Commit Graph

16441 Commits

Author SHA1 Message Date
langchain-oss-model-profiles[bot]
0d32ca0956 chore(model-profiles): refresh model profile data (#38990)
Automated refresh of model profile data for all in-monorepo partner
integrations via `langchain-profiles refresh`.

🤖 Generated by the [`refresh_model_profiles`
workflow](https://github.com/langchain-ai/langchain/blob/master/.github/workflows/refresh_model_profiles.yml).


## Summary of changes

**1 added · 0 removed · 1 changed** across 1 provider(s).

### openrouter

** 1 added**
- `meituan/longcat-2.0` — 1,048,756 ctx, 262,144 out, reasoning, tools

**✏️ 1 changed**
- `arcee-ai/trinity-large-thinking`: added structured output

Co-authored-by: mdrxy <61371264+mdrxy@users.noreply.github.com>
2026-07-21 10:38:33 -04:00
dependabot[bot]
e9cbf087c1 chore: bump pillow from 12.2.0 to 12.3.0 in /libs/partners/perplexity (#38991)
Bumps [pillow](https://github.com/python-pillow/Pillow) from 12.2.0 to
12.3.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/python-pillow/Pillow/releases">pillow's
releases</a>.</em></p>
<blockquote>
<h2>12.3.0</h2>
<p><a
href="https://pillow.readthedocs.io/en/stable/releasenotes/12.3.0.html">https://pillow.readthedocs.io/en/stable/releasenotes/12.3.0.html</a></p>
<h2>Removals</h2>
<ul>
<li>Remove non-image ImageCms modes <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9697">#9697</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
</ul>
<h2>Documentation</h2>
<ul>
<li>Add release notes for SBOM and performance improvements <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9747">#9747</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Add security release notes <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9741">#9741</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Add release notes for Python 3.15 beta wheels <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9696">#9696</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>ImageFont can also be used with ImageText <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9597">#9597</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Additional guidelines for security reports <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9659">#9659</a>
[<a
href="https://github.com/wiredfool"><code>@​wiredfool</code></a>]</li>
<li>Fixed typo <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9636">#9636</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Added CVEs to 12.2.0 release notes <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9591">#9591</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Revise development support information in README <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9583">#9583</a>
[<a
href="https://github.com/aclark4life"><code>@​aclark4life</code></a>]</li>
<li>Add INCIDENT_RESPONSE.md <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9555">#9555</a>
[<a
href="https://github.com/aclark4life"><code>@​aclark4life</code></a>]</li>
<li>Add STRIDE threat model to security docs <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9562">#9562</a>
[<a
href="https://github.com/aclark4life"><code>@​aclark4life</code></a>]</li>
<li>Add CVEs to 12.2.0 release notes <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9556">#9556</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Update README with revised security policy <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9553">#9553</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Update security policy <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9552">#9552</a>
[<a
href="https://github.com/aclark4life"><code>@​aclark4life</code></a>]</li>
<li>Update macOS tested Python versions <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9534">#9534</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
</ul>
<h2>Dependencies</h2>
<ul>
<li>Update dependency harfbuzz to v14.2.1 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9720">#9720</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency mypy to v2 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9653">#9653</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency cibuildwheel to v4 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9665">#9665</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update github-actions <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9655">#9655</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency libavif to v1.4.2 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9652">#9652</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency lcms2 to v2.19.1 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9651">#9651</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency check-jsonschema to v0.37.2 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9650">#9650</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update google/oss-fuzz digest to d872252 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9614">#9614</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency lcms2 to v2.19 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9609">#9609</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency libpng to v1.6.58 - autoclosed <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9608">#9608</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency harfbuzz to v14 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9610">#9610</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency mypy to v1.20.2 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9599">#9599</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update github-actions <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9611">#9611</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency cibuildwheel to v3.4.1 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9607">#9607</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Move dependency versions to single JSON and enable Renovate <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9559">#9559</a>
[<a href="https://github.com/hugovk"><code>@​hugovk</code></a>]</li>
<li>Updated raqm to 0.10.5 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9557">#9557</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Update dependency cibuildwheel to v3.4.0 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9532">#9532</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
</ul>
<h2>Testing</h2>
<ul>
<li>Remove matrix.os from benchmark <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9735">#9735</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Remove references to libavif patch <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9734">#9734</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Add benchmark tests <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9654">#9654</a>
[<a href="https://github.com/akx"><code>@​akx</code></a>]</li>
<li>Use reshape() instead of setting NumPy array shape directly <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9728">#9728</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="bb1d8e8ab8"><code>bb1d8e8</code></a>
12.3.0 version bump</li>
<li><a
href="e63fc481dc"><code>e63fc48</code></a>
Add release notes for SBOM and performance improvements (<a
href="https://redirect.github.com/python-pillow/Pillow/issues/9747">#9747</a>)</li>
<li><a
href="13b701bbab"><code>13b701b</code></a>
Add release notes for <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9679">#9679</a></li>
<li><a
href="5564ca72fc"><code>5564ca7</code></a>
List methods</li>
<li><a
href="a0920fd384"><code>a0920fd</code></a>
Speed up ImageChops operations (<a
href="https://redirect.github.com/python-pillow/Pillow/issues/9738">#9738</a>)</li>
<li><a
href="07e9a6cd53"><code>07e9a6c</code></a>
Speed up <code>Image.filter()</code> (<a
href="https://redirect.github.com/python-pillow/Pillow/issues/9736">#9736</a>)</li>
<li><a
href="a94578cf96"><code>a94578c</code></a>
Speed up <code>Image.getchannel()</code>, <code>Image.merge()</code>,
<code>Image.putalpha()</code> and `Image...</li>
<li><a
href="53e02c43c9"><code>53e02c4</code></a>
Speed up <code>Image.fill()</code>, <code>Image.linear_gradient()</code>
and `Image.radial_gradient...</li>
<li><a
href="af037475be"><code>af03747</code></a>
Speed up <code>Image.resample()</code> (<a
href="https://redirect.github.com/python-pillow/Pillow/issues/9739">#9739</a>)</li>
<li><a
href="5c9ca56c3e"><code>5c9ca56</code></a>
Speed up <code>alpha_composite</code>, <code>matrix</code>,
<code>negative</code>, <code>quantize</code> (<a
href="https://redirect.github.com/python-pillow/Pillow/issues/9740">#9740</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/python-pillow/Pillow/compare/12.2.0...12.3.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pillow&package-manager=uv&previous-version=12.2.0&new-version=12.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/langchain-ai/langchain/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-21 10:38:00 -04:00
dependabot[bot]
913e2cf487 chore: bump pillow from 12.2.0 to 12.3.0 in /libs/partners/nomic (#38992)
Bumps [pillow](https://github.com/python-pillow/Pillow) from 12.2.0 to
12.3.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/python-pillow/Pillow/releases">pillow's
releases</a>.</em></p>
<blockquote>
<h2>12.3.0</h2>
<p><a
href="https://pillow.readthedocs.io/en/stable/releasenotes/12.3.0.html">https://pillow.readthedocs.io/en/stable/releasenotes/12.3.0.html</a></p>
<h2>Removals</h2>
<ul>
<li>Remove non-image ImageCms modes <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9697">#9697</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
</ul>
<h2>Documentation</h2>
<ul>
<li>Add release notes for SBOM and performance improvements <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9747">#9747</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Add security release notes <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9741">#9741</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Add release notes for Python 3.15 beta wheels <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9696">#9696</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>ImageFont can also be used with ImageText <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9597">#9597</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Additional guidelines for security reports <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9659">#9659</a>
[<a
href="https://github.com/wiredfool"><code>@​wiredfool</code></a>]</li>
<li>Fixed typo <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9636">#9636</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Added CVEs to 12.2.0 release notes <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9591">#9591</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Revise development support information in README <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9583">#9583</a>
[<a
href="https://github.com/aclark4life"><code>@​aclark4life</code></a>]</li>
<li>Add INCIDENT_RESPONSE.md <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9555">#9555</a>
[<a
href="https://github.com/aclark4life"><code>@​aclark4life</code></a>]</li>
<li>Add STRIDE threat model to security docs <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9562">#9562</a>
[<a
href="https://github.com/aclark4life"><code>@​aclark4life</code></a>]</li>
<li>Add CVEs to 12.2.0 release notes <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9556">#9556</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Update README with revised security policy <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9553">#9553</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Update security policy <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9552">#9552</a>
[<a
href="https://github.com/aclark4life"><code>@​aclark4life</code></a>]</li>
<li>Update macOS tested Python versions <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9534">#9534</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
</ul>
<h2>Dependencies</h2>
<ul>
<li>Update dependency harfbuzz to v14.2.1 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9720">#9720</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency mypy to v2 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9653">#9653</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency cibuildwheel to v4 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9665">#9665</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update github-actions <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9655">#9655</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency libavif to v1.4.2 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9652">#9652</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency lcms2 to v2.19.1 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9651">#9651</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency check-jsonschema to v0.37.2 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9650">#9650</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update google/oss-fuzz digest to d872252 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9614">#9614</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency lcms2 to v2.19 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9609">#9609</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency libpng to v1.6.58 - autoclosed <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9608">#9608</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency harfbuzz to v14 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9610">#9610</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency mypy to v1.20.2 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9599">#9599</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update github-actions <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9611">#9611</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency cibuildwheel to v3.4.1 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9607">#9607</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Move dependency versions to single JSON and enable Renovate <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9559">#9559</a>
[<a href="https://github.com/hugovk"><code>@​hugovk</code></a>]</li>
<li>Updated raqm to 0.10.5 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9557">#9557</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Update dependency cibuildwheel to v3.4.0 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9532">#9532</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
</ul>
<h2>Testing</h2>
<ul>
<li>Remove matrix.os from benchmark <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9735">#9735</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Remove references to libavif patch <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9734">#9734</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Add benchmark tests <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9654">#9654</a>
[<a href="https://github.com/akx"><code>@​akx</code></a>]</li>
<li>Use reshape() instead of setting NumPy array shape directly <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9728">#9728</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="bb1d8e8ab8"><code>bb1d8e8</code></a>
12.3.0 version bump</li>
<li><a
href="e63fc481dc"><code>e63fc48</code></a>
Add release notes for SBOM and performance improvements (<a
href="https://redirect.github.com/python-pillow/Pillow/issues/9747">#9747</a>)</li>
<li><a
href="13b701bbab"><code>13b701b</code></a>
Add release notes for <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9679">#9679</a></li>
<li><a
href="5564ca72fc"><code>5564ca7</code></a>
List methods</li>
<li><a
href="a0920fd384"><code>a0920fd</code></a>
Speed up ImageChops operations (<a
href="https://redirect.github.com/python-pillow/Pillow/issues/9738">#9738</a>)</li>
<li><a
href="07e9a6cd53"><code>07e9a6c</code></a>
Speed up <code>Image.filter()</code> (<a
href="https://redirect.github.com/python-pillow/Pillow/issues/9736">#9736</a>)</li>
<li><a
href="a94578cf96"><code>a94578c</code></a>
Speed up <code>Image.getchannel()</code>, <code>Image.merge()</code>,
<code>Image.putalpha()</code> and `Image...</li>
<li><a
href="53e02c43c9"><code>53e02c4</code></a>
Speed up <code>Image.fill()</code>, <code>Image.linear_gradient()</code>
and `Image.radial_gradient...</li>
<li><a
href="af037475be"><code>af03747</code></a>
Speed up <code>Image.resample()</code> (<a
href="https://redirect.github.com/python-pillow/Pillow/issues/9739">#9739</a>)</li>
<li><a
href="5c9ca56c3e"><code>5c9ca56</code></a>
Speed up <code>alpha_composite</code>, <code>matrix</code>,
<code>negative</code>, <code>quantize</code> (<a
href="https://redirect.github.com/python-pillow/Pillow/issues/9740">#9740</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/python-pillow/Pillow/compare/12.2.0...12.3.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pillow&package-manager=uv&previous-version=12.2.0&new-version=12.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/langchain-ai/langchain/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-21 10:37:54 -04:00
Mason Daugherty
e0ebd18ff3 release(core): 1.5.0 (#38978) langchain-core==1.5.0 2026-07-20 16:36:00 -04:00
Nishitha M
5ddfd0ed87 feat(core): add reasoning_effort as a standard chat model parameter (#38887)
`langchain-anthropic`, `langchain-openai`, `langchain-fireworks`, and
`langchain-xai` now support a standard `reasoning_effort` parameter. It
can be set at model construction or per invocation, with each provider
translating it to the appropriate API.
`ModelProfile` now exposes supported reasoning effort levels and the
default level for supported models.

---

Adds a standard `reasoning_effort` parameter across chat model
integrations. Like `temperature`, it can be set on the model or per
call, while each provider translates it into its own API format.

Motivating example: [`deepagents-code`
(dcode)](https://docs.langchain.com/oss/python/deepagents/code/overview)
implemented provider-agnostic reasoning effort itself. This PR upstreams
that support into LangChain's provider integrations, making
`reasoning_effort` a standard parameter and exposing supported levels
via `ModelProfile`.

```python
from langchain_anthropic import ChatAnthropic

model = ChatAnthropic(model="claude-sonnet-4-6")
model.invoke(
    "Why do parrots have colorful feathers?",
    reasoning_effort="high",
)
```

### Model specific labels and default

| Provider | Model / version | Levels supported | Default |
|----------|-----------------|------------------|---------|
| **OpenAI** | gpt-5.5, gpt-5.6* | `none`, `low`, `medium`, `high`,
`xhigh` (+ `max` on gpt-5.6+) | `medium` |
| | other gpt-5* | `none`, `low`, `medium`, `high`, `xhigh` | — |
| **Anthropic** | Opus 4.0 / 4.1 | *(none – predates effort entirely)* |
— |
| | Opus 4.5 | `low`, `medium`, `high` | `high` |
| | Opus 4.6 | `low`, `medium`, `high`, `max` | `high` |
| | Opus 4.7+ | `low`, `medium`, `high`, `xhigh`, `max` | `high` |
| | Sonnet 4.0 / 4.1 / 4.5 | *(none – predates or rejects effort)* | — |
| | Sonnet 4.6 | `low`, `medium`, `high`, `max` | `high` |
| | Sonnet 5+ | `low`, `medium`, `high`, `xhigh`, `max` | `high` |
| **Fireworks** | DeepSeek V4 Pro | `none`, `low`, `medium`, `high`,
`xhigh`, `max` | `high` |
| | Kimi K2 | `low`, `medium`, `high` | — |
| | GLM 5 | `none`, `high`, `max` | `max` |
| **xAI** | Grok 4.5-class models | `low`, `medium`, `high` | `high` |

### Provider specific details

| Provider | Model class | Translation |
|----------|-------------|-------------|
| **OpenAI** | `ChatOpenAI` | Translates `reasoning_effort` to
`reasoning.effort` and adds `summary: "auto"`. |
| **Anthropic** | `ChatAnthropic` | Translates `reasoning_effort` to
`output_config.effort` and defaults `thinking` to `adaptive`. |
| **Fireworks** | `ChatFireworks` | Sends `reasoning_effort` as a flat
field unchanged. |
| **xAI** | `ChatXAI` | Nests `reasoning_effort` under
`extra_body.reasoning_effort`. |

### Anthropic: `effort` alias

`ChatAnthropic` already exposed an `effort` parameter. This PR makes it
a true Pydantic alias for `reasoning_effort` while preserving existing
behavior.

- Both `effort` and `reasoning_effort` work at construction; if both are
provided, `effort` wins.
- Call-time (`.invoke()`, `.bind()`) support is handled manually to
preserve the same precedence, since Pydantic aliases only apply at
construction.
- `effort` remains supported (no deprecation).

### Other providers

- **DeepSeek**: inherits support from `BaseChatOpenAI`.
- **Groq** and **Perplexity**: already have native `reasoning_effort`
support.
- **OpenRouter** and **Mistral AI**: out of scope (no native support
today).
- **Google (Gemini)**: implemented separately in
[`langchain-google`](https://github.com/langchain-ai/langchain-google/pull/1895)
2026-07-20 16:15:00 -04:00
Mason Daugherty
7d2bbba25f fix(groq): update reasoning integration model (#38976)
Requests for `qwen/qwen3-32b` now return `model_not_found` under the
Groq integration-test credentials, so the reasoning invoke, stream, and
disabled-effort tests fail before exercising `ChatGroq`. This switches
those cases to `qwen/qwen3.6-27b`, which Groq documents as supporting
parsed reasoning and `reasoning_effort="none"`, and shares the
reasoning-model constant across all three tests.
2026-07-20 15:49:26 -04:00
langchain-oss-model-profiles[bot]
30697d4c81 chore(model-profiles): refresh model profile data (#38927)
Automated refresh of model profile data for all in-monorepo partner
integrations via `langchain-profiles refresh`.

🤖 Generated by the [`refresh_model_profiles`
workflow](https://github.com/langchain-ai/langchain/blob/master/.github/workflows/refresh_model_profiles.yml).


## Summary of changes

**1 added · 8 removed · 8 changed** across 1 provider(s).

### openrouter

** 1 added**
- `thinkingmachines/inkling` — 1,048,576 ctx, 1,048,576 out,
text+image+audio in, reasoning, tools

** 8 removed**
- `cognitivecomputations/dolphin-mistral-24b-venice-edition:free`
- `meta-llama/llama-3.2-11b-vision-instruct`
- `meta-llama/llama-3.2-3b-instruct:free`
- `meta-llama/llama-3.3-70b-instruct:free`
- `nousresearch/hermes-3-llama-3.1-405b:free`
- `nvidia/llama-3.3-nemotron-super-49b-v1.5`
- `qwen/qwen3-coder:free`
- `qwen/qwen3-next-80b-a3b-instruct:free`

**✏️ 8 changed**
- `google/gemma-4-26b-a4b-it`: max output tokens 256,000 → 16,384
- `meta-llama/llama-3.2-3b-instruct`: max output tokens 131,072 → 80,000
- `moonshotai/kimi-k2-thinking`: max output tokens 262,144 → 100,352
- `qwen/qwen3-14b`: max output tokens 40,960 → 16,384
- `qwen/qwen3-235b-a22b-thinking-2507`: max output tokens 262,144 →
32,768
- `qwen/qwen3-30b-a3b`: max output tokens 16,384 → 8,192
- `qwen/qwen3.5-27b`: max output tokens 65,536 → 81,920
- `z-ai/glm-5`: max input tokens 202,752 → 204,800; max output tokens
202,752 → 131,072

Co-authored-by: mdrxy <61371264+mdrxy@users.noreply.github.com>
2026-07-20 09:30:51 -04:00
dependabot[bot]
dc26ca5035 chore: bump torch from 2.12.1 to 2.13.0 in /libs/text-splitters (#38946)
Bumps [torch](https://github.com/pytorch/pytorch) from 2.12.1 to 2.13.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pytorch/pytorch/releases">torch's
releases</a>.</em></p>
<blockquote>
<h1>PyTorch 2.13.0 Release Notes</h1>
<ul>
<li><a
href="https://github.com/pytorch/pytorch/blob/HEAD/#highlights">Highlights</a></li>
<li><a
href="https://github.com/pytorch/pytorch/blob/HEAD/#backwards-incompatible-changes">Backwards
Incompatible Changes</a></li>
<li><a
href="https://github.com/pytorch/pytorch/blob/HEAD/#deprecations">Deprecations</a></li>
<li><a
href="https://github.com/pytorch/pytorch/blob/HEAD/#new-features">New
Features</a></li>
<li><a
href="https://github.com/pytorch/pytorch/blob/HEAD/#improvements">Improvements</a></li>
<li><a
href="https://github.com/pytorch/pytorch/blob/HEAD/#bug-fixes">Bug
fixes</a></li>
<li><a
href="https://github.com/pytorch/pytorch/blob/HEAD/#performance">Performance</a></li>
<li><a
href="https://github.com/pytorch/pytorch/blob/HEAD/#documentation">Documentation</a></li>
<li><a
href="https://github.com/pytorch/pytorch/blob/HEAD/#developers">Developers</a></li>
</ul>
<h1>Highlights</h1>
<!-- raw HTML omitted -->
<p>For more details about these highlighted features, you can look at
the release blogpost. Below are the full release notes for this
release.</p>
<h1>Tracked Regressions</h1>
<h3>ROCm wheels break <code>torch.compile</code> on CPU in environments
without a GPU</h3>
<p>Running a <code>torch==2.13.0+rocm7.2</code> wheel in an environment
where no GPU is available (<code>torch.cuda.is_available()</code> is
<code>False</code>) breaks <code>torch.compile</code> on the CPU path:
the first compile raises <code>RuntimeError: Can't detect vectorized ISA
for CPU</code> (<a
href="https://redirect.github.com/pytorch/pytorch/issues/189194">#189194</a>).
This is a regression from <code>torch==2.12.1+rocm7.2</code>, which
compiles CPU code fine (detecting e.g. <code>VecAVX2</code>) in the same
setup. The 2.13 ROCm wheel appears to rely on something present in the
ROCm builder image to detect the CPU vectorized ISA, so it works when
run on a ROCm image but fails on a plain CPU-only image.</p>
<p>Workaround: run the <code>+rocm</code> wheel on a ROCm image, or
install a standard CPU/CUDA build for GPU-less environments.</p>
<h1>Backwards Incompatible Changes</h1>
<ul>
<li>
<p>Stop building CPython 3.13t (free-threaded) binaries (<a
href="https://redirect.github.com/pytorch/pytorch/issues/182951">#182951</a>)</p>
<p>Upstream <code>pypa/manylinux</code> removed CPython 3.13t
(free-threaded) on 2026-05-07, because 3.13t
was experimental and has been superseded by the now-non-experimental
CPython 3.14t. As a result,
PyTorch 2.13 no longer ships <code>cp313t</code> wheels (Linux, Triton,
and related artifacts). Users on the
free-threaded interpreter should move to Python 3.14t.</p>
<p>PyTorch 2.12:</p>
<pre lang="bash"><code># cp313t (free-threaded 3.13) wheels were
available
python3.13t -m pip install torch
</code></pre>
<p>PyTorch 2.13:</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="cf30153c4c"><code>cf30153</code></a>
[release/2.13] Strip +PTX from CUDA arch list on release/RC builds (<a
href="https://redirect.github.com/pytorch/pytorch/issues/188914">#188914</a>)
...</li>
<li><a
href="3e3e24bd95"><code>3e3e24b</code></a>
[release/2.13] Restrict cuda-bindings to Python &lt; 3.15 for CUDA 12.9
builds (...</li>
<li><a
href="7986b06803"><code>7986b06</code></a>
[release/2.13] Bump binary build timeout 280 -&gt; 400 minutes (<a
href="https://redirect.github.com/pytorch/pytorch/issues/188551">#188551</a>)</li>
<li><a
href="0bdbc268e0"><code>0bdbc26</code></a>
[release/2.13] Add CUDA 12.9 to TORCH_CUDA_ARCH_LIST tables (<a
href="https://redirect.github.com/pytorch/pytorch/issues/188443">#188443</a>)</li>
<li><a
href="9cabb45ca6"><code>9cabb45</code></a>
[release/2.13] Update manywheel docker image pin to 78e737ad (<a
href="https://redirect.github.com/pytorch/pytorch/issues/188409">#188409</a>)</li>
<li><a
href="78e737ad29"><code>78e737a</code></a>
[release/2.13] Revert &quot;Tighten generalized scatter graph target (<a
href="https://redirect.github.com/pytorch/pytorch/issues/184075">#184075</a>)&quot;
(#...</li>
<li><a
href="0bb9b5bc24"><code>0bb9b5b</code></a>
[release/2.13] Revert &quot;dynamo: round-trip torch.cuda.stream ctx mgr
across gr...</li>
<li><a
href="aaac2bfe46"><code>aaac2bf</code></a>
[release/2.13] Revert &quot;[Reland] Port D104346887/PR 182675 for
index_add fast ...</li>
<li><a
href="933081368c"><code>9330813</code></a>
Fix build_with_debinfo.py broken by CONFIGURE_DEPENDS globbing (<a
href="https://redirect.github.com/pytorch/pytorch/issues/188192">#188192</a>)</li>
<li><a
href="4e077a7dcf"><code>4e077a7</code></a>
Remove setuptools upper bound (<a
href="https://redirect.github.com/pytorch/pytorch/issues/188190">#188190</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/pytorch/pytorch/compare/v2.12.1...v2.13.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=torch&package-manager=uv&previous-version=2.12.1&new-version=2.13.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/langchain-ai/langchain/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-18 14:10:59 -07:00
dependabot[bot]
04b88ddaab chore: bump langsmith from 0.10.2 to 0.10.6 in /libs/partners/fireworks (#38914)
Bumps [langsmith](https://github.com/langchain-ai/langsmith-sdk) from
0.10.2 to 0.10.6.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/langsmith-sdk/releases">langsmith's
releases</a>.</em></p>
<blockquote>
<h2>v0.10.6</h2>
<h2>What's Changed</h2>
<ul>
<li>Patch Dependabot alert dependencies by <a
href="https://github.com/langsmith-fleet"><code>@​langsmith-fleet</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3216">langchain-ai/langsmith-sdk#3216</a></li>
<li>feat(pipecat): capture realtime tool calls and OpenAI realtime
history by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3218">langchain-ai/langsmith-sdk#3218</a></li>
<li>feat(py,js): Spread OpenAI request metadata into traced metadata by
<a href="https://github.com/jacoblee93"><code>@​jacoblee93</code></a> in
<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3220">langchain-ai/langsmith-sdk#3220</a></li>
<li>feat: capture Pipecat realtime transcripts by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3219">langchain-ai/langsmith-sdk#3219</a></li>
<li>fix(deps): correct uv override-dependencies syntax for json-repair
by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3221">langchain-ai/langsmith-sdk#3221</a></li>
<li>chore(deps): bump mcp from 1.26.0 to 1.28.1 in /python by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3222">langchain-ai/langsmith-sdk#3222</a></li>
<li>fix: preserve env replica project names by <a
href="https://github.com/jacoblee93"><code>@​jacoblee93</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3224">langchain-ai/langsmith-sdk#3224</a></li>
<li>release(py): Bump version: 0.10.5 → 0.10.6 by <a
href="https://github.com/jacoblee93"><code>@​jacoblee93</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3225">langchain-ai/langsmith-sdk#3225</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.5...v0.10.6">https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.5...v0.10.6</a></p>
<h2>v0.10.5</h2>
<h2>What's Changed</h2>
<ul>
<li>chore: sync langsmith_api by <a
href="https://github.com/langtions-bot"><code>@​langtions-bot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3205">langchain-ai/langsmith-sdk#3205</a></li>
<li>fix: patch high-severity JS dependencies by <a
href="https://github.com/jkennedyvz"><code>@​jkennedyvz</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3210">langchain-ai/langsmith-sdk#3210</a></li>
<li>release(js): 0.8.3 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3213">langchain-ai/langsmith-sdk#3213</a></li>
<li>release(python): bump py version to 0.10.5 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3212">langchain-ai/langsmith-sdk#3212</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.4...v0.10.5">https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.4...v0.10.5</a></p>
<h2>v0.10.4</h2>
<h2>What's Changed</h2>
<ul>
<li>release(js): 0.8.2 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3204">langchain-ai/langsmith-sdk#3204</a></li>
<li>feat(livekit): capture realtime user transcript via
instrument_session by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3201">langchain-ai/langsmith-sdk#3201</a></li>
<li>feat(voice): capture OpenAI Agents realtime model costs by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3193">langchain-ai/langsmith-sdk#3193</a></li>
<li>feat(voice): capture Google ADK Live (Gemini) model costs by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3194">langchain-ai/langsmith-sdk#3194</a></li>
<li>release(python): bump py version to 0.10.4 by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3207">langchain-ai/langsmith-sdk#3207</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.3...v0.10.4">https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.3...v0.10.4</a></p>
<h2>v0.10.3</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: Auto-Batch Processing Drops Workspace Override Leading to
Cross-Tenant Data Leakage by <a
href="https://github.com/corridor-security"><code>@​corridor-security</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3174">langchain-ai/langsmith-sdk#3174</a></li>
<li>chore: bump _MIN_BACKEND_VERSION to 0.16.13rc1 by <a
href="https://github.com/langtions-bot"><code>@​langtions-bot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3182">langchain-ai/langsmith-sdk#3182</a></li>
<li>feat(voice): capture LiveKit realtime model costs by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3191">langchain-ai/langsmith-sdk#3191</a></li>
<li>feat(voice): capture Pipecat TTS/realtime model costs by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3192">langchain-ai/langsmith-sdk#3192</a></li>
<li>chore(deps): bump esbuild from 0.17.19 to 0.28.1 in
/js/internal/environment_tests/test-exports-cf in the npm_and_yarn group
across 1 directory by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3172">langchain-ai/langsmith-sdk#3172</a></li>
<li>chore(deps): bump nltk from 3.9.4 to 3.10.0 in /python by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3186">langchain-ai/langsmith-sdk#3186</a></li>
<li>chore(deps): bump soupsieve from 2.8.3 to 2.8.4 in /python by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3200">langchain-ai/langsmith-sdk#3200</a></li>
<li>chore: sync langsmith_api by <a
href="https://github.com/langtions-bot"><code>@​langtions-bot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3165">langchain-ai/langsmith-sdk#3165</a></li>
<li>release(python): bump py version to 0.10.3 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3203">langchain-ai/langsmith-sdk#3203</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.2...v0.10.3">https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.2...v0.10.3</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="d6cd6082f0"><code>d6cd608</code></a>
release(py): Bump version: 0.10.5 → 0.10.6 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3225">#3225</a>)</li>
<li><a
href="1ff410c816"><code>1ff410c</code></a>
fix: preserve env replica project names (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3224">#3224</a>)</li>
<li><a
href="0140e9fc17"><code>0140e9f</code></a>
chore(deps): bump mcp from 1.26.0 to 1.28.1 in /python (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3222">#3222</a>)</li>
<li><a
href="8ffae665dc"><code>8ffae66</code></a>
fix(deps): correct uv override-dependencies syntax for json-repair (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3221">#3221</a>)</li>
<li><a
href="591b06d0ec"><code>591b06d</code></a>
feat: capture Pipecat realtime transcripts (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3219">#3219</a>)</li>
<li><a
href="58f96bf967"><code>58f96bf</code></a>
feat(py,js): Spread OpenAI request metadata into traced metadata (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3220">#3220</a>)</li>
<li><a
href="71d5c6274a"><code>71d5c62</code></a>
feat(pipecat): capture realtime tool calls and OpenAI realtime history
(<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3218">#3218</a>)</li>
<li><a
href="ce093c9b63"><code>ce093c9</code></a>
Patch Dependabot alert dependencies (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3216">#3216</a>)</li>
<li><a
href="c2450d9523"><code>c2450d9</code></a>
release(python): bump py version to 0.10.5 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3212">#3212</a>)</li>
<li><a
href="8ba1a60ed5"><code>8ba1a60</code></a>
release(js): 0.8.3 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3213">#3213</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.2...v0.10.6">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=langsmith&package-manager=uv&previous-version=0.10.2&new-version=0.10.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/langchain-ai/langchain/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-17 13:23:27 -07:00
dependabot[bot]
bb3facc76c chore: bump langsmith from 0.10.2 to 0.10.6 in /libs/partners/chroma (#38916)
Bumps [langsmith](https://github.com/langchain-ai/langsmith-sdk) from
0.10.2 to 0.10.6.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/langsmith-sdk/releases">langsmith's
releases</a>.</em></p>
<blockquote>
<h2>v0.10.6</h2>
<h2>What's Changed</h2>
<ul>
<li>Patch Dependabot alert dependencies by <a
href="https://github.com/langsmith-fleet"><code>@​langsmith-fleet</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3216">langchain-ai/langsmith-sdk#3216</a></li>
<li>feat(pipecat): capture realtime tool calls and OpenAI realtime
history by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3218">langchain-ai/langsmith-sdk#3218</a></li>
<li>feat(py,js): Spread OpenAI request metadata into traced metadata by
<a href="https://github.com/jacoblee93"><code>@​jacoblee93</code></a> in
<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3220">langchain-ai/langsmith-sdk#3220</a></li>
<li>feat: capture Pipecat realtime transcripts by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3219">langchain-ai/langsmith-sdk#3219</a></li>
<li>fix(deps): correct uv override-dependencies syntax for json-repair
by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3221">langchain-ai/langsmith-sdk#3221</a></li>
<li>chore(deps): bump mcp from 1.26.0 to 1.28.1 in /python by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3222">langchain-ai/langsmith-sdk#3222</a></li>
<li>fix: preserve env replica project names by <a
href="https://github.com/jacoblee93"><code>@​jacoblee93</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3224">langchain-ai/langsmith-sdk#3224</a></li>
<li>release(py): Bump version: 0.10.5 → 0.10.6 by <a
href="https://github.com/jacoblee93"><code>@​jacoblee93</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3225">langchain-ai/langsmith-sdk#3225</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.5...v0.10.6">https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.5...v0.10.6</a></p>
<h2>v0.10.5</h2>
<h2>What's Changed</h2>
<ul>
<li>chore: sync langsmith_api by <a
href="https://github.com/langtions-bot"><code>@​langtions-bot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3205">langchain-ai/langsmith-sdk#3205</a></li>
<li>fix: patch high-severity JS dependencies by <a
href="https://github.com/jkennedyvz"><code>@​jkennedyvz</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3210">langchain-ai/langsmith-sdk#3210</a></li>
<li>release(js): 0.8.3 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3213">langchain-ai/langsmith-sdk#3213</a></li>
<li>release(python): bump py version to 0.10.5 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3212">langchain-ai/langsmith-sdk#3212</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.4...v0.10.5">https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.4...v0.10.5</a></p>
<h2>v0.10.4</h2>
<h2>What's Changed</h2>
<ul>
<li>release(js): 0.8.2 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3204">langchain-ai/langsmith-sdk#3204</a></li>
<li>feat(livekit): capture realtime user transcript via
instrument_session by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3201">langchain-ai/langsmith-sdk#3201</a></li>
<li>feat(voice): capture OpenAI Agents realtime model costs by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3193">langchain-ai/langsmith-sdk#3193</a></li>
<li>feat(voice): capture Google ADK Live (Gemini) model costs by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3194">langchain-ai/langsmith-sdk#3194</a></li>
<li>release(python): bump py version to 0.10.4 by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3207">langchain-ai/langsmith-sdk#3207</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.3...v0.10.4">https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.3...v0.10.4</a></p>
<h2>v0.10.3</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: Auto-Batch Processing Drops Workspace Override Leading to
Cross-Tenant Data Leakage by <a
href="https://github.com/corridor-security"><code>@​corridor-security</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3174">langchain-ai/langsmith-sdk#3174</a></li>
<li>chore: bump _MIN_BACKEND_VERSION to 0.16.13rc1 by <a
href="https://github.com/langtions-bot"><code>@​langtions-bot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3182">langchain-ai/langsmith-sdk#3182</a></li>
<li>feat(voice): capture LiveKit realtime model costs by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3191">langchain-ai/langsmith-sdk#3191</a></li>
<li>feat(voice): capture Pipecat TTS/realtime model costs by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3192">langchain-ai/langsmith-sdk#3192</a></li>
<li>chore(deps): bump esbuild from 0.17.19 to 0.28.1 in
/js/internal/environment_tests/test-exports-cf in the npm_and_yarn group
across 1 directory by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3172">langchain-ai/langsmith-sdk#3172</a></li>
<li>chore(deps): bump nltk from 3.9.4 to 3.10.0 in /python by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3186">langchain-ai/langsmith-sdk#3186</a></li>
<li>chore(deps): bump soupsieve from 2.8.3 to 2.8.4 in /python by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3200">langchain-ai/langsmith-sdk#3200</a></li>
<li>chore: sync langsmith_api by <a
href="https://github.com/langtions-bot"><code>@​langtions-bot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3165">langchain-ai/langsmith-sdk#3165</a></li>
<li>release(python): bump py version to 0.10.3 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3203">langchain-ai/langsmith-sdk#3203</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.2...v0.10.3">https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.2...v0.10.3</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="d6cd6082f0"><code>d6cd608</code></a>
release(py): Bump version: 0.10.5 → 0.10.6 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3225">#3225</a>)</li>
<li><a
href="1ff410c816"><code>1ff410c</code></a>
fix: preserve env replica project names (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3224">#3224</a>)</li>
<li><a
href="0140e9fc17"><code>0140e9f</code></a>
chore(deps): bump mcp from 1.26.0 to 1.28.1 in /python (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3222">#3222</a>)</li>
<li><a
href="8ffae665dc"><code>8ffae66</code></a>
fix(deps): correct uv override-dependencies syntax for json-repair (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3221">#3221</a>)</li>
<li><a
href="591b06d0ec"><code>591b06d</code></a>
feat: capture Pipecat realtime transcripts (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3219">#3219</a>)</li>
<li><a
href="58f96bf967"><code>58f96bf</code></a>
feat(py,js): Spread OpenAI request metadata into traced metadata (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3220">#3220</a>)</li>
<li><a
href="71d5c6274a"><code>71d5c62</code></a>
feat(pipecat): capture realtime tool calls and OpenAI realtime history
(<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3218">#3218</a>)</li>
<li><a
href="ce093c9b63"><code>ce093c9</code></a>
Patch Dependabot alert dependencies (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3216">#3216</a>)</li>
<li><a
href="c2450d9523"><code>c2450d9</code></a>
release(python): bump py version to 0.10.5 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3212">#3212</a>)</li>
<li><a
href="8ba1a60ed5"><code>8ba1a60</code></a>
release(js): 0.8.3 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3213">#3213</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.2...v0.10.6">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=langsmith&package-manager=uv&previous-version=0.10.2&new-version=0.10.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/langchain-ai/langchain/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-17 13:23:22 -07:00
dependabot[bot]
858ec85a5f chore: bump langsmith from 0.10.2 to 0.10.6 in /libs/partners/huggingface (#38912)
Bumps [langsmith](https://github.com/langchain-ai/langsmith-sdk) from
0.10.2 to 0.10.6.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/langsmith-sdk/releases">langsmith's
releases</a>.</em></p>
<blockquote>
<h2>v0.10.6</h2>
<h2>What's Changed</h2>
<ul>
<li>Patch Dependabot alert dependencies by <a
href="https://github.com/langsmith-fleet"><code>@​langsmith-fleet</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3216">langchain-ai/langsmith-sdk#3216</a></li>
<li>feat(pipecat): capture realtime tool calls and OpenAI realtime
history by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3218">langchain-ai/langsmith-sdk#3218</a></li>
<li>feat(py,js): Spread OpenAI request metadata into traced metadata by
<a href="https://github.com/jacoblee93"><code>@​jacoblee93</code></a> in
<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3220">langchain-ai/langsmith-sdk#3220</a></li>
<li>feat: capture Pipecat realtime transcripts by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3219">langchain-ai/langsmith-sdk#3219</a></li>
<li>fix(deps): correct uv override-dependencies syntax for json-repair
by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3221">langchain-ai/langsmith-sdk#3221</a></li>
<li>chore(deps): bump mcp from 1.26.0 to 1.28.1 in /python by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3222">langchain-ai/langsmith-sdk#3222</a></li>
<li>fix: preserve env replica project names by <a
href="https://github.com/jacoblee93"><code>@​jacoblee93</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3224">langchain-ai/langsmith-sdk#3224</a></li>
<li>release(py): Bump version: 0.10.5 → 0.10.6 by <a
href="https://github.com/jacoblee93"><code>@​jacoblee93</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3225">langchain-ai/langsmith-sdk#3225</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.5...v0.10.6">https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.5...v0.10.6</a></p>
<h2>v0.10.5</h2>
<h2>What's Changed</h2>
<ul>
<li>chore: sync langsmith_api by <a
href="https://github.com/langtions-bot"><code>@​langtions-bot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3205">langchain-ai/langsmith-sdk#3205</a></li>
<li>fix: patch high-severity JS dependencies by <a
href="https://github.com/jkennedyvz"><code>@​jkennedyvz</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3210">langchain-ai/langsmith-sdk#3210</a></li>
<li>release(js): 0.8.3 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3213">langchain-ai/langsmith-sdk#3213</a></li>
<li>release(python): bump py version to 0.10.5 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3212">langchain-ai/langsmith-sdk#3212</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.4...v0.10.5">https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.4...v0.10.5</a></p>
<h2>v0.10.4</h2>
<h2>What's Changed</h2>
<ul>
<li>release(js): 0.8.2 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3204">langchain-ai/langsmith-sdk#3204</a></li>
<li>feat(livekit): capture realtime user transcript via
instrument_session by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3201">langchain-ai/langsmith-sdk#3201</a></li>
<li>feat(voice): capture OpenAI Agents realtime model costs by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3193">langchain-ai/langsmith-sdk#3193</a></li>
<li>feat(voice): capture Google ADK Live (Gemini) model costs by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3194">langchain-ai/langsmith-sdk#3194</a></li>
<li>release(python): bump py version to 0.10.4 by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3207">langchain-ai/langsmith-sdk#3207</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.3...v0.10.4">https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.3...v0.10.4</a></p>
<h2>v0.10.3</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: Auto-Batch Processing Drops Workspace Override Leading to
Cross-Tenant Data Leakage by <a
href="https://github.com/corridor-security"><code>@​corridor-security</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3174">langchain-ai/langsmith-sdk#3174</a></li>
<li>chore: bump _MIN_BACKEND_VERSION to 0.16.13rc1 by <a
href="https://github.com/langtions-bot"><code>@​langtions-bot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3182">langchain-ai/langsmith-sdk#3182</a></li>
<li>feat(voice): capture LiveKit realtime model costs by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3191">langchain-ai/langsmith-sdk#3191</a></li>
<li>feat(voice): capture Pipecat TTS/realtime model costs by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3192">langchain-ai/langsmith-sdk#3192</a></li>
<li>chore(deps): bump esbuild from 0.17.19 to 0.28.1 in
/js/internal/environment_tests/test-exports-cf in the npm_and_yarn group
across 1 directory by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3172">langchain-ai/langsmith-sdk#3172</a></li>
<li>chore(deps): bump nltk from 3.9.4 to 3.10.0 in /python by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3186">langchain-ai/langsmith-sdk#3186</a></li>
<li>chore(deps): bump soupsieve from 2.8.3 to 2.8.4 in /python by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3200">langchain-ai/langsmith-sdk#3200</a></li>
<li>chore: sync langsmith_api by <a
href="https://github.com/langtions-bot"><code>@​langtions-bot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3165">langchain-ai/langsmith-sdk#3165</a></li>
<li>release(python): bump py version to 0.10.3 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3203">langchain-ai/langsmith-sdk#3203</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.2...v0.10.3">https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.2...v0.10.3</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="d6cd6082f0"><code>d6cd608</code></a>
release(py): Bump version: 0.10.5 → 0.10.6 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3225">#3225</a>)</li>
<li><a
href="1ff410c816"><code>1ff410c</code></a>
fix: preserve env replica project names (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3224">#3224</a>)</li>
<li><a
href="0140e9fc17"><code>0140e9f</code></a>
chore(deps): bump mcp from 1.26.0 to 1.28.1 in /python (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3222">#3222</a>)</li>
<li><a
href="8ffae665dc"><code>8ffae66</code></a>
fix(deps): correct uv override-dependencies syntax for json-repair (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3221">#3221</a>)</li>
<li><a
href="591b06d0ec"><code>591b06d</code></a>
feat: capture Pipecat realtime transcripts (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3219">#3219</a>)</li>
<li><a
href="58f96bf967"><code>58f96bf</code></a>
feat(py,js): Spread OpenAI request metadata into traced metadata (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3220">#3220</a>)</li>
<li><a
href="71d5c6274a"><code>71d5c62</code></a>
feat(pipecat): capture realtime tool calls and OpenAI realtime history
(<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3218">#3218</a>)</li>
<li><a
href="ce093c9b63"><code>ce093c9</code></a>
Patch Dependabot alert dependencies (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3216">#3216</a>)</li>
<li><a
href="c2450d9523"><code>c2450d9</code></a>
release(python): bump py version to 0.10.5 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3212">#3212</a>)</li>
<li><a
href="8ba1a60ed5"><code>8ba1a60</code></a>
release(js): 0.8.3 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3213">#3213</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.2...v0.10.6">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=langsmith&package-manager=uv&previous-version=0.10.2&new-version=0.10.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/langchain-ai/langchain/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-17 13:23:10 -07:00
dependabot[bot]
50f57310ff chore: bump torch from 2.12.1 to 2.13.0 in /libs/partners/huggingface (#38911)
Bumps [torch](https://github.com/pytorch/pytorch) from 2.12.1 to 2.13.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pytorch/pytorch/releases">torch's
releases</a>.</em></p>
<blockquote>
<h1>PyTorch 2.13.0 Release Notes</h1>
<ul>
<li><a
href="https://github.com/pytorch/pytorch/blob/HEAD/#highlights">Highlights</a></li>
<li><a
href="https://github.com/pytorch/pytorch/blob/HEAD/#backwards-incompatible-changes">Backwards
Incompatible Changes</a></li>
<li><a
href="https://github.com/pytorch/pytorch/blob/HEAD/#deprecations">Deprecations</a></li>
<li><a
href="https://github.com/pytorch/pytorch/blob/HEAD/#new-features">New
Features</a></li>
<li><a
href="https://github.com/pytorch/pytorch/blob/HEAD/#improvements">Improvements</a></li>
<li><a
href="https://github.com/pytorch/pytorch/blob/HEAD/#bug-fixes">Bug
fixes</a></li>
<li><a
href="https://github.com/pytorch/pytorch/blob/HEAD/#performance">Performance</a></li>
<li><a
href="https://github.com/pytorch/pytorch/blob/HEAD/#documentation">Documentation</a></li>
<li><a
href="https://github.com/pytorch/pytorch/blob/HEAD/#developers">Developers</a></li>
</ul>
<h1>Highlights</h1>
<!-- raw HTML omitted -->
<p>For more details about these highlighted features, you can look at
the release blogpost. Below are the full release notes for this
release.</p>
<h1>Tracked Regressions</h1>
<h3>ROCm wheels break <code>torch.compile</code> on CPU in environments
without a GPU</h3>
<p>Running a <code>torch==2.13.0+rocm7.2</code> wheel in an environment
where no GPU is available (<code>torch.cuda.is_available()</code> is
<code>False</code>) breaks <code>torch.compile</code> on the CPU path:
the first compile raises <code>RuntimeError: Can't detect vectorized ISA
for CPU</code> (<a
href="https://redirect.github.com/pytorch/pytorch/issues/189194">#189194</a>).
This is a regression from <code>torch==2.12.1+rocm7.2</code>, which
compiles CPU code fine (detecting e.g. <code>VecAVX2</code>) in the same
setup. The 2.13 ROCm wheel appears to rely on something present in the
ROCm builder image to detect the CPU vectorized ISA, so it works when
run on a ROCm image but fails on a plain CPU-only image.</p>
<p>Workaround: run the <code>+rocm</code> wheel on a ROCm image, or
install a standard CPU/CUDA build for GPU-less environments.</p>
<h1>Backwards Incompatible Changes</h1>
<ul>
<li>
<p>Stop building CPython 3.13t (free-threaded) binaries (<a
href="https://redirect.github.com/pytorch/pytorch/issues/182951">#182951</a>)</p>
<p>Upstream <code>pypa/manylinux</code> removed CPython 3.13t
(free-threaded) on 2026-05-07, because 3.13t
was experimental and has been superseded by the now-non-experimental
CPython 3.14t. As a result,
PyTorch 2.13 no longer ships <code>cp313t</code> wheels (Linux, Triton,
and related artifacts). Users on the
free-threaded interpreter should move to Python 3.14t.</p>
<p>PyTorch 2.12:</p>
<pre lang="bash"><code># cp313t (free-threaded 3.13) wheels were
available
python3.13t -m pip install torch
</code></pre>
<p>PyTorch 2.13:</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="cf30153c4c"><code>cf30153</code></a>
[release/2.13] Strip +PTX from CUDA arch list on release/RC builds (<a
href="https://redirect.github.com/pytorch/pytorch/issues/188914">#188914</a>)
...</li>
<li><a
href="3e3e24bd95"><code>3e3e24b</code></a>
[release/2.13] Restrict cuda-bindings to Python &lt; 3.15 for CUDA 12.9
builds (...</li>
<li><a
href="7986b06803"><code>7986b06</code></a>
[release/2.13] Bump binary build timeout 280 -&gt; 400 minutes (<a
href="https://redirect.github.com/pytorch/pytorch/issues/188551">#188551</a>)</li>
<li><a
href="0bdbc268e0"><code>0bdbc26</code></a>
[release/2.13] Add CUDA 12.9 to TORCH_CUDA_ARCH_LIST tables (<a
href="https://redirect.github.com/pytorch/pytorch/issues/188443">#188443</a>)</li>
<li><a
href="9cabb45ca6"><code>9cabb45</code></a>
[release/2.13] Update manywheel docker image pin to 78e737ad (<a
href="https://redirect.github.com/pytorch/pytorch/issues/188409">#188409</a>)</li>
<li><a
href="78e737ad29"><code>78e737a</code></a>
[release/2.13] Revert &quot;Tighten generalized scatter graph target (<a
href="https://redirect.github.com/pytorch/pytorch/issues/184075">#184075</a>)&quot;
(#...</li>
<li><a
href="0bb9b5bc24"><code>0bb9b5b</code></a>
[release/2.13] Revert &quot;dynamo: round-trip torch.cuda.stream ctx mgr
across gr...</li>
<li><a
href="aaac2bfe46"><code>aaac2bf</code></a>
[release/2.13] Revert &quot;[Reland] Port D104346887/PR 182675 for
index_add fast ...</li>
<li><a
href="933081368c"><code>9330813</code></a>
Fix build_with_debinfo.py broken by CONFIGURE_DEPENDS globbing (<a
href="https://redirect.github.com/pytorch/pytorch/issues/188192">#188192</a>)</li>
<li><a
href="4e077a7dcf"><code>4e077a7</code></a>
Remove setuptools upper bound (<a
href="https://redirect.github.com/pytorch/pytorch/issues/188190">#188190</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/pytorch/pytorch/compare/v2.12.1...v2.13.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=torch&package-manager=uv&previous-version=2.12.1&new-version=2.13.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/langchain-ai/langchain/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-17 13:19:30 -07:00
langchain-oss-model-profiles[bot]
0736ddeb1e chore(model-profiles): refresh model profile data (#38905)
Automated refresh of model profile data for all in-monorepo partner
integrations via `langchain-profiles refresh`.

🤖 Generated by the [`refresh_model_profiles`
workflow](https://github.com/langchain-ai/langchain/blob/master/.github/workflows/refresh_model_profiles.yml).


## Summary of changes

**2 added · 0 removed · 8 changed** across 1 provider(s).

### openrouter

** 2 added**
- `meta/muse-spark-1.1` — 1,048,576 ctx, 1,048,576 out,
text+image+audio+video+pdf in, reasoning, tools
- `moonshotai/kimi-k3` — 1,048,576 ctx, 1,048,576 out, text+image in,
reasoning, tools

**✏️ 8 changed**
- `anthropic/claude-opus-4.7-fast`: last updated `2026-05-12` →
`2026-04-16`; release date `2026-05-12` → `2026-04-16`
- `anthropic/claude-opus-4.8-fast`: last updated `2026-05-27` →
`2026-05-28`; release date `2026-05-27` → `2026-05-28`
- `google/gemini-3.1-flash-lite-image`: max output tokens 66,000 →
65,536
- `~anthropic/claude-sonnet-latest`: last updated `2026-06-30` →
`2026-04-27`; release date `2026-06-30` → `2026-04-27`
- `~google/gemini-flash-latest`: last updated `2026-05-19` →
`2026-04-27`; release date `2026-05-19` → `2026-04-27`
- `~google/gemini-pro-latest`: last updated `2026-02-19` → `2026-04-27`;
release date `2026-02-19` → `2026-04-27`
- `~moonshotai/kimi-latest`: max input tokens 262,144 → 1,048,576;
removed temperature control
- `~openai/gpt-latest`: last updated `2026-07-09` → `2026-04-27`;
release date `2026-07-09` → `2026-04-27`

Co-authored-by: mdrxy <61371264+mdrxy@users.noreply.github.com>
2026-07-17 11:20:47 -04:00
John Kennedy
98216c0c1d chore: standard-tests: require patched vcrpy (#38885)
## Summary
- Raise `langchain-tests`' `vcrpy` lower bound to `>=8.2.1` to address
GHSA-rpj2-4hq8-938g / Dependabot alert #3861.
- Update the standard-tests uv lock metadata for the new constraint.

## Validation
- `uv lock --project /tmp/langchain/libs/standard-tests --locked`

## Scope
- Scoped to the `libs/standard-tests` vcrpy alert; no package version
change was required because the lock already resolved to a patched vcrpy
release.

Co-authored-by: langsmith-fleet[bot] <langsmith-fleet[bot]@users.noreply.github.com>
2026-07-16 09:41:53 -07:00
langchain-oss-model-profiles[bot]
cf2115a6cf chore(model-profiles): refresh model profile data (#38876)
Automated refresh of model profile data for all in-monorepo partner
integrations via `langchain-profiles refresh`.

🤖 Generated by the [`refresh_model_profiles`
workflow](https://github.com/langchain-ai/langchain/blob/master/.github/workflows/refresh_model_profiles.yml).


## Summary of changes

**0 added · 1 removed · 32 changed** across 1 provider(s).

### openrouter

** 1 removed**
- `arcee-ai/coder-large`

**✏️ 32 changed**
- `deepseek/deepseek-chat-v3-0324`: max output tokens 16,384 → 65,536
- `deepseek/deepseek-v3.1-terminus`: max input tokens 163,840 → 131,072
- `deepseek/deepseek-v3.2`: max input tokens 131,072 → 163,840; max
output tokens 64,000 → 65,536
- `google/gemini-2.5-flash-image`: max output tokens 32,768 → 8,192
- `google/gemma-3-27b-it`: max output tokens 16,384 → 131,072
- `google/gemma-4-26b-a4b-it`: max output tokens 262,144 → 256,000
- `google/gemma-4-31b-it`: max output tokens 8,192 → 262,144
- `meta-llama/llama-3.1-8b-instruct`: max output tokens 16,384 → 131,072
- `meta-llama/llama-3.3-70b-instruct`: max output tokens 16,384 →
128,000
- `minimax/minimax-m2.7`: max output tokens 196,608 → 131,072
- `minimax/minimax-m3`: max output tokens 131,072 → 512,000
- `mistralai/mistral-nemo`: max output tokens 131,072 → 16,384
- `mistralai/mistral-small-3.2-24b-instruct`: max input tokens 128,000 →
131,072
- `moonshotai/kimi-k2-thinking`: max output tokens 100,352 → 262,144
- `moonshotai/kimi-k2.5`: max output tokens 256,000 → 262,144
- `openai/gpt-5.1-chat`: max output tokens 32,000 → 16,384
- `qwen/qwen3-30b-a3b-instruct-2507`: max input tokens 131,072 → 262,144
- `qwen/qwen3-next-80b-a3b-instruct`: max output tokens 16,384 → 262,144
- `qwen/qwen3-vl-235b-a22b-instruct`: max input tokens 262,144 →
131,072; max output tokens 16,384 → 32,768
- `qwen/qwen3.5-122b-a10b`: max output tokens 262,144 → 65,536
- `qwen/qwen3.5-35b-a3b`: max output tokens 81,920 → 262,144
- `qwen/qwen3.5-397b-a17b`: max input tokens 256,000 → 262,144; max
output tokens 64,000 → 65,536
- `qwen/qwen3.6-27b`: max output tokens 131,072 → 65,536
- `z-ai/glm-4.6`: max input tokens 200,000 → 202,752; max output tokens
16,384 → 131,072
- `z-ai/glm-4.7-flash`: max input tokens 202,752 → 200,000; max output
tokens 16,384 → 131,072
- …and 7 more

Co-authored-by: mdrxy <61371264+mdrxy@users.noreply.github.com>
2026-07-16 10:25:25 -04:00
ccurme
a4538dbf07 docs(langchain): clarify ToolRetryMiddleware exception handling (#38884) 2026-07-16 09:33:16 -04:00
ccurme
185119f98e release(langchain): 1.3.14 (#38883) langchain==1.3.14 2026-07-16 09:25:11 -04:00
ccurme
0a3bde6431 fix(langchain): only retry retryable exceptions in ToolRetryMiddleware (#38845) 2026-07-16 09:17:39 -04:00
langchain-oss-model-profiles[bot]
7bf8fe2216 chore(model-profiles): refresh model profile data (#38856)
Automated refresh of model profile data for all in-monorepo partner
integrations via `langchain-profiles refresh`.

🤖 Generated by the [`refresh_model_profiles`
workflow](https://github.com/langchain-ai/langchain/blob/master/.github/workflows/refresh_model_profiles.yml).


## Summary of changes

**2 added · 4 removed · 5 changed** across 1 provider(s).

### openrouter

** 2 added**
- `kwaipilot/kat-coder-air-v2.5` — 256,000 ctx, 80,000 out, tools
- `kwaipilot/kat-coder-pro-v2.5` — 256,000 ctx, 80,000 out, tools

** 4 removed**
- `liquid/lfm-2.5-1.2b-instruct:free`
- `liquid/lfm-2.5-1.2b-thinking:free`
- `openai/gpt-oss-120b:free`
- `sao10k/l3.1-70b-hanami-x1`

**✏️ 5 changed**
- `deepseek/deepseek-v4-flash`: max output tokens 384,000 → 65,536
- `google/gemma-4-31b-it`: max output tokens 262,144 → 8,192
- `google/gemma-4-31b-it:free`: max output tokens 8,192 → 32,768
- `qwen/qwen3.6-27b`: max output tokens 262,140 → 131,072
- `z-ai/glm-5.2`: max output tokens 131,072 → 128,000

Co-authored-by: mdrxy <61371264+mdrxy@users.noreply.github.com>
2026-07-15 06:56:48 -04:00
John Kennedy
22869321b2 fix: patch Dependabot dependency vulnerabilities (#38853)
## Summary

- remove obsolete aiohttp <3.14.0 constraints and resolve the xAI and
Fireworks locks to aiohttp 3.14.1
- set langchain-fireworks' runtime floor to aiohttp >=3.14.1
- constrain the langchain-classic lock to langchain 1.3.9, resolving
CVE-2026-55443

## Dependabot alerts

Resolves the patchable aiohttp and langchain alerts in the current
backlog.

The critical ChromaDB CVE-2026-45829 remains open because no patched
upstream version exists. It is tracked in
[SEC-969](https://linear.app/langchain/issue/SEC-969/critical-mitigate-unpatched-chromadb-cve-2026-45829).

## Verification

-  for xAI, Fireworks, and langchain-classic
- xAI unit tests: 38 passed
- Fireworks unit tests: 129 passed (with local FIREWORKS_API_BASE
removed to avoid snapshot pollution)
- imported vcrpy's aiohttp stub under aiohttp 3.14.1 in both partner
environments
2026-07-14 21:57:41 +00:00
dependabot[bot]
d260c52059 chore: bump soupsieve from 2.8 to 2.8.4 in /libs/core (#38750)
Bumps [soupsieve](https://github.com/facelessuser/soupsieve) from 2.8 to
2.8.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/facelessuser/soupsieve/releases">soupsieve's
releases</a>.</em></p>
<blockquote>
<h2>2.8.4</h2>
<ul>
<li><strong>FIX</strong>: Fix another inefficient attribute pattern (<a
href="https://github.com/mauriceng98"><code>@​mauriceng98</code></a>).</li>
<li><strong>FIX</strong>: Limit total number of selectors processed in a
pattern to prevent massive selector requests (<a
href="https://github.com/mauriceng98"><code>@​mauriceng98</code></a>).</li>
</ul>
<h2>2.8.3</h2>
<ul>
<li><strong>FIX</strong>: Fix inefficient attribute pattern.</li>
</ul>
<h2>2.8.2</h2>
<ul>
<li><strong>FIX</strong>: Ensure custom selectors or namespace
dictionaries reject non-string keys (<a
href="https://github.com/mundanevision20"><code>@​mundanevision20</code></a>).</li>
<li><strong>FIX</strong>: Fix handling of <code>:in-range</code> and
<code>:out-of-range</code> with end of year weeks (<a
href="https://github.com/mundanevision20"><code>@​mundanevision20</code></a>).</li>
<li><strong>FIX</strong>: Fix a potential infinite loop in the pretty
printing debug function (<a
href="https://github.com/mundanevision20"><code>@​mundanevision20</code></a>).</li>
</ul>
<h2>2.8.1</h2>
<ul>
<li><strong>FIX</strong>: Changes in tests to accommodate latest Python
HTML parser changes.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="28108ab805"><code>28108ab</code></a>
Limit excessive selectors</li>
<li><a
href="ef188721d6"><code>ef18872</code></a>
Fix test for Windows</li>
<li><a
href="eb43976187"><code>eb43976</code></a>
Merge commit from fork</li>
<li><a
href="3a661b23b2"><code>3a661b2</code></a>
Fix typo in pseudo-classes.md (<a
href="https://redirect.github.com/facelessuser/soupsieve/issues/294">#294</a>)</li>
<li><a
href="0cb533d83b"><code>0cb533d</code></a>
Update hatchling version requirement in pyproject.toml (<a
href="https://redirect.github.com/facelessuser/soupsieve/issues/290">#290</a>)</li>
<li><a
href="5aedc41804"><code>5aedc41</code></a>
Update doc theme</li>
<li><a
href="d7c47842a4"><code>d7c4784</code></a>
Attribute pattern fix (<a
href="https://redirect.github.com/facelessuser/soupsieve/issues/289">#289</a>)</li>
<li><a
href="09e106dc0f"><code>09e106d</code></a>
Fix grammar</li>
<li><a
href="09b27696ad"><code>09b2769</code></a>
Update docs</li>
<li><a
href="c6e80fcab9"><code>c6e80fc</code></a>
Various fixes by <a
href="https://github.com/mundanevision20"><code>@​mundanevision20</code></a>
(<a
href="https://redirect.github.com/facelessuser/soupsieve/issues/288">#288</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/facelessuser/soupsieve/compare/2.8...2.8.4">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-14 11:47:53 -07:00
ccurme
ceb1e4e652 feat(langchain): ToolErrorMiddleware (#38781) 2026-07-14 09:02:35 -04:00
dependabot[bot]
2f29107ed0 chore: bump soupsieve from 2.8 to 2.8.4 in /libs/langchain (#38749)
Bumps [soupsieve](https://github.com/facelessuser/soupsieve) from 2.8 to
2.8.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/facelessuser/soupsieve/releases">soupsieve's
releases</a>.</em></p>
<blockquote>
<h2>2.8.4</h2>
<ul>
<li><strong>FIX</strong>: Fix another inefficient attribute pattern (<a
href="https://github.com/mauriceng98"><code>@​mauriceng98</code></a>).</li>
<li><strong>FIX</strong>: Limit total number of selectors processed in a
pattern to prevent massive selector requests (<a
href="https://github.com/mauriceng98"><code>@​mauriceng98</code></a>).</li>
</ul>
<h2>2.8.3</h2>
<ul>
<li><strong>FIX</strong>: Fix inefficient attribute pattern.</li>
</ul>
<h2>2.8.2</h2>
<ul>
<li><strong>FIX</strong>: Ensure custom selectors or namespace
dictionaries reject non-string keys (<a
href="https://github.com/mundanevision20"><code>@​mundanevision20</code></a>).</li>
<li><strong>FIX</strong>: Fix handling of <code>:in-range</code> and
<code>:out-of-range</code> with end of year weeks (<a
href="https://github.com/mundanevision20"><code>@​mundanevision20</code></a>).</li>
<li><strong>FIX</strong>: Fix a potential infinite loop in the pretty
printing debug function (<a
href="https://github.com/mundanevision20"><code>@​mundanevision20</code></a>).</li>
</ul>
<h2>2.8.1</h2>
<ul>
<li><strong>FIX</strong>: Changes in tests to accommodate latest Python
HTML parser changes.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="28108ab805"><code>28108ab</code></a>
Limit excessive selectors</li>
<li><a
href="ef188721d6"><code>ef18872</code></a>
Fix test for Windows</li>
<li><a
href="eb43976187"><code>eb43976</code></a>
Merge commit from fork</li>
<li><a
href="3a661b23b2"><code>3a661b2</code></a>
Fix typo in pseudo-classes.md (<a
href="https://redirect.github.com/facelessuser/soupsieve/issues/294">#294</a>)</li>
<li><a
href="0cb533d83b"><code>0cb533d</code></a>
Update hatchling version requirement in pyproject.toml (<a
href="https://redirect.github.com/facelessuser/soupsieve/issues/290">#290</a>)</li>
<li><a
href="5aedc41804"><code>5aedc41</code></a>
Update doc theme</li>
<li><a
href="d7c47842a4"><code>d7c4784</code></a>
Attribute pattern fix (<a
href="https://redirect.github.com/facelessuser/soupsieve/issues/289">#289</a>)</li>
<li><a
href="09e106dc0f"><code>09e106d</code></a>
Fix grammar</li>
<li><a
href="09b27696ad"><code>09b2769</code></a>
Update docs</li>
<li><a
href="c6e80fcab9"><code>c6e80fc</code></a>
Various fixes by <a
href="https://github.com/mundanevision20"><code>@​mundanevision20</code></a>
(<a
href="https://redirect.github.com/facelessuser/soupsieve/issues/288">#288</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/facelessuser/soupsieve/compare/2.8...2.8.4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=soupsieve&package-manager=uv&previous-version=2.8&new-version=2.8.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/langchain-ai/langchain/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-13 23:41:34 -07:00
dependabot[bot]
6cd44e0d43 chore: bump soupsieve from 2.8 to 2.8.4 in /libs/text-splitters (#38748)
Bumps [soupsieve](https://github.com/facelessuser/soupsieve) from 2.8 to
2.8.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/facelessuser/soupsieve/releases">soupsieve's
releases</a>.</em></p>
<blockquote>
<h2>2.8.4</h2>
<ul>
<li><strong>FIX</strong>: Fix another inefficient attribute pattern (<a
href="https://github.com/mauriceng98"><code>@​mauriceng98</code></a>).</li>
<li><strong>FIX</strong>: Limit total number of selectors processed in a
pattern to prevent massive selector requests (<a
href="https://github.com/mauriceng98"><code>@​mauriceng98</code></a>).</li>
</ul>
<h2>2.8.3</h2>
<ul>
<li><strong>FIX</strong>: Fix inefficient attribute pattern.</li>
</ul>
<h2>2.8.2</h2>
<ul>
<li><strong>FIX</strong>: Ensure custom selectors or namespace
dictionaries reject non-string keys (<a
href="https://github.com/mundanevision20"><code>@​mundanevision20</code></a>).</li>
<li><strong>FIX</strong>: Fix handling of <code>:in-range</code> and
<code>:out-of-range</code> with end of year weeks (<a
href="https://github.com/mundanevision20"><code>@​mundanevision20</code></a>).</li>
<li><strong>FIX</strong>: Fix a potential infinite loop in the pretty
printing debug function (<a
href="https://github.com/mundanevision20"><code>@​mundanevision20</code></a>).</li>
</ul>
<h2>2.8.1</h2>
<ul>
<li><strong>FIX</strong>: Changes in tests to accommodate latest Python
HTML parser changes.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="28108ab805"><code>28108ab</code></a>
Limit excessive selectors</li>
<li><a
href="ef188721d6"><code>ef18872</code></a>
Fix test for Windows</li>
<li><a
href="eb43976187"><code>eb43976</code></a>
Merge commit from fork</li>
<li><a
href="3a661b23b2"><code>3a661b2</code></a>
Fix typo in pseudo-classes.md (<a
href="https://redirect.github.com/facelessuser/soupsieve/issues/294">#294</a>)</li>
<li><a
href="0cb533d83b"><code>0cb533d</code></a>
Update hatchling version requirement in pyproject.toml (<a
href="https://redirect.github.com/facelessuser/soupsieve/issues/290">#290</a>)</li>
<li><a
href="5aedc41804"><code>5aedc41</code></a>
Update doc theme</li>
<li><a
href="d7c47842a4"><code>d7c4784</code></a>
Attribute pattern fix (<a
href="https://redirect.github.com/facelessuser/soupsieve/issues/289">#289</a>)</li>
<li><a
href="09e106dc0f"><code>09e106d</code></a>
Fix grammar</li>
<li><a
href="09b27696ad"><code>09b2769</code></a>
Update docs</li>
<li><a
href="c6e80fcab9"><code>c6e80fc</code></a>
Various fixes by <a
href="https://github.com/mundanevision20"><code>@​mundanevision20</code></a>
(<a
href="https://redirect.github.com/facelessuser/soupsieve/issues/288">#288</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/facelessuser/soupsieve/compare/2.8...2.8.4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=soupsieve&package-manager=uv&previous-version=2.8&new-version=2.8.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/langchain-ai/langchain/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-13 23:41:29 -07:00
dependabot[bot]
4e57abd4ce chore: bump nltk from 3.9.4 to 3.10.0 in /libs/text-splitters (#38747)
Bumps [nltk](https://github.com/nltk/nltk) from 3.9.4 to 3.10.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/nltk/nltk/releases">nltk's
releases</a>.</em></p>
<blockquote>
<h2>v3.10.0-rc1</h2>
<h2>What's Changed</h2>
<ul>
<li>CHILDES corpus reader: lazy loading (fixes <a
href="https://redirect.github.com/nltk/nltk/issues/1340">#1340</a>) by
<a href="https://github.com/nschneid"><code>@​nschneid</code></a> in <a
href="https://redirect.github.com/nltk/nltk/pull/1341">nltk/nltk#1341</a></li>
<li>Stanseg by <a
href="https://github.com/casperlehmann"><code>@​casperlehmann</code></a>
in <a
href="https://redirect.github.com/nltk/nltk/pull/1350">nltk/nltk#1350</a></li>
<li>Add optional CCG semantics computation by <a
href="https://github.com/tanin47"><code>@​tanin47</code></a> in <a
href="https://redirect.github.com/nltk/nltk/pull/1321">nltk/nltk#1321</a></li>
<li>address of free software foundation updated by <a
href="https://github.com/Lightyagami1"><code>@​Lightyagami1</code></a>
in <a
href="https://redirect.github.com/nltk/nltk/pull/1347">nltk/nltk#1347</a></li>
<li>Added a verification for empty tokens by <a
href="https://github.com/gnardari"><code>@​gnardari</code></a> in <a
href="https://redirect.github.com/nltk/nltk/pull/1353">nltk/nltk#1353</a></li>
<li>use data.load for vader lexicon by <a
href="https://github.com/afgiel"><code>@​afgiel</code></a> in <a
href="https://redirect.github.com/nltk/nltk/pull/1303">nltk/nltk#1303</a></li>
<li>Ensure that proper exceptions are caught correctly by <a
href="https://github.com/pombredanne"><code>@​pombredanne</code></a> in
<a
href="https://redirect.github.com/nltk/nltk/pull/1343">nltk/nltk#1343</a></li>
<li>Reset CCGVar everytime we invoke lexicon.fromstring() and skip the
unicode test because it fails on python2.7 by <a
href="https://github.com/tanin47"><code>@​tanin47</code></a> in <a
href="https://redirect.github.com/nltk/nltk/pull/1354">nltk/nltk#1354</a></li>
<li>Add tanin as an author :) by <a
href="https://github.com/tanin47"><code>@​tanin47</code></a> in <a
href="https://redirect.github.com/nltk/nltk/pull/1355">nltk/nltk#1355</a></li>
<li>framenet.py: remove unnecessary str() call that causes problems for
names with Unicode characters by <a
href="https://github.com/nschneid"><code>@​nschneid</code></a> in <a
href="https://redirect.github.com/nltk/nltk/pull/1360">nltk/nltk#1360</a></li>
<li>remove <code>u</code> because it doesn't work in Python 3.0 to 3.2
by <a href="https://github.com/tanin47"><code>@​tanin47</code></a> in <a
href="https://redirect.github.com/nltk/nltk/pull/1362">nltk/nltk#1362</a></li>
<li>moved the import for dispersion_plot out of the else block by <a
href="https://github.com/dennisobrien"><code>@​dennisobrien</code></a>
in <a
href="https://redirect.github.com/nltk/nltk/pull/1364">nltk/nltk#1364</a></li>
<li>Raise warning for infinite recursion by <a
href="https://github.com/alvations"><code>@​alvations</code></a> in <a
href="https://redirect.github.com/nltk/nltk/pull/1365">nltk/nltk#1365</a></li>
<li>Patch None TypeError in align_blocks() by <a
href="https://github.com/alvations"><code>@​alvations</code></a> in <a
href="https://redirect.github.com/nltk/nltk/pull/1366">nltk/nltk#1366</a></li>
<li>Safer try-except for catching infinite recursion by <a
href="https://github.com/alvations"><code>@​alvations</code></a> in <a
href="https://redirect.github.com/nltk/nltk/pull/1368">nltk/nltk#1368</a></li>
<li>Collections refactor by <a
href="https://github.com/nschneid"><code>@​nschneid</code></a> in <a
href="https://redirect.github.com/nltk/nltk/pull/1382">nltk/nltk#1382</a></li>
<li>Handles fringe cases in BLEU by <a
href="https://github.com/alvations"><code>@​alvations</code></a> in <a
href="https://redirect.github.com/nltk/nltk/pull/1383">nltk/nltk#1383</a></li>
<li>Allow specifying substitution cost in edit distance by <a
href="https://github.com/dnc1994"><code>@​dnc1994</code></a> in <a
href="https://redirect.github.com/nltk/nltk/pull/1386">nltk/nltk#1386</a></li>
<li>Pl196x fixes by <a
href="https://github.com/pkasprzyk"><code>@​pkasprzyk</code></a> in <a
href="https://redirect.github.com/nltk/nltk/pull/1359">nltk/nltk#1359</a></li>
<li>Docs/ngrams by <a
href="https://github.com/ColCarroll"><code>@​ColCarroll</code></a> in <a
href="https://redirect.github.com/nltk/nltk/pull/1403">nltk/nltk#1403</a></li>
<li>Fix conll.py by <a
href="https://github.com/germanferrero"><code>@​germanferrero</code></a>
in <a
href="https://redirect.github.com/nltk/nltk/pull/1402">nltk/nltk#1402</a></li>
<li>Aline by <a
href="https://github.com/geoffbacon"><code>@​geoffbacon</code></a> in <a
href="https://redirect.github.com/nltk/nltk/pull/1407">nltk/nltk#1407</a></li>
<li>Handle empty files in a corpus by <a
href="https://github.com/alexisdimi"><code>@​alexisdimi</code></a> in <a
href="https://redirect.github.com/nltk/nltk/pull/1411">nltk/nltk#1411</a></li>
<li>fixed bug: StackDecoder would throw exception if it's unable to
finish… by <a href="https://github.com/hikui"><code>@​hikui</code></a>
in <a
href="https://redirect.github.com/nltk/nltk/pull/1405">nltk/nltk#1405</a></li>
<li>add hikui to authors by <a
href="https://github.com/hikui"><code>@​hikui</code></a> in <a
href="https://redirect.github.com/nltk/nltk/pull/1412">nltk/nltk#1412</a></li>
<li>removes download-cache pip flag from tox config by <a
href="https://github.com/fievelk"><code>@​fievelk</code></a> in <a
href="https://redirect.github.com/nltk/nltk/pull/1415">nltk/nltk#1415</a></li>
<li>Added three tokenizers, one detokenizer and two tokenizer-related
word/char list corpora by <a
href="https://github.com/alvations"><code>@​alvations</code></a> in <a
href="https://redirect.github.com/nltk/nltk/pull/1282">nltk/nltk#1282</a></li>
<li>Much faster Vader sentiment tagging by <a
href="https://github.com/georgeberry"><code>@​georgeberry</code></a> in
<a
href="https://redirect.github.com/nltk/nltk/pull/1409">nltk/nltk#1409</a></li>
<li>Fixes doctest in is_cjk() and REPP tokenizer wrapper by <a
href="https://github.com/alvations"><code>@​alvations</code></a> in <a
href="https://redirect.github.com/nltk/nltk/pull/1420">nltk/nltk#1420</a></li>
<li>Fixed doctest for UnicharsCorpusReader and
NonbreakingPrefixesCorpusReader by <a
href="https://github.com/alvations"><code>@​alvations</code></a> in <a
href="https://redirect.github.com/nltk/nltk/pull/1422">nltk/nltk#1422</a></li>
<li>Updated senna version in docstring by <a
href="https://github.com/alvations"><code>@​alvations</code></a> in <a
href="https://redirect.github.com/nltk/nltk/pull/1431">nltk/nltk#1431</a></li>
<li>Removes Python 2.6 and Python 3.1-3.3 code, Improves Python 3.5
syntax by <a href="https://github.com/adamn"><code>@​adamn</code></a> in
<a
href="https://redirect.github.com/nltk/nltk/pull/1429">nltk/nltk#1429</a></li>
<li>Cleanup by <a
href="https://github.com/dimazest"><code>@​dimazest</code></a> in <a
href="https://redirect.github.com/nltk/nltk/pull/1432">nltk/nltk#1432</a></li>
<li>Fix zero division &amp; log(0) in PunktTrainer._col_log_likelihood
by <a
href="https://github.com/mrecachinas"><code>@​mrecachinas</code></a> in
<a
href="https://redirect.github.com/nltk/nltk/pull/1247">nltk/nltk#1247</a></li>
<li>Update stanford_segmenter.py by <a
href="https://github.com/janissl"><code>@​janissl</code></a> in <a
href="https://redirect.github.com/nltk/nltk/pull/1444">nltk/nltk#1444</a></li>
<li>explained data format for constructor by <a
href="https://github.com/drevicko"><code>@​drevicko</code></a> in <a
href="https://redirect.github.com/nltk/nltk/pull/1450">nltk/nltk#1450</a></li>
<li>Use a more efficient idiom for flattening nested lists by <a
href="https://github.com/rmalouf"><code>@​rmalouf</code></a> in <a
href="https://redirect.github.com/nltk/nltk/pull/1447">nltk/nltk#1447</a></li>
<li>improved documentation of load_array() by <a
href="https://github.com/drevicko"><code>@​drevicko</code></a> in <a
href="https://redirect.github.com/nltk/nltk/pull/1452">nltk/nltk#1452</a></li>
<li>changed &quot;list or iterator&quot; to &quot;sequence&quot; by <a
href="https://github.com/drevicko"><code>@​drevicko</code></a> in <a
href="https://redirect.github.com/nltk/nltk/pull/1453">nltk/nltk#1453</a></li>
<li>Deal gracefully with degenerate cases. by <a
href="https://github.com/drevicko"><code>@​drevicko</code></a> in <a
href="https://redirect.github.com/nltk/nltk/pull/1454">nltk/nltk#1454</a></li>
<li>deal with (hopefully) all degenerate cases by <a
href="https://github.com/drevicko"><code>@​drevicko</code></a> in <a
href="https://redirect.github.com/nltk/nltk/pull/1455">nltk/nltk#1455</a></li>
<li>Enable unordered comparison for gaac clustering by <a
href="https://github.com/alvations"><code>@​alvations</code></a> in <a
href="https://redirect.github.com/nltk/nltk/pull/1456">nltk/nltk#1456</a></li>
<li>Rewrite porter.py by <a
href="https://github.com/ExplodingCabbage"><code>@​ExplodingCabbage</code></a>
in <a
href="https://redirect.github.com/nltk/nltk/pull/1261">nltk/nltk#1261</a></li>
<li>Update naivebayes.py by <a
href="https://github.com/andyreagan"><code>@​andyreagan</code></a> in <a
href="https://redirect.github.com/nltk/nltk/pull/1461">nltk/nltk#1461</a></li>
<li>Fixes bug where download status not returned. by <a
href="https://github.com/nsfabina"><code>@​nsfabina</code></a> in <a
href="https://redirect.github.com/nltk/nltk/pull/1468">nltk/nltk#1468</a></li>
<li>Use lcon and rcon variables in conllned() when trace is False -
Issue <a
href="https://redirect.github.com/nltk/nltk/issues/1474">#1474</a> by <a
href="https://github.com/timleslie"><code>@​timleslie</code></a> in <a
href="https://redirect.github.com/nltk/nltk/pull/1475">nltk/nltk#1475</a></li>
<li>Use shutil.copyfileobj for unzipping by <a
href="https://github.com/ikorolev93"><code>@​ikorolev93</code></a> in <a
href="https://redirect.github.com/nltk/nltk/pull/1478">nltk/nltk#1478</a></li>
<li>Fixing Chen&amp;Cherry method 6 smoothing in BLEU score by <a
href="https://github.com/alvations"><code>@​alvations</code></a> in <a
href="https://redirect.github.com/nltk/nltk/pull/1477">nltk/nltk#1477</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/nltk/nltk/blob/develop/ChangeLog">nltk's
changelog</a>.</em></p>
<blockquote>
<p>Version 3.10.0 2026-06-11</p>
<ul>
<li>Enforce the stricter <code>nltk.pathsec</code> security policy by
default</li>
<li>Document the new security model and migration guidance</li>
<li>Harden resource loading against path traversal and
SSRF/DNS-rebinding</li>
<li>Harden downloader path handling and block XML entity expansion</li>
<li>Close remaining corpus-reader security edge cases</li>
<li>Replace unsafe <code>exec()</code> usage in the utility CLI</li>
<li>Warn on unpickling user-provided pickles</li>
<li>Add HuggingFace datasets integration
(<code>nltk.huggingface</code>)</li>
<li>Align TnT with Brants (2000) specifications</li>
<li>Fix PorterStemmer irregular-form lowercasing in NLTK mode</li>
<li>Fix TransitionParser sparse index dtype for scikit-learn 1.9</li>
<li>Fix TextCat tie handling</li>
<li>Fix WordNet object comparisons for incompatible types</li>
<li>Cache WordNet max depth lazily for
<code>lch_similarity()</code></li>
<li>Fix CCG variable direction, substitution, and type-raising bugs</li>
<li>Fix Jaro similarity for single-character and empty-string cases</li>
<li>Improve CI and release-maintenance workflows</li>
</ul>
<p>Thanks to the following contributors to 3.10.0:
13rac1, alvations, bowiechen, devesh-2002, ekaf, elias-ba,
haosenwang1018, HyperPS, ihitamandal, jancallewaert, jhnwnstd,
JuanIMartinezB, Lemm1, LinZiyuu, Mr-Neutr0n, PastelStorm,
scruge1, Syzygy2048, ylwango613, yzhaoinuw</p>
<p>Version 3.9.4 2026-03-24</p>
<ul>
<li>Support Python 3.14</li>
<li>Fix bug in Levenshtein distance when substitution_cost &gt; 2</li>
<li>Fix bug in Treebank detokeniser re quote ordering</li>
<li>Fix bug in Jaro similarity for empty strings</li>
<li>Several security enhancements</li>
<li>Fix GHSA-rf74-v2fm-23pw: unbounded recursion in
JSONTaggedDecoder</li>
<li>Implement TextTiling vocabulary introduction method (Hearst
1997)</li>
<li>Fix ALINE feature matrix errors and add comprehensive tests</li>
<li>Support multiple VerbNet versions, fix longid/shortid regex for
VerbNet ids</li>
<li>Let downloader fallback to md5 when sha256 is unavailable</li>
<li>Several other minor bugfixes and code cleanups</li>
</ul>
<p>Thanks to the following contributors to 3.9.4:
Min-Yen Kan, Eric Kafe, Emily Voss, bowiechen, Hrudhai01,
jancallewaert, Mr-Neutr0n, pollak.peter89, ylwango613,</p>
<p>Version 3.9.3 2026-02-21</p>
<ul>
<li>Fix CVE-2025-14009: secure ZIP extraction in nltk.downloader (<a
href="https://redirect.github.com/nltk/nltk/issues/3468">#3468</a>)</li>
<li>Block path traversal/arbitrary reads in nltk.data for protocol-less
refs (<a
href="https://redirect.github.com/nltk/nltk/issues/3467">#3467</a>)</li>
<li>Block path traversal/abs paths in corpus readers and FS pointers (<a
href="https://redirect.github.com/nltk/nltk/issues/3479">#3479</a>, <a
href="https://redirect.github.com/nltk/nltk/issues/3480">#3480</a>)</li>
<li>Validate external StanfordSegmenter JARs using SHA256 (<a
href="https://redirect.github.com/nltk/nltk/issues/3477">#3477</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="bd49f9011d"><code>bd49f90</code></a>
allow escaped brackets in Tree.fromstring (<a
href="https://redirect.github.com/nltk/nltk/issues/3694">#3694</a>)</li>
<li><a
href="27b8ad6cd5"><code>27b8ad6</code></a>
don't crash chomsky_normal_form on terminals with siblings (<a
href="https://redirect.github.com/nltk/nltk/issues/3693">#3693</a>)</li>
<li><a
href="52227d2afe"><code>52227d2</code></a>
Use os.name for Windows path handling (<a
href="https://redirect.github.com/nltk/nltk/issues/3605">#3605</a>)</li>
<li><a
href="06c0e2cc94"><code>06c0e2c</code></a>
Avoid RIBES zero division on empty inputs (<a
href="https://redirect.github.com/nltk/nltk/issues/3604">#3604</a>)</li>
<li><a
href="a167389c02"><code>a167389</code></a>
Treat missing unzip output as stale (<a
href="https://redirect.github.com/nltk/nltk/issues/3607">#3607</a>)</li>
<li><a
href="c94c967a33"><code>c94c967</code></a>
Fix EOF empty document bug in IEER corpus reader (<a
href="https://redirect.github.com/nltk/nltk/issues/3648">#3648</a>)</li>
<li><a
href="94a259c815"><code>94a259c</code></a>
Enforce restrictive primitive type checking in pathsec wrappers (<a
href="https://redirect.github.com/nltk/nltk/issues/3692">#3692</a>)</li>
<li><a
href="5ac475d2ab"><code>5ac475d</code></a>
fix(security): isolate Stanford Java options and clean temp files (<a
href="https://redirect.github.com/nltk/nltk/issues/3683">#3683</a>)</li>
<li><a
href="986f26e71b"><code>986f26e</code></a>
ci(deps): bump the github-actions group with 3 updates (<a
href="https://redirect.github.com/nltk/nltk/issues/3691">#3691</a>)</li>
<li><a
href="f26b375303"><code>f26b375</code></a>
fix(security): prevent pickle RCE in TransitionParser model loading
(CWE-502)...</li>
<li>Additional commits viewable in <a
href="https://github.com/nltk/nltk/compare/3.9.4...v3.10.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=nltk&package-manager=uv&previous-version=3.9.4&new-version=3.10.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/langchain-ai/langchain/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-13 23:41:23 -07:00
dependabot[bot]
3e983cb8f9 chore: bump mistune from 3.2.1 to 3.3.0 in /libs/text-splitters (#38826)
Bumps [mistune](https://github.com/lepture/mistune) from 3.2.1 to 3.3.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/lepture/mistune/releases">mistune's
releases</a>.</em></p>
<blockquote>
<h2>v3.3.0</h2>
<h3>   🐞 Bug Fixes</h3>
<ul>
<li>Resolve O(n^2) DoS in parse_link_text (CWE-400)  -  by
<strong>bhanugoudm041</strong> <a
href="https://github.com/lepture/mistune/commit/b6b499d"><!-- raw HTML
omitted -->(b6b49)<!-- raw HTML omitted --></a></li>
<li>Resolve O(n^2) DoS in parse_link_text (CWE-400)-Type
handling/testing done  -  by <strong>bhanugoudm041</strong> <a
href="https://github.com/lepture/mistune/commit/b3af85d"><!-- raw HTML
omitted -->(b3af8)<!-- raw HTML omitted --></a></li>
<li><strong>block</strong>: Avoid quadratic ref link scans  -  by <a
href="https://github.com/lepture"><code>@​lepture</code></a> <a
href="https://github.com/lepture/mistune/commit/2b04d7b"><!-- raw HTML
omitted -->(2b04d)<!-- raw HTML omitted --></a></li>
<li><strong>cli</strong>: Add entrypoint and utf-8 output  -  by <a
href="https://github.com/lepture"><code>@​lepture</code></a> <a
href="https://github.com/lepture/mistune/commit/2f2449d"><!-- raw HTML
omitted -->(2f244)<!-- raw HTML omitted --></a></li>
<li><strong>directives</strong>: Constrain include targets  -  by <a
href="https://github.com/lepture"><code>@​lepture</code></a> <a
href="https://github.com/lepture/mistune/commit/1bef343"><!-- raw HTML
omitted -->(1bef3)<!-- raw HTML omitted --></a></li>
<li><strong>formatting</strong>: Avoid quadratic marker scans  -  by <a
href="https://github.com/lepture"><code>@​lepture</code></a> <a
href="https://github.com/lepture/mistune/commit/96d0f57"><!-- raw HTML
omitted -->(96d0f)<!-- raw HTML omitted --></a></li>
<li><strong>image</strong>: Validate figure width option  -  by <a
href="https://github.com/lepture"><code>@​lepture</code></a> <a
href="https://github.com/lepture/mistune/commit/e3e51de"><!-- raw HTML
omitted -->(e3e51)<!-- raw HTML omitted --></a></li>
<li><strong>inline</strong>: Avoid bracket parsing DoS  -  by <a
href="https://github.com/lepture"><code>@​lepture</code></a> <a
href="https://github.com/lepture/mistune/commit/25f2503"><!-- raw HTML
omitted -->(25f25)<!-- raw HTML omitted --></a></li>
<li><strong>math</strong>: Reject currency patterns and cross-line
matches in inline math  -  by <a
href="https://github.com/geopanther"><code>@​geopanther</code></a> <a
href="https://github.com/lepture/mistune/commit/566e173"><!-- raw HTML
omitted -->(566e1)<!-- raw HTML omitted --></a></li>
<li><strong>math</strong>: Support display and backtick math  -  by <a
href="https://github.com/lepture"><code>@​lepture</code></a> <a
href="https://github.com/lepture/mistune/commit/1141eec"><!-- raw HTML
omitted -->(1141e)<!-- raw HTML omitted --></a></li>
<li><strong>renderer</strong>: Render plugin list and table nodes  -  by
<a href="https://github.com/lepture"><code>@​lepture</code></a> <a
href="https://github.com/lepture/mistune/commit/614b019"><!-- raw HTML
omitted -->(614b0)<!-- raw HTML omitted --></a></li>
<li><strong>renderer</strong>: Block encoded unsafe URL schemes  -  by
<a href="https://github.com/lepture"><code>@​lepture</code></a> <a
href="https://github.com/lepture/mistune/commit/c7101fc"><!-- raw HTML
omitted -->(c7101)<!-- raw HTML omitted --></a></li>
<li><strong>toc</strong>: Avoid generated id collisions  -  by <a
href="https://github.com/lepture"><code>@​lepture</code></a> <a
href="https://github.com/lepture/mistune/commit/c4093c4"><!-- raw HTML
omitted -->(c4093)<!-- raw HTML omitted --></a></li>
</ul>
<h3>   🏎 Performance</h3>
<ul>
<li>Improve performance  -  by <a
href="https://github.com/lepture"><code>@​lepture</code></a> <a
href="https://github.com/lepture/mistune/commit/bf95c32"><!-- raw HTML
omitted -->(bf95c)<!-- raw HTML omitted --></a></li>
</ul>
<h5>    <a
href="https://github.com/lepture/mistune/compare/v3.2.1...v3.3.0">View
changes on GitHub</a></h5>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/lepture/mistune/blob/main/docs/changes.rst">mistune's
changelog</a>.</em></p>
<blockquote>
<h2>Version 3.3.0</h2>
<p><strong>Released on Jun 21, 2026</strong></p>
<ul>
<li>Improve CommonMark compatibility and parser performance.</li>
<li>Add command line entrypoint with UTF-8 output.</li>
<li>Support display and backtick math.</li>
<li>Render plugin list and table nodes in Markdown renderer.</li>
<li>Escape leading block markers in Markdown renderer.</li>
<li>Fix RST renderer for block quotes nested in lists.</li>
<li>Avoid generated heading ID collisions in TOC.</li>
<li>Harden URL, image, figure, and include directive handling.</li>
<li>Fix quadratic scans in inline links, reference links, and formatting
markers.</li>
<li>Fix math escaping, currency pattern matching, and cross-line
matching.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="15c3b79325"><code>15c3b79</code></a>
chore: release 3.3.0</li>
<li><a
href="bdc01ade17"><code>bdc01ad</code></a>
tests: increase run time on pypy</li>
<li><a
href="7cf181483e"><code>7cf1814</code></a>
tests: increase run time for pypy</li>
<li><a
href="6dfdc3dae4"><code>6dfdc3d</code></a>
tests: add more tests</li>
<li><a
href="17c50f6c05"><code>17c50f6</code></a>
chore: fix mypy issues</li>
<li><a
href="63abe4b8e9"><code>63abe4b</code></a>
chore: use ruff check and format</li>
<li><a
href="e6c1b18446"><code>e6c1b18</code></a>
chore: resolve mypy issues</li>
<li><a
href="dcf89020c1"><code>dcf8902</code></a>
test(math): cover escaped math output</li>
<li><a
href="c4093c4742"><code>c4093c4</code></a>
fix(toc): avoid generated id collisions</li>
<li><a
href="e3e51de9cf"><code>e3e51de</code></a>
fix(image): validate figure width option</li>
<li>Additional commits viewable in <a
href="https://github.com/lepture/mistune/compare/v3.2.1...v3.3.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=mistune&package-manager=uv&previous-version=3.2.1&new-version=3.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/langchain-ai/langchain/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-14 00:40:10 -04:00
dependabot[bot]
0076f37716 chore: bump vcrpy from 8.2.1 to 8.3.0 in /libs/standard-tests (#38827)
Bumps [vcrpy](https://github.com/kevin1024/vcrpy) from 8.2.1 to 8.3.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/kevin1024/vcrpy/releases">vcrpy's
releases</a>.</em></p>
<blockquote>
<h2>v8.3.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Add support for niquests (<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/980">#980</a>)
— thanks <a
href="https://github.com/ionelmc"><code>@​ionelmc</code></a></li>
<li>Recording now fails fast if a request or response contains a Python
object the safe YAML loader (introduced in 8.2.1) couldn't read back,
instead of writing a cassette that breaks on replay. The error shows
exactly how to register the object if you need it (<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/1007">#1007</a>,
<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/1009">#1009</a>)
— thanks <a
href="https://github.com/Polandia94"><code>@​Polandia94</code></a></li>
<li>New
<code>vcr.serializers.yamlserializer.with_custom_tags(...)</code> builds
a YAML serializer supporting custom Python object tags on both record
and replay, registered per VCR instance via
<code>register_serializer</code> (<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/1007">#1007</a>,
<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/1009">#1009</a>)
— thanks <a
href="https://github.com/Polandia94"><code>@​Polandia94</code></a></li>
<li>Clearer error when a cassette contains an unsupported YAML tag, and
the stale git.io migration link is gone (<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/1007">#1007</a>,
<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/1008">#1008</a>)
— thanks <a
href="https://github.com/gaoflow"><code>@​gaoflow</code></a></li>
<li>Fix stale keep-alive connection reuse across cassettes; unpin
werkzeug (<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/1001">#1001</a>)</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/kevin1024/vcrpy/compare/v8.2.1...v8.3.0">https://github.com/kevin1024/vcrpy/compare/v8.2.1...v8.3.0</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/kevin1024/vcrpy/blob/master/docs/changelog.rst">vcrpy's
changelog</a>.</em></p>
<blockquote>
<h2>Changelog</h2>
<p>All help in providing PRs to close out bug issues is appreciated.
Even if that is providing a repo that fully replicates issues. We have
very generous contributors that have added these to bug issues which
meant another contributor picked up the bug and closed it out.</p>
<ul>
<li>
<p>8.3.0</p>
<ul>
<li>Add support for niquests (<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/980">#980</a>)
- thanks <a
href="https://github.com/ionelmc"><code>@​ionelmc</code></a></li>
<li>Refuse to record a cassette containing a Python object the safe YAML
loader could not read back, so recording fails fast instead of producing
a cassette that breaks on replay (<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/1007">#1007</a>,
<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/1009">#1009</a>)
- thanks <a
href="https://github.com/Polandia94"><code>@​Polandia94</code></a></li>
<li>Add <code>vcr.serializers.yamlserializer.with_custom_tags</code> to
build a YAML serializer supporting custom Python object tags on both
record and replay, registered per VCR instance via
<code>register_serializer</code> (<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/1007">#1007</a>,
<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/1009">#1009</a>)
- thanks <a
href="https://github.com/Polandia94"><code>@​Polandia94</code></a></li>
<li>Clearer error when a cassette contains an unsupported YAML tag, and
remove the stale git.io migration link (<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/1007">#1007</a>,
<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/1008">#1008</a>)
- thanks <a
href="https://github.com/gaoflow"><code>@​gaoflow</code></a></li>
<li>Fix stale keep-alive connection reuse across cassettes; unpin
werkzeug (<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/1001">#1001</a>)</li>
</ul>
</li>
<li>
<p>8.2.1</p>
<ul>
<li>SECURITY: Load cassettes with a safe YAML loader, preventing
arbitrary code execution when a cassette from an untrusted source is
loaded (GHSA-rpj2-4hq8-938g) - thanks <a
href="https://github.com/RamiAltai"><code>@​RamiAltai</code></a> and <a
href="https://github.com/EQSTLab"><code>@​EQSTLab</code></a></li>
<li>Validate <code>record_mode</code> and raise a clear error on an
invalid value (<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/208">#208</a>)</li>
<li>Recommend pytest-recording over the unmaintained pytest-vcr in the
docs (<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/986">#986</a>)</li>
</ul>
</li>
<li>
<p>8.2.0</p>
<ul>
<li>Add support for httpx 2.x (<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/993">#993</a>)
- thanks <a
href="https://github.com/dsfaccini"><code>@​dsfaccini</code></a></li>
<li>Patch httpx transports instead of httpcore (<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/972">#972</a>)
- thanks <a
href="https://github.com/seowalex"><code>@​seowalex</code></a></li>
<li>Fix aiohttp 3.14 compatibility: <code>AsyncStreamReaderMixin</code>
removed and <code>ClientResponse</code> now requires
<code>stream_writer</code> (<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/995">#995</a>)
- thanks <a
href="https://github.com/dsfaccini"><code>@​dsfaccini</code></a></li>
<li>Account for modified requests when storing played cassettes, so
<code>drop_unused_requests</code> honours
<code>before_record_request</code> filtering (<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/962">#962</a>)
- thanks <a
href="https://github.com/jamesbraza"><code>@​jamesbraza</code></a></li>
<li>Make the request URL available on <code>VCRHTTPResponse</code> (<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/976">#976</a>)
- thanks <a
href="https://github.com/dAnjou"><code>@​dAnjou</code></a></li>
<li>Improve error message when a matching request has already been
consumed (<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/985">#985</a>)
- thanks <a
href="https://github.com/Polandia94"><code>@​Polandia94</code></a></li>
<li>Fix body check in <code>convert_body_to_unicode</code> to use an
explicit type check (<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/982">#982</a>)
- thanks <a
href="https://github.com/Polandia94"><code>@​Polandia94</code></a></li>
<li>Add env proxy cassette regression test (<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/994">#994</a>)
- thanks <a
href="https://github.com/tine1117"><code>@​tine1117</code></a></li>
<li>Remove milestone references from docs (<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/984">#984</a>)
- thanks <a
href="https://github.com/Polandia94"><code>@​Polandia94</code></a></li>
<li>CI: bump sphinx-rtd-theme from 3.0.2 to 3.1.0 (<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/973">#973</a>)</li>
</ul>
</li>
<li>
<p>8.1.1</p>
<ul>
<li>Fix sync requests in async contexts for HTTPX (<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/965">#965</a>)
- thanks <a
href="https://github.com/seowalex"><code>@​seowalex</code></a></li>
<li>CI: bump peter-evans/create-pull-request from 7 to 8 (<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/969">#969</a>)</li>
</ul>
</li>
<li>
<p>8.1.0</p>
<ul>
<li>Enable brotli decompression if available (via <code>brotli</code>,
<code>brotlipy</code> or <code>brotlicffi</code>) (<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/620">#620</a>)
- thanks <a
href="https://github.com/immerrr"><code>@​immerrr</code></a></li>
<li>Fix aiohttp allowing both <code>data</code> and <code>json</code>
arguments when one is None (<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/624">#624</a>)
- thanks <a
href="https://github.com/leorochael"><code>@​leorochael</code></a></li>
<li>Fix usage of io-like interface with VCR.py (<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/906">#906</a>)
- thanks <a href="https://github.com/tito"><code>@​tito</code></a> and
<a href="https://github.com/kevdevg"><code>@​kevdevg</code></a></li>
<li>Migrate to declarative Python package config (<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/767">#767</a>)
- thanks <a
href="https://github.com/deronnax"><code>@​deronnax</code></a></li>
<li>Various linting fixes - thanks <a
href="https://github.com/jairhenrique"><code>@​jairhenrique</code></a></li>
<li>CI: bump actions/checkout from 5 to 6 (<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/955">#955</a>)</li>
</ul>
</li>
<li>
<p>8.0.0</p>
<ul>
<li>BREAKING: Drop support for Python 3.9 (major version bump) - thanks
<a
href="https://github.com/jairhenrique"><code>@​jairhenrique</code></a></li>
<li>BREAKING: Drop support for urllib3 &lt; 2 - fixes CVE warnings from
urllib3 1.x (<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/926">#926</a>,
<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/880">#880</a>)
- thanks <a
href="https://github.com/jairhenrique"><code>@​jairhenrique</code></a></li>
<li>New feature: <code>drop_unused_requests</code> option to remove
unused interactions from cassettes (<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/763">#763</a>)
- thanks <a
href="https://github.com/danielnsilva"><code>@​danielnsilva</code></a></li>
<li>Rewrite httpx support to patch httpcore instead of httpx (<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/943">#943</a>)
- thanks <a
href="https://github.com/seowalex"><code>@​seowalex</code></a>
<ul>
<li>Fixes <code>httpx.ResponseNotRead</code> exceptions (<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/832">#832</a>,
<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/834">#834</a>)</li>
<li>Fixes <code>KeyError: 'follow_redirects'</code> (<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/945">#945</a>)</li>
<li>Adds support for custom httpx transports</li>
</ul>
</li>
<li>Fix HTTPS proxy handling - proxy address no longer ends up in
cassette URIs (<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/809">#809</a>,
<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/914">#914</a>)
- thanks <a href="https://github.com/alga"><code>@​alga</code></a></li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c599974b31"><code>c599974</code></a>
Release v8.3.0</li>
<li><a
href="68cbe595ba"><code>68cbe59</code></a>
Show how to register a custom object in the cassette-not-saved
error</li>
<li><a
href="7a898b54c9"><code>7a898b5</code></a>
Refuse to record cassettes the safe YAML loader can't read back (<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/1012">#1012</a>)</li>
<li><a
href="1421b36362"><code>1421b36</code></a>
fix: show descriptive error when cassette contains unsupported YAML tags
(<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/1008">#1008</a>)</li>
<li><a
href="b1fb62bf47"><code>b1fb62b</code></a>
Merge pull request <a
href="https://redirect.github.com/kevin1024/vcrpy/issues/1000">#1000</a>
from kevin1024/dependabot/pre_commit/https-/github.c...</li>
<li><a
href="9e741174c7"><code>9e74117</code></a>
Fix stale keep-alive connection reuse; unpin werkzeug (<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/1001">#1001</a>)</li>
<li><a
href="30a721d400"><code>30a721d</code></a>
Loosen up some things to allow vcrpy to work with niquests (<a
href="https://redirect.github.com/kevin1024/vcrpy/issues/980">#980</a>)</li>
<li><a
href="393e349ad5"><code>393e349</code></a>
build(deps): bump <a
href="https://github.com/astral-sh/ruff-pre-commit">https://github.com/astral-sh/ruff-pre-commit</a></li>
<li>See full diff in <a
href="https://github.com/kevin1024/vcrpy/compare/v8.2.1...v8.3.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=vcrpy&package-manager=uv&previous-version=8.2.1&new-version=8.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/langchain-ai/langchain/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-14 00:40:04 -04:00
dependabot[bot]
b255847eb4 chore: bump langsmith from 0.9.5 to 0.10.2 in /libs/partners/fireworks (#38830)
Bumps [langsmith](https://github.com/langchain-ai/langsmith-sdk) from
0.9.5 to 0.10.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/langsmith-sdk/releases">langsmith's
releases</a>.</em></p>
<blockquote>
<h2>v0.10.2</h2>
<h2>What's Changed</h2>
<ul>
<li>release(js): 0.8.1 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3185">langchain-ai/langsmith-sdk#3185</a></li>
<li>refactor(voice): move span attribute setters onto TranslatedSpan by
<a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3179">langchain-ai/langsmith-sdk#3179</a></li>
<li>feat: add SmithDB by-key path to add_runs_to_annotation_queue (runs=
param) [LSDK-287] by <a
href="https://github.com/ayoung19"><code>@​ayoung19</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3077">langchain-ai/langsmith-sdk#3077</a></li>
<li>refactor(livekit + pipecat): Refactor for clarity by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3187">langchain-ai/langsmith-sdk#3187</a></li>
<li>feat(py): re-export OpenAPI client exceptions from langsmith package
by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3188">langchain-ai/langsmith-sdk#3188</a></li>
<li>release(python): bump py version to 0.10.2 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3189">langchain-ai/langsmith-sdk#3189</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/ayoung19"><code>@​ayoung19</code></a>
made their first contribution in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3077">langchain-ai/langsmith-sdk#3077</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.1...v0.10.2">https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.1...v0.10.2</a></p>
<h2>v0.10.1</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: bound voice streaming audio buffers by <a
href="https://github.com/jkennedyvz"><code>@​jkennedyvz</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3169">langchain-ai/langsmith-sdk#3169</a></li>
<li>fix: escape insights report html repr by <a
href="https://github.com/corridor-security"><code>@​corridor-security</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3176">langchain-ai/langsmith-sdk#3176</a></li>
<li>chore: bump _MIN_BACKEND_VERSION to 0.16.12rc1 by <a
href="https://github.com/langtions-bot"><code>@​langtions-bot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3178">langchain-ai/langsmith-sdk#3178</a></li>
<li>Fix URL Path Injection via Unencoded Resource Names in Python
Sandbox Client (Sync) by <a
href="https://github.com/corridor-security"><code>@​corridor-security</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3177">langchain-ai/langsmith-sdk#3177</a></li>
<li>feat(js): expose openapi client error classes by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3181">langchain-ai/langsmith-sdk#3181</a></li>
<li>release(py): 0.10.1 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3184">langchain-ai/langsmith-sdk#3184</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/corridor-security"><code>@​corridor-security</code></a>[bot]
made their first contribution in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3176">langchain-ai/langsmith-sdk#3176</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.0...v0.10.1">https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.0...v0.10.1</a></p>
<h2>v0.10.0</h2>
<h2>What's Changed</h2>
<ul>
<li>chore: sync langsmith_api by <a
href="https://github.com/langtions-bot"><code>@​langtions-bot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3152">langchain-ai/langsmith-sdk#3152</a></li>
<li>release(js): bump JS SDK to 0.7.16 by <a
href="https://github.com/sineha-mani"><code>@​sineha-mani</code></a> in
<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3160">langchain-ai/langsmith-sdk#3160</a></li>
<li>feat: expose OTel-safe metadata helpers [closes LSDK-262] by <a
href="https://github.com/open-swe"><code>@​open-swe</code></a>[bot] in
<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3091">langchain-ai/langsmith-sdk#3091</a></li>
<li>feat(integrations): helpers to build LangSmith run URLs from OTel
spans [LSDK-273] by <a
href="https://github.com/harisaiharish"><code>@​harisaiharish</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3142">langchain-ai/langsmith-sdk#3142</a></li>
<li>fix(python): remove projects accessor from AsyncClient by <a
href="https://github.com/QuentinBrosse"><code>@​QuentinBrosse</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3163">langchain-ai/langsmith-sdk#3163</a></li>
<li>chore: sync langsmith_api by <a
href="https://github.com/langtions-bot"><code>@​langtions-bot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3162">langchain-ai/langsmith-sdk#3162</a></li>
<li>feat(js): Extends wrapAnthropic JS wrapper to support Claude Managed
Agents methods by <a
href="https://github.com/jacoblee93"><code>@​jacoblee93</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3155">langchain-ai/langsmith-sdk#3155</a></li>
<li>release(js): 0.7.17 by <a
href="https://github.com/jacoblee93"><code>@​jacoblee93</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3166">langchain-ai/langsmith-sdk#3166</a></li>
<li>feat(client): expose threads and traces resource accessors on Python
and JS clients by <a
href="https://github.com/QuentinBrosse"><code>@​QuentinBrosse</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3164">langchain-ai/langsmith-sdk#3164</a></li>
<li>ci: freeze pnpm environment test installs by <a
href="https://github.com/jkennedyvz"><code>@​jkennedyvz</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3168">langchain-ai/langsmith-sdk#3168</a></li>
<li>Quote sandbox client URL path segments by <a
href="https://github.com/langsmith-fleet"><code>@​langsmith-fleet</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3167">langchain-ai/langsmith-sdk#3167</a></li>
<li>release(js): 0.8.0 by <a
href="https://github.com/QuentinBrosse"><code>@​QuentinBrosse</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3171">langchain-ai/langsmith-sdk#3171</a></li>
<li>release(py): 0.10.0 by <a
href="https://github.com/QuentinBrosse"><code>@​QuentinBrosse</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3170">langchain-ai/langsmith-sdk#3170</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/langsmith-fleet"><code>@​langsmith-fleet</code></a>[bot]
made their first contribution in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3167">langchain-ai/langsmith-sdk#3167</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.9.8...v0.10.0">https://github.com/langchain-ai/langsmith-sdk/compare/v0.9.8...v0.10.0</a></p>
<h2>v0.9.8</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="687fc8d527"><code>687fc8d</code></a>
release(python): bump py version to 0.10.2 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3189">#3189</a>)</li>
<li><a
href="08cbc910be"><code>08cbc91</code></a>
feat(py): re-export OpenAPI client exceptions from langsmith package (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3188">#3188</a>)</li>
<li><a
href="d309be59b9"><code>d309be5</code></a>
refactor(livekit + pipecat): Refactor for clarity (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3187">#3187</a>)</li>
<li><a
href="2e61f54184"><code>2e61f54</code></a>
feat: add SmithDB by-key path to add_runs_to_annotation_queue (runs=
param) [...</li>
<li><a
href="fab828a2b0"><code>fab828a</code></a>
refactor(voice): move span attribute setters onto TranslatedSpan (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3179">#3179</a>)</li>
<li><a
href="2f7709cdaa"><code>2f7709c</code></a>
release(js): 0.8.1 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3185">#3185</a>)</li>
<li><a
href="6388e488ba"><code>6388e48</code></a>
release(py): 0.10.1 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3184">#3184</a>)</li>
<li><a
href="de74fb8f42"><code>de74fb8</code></a>
feat(js): expose openapi client error classes (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3181">#3181</a>)</li>
<li><a
href="6c0729a9bc"><code>6c0729a</code></a>
Fix URL Path Injection via Unencoded Resource Names in Python Sandbox
Client ...</li>
<li><a
href="996073e478"><code>996073e</code></a>
chore: bump _MIN_BACKEND_VERSION to 0.16.12rc1 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3178">#3178</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.9.5...v0.10.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=langsmith&package-manager=uv&previous-version=0.9.5&new-version=0.10.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/langchain-ai/langchain/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-13 17:58:55 -04:00
dependabot[bot]
dde88cdb49 chore: bump langsmith from 0.9.5 to 0.10.2 in /libs/partners/huggingface (#38829)
Bumps [langsmith](https://github.com/langchain-ai/langsmith-sdk) from
0.9.5 to 0.10.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/langsmith-sdk/releases">langsmith's
releases</a>.</em></p>
<blockquote>
<h2>v0.10.2</h2>
<h2>What's Changed</h2>
<ul>
<li>release(js): 0.8.1 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3185">langchain-ai/langsmith-sdk#3185</a></li>
<li>refactor(voice): move span attribute setters onto TranslatedSpan by
<a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3179">langchain-ai/langsmith-sdk#3179</a></li>
<li>feat: add SmithDB by-key path to add_runs_to_annotation_queue (runs=
param) [LSDK-287] by <a
href="https://github.com/ayoung19"><code>@​ayoung19</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3077">langchain-ai/langsmith-sdk#3077</a></li>
<li>refactor(livekit + pipecat): Refactor for clarity by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3187">langchain-ai/langsmith-sdk#3187</a></li>
<li>feat(py): re-export OpenAPI client exceptions from langsmith package
by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3188">langchain-ai/langsmith-sdk#3188</a></li>
<li>release(python): bump py version to 0.10.2 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3189">langchain-ai/langsmith-sdk#3189</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/ayoung19"><code>@​ayoung19</code></a>
made their first contribution in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3077">langchain-ai/langsmith-sdk#3077</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.1...v0.10.2">https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.1...v0.10.2</a></p>
<h2>v0.10.1</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: bound voice streaming audio buffers by <a
href="https://github.com/jkennedyvz"><code>@​jkennedyvz</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3169">langchain-ai/langsmith-sdk#3169</a></li>
<li>fix: escape insights report html repr by <a
href="https://github.com/corridor-security"><code>@​corridor-security</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3176">langchain-ai/langsmith-sdk#3176</a></li>
<li>chore: bump _MIN_BACKEND_VERSION to 0.16.12rc1 by <a
href="https://github.com/langtions-bot"><code>@​langtions-bot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3178">langchain-ai/langsmith-sdk#3178</a></li>
<li>Fix URL Path Injection via Unencoded Resource Names in Python
Sandbox Client (Sync) by <a
href="https://github.com/corridor-security"><code>@​corridor-security</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3177">langchain-ai/langsmith-sdk#3177</a></li>
<li>feat(js): expose openapi client error classes by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3181">langchain-ai/langsmith-sdk#3181</a></li>
<li>release(py): 0.10.1 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3184">langchain-ai/langsmith-sdk#3184</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/corridor-security"><code>@​corridor-security</code></a>[bot]
made their first contribution in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3176">langchain-ai/langsmith-sdk#3176</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.0...v0.10.1">https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.0...v0.10.1</a></p>
<h2>v0.10.0</h2>
<h2>What's Changed</h2>
<ul>
<li>chore: sync langsmith_api by <a
href="https://github.com/langtions-bot"><code>@​langtions-bot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3152">langchain-ai/langsmith-sdk#3152</a></li>
<li>release(js): bump JS SDK to 0.7.16 by <a
href="https://github.com/sineha-mani"><code>@​sineha-mani</code></a> in
<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3160">langchain-ai/langsmith-sdk#3160</a></li>
<li>feat: expose OTel-safe metadata helpers [closes LSDK-262] by <a
href="https://github.com/open-swe"><code>@​open-swe</code></a>[bot] in
<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3091">langchain-ai/langsmith-sdk#3091</a></li>
<li>feat(integrations): helpers to build LangSmith run URLs from OTel
spans [LSDK-273] by <a
href="https://github.com/harisaiharish"><code>@​harisaiharish</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3142">langchain-ai/langsmith-sdk#3142</a></li>
<li>fix(python): remove projects accessor from AsyncClient by <a
href="https://github.com/QuentinBrosse"><code>@​QuentinBrosse</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3163">langchain-ai/langsmith-sdk#3163</a></li>
<li>chore: sync langsmith_api by <a
href="https://github.com/langtions-bot"><code>@​langtions-bot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3162">langchain-ai/langsmith-sdk#3162</a></li>
<li>feat(js): Extends wrapAnthropic JS wrapper to support Claude Managed
Agents methods by <a
href="https://github.com/jacoblee93"><code>@​jacoblee93</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3155">langchain-ai/langsmith-sdk#3155</a></li>
<li>release(js): 0.7.17 by <a
href="https://github.com/jacoblee93"><code>@​jacoblee93</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3166">langchain-ai/langsmith-sdk#3166</a></li>
<li>feat(client): expose threads and traces resource accessors on Python
and JS clients by <a
href="https://github.com/QuentinBrosse"><code>@​QuentinBrosse</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3164">langchain-ai/langsmith-sdk#3164</a></li>
<li>ci: freeze pnpm environment test installs by <a
href="https://github.com/jkennedyvz"><code>@​jkennedyvz</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3168">langchain-ai/langsmith-sdk#3168</a></li>
<li>Quote sandbox client URL path segments by <a
href="https://github.com/langsmith-fleet"><code>@​langsmith-fleet</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3167">langchain-ai/langsmith-sdk#3167</a></li>
<li>release(js): 0.8.0 by <a
href="https://github.com/QuentinBrosse"><code>@​QuentinBrosse</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3171">langchain-ai/langsmith-sdk#3171</a></li>
<li>release(py): 0.10.0 by <a
href="https://github.com/QuentinBrosse"><code>@​QuentinBrosse</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3170">langchain-ai/langsmith-sdk#3170</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/langsmith-fleet"><code>@​langsmith-fleet</code></a>[bot]
made their first contribution in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3167">langchain-ai/langsmith-sdk#3167</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.9.8...v0.10.0">https://github.com/langchain-ai/langsmith-sdk/compare/v0.9.8...v0.10.0</a></p>
<h2>v0.9.8</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="687fc8d527"><code>687fc8d</code></a>
release(python): bump py version to 0.10.2 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3189">#3189</a>)</li>
<li><a
href="08cbc910be"><code>08cbc91</code></a>
feat(py): re-export OpenAPI client exceptions from langsmith package (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3188">#3188</a>)</li>
<li><a
href="d309be59b9"><code>d309be5</code></a>
refactor(livekit + pipecat): Refactor for clarity (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3187">#3187</a>)</li>
<li><a
href="2e61f54184"><code>2e61f54</code></a>
feat: add SmithDB by-key path to add_runs_to_annotation_queue (runs=
param) [...</li>
<li><a
href="fab828a2b0"><code>fab828a</code></a>
refactor(voice): move span attribute setters onto TranslatedSpan (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3179">#3179</a>)</li>
<li><a
href="2f7709cdaa"><code>2f7709c</code></a>
release(js): 0.8.1 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3185">#3185</a>)</li>
<li><a
href="6388e488ba"><code>6388e48</code></a>
release(py): 0.10.1 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3184">#3184</a>)</li>
<li><a
href="de74fb8f42"><code>de74fb8</code></a>
feat(js): expose openapi client error classes (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3181">#3181</a>)</li>
<li><a
href="6c0729a9bc"><code>6c0729a</code></a>
Fix URL Path Injection via Unencoded Resource Names in Python Sandbox
Client ...</li>
<li><a
href="996073e478"><code>996073e</code></a>
chore: bump _MIN_BACKEND_VERSION to 0.16.12rc1 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3178">#3178</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.9.5...v0.10.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=langsmith&package-manager=uv&previous-version=0.9.5&new-version=0.10.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/langchain-ai/langchain/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-13 17:58:26 -04:00
dependabot[bot]
b27f55498f chore: bump transformers from 5.3.0 to 5.5.0 in /libs/partners/huggingface (#38828)
Bumps [transformers](https://github.com/huggingface/transformers) from
5.3.0 to 5.5.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/huggingface/transformers/releases">transformers's
releases</a>.</em></p>
<blockquote>
<h1>Release v5.5.0</h1>
<!-- raw HTML omitted -->
<h2>New Model additions</h2>
<h3>Gemma4</h3>
<p><a
href="https://github.com/huggingface/transformers/blob/HEAD/INSET_PAPER_LINK">Gemma
4</a> is a multimodal model with pretrained and instruction-tuned
variants, available in 1B, 13B, and 27B parameters. The architecture is
mostly the same as the previous Gemma versions. The key differences are
a vision processor that can output images of fixed token budget and a
spatial 2D RoPE to encode vision-specific information across height and
width axis.</p>
<!-- raw HTML omitted -->
<p>You can find all the original Gemma 4 checkpoints under the <a
href="https://huggingface.co/collections/google/gemma-4-release-67c6c6f89c4f76621268bb6d">Gemma
4</a> release.</p>
<p>The key difference from previous Gemma releases is the new design to
process <strong>images of different sizes</strong> using a
<strong>fixed-budget number of tokens</strong>. Unlike many models that
squash every image into a fixed square (like 224×224), Gemma 4 keeps the
image's natural aspect ratio while making it the right size. There a a
couple constraints to follow:</p>
<ul>
<li>The total number of pixels must fit within a patch budget</li>
<li>Both height and width must be divisible by <strong>48</strong> (=
patch size 16 × pooling kernel 3)</li>
</ul>
<blockquote>
<p>[!IMPORTANT]
Gemma 4 does <strong>not</strong> apply the standard ImageNet mean/std
normalization that many other vision models use. The model's own patch
embedding layer handles the final scaling internally (shifting values to
the [-1, 1] range).</p>
</blockquote>
<p>The number of &quot;soft tokens&quot; (aka vision tokens) an image
processor can produce is configurable. The supported options are
outlined below and the default is <strong>280 soft tokens</strong> per
image.</p>
<table>
<thead>
<tr>
<th align="center">Soft Tokens</th>
<th align="center">Patches (before pooling)</th>
<th align="center">Approx. Image Area</th>
</tr>
</thead>
<tbody>
<tr>
<td align="center">70</td>
<td align="center">630</td>
<td align="center">~161K pixels</td>
</tr>
<tr>
<td align="center">140</td>
<td align="center">1,260</td>
<td align="center">~323K pixels</td>
</tr>
<tr>
<td align="center"><strong>280</strong></td>
<td align="center"><strong>2,520</strong></td>
<td align="center"><strong>~645K pixels</strong></td>
</tr>
<tr>
<td align="center">560</td>
<td align="center">5,040</td>
<td align="center">~1.3M pixels</td>
</tr>
<tr>
<td align="center">1,120</td>
<td align="center">10,080</td>
<td align="center">~2.6M pixels</td>
</tr>
</tbody>
</table>
<p>To encode positional information for each patch in the image, Gemma 4
uses a learned 2D position embedding table. The position table stores up
to 10,240 positions per axis, which allows the model to handle very
large images. Each position is a learned vector of the same dimensions
as the patch embedding. The 2D RoPE which Gemma 4 uses independently
rotate half the attention head dimensions for the x-axis and the other
half for the y-axis. This allows the model to understand spatial
relationships like &quot;above,&quot; &quot;below,&quot; &quot;left
of,&quot; and &quot;right of.&quot;</p>
<h3>NomicBERT</h3>
<p>NomicBERT is a BERT-inspired encoder model that applies Rotary
Position Embeddings (RoPE) to create reproducible long context text
embeddings. It is the first fully reproducible, open-source text
embedding model with 8192 context length that outperforms both OpenAI
Ada-002 and OpenAI text-embedding-3-small on short-context MTEB and long
context LoCo benchmarks. The model generates dense vector embeddings for
various tasks including search, clustering, and classification using
specific instruction prefixes.</p>
<p><strong>Links:</strong> <a
href="https://huggingface.co/docs/transformers/main/en/model_doc/nomic_bert">Documentation</a>
| <a href="https://arxiv.org/abs/2402.01613">Paper</a></p>
<ul>
<li>Internalise the NomicBERT model (<a
href="https://redirect.github.com/huggingface/transformers/issues/43067">#43067</a>)
by <a href="https://github.com/ed22699"><code>@​ed22699</code></a> in <a
href="https://redirect.github.com/huggingface/transformers/pull/43067">#43067</a></li>
</ul>
<h3>MusicFlamingo</h3>
<p>Music Flamingo is a fully open large audio–language model designed
for robust understanding and reasoning over music. It builds upon the
Audio Flamingo 3 architecture by including Rotary Time Embeddings
(RoTE), which injects temporal position information to enable the model
to handle audio sequences up to 20 minutes. The model features a unified
audio encoder across speech, sound, and music with special sound
boundary tokens for improved audio sequence modeling.</p>
<p><strong>Links:</strong> <a
href="https://huggingface.co/docs/transformers/main/en/model_doc/musicflamingo">Documentation</a>
| <a href="https://huggingface.co/papers/2511.10289">Paper</a></p>
<ul>
<li>Add Music Flamingo (<a
href="https://redirect.github.com/huggingface/transformers/issues/43538">#43538</a>)
by <a href="https://github.com/lashahub"><code>@​lashahub</code></a> in
<a
href="https://redirect.github.com/huggingface/transformers/pull/43538">#43538</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c1c34249fa"><code>c1c3424</code></a>
update</li>
<li><a
href="20bff6865a"><code>20bff68</code></a>
update release workflow</li>
<li><a
href="89564412a5"><code>8956441</code></a>
v5.5.0</li>
<li><a
href="5135e5efa7"><code>5135e5e</code></a>
casually dropping the most capable open weights on the planet (<a
href="https://redirect.github.com/huggingface/transformers/issues/45192">#45192</a>)</li>
<li><a
href="a594e09e39"><code>a594e09</code></a>
Internalise the NomicBERT model (<a
href="https://redirect.github.com/huggingface/transformers/issues/43067">#43067</a>)</li>
<li><a
href="4932e9721e"><code>4932e97</code></a>
Fix resized LM head weights being overwritten by post_init (<a
href="https://redirect.github.com/huggingface/transformers/issues/45079">#45079</a>)</li>
<li><a
href="57e8413954"><code>57e8413</code></a>
[Qwen3.5 MoE] Add _tp_plan to ForConditionalGeneration (<a
href="https://redirect.github.com/huggingface/transformers/issues/45124">#45124</a>)</li>
<li><a
href="b10552e99d"><code>b10552e</code></a>
Fix TypeError: 'NoneType' object is not iterable in
GenerationMixin.generate ...</li>
<li><a
href="423f2a31d2"><code>423f2a3</code></a>
fix(models): Fix dtype mismatch in SwitchTransformers and
TimmWrapperModel (#...</li>
<li><a
href="ade7a05a42"><code>ade7a05</code></a>
Generalize gemma vision mask to videos (<a
href="https://redirect.github.com/huggingface/transformers/issues/45185">#45185</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/huggingface/transformers/compare/v5.3.0...v5.5.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=transformers&package-manager=uv&previous-version=5.3.0&new-version=5.5.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/langchain-ai/langchain/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-13 17:58:17 -04:00
dependabot[bot]
3d4426d427 chore: bump langsmith from 0.9.5 to 0.10.2 in /libs/partners/chroma (#38831)
Bumps [langsmith](https://github.com/langchain-ai/langsmith-sdk) from
0.9.5 to 0.10.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/langsmith-sdk/releases">langsmith's
releases</a>.</em></p>
<blockquote>
<h2>v0.10.2</h2>
<h2>What's Changed</h2>
<ul>
<li>release(js): 0.8.1 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3185">langchain-ai/langsmith-sdk#3185</a></li>
<li>refactor(voice): move span attribute setters onto TranslatedSpan by
<a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3179">langchain-ai/langsmith-sdk#3179</a></li>
<li>feat: add SmithDB by-key path to add_runs_to_annotation_queue (runs=
param) [LSDK-287] by <a
href="https://github.com/ayoung19"><code>@​ayoung19</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3077">langchain-ai/langsmith-sdk#3077</a></li>
<li>refactor(livekit + pipecat): Refactor for clarity by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3187">langchain-ai/langsmith-sdk#3187</a></li>
<li>feat(py): re-export OpenAPI client exceptions from langsmith package
by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3188">langchain-ai/langsmith-sdk#3188</a></li>
<li>release(python): bump py version to 0.10.2 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3189">langchain-ai/langsmith-sdk#3189</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/ayoung19"><code>@​ayoung19</code></a>
made their first contribution in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3077">langchain-ai/langsmith-sdk#3077</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.1...v0.10.2">https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.1...v0.10.2</a></p>
<h2>v0.10.1</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: bound voice streaming audio buffers by <a
href="https://github.com/jkennedyvz"><code>@​jkennedyvz</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3169">langchain-ai/langsmith-sdk#3169</a></li>
<li>fix: escape insights report html repr by <a
href="https://github.com/corridor-security"><code>@​corridor-security</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3176">langchain-ai/langsmith-sdk#3176</a></li>
<li>chore: bump _MIN_BACKEND_VERSION to 0.16.12rc1 by <a
href="https://github.com/langtions-bot"><code>@​langtions-bot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3178">langchain-ai/langsmith-sdk#3178</a></li>
<li>Fix URL Path Injection via Unencoded Resource Names in Python
Sandbox Client (Sync) by <a
href="https://github.com/corridor-security"><code>@​corridor-security</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3177">langchain-ai/langsmith-sdk#3177</a></li>
<li>feat(js): expose openapi client error classes by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3181">langchain-ai/langsmith-sdk#3181</a></li>
<li>release(py): 0.10.1 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3184">langchain-ai/langsmith-sdk#3184</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/corridor-security"><code>@​corridor-security</code></a>[bot]
made their first contribution in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3176">langchain-ai/langsmith-sdk#3176</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.0...v0.10.1">https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.0...v0.10.1</a></p>
<h2>v0.10.0</h2>
<h2>What's Changed</h2>
<ul>
<li>chore: sync langsmith_api by <a
href="https://github.com/langtions-bot"><code>@​langtions-bot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3152">langchain-ai/langsmith-sdk#3152</a></li>
<li>release(js): bump JS SDK to 0.7.16 by <a
href="https://github.com/sineha-mani"><code>@​sineha-mani</code></a> in
<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3160">langchain-ai/langsmith-sdk#3160</a></li>
<li>feat: expose OTel-safe metadata helpers [closes LSDK-262] by <a
href="https://github.com/open-swe"><code>@​open-swe</code></a>[bot] in
<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3091">langchain-ai/langsmith-sdk#3091</a></li>
<li>feat(integrations): helpers to build LangSmith run URLs from OTel
spans [LSDK-273] by <a
href="https://github.com/harisaiharish"><code>@​harisaiharish</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3142">langchain-ai/langsmith-sdk#3142</a></li>
<li>fix(python): remove projects accessor from AsyncClient by <a
href="https://github.com/QuentinBrosse"><code>@​QuentinBrosse</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3163">langchain-ai/langsmith-sdk#3163</a></li>
<li>chore: sync langsmith_api by <a
href="https://github.com/langtions-bot"><code>@​langtions-bot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3162">langchain-ai/langsmith-sdk#3162</a></li>
<li>feat(js): Extends wrapAnthropic JS wrapper to support Claude Managed
Agents methods by <a
href="https://github.com/jacoblee93"><code>@​jacoblee93</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3155">langchain-ai/langsmith-sdk#3155</a></li>
<li>release(js): 0.7.17 by <a
href="https://github.com/jacoblee93"><code>@​jacoblee93</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3166">langchain-ai/langsmith-sdk#3166</a></li>
<li>feat(client): expose threads and traces resource accessors on Python
and JS clients by <a
href="https://github.com/QuentinBrosse"><code>@​QuentinBrosse</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3164">langchain-ai/langsmith-sdk#3164</a></li>
<li>ci: freeze pnpm environment test installs by <a
href="https://github.com/jkennedyvz"><code>@​jkennedyvz</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3168">langchain-ai/langsmith-sdk#3168</a></li>
<li>Quote sandbox client URL path segments by <a
href="https://github.com/langsmith-fleet"><code>@​langsmith-fleet</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3167">langchain-ai/langsmith-sdk#3167</a></li>
<li>release(js): 0.8.0 by <a
href="https://github.com/QuentinBrosse"><code>@​QuentinBrosse</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3171">langchain-ai/langsmith-sdk#3171</a></li>
<li>release(py): 0.10.0 by <a
href="https://github.com/QuentinBrosse"><code>@​QuentinBrosse</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3170">langchain-ai/langsmith-sdk#3170</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/langsmith-fleet"><code>@​langsmith-fleet</code></a>[bot]
made their first contribution in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3167">langchain-ai/langsmith-sdk#3167</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.9.8...v0.10.0">https://github.com/langchain-ai/langsmith-sdk/compare/v0.9.8...v0.10.0</a></p>
<h2>v0.9.8</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="687fc8d527"><code>687fc8d</code></a>
release(python): bump py version to 0.10.2 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3189">#3189</a>)</li>
<li><a
href="08cbc910be"><code>08cbc91</code></a>
feat(py): re-export OpenAPI client exceptions from langsmith package (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3188">#3188</a>)</li>
<li><a
href="d309be59b9"><code>d309be5</code></a>
refactor(livekit + pipecat): Refactor for clarity (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3187">#3187</a>)</li>
<li><a
href="2e61f54184"><code>2e61f54</code></a>
feat: add SmithDB by-key path to add_runs_to_annotation_queue (runs=
param) [...</li>
<li><a
href="fab828a2b0"><code>fab828a</code></a>
refactor(voice): move span attribute setters onto TranslatedSpan (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3179">#3179</a>)</li>
<li><a
href="2f7709cdaa"><code>2f7709c</code></a>
release(js): 0.8.1 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3185">#3185</a>)</li>
<li><a
href="6388e488ba"><code>6388e48</code></a>
release(py): 0.10.1 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3184">#3184</a>)</li>
<li><a
href="de74fb8f42"><code>de74fb8</code></a>
feat(js): expose openapi client error classes (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3181">#3181</a>)</li>
<li><a
href="6c0729a9bc"><code>6c0729a</code></a>
Fix URL Path Injection via Unencoded Resource Names in Python Sandbox
Client ...</li>
<li><a
href="996073e478"><code>996073e</code></a>
chore: bump _MIN_BACKEND_VERSION to 0.16.12rc1 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3178">#3178</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.9.5...v0.10.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=langsmith&package-manager=uv&previous-version=0.9.5&new-version=0.10.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/langchain-ai/langchain/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-13 17:58:05 -04:00
dependabot[bot]
0f27cf9dac chore: bump langsmith from 0.9.5 to 0.10.2 in /libs/partners/xai (#38832)
Bumps [langsmith](https://github.com/langchain-ai/langsmith-sdk) from
0.9.5 to 0.10.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/langsmith-sdk/releases">langsmith's
releases</a>.</em></p>
<blockquote>
<h2>v0.10.2</h2>
<h2>What's Changed</h2>
<ul>
<li>release(js): 0.8.1 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3185">langchain-ai/langsmith-sdk#3185</a></li>
<li>refactor(voice): move span attribute setters onto TranslatedSpan by
<a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3179">langchain-ai/langsmith-sdk#3179</a></li>
<li>feat: add SmithDB by-key path to add_runs_to_annotation_queue (runs=
param) [LSDK-287] by <a
href="https://github.com/ayoung19"><code>@​ayoung19</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3077">langchain-ai/langsmith-sdk#3077</a></li>
<li>refactor(livekit + pipecat): Refactor for clarity by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3187">langchain-ai/langsmith-sdk#3187</a></li>
<li>feat(py): re-export OpenAPI client exceptions from langsmith package
by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3188">langchain-ai/langsmith-sdk#3188</a></li>
<li>release(python): bump py version to 0.10.2 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3189">langchain-ai/langsmith-sdk#3189</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/ayoung19"><code>@​ayoung19</code></a>
made their first contribution in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3077">langchain-ai/langsmith-sdk#3077</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.1...v0.10.2">https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.1...v0.10.2</a></p>
<h2>v0.10.1</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: bound voice streaming audio buffers by <a
href="https://github.com/jkennedyvz"><code>@​jkennedyvz</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3169">langchain-ai/langsmith-sdk#3169</a></li>
<li>fix: escape insights report html repr by <a
href="https://github.com/corridor-security"><code>@​corridor-security</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3176">langchain-ai/langsmith-sdk#3176</a></li>
<li>chore: bump _MIN_BACKEND_VERSION to 0.16.12rc1 by <a
href="https://github.com/langtions-bot"><code>@​langtions-bot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3178">langchain-ai/langsmith-sdk#3178</a></li>
<li>Fix URL Path Injection via Unencoded Resource Names in Python
Sandbox Client (Sync) by <a
href="https://github.com/corridor-security"><code>@​corridor-security</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3177">langchain-ai/langsmith-sdk#3177</a></li>
<li>feat(js): expose openapi client error classes by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3181">langchain-ai/langsmith-sdk#3181</a></li>
<li>release(py): 0.10.1 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3184">langchain-ai/langsmith-sdk#3184</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/corridor-security"><code>@​corridor-security</code></a>[bot]
made their first contribution in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3176">langchain-ai/langsmith-sdk#3176</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.0...v0.10.1">https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.0...v0.10.1</a></p>
<h2>v0.10.0</h2>
<h2>What's Changed</h2>
<ul>
<li>chore: sync langsmith_api by <a
href="https://github.com/langtions-bot"><code>@​langtions-bot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3152">langchain-ai/langsmith-sdk#3152</a></li>
<li>release(js): bump JS SDK to 0.7.16 by <a
href="https://github.com/sineha-mani"><code>@​sineha-mani</code></a> in
<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3160">langchain-ai/langsmith-sdk#3160</a></li>
<li>feat: expose OTel-safe metadata helpers [closes LSDK-262] by <a
href="https://github.com/open-swe"><code>@​open-swe</code></a>[bot] in
<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3091">langchain-ai/langsmith-sdk#3091</a></li>
<li>feat(integrations): helpers to build LangSmith run URLs from OTel
spans [LSDK-273] by <a
href="https://github.com/harisaiharish"><code>@​harisaiharish</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3142">langchain-ai/langsmith-sdk#3142</a></li>
<li>fix(python): remove projects accessor from AsyncClient by <a
href="https://github.com/QuentinBrosse"><code>@​QuentinBrosse</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3163">langchain-ai/langsmith-sdk#3163</a></li>
<li>chore: sync langsmith_api by <a
href="https://github.com/langtions-bot"><code>@​langtions-bot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3162">langchain-ai/langsmith-sdk#3162</a></li>
<li>feat(js): Extends wrapAnthropic JS wrapper to support Claude Managed
Agents methods by <a
href="https://github.com/jacoblee93"><code>@​jacoblee93</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3155">langchain-ai/langsmith-sdk#3155</a></li>
<li>release(js): 0.7.17 by <a
href="https://github.com/jacoblee93"><code>@​jacoblee93</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3166">langchain-ai/langsmith-sdk#3166</a></li>
<li>feat(client): expose threads and traces resource accessors on Python
and JS clients by <a
href="https://github.com/QuentinBrosse"><code>@​QuentinBrosse</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3164">langchain-ai/langsmith-sdk#3164</a></li>
<li>ci: freeze pnpm environment test installs by <a
href="https://github.com/jkennedyvz"><code>@​jkennedyvz</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3168">langchain-ai/langsmith-sdk#3168</a></li>
<li>Quote sandbox client URL path segments by <a
href="https://github.com/langsmith-fleet"><code>@​langsmith-fleet</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3167">langchain-ai/langsmith-sdk#3167</a></li>
<li>release(js): 0.8.0 by <a
href="https://github.com/QuentinBrosse"><code>@​QuentinBrosse</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3171">langchain-ai/langsmith-sdk#3171</a></li>
<li>release(py): 0.10.0 by <a
href="https://github.com/QuentinBrosse"><code>@​QuentinBrosse</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3170">langchain-ai/langsmith-sdk#3170</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/langsmith-fleet"><code>@​langsmith-fleet</code></a>[bot]
made their first contribution in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3167">langchain-ai/langsmith-sdk#3167</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.9.8...v0.10.0">https://github.com/langchain-ai/langsmith-sdk/compare/v0.9.8...v0.10.0</a></p>
<h2>v0.9.8</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="687fc8d527"><code>687fc8d</code></a>
release(python): bump py version to 0.10.2 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3189">#3189</a>)</li>
<li><a
href="08cbc910be"><code>08cbc91</code></a>
feat(py): re-export OpenAPI client exceptions from langsmith package (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3188">#3188</a>)</li>
<li><a
href="d309be59b9"><code>d309be5</code></a>
refactor(livekit + pipecat): Refactor for clarity (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3187">#3187</a>)</li>
<li><a
href="2e61f54184"><code>2e61f54</code></a>
feat: add SmithDB by-key path to add_runs_to_annotation_queue (runs=
param) [...</li>
<li><a
href="fab828a2b0"><code>fab828a</code></a>
refactor(voice): move span attribute setters onto TranslatedSpan (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3179">#3179</a>)</li>
<li><a
href="2f7709cdaa"><code>2f7709c</code></a>
release(js): 0.8.1 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3185">#3185</a>)</li>
<li><a
href="6388e488ba"><code>6388e48</code></a>
release(py): 0.10.1 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3184">#3184</a>)</li>
<li><a
href="de74fb8f42"><code>de74fb8</code></a>
feat(js): expose openapi client error classes (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3181">#3181</a>)</li>
<li><a
href="6c0729a9bc"><code>6c0729a</code></a>
Fix URL Path Injection via Unencoded Resource Names in Python Sandbox
Client ...</li>
<li><a
href="996073e478"><code>996073e</code></a>
chore: bump _MIN_BACKEND_VERSION to 0.16.12rc1 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3178">#3178</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.9.5...v0.10.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=langsmith&package-manager=uv&previous-version=0.9.5&new-version=0.10.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/langchain-ai/langchain/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-13 17:58:00 -04:00
dependabot[bot]
00c0f69dc0 chore: bump mistune from 3.2.1 to 3.3.0 in /libs/langchain (#38782)
Bumps [mistune](https://github.com/lepture/mistune) from 3.2.1 to 3.3.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/lepture/mistune/releases">mistune's
releases</a>.</em></p>
<blockquote>
<h2>v3.3.0</h2>
<h3>   🐞 Bug Fixes</h3>
<ul>
<li>Resolve O(n^2) DoS in parse_link_text (CWE-400)  -  by
<strong>bhanugoudm041</strong> <a
href="https://github.com/lepture/mistune/commit/b6b499d"><!-- raw HTML
omitted -->(b6b49)<!-- raw HTML omitted --></a></li>
<li>Resolve O(n^2) DoS in parse_link_text (CWE-400)-Type
handling/testing done  -  by <strong>bhanugoudm041</strong> <a
href="https://github.com/lepture/mistune/commit/b3af85d"><!-- raw HTML
omitted -->(b3af8)<!-- raw HTML omitted --></a></li>
<li><strong>block</strong>: Avoid quadratic ref link scans  -  by <a
href="https://github.com/lepture"><code>@​lepture</code></a> <a
href="https://github.com/lepture/mistune/commit/2b04d7b"><!-- raw HTML
omitted -->(2b04d)<!-- raw HTML omitted --></a></li>
<li><strong>cli</strong>: Add entrypoint and utf-8 output  -  by <a
href="https://github.com/lepture"><code>@​lepture</code></a> <a
href="https://github.com/lepture/mistune/commit/2f2449d"><!-- raw HTML
omitted -->(2f244)<!-- raw HTML omitted --></a></li>
<li><strong>directives</strong>: Constrain include targets  -  by <a
href="https://github.com/lepture"><code>@​lepture</code></a> <a
href="https://github.com/lepture/mistune/commit/1bef343"><!-- raw HTML
omitted -->(1bef3)<!-- raw HTML omitted --></a></li>
<li><strong>formatting</strong>: Avoid quadratic marker scans  -  by <a
href="https://github.com/lepture"><code>@​lepture</code></a> <a
href="https://github.com/lepture/mistune/commit/96d0f57"><!-- raw HTML
omitted -->(96d0f)<!-- raw HTML omitted --></a></li>
<li><strong>image</strong>: Validate figure width option  -  by <a
href="https://github.com/lepture"><code>@​lepture</code></a> <a
href="https://github.com/lepture/mistune/commit/e3e51de"><!-- raw HTML
omitted -->(e3e51)<!-- raw HTML omitted --></a></li>
<li><strong>inline</strong>: Avoid bracket parsing DoS  -  by <a
href="https://github.com/lepture"><code>@​lepture</code></a> <a
href="https://github.com/lepture/mistune/commit/25f2503"><!-- raw HTML
omitted -->(25f25)<!-- raw HTML omitted --></a></li>
<li><strong>math</strong>: Reject currency patterns and cross-line
matches in inline math  -  by <a
href="https://github.com/geopanther"><code>@​geopanther</code></a> <a
href="https://github.com/lepture/mistune/commit/566e173"><!-- raw HTML
omitted -->(566e1)<!-- raw HTML omitted --></a></li>
<li><strong>math</strong>: Support display and backtick math  -  by <a
href="https://github.com/lepture"><code>@​lepture</code></a> <a
href="https://github.com/lepture/mistune/commit/1141eec"><!-- raw HTML
omitted -->(1141e)<!-- raw HTML omitted --></a></li>
<li><strong>renderer</strong>: Render plugin list and table nodes  -  by
<a href="https://github.com/lepture"><code>@​lepture</code></a> <a
href="https://github.com/lepture/mistune/commit/614b019"><!-- raw HTML
omitted -->(614b0)<!-- raw HTML omitted --></a></li>
<li><strong>renderer</strong>: Block encoded unsafe URL schemes  -  by
<a href="https://github.com/lepture"><code>@​lepture</code></a> <a
href="https://github.com/lepture/mistune/commit/c7101fc"><!-- raw HTML
omitted -->(c7101)<!-- raw HTML omitted --></a></li>
<li><strong>toc</strong>: Avoid generated id collisions  -  by <a
href="https://github.com/lepture"><code>@​lepture</code></a> <a
href="https://github.com/lepture/mistune/commit/c4093c4"><!-- raw HTML
omitted -->(c4093)<!-- raw HTML omitted --></a></li>
</ul>
<h3>   🏎 Performance</h3>
<ul>
<li>Improve performance  -  by <a
href="https://github.com/lepture"><code>@​lepture</code></a> <a
href="https://github.com/lepture/mistune/commit/bf95c32"><!-- raw HTML
omitted -->(bf95c)<!-- raw HTML omitted --></a></li>
</ul>
<h5>    <a
href="https://github.com/lepture/mistune/compare/v3.2.1...v3.3.0">View
changes on GitHub</a></h5>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/lepture/mistune/blob/main/docs/changes.rst">mistune's
changelog</a>.</em></p>
<blockquote>
<h2>Version 3.3.0</h2>
<p><strong>Released on Jun 21, 2026</strong></p>
<ul>
<li>Improve CommonMark compatibility and parser performance.</li>
<li>Add command line entrypoint with UTF-8 output.</li>
<li>Support display and backtick math.</li>
<li>Render plugin list and table nodes in Markdown renderer.</li>
<li>Escape leading block markers in Markdown renderer.</li>
<li>Fix RST renderer for block quotes nested in lists.</li>
<li>Avoid generated heading ID collisions in TOC.</li>
<li>Harden URL, image, figure, and include directive handling.</li>
<li>Fix quadratic scans in inline links, reference links, and formatting
markers.</li>
<li>Fix math escaping, currency pattern matching, and cross-line
matching.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="15c3b79325"><code>15c3b79</code></a>
chore: release 3.3.0</li>
<li><a
href="bdc01ade17"><code>bdc01ad</code></a>
tests: increase run time on pypy</li>
<li><a
href="7cf181483e"><code>7cf1814</code></a>
tests: increase run time for pypy</li>
<li><a
href="6dfdc3dae4"><code>6dfdc3d</code></a>
tests: add more tests</li>
<li><a
href="17c50f6c05"><code>17c50f6</code></a>
chore: fix mypy issues</li>
<li><a
href="63abe4b8e9"><code>63abe4b</code></a>
chore: use ruff check and format</li>
<li><a
href="e6c1b18446"><code>e6c1b18</code></a>
chore: resolve mypy issues</li>
<li><a
href="dcf89020c1"><code>dcf8902</code></a>
test(math): cover escaped math output</li>
<li><a
href="c4093c4742"><code>c4093c4</code></a>
fix(toc): avoid generated id collisions</li>
<li><a
href="e3e51de9cf"><code>e3e51de</code></a>
fix(image): validate figure width option</li>
<li>Additional commits viewable in <a
href="https://github.com/lepture/mistune/compare/v3.2.1...v3.3.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=mistune&package-manager=uv&previous-version=3.2.1&new-version=3.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/langchain-ai/langchain/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-13 13:26:15 -04:00
dependabot[bot]
b2dede4f3e chore: bump mistune from 3.2.1 to 3.3.0 in /libs/core (#38783)
Bumps [mistune](https://github.com/lepture/mistune) from 3.2.1 to 3.3.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/lepture/mistune/releases">mistune's
releases</a>.</em></p>
<blockquote>
<h2>v3.3.0</h2>
<h3>   🐞 Bug Fixes</h3>
<ul>
<li>Resolve O(n^2) DoS in parse_link_text (CWE-400)  -  by
<strong>bhanugoudm041</strong> <a
href="https://github.com/lepture/mistune/commit/b6b499d"><!-- raw HTML
omitted -->(b6b49)<!-- raw HTML omitted --></a></li>
<li>Resolve O(n^2) DoS in parse_link_text (CWE-400)-Type
handling/testing done  -  by <strong>bhanugoudm041</strong> <a
href="https://github.com/lepture/mistune/commit/b3af85d"><!-- raw HTML
omitted -->(b3af8)<!-- raw HTML omitted --></a></li>
<li><strong>block</strong>: Avoid quadratic ref link scans  -  by <a
href="https://github.com/lepture"><code>@​lepture</code></a> <a
href="https://github.com/lepture/mistune/commit/2b04d7b"><!-- raw HTML
omitted -->(2b04d)<!-- raw HTML omitted --></a></li>
<li><strong>cli</strong>: Add entrypoint and utf-8 output  -  by <a
href="https://github.com/lepture"><code>@​lepture</code></a> <a
href="https://github.com/lepture/mistune/commit/2f2449d"><!-- raw HTML
omitted -->(2f244)<!-- raw HTML omitted --></a></li>
<li><strong>directives</strong>: Constrain include targets  -  by <a
href="https://github.com/lepture"><code>@​lepture</code></a> <a
href="https://github.com/lepture/mistune/commit/1bef343"><!-- raw HTML
omitted -->(1bef3)<!-- raw HTML omitted --></a></li>
<li><strong>formatting</strong>: Avoid quadratic marker scans  -  by <a
href="https://github.com/lepture"><code>@​lepture</code></a> <a
href="https://github.com/lepture/mistune/commit/96d0f57"><!-- raw HTML
omitted -->(96d0f)<!-- raw HTML omitted --></a></li>
<li><strong>image</strong>: Validate figure width option  -  by <a
href="https://github.com/lepture"><code>@​lepture</code></a> <a
href="https://github.com/lepture/mistune/commit/e3e51de"><!-- raw HTML
omitted -->(e3e51)<!-- raw HTML omitted --></a></li>
<li><strong>inline</strong>: Avoid bracket parsing DoS  -  by <a
href="https://github.com/lepture"><code>@​lepture</code></a> <a
href="https://github.com/lepture/mistune/commit/25f2503"><!-- raw HTML
omitted -->(25f25)<!-- raw HTML omitted --></a></li>
<li><strong>math</strong>: Reject currency patterns and cross-line
matches in inline math  -  by <a
href="https://github.com/geopanther"><code>@​geopanther</code></a> <a
href="https://github.com/lepture/mistune/commit/566e173"><!-- raw HTML
omitted -->(566e1)<!-- raw HTML omitted --></a></li>
<li><strong>math</strong>: Support display and backtick math  -  by <a
href="https://github.com/lepture"><code>@​lepture</code></a> <a
href="https://github.com/lepture/mistune/commit/1141eec"><!-- raw HTML
omitted -->(1141e)<!-- raw HTML omitted --></a></li>
<li><strong>renderer</strong>: Render plugin list and table nodes  -  by
<a href="https://github.com/lepture"><code>@​lepture</code></a> <a
href="https://github.com/lepture/mistune/commit/614b019"><!-- raw HTML
omitted -->(614b0)<!-- raw HTML omitted --></a></li>
<li><strong>renderer</strong>: Block encoded unsafe URL schemes  -  by
<a href="https://github.com/lepture"><code>@​lepture</code></a> <a
href="https://github.com/lepture/mistune/commit/c7101fc"><!-- raw HTML
omitted -->(c7101)<!-- raw HTML omitted --></a></li>
<li><strong>toc</strong>: Avoid generated id collisions  -  by <a
href="https://github.com/lepture"><code>@​lepture</code></a> <a
href="https://github.com/lepture/mistune/commit/c4093c4"><!-- raw HTML
omitted -->(c4093)<!-- raw HTML omitted --></a></li>
</ul>
<h3>   🏎 Performance</h3>
<ul>
<li>Improve performance  -  by <a
href="https://github.com/lepture"><code>@​lepture</code></a> <a
href="https://github.com/lepture/mistune/commit/bf95c32"><!-- raw HTML
omitted -->(bf95c)<!-- raw HTML omitted --></a></li>
</ul>
<h5>    <a
href="https://github.com/lepture/mistune/compare/v3.2.1...v3.3.0">View
changes on GitHub</a></h5>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/lepture/mistune/blob/main/docs/changes.rst">mistune's
changelog</a>.</em></p>
<blockquote>
<h2>Version 3.3.0</h2>
<p><strong>Released on Jun 21, 2026</strong></p>
<ul>
<li>Improve CommonMark compatibility and parser performance.</li>
<li>Add command line entrypoint with UTF-8 output.</li>
<li>Support display and backtick math.</li>
<li>Render plugin list and table nodes in Markdown renderer.</li>
<li>Escape leading block markers in Markdown renderer.</li>
<li>Fix RST renderer for block quotes nested in lists.</li>
<li>Avoid generated heading ID collisions in TOC.</li>
<li>Harden URL, image, figure, and include directive handling.</li>
<li>Fix quadratic scans in inline links, reference links, and formatting
markers.</li>
<li>Fix math escaping, currency pattern matching, and cross-line
matching.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="15c3b79325"><code>15c3b79</code></a>
chore: release 3.3.0</li>
<li><a
href="bdc01ade17"><code>bdc01ad</code></a>
tests: increase run time on pypy</li>
<li><a
href="7cf181483e"><code>7cf1814</code></a>
tests: increase run time for pypy</li>
<li><a
href="6dfdc3dae4"><code>6dfdc3d</code></a>
tests: add more tests</li>
<li><a
href="17c50f6c05"><code>17c50f6</code></a>
chore: fix mypy issues</li>
<li><a
href="63abe4b8e9"><code>63abe4b</code></a>
chore: use ruff check and format</li>
<li><a
href="e6c1b18446"><code>e6c1b18</code></a>
chore: resolve mypy issues</li>
<li><a
href="dcf89020c1"><code>dcf8902</code></a>
test(math): cover escaped math output</li>
<li><a
href="c4093c4742"><code>c4093c4</code></a>
fix(toc): avoid generated id collisions</li>
<li><a
href="e3e51de9cf"><code>e3e51de</code></a>
fix(image): validate figure width option</li>
<li>Additional commits viewable in <a
href="https://github.com/lepture/mistune/compare/v3.2.1...v3.3.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=mistune&package-manager=uv&previous-version=3.2.1&new-version=3.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/langchain-ai/langchain/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-13 13:26:06 -04:00
langchain-oss-model-profiles[bot]
fb274a9ab4 chore(model-profiles): refresh model profile data (#38821)
Automated refresh of model profile data for all in-monorepo partner
integrations via `langchain-profiles refresh`.

🤖 Generated by the [`refresh_model_profiles`
workflow](https://github.com/langchain-ai/langchain/blob/master/.github/workflows/refresh_model_profiles.yml).


## Summary of changes

**0 added · 0 removed · 5 changed** across 2 provider(s).

<details>
<summary>huggingface</summary>

**✏️ 1 changed**
- `stepfun-ai/Step-3.7-Flash`: added video input

</details>

<details>
<summary>openrouter</summary>

**✏️ 4 changed**
- `google/gemini-3-pro-image`: last updated `2026-06-18` → `2026-05-28`;
display name `Nano Banana Pro (Gemini 3 Pro Image)` → `Nano Banana Pro`;
release date `2026-06-18` → `2026-05-28`
- `google/gemini-3.1-flash-image`: last updated `2026-06-18` →
`2026-05-28`; display name `Nano Banana 2 (Gemini 3.1 Flash Image)` →
`Nano Banana 2`; release date `2026-06-18` → `2026-05-28`
- `z-ai/glm-4.6`: max input tokens 202,752 → 200,000; max output tokens
131,072 → 16,384
- `z-ai/glm-5.2`: max output tokens 128,000 → 131,072

</details>

Co-authored-by: mdrxy <61371264+mdrxy@users.noreply.github.com>
2026-07-13 09:28:19 -04:00
langchain-oss-model-profiles[bot]
233e02a822 chore(model-profiles): refresh model profile data (#38810)
Automated refresh of model profile data for all in-monorepo partner
integrations via `langchain-profiles refresh`.

🤖 Generated by the [`refresh_model_profiles`
workflow](https://github.com/langchain-ai/langchain/blob/master/.github/workflows/refresh_model_profiles.yml).


## Summary of changes

**0 added · 1 removed · 1 changed** across 1 provider(s).

### openrouter

** 1 removed**
- `meta-llama/llama-3-8b-instruct`

**✏️ 1 changed**
- `z-ai/glm-5.2`: max output tokens 131,072 → 128,000

Co-authored-by: mdrxy <61371264+mdrxy@users.noreply.github.com>
2026-07-12 17:59:19 -04:00
langchain-oss-model-profiles[bot]
a8fd0da2b7 chore(model-profiles): refresh model profile data (#38797)
Automated refresh of model profile data for all in-monorepo partner
integrations via `langchain-profiles refresh`.

🤖 Generated by the [`refresh_model_profiles`
workflow](https://github.com/langchain-ai/langchain/blob/master/.github/workflows/refresh_model_profiles.yml).


## Summary of changes

**1 added · 1 removed · 2 changed** across 2 provider(s).

<details>
<summary>openai</summary>

** 1 added**
- `gpt-realtime-2.1` — 128,000 ctx, 32,000 out, text+image+audio+pdf in,
reasoning, tools

</details>

<details>
<summary>openrouter</summary>

** 1 removed**
- `arcee-ai/trinity-mini`

**✏️ 2 changed**
- `deepseek/deepseek-v4-flash`: max output tokens 65,536 → 384,000
- `z-ai/glm-5.2`: max output tokens 101,376 → 131,072

</details>

Co-authored-by: mdrxy <61371264+mdrxy@users.noreply.github.com>
2026-07-11 18:01:26 -04:00
ccurme
42f8f79293 release(langchain): 1.3.13 (#38787) langchain==1.3.13 2026-07-10 18:53:07 -04:00
ccurme
7327e84d6f feat(langchain): add meta extra and support langchain-meta in init_chat_model (#38786) 2026-07-10 18:46:45 -04:00
Mason Daugherty
1c6bfc8f60 release(openai): 1.3.5 (#38785)
Prepared with AI-agent assistance.
langchain-openai==1.3.5
2026-07-10 14:47:52 -04:00
Mason Daugherty
4717cfc83b feat(openai): support explicit prompt caching (#38762)
`ChatOpenAI` now supports OpenAI explicit prompt-cache options and
content-block breakpoints, and exposes cache-write token counts through
`input_token_details["cache_creation"]`.
[(Docs)](https://developers.openai.com/api/docs/guides/prompt-caching?prompt-cache-api=responses#prompt-cache-breakpoints)

---

OpenAI users can now configure explicit prompt caching through
`ChatOpenAI` without cache controls being dropped when messages are
converted for the Responses API.

The change preserves `prompt_cache_breakpoint` on text, image, and file
content blocks; forwards request-level cache options and legacy
retention settings; and reports `cache_write_tokens` as `cache_creation`
usage metadata, including priority and flex service-tier variants. It
also raises the minimum OpenAI SDK version to 2.45.0 so the integration
can rely on the SDK's current prompt-caching schemas instead of
compatibility normalization.

---------

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-07-10 14:11:10 -04:00
langchain-oss-model-profiles[bot]
2f527debdd chore(model-profiles): refresh model profile data (#38774)
Automated refresh of model profile data for all in-monorepo partner
integrations via `langchain-profiles refresh`.

🤖 Generated by the [`refresh_model_profiles`
workflow](https://github.com/langchain-ai/langchain/blob/master/.github/workflows/refresh_model_profiles.yml).


## Summary of changes

**11 added · 4 removed · 44 changed** across 2 provider(s).

<details>
<summary>openai</summary>

** 4 added**
- `gpt-5.6` — 1,050,000 ctx, 128,000 out, text+image+pdf in, reasoning,
tools
- `gpt-5.6-luna` — 1,050,000 ctx, 128,000 out, text+image+pdf in,
reasoning, tools
- `gpt-5.6-sol` — 1,050,000 ctx, 128,000 out, text+image+pdf in,
reasoning, tools
- `gpt-5.6-terra` — 1,050,000 ctx, 128,000 out, text+image+pdf in,
reasoning, tools

</details>

<details>
<summary>openrouter</summary>

** 7 added**
- `cognitivecomputations/dolphin-mistral-24b-venice-edition` — 128,000
ctx, 8,192 out
- `openai/gpt-5.6-luna` — 1,050,000 ctx, 128,000 out, text+image+pdf in,
reasoning, tools
- `openai/gpt-5.6-luna-pro` — 1,050,000 ctx, 128,000 out, text+image+pdf
in, reasoning, tools
- `openai/gpt-5.6-sol` — 1,050,000 ctx, 128,000 out, text+image+pdf in,
reasoning, tools
- `openai/gpt-5.6-sol-pro` — 1,050,000 ctx, 128,000 out, text+image+pdf
in, reasoning, tools
- `openai/gpt-5.6-terra` — 1,050,000 ctx, 128,000 out, text+image+pdf
in, reasoning, tools
- `openai/gpt-5.6-terra-pro` — 1,050,000 ctx, 128,000 out,
text+image+pdf in, reasoning, tools

** 4 removed**
- `google/gemini-2.5-flash-lite-preview-09-2025`
- `liquid/lfm-2-24b-a2b`
- `poolside/laguna-xs.2`
- `poolside/laguna-xs.2:free`

**✏️ 44 changed**
- `anthracite-org/magnum-v4-72b`: max input tokens 16,384 → 32,768
- `baidu/ernie-4.5-vl-424b-a47b`: max input tokens 123,000 → 131,072
- `deepseek/deepseek-chat`: max input tokens 128,000 → 131,072
- `deepseek/deepseek-r1`: max input tokens 64,000 → 163,840
- `deepseek/deepseek-r1-distill-llama-70b`: max input tokens 8,192 →
128,000
- `deepseek/deepseek-v3.2`: max input tokens 128,000 → 131,072
- `google/gemini-3.1-pro-preview-customtools`: max input tokens
1,048,576 → 1,048,756
- `google/gemma-4-26b-a4b-it:free`: max input tokens 131,072 → 262,144
- `meta-llama/llama-3.2-1b-instruct`: max input tokens 60,000 → 131,072
- `meta-llama/llama-3.3-70b-instruct:free`: max input tokens 65,536 →
131,072
- `meta-llama/llama-4-scout`: max input tokens 327,680 → 10,000,000
- `microsoft/wizardlm-2-8x22b`: max input tokens 65,535 → 65,536
- `minimax/minimax-m2.5`: max input tokens 196,608 → 204,800
- `minimax/minimax-m2.7`: max input tokens 196,608 → 204,800
- `minimax/minimax-m3`: max input tokens 524,288 → 1,048,576; max output
tokens 512,000 → 131,072
- `moonshotai/kimi-k2.5`: max input tokens 256,000 → 262,144
- `moonshotai/kimi-k2.7-code`: max output tokens 16,384 → 262,144
- `nvidia/nemotron-3-super-120b-a12b`: max input tokens 262,144 →
1,000,000
- `nvidia/nemotron-3-super-120b-a12b:free`: max input tokens 262,144 →
1,000,000
- `nvidia/nemotron-3-ultra-550b-a55b`: max input tokens 262,144 →
1,000,000
- `poolside/laguna-m.1`: last updated `2026-04-28` → `2026-06-13`
- `poolside/laguna-m.1:free`: last updated `2026-04-28` → `2026-06-13`
- `qwen/qwen-2.5-72b-instruct`: max input tokens 32,768 → 131,072
- `qwen/qwen-2.5-7b-instruct`: max input tokens 32,768 → 131,072
- `qwen/qwen-2.5-coder-32b-instruct`: max input tokens 32,768 → 128,000
- …and 19 more

</details>

Co-authored-by: mdrxy <61371264+mdrxy@users.noreply.github.com>
2026-07-10 10:24:05 -04:00
Radhakrishnan Pachyappan
a07356f839 fix(anthropic): add advisor_ prefix to builtin tool recognition (#38686) 2026-07-09 22:18:52 -04:00
Mason Daugherty
8107ff4065 release(fireworks): 1.4.4 (#38753) langchain-fireworks==1.4.4 2026-07-09 13:45:31 -04:00
Mason Daugherty
ea24fb1e13 fix(fireworks): report cached prompt token usage (#38751)
Closes #38648

`langchain-fireworks` now reports Fireworks cached prompt tokens in
`AIMessage.usage_metadata.input_token_details.cache_read` and no longer
crashes when combining nested token usage from batched `generate()`
calls.

---

Fireworks can return nested token usage details when prompt caching is
involved, including cached prompt token counts. Batched `generate()`
calls were crashing when those nested dictionaries were combined, and
regular chat results did not expose the cached-token breakdown in the
standard LangChain usage metadata shape.

This updates `ChatFireworks` so nested token usage is merged safely and
cached prompt tokens are reported as `input_token_details.cache_read`.
Users and downstream tracing systems can now distinguish cached
Fireworks input tokens from regular input tokens instead of treating the
full prompt as uncached input.

Thanks to @abcgco for the original report and recursive merge fix in
#38646, and to @abhi-0203 for independently identifying the same nested
`token_usage` failure in #38735. This PR builds on that work by using
the recursive merge approach and extending the fix to normalize cached
prompt tokens into standard usage metadata for tracing and cost
reporting.

Co-authored-by: Andrei Boldyrev <abcgco@gmail.com>
2026-07-09 13:39:38 -04:00
Mason Daugherty
a4294f9a39 chore(deps): refresh lockfiles (#38746) 2026-07-09 12:43:43 -04:00
langchain-oss-model-profiles[bot]
d73ba5b70b chore(model-profiles): refresh model profile data (#38739)
Automated refresh of model profile data for all in-monorepo partner
integrations via `langchain-profiles refresh`.

🤖 Generated by the [`refresh_model_profiles`
workflow](https://github.com/langchain-ai/langchain/blob/master/.github/workflows/refresh_model_profiles.yml).


## Summary of changes

**3 added · 1 removed · 4 changed** across 2 provider(s).

<details>
<summary>openrouter</summary>

** 2 added**
- `x-ai/grok-4.5` — 500,000 ctx, 500,000 out, text+image+pdf in,
reasoning, tools
- `~x-ai/grok-latest` — 500,000 ctx, 1,000,000 out, text+image+pdf in,
reasoning, tools

** 1 removed**
- `switchpoint/router`

**✏️ 4 changed**
- `deepseek/deepseek-v4-flash`: max output tokens 16,384 → 65,536
- `tencent/hy3`: max input tokens 202,752 → 262,144
- `x-ai/grok-build-0.1`: added PDF input
- `z-ai/glm-5.2`: max output tokens 32,768 → 1,048,576

</details>

<details>
<summary>xai</summary>

** 1 added**
- `grok-4.5` — 500,000 ctx, 500,000 out, text+image+pdf in, reasoning,
tools

</details>

Co-authored-by: mdrxy <61371264+mdrxy@users.noreply.github.com>
2026-07-09 12:12:22 -04:00
ccurme
bc1540084b release(openai): 1.3.4 (#38731) langchain-openai==1.3.4 2026-07-08 18:51:10 -04:00
ccurme
123d83282a release(langchain): 1.3.12 (#38730) langchain==1.3.12 2026-07-08 18:34:51 -04:00
Naomi
fa0114511b fix(openai): suppress Pydantic serializer warning on structured output parsed field (#37727) 2026-07-08 18:28:39 -04:00