core/tests/unit_tests/utils/test_gateway.py
+++ b/libs/core/tests/unit_tests/utils/test_gateway.py
@@ -3,6 +3,7 @@
 from typing import get_type_hints
 
 import pytest
+from typing_extensions import NotRequired
 
 from langchain_core.utils.gateway import (
     LANGSMITH_GATEWAY_PROVIDERS,
@@ -128,4 +129,6 @@ def test_resolve_langsmith_gateway_url_preserves_query_and_fragment(
 def test_gateway_provider_config_runtime_type_metadata() -> None:
     """The public provider configuration retains optional-key metadata at runtime."""
     assert GatewayProviderConfig.__optional_keys__ == {"notes"}
-    assert get_type_hints(GatewayProviderConfig)["notes"] is str
+    assert get_type_hints(GatewayProviderConfig, include_extras=True)[
+        "notes"
+    ] == NotRequired[str]