feat(langchain): add provider inference metadata to init_chat_model

.github/ISSUE_TEMPLATE/bug-report.yml

@@ -6,8 +6,6 @@ body:
   - type: markdown
     attributes:
       value: |
-        > **All contributions must be in English.** See the [language policy](https://docs.langchain.com/oss/python/contributing/overview#language-policy).
-
         Thank you for taking the time to file a bug report.
 
         For usage questions, feature requests and general design questions, please use the [LangChain Forum](https://forum.langchain.com/).
@@ -67,7 +65,6 @@ body:
         - label: langchain-mistralai
         - label: langchain-nomic
         - label: langchain-ollama
-        - label: langchain-openrouter
         - label: langchain-perplexity
         - label: langchain-qdrant
         - label: langchain-xai

.github/ISSUE_TEMPLATE/feature-request.yml

@@ -6,8 +6,6 @@ body:
   - type: markdown
     attributes:
       value: |
-        > **All contributions must be in English.** See the [language policy](https://docs.langchain.com/oss/python/contributing/overview#language-policy).
-
         Thank you for taking the time to request a new feature.
 
         Use this to request NEW FEATURES or ENHANCEMENTS in LangChain. For bug reports, please use the bug report template. For usage questions and general design questions, please use the [LangChain Forum](https://forum.langchain.com/).
@@ -20,8 +18,6 @@ body:
         * [LangChain ChatBot](https://chat.langchain.com/)
         * [GitHub search](https://github.com/langchain-ai/langchain),
         * [LangChain Forum](https://forum.langchain.com/),
-
-        **Note:** Do not begin work on a PR unless explicitly assigned to this issue by a maintainer.
   - type: checkboxes
     id: checks
     attributes:
@@ -66,7 +62,6 @@ body:
         - label: langchain-mistralai
         - label: langchain-nomic
         - label: langchain-ollama
-        - label: langchain-openrouter
         - label: langchain-perplexity
         - label: langchain-qdrant
         - label: langchain-xai

.github/ISSUE_TEMPLATE/privileged.yml

@@ -42,7 +42,6 @@ body:
         - label: langchain-mistralai
         - label: langchain-nomic
         - label: langchain-ollama
-        - label: langchain-openrouter
         - label: langchain-perplexity
         - label: langchain-qdrant
         - label: langchain-xai

.github/ISSUE_TEMPLATE/task.yml

@@ -113,7 +113,6 @@ body:
         - label: langchain-mistralai
         - label: langchain-nomic
         - label: langchain-ollama
-        - label: langchain-openrouter
         - label: langchain-perplexity
         - label: langchain-qdrant
         - label: langchain-xai

.github/PULL_REQUEST_TEMPLATE.md

@@ -1,11 +1,6 @@
-Fixes #
-
-<!-- Replace everything above this line with a 1-2 sentence description of your change. Keep the "Fixes #xx" keyword and update the issue number. -->
+(Replace this entire block of text)
 
 Read the full contributing guidelines: https://docs.langchain.com/oss/python/contributing/overview
-
-> **All contributions must be in English.** See the [language policy](https://docs.langchain.com/oss/python/contributing/overview#language-policy).
-
 If you paste a large clearly AI generated description here your PR may be IGNORED or CLOSED!
 
 Thank you for contributing to LangChain! Follow these steps to have your pull request considered as ready for review.
@@ -21,7 +16,7 @@ Thank you for contributing to LangChain! Follow these steps to have your pull re
 2. PR description:
 
   - Write 1-2 sentences summarizing the change.
-  - The `Fixes #xx` line at the top is **required** for external contributions — update the issue number and keep the keyword. This links your PR to the approved issue and auto-closes it on merge.
+  - If this PR addresses a specific issue, please include "Fixes #ISSUE_NUMBER" in the description to automatically close the issue when the PR is merged.
   - If there are any breaking changes, please clearly describe them.
   - If this PR depends on another PR being merged first, please include "Depends on #PR_NUMBER" in the description.
 
@@ -33,7 +28,7 @@ Thank you for contributing to LangChain! Follow these steps to have your pull re
 
 Additional guidelines:
 
-  - All external PRs must link to an issue or discussion where a solution has been approved by a maintainer, and you must be assigned to that issue. PRs without prior approval will be closed.
+  - We ask that if you use generative AI for your contribution, you include a disclaimer.
   - PRs should not touch more than one package unless absolutely necessary.
   - Do not update the `uv.lock` files or add dependencies to `pyproject.toml` files (even optional ones) unless you have explicit permission to do so by a maintainer.
 

.github/actions/uv_setup/action.yml

@@ -27,7 +27,7 @@ runs:
   using: composite
   steps:
     - name: Install uv and set the python version
-      uses: astral-sh/setup-uv@0ca8f610542aa7f4acaf39e65cf4eb3c35091883 # v7
+      uses: astral-sh/setup-uv@v7
       with:
         version: ${{ env.UV_VERSION }}
         python-version: ${{ inputs.python-version }}

.github/dependabot.yml

@@ -8,42 +8,20 @@ updates:
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
-      interval: "monthly"
+      interval: "weekly"
     groups:
-      minor-and-patch:
+      github-actions:
         patterns:
           - "*"
-        update-types:
-          - "minor"
-          - "patch"
-      major:
-        patterns:
-          - "*"
-        update-types:
-          - "major"
 
-  - package-ecosystem: "uv"
+  - package-ecosystem: "pip"
     directories:
       - "/libs/core/"
       - "/libs/langchain/"
       - "/libs/langchain_v1/"
-    schedule:
-      interval: "monthly"
-    groups:
-      minor-and-patch:
-        patterns:
-          - "*"
-        update-types:
-          - "minor"
-          - "patch"
-      major:
-        patterns:
-          - "*"
-        update-types:
-          - "major"
-
-  - package-ecosystem: "uv"
-    directories:
+      - "/libs/text-splitters/"
+      - "/libs/standard-tests/"
+      - "/libs/model-profiles/"
       - "/libs/partners/anthropic/"
       - "/libs/partners/chroma/"
       - "/libs/partners/deepseek/"
@@ -55,41 +33,12 @@ updates:
       - "/libs/partners/nomic/"
       - "/libs/partners/ollama/"
       - "/libs/partners/openai/"
-      - "/libs/partners/openrouter/"
       - "/libs/partners/perplexity/"
       - "/libs/partners/qdrant/"
       - "/libs/partners/xai/"
     schedule:
-      interval: "monthly"
+      interval: "weekly"
     groups:
-      minor-and-patch:
+      python-deps:
         patterns:
           - "*"
-        update-types:
-          - "minor"
-          - "patch"
-      major:
-        patterns:
-          - "*"
-        update-types:
-          - "major"
-
-  - package-ecosystem: "uv"
-    directories:
-      - "/libs/text-splitters/"
-      - "/libs/standard-tests/"
-      - "/libs/model-profiles/"
-    schedule:
-      interval: "monthly"
-    groups:
-      minor-and-patch:
-        patterns:
-          - "*"
-        update-types:
-          - "minor"
-          - "patch"
-      major:
-        patterns:
-          - "*"
-        update-types:
-          - "major"

.github/images/logo-dark.svg

@@ -1,6 +1,25 @@
-<svg width="472" height="100" viewBox="0 0 472 100" fill="none" xmlns="http://www.w3.org/2000/svg">
-<rect width="100" height="100" rx="20" fill="#161F34"/>
-<path d="M54.2612 54.2583L63.1942 45.3253C67.8979 40.6215 67.8979 32.9952 63.1942 28.2914C58.4904 23.5877 50.8641 23.5877 46.1603 28.2914L37.2273 37.2244" stroke="#7FC8FF" stroke-width="12.0389"/>
-<path d="M45.7427 45.7412L36.8098 54.6742C32.106 59.3779 32.106 67.0042 36.8098 71.708C41.5135 76.4118 49.1398 76.4118 53.8436 71.708L62.7766 62.775" stroke="#7FC8FF" stroke-width="12.0389"/>
-<path d="M142.427 70.248V65.748H153.227V32.748H142.427V28.248H158.147V65.748H168.947V70.248H142.427ZM189.174 70.608C182.454 70.608 177.894 67.248 177.894 61.668C177.894 55.548 182.154 52.128 190.194 52.128H199.194V50.028C199.194 46.068 196.374 43.668 191.574 43.668C187.254 43.668 184.374 45.708 183.774 48.828H178.854C179.574 42.828 184.434 39.288 191.814 39.288C199.614 39.288 204.114 43.188 204.114 50.328V63.708C204.114 65.328 204.714 65.748 206.094 65.748H207.654V70.248H204.954C200.874 70.248 199.494 68.508 199.434 65.508C197.514 68.268 194.454 70.608 189.174 70.608ZM189.534 66.408C195.654 66.408 199.194 62.868 199.194 57.768V56.268H189.714C185.334 56.268 182.874 57.888 182.874 61.368C182.874 64.368 185.454 66.408 189.534 66.408ZM216.601 70.248V39.648H220.861L221.521 43.788C223.321 41.448 226.321 39.288 231.121 39.288C237.601 39.288 243.001 42.948 243.001 52.848V70.248H238.081V53.148C238.081 47.028 235.201 43.788 230.281 43.788C224.941 43.788 221.521 47.928 221.521 53.988V70.248H216.601ZM266.348 82.608C258.548 82.608 253.088 78.948 252.308 72.228H257.348C258.188 76.068 261.608 78.228 266.708 78.228C273.128 78.228 276.608 75.228 276.608 68.568V64.968C274.568 68.448 271.268 70.608 266.108 70.608C257.648 70.608 251.408 64.908 251.408 54.948C251.408 45.588 257.648 39.288 266.108 39.288C271.268 39.288 274.688 41.508 276.608 44.928L277.268 39.648H281.528V68.748C281.528 77.568 276.848 82.608 266.348 82.608ZM266.588 66.228C272.588 66.228 276.668 61.608 276.668 55.068C276.668 48.348 272.588 43.668 266.588 43.668C260.528 43.668 256.448 48.288 256.448 54.948C256.448 61.608 260.528 66.228 266.588 66.228ZM304.875 70.608C295.935 70.608 290.055 64.548 290.055 55.008C290.055 45.648 296.115 39.288 304.995 39.288C312.495 39.288 317.235 43.488 318.495 50.208H313.335C312.435 46.128 309.435 43.668 304.935 43.668C299.055 43.668 295.095 48.348 295.095 55.008C295.095 61.668 299.055 66.228 304.935 66.228C309.315 66.228 312.315 63.708 313.275 59.808H318.495C317.295 66.408 312.315 70.608 304.875 70.608ZM328.042 70.248V28.248H332.962V43.788C335.242 40.968 338.782 39.288 342.742 39.288C350.422 39.288 354.802 44.388 354.802 53.208V70.248H349.882V53.508C349.882 47.268 347.002 43.788 341.902 43.788C336.442 43.788 332.962 48.108 332.962 54.948V70.248H328.042ZM375.209 70.608C368.489 70.608 363.929 67.248 363.929 61.668C363.929 55.548 368.189 52.128 376.229 52.128H385.229V50.028C385.229 46.068 382.409 43.668 377.609 43.668C373.289 43.668 370.409 45.708 369.809 48.828H364.889C365.609 42.828 370.469 39.288 377.849 39.288C385.649 39.288 390.149 43.188 390.149 50.328V63.708C390.149 65.328 390.749 65.748 392.129 65.748H393.689V70.248H390.989C386.909 70.248 385.529 68.508 385.469 65.508C383.549 68.268 380.489 70.608 375.209 70.608ZM375.569 66.408C381.689 66.408 385.229 62.868 385.229 57.768V56.268H375.749C371.369 56.268 368.909 57.888 368.909 61.368C368.909 64.368 371.489 66.408 375.569 66.408ZM403.476 70.248V65.748H414.276V44.148H403.476V39.648H419.196V65.748H429.996V70.248H403.476ZM416.796 34.248C414.576 34.248 412.836 32.568 412.836 30.288C412.836 28.068 414.576 26.388 416.796 26.388C419.016 26.388 420.756 28.068 420.756 30.288C420.756 32.568 419.016 34.248 416.796 34.248ZM439.843 70.248V39.648H444.103L444.763 43.788C446.563 41.448 449.563 39.288 454.363 39.288C460.843 39.288 466.243 42.948 466.243 52.848V70.248H461.323V53.148C461.323 47.028 458.443 43.788 453.523 43.788C448.183 43.788 444.763 47.928 444.763 53.988V70.248H439.843Z" fill="white"/>
-</svg>
+<?xml version="1.0" encoding="UTF-8"?>
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1584.81 250">
+  <defs>
+    <style>
+      .cls-1 {
+        fill: #1c3c3c;
+        stroke-width: 0px;
+      }
+    </style>
+  </defs>
+  <g id="LanChain-logo">
+    <g id="LangChain-logotype">
+      <polygon class="cls-1" points="596.33 49.07 596.33 200.67 700.76 200.67 700.76 177.78 620.04 177.78 620.04 49.07 596.33 49.07"/>
+      <path class="cls-1" d="M1126.83,49.07c-20.53,0-37.95,7.4-50.38,21.41-12.32,13.88-18.82,33.36-18.82,56.33,0,47.23,27.25,77.75,69.41,77.75,29.71,0,52.71-15.54,61.54-41.56l2.14-6.31-23.53-8.94-2.17,7.03c-5.26,17.01-18.75,26.38-37.99,26.38-27.48,0-44.55-20.82-44.55-54.34s17.23-54.34,44.97-54.34c19.23,0,30.31,7.54,35.95,24.44l2.46,7.37,22.91-10.75-2.1-5.9c-8.96-25.22-29.65-38.56-59.85-38.56Z"/>
+      <path class="cls-1" d="M756.43,85.05c-22.76,0-39.78,10.67-46.69,29.27-.44,1.19-1.77,4.78-1.77,4.78l19.51,12.62,2.65-6.91c4.52-11.78,12.88-17.27,26.3-17.27s21.1,6.51,20.96,19.33c0,.52-.04,2.09-.04,2.09,0,0-17.76,2.88-25.08,4.43-31.23,6.6-44.31,18.52-44.31,38.02,0,10.39,5.77,21.64,16.3,27.95,6.32,3.78,14.57,5.21,23.68,5.21,5.99,0,11.81-.89,17.2-2.53,12.25-4.07,15.67-12.07,15.67-12.07v10.46h20.29v-74.78c0-25.42-16.7-40.6-44.67-40.6ZM777.46,164.85c0,7.86-8.56,18.93-28.5,18.93-5.63,0-9.62-1.49-12.28-3.71-3.56-2.97-4.73-7.24-4.24-11.01.21-1.64,1.2-5.17,4.87-8.23,3.75-3.13,10.38-5.37,20.62-7.6,8.42-1.83,19.54-3.85,19.54-3.85v15.48Z"/>
+      <path class="cls-1" d="M876.11,85.04c-2.82,0-5.57.2-8.24.57-18.17,2.73-23.49,11.96-23.49,11.96l.02-9.31h-22.74s0,112.19,0,112.19h23.71v-62.18c0-21.13,15.41-30.75,29.73-30.75,15.48,0,23,8.32,23,25.45v67.48h23.71v-70.74c0-27.56-17.51-44.67-45.69-44.67Z"/>
+      <path class="cls-1" d="M1539.12,85.04c-2.82,0-5.57.2-8.24.57-18.17,2.73-23.49,11.96-23.49,11.96v-9.32h-22.72v112.2h23.71v-62.18c0-21.13,15.41-30.75,29.73-30.75,15.48,0,23,8.32,23,25.45v67.48h23.71v-70.74c0-27.56-17.51-44.67-45.69-44.67Z"/>
+      <path class="cls-1" d="M1020.76,88.26v11.55s-5.81-14.77-32.24-14.77c-32.84,0-53.24,22.66-53.24,59.15,0,20.59,6.58,36.8,18.19,47.04,9.03,7.96,21.09,12.04,35.45,12.32,9.99.19,16.46-2.53,20.5-5.1,7.76-4.94,10.64-9.63,10.64-9.63,0,0-.33,3.67-.93,8.64-.43,3.6-1.24,6.13-1.24,6.13h0c-3.61,12.85-14.17,20.28-29.57,20.28s-24.73-5.07-26.58-15.06l-23.05,6.88c3.98,19.2,22,30.66,48.2,30.66,17.81,0,31.77-4.84,41.5-14.4,9.81-9.64,14.79-23.53,14.79-41.29v-102.41h-22.42ZM1019.26,145.21c0,22.44-10.96,35.84-29.32,35.84-19.67,0-30.95-13.44-30.95-36.86s11.28-36.66,30.95-36.66c17.92,0,29.15,13.34,29.32,34.82v2.86Z"/>
+      <path class="cls-1" d="M1259.01,85.04c-2.6,0-5.13.17-7.59.49-17.88,2.79-23.14,11.9-23.14,11.9v-2.67h-.01s0-45.69,0-45.69h-23.71v151.39h23.71v-62.18c0-21.27,15.41-30.95,29.73-30.95,15.48,0,23,8.32,23,25.45v67.68h23.71v-70.94c0-27.01-17.94-44.47-45.69-44.47Z"/>
+      <circle class="cls-1" cx="1450.93" cy="64.47" r="15.37"/>
+      <path class="cls-1" d="M1439.14,88.2v56.94h0c-6.75-5.56-14.6-9.75-23.5-12.26v-7.23c0-25.42-16.7-40.6-44.67-40.6-22.76,0-39.78,10.67-46.69,29.27-.44,1.19-1.77,4.78-1.77,4.78l19.51,12.62,2.65-6.91c4.52-11.78,12.88-17.27,26.3-17.27s21.1,6.51,20.96,19.33c0,.08,0,1.15,0,2.86-10.04-.28-19.38.69-27.77,2.66,0,0,0,0,0,0-11.06,2.5-31.6,8.85-38.94,25.36-.05.11-1.13,2.96-1.13,2.96-1.06,3.28-1.59,6.84-1.59,10.7,0,10.39,5.77,21.64,16.3,27.95,6.32,3.78,14.57,5.21,23.68,5.21,5.88,0,11.6-.86,16.91-2.44,12.49-4.04,15.96-12.16,15.96-12.16v10.47h20.29v-34.27c-5.7-3.56-14.26-5.66-23.65-5.64,0,2.65,0,4.33,0,4.33,0,7.86-8.56,18.93-28.5,18.93-5.63,0-9.62-1.49-12.28-3.71-3.56-2.97-4.73-7.24-4.24-11.01.21-1.64,1.2-5.17,4.87-8.23l-.04-.11c8.42-6.89,24.97-9.64,40.17-9.04v.03c12.94.47,22.62,3.01,29.53,7.77,1.88,1.19,3.65,2.52,5.28,3.98,6.94,6.23,9.73,13.9,10.93,18.38,1.95,7.31,1.43,18.57,1.43,18.57h23.59v-112.2h-23.59Z"/>
+    </g>
+    <path id="LangChain-symbol" class="cls-1" d="M393.52,75.2c9.66,9.66,9.66,25.38,0,35.04l-21.64,21.29-.22-1.22c-1.58-8.75-5.74-16.69-12.02-22.97-4.73-4.72-10.32-8.21-16.62-10.37-3.91,3.93-6.06,9.08-6.06,14.5,0,1.1.1,2.24.3,3.38,3.47,1.25,6.54,3.18,9.12,5.76,9.66,9.66,9.66,25.38,0,35.04l-18.84,18.84c-4.83,4.83-11.17,7.24-17.52,7.24s-12.69-2.41-17.52-7.24c-9.66-9.66-9.66-25.38,0-35.04l21.64-21.28.22,1.22c1.57,8.73,5.73,16.67,12.03,22.96,4.74,4.74,9.99,7.89,16.28,10.04l1.16-1.16c3.52-3.52,5.45-8.2,5.45-13.19,0-1.11-.1-2.22-.29-3.31-3.63-1.2-6.62-2.91-9.34-5.63-3.92-3.92-6.36-8.93-7.04-14.48-.05-.4-.08-.79-.12-1.19-.54-7.23,2.07-14.29,7.16-19.37l18.84-18.84c4.67-4.67,10.89-7.25,17.52-7.25s12.85,2.57,17.52,7.25ZM491.9,125c0,68.93-56.08,125-125,125H125C56.08,250,0,193.93,0,125S56.08,0,125,0h241.9c68.93,0,125,56.08,125,125ZM240.9,187.69c1.97-2.39-7.13-9.12-8.99-11.59-3.78-4.1-3.8-10-6.35-14.79-6.24-14.46-13.41-28.81-23.44-41.05-10.6-13.39-23.68-24.47-35.17-37.04-8.53-8.77-10.81-21.26-18.34-30.69-10.38-15.33-43.2-19.51-48.01,2.14.02.68-.19,1.11-.78,1.54-2.66,1.93-5.03,4.14-7.02,6.81-4.87,6.78-5.62,18.28.46,24.37.2-3.21.31-6.24,2.85-8.54,4.7,4.03,11.8,5.46,17.25,2.45,12.04,17.19,9.04,40.97,18.6,59.49,2.64,4.38,5.3,8.85,8.69,12.69,2.75,4.28,12.25,9.33,12.81,13.29.1,6.8-.7,14.23,3.76,19.92,2.1,4.26-3.06,8.54-7.22,8.01-5.4.74-11.99-3.63-16.72-.94-1.67,1.81-4.94-.19-6.38,2.32-.5,1.3-3.2,3.13-1.59,4.38,1.79-1.36,3.45-2.78,5.86-1.97-.36,1.96,1.19,2.24,2.42,2.81-.04,1.33-.82,2.69.2,3.82,1.19-1.2,1.9-2.9,3.79-3.4,6.28,8.37,12.67-8.47,26.26-.89-2.76-.14-5.21.21-7.07,2.48-.46.51-.85,1.11-.04,1.77,7.33-4.73,7.29,1.62,12.05-.33,3.66-1.91,7.3-4.3,11.65-3.62-4.23,1.22-4.4,4.62-6.88,7.49-.42.44-.62.94-.13,1.67,8.78-.74,9.5-3.66,16.59-7.24,5.29-3.23,10.56,4.6,15.14.14,1.01-.97,2.39-.64,3.64-.77-1.6-8.53-19.19,1.56-18.91-9.88,5.66-3.85,4.36-11.22,4.74-17.17,6.51,3.61,13.75,5.71,20.13,9.16,3.22,5.2,8.27,12.07,15,11.62.18-.52.34-.98.53-1.51,2.04.35,4.66,1.7,5.78-.88,3.05,3.19,7.53,3.03,11.52,2.21,2.95-2.4-5.55-5.82-6.69-8.29ZM419.51,92.72c0-11.64-4.52-22.57-12.73-30.78-8.21-8.21-19.14-12.73-30.79-12.73s-22.58,4.52-30.79,12.73l-18.84,18.84c-4.4,4.4-7.74,9.57-9.93,15.36l-.13.33-.34.1c-6.84,2.11-12.87,5.73-17.92,10.78l-18.84,18.84c-16.97,16.98-16.97,44.6,0,61.57,8.21,8.21,19.14,12.73,30.78,12.73h0c11.64,0,22.58-4.52,30.79-12.73l18.84-18.84c4.38-4.38,7.7-9.53,9.89-15.31l.13-.33.34-.11c6.72-2.06,12.92-5.8,17.95-10.82l18.84-18.84c8.21-8.21,12.73-19.14,12.73-30.79ZM172.38,173.6c-1.62,6.32-2.15,17.09-10.37,17.4-.68,3.65,2.53,5.02,5.44,3.85,2.89-1.33,4.26,1.05,5.23,3.42,4.46.65,11.06-1.49,11.31-6.77-6.66-3.84-8.72-11.14-11.62-17.9Z"/>
+  </g>
+</svg>

.github/images/logo-light.svg

@@ -1,6 +1,25 @@
-<svg width="472" height="100" viewBox="0 0 472 100" fill="none" xmlns="http://www.w3.org/2000/svg">
-<rect width="100" height="100" rx="20" fill="#161F34"/>
-<path d="M54.2612 54.2583L63.1942 45.3253C67.8979 40.6215 67.8979 32.9952 63.1942 28.2914C58.4904 23.5877 50.8641 23.5877 46.1603 28.2914L37.2273 37.2244" stroke="#7FC8FF" stroke-width="12.0389"/>
-<path d="M45.7427 45.7411L36.8098 54.6741C32.106 59.3779 32.106 67.0042 36.8098 71.7079C41.5135 76.4117 49.1398 76.4117 53.8436 71.7079L62.7766 62.775" stroke="#7FC8FF" stroke-width="12.0389"/>
-<path d="M142.427 70.248V65.748H153.227V32.748H142.427V28.248H158.147V65.748H168.947V70.248H142.427ZM189.174 70.608C182.454 70.608 177.894 67.248 177.894 61.668C177.894 55.548 182.154 52.128 190.194 52.128H199.194V50.028C199.194 46.068 196.374 43.668 191.574 43.668C187.254 43.668 184.374 45.708 183.774 48.828H178.854C179.574 42.828 184.434 39.288 191.814 39.288C199.614 39.288 204.114 43.188 204.114 50.328V63.708C204.114 65.328 204.714 65.748 206.094 65.748H207.654V70.248H204.954C200.874 70.248 199.494 68.508 199.434 65.508C197.514 68.268 194.454 70.608 189.174 70.608ZM189.534 66.408C195.654 66.408 199.194 62.868 199.194 57.768V56.268H189.714C185.334 56.268 182.874 57.888 182.874 61.368C182.874 64.368 185.454 66.408 189.534 66.408ZM216.601 70.248V39.648H220.861L221.521 43.788C223.321 41.448 226.321 39.288 231.121 39.288C237.601 39.288 243.001 42.948 243.001 52.848V70.248H238.081V53.148C238.081 47.028 235.201 43.788 230.281 43.788C224.941 43.788 221.521 47.928 221.521 53.988V70.248H216.601ZM266.348 82.608C258.548 82.608 253.088 78.948 252.308 72.228H257.348C258.188 76.068 261.608 78.228 266.708 78.228C273.128 78.228 276.608 75.228 276.608 68.568V64.968C274.568 68.448 271.268 70.608 266.108 70.608C257.648 70.608 251.408 64.908 251.408 54.948C251.408 45.588 257.648 39.288 266.108 39.288C271.268 39.288 274.688 41.508 276.608 44.928L277.268 39.648H281.528V68.748C281.528 77.568 276.848 82.608 266.348 82.608ZM266.588 66.228C272.588 66.228 276.668 61.608 276.668 55.068C276.668 48.348 272.588 43.668 266.588 43.668C260.528 43.668 256.448 48.288 256.448 54.948C256.448 61.608 260.528 66.228 266.588 66.228ZM304.875 70.608C295.935 70.608 290.055 64.548 290.055 55.008C290.055 45.648 296.115 39.288 304.995 39.288C312.495 39.288 317.235 43.488 318.495 50.208H313.335C312.435 46.128 309.435 43.668 304.935 43.668C299.055 43.668 295.095 48.348 295.095 55.008C295.095 61.668 299.055 66.228 304.935 66.228C309.315 66.228 312.315 63.708 313.275 59.808H318.495C317.295 66.408 312.315 70.608 304.875 70.608ZM328.042 70.248V28.248H332.962V43.788C335.242 40.968 338.782 39.288 342.742 39.288C350.422 39.288 354.802 44.388 354.802 53.208V70.248H349.882V53.508C349.882 47.268 347.002 43.788 341.902 43.788C336.442 43.788 332.962 48.108 332.962 54.948V70.248H328.042ZM375.209 70.608C368.489 70.608 363.929 67.248 363.929 61.668C363.929 55.548 368.189 52.128 376.229 52.128H385.229V50.028C385.229 46.068 382.409 43.668 377.609 43.668C373.289 43.668 370.409 45.708 369.809 48.828H364.889C365.609 42.828 370.469 39.288 377.849 39.288C385.649 39.288 390.149 43.188 390.149 50.328V63.708C390.149 65.328 390.749 65.748 392.129 65.748H393.689V70.248H390.989C386.909 70.248 385.529 68.508 385.469 65.508C383.549 68.268 380.489 70.608 375.209 70.608ZM375.569 66.408C381.689 66.408 385.229 62.868 385.229 57.768V56.268H375.749C371.369 56.268 368.909 57.888 368.909 61.368C368.909 64.368 371.489 66.408 375.569 66.408ZM403.476 70.248V65.748H414.276V44.148H403.476V39.648H419.196V65.748H429.996V70.248H403.476ZM416.796 34.248C414.576 34.248 412.836 32.568 412.836 30.288C412.836 28.068 414.576 26.388 416.796 26.388C419.016 26.388 420.756 28.068 420.756 30.288C420.756 32.568 419.016 34.248 416.796 34.248ZM439.843 70.248V39.648H444.103L444.763 43.788C446.563 41.448 449.563 39.288 454.363 39.288C460.843 39.288 466.243 42.948 466.243 52.848V70.248H461.323V53.148C461.323 47.028 458.443 43.788 453.523 43.788C448.183 43.788 444.763 47.928 444.763 53.988V70.248H439.843Z" fill="#161F34"/>
-</svg>
+<?xml version="1.0" encoding="UTF-8"?>
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1584.81 250">
+  <defs>
+    <style>
+      .cls-1 {
+        fill: #fff;
+        stroke-width: 0px;
+      }
+    </style>
+  </defs>
+  <g id="LanChain-logo">
+    <g id="LangChain-logotype">
+      <polygon class="cls-1" points="596.33 49.07 596.33 200.67 700.76 200.67 700.76 177.78 620.04 177.78 620.04 49.07 596.33 49.07"/>
+      <path class="cls-1" d="M1126.83,49.07c-20.53,0-37.95,7.4-50.38,21.41-12.32,13.88-18.82,33.36-18.82,56.33,0,47.23,27.25,77.75,69.41,77.75,29.71,0,52.71-15.54,61.54-41.56l2.14-6.31-23.53-8.94-2.17,7.03c-5.26,17.01-18.75,26.38-37.99,26.38-27.48,0-44.55-20.82-44.55-54.34s17.23-54.34,44.97-54.34c19.23,0,30.31,7.54,35.95,24.44l2.46,7.37,22.91-10.75-2.1-5.9c-8.96-25.22-29.65-38.56-59.85-38.56Z"/>
+      <path class="cls-1" d="M756.43,85.05c-22.76,0-39.78,10.67-46.69,29.27-.44,1.19-1.77,4.78-1.77,4.78l19.51,12.62,2.65-6.91c4.52-11.78,12.88-17.27,26.3-17.27s21.1,6.51,20.96,19.33c0,.52-.04,2.09-.04,2.09,0,0-17.76,2.88-25.08,4.43-31.23,6.6-44.31,18.52-44.31,38.02,0,10.39,5.77,21.64,16.3,27.95,6.32,3.78,14.57,5.21,23.68,5.21,5.99,0,11.81-.89,17.2-2.53,12.25-4.07,15.67-12.07,15.67-12.07v10.46h20.29v-74.78c0-25.42-16.7-40.6-44.67-40.6ZM777.46,164.85c0,7.86-8.56,18.93-28.5,18.93-5.63,0-9.62-1.49-12.28-3.71-3.56-2.97-4.73-7.24-4.24-11.01.21-1.64,1.2-5.17,4.87-8.23,3.75-3.13,10.38-5.37,20.62-7.6,8.42-1.83,19.54-3.85,19.54-3.85v15.48Z"/>
+      <path class="cls-1" d="M876.11,85.04c-2.82,0-5.57.2-8.24.57-18.17,2.73-23.49,11.96-23.49,11.96l.02-9.31h-22.74s0,112.19,0,112.19h23.71v-62.18c0-21.13,15.41-30.75,29.73-30.75,15.48,0,23,8.32,23,25.45v67.48h23.71v-70.74c0-27.56-17.51-44.67-45.69-44.67Z"/>
+      <path class="cls-1" d="M1539.12,85.04c-2.82,0-5.57.2-8.24.57-18.17,2.73-23.49,11.96-23.49,11.96v-9.32h-22.72v112.2h23.71v-62.18c0-21.13,15.41-30.75,29.73-30.75,15.48,0,23,8.32,23,25.45v67.48h23.71v-70.74c0-27.56-17.51-44.67-45.69-44.67Z"/>
+      <path class="cls-1" d="M1020.76,88.26v11.55s-5.81-14.77-32.24-14.77c-32.84,0-53.24,22.66-53.24,59.15,0,20.59,6.58,36.8,18.19,47.04,9.03,7.96,21.09,12.04,35.45,12.32,9.99.19,16.46-2.53,20.5-5.1,7.76-4.94,10.64-9.63,10.64-9.63,0,0-.33,3.67-.93,8.64-.43,3.6-1.24,6.13-1.24,6.13h0c-3.61,12.85-14.17,20.28-29.57,20.28s-24.73-5.07-26.58-15.06l-23.05,6.88c3.98,19.2,22,30.66,48.2,30.66,17.81,0,31.77-4.84,41.5-14.4,9.81-9.64,14.79-23.53,14.79-41.29v-102.41h-22.42ZM1019.26,145.21c0,22.44-10.96,35.84-29.32,35.84-19.67,0-30.95-13.44-30.95-36.86s11.28-36.66,30.95-36.66c17.92,0,29.15,13.34,29.32,34.82v2.86Z"/>
+      <path class="cls-1" d="M1259.01,85.04c-2.6,0-5.13.17-7.59.49-17.88,2.79-23.14,11.9-23.14,11.9v-2.67h-.01s0-45.69,0-45.69h-23.71v151.39h23.71v-62.18c0-21.27,15.41-30.95,29.73-30.95,15.48,0,23,8.32,23,25.45v67.68h23.71v-70.94c0-27.01-17.94-44.47-45.69-44.47Z"/>
+      <circle class="cls-1" cx="1450.93" cy="64.47" r="15.37"/>
+      <path class="cls-1" d="M1439.14,88.2v56.94h0c-6.75-5.56-14.6-9.75-23.5-12.26v-7.23c0-25.42-16.7-40.6-44.67-40.6-22.76,0-39.78,10.67-46.69,29.27-.44,1.19-1.77,4.78-1.77,4.78l19.51,12.62,2.65-6.91c4.52-11.78,12.88-17.27,26.3-17.27s21.1,6.51,20.96,19.33c0,.08,0,1.15,0,2.86-10.04-.28-19.38.69-27.77,2.66,0,0,0,0,0,0-11.06,2.5-31.6,8.85-38.94,25.36-.05.11-1.13,2.96-1.13,2.96-1.06,3.28-1.59,6.84-1.59,10.7,0,10.39,5.77,21.64,16.3,27.95,6.32,3.78,14.57,5.21,23.68,5.21,5.88,0,11.6-.86,16.91-2.44,12.49-4.04,15.96-12.16,15.96-12.16v10.47h20.29v-34.27c-5.7-3.56-14.26-5.66-23.65-5.64,0,2.65,0,4.33,0,4.33,0,7.86-8.56,18.93-28.5,18.93-5.63,0-9.62-1.49-12.28-3.71-3.56-2.97-4.73-7.24-4.24-11.01.21-1.64,1.2-5.17,4.87-8.23l-.04-.11c8.42-6.89,24.97-9.64,40.17-9.04v.03c12.94.47,22.62,3.01,29.53,7.77,1.88,1.19,3.65,2.52,5.28,3.98,6.94,6.23,9.73,13.9,10.93,18.38,1.95,7.31,1.43,18.57,1.43,18.57h23.59v-112.2h-23.59Z"/>
+    </g>
+    <path id="LangChain-symbol" class="cls-1" d="M393.52,75.2c9.66,9.66,9.66,25.38,0,35.04l-21.64,21.29-.22-1.22c-1.58-8.75-5.74-16.69-12.02-22.97-4.73-4.72-10.32-8.21-16.62-10.37-3.91,3.93-6.06,9.08-6.06,14.5,0,1.1.1,2.24.3,3.38,3.47,1.25,6.54,3.18,9.12,5.76,9.66,9.66,9.66,25.38,0,35.04l-18.84,18.84c-4.83,4.83-11.17,7.24-17.52,7.24s-12.69-2.41-17.52-7.24c-9.66-9.66-9.66-25.38,0-35.04l21.64-21.28.22,1.22c1.57,8.73,5.73,16.67,12.03,22.96,4.74,4.74,9.99,7.89,16.28,10.04l1.16-1.16c3.52-3.52,5.45-8.2,5.45-13.19,0-1.11-.1-2.22-.29-3.31-3.63-1.2-6.62-2.91-9.34-5.63-3.92-3.92-6.36-8.93-7.04-14.48-.05-.4-.08-.79-.12-1.19-.54-7.23,2.07-14.29,7.16-19.37l18.84-18.84c4.67-4.67,10.89-7.25,17.52-7.25s12.85,2.57,17.52,7.25ZM491.9,125c0,68.93-56.08,125-125,125H125C56.08,250,0,193.93,0,125S56.08,0,125,0h241.9C435.82,0,491.9,56.08,491.9,125ZM240.9,187.69c1.97-2.39-7.13-9.12-8.99-11.59-3.78-4.1-3.8-10-6.35-14.79-6.24-14.46-13.41-28.81-23.44-41.05-10.6-13.39-23.68-24.47-35.17-37.04-8.53-8.77-10.81-21.26-18.34-30.69-10.38-15.33-43.2-19.51-48.01,2.14.02.68-.19,1.11-.78,1.54-2.66,1.93-5.03,4.14-7.02,6.81-4.87,6.78-5.62,18.28.46,24.37.2-3.21.31-6.24,2.85-8.54,4.7,4.03,11.8,5.46,17.25,2.45,12.04,17.19,9.04,40.97,18.6,59.49,2.64,4.38,5.3,8.85,8.69,12.69,2.75,4.28,12.25,9.33,12.81,13.29.1,6.8-.7,14.23,3.76,19.92,2.1,4.26-3.06,8.54-7.22,8.01-5.4.74-11.99-3.63-16.72-.94-1.67,1.81-4.94-.19-6.38,2.32-.5,1.3-3.2,3.13-1.59,4.38,1.79-1.36,3.45-2.78,5.86-1.97-.36,1.96,1.19,2.24,2.42,2.81-.04,1.33-.82,2.69.2,3.82,1.19-1.2,1.9-2.9,3.79-3.4,6.28,8.37,12.67-8.47,26.26-.89-2.76-.14-5.21.21-7.07,2.48-.46.51-.85,1.11-.04,1.77,7.33-4.73,7.29,1.62,12.05-.33,3.66-1.91,7.3-4.3,11.65-3.62-4.23,1.22-4.4,4.62-6.88,7.49-.42.44-.62.94-.13,1.67,8.78-.74,9.5-3.66,16.59-7.24,5.29-3.23,10.56,4.6,15.14.14,1.01-.97,2.39-.64,3.64-.77-1.6-8.53-19.19,1.56-18.91-9.88,5.66-3.85,4.36-11.22,4.74-17.17,6.51,3.61,13.75,5.71,20.13,9.16,3.22,5.2,8.27,12.07,15,11.62.18-.52.34-.98.53-1.51,2.04.35,4.66,1.7,5.78-.88,3.05,3.19,7.53,3.03,11.52,2.21,2.95-2.4-5.55-5.82-6.69-8.29ZM419.51,92.72c0-11.64-4.52-22.57-12.73-30.78-8.21-8.21-19.14-12.73-30.79-12.73s-22.58,4.52-30.79,12.73l-18.84,18.84c-4.4,4.4-7.74,9.57-9.93,15.36l-.13.33-.34.1c-6.84,2.11-12.87,5.73-17.92,10.78l-18.84,18.84c-16.97,16.98-16.97,44.6,0,61.57,8.21,8.21,19.14,12.73,30.78,12.73h0c11.64,0,22.58-4.52,30.79-12.73l18.84-18.84c4.38-4.38,7.7-9.53,9.89-15.31l.13-.33.34-.11c6.72-2.06,12.92-5.8,17.95-10.82l18.84-18.84c8.21-8.21,12.73-19.14,12.73-30.79ZM172.38,173.6c-1.62,6.32-2.15,17.09-10.37,17.4-.68,3.65,2.53,5.02,5.44,3.85,2.89-1.33,4.26,1.05,5.23,3.42,4.46.65,11.06-1.49,11.31-6.77-6.66-3.84-8.72-11.14-11.62-17.9Z"/>
+  </g>
+</svg>

.github/pr-file-labeler.yml

@@ -0,0 +1,123 @@
+# Label PRs (config)
+# Automatically applies labels based on changed files and branch patterns
+
+# Core packages
+core:
+  - changed-files:
+      - any-glob-to-any-file:
+          - "libs/core/**/*"
+
+langchain-classic:
+  - changed-files:
+      - any-glob-to-any-file:
+          - "libs/langchain/**/*"
+
+langchain:
+  - changed-files:
+      - any-glob-to-any-file:
+          - "libs/langchain_v1/**/*"
+
+standard-tests:
+  - changed-files:
+      - any-glob-to-any-file:
+          - "libs/standard-tests/**/*"
+
+model-profiles:
+  - changed-files:
+      - any-glob-to-any-file:
+          - "libs/model-profiles/**/*"
+
+text-splitters:
+  - changed-files:
+      - any-glob-to-any-file:
+          - "libs/text-splitters/**/*"
+
+# Partner integrations
+integration:
+  - changed-files:
+      - any-glob-to-any-file:
+          - "libs/partners/**/*"
+
+anthropic:
+  - changed-files:
+      - any-glob-to-any-file:
+          - "libs/partners/anthropic/**/*"
+
+chroma:
+  - changed-files:
+      - any-glob-to-any-file:
+          - "libs/partners/chroma/**/*"
+
+deepseek:
+  - changed-files:
+      - any-glob-to-any-file:
+          - "libs/partners/deepseek/**/*"
+
+exa:
+  - changed-files:
+      - any-glob-to-any-file:
+          - "libs/partners/exa/**/*"
+
+fireworks:
+  - changed-files:
+      - any-glob-to-any-file:
+          - "libs/partners/fireworks/**/*"
+
+groq:
+  - changed-files:
+      - any-glob-to-any-file:
+          - "libs/partners/groq/**/*"
+
+huggingface:
+  - changed-files:
+      - any-glob-to-any-file:
+          - "libs/partners/huggingface/**/*"
+
+mistralai:
+  - changed-files:
+      - any-glob-to-any-file:
+          - "libs/partners/mistralai/**/*"
+
+nomic:
+  - changed-files:
+      - any-glob-to-any-file:
+          - "libs/partners/nomic/**/*"
+
+ollama:
+  - changed-files:
+      - any-glob-to-any-file:
+          - "libs/partners/ollama/**/*"
+
+openai:
+  - changed-files:
+      - any-glob-to-any-file:
+          - "libs/partners/openai/**/*"
+
+perplexity:
+  - changed-files:
+      - any-glob-to-any-file:
+          - "libs/partners/perplexity/**/*"
+
+qdrant:
+  - changed-files:
+      - any-glob-to-any-file:
+          - "libs/partners/qdrant/**/*"
+
+xai:
+  - changed-files:
+      - any-glob-to-any-file:
+          - "libs/partners/xai/**/*"
+
+github_actions:
+  - changed-files:
+      - any-glob-to-any-file:
+          - ".github/workflows/**/*"
+          - ".github/actions/**/*"
+
+dependencies:
+  - changed-files:
+      - any-glob-to-any-file:
+          - "**/pyproject.toml"
+          - "uv.lock"
+          - "**/requirements*.txt"
+          - "**/poetry.lock"

.github/scripts/check_diff.py

@@ -33,22 +33,18 @@ LANGCHAIN_DIRS = [
     "libs/model-profiles",
 ]
 
-# Packages with VCR cassette-backed integration tests.
-# These get a playback-only CI check to catch stale cassettes.
-VCR_PACKAGES = {
-    "libs/partners/openai",
-}
-
 # When set to True, we are ignoring core dependents
 # in order to be able to get CI to pass for each individual
 # package that depends on core
 # e.g. if you touch core, we don't then add textsplitters/etc to CI
 IGNORE_CORE_DEPENDENTS = False
 
-# Ignored partners are removed from dependents but still run if directly edited
+# ignored partners are removed from dependents
+# but still run if directly edited
 IGNORED_PARTNERS = [
     # remove huggingface from dependents because of CI instability
     # specifically in huggingface jobs
+    # https://github.com/langchain-ai/langchain/issues/25558
     "huggingface",
 ]
 
@@ -132,23 +128,12 @@ def _get_configs_for_single_dir(job: str, dir_: str) -> List[Dict[str, str]]:
         return _get_pydantic_test_configs(dir_)
 
     if job == "codspeed":
-        # CPU simulation (<1% variance, Valgrind-based) is the default.
-        # Partners with heavy SDK inits use walltime instead to keep CI fast.
-        CODSPEED_WALLTIME_DIRS = {
-            "libs/core",
-            "libs/partners/fireworks",  # ~328s under simulation
-            "libs/partners/openai",  # 6 benchmarks, ~6 min under simulation
-        }
-        mode = "walltime" if dir_ in CODSPEED_WALLTIME_DIRS else "simulation"
-        return [
-            {
-                "working-directory": dir_,
-                "python-version": "3.13",
-                "codspeed-mode": mode,
-            }
-        ]
-    if dir_ == "libs/core":
+        py_versions = ["3.13"]
+    elif dir_ == "libs/core":
         py_versions = ["3.10", "3.11", "3.12", "3.13", "3.14"]
+    # custom logic for specific directories
+    elif dir_ in {"libs/partners/chroma"}:
+        py_versions = ["3.10", "3.13"]
     else:
         py_versions = ["3.10", "3.14"]
 
@@ -226,14 +211,6 @@ def _get_configs_for_multi_dirs(
         dirs = list(dirs_to_run["extended-test"])
     elif job == "codspeed":
         dirs = list(dirs_to_run["codspeed"])
-    elif job == "vcr-tests":
-        # Only run VCR tests for packages that have cassettes and are affected
-        all_affected = set(
-            add_dependents(
-                dirs_to_run["test"] | dirs_to_run["extended-test"], dependents
-            )
-        )
-        dirs = [d for d in VCR_PACKAGES if d in all_affected]
     else:
         raise ValueError(f"Unknown job: {job}")
 
@@ -348,7 +325,6 @@ if __name__ == "__main__":
             "dependencies",
             "test-pydantic",
             "codspeed",
-            "vcr-tests",
         ]
     }
 

.github/scripts/get_min_versions.py

@@ -48,7 +48,7 @@ def get_pypi_versions(package_name: str) -> List[str]:
         KeyError: If package not found or response format unexpected
     """
     pypi_url = f"https://pypi.org/pypi/{package_name}/json"
-    response = requests.get(pypi_url, timeout=10.0)
+    response = requests.get(pypi_url)
     response.raise_for_status()
     return list(response.json()["releases"].keys())
 

.github/scripts/pr-labeler-config.json

@@ -1,84 +0,0 @@
-{
-  "trustedThreshold": 5,
-  "labelColor": "b76e79",
-  "sizeThresholds": [
-    { "label": "size: XS", "max": 50 },
-    { "label": "size: S", "max": 200 },
-    { "label": "size: M", "max": 500 },
-    { "label": "size: L", "max": 1000 },
-    { "label": "size: XL" }
-  ],
-  "excludedFiles": ["uv.lock"],
-  "excludedPaths": ["docs/"],
-  "typeToLabel": {
-    "feat": "feature",
-    "fix": "fix",
-    "docs": "documentation",
-    "style": "linting",
-    "refactor": "refactor",
-    "perf": "performance",
-    "test": "tests",
-    "build": "infra",
-    "ci": "infra",
-    "chore": "infra",
-    "revert": "revert",
-    "release": "release",
-    "hotfix": "hotfix",
-    "breaking": "breaking"
-  },
-  "scopeToLabel": {
-    "core": "core",
-    "langchain": "langchain",
-    "langchain-classic": "langchain-classic",
-    "model-profiles": "model-profiles",
-    "standard-tests": "standard-tests",
-    "text-splitters": "text-splitters",
-    "anthropic": "anthropic",
-    "chroma": "chroma",
-    "deepseek": "deepseek",
-    "exa": "exa",
-    "fireworks": "fireworks",
-    "groq": "groq",
-    "huggingface": "huggingface",
-    "mistralai": "mistralai",
-    "nomic": "nomic",
-    "ollama": "ollama",
-    "openai": "openai",
-    "openrouter": "openrouter",
-    "perplexity": "perplexity",
-    "qdrant": "qdrant",
-    "xai": "xai",
-    "deps": "dependencies",
-    "docs": "documentation",
-    "infra": "infra"
-  },
-  "fileRules": [
-    { "label": "core", "prefix": "libs/core/", "skipExcludedFiles": true },
-    { "label": "langchain-classic", "prefix": "libs/langchain/", "skipExcludedFiles": true },
-    { "label": "langchain", "prefix": "libs/langchain_v1/", "skipExcludedFiles": true },
-    { "label": "standard-tests", "prefix": "libs/standard-tests/", "skipExcludedFiles": true },
-    { "label": "model-profiles", "prefix": "libs/model-profiles/", "skipExcludedFiles": true },
-    { "label": "text-splitters", "prefix": "libs/text-splitters/", "skipExcludedFiles": true },
-    { "label": "integration", "prefix": "libs/partners/", "skipExcludedFiles": true },
-    { "label": "anthropic", "prefix": "libs/partners/anthropic/", "skipExcludedFiles": true },
-    { "label": "chroma", "prefix": "libs/partners/chroma/", "skipExcludedFiles": true },
-    { "label": "deepseek", "prefix": "libs/partners/deepseek/", "skipExcludedFiles": true },
-    { "label": "exa", "prefix": "libs/partners/exa/", "skipExcludedFiles": true },
-    { "label": "fireworks", "prefix": "libs/partners/fireworks/", "skipExcludedFiles": true },
-    { "label": "groq", "prefix": "libs/partners/groq/", "skipExcludedFiles": true },
-    { "label": "huggingface", "prefix": "libs/partners/huggingface/", "skipExcludedFiles": true },
-    { "label": "mistralai", "prefix": "libs/partners/mistralai/", "skipExcludedFiles": true },
-    { "label": "nomic", "prefix": "libs/partners/nomic/", "skipExcludedFiles": true },
-    { "label": "ollama", "prefix": "libs/partners/ollama/", "skipExcludedFiles": true },
-    { "label": "openai", "prefix": "libs/partners/openai/", "skipExcludedFiles": true },
-    { "label": "openrouter", "prefix": "libs/partners/openrouter/", "skipExcludedFiles": true },
-    { "label": "perplexity", "prefix": "libs/partners/perplexity/", "skipExcludedFiles": true },
-    { "label": "qdrant", "prefix": "libs/partners/qdrant/", "skipExcludedFiles": true },
-    { "label": "xai", "prefix": "libs/partners/xai/", "skipExcludedFiles": true },
-    { "label": "github_actions", "prefix": ".github/workflows/" },
-    { "label": "github_actions", "prefix": ".github/actions/" },
-    { "label": "dependencies", "suffix": "pyproject.toml" },
-    { "label": "dependencies", "exact": "uv.lock" },
-    { "label": "dependencies", "pattern": "(?:^|/)requirements[^/]*\\.txt$" }
-  ]
-}

.github/scripts/pr-labeler.js

@@ -1,278 +0,0 @@
-// Shared helpers for pr_labeler.yml and tag-external-issues.yml.
-//
-// Usage from actions/github-script (requires actions/checkout first):
-//   const { h } = require('./.github/scripts/pr-labeler.js').loadAndInit(github, owner, repo, core);
-
-const fs = require('fs');
-const path = require('path');
-
-function loadConfig() {
-  const configPath = path.join(__dirname, 'pr-labeler-config.json');
-  let raw;
-  try {
-    raw = fs.readFileSync(configPath, 'utf8');
-  } catch (e) {
-    throw new Error(`Failed to read ${configPath}: ${e.message}`);
-  }
-  let config;
-  try {
-    config = JSON.parse(raw);
-  } catch (e) {
-    throw new Error(`Failed to parse pr-labeler-config.json: ${e.message}`);
-  }
-  const required = [
-    'labelColor', 'sizeThresholds', 'fileRules',
-    'typeToLabel', 'scopeToLabel', 'trustedThreshold',
-    'excludedFiles', 'excludedPaths',
-  ];
-  const missing = required.filter(k => !(k in config));
-  if (missing.length > 0) {
-    throw new Error(`pr-labeler-config.json missing required keys: ${missing.join(', ')}`);
-  }
-  return config;
-}
-
-function init(github, owner, repo, config, core) {
-  if (!core) {
-    throw new Error('init() requires a `core` parameter (e.g., from actions/github-script)');
-  }
-  const {
-    trustedThreshold,
-    labelColor,
-    sizeThresholds,
-    scopeToLabel,
-    typeToLabel,
-    fileRules: fileRulesDef,
-    excludedFiles,
-    excludedPaths,
-  } = config;
-
-  const sizeLabels = sizeThresholds.map(t => t.label);
-  const allTypeLabels = [...new Set(Object.values(typeToLabel))];
-  const tierLabels = ['new-contributor', 'trusted-contributor'];
-
-  // ── Label management ──────────────────────────────────────────────
-
-  async function ensureLabel(name, color = labelColor) {
-    try {
-      await github.rest.issues.getLabel({ owner, repo, name });
-    } catch (e) {
-      if (e.status !== 404) throw e;
-      try {
-        await github.rest.issues.createLabel({ owner, repo, name, color });
-      } catch (createErr) {
-        // 422 = label created by a concurrent run between our get and create
-        if (createErr.status !== 422) throw createErr;
-        core.info(`Label "${name}" creation returned 422 (likely already exists)`);
-      }
-    }
-  }
-
-  // ── Size calculation ──────────────────────────────────────────────
-
-  function getSizeLabel(totalChanged) {
-    for (const t of sizeThresholds) {
-      if (t.max != null && totalChanged < t.max) return t.label;
-    }
-    // Last entry has no max — it's the catch-all
-    return sizeThresholds[sizeThresholds.length - 1].label;
-  }
-
-  function computeSize(files) {
-    const excluded = new Set(excludedFiles);
-    const totalChanged = files.reduce((sum, f) => {
-      const p = f.filename ?? '';
-      const base = p.split('/').pop();
-      if (excluded.has(base)) return sum;
-      for (const prefix of excludedPaths) {
-        if (p.startsWith(prefix)) return sum;
-      }
-      return sum + (f.additions ?? 0) + (f.deletions ?? 0);
-    }, 0);
-    return { totalChanged, sizeLabel: getSizeLabel(totalChanged) };
-  }
-
-  // ── File-based labels ─────────────────────────────────────────────
-
-  function buildFileRules() {
-    return fileRulesDef.map((rule, i) => {
-      let test;
-      if (rule.prefix) test = p => p.startsWith(rule.prefix);
-      else if (rule.suffix) test = p => p.endsWith(rule.suffix);
-      else if (rule.exact) test = p => p === rule.exact;
-      else if (rule.pattern) {
-        const re = new RegExp(rule.pattern);
-        test = p => re.test(p);
-      } else {
-        throw new Error(
-          `fileRules[${i}] (label: "${rule.label}") has no recognized matcher ` +
-          `(expected one of: prefix, suffix, exact, pattern)`
-        );
-      }
-      return { label: rule.label, test, skipExcluded: !!rule.skipExcludedFiles };
-    });
-  }
-
-  function matchFileLabels(files, fileRules) {
-    const rules = fileRules || buildFileRules();
-    const excluded = new Set(excludedFiles);
-    const labels = new Set();
-    for (const rule of rules) {
-      // skipExcluded: ignore files whose basename is in the top-level
-      // "excludedFiles" list (e.g. uv.lock) so lockfile-only changes
-      // don't trigger package labels.
-      const candidates = rule.skipExcluded
-        ? files.filter(f => !excluded.has((f.filename ?? '').split('/').pop()))
-        : files;
-      if (candidates.some(f => rule.test(f.filename ?? ''))) {
-        labels.add(rule.label);
-      }
-    }
-    return labels;
-  }
-
-  // ── Title-based labels ────────────────────────────────────────────
-
-  function matchTitleLabels(title) {
-    const labels = new Set();
-    const m = (title ?? '').match(/^(\w+)(?:\(([^)]+)\))?(!)?:/);
-    if (!m) return { labels, type: null, typeLabel: null, scopes: [], breaking: false };
-
-    const type = m[1].toLowerCase();
-    const scopeStr = m[2] ?? '';
-    const breaking = !!m[3];
-
-    const typeLabel = typeToLabel[type] || null;
-    if (typeLabel) labels.add(typeLabel);
-    if (breaking) labels.add('breaking');
-
-    const scopes = scopeStr.split(',').map(s => s.trim()).filter(Boolean);
-    for (const scope of scopes) {
-      const sl = scopeToLabel[scope];
-      if (sl) labels.add(sl);
-    }
-
-    return { labels, type, typeLabel, scopes, breaking };
-  }
-
-  // ── Org membership ────────────────────────────────────────────────
-
-  async function checkMembership(author, userType) {
-    if (userType === 'Bot') {
-      console.log(`${author} is a Bot — treating as internal`);
-      return { isExternal: false };
-    }
-
-    try {
-      const membership = await github.rest.orgs.getMembershipForUser({
-        org: 'langchain-ai',
-        username: author,
-      });
-      const isExternal = membership.data.state !== 'active';
-      console.log(
-        isExternal
-          ? `${author} has pending membership — treating as external`
-          : `${author} is an active member of langchain-ai`,
-      );
-      return { isExternal };
-    } catch (e) {
-      if (e.status === 404) {
-        console.log(`${author} is not a member of langchain-ai`);
-        return { isExternal: true };
-      }
-      // Non-404 errors (rate limit, auth failure, server error) must not
-      // silently default to external — rethrow to fail the step.
-      throw new Error(
-        `Membership check failed for ${author} (${e.status}): ${e.message}`,
-      );
-    }
-  }
-
-  // ── Contributor analysis ──────────────────────────────────────────
-
-  async function getContributorInfo(contributorCache, author, userType) {
-    if (contributorCache.has(author)) return contributorCache.get(author);
-
-    const { isExternal } = await checkMembership(author, userType);
-
-    let mergedCount = null;
-    if (isExternal) {
-      try {
-        const result = await github.rest.search.issuesAndPullRequests({
-          q: `repo:${owner}/${repo} is:pr is:merged author:"${author}"`,
-          per_page: 1,
-        });
-        mergedCount = result?.data?.total_count ?? null;
-      } catch (e) {
-        if (e?.status !== 422) throw e;
-        core.warning(`Search failed for ${author}; skipping tier.`);
-      }
-    }
-
-    const info = { isExternal, mergedCount };
-    contributorCache.set(author, info);
-    return info;
-  }
-
-  // ── Tier label resolution ───────────────────────────────────────────
-
-  async function applyTierLabel(issueNumber, author, { skipNewContributor = false } = {}) {
-    let mergedCount;
-    try {
-      const result = await github.rest.search.issuesAndPullRequests({
-        q: `repo:${owner}/${repo} is:pr is:merged author:"${author}"`,
-        per_page: 1,
-      });
-      mergedCount = result?.data?.total_count;
-    } catch (error) {
-      if (error?.status !== 422) throw error;
-      core.warning(`Search failed for ${author}; skipping tier label.`);
-      return;
-    }
-
-    if (mergedCount == null) {
-      core.warning(`Search response missing total_count for ${author}; skipping tier label.`);
-      return;
-    }
-
-    let tierLabel = null;
-    if (mergedCount >= trustedThreshold) tierLabel = 'trusted-contributor';
-    else if (mergedCount === 0 && !skipNewContributor) tierLabel = 'new-contributor';
-
-    if (tierLabel) {
-      await ensureLabel(tierLabel);
-      await github.rest.issues.addLabels({
-        owner, repo, issue_number: issueNumber, labels: [tierLabel],
-      });
-      console.log(`Applied '${tierLabel}' to #${issueNumber} (${mergedCount} merged PRs)`);
-    } else {
-      console.log(`No tier label for ${author} (${mergedCount} merged PRs)`);
-    }
-
-    return tierLabel;
-  }
-
-  return {
-    ensureLabel,
-    getSizeLabel,
-    computeSize,
-    buildFileRules,
-    matchFileLabels,
-    matchTitleLabels,
-    allTypeLabels,
-    checkMembership,
-    getContributorInfo,
-    applyTierLabel,
-    sizeLabels,
-    tierLabels,
-    trustedThreshold,
-    labelColor,
-  };
-}
-
-function loadAndInit(github, owner, repo, core) {
-  const config = loadConfig();
-  return { config, h: init(github, owner, repo, config, core) };
-}
-
-module.exports = { loadConfig, init, loadAndInit };

.github/scripts/test_release_options.py

@@ -1,48 +0,0 @@
-"""Verify _release.yml dropdown options match actual package directories."""
-
-from pathlib import Path
-
-import yaml
-
-REPO_ROOT = Path(__file__).resolve().parents[2]
-
-
-def _get_release_options() -> list[str]:
-    workflow = REPO_ROOT / ".github" / "workflows" / "_release.yml"
-    with open(workflow) as f:
-        data = yaml.safe_load(f)
-    try:
-        # PyYAML (YAML 1.1) parses the bare key `on` as boolean True
-        return data[True]["workflow_dispatch"]["inputs"]["working-directory"]["options"]
-    except (KeyError, TypeError) as e:
-        msg = f"Could not find workflow_dispatch options in {workflow}: {e}"
-        raise AssertionError(msg) from e
-
-
-def _get_package_dirs() -> set[str]:
-    libs = REPO_ROOT / "libs"
-    dirs: set[str] = set()
-    # Top-level packages (libs/core, libs/langchain, etc.)
-    for p in libs.iterdir():
-        if p.is_dir() and (p / "pyproject.toml").exists():
-            dirs.add(f"libs/{p.name}")
-    # Partner packages (libs/partners/*)
-    partners = libs / "partners"
-    if partners.exists():
-        for p in partners.iterdir():
-            if p.is_dir() and (p / "pyproject.toml").exists():
-                dirs.add(f"libs/partners/{p.name}")
-    return dirs
-
-
-def test_release_options_match_packages() -> None:
-    options = set(_get_release_options())
-    packages = _get_package_dirs()
-    missing_from_dropdown = packages - options
-    extra_in_dropdown = options - packages
-    assert not missing_from_dropdown, (
-        f"Packages on disk missing from _release.yml dropdown: {missing_from_dropdown}"
-    )
-    assert not extra_in_dropdown, (
-        f"Dropdown options with no matching package directory: {extra_in_dropdown}"
-    )

.github/workflows/_compile_integration_test.yml

@@ -35,7 +35,7 @@ jobs:
     timeout-minutes: 20
     name: "Python ${{ inputs.python-version }}"
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@v6
 
       - name: "🐍 Set up Python ${{ inputs.python-version }} + UV"
         uses: "./.github/actions/uv_setup"

.github/workflows/_lint.yml

@@ -38,7 +38,7 @@ jobs:
     timeout-minutes: 20
     steps:
       - name: "📋 Checkout Code"
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@v6
 
       - name: "🐍 Set up Python ${{ inputs.python-version }} + UV"
         uses: "./.github/actions/uv_setup"

.github/workflows/_refresh_model_profiles.yml

@@ -1,202 +0,0 @@
-# Reusable workflow: refreshes model profile data for any repo that uses the
-# `langchain-profiles` CLI. Creates (or updates) a pull request with the
-# resulting changes.
-#
-# Callers MUST set `permissions: { contents: write, pull-requests: write }` —
-# reusable workflows cannot escalate the caller's token permissions.
-#
-# ── Example: external repo (langchain-google) ──────────────────────────
-#
-#   jobs:
-#     refresh-profiles:
-#       uses: langchain-ai/langchain/.github/workflows/_refresh_model_profiles.yml@master
-#       with:
-#         providers: >-
-#           [
-#             {"provider":"google",        "data_dir":"libs/genai/langchain_google_genai/data"},
-#           ]
-#       secrets:
-#         MODEL_PROFILE_BOT_APP_ID:      ${{ secrets.MODEL_PROFILE_BOT_APP_ID }}
-#         MODEL_PROFILE_BOT_PRIVATE_KEY: ${{ secrets.MODEL_PROFILE_BOT_PRIVATE_KEY }}
-
-name: "Refresh Model Profiles (reusable)"
-
-on:
-  workflow_call:
-    inputs:
-      providers:
-        description: >-
-          JSON array of objects, each with `provider` (models.dev provider ID)
-          and `data_dir` (path relative to repo root where `_profiles.py` and
-          `profile_augmentations.toml` live).
-        required: true
-        type: string
-      cli-path:
-        description: >-
-          Path (relative to workspace) to an existing `libs/model-profiles`
-          checkout.  When set the workflow skips cloning the langchain repo and
-          uses this directory for the CLI instead.  Useful when the caller IS
-          the langchain monorepo.
-        required: false
-        type: string
-        default: ""
-      cli-ref:
-        description: >-
-          Git ref of langchain-ai/langchain to checkout for the CLI.
-          Ignored when `cli-path` is set.
-        required: false
-        type: string
-        default: master
-      add-paths:
-        description: "Glob for files to stage in the PR commit."
-        required: false
-        type: string
-        default: "**/_profiles.py"
-      pr-branch:
-        description: "Branch name for the auto-created PR."
-        required: false
-        type: string
-        default: bot/refresh-model-profiles
-      pr-title:
-        description: "PR / commit title."
-        required: false
-        type: string
-        default: "chore(model-profiles): refresh model profile data"
-      pr-body:
-        description: "PR body."
-        required: false
-        type: string
-        default: |
-          Automated refresh of model profile data via `langchain-profiles refresh`.
-
-          🤖 Generated by the `refresh_model_profiles` workflow.
-      pr-labels:
-        description: "Comma-separated labels to apply to the PR."
-        required: false
-        type: string
-        default: bot
-    secrets:
-      MODEL_PROFILE_BOT_APP_ID:
-        required: true
-      MODEL_PROFILE_BOT_PRIVATE_KEY:
-        required: true
-
-permissions:
-  contents: write
-  pull-requests: write
-
-jobs:
-  refresh-profiles:
-    name: refresh model profiles
-    runs-on: ubuntu-latest
-    steps:
-      - name: "📋 Checkout"
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-
-      - name: "📋 Checkout langchain-profiles CLI"
-        if: inputs.cli-path == ''
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-        with:
-          repository: langchain-ai/langchain
-          ref: ${{ inputs.cli-ref }}
-          sparse-checkout: libs/model-profiles
-          path: _langchain-cli
-
-      - name: "🔧 Resolve CLI directory"
-        id: cli
-        env:
-          CLI_PATH: ${{ inputs.cli-path }}
-        run: |
-          if [ -n "${CLI_PATH}" ]; then
-            resolved="${GITHUB_WORKSPACE}/${CLI_PATH}"
-            if [ ! -d "${resolved}" ]; then
-              echo "::error::cli-path '${CLI_PATH}' does not exist at ${resolved}"
-              exit 1
-            fi
-            echo "dir=${CLI_PATH}" >> "$GITHUB_OUTPUT"
-          else
-            echo "dir=_langchain-cli/libs/model-profiles" >> "$GITHUB_OUTPUT"
-          fi
-
-      - name: "🐍 Set up Python + uv"
-        uses: astral-sh/setup-uv@0ca8f610542aa7f4acaf39e65cf4eb3c35091883 # v7
-        with:
-          version: "0.5.25"
-          python-version: "3.12"
-          enable-cache: true
-          cache-dependency-glob: "**/model-profiles/uv.lock"
-
-      - name: "📦 Install langchain-profiles CLI"
-        working-directory: ${{ steps.cli.outputs.dir }}
-        run: uv sync --frozen --no-group test --no-group dev --no-group lint
-
-      - name: "✅ Validate providers input"
-        env:
-          PROVIDERS_JSON: ${{ inputs.providers }}
-        run: |
-          echo "${PROVIDERS_JSON}" | jq -e 'type == "array" and length > 0' > /dev/null || {
-            echo "::error::providers input must be a non-empty JSON array"
-            exit 1
-          }
-          echo "${PROVIDERS_JSON}" | jq -e 'all(has("provider") and has("data_dir"))' > /dev/null || {
-            echo "::error::every entry in providers must have 'provider' and 'data_dir' keys"
-            exit 1
-          }
-
-      - name: "🔄 Refresh profiles"
-        env:
-          PROVIDERS_JSON: ${{ inputs.providers }}
-        run: |
-          cli_dir="${GITHUB_WORKSPACE}/${{ steps.cli.outputs.dir }}"
-          failed=""
-          mapfile -t rows < <(echo "${PROVIDERS_JSON}" | jq -c '.[]')
-          for row in "${rows[@]}"; do
-            provider=$(echo "${row}" | jq -r '.provider')
-            data_dir=$(echo "${row}" | jq -r '.data_dir')
-            echo "--- Refreshing ${provider} -> ${data_dir} ---"
-            if ! echo y | uv run --frozen --project "${cli_dir}" \
-              langchain-profiles refresh \
-              --provider "${provider}" \
-              --data-dir "${GITHUB_WORKSPACE}/${data_dir}"; then
-              echo "::error::Failed to refresh provider: ${provider}"
-              failed="${failed} ${provider}"
-            fi
-          done
-          if [ -n "${failed}" ]; then
-            echo "::error::The following providers failed:${failed}"
-            exit 1
-          fi
-
-      - name: "🔑 Generate GitHub App token"
-        id: app-token
-        uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3
-        with:
-          app-id: ${{ secrets.MODEL_PROFILE_BOT_APP_ID }}
-          private-key: ${{ secrets.MODEL_PROFILE_BOT_PRIVATE_KEY }}
-
-      - name: "🔀 Create pull request"
-        id: create-pr
-        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0 # v8
-        with:
-          token: ${{ steps.app-token.outputs.token }}
-          branch: ${{ inputs.pr-branch }}
-          commit-message: ${{ inputs.pr-title }}
-          title: ${{ inputs.pr-title }}
-          body: ${{ inputs.pr-body }}
-          labels: ${{ inputs.pr-labels }}
-          add-paths: ${{ inputs.add-paths }}
-
-      - name: "📝 Summary"
-        if: always()
-        env:
-          PR_OP: ${{ steps.create-pr.outputs.pull-request-operation }}
-          PR_URL: ${{ steps.create-pr.outputs.pull-request-url }}
-          JOB_STATUS: ${{ job.status }}
-        run: |
-          if [ "${PR_OP}" = "created" ] || [ "${PR_OP}" = "updated" ]; then
-            echo "### ✅ PR ${PR_OP}: ${PR_URL}" >> "$GITHUB_STEP_SUMMARY"
-          elif [ -z "${PR_OP}" ] && [ "${JOB_STATUS}" = "success" ]; then
-            echo "### ⏭️ Skipped: profiles already up to date" >> "$GITHUB_STEP_SUMMARY"
-          elif [ "${JOB_STATUS}" = "failure" ]; then
-            echo "### ❌ Job failed — check step logs for details" >> "$GITHUB_STEP_SUMMARY"
-          fi

.github/workflows/_release.yml

@@ -17,31 +17,9 @@ on:
     inputs:
       working-directory:
         required: true
-        type: choice
+        type: string
         description: "From which folder this pipeline executes"
         default: "libs/langchain_v1"
-        options:
-          - libs/core
-          - libs/langchain
-          - libs/langchain_v1
-          - libs/text-splitters
-          - libs/standard-tests
-          - libs/model-profiles
-          - libs/partners/anthropic
-          - libs/partners/chroma
-          - libs/partners/deepseek
-          - libs/partners/exa
-          - libs/partners/fireworks
-          - libs/partners/groq
-          - libs/partners/huggingface
-          - libs/partners/mistralai
-          - libs/partners/nomic
-          - libs/partners/ollama
-          - libs/partners/openai
-          - libs/partners/openrouter
-          - libs/partners/perplexity
-          - libs/partners/qdrant
-          - libs/partners/xai
       release-version:
         required: true
         type: string
@@ -59,7 +37,7 @@ env:
   UV_NO_SYNC: "true"
 
 permissions:
-  contents: read # Job-level overrides grant write only where needed (mark-release)
+  contents: write # Required for creating GitHub releases
 
 jobs:
   # Build the distribution package and extract version info
@@ -76,7 +54,7 @@ jobs:
       version: ${{ steps.check-version.outputs.version }}
 
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@v6
 
       - name: Set up Python + uv
         uses: "./.github/actions/uv_setup"
@@ -86,7 +64,6 @@ jobs:
       # We want to keep this build stage *separate* from the release stage,
       # so that there's no sharing of permissions between them.
       # (Release stage has trusted publishing and GitHub repo contents write access,
-      # which the build stage must not have access to.)
       #
       # Otherwise, a malicious `build` step (e.g. via a compromised dependency)
       # could get access to our GitHub or PyPI credentials.
@@ -100,7 +77,7 @@ jobs:
         working-directory: ${{ inputs.working-directory }}
 
       - name: Upload build
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+        uses: actions/upload-artifact@v6
         with:
           name: dist
           path: ${{ inputs.working-directory }}/dist/
@@ -120,8 +97,6 @@ jobs:
               f.write(f"pkg-name={pkg_name}\n")
               f.write(f"version={version}\n")
   release-notes:
-    # release-notes must run before publishing because its check-tags step
-    # validates version/tag state — do not remove this dependency.
     needs:
       - build
     runs-on: ubuntu-latest
@@ -130,7 +105,7 @@ jobs:
     outputs:
       release-body: ${{ steps.generate-release-body.outputs.release-body }}
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@v6
         with:
           repository: langchain-ai/langchain
           path: langchain
@@ -218,8 +193,6 @@ jobs:
           } >> "$GITHUB_OUTPUT"
 
   test-pypi-publish:
-    # release-notes must run before publishing because its check-tags step
-    # validates version/tag state — do not remove this dependency.
     needs:
       - build
       - release-notes
@@ -233,15 +206,15 @@ jobs:
       id-token: write
 
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@v6
 
-      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+      - uses: actions/download-artifact@v7
         with:
           name: dist
           path: ${{ inputs.working-directory }}/dist/
 
       - name: Publish to test PyPI
-        uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # release/v1
+        uses: pypa/gh-action-pypi-publish@release/v1
         with:
           packages-dir: ${{ inputs.working-directory }}/dist/
           verbose: true
@@ -264,7 +237,7 @@ jobs:
       contents: read
     timeout-minutes: 20
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@v6
 
       # We explicitly *don't* set up caching here. This ensures our tests are
       # maximally sensitive to catching breakage.
@@ -285,7 +258,7 @@ jobs:
         with:
           python-version: ${{ env.PYTHON_VERSION }}
 
-      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+      - uses: actions/download-artifact@v7
         with:
           name: dist
           path: ${{ inputs.working-directory }}/dist/
@@ -296,7 +269,15 @@ jobs:
         env:
           PKG_NAME: ${{ needs.build.outputs.pkg-name }}
           VERSION: ${{ needs.build.outputs.version }}
-        # Install directly from the locally-built wheel (no index resolution needed)
+        # Here we use:
+        # - The default regular PyPI index as the *primary* index, meaning
+        #   that it takes priority (https://pypi.org/simple)
+        # - The test PyPI index as an extra index, so that any dependencies that
+        #   are not found on test PyPI can be resolved and installed anyway.
+        #   (https://test.pypi.org/simple). This will include the PKG_NAME==VERSION
+        #   package because VERSION will not have been uploaded to regular PyPI yet.
+        # - attempt install again after 5 seconds if it fails because there is
+        #   sometimes a delay in availability on test pypi
         run: |
           uv venv
           VIRTUAL_ENV=.venv uv pip install dist/*.whl
@@ -396,8 +377,6 @@ jobs:
           XAI_API_KEY: ${{ secrets.XAI_API_KEY }}
           DEEPSEEK_API_KEY: ${{ secrets.DEEPSEEK_API_KEY }}
           PPLX_API_KEY: ${{ secrets.PPLX_API_KEY }}
-          OLLAMA_API_KEY: ${{ secrets.OLLAMA_API_KEY }}
-          OPENROUTER_API_KEY: ${{ secrets.OPENROUTER_API_KEY }}
           LANGCHAIN_TESTS_USER_AGENT: ${{ secrets.LANGCHAIN_TESTS_USER_AGENT }}
         run: make integration_tests
         working-directory: ${{ inputs.working-directory }}
@@ -415,7 +394,6 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: read
-    if: false # temporarily skip
     strategy:
       matrix:
         partner: [anthropic]
@@ -434,7 +412,7 @@ jobs:
       AZURE_OPENAI_EMBEDDINGS_DEPLOYMENT_NAME: ${{ secrets.AZURE_OPENAI_EMBEDDINGS_DEPLOYMENT_NAME }}
       LANGCHAIN_TESTS_USER_AGENT: ${{ secrets.LANGCHAIN_TESTS_USER_AGENT }}
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@v6
 
       # We implement this conditional as Github Actions does not have good support
       # for conditionally needing steps. https://github.com/actions/runner/issues/491
@@ -452,7 +430,7 @@ jobs:
         with:
           python-version: ${{ env.PYTHON_VERSION }}
 
-      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+      - uses: actions/download-artifact@v7
         if: startsWith(inputs.working-directory, 'libs/core')
         with:
           name: dist
@@ -517,11 +495,11 @@ jobs:
     # No API keys needed for now - deepagents `make test` only runs unit tests
 
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@v6
         with:
           path: langchain
 
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@v6
         with:
           repository: ${{ matrix.package.repo }}
           path: ${{ matrix.package.name }}
@@ -531,7 +509,7 @@ jobs:
         with:
           python-version: ${{ matrix.python-version }}
 
-      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+      - uses: actions/download-artifact@v7
         with:
           name: dist
           path: dist/
@@ -561,7 +539,7 @@ jobs:
       - test-pypi-publish
       - pre-release-checks
       - test-dependents
-      # - test-prior-published-packages-against-new-core
+      - test-prior-published-packages-against-new-core
     # Run if all needed jobs succeeded or were skipped (test-dependents only runs for core/langchain_v1)
     if: ${{ !cancelled() && !failure() }}
     runs-on: ubuntu-latest
@@ -578,20 +556,20 @@ jobs:
         working-directory: ${{ inputs.working-directory }}
 
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@v6
 
       - name: Set up Python + uv
         uses: "./.github/actions/uv_setup"
         with:
           python-version: ${{ env.PYTHON_VERSION }}
 
-      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+      - uses: actions/download-artifact@v7
         with:
           name: dist
           path: ${{ inputs.working-directory }}/dist/
 
       - name: Publish package distributions to PyPI
-        uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # release/v1
+        uses: pypa/gh-action-pypi-publish@release/v1
         with:
           packages-dir: ${{ inputs.working-directory }}/dist/
           verbose: true
@@ -607,8 +585,6 @@ jobs:
       - test-pypi-publish
       - pre-release-checks
       - publish
-    # Run if all needed jobs succeeded or were skipped
-    if: ${{ !cancelled() && !failure() }}
     runs-on: ubuntu-latest
     permissions:
       # This permission is needed by `ncipollo/release-action` to
@@ -620,20 +596,20 @@ jobs:
         working-directory: ${{ inputs.working-directory }}
 
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@v6
 
       - name: Set up Python + uv
         uses: "./.github/actions/uv_setup"
         with:
           python-version: ${{ env.PYTHON_VERSION }}
 
-      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+      - uses: actions/download-artifact@v7
         with:
           name: dist
           path: ${{ inputs.working-directory }}/dist/
 
       - name: Create Tag
-        uses: ncipollo/release-action@339a81892b84b4eeb0f6e744e4574d79d0d9b8dd # v1
+        uses: ncipollo/release-action@v1
         with:
           artifacts: "dist/*"
           token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/_test.yml

@@ -33,7 +33,7 @@ jobs:
     name: "Python ${{ inputs.python-version }}"
     steps:
       - name: "📋 Checkout Code"
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@v6
 
       - name: "🐍 Set up Python ${{ inputs.python-version }} + UV"
         uses: "./.github/actions/uv_setup"
@@ -50,7 +50,7 @@ jobs:
       - name: "🧪 Run Core Unit Tests"
         shell: bash
         run: |
-          make test PYTEST_EXTRA=-q
+          make test
 
       - name: "🔍 Calculate Minimum Dependency Versions"
         working-directory: ${{ inputs.working-directory }}
@@ -69,7 +69,7 @@ jobs:
           MIN_VERSIONS: ${{ steps.min-version.outputs.min-versions }}
         run: |
           VIRTUAL_ENV=.venv uv pip install $MIN_VERSIONS
-          make tests PYTEST_EXTRA=-q
+          make tests
         working-directory: ${{ inputs.working-directory }}
 
       - name: "🧹 Verify Clean Working Directory"

.github/workflows/_test_pydantic.yml

@@ -36,7 +36,7 @@ jobs:
     name: "Pydantic ~=${{ inputs.pydantic-version }}"
     steps:
       - name: "📋 Checkout Code"
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@v6
 
       - name: "🐍 Set up Python ${{ inputs.python-version }} + UV"
         uses: "./.github/actions/uv_setup"

.github/workflows/_test_vcr.yml

@@ -1,66 +0,0 @@
-# Runs VCR cassette-backed integration tests in playback-only mode.
-#
-# No API keys needed — catches stale cassettes caused by test input
-# changes without re-recording.
-#
-# Called as part of check_diffs.yml workflow.
-
-name: "📼 VCR Cassette Tests"
-
-on:
-  workflow_call:
-    inputs:
-      working-directory:
-        required: true
-        type: string
-        description: "From which folder this pipeline executes"
-      python-version:
-        required: true
-        type: string
-        description: "Python version to use"
-
-permissions:
-  contents: read
-
-env:
-  UV_FROZEN: "true"
-
-jobs:
-  build:
-    defaults:
-      run:
-        working-directory: ${{ inputs.working-directory }}
-    runs-on: ubuntu-latest
-    timeout-minutes: 20
-    name: "Python ${{ inputs.python-version }}"
-    steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-
-      - name: "🐍 Set up Python ${{ inputs.python-version }} + UV"
-        uses: "./.github/actions/uv_setup"
-        with:
-          python-version: ${{ inputs.python-version }}
-          cache-suffix: test-vcr-${{ inputs.working-directory }}
-          working-directory: ${{ inputs.working-directory }}
-
-      - name: "📦 Install Test Dependencies"
-        shell: bash
-        run: uv sync --group test
-
-      - name: "📼 Run VCR Cassette Tests (playback-only)"
-        shell: bash
-        env:
-          OPENAI_API_KEY: sk-fake
-        run: make test_vcr
-
-      - name: "🧹 Verify Clean Working Directory"
-        shell: bash
-        run: |
-          set -eu
-
-          STATUS="$(git status)"
-          echo "$STATUS"
-
-          # grep will exit non-zero if the target message isn't found,
-          # and `set -e` above will cause the step to fail.
-          echo "$STATUS" | grep 'nothing to commit, working tree clean'

.github/workflows/auto-label-by-package.yml

@@ -4,9 +4,6 @@ on:
   issues:
     types: [opened, edited]
 
-permissions:
-  contents: read
-
 jobs:
   label-by-package:
     permissions:
@@ -15,20 +12,14 @@ jobs:
 
     steps:
       - name: Sync package labels
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
+        uses: actions/github-script@v8
         with:
           script: |
             const body = context.payload.issue.body || "";
 
-            // Extract text under "## Package" or "### Package" (handles " (Required)" suffix and being last section)
-            const match = body.match(/#{2,3} Package[^\n]*\n([\s\S]*?)(?:\n#{2,3} |$)/i);
-            if (!match) {
-              core.setFailed(
-                `Could not find "## Package" section in issue #${context.issue.number} body. ` +
-                `The issue template may have changed — update the regex in this workflow.`
-              );
-              return;
-            }
+            // Extract text under "### Package" (handles " (Required)" suffix and being last section)
+            const match = body.match(/### Package[^\n]*\n([\s\S]*?)(?:\n###|$)/i);
+            if (!match) return;
 
             const packageSection = match[1].trim();
 
@@ -51,7 +42,6 @@ jobs:
               "langchain-mistralai": "mistralai",
               "langchain-nomic": "nomic",
               "langchain-ollama": "ollama",
-              "langchain-openrouter": "openrouter",
               "langchain-perplexity": "perplexity",
               "langchain-qdrant": "qdrant",
               "langchain-xai": "xai",

.github/workflows/check_agents_sync.yml

@@ -26,7 +26,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: "📋 Checkout Code"
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@v6
 
       - name: "🔍 Check CLAUDE.md and AGENTS.md are in sync"
         run: |

.github/workflows/check_core_versions.yml

@@ -9,8 +9,6 @@ on:
     paths:
       - "libs/core/pyproject.toml"
       - "libs/core/langchain_core/version.py"
-      - "libs/partners/anthropic/pyproject.toml"
-      - "libs/partners/anthropic/langchain_anthropic/_version.py"
 
 permissions:
   contents: read
@@ -20,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@v6
 
       - name: "✅ Verify pyproject.toml & version.py Match"
         run: |
@@ -51,17 +49,3 @@ jobs:
           else
             echo "Langchain v1 versions match: $LANGCHAIN_PYPROJECT_VERSION"
           fi
-
-          # Check langchain-anthropic versions
-          ANTHROPIC_PYPROJECT_VERSION=$(grep -Po '(?<=^version = ")[^"]*' libs/partners/anthropic/pyproject.toml)
-          ANTHROPIC_VERSION_PY_VERSION=$(grep -Po '(?<=^__version__ = ")[^"]*' libs/partners/anthropic/langchain_anthropic/_version.py)
-
-          # Compare langchain-anthropic versions
-          if [ "$ANTHROPIC_PYPROJECT_VERSION" != "$ANTHROPIC_VERSION_PY_VERSION" ]; then
-            echo "langchain-anthropic versions in pyproject.toml and _version.py do not match!"
-            echo "pyproject.toml version: $ANTHROPIC_PYPROJECT_VERSION"
-            echo "_version.py version: $ANTHROPIC_VERSION_PY_VERSION"
-            exit 1
-          else
-            echo "Langchain-anthropic versions match: $ANTHROPIC_PYPROJECT_VERSION"
-          fi

.github/workflows/check_diffs.yml

@@ -8,6 +8,7 @@
 # - Pydantic compatibility tests (_test_pydantic.yml)
 # - Integration test compilation checks (_compile_integration_test.yml)
 # - Extended test suites that require additional dependencies
+# - Codspeed benchmarks (if not labeled 'codspeed-ignore')
 #
 # Reports status to GitHub checks and PR status.
 
@@ -46,14 +47,14 @@ jobs:
     if: ${{ !contains(github.event.pull_request.labels.*.name, 'ci-ignore') }}
     steps:
       - name: "📋 Checkout Code"
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@v6
       - name: "🐍 Setup Python 3.11"
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
+        uses: actions/setup-python@v6
         with:
           python-version: "3.11"
       - name: "📂 Get Changed Files"
         id: files
-        uses: Ana06/get-changed-files@25f79e676e7ea1868813e21465014798211fad8c # v2.3.0
+        uses: Ana06/get-changed-files@v2.3.0
       - name: "🔍 Analyze Changed Files & Generate Build Matrix"
         id: set-matrix
         run: |
@@ -66,7 +67,7 @@ jobs:
       compile-integration-tests: ${{ steps.set-matrix.outputs.compile-integration-tests }}
       dependencies: ${{ steps.set-matrix.outputs.dependencies }}
       test-pydantic: ${{ steps.set-matrix.outputs.test-pydantic }}
-      vcr-tests: ${{ steps.set-matrix.outputs.vcr-tests }}
+      codspeed: ${{ steps.set-matrix.outputs.codspeed }}
   # Run linting only on packages that have changed files
   lint:
     needs: [build]
@@ -124,21 +125,6 @@ jobs:
       python-version: ${{ matrix.job-configs.python-version }}
     secrets: inherit
 
-  # Run VCR cassette-backed integration tests in playback-only mode (no API keys)
-  vcr-tests:
-    name: "VCR Cassette Tests"
-    needs: [build]
-    if: ${{ needs.build.outputs.vcr-tests != '[]' }}
-    strategy:
-      matrix:
-        job-configs: ${{ fromJson(needs.build.outputs.vcr-tests) }}
-      fail-fast: false
-    uses: ./.github/workflows/_test_vcr.yml
-    with:
-      working-directory: ${{ matrix.job-configs.working-directory }}
-      python-version: ${{ matrix.job-configs.python-version }}
-    secrets: inherit
-
   # Run extended test suites that require additional dependencies
   extended-tests:
     name: "Extended Tests"
@@ -155,7 +141,7 @@ jobs:
       run:
         working-directory: ${{ matrix.job-configs.working-directory }}
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@v6
 
       - name: "🐍 Set up Python ${{ matrix.job-configs.python-version }} + UV"
         uses: "./.github/actions/uv_setup"
@@ -185,20 +171,66 @@ jobs:
           # and `set -e` above will cause the step to fail.
           echo "$STATUS" | grep 'nothing to commit, working tree clean'
 
-  # Verify _release.yml dropdown options stay in sync with package directories
-  check-release-options:
-    name: "Validate Release Options"
+  # Run codspeed benchmarks only on packages that have changed files
+  codspeed:
+    name: "⚡ CodSpeed Benchmarks"
+    needs: [build]
+    if: ${{ needs.build.outputs.codspeed != '[]' && !contains(github.event.pull_request.labels.*.name, 'codspeed-ignore') }}
     runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        job-configs: ${{ fromJson(needs.build.outputs.codspeed) }}
+      fail-fast: false
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-      - name: "🐍 Setup Python 3.11"
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
+      - uses: actions/checkout@v6
+
+      - name: "📦 Install UV Package Manager"
+        uses: astral-sh/setup-uv@v7
         with:
-          python-version: "3.11"
-      - name: "📦 Install Dependencies"
-        run: python -m pip install pyyaml pytest
-      - name: "🔍 Check release dropdown matches packages"
-        run: python -m pytest .github/scripts/test_release_options.py -v
+          python-version: "3.13"
+
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.13"
+
+      - name: "📦 Install Test Dependencies"
+        run: uv sync --group test
+        working-directory: ${{ matrix.job-configs.working-directory }}
+
+      - name: "⚡ Run Benchmarks: ${{ matrix.job-configs.working-directory }}"
+        uses: CodSpeedHQ/action@v4
+        env:
+          ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
+          ANTHROPIC_FILES_API_IMAGE_ID: ${{ secrets.ANTHROPIC_FILES_API_IMAGE_ID }}
+          ANTHROPIC_FILES_API_PDF_ID: ${{ secrets.ANTHROPIC_FILES_API_PDF_ID }}
+          AZURE_OPENAI_API_VERSION: ${{ secrets.AZURE_OPENAI_API_VERSION }}
+          AZURE_OPENAI_API_BASE: ${{ secrets.AZURE_OPENAI_API_BASE }}
+          AZURE_OPENAI_API_KEY: ${{ secrets.AZURE_OPENAI_API_KEY }}
+          AZURE_OPENAI_CHAT_DEPLOYMENT_NAME: ${{ secrets.AZURE_OPENAI_CHAT_DEPLOYMENT_NAME }}
+          AZURE_OPENAI_LEGACY_CHAT_DEPLOYMENT_NAME: ${{ secrets.AZURE_OPENAI_LEGACY_CHAT_DEPLOYMENT_NAME }}
+          AZURE_OPENAI_LLM_DEPLOYMENT_NAME: ${{ secrets.AZURE_OPENAI_LLM_DEPLOYMENT_NAME }}
+          AZURE_OPENAI_EMBEDDINGS_DEPLOYMENT_NAME: ${{ secrets.AZURE_OPENAI_EMBEDDINGS_DEPLOYMENT_NAME }}
+          COHERE_API_KEY: ${{ secrets.COHERE_API_KEY }}
+          DEEPSEEK_API_KEY: ${{ secrets.DEEPSEEK_API_KEY }}
+          EXA_API_KEY: ${{ secrets.EXA_API_KEY }}
+          FIREWORKS_API_KEY: ${{ secrets.FIREWORKS_API_KEY }}
+          GROQ_API_KEY: ${{ secrets.GROQ_API_KEY }}
+          HUGGINGFACEHUB_API_TOKEN: ${{ secrets.HUGGINGFACEHUB_API_TOKEN }}
+          MISTRAL_API_KEY: ${{ secrets.MISTRAL_API_KEY }}
+          NOMIC_API_KEY: ${{ secrets.NOMIC_API_KEY }}
+          OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
+          PPLX_API_KEY: ${{ secrets.PPLX_API_KEY }}
+          XAI_API_KEY: ${{ secrets.XAI_API_KEY }}
+        with:
+          token: ${{ secrets.CODSPEED_TOKEN }}
+          run: |
+            cd ${{ matrix.job-configs.working-directory }}
+            if [ "${{ matrix.job-configs.working-directory }}" = "libs/core" ]; then
+              uv run --no-sync pytest ./tests/benchmarks --codspeed
+            else
+              uv run --no-sync pytest ./tests/ --codspeed
+            fi
+          mode: ${{ matrix.job-configs.working-directory == 'libs/core' && 'walltime' || 'instrumentation' }}
 
   # Final status check - ensures all required jobs passed before allowing merge
   ci_success:
@@ -209,10 +241,9 @@ jobs:
         lint,
         test,
         compile-integration-tests,
-        vcr-tests,
         extended-tests,
         test-pydantic,
-        check-release-options,
+        codspeed,
       ]
     if: |
       always()

.github/workflows/close_unchecked_issues.yml

@@ -1,106 +0,0 @@
-# Auto-close issues that bypass or ignore the issue template checkboxes.
-#
-# GitHub issue forms enforce `required: true` checkboxes in the web UI,
-# but the API bypasses form validation entirely — bots/scripts can open
-# issues with every box unchecked or skip the template altogether.
-#
-# Rules:
-#   1. Checkboxes present, none checked → close
-#   2. No checkboxes at all → close unless author is an org member or bot
-#
-# Org membership check reuses the shared helper from pr-labeler.js and
-# the same GitHub App used by tag-external-issues.yml.
-
-name: Close Unchecked Issues
-
-on:
-  issues:
-    types: [opened]
-
-permissions:
-  contents: read
-
-concurrency:
-  group: ${{ github.workflow }}-${{ github.event.issue.number }}
-  cancel-in-progress: true
-
-jobs:
-  check-boxes:
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      issues: write
-
-    steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-
-      - name: Generate GitHub App token
-        id: app-token
-        uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3
-        with:
-          app-id: ${{ secrets.ORG_MEMBERSHIP_APP_ID }}
-          private-key: ${{ secrets.ORG_MEMBERSHIP_APP_PRIVATE_KEY }}
-
-      - name: Validate issue checkboxes
-        if: steps.app-token.outcome == 'success'
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
-        with:
-          github-token: ${{ steps.app-token.outputs.token }}
-          script: |
-            const body = context.payload.issue.body ?? '';
-            const checked = (body.match(/- \[x\]/gi) || []).length;
-
-            if (checked > 0) {
-              console.log(`Found ${checked} checked checkbox(es) — OK`);
-              return;
-            }
-
-            const unchecked = (body.match(/- \[ \]/g) || []).length;
-
-            // No checkboxes at all — allow org members and bots, close everyone else
-            if (unchecked === 0) {
-              const { owner, repo } = context.repo;
-              const { h } = require('./.github/scripts/pr-labeler.js').loadAndInit(github, owner, repo, core);
-
-              const author = context.payload.sender.login;
-              const { isExternal } = await h.checkMembership(
-                author, context.payload.sender.type,
-              );
-
-              if (!isExternal) {
-                console.log(`No checkboxes, but ${author} is internal — OK`);
-                return;
-              }
-              console.log(`No checkboxes and ${author} is external — closing`);
-            } else {
-              console.log(`Found 0 checked and ${unchecked} unchecked checkbox(es) — closing`);
-            }
-
-            const { owner, repo } = context.repo;
-            const issue_number = context.payload.issue.number;
-
-            const reason = unchecked > 0
-              ? 'none of the required checkboxes were checked'
-              : 'no issue template was used';
-
-            // Close before commenting — a closed issue without a comment is
-            // less confusing than an open issue with a false "auto-closed" message
-            // if the second API call fails.
-            await github.rest.issues.update({
-              owner,
-              repo,
-              issue_number,
-              state: 'closed',
-              state_reason: 'not_planned',
-            });
-
-            await github.rest.issues.createComment({
-              owner,
-              repo,
-              issue_number,
-              body: [
-                `This issue was automatically closed because ${reason}.`,
-                '',
-                `Please use one of the [issue templates](https://github.com/${owner}/${repo}/issues/new/choose) and complete the checklist.`,
-              ].join('\n'),
-            });

.github/workflows/codspeed.yml

@@ -1,85 +0,0 @@
-# CodSpeed performance benchmarks.
-#
-# Runs benchmarks on changed packages and uploads results to CodSpeed.
-# Separated from the main CI workflow so that push-to-master baseline runs
-# are never cancelled by subsequent merges (cancel-in-progress is only
-# enabled for pull_request events).
-
-name: "⚡ CodSpeed"
-
-on:
-  push:
-    branches: [master]
-  pull_request:
-
-# On PRs, cancel stale runs when new commits are pushed.
-# On push-to-master, never cancel — these runs populate CodSpeed baselines.
-concurrency:
-  group: ${{ github.workflow }}-${{ github.event_name == 'push' && github.sha || github.ref }}
-  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
-
-permissions:
-  contents: read
-
-env:
-  UV_FROZEN: "true"
-  UV_NO_SYNC: "true"
-
-jobs:
-  build:
-    name: "Detect Changes"
-    runs-on: ubuntu-latest
-    if: ${{ !contains(github.event.pull_request.labels.*.name, 'codspeed-ignore') }}
-    steps:
-      - name: "📋 Checkout Code"
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-      - name: "🐍 Setup Python 3.11"
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
-        with:
-          python-version: "3.11"
-      - name: "📂 Get Changed Files"
-        id: files
-        uses: Ana06/get-changed-files@25f79e676e7ea1868813e21465014798211fad8c # v2.3.0
-      - name: "🔍 Analyze Changed Files"
-        id: set-matrix
-        run: |
-          python -m pip install packaging requests
-          python .github/scripts/check_diff.py ${{ steps.files.outputs.all }} >> $GITHUB_OUTPUT
-    outputs:
-      codspeed: ${{ steps.set-matrix.outputs.codspeed }}
-
-  benchmarks:
-    name: "⚡ CodSpeed Benchmarks"
-    needs: [build]
-    if: ${{ needs.build.outputs.codspeed != '[]' }}
-    runs-on: ubuntu-latest
-    strategy:
-      matrix:
-        job-configs: ${{ fromJson(needs.build.outputs.codspeed) }}
-      fail-fast: false
-    steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-
-      - name: "📦 Install UV Package Manager"
-        uses: astral-sh/setup-uv@0ca8f610542aa7f4acaf39e65cf4eb3c35091883 # v7
-        with:
-          # Pinned to 3.13.11 to work around CodSpeed walltime segfault on 3.13.12+
-          # See: https://github.com/CodSpeedHQ/pytest-codspeed/issues/106
-          python-version: "3.13.11"
-
-      - name: "📦 Install Test Dependencies"
-        run: uv sync --group test
-        working-directory: ${{ matrix.job-configs.working-directory }}
-
-      - name: "⚡ Run Benchmarks: ${{ matrix.job-configs.working-directory }}"
-        uses: CodSpeedHQ/action@a50965600eafa04edcd6717761f55b77e52aafbd # v4
-        with:
-          token: ${{ secrets.CODSPEED_TOKEN }}
-          run: |
-            cd ${{ matrix.job-configs.working-directory }}
-            if [ "${{ matrix.job-configs.working-directory }}" = "libs/core" ]; then
-              uv run --no-sync pytest ./tests/benchmarks --codspeed
-            else
-              uv run --no-sync pytest ./tests/unit_tests/ -m benchmark --codspeed
-            fi
-          mode: ${{ matrix.job-configs.codspeed-mode }}

.github/workflows/integration_tests.yml

@@ -92,26 +92,26 @@ jobs:
         working-directory: ${{ fromJSON(needs.compute-matrix.outputs.matrix).working-directory }}
 
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@v6
         with:
           path: langchain
 
       # These libraries exist outside of the monorepo and need to be checked out separately
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@v6
         with:
           repository: langchain-ai/langchain-google
           path: langchain-google
       - name: "🔐 Authenticate to Google Cloud"
         id: "auth"
-        uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3
+        uses: google-github-actions/auth@v3
         with:
           credentials_json: "${{ secrets.GOOGLE_CREDENTIALS }}"
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@v6
         with:
           repository: langchain-ai/langchain-aws
           path: langchain-aws
       - name: "🔐 Configure AWS Credentials"
-        uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7 # v6
+        uses: aws-actions/configure-aws-credentials@v6
         with:
           aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
           aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
@@ -181,9 +181,7 @@ jobs:
           MONGODB_ATLAS_URI: ${{ secrets.MONGODB_ATLAS_URI }}
           NOMIC_API_KEY: ${{ secrets.NOMIC_API_KEY }}
           NVIDIA_API_KEY: ${{ secrets.NVIDIA_API_KEY }}
-          OLLAMA_API_KEY: ${{ secrets.OLLAMA_API_KEY }}
           OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
-          OPENROUTER_API_KEY: ${{ secrets.OPENROUTER_API_KEY }}
           PPLX_API_KEY: ${{ secrets.PPLX_API_KEY }}
           TOGETHER_API_KEY: ${{ secrets.TOGETHER_API_KEY }}
           UPSTAGE_API_KEY: ${{ secrets.UPSTAGE_API_KEY }}
@@ -234,11 +232,11 @@ jobs:
             path: libs/deepagents
 
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@v6
         with:
           path: langchain
 
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@v6
         with:
           repository: ${{ matrix.package.repo }}
           path: ${{ matrix.package.name }}

.github/workflows/pr_labeler.yml

@@ -1,213 +0,0 @@
-# Unified PR labeler — applies size, file-based, title-based, and
-# contributor classification labels in a single sequential workflow.
-#
-# Consolidates pr_labeler_file.yml, pr_labeler_title.yml,
-# pr_size_labeler.yml, and PR-handling from tag-external-contributions.yml
-# into one workflow to eliminate race conditions from concurrent label
-# mutations. tag-external-issues.yml remains active for issue-only
-# labeling. Backfill lives in pr_labeler_backfill.yml.
-#
-# Config and shared logic live in .github/scripts/pr-labeler-config.json
-# and .github/scripts/pr-labeler.js — update those when adding partners.
-#
-# Setup Requirements:
-# 1. Create a GitHub App with permissions:
-#    - Repository: Pull requests (write)
-#    - Repository: Issues (write)
-#    - Organization: Members (read)
-# 2. Install the app on your organization and this repository
-# 3. Add these repository secrets:
-#    - ORG_MEMBERSHIP_APP_ID: Your app's ID
-#    - ORG_MEMBERSHIP_APP_PRIVATE_KEY: Your app's private key
-#
-# The GitHub App token is required to check private organization membership
-# and to propagate label events to downstream workflows.
-
-name: "🏷️ PR Labeler"
-
-on:
-  # Safe since we're not checking out or running the PR's code.
-  # NEVER CHECK OUT UNTRUSTED CODE FROM A PR's HEAD IN A pull_request_target JOB.
-  # Doing so would allow attackers to execute arbitrary code in the context of your repository.
-  pull_request_target:
-    types: [opened, synchronize, reopened, edited]
-
-permissions:
-  contents: read
-
-concurrency:
-  # Separate opened events so external/tier labels are never lost to cancellation
-  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.run_id }}-${{ github.event.action == 'opened' && 'opened' || 'update' }}
-  cancel-in-progress: ${{ github.event.action != 'opened' }}
-
-jobs:
-  label:
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      pull-requests: write
-      issues: write
-
-    steps:
-      # Checks out the BASE branch (safe for pull_request_target — never
-      # the PR head). Needed to load .github/scripts/pr-labeler*.
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-
-      - name: Generate GitHub App token
-        if: github.event.action == 'opened'
-        id: app-token
-        uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3
-        with:
-          app-id: ${{ secrets.ORG_MEMBERSHIP_APP_ID }}
-          private-key: ${{ secrets.ORG_MEMBERSHIP_APP_PRIVATE_KEY }}
-
-      - name: Verify App token
-        if: github.event.action == 'opened'
-        run: |
-          if [ -z "${{ steps.app-token.outputs.token }}" ]; then
-            echo "::error::GitHub App token generation failed — cannot classify contributor"
-            exit 1
-          fi
-
-      - name: Check org membership
-        if: github.event.action == 'opened'
-        id: check-membership
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
-        with:
-          github-token: ${{ steps.app-token.outputs.token }}
-          script: |
-            const { owner, repo } = context.repo;
-            const { h } = require('./.github/scripts/pr-labeler.js').loadAndInit(github, owner, repo, core);
-
-            const author = context.payload.sender.login;
-            const { isExternal } = await h.checkMembership(
-              author, context.payload.sender.type,
-            );
-            core.setOutput('is-external', isExternal ? 'true' : 'false');
-
-      - name: Apply PR labels
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
-        env:
-          IS_EXTERNAL: ${{ steps.check-membership.outputs.is-external }}
-        with:
-          github-token: ${{ secrets.GITHUB_TOKEN }}
-          script: |
-            const { owner, repo } = context.repo;
-            const { h } = require('./.github/scripts/pr-labeler.js').loadAndInit(github, owner, repo, core);
-
-            const pr = context.payload.pull_request;
-            if (!pr) return;
-            const prNumber = pr.number;
-            const action = context.payload.action;
-
-            const toAdd = new Set();
-            const toRemove = new Set();
-
-            const currentLabels = (await github.paginate(
-              github.rest.issues.listLabelsOnIssue,
-              { owner, repo, issue_number: prNumber, per_page: 100 },
-            )).map(l => l.name ?? '');
-
-            // ── Size + file labels (skip on 'edited' — files unchanged) ──
-            if (action !== 'edited') {
-              for (const sl of h.sizeLabels) await h.ensureLabel(sl);
-
-              const files = await github.paginate(github.rest.pulls.listFiles, {
-                owner, repo, pull_number: prNumber, per_page: 100,
-              });
-
-              const { totalChanged, sizeLabel } = h.computeSize(files);
-              toAdd.add(sizeLabel);
-              for (const sl of h.sizeLabels) {
-                if (currentLabels.includes(sl) && sl !== sizeLabel) toRemove.add(sl);
-              }
-              console.log(`Size: ${totalChanged} changed lines → ${sizeLabel}`);
-
-              for (const label of h.matchFileLabels(files)) {
-                toAdd.add(label);
-              }
-            }
-
-            // ── Title-based labels ──
-            const { labels: titleLabels, typeLabel } = h.matchTitleLabels(pr.title || '');
-            for (const label of titleLabels) toAdd.add(label);
-
-            // Remove stale type labels only when a type was detected
-            if (typeLabel) {
-              for (const tl of h.allTypeLabels) {
-                if (currentLabels.includes(tl) && !titleLabels.has(tl)) toRemove.add(tl);
-              }
-            }
-
-            // ── Internal label (only on open, non-external contributors) ──
-            // IS_EXTERNAL is empty string on non-opened events (step didn't
-            // run), so this guard is only true for opened + internal.
-            if (action === 'opened' && process.env.IS_EXTERNAL === 'false') {
-              toAdd.add('internal');
-            }
-
-            // ── Apply changes ──
-            // Ensure all labels we're about to add exist (addLabels returns
-            // 422 if any label in the batch is missing, which would prevent
-            // ALL labels from being applied).
-            for (const name of toAdd) {
-              await h.ensureLabel(name);
-            }
-
-            for (const name of toRemove) {
-              if (toAdd.has(name)) continue;
-              try {
-                await github.rest.issues.removeLabel({
-                  owner, repo, issue_number: prNumber, name,
-                });
-              } catch (e) {
-                if (e.status !== 404) throw e;
-              }
-            }
-
-            const addList = [...toAdd];
-            if (addList.length > 0) {
-              await github.rest.issues.addLabels({
-                owner, repo, issue_number: prNumber, labels: addList,
-              });
-            }
-
-            const removed = [...toRemove].filter(r => !toAdd.has(r));
-            console.log(`PR #${prNumber}: +[${addList.join(', ')}] -[${removed.join(', ')}]`);
-
-      # Apply tier label BEFORE the external label so that
-      # "trusted-contributor" is already present when the "external" labeled
-      # event fires and triggers require_issue_link.yml.
-      - name: Apply contributor tier label
-        if: github.event.action == 'opened' && steps.check-membership.outputs.is-external == 'true'
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
-        with:
-          github-token: ${{ steps.app-token.outputs.token }}
-          script: |
-            const { owner, repo } = context.repo;
-            const { h } = require('./.github/scripts/pr-labeler.js').loadAndInit(github, owner, repo, core);
-
-            const pr = context.payload.pull_request;
-            await h.applyTierLabel(pr.number, pr.user.login);
-
-      - name: Add external label
-        if: github.event.action == 'opened' && steps.check-membership.outputs.is-external == 'true'
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
-        with:
-          # Use App token so the "labeled" event propagates to downstream
-          # workflows (e.g. require_issue_link.yml). Events created by the
-          # default GITHUB_TOKEN do not trigger additional workflow runs.
-          github-token: ${{ steps.app-token.outputs.token }}
-          script: |
-            const { owner, repo } = context.repo;
-            const prNumber = context.payload.pull_request.number;
-
-            const { h } = require('./.github/scripts/pr-labeler.js').loadAndInit(github, owner, repo, core);
-
-            await h.ensureLabel('external');
-            await github.rest.issues.addLabels({
-              owner, repo,
-              issue_number: prNumber,
-              labels: ['external'],
-            });
-            console.log(`Added 'external' label to PR #${prNumber}`);

.github/workflows/pr_labeler_backfill.yml

@@ -1,130 +0,0 @@
-# Backfill PR labels on all open PRs.
-#
-# Manual-only workflow that applies the same labels as pr_labeler.yml
-# (size, file, title, contributor classification) to existing open PRs.
-# Reuses shared logic from .github/scripts/pr-labeler.js.
-
-name: "🏷️ PR Labeler Backfill"
-
-on:
-  workflow_dispatch:
-    inputs:
-      max_items:
-        description: "Maximum number of open PRs to process"
-        default: "100"
-        type: string
-
-permissions:
-  contents: read
-
-jobs:
-  backfill:
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      pull-requests: write
-      issues: write
-
-    steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-
-      - name: Generate GitHub App token
-        id: app-token
-        uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3
-        with:
-          app-id: ${{ secrets.ORG_MEMBERSHIP_APP_ID }}
-          private-key: ${{ secrets.ORG_MEMBERSHIP_APP_PRIVATE_KEY }}
-
-      - name: Backfill labels on open PRs
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
-        with:
-          github-token: ${{ steps.app-token.outputs.token }}
-          script: |
-            const { owner, repo } = context.repo;
-            const rawMax = '${{ inputs.max_items }}';
-            const maxItems = parseInt(rawMax, 10);
-            if (isNaN(maxItems) || maxItems <= 0) {
-              core.setFailed(`Invalid max_items: "${rawMax}" — must be a positive integer`);
-              return;
-            }
-
-            const { h } = require('./.github/scripts/pr-labeler.js').loadAndInit(github, owner, repo, core);
-
-            for (const name of [...h.sizeLabels, ...h.tierLabels]) {
-              await h.ensureLabel(name);
-            }
-
-            const contributorCache = new Map();
-            const fileRules = h.buildFileRules();
-
-            const prs = await github.paginate(github.rest.pulls.list, {
-              owner, repo, state: 'open', per_page: 100,
-            });
-
-            let processed = 0;
-            let failures = 0;
-            for (const pr of prs) {
-              if (processed >= maxItems) break;
-              try {
-                const author = pr.user.login;
-                const info = await h.getContributorInfo(contributorCache, author, pr.user.type);
-                const labels = new Set();
-
-                labels.add(info.isExternal ? 'external' : 'internal');
-                if (info.isExternal && info.mergedCount != null && info.mergedCount >= h.trustedThreshold) {
-                  labels.add('trusted-contributor');
-                } else if (info.isExternal && info.mergedCount === 0) {
-                  labels.add('new-contributor');
-                }
-
-                // Size + file labels
-                const files = await github.paginate(github.rest.pulls.listFiles, {
-                  owner, repo, pull_number: pr.number, per_page: 100,
-                });
-                const { sizeLabel } = h.computeSize(files);
-                labels.add(sizeLabel);
-
-                for (const label of h.matchFileLabels(files, fileRules)) {
-                  labels.add(label);
-                }
-
-                // Title labels
-                const { labels: titleLabels } = h.matchTitleLabels(pr.title ?? '');
-                for (const tl of titleLabels) labels.add(tl);
-
-                // Ensure all labels exist before batch add
-                for (const name of labels) {
-                  await h.ensureLabel(name);
-                }
-
-                // Remove stale managed labels
-                const currentLabels = (await github.paginate(
-                  github.rest.issues.listLabelsOnIssue,
-                  { owner, repo, issue_number: pr.number, per_page: 100 },
-                )).map(l => l.name ?? '');
-
-                const managed = [...h.sizeLabels, ...h.tierLabels, ...h.allTypeLabels];
-                for (const name of currentLabels) {
-                  if (managed.includes(name) && !labels.has(name)) {
-                    try {
-                      await github.rest.issues.removeLabel({
-                        owner, repo, issue_number: pr.number, name,
-                      });
-                    } catch (e) {
-                      if (e.status !== 404) throw e;
-                    }
-                  }
-                }
-
-                await github.rest.issues.addLabels({
-                  owner, repo, issue_number: pr.number, labels: [...labels],
-                });
-                console.log(`PR #${pr.number} (${author}): ${[...labels].join(', ')}`);
-                processed++;
-              } catch (e) {
-                failures++;
-                core.warning(`Failed to process PR #${pr.number}: ${e.message}`);
-              }
-            }
-
-            console.log(`\nBackfill complete. Processed ${processed} PRs, ${failures} failures. ${contributorCache.size} unique authors.`);

.github/workflows/pr_labeler_file.yml

@@ -0,0 +1,28 @@
+# Label PRs based on changed files.
+#
+# See `.github/pr-file-labeler.yml` to see rules for each label/directory.
+
+name: "🏷️ Pull Request Labeler"
+
+on:
+  # Safe since we're not checking out or running the PR's code
+  # Never check out the PR's head in a pull_request_target job
+  pull_request_target:
+    types: [opened, synchronize, reopened]
+
+jobs:
+  labeler:
+    name: "label"
+    permissions:
+      contents: read
+      pull-requests: write
+      issues: write
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Label Pull Request
+        uses: actions/labeler@v6
+        with:
+          repo-token: "${{ secrets.GITHUB_TOKEN }}"
+          configuration-path: .github/pr-file-labeler.yml
+          sync-labels: false

.github/workflows/pr_labeler_title.yml

@@ -0,0 +1,44 @@
+# Label PRs based on their titles.
+#
+# Uses conventional commit types from PR titles to apply labels.
+# Note: Scope-based labeling (e.g., integration labels) is handled by pr_labeler_file.yml
+
+name: "🏷️ PR Title Labeler"
+
+on:
+  # Safe since we're not checking out or running the PR's code
+  # Never check out the PR's head in a pull_request_target job
+  pull_request_target:
+    types: [opened, edited]
+
+jobs:
+  pr-title-labeler:
+    name: "label"
+    permissions:
+      contents: read
+      pull-requests: write
+      issues: write
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Label PR based on title
+        uses: bcoe/conventional-release-labels@v1
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          type_labels: >-
+            {
+              "feat": "feature",
+              "fix": "fix",
+              "docs": "documentation",
+              "style": "linting",
+              "refactor": "refactor",
+              "perf": "performance",
+              "test": "tests",
+              "build": "infra",
+              "ci": "infra",
+              "chore": "infra",
+              "revert": "revert",
+              "release": "release",
+              "breaking": "breaking"
+            }
+          ignored_types: '[]'

.github/workflows/pr_lint.yml

@@ -25,13 +25,12 @@
 #   * chore      — other changes that don't modify source or test files
 #   * revert     — reverts a previous commit
 #   * release    — prepare a new release
-#   * hotfix     — urgent fix
 #
 # Allowed Scope(s) (optional):
 #   core, langchain, langchain-classic, model-profiles,
 #   standard-tests, text-splitters, docs, anthropic, chroma, deepseek, exa,
 #   fireworks, groq, huggingface, mistralai, nomic, ollama, openai,
-#   perplexity, qdrant, xai, infra, deps, partners
+#   perplexity, qdrant, xai, infra, deps
 #
 # Multiple scopes can be used by separating them with a comma. For example:
 #
@@ -66,17 +65,8 @@ jobs:
     name: "validate format"
     runs-on: ubuntu-latest
     steps:
-      - name: "🚫 Reject empty scope"
-        env:
-          PR_TITLE: ${{ github.event.pull_request.title }}
-        run: |
-          if [[ "$PR_TITLE" =~ ^[a-z]+\(\)[!]?: ]]; then
-            echo "::error::PR title has empty scope parentheses: '$PR_TITLE'"
-            echo "Either remove the parentheses or provide a scope (e.g., 'fix(core): ...')."
-            exit 1
-          fi
       - name: "✅ Validate Conventional Commits Format"
-        uses: amannn/action-semantic-pull-request@48f256284bd46cdaab1048c3721360e808335d50 # v6
+        uses: amannn/action-semantic-pull-request@v6
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
@@ -93,7 +83,6 @@ jobs:
             chore
             revert
             release
-            hotfix
           scopes: |
             core
             langchain
@@ -113,13 +102,11 @@ jobs:
             nomic
             ollama
             openai
-            openrouter
             perplexity
             qdrant
             xai
             infra
             deps
-            partners
           requireScope: false
           disallowScopes: |
             release

.github/workflows/refresh_model_profiles.yml

@@ -1,45 +0,0 @@
-# Refreshes model profile data for all in-monorepo partner integrations by
-# pulling the latest metadata from models.dev via the `langchain-profiles` CLI.
-#
-# Creates a pull request with any changes. Runs daily and can be triggered
-# manually from the Actions UI. Uses a fixed branch so each run supersedes
-# any stale PR from a previous run.
-
-name: "🔄 Refresh Model Profiles"
-
-on:
-  schedule:
-    - cron: "0 8 * * *" # daily at 08:00 UTC
-  workflow_dispatch:
-
-permissions:
-  contents: write
-  pull-requests: write
-
-jobs:
-  refresh-profiles:
-    uses: ./.github/workflows/_refresh_model_profiles.yml
-    with:
-      providers: >-
-        [
-          {"provider":"anthropic",    "data_dir":"libs/partners/anthropic/langchain_anthropic/data"},
-          {"provider":"deepseek",     "data_dir":"libs/partners/deepseek/langchain_deepseek/data"},
-          {"provider":"fireworks-ai", "data_dir":"libs/partners/fireworks/langchain_fireworks/data"},
-          {"provider":"groq",         "data_dir":"libs/partners/groq/langchain_groq/data"},
-          {"provider":"huggingface",  "data_dir":"libs/partners/huggingface/langchain_huggingface/data"},
-          {"provider":"mistral",      "data_dir":"libs/partners/mistralai/langchain_mistralai/data"},
-          {"provider":"openai",       "data_dir":"libs/partners/openai/langchain_openai/data"},
-          {"provider":"openrouter",   "data_dir":"libs/partners/openrouter/langchain_openrouter/data"},
-          {"provider":"perplexity",   "data_dir":"libs/partners/perplexity/langchain_perplexity/data"},
-          {"provider":"xai",          "data_dir":"libs/partners/xai/langchain_xai/data"}
-        ]
-      cli-path: libs/model-profiles
-      add-paths: libs/partners/**/data/_profiles.py
-      pr-body: |
-        Automated refresh of model profile data for all in-monorepo partner
-        integrations via `langchain-profiles refresh`.
-
-        🤖 Generated by the `refresh_model_profiles` workflow.
-    secrets:
-      MODEL_PROFILE_BOT_APP_ID: ${{ secrets.MODEL_PROFILE_BOT_APP_ID }}
-      MODEL_PROFILE_BOT_PRIVATE_KEY: ${{ secrets.MODEL_PROFILE_BOT_PRIVATE_KEY }}

.github/workflows/reopen_on_assignment.yml

@@ -1,195 +0,0 @@
-# Reopen PRs that were auto-closed by require_issue_link.yml when the
-# contributor was not assigned to the linked issue. When a maintainer
-# assigns the contributor to the issue, this workflow finds matching
-# closed PRs, verifies the issue link, and reopens them.
-#
-# Uses the default GITHUB_TOKEN (not a PAT or app token) so that the
-# reopen and label-removal events do NOT re-trigger other workflows.
-# GitHub suppresses events created by the default GITHUB_TOKEN within
-# workflow runs to prevent infinite loops.
-
-name: Reopen PR on Issue Assignment
-
-on:
-  issues:
-    types: [assigned]
-
-permissions:
-  contents: read
-
-jobs:
-  reopen-linked-prs:
-    runs-on: ubuntu-latest
-    permissions:
-      actions: write
-      pull-requests: write
-
-    steps:
-      - name: Find and reopen matching PRs
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
-        with:
-          script: |
-            const { owner, repo } = context.repo;
-            const issueNumber = context.payload.issue.number;
-            const assignee = context.payload.assignee.login;
-
-            console.log(
-              `Issue #${issueNumber} assigned to ${assignee} — searching for closed PRs to reopen`,
-            );
-
-            const q = [
-              `is:pr`,
-              `is:closed`,
-              `author:${assignee}`,
-              `label:missing-issue-link`,
-              `repo:${owner}/${repo}`,
-            ].join(' ');
-
-            let data;
-            try {
-              ({ data } = await github.rest.search.issuesAndPullRequests({
-                q,
-                per_page: 30,
-              }));
-            } catch (e) {
-              throw new Error(
-                `Failed to search for closed PRs to reopen after assigning ${assignee} ` +
-                `to #${issueNumber} (HTTP ${e.status ?? 'unknown'}): ${e.message}`,
-              );
-            }
-
-            if (data.total_count === 0) {
-              console.log('No matching closed PRs found');
-              return;
-            }
-
-            console.log(`Found ${data.total_count} candidate PR(s)`);
-
-            // Must stay in sync with the identical pattern in require_issue_link.yml
-            const pattern = /(?:close[sd]?|fix(?:e[sd])?|resolve[sd]?)\s*#(\d+)/gi;
-
-            for (const item of data.items) {
-              const prNumber = item.number;
-              const body = item.body || '';
-              const matches = [...body.matchAll(pattern)];
-              const referencedIssues = matches.map(m => parseInt(m[1], 10));
-
-              if (!referencedIssues.includes(issueNumber)) {
-                console.log(`PR #${prNumber} does not reference #${issueNumber} — skipping`);
-                continue;
-              }
-
-              // Skip if already bypassed
-              const labels = item.labels.map(l => l.name);
-              if (labels.includes('bypass-issue-check')) {
-                console.log(`PR #${prNumber} already has bypass-issue-check — skipping`);
-                continue;
-              }
-
-              // Reopen first, remove label second — a closed PR that still has
-              // missing-issue-link is recoverable; a closed PR with the label
-              // stripped is invisible to both workflows.
-              try {
-                await github.rest.pulls.update({
-                  owner,
-                  repo,
-                  pull_number: prNumber,
-                  state: 'open',
-                });
-                console.log(`Reopened PR #${prNumber}`);
-              } catch (e) {
-                if (e.status === 422) {
-                  // Head branch deleted — PR is unrecoverable. Notify the
-                  // contributor so they know to open a new PR.
-                  core.warning(`Cannot reopen PR #${prNumber}: head branch was likely deleted`);
-                  try {
-                    await github.rest.issues.createComment({
-                      owner,
-                      repo,
-                      issue_number: prNumber,
-                      body:
-                        `You have been assigned to #${issueNumber}, but this PR could not be ` +
-                        `reopened because the head branch has been deleted. Please open a new ` +
-                        `PR referencing the issue.`,
-                    });
-                  } catch (commentErr) {
-                    core.warning(
-                      `Also failed to post comment on PR #${prNumber}: ${commentErr.message}`,
-                    );
-                  }
-                  continue;
-                }
-                // Transient errors (rate limit, 5xx) should fail the job so
-                // the label is NOT removed and the run can be retried.
-                throw e;
-              }
-
-              // Remove missing-issue-link label only after successful reopen
-              try {
-                await github.rest.issues.removeLabel({
-                  owner,
-                  repo,
-                  issue_number: prNumber,
-                  name: 'missing-issue-link',
-                });
-                console.log(`Removed missing-issue-link from PR #${prNumber}`);
-              } catch (e) {
-                if (e.status !== 404) throw e;
-              }
-
-              // Minimize stale enforcement comment (best-effort;
-              // sync w/ require_issue_link.yml minimize blocks)
-              try {
-                const marker = '<!-- require-issue-link -->';
-                const comments = await github.paginate(
-                  github.rest.issues.listComments,
-                  { owner, repo, issue_number: prNumber, per_page: 100 },
-                );
-                const stale = comments.find(c => c.body && c.body.includes(marker));
-                if (stale) {
-                  await github.graphql(`
-                    mutation($id: ID!) {
-                      minimizeComment(input: {subjectId: $id, classifier: OUTDATED}) {
-                        minimizedComment { isMinimized }
-                      }
-                    }
-                  `, { id: stale.node_id });
-                  console.log(`Minimized stale enforcement comment ${stale.id} as outdated`);
-                }
-              } catch (e) {
-                core.warning(`Could not minimize stale comment on PR #${prNumber}: ${e.message}`);
-              }
-
-              // Re-run the failed require_issue_link check so it picks up the
-              // new assignment.  The re-run uses the original event payload but
-              // fetches live issue data, so the assignment check will pass.
-              //
-              // Limitation: we look up runs by the PR's current head SHA.  If the
-              // contributor pushed new commits while the PR was closed, head.sha
-              // won't match the SHA of the original failed run and the query will
-              // return 0 results.  This is acceptable because any push after reopen
-              // triggers a fresh require_issue_link run against the new SHA.
-              try {
-                const { data: pr } = await github.rest.pulls.get({
-                  owner, repo, pull_number: prNumber,
-                });
-                const { data: runs } = await github.rest.actions.listWorkflowRuns({
-                  owner, repo,
-                  workflow_id: 'require_issue_link.yml',
-                  head_sha: pr.head.sha,
-                  status: 'failure',
-                  per_page: 1,
-                });
-                if (runs.workflow_runs.length > 0) {
-                  await github.rest.actions.reRunWorkflowFailedJobs({
-                    owner, repo,
-                    run_id: runs.workflow_runs[0].id,
-                  });
-                  console.log(`Re-ran failed require_issue_link run ${runs.workflow_runs[0].id} for PR #${prNumber}`);
-                } else {
-                  console.log(`No failed require_issue_link runs found for PR #${prNumber} — skipping re-run`);
-                }
-              } catch (e) {
-                core.warning(`Could not re-run require_issue_link check for PR #${prNumber} (HTTP ${e.status ?? 'unknown'}): ${e.message}`);
-              }
-            }

.github/workflows/require_issue_link.yml

@@ -1,467 +0,0 @@
-# Require external PRs to reference an approved issue (e.g. Fixes #NNN) and
-# the PR author to be assigned to that issue. On failure the PR is
-# labeled "missing-issue-link", commented on, and closed.
-#
-# Maintainer override: an org member can reopen the PR or remove
-# "missing-issue-link" — both add "bypass-issue-check" and reopen.
-#
-# Dependency: pr_labeler.yml must apply the "external" label first. This
-# workflow does NOT trigger on "opened" (new PRs have no labels yet, so the
-# gate would always skip).
-
-name: Require Issue Link
-
-on:
-  pull_request_target:
-    # NEVER CHECK OUT UNTRUSTED CODE FROM A PR's HEAD IN A pull_request_target JOB.
-    # Doing so would allow attackers to execute arbitrary code in the context of your repository.
-    types: [edited, reopened, labeled, unlabeled]
-
-# ──────────────────────────────────────────────────────────────────────────────
-# Enforcement gate: set to 'true' to activate the issue link requirement.
-# When 'false', the workflow still runs the check logic (useful for dry-run
-# visibility) but will NOT label, comment, close, or fail PRs.
-# ──────────────────────────────────────────────────────────────────────────────
-env:
-  ENFORCE_ISSUE_LINK: "true"
-
-permissions:
-  contents: read
-
-jobs:
-  check-issue-link:
-    # Run when the "external" label is added, on edit/reopen if already labeled,
-    # or when "missing-issue-link" is removed (triggers maintainer override check).
-    # Skip entirely when the PR already carries "trusted-contributor" or
-    # "bypass-issue-check".
-    if: >-
-      !contains(github.event.pull_request.labels.*.name, 'trusted-contributor') &&
-      !contains(github.event.pull_request.labels.*.name, 'bypass-issue-check') &&
-      (
-        (github.event.action == 'labeled' && github.event.label.name == 'external') ||
-        (github.event.action == 'unlabeled' && github.event.label.name == 'missing-issue-link' && contains(github.event.pull_request.labels.*.name, 'external')) ||
-        (github.event.action != 'labeled' && github.event.action != 'unlabeled' && contains(github.event.pull_request.labels.*.name, 'external'))
-      )
-    runs-on: ubuntu-latest
-    permissions:
-      actions: write
-      pull-requests: write
-
-    steps:
-      - name: Check for issue link and assignee
-        id: check-link
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
-        with:
-          script: |
-            const { owner, repo } = context.repo;
-            const prNumber = context.payload.pull_request.number;
-            const action = context.payload.action;
-
-            // ── Helper: ensure a label exists, then add it to the PR ────────
-            async function ensureAndAddLabel(labelName, color) {
-              try {
-                await github.rest.issues.getLabel({ owner, repo, name: labelName });
-              } catch (e) {
-                if (e.status !== 404) throw e;
-                try {
-                  await github.rest.issues.createLabel({ owner, repo, name: labelName, color });
-                } catch (createErr) {
-                  // 422 = label was created by a concurrent run between our
-                  // GET and POST — safe to ignore.
-                  if (createErr.status !== 422) throw createErr;
-                }
-              }
-              await github.rest.issues.addLabels({
-                owner, repo, issue_number: prNumber, labels: [labelName],
-              });
-            }
-
-            // ── Helper: check if the user who triggered this event (reopened
-            // the PR / removed the label) has write+ access on the repo ───
-            // Uses the repo collaborator permission endpoint instead of the
-            // org membership endpoint. The org endpoint requires the caller
-            // to be an org member, which GITHUB_TOKEN (an app installation
-            // token) never is — so it always returns 403.
-            async function senderIsOrgMember() {
-              const sender = context.payload.sender?.login;
-              if (!sender) {
-                throw new Error('Event has no sender — cannot check permissions');
-              }
-              try {
-                const { data } = await github.rest.repos.getCollaboratorPermissionLevel({
-                  owner, repo, username: sender,
-                });
-                const perm = data.permission;
-                if (['admin', 'maintain', 'write'].includes(perm)) {
-                  console.log(`${sender} has ${perm} permission — treating as maintainer`);
-                  return { isMember: true, login: sender };
-                }
-                console.log(`${sender} has ${perm} permission — not a maintainer`);
-                return { isMember: false, login: sender };
-              } catch (e) {
-                if (e.status === 404) {
-                  console.log(`Cannot check permissions for ${sender} — treating as non-maintainer`);
-                  return { isMember: false, login: sender };
-                }
-                const status = e.status ?? 'unknown';
-                throw new Error(
-                  `Permission check failed for ${sender} (HTTP ${status}): ${e.message}`,
-                );
-              }
-            }
-
-            // ── Helper: apply maintainer bypass (shared by both override paths) ──
-            async function applyMaintainerBypass(reason) {
-              console.log(reason);
-
-              // Remove missing-issue-link if present
-              try {
-                await github.rest.issues.removeLabel({
-                  owner, repo, issue_number: prNumber, name: 'missing-issue-link',
-                });
-              } catch (e) {
-                if (e.status !== 404) throw e;
-              }
-
-              // Reopen before adding bypass label — a failed reopen is more
-              // actionable than a closed PR with a bypass label stuck on it.
-              if (context.payload.pull_request.state === 'closed') {
-                try {
-                  await github.rest.pulls.update({
-                    owner, repo, pull_number: prNumber, state: 'open',
-                  });
-                  console.log(`Reopened PR #${prNumber}`);
-                } catch (e) {
-                  // 422 if head branch deleted; 403 if permissions insufficient.
-                  // Bypass labels still apply — maintainer can reopen manually.
-                  core.warning(
-                    `Could not reopen PR #${prNumber} (HTTP ${e.status ?? 'unknown'}): ${e.message}. ` +
-                    `Bypass labels were applied — a maintainer may need to reopen manually.`,
-                  );
-                }
-              }
-
-              // Add bypass-issue-check so future triggers skip enforcement
-              await ensureAndAddLabel('bypass-issue-check', '0e8a16');
-
-              // Minimize stale enforcement comment (best-effort; must not
-              // abort bypass — sync w/ reopen_on_assignment.yml & step below)
-              try {
-                const marker = '<!-- require-issue-link -->';
-                const comments = await github.paginate(
-                  github.rest.issues.listComments,
-                  { owner, repo, issue_number: prNumber, per_page: 100 },
-                );
-                const stale = comments.find(c => c.body && c.body.includes(marker));
-                if (stale) {
-                  await github.graphql(`
-                    mutation($id: ID!) {
-                      minimizeComment(input: {subjectId: $id, classifier: OUTDATED}) {
-                        minimizedComment { isMinimized }
-                      }
-                    }
-                  `, { id: stale.node_id });
-                  console.log(`Minimized stale enforcement comment ${stale.id} as outdated`);
-                }
-              } catch (e) {
-                core.warning(`Could not minimize stale comment on PR #${prNumber}: ${e.message}`);
-              }
-
-              core.setOutput('has-link', 'true');
-              core.setOutput('is-assigned', 'true');
-            }
-
-            // ── Maintainer override: removed "missing-issue-link" label ─────
-            if (action === 'unlabeled') {
-              const { isMember, login } = await senderIsOrgMember();
-              if (isMember) {
-                await applyMaintainerBypass(
-                  `Maintainer ${login} removed missing-issue-link from PR #${prNumber} — bypassing enforcement`,
-                );
-                return;
-              }
-              // Non-member removed the label — re-add it defensively and
-              // set failure outputs so downstream steps (comment, close) fire.
-              // NOTE: addLabels fires a "labeled" event, but the job-level gate
-              // only matches labeled events for "external", so no re-trigger.
-              console.log(`Non-member ${login} removed missing-issue-link — re-adding`);
-              try {
-                await ensureAndAddLabel('missing-issue-link', 'b76e79');
-              } catch (e) {
-                core.warning(
-                  `Failed to re-add missing-issue-link (HTTP ${e.status ?? 'unknown'}): ${e.message}. ` +
-                  `Downstream step will retry.`,
-                );
-              }
-              core.setOutput('has-link', 'false');
-              core.setOutput('is-assigned', 'false');
-              return;
-            }
-
-            // ── Maintainer override: reopened PR with "missing-issue-link" ──
-            const prLabels = context.payload.pull_request.labels.map(l => l.name);
-            if (action === 'reopened' && prLabels.includes('missing-issue-link')) {
-              const { isMember, login } = await senderIsOrgMember();
-              if (isMember) {
-                await applyMaintainerBypass(
-                  `Maintainer ${login} reopened PR #${prNumber} — bypassing enforcement`,
-                );
-                return;
-              }
-              console.log(`Non-member ${login} reopened PR — proceeding with check`);
-            }
-
-            // ── Fetch live labels (race guard) ──────────────────────────────
-            const { data: liveLabels } = await github.rest.issues.listLabelsOnIssue({
-              owner, repo, issue_number: prNumber,
-            });
-            const liveNames = liveLabels.map(l => l.name);
-            if (liveNames.includes('trusted-contributor') || liveNames.includes('bypass-issue-check')) {
-              console.log('PR has trusted-contributor or bypass-issue-check label — bypassing');
-              core.setOutput('has-link', 'true');
-              core.setOutput('is-assigned', 'true');
-              return;
-            }
-
-            const body = context.payload.pull_request.body || '';
-            const pattern = /(?:close[sd]?|fix(?:e[sd])?|resolve[sd]?)\s*#(\d+)/gi;
-            const matches = [...body.matchAll(pattern)];
-
-            if (matches.length === 0) {
-              console.log('No issue link found in PR body');
-              core.setOutput('has-link', 'false');
-              core.setOutput('is-assigned', 'false');
-              return;
-            }
-
-            const issues = matches.map(m => `#${m[1]}`).join(', ');
-            console.log(`Found issue link(s): ${issues}`);
-            core.setOutput('has-link', 'true');
-
-            // Check whether the PR author is assigned to at least one linked issue
-            const prAuthor = context.payload.pull_request.user.login;
-            const MAX_ISSUES = 5;
-            const allIssueNumbers = [...new Set(matches.map(m => parseInt(m[1], 10)))];
-            const issueNumbers = allIssueNumbers.slice(0, MAX_ISSUES);
-            if (allIssueNumbers.length > MAX_ISSUES) {
-              core.warning(
-                `PR references ${allIssueNumbers.length} issues — only checking the first ${MAX_ISSUES}`,
-              );
-            }
-
-            let assignedToAny = false;
-            for (const num of issueNumbers) {
-              try {
-                const { data: issue } = await github.rest.issues.get({
-                  owner, repo, issue_number: num,
-                });
-                const assignees = issue.assignees.map(a => a.login.toLowerCase());
-                if (assignees.includes(prAuthor.toLowerCase())) {
-                  console.log(`PR author "${prAuthor}" is assigned to #${num}`);
-                  assignedToAny = true;
-                  break;
-                } else {
-                  console.log(`PR author "${prAuthor}" is NOT assigned to #${num} (assignees: ${assignees.join(', ') || 'none'})`);
-                }
-              } catch (error) {
-                if (error.status === 404) {
-                  console.log(`Issue #${num} not found — skipping`);
-                } else {
-                  // Non-404 errors (rate limit, server error) must not be
-                  // silently skipped — they could cause false enforcement
-                  // (closing a legitimate PR whose assignment can't be verified).
-                  throw new Error(
-                    `Cannot verify assignee for issue #${num} (${error.status}): ${error.message}`,
-                  );
-                }
-              }
-            }
-
-            core.setOutput('is-assigned', assignedToAny ? 'true' : 'false');
-
-      - name: Add missing-issue-link label
-        if: >-
-          env.ENFORCE_ISSUE_LINK == 'true' &&
-          (steps.check-link.outputs.has-link != 'true' || steps.check-link.outputs.is-assigned != 'true')
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
-        with:
-          script: |
-            const { owner, repo } = context.repo;
-            const prNumber = context.payload.pull_request.number;
-            const labelName = 'missing-issue-link';
-
-            // Ensure the label exists (no checkout/shared helper available)
-            try {
-              await github.rest.issues.getLabel({ owner, repo, name: labelName });
-            } catch (e) {
-              if (e.status !== 404) throw e;
-              try {
-                await github.rest.issues.createLabel({
-                  owner, repo, name: labelName, color: 'b76e79',
-                });
-              } catch (createErr) {
-                if (createErr.status !== 422) throw createErr;
-              }
-            }
-
-            await github.rest.issues.addLabels({
-              owner, repo, issue_number: prNumber, labels: [labelName],
-            });
-
-      - name: Remove missing-issue-link label and reopen PR
-        if: >-
-          env.ENFORCE_ISSUE_LINK == 'true' &&
-          steps.check-link.outputs.has-link == 'true' && steps.check-link.outputs.is-assigned == 'true'
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
-        with:
-          script: |
-            const { owner, repo } = context.repo;
-            const prNumber = context.payload.pull_request.number;
-            try {
-              await github.rest.issues.removeLabel({
-                owner, repo, issue_number: prNumber, name: 'missing-issue-link',
-              });
-            } catch (error) {
-              if (error.status !== 404) throw error;
-            }
-
-            // Reopen if this workflow previously closed the PR. We check the
-            // event payload labels (not live labels) because we already removed
-            // missing-issue-link above; the payload still reflects pre-step state.
-            const labels = context.payload.pull_request.labels.map(l => l.name);
-            if (context.payload.pull_request.state === 'closed' && labels.includes('missing-issue-link')) {
-              await github.rest.pulls.update({
-                owner,
-                repo,
-                pull_number: prNumber,
-                state: 'open',
-              });
-              console.log(`Reopened PR #${prNumber}`);
-            }
-
-            // Minimize stale enforcement comment (best-effort;
-            // sync w/ applyMaintainerBypass above & reopen_on_assignment.yml)
-            try {
-              const marker = '<!-- require-issue-link -->';
-              const comments = await github.paginate(
-                github.rest.issues.listComments,
-                { owner, repo, issue_number: prNumber, per_page: 100 },
-              );
-              const stale = comments.find(c => c.body && c.body.includes(marker));
-              if (stale) {
-                await github.graphql(`
-                  mutation($id: ID!) {
-                    minimizeComment(input: {subjectId: $id, classifier: OUTDATED}) {
-                      minimizedComment { isMinimized }
-                    }
-                  }
-                `, { id: stale.node_id });
-                console.log(`Minimized stale enforcement comment ${stale.id} as outdated`);
-              }
-            } catch (e) {
-              core.warning(`Could not minimize stale comment on PR #${prNumber}: ${e.message}`);
-            }
-
-      - name: Post comment, close PR, and fail
-        if: >-
-          env.ENFORCE_ISSUE_LINK == 'true' &&
-          (steps.check-link.outputs.has-link != 'true' || steps.check-link.outputs.is-assigned != 'true')
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
-        with:
-          script: |
-            const { owner, repo } = context.repo;
-            const prNumber = context.payload.pull_request.number;
-            const hasLink = '${{ steps.check-link.outputs.has-link }}' === 'true';
-            const isAssigned = '${{ steps.check-link.outputs.is-assigned }}' === 'true';
-            const marker = '<!-- require-issue-link -->';
-
-            let lines;
-            if (!hasLink) {
-              lines = [
-                marker,
-                '**This PR has been automatically closed** because it does not link to an approved issue.',
-                '',
-                'All external contributions must reference an approved issue or discussion. Please:',
-                '1. Find or [open an issue](https://github.com/' + owner + '/' + repo + '/issues/new/choose) describing the change',
-                '2. Wait for a maintainer to approve and assign you',
-                '3. Add `Fixes #<issue_number>`, `Closes #<issue_number>`, or `Resolves #<issue_number>` to your PR description and the PR will be reopened automatically',
-                '',
-                '*Maintainers: reopen this PR or remove the `missing-issue-link` label to bypass this check.*',
-              ];
-            } else {
-              lines = [
-                marker,
-                '**This PR has been automatically closed** because you are not assigned to the linked issue.',
-                '',
-                'External contributors must be assigned to an issue before opening a PR for it. Please:',
-                '1. Comment on the linked issue to request assignment from a maintainer',
-                '2. Once assigned, your PR will be reopened automatically',
-                '',
-                '*Maintainers: reopen this PR or remove the `missing-issue-link` label to bypass this check.*',
-              ];
-            }
-
-            const body = lines.join('\n');
-
-            // Deduplicate: check for existing comment with the marker
-            const comments = await github.paginate(
-              github.rest.issues.listComments,
-              { owner, repo, issue_number: prNumber, per_page: 100 },
-            );
-            const existing = comments.find(c => c.body && c.body.includes(marker));
-
-            if (!existing) {
-              await github.rest.issues.createComment({
-                owner,
-                repo,
-                issue_number: prNumber,
-                body,
-              });
-              console.log('Posted requirement comment');
-            } else if (existing.body !== body) {
-              await github.rest.issues.updateComment({
-                owner,
-                repo,
-                comment_id: existing.id,
-                body,
-              });
-              console.log('Updated existing comment with new message');
-            } else {
-              console.log('Comment already exists — skipping');
-            }
-
-            // Close the PR
-            if (context.payload.pull_request.state === 'open') {
-              await github.rest.pulls.update({
-                owner,
-                repo,
-                pull_number: prNumber,
-                state: 'closed',
-              });
-              console.log(`Closed PR #${prNumber}`);
-            }
-
-            // Cancel all other in-progress and queued workflow runs for this PR
-            const headSha = context.payload.pull_request.head.sha;
-            for (const status of ['in_progress', 'queued']) {
-              const runs = await github.paginate(
-                github.rest.actions.listWorkflowRunsForRepo,
-                { owner, repo, head_sha: headSha, status, per_page: 100 },
-              );
-              for (const run of runs) {
-                if (run.id === context.runId) continue;
-                try {
-                  await github.rest.actions.cancelWorkflowRun({
-                    owner, repo, run_id: run.id,
-                  });
-                  console.log(`Cancelled ${status} run ${run.id} (${run.name})`);
-                } catch (err) {
-                  console.log(`Could not cancel run ${run.id}: ${err.message}`);
-                }
-              }
-            }
-
-            const reason = !hasLink
-              ? 'PR must reference an issue using auto-close keywords (e.g., "Fixes #123").'
-              : 'PR author must be assigned to the linked issue.';
-            core.setFailed(reason);

.github/workflows/tag-external-contributions.yml

@@ -0,0 +1,148 @@
+# Automatically tag issues and pull requests as "external" or "internal"
+# based on whether the author is a member of the langchain-ai
+# GitHub organization.
+#
+# Setup Requirements:
+# 1. Create a GitHub App with permissions:
+#    - Repository: Issues (write), Pull requests (write)
+#    - Organization: Members (read)
+# 2. Install the app on your organization and this repository
+# 3. Add these repository secrets:
+#    - ORG_MEMBERSHIP_APP_ID: Your app's ID
+#    - ORG_MEMBERSHIP_APP_PRIVATE_KEY: Your app's private key
+#
+# The GitHub App token is required to check private organization membership.
+# Without it, the workflow will fail.
+
+name: Tag External Contributions
+
+on:
+  issues:
+    types: [opened]
+  pull_request_target:
+    types: [opened]
+
+jobs:
+  tag-external:
+    runs-on: ubuntu-latest
+    permissions:
+      issues: write
+      pull-requests: write
+
+    steps:
+      - name: Generate GitHub App token
+        id: app-token
+        uses: actions/create-github-app-token@v2
+        with:
+          app-id: ${{ secrets.ORG_MEMBERSHIP_APP_ID }}
+          private-key: ${{ secrets.ORG_MEMBERSHIP_APP_PRIVATE_KEY }}
+
+      - name: Check if contributor is external
+        id: check-membership
+        uses: actions/github-script@v8
+        with:
+          github-token: ${{ steps.app-token.outputs.token }}
+          script: |
+            const { owner, repo } = context.repo;
+            const author = context.payload.sender.login;
+
+            try {
+              // Check if the author is a member of the langchain-ai organization
+              // This requires org:read permissions to see private memberships
+              const membership = await github.rest.orgs.getMembershipForUser({
+                org: 'langchain-ai',
+                username: author
+              });
+
+              // Check if membership is active (not just pending invitation)
+              if (membership.data.state === 'active') {
+                console.log(`User ${author} is an active member of langchain-ai organization`);
+                core.setOutput('is-external', 'false');
+              } else {
+                console.log(`User ${author} has pending membership in langchain-ai organization`);
+                core.setOutput('is-external', 'true');
+              }
+            } catch (error) {
+              if (error.status === 404) {
+                console.log(`User ${author} is not a member of langchain-ai organization`);
+                core.setOutput('is-external', 'true');
+              } else {
+                console.error('Error checking membership:', error);
+                console.log('Status:', error.status);
+                console.log('Message:', error.message);
+                // If we can't determine membership due to API error, assume external for safety
+                core.setOutput('is-external', 'true');
+              }
+            }
+
+      - name: Add external label to issue
+        if: steps.check-membership.outputs.is-external == 'true' && github.event_name == 'issues'
+        uses: actions/github-script@v8
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          script: |
+            const { owner, repo } = context.repo;
+            const issue_number = context.payload.issue.number;
+
+            await github.rest.issues.addLabels({
+              owner,
+              repo,
+              issue_number,
+              labels: ['external']
+            });
+
+            console.log(`Added 'external' label to issue #${issue_number}`);
+
+      - name: Add external label to pull request
+        if: steps.check-membership.outputs.is-external == 'true' && github.event_name == 'pull_request_target'
+        uses: actions/github-script@v8
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          script: |
+            const { owner, repo } = context.repo;
+            const pull_number = context.payload.pull_request.number;
+
+            await github.rest.issues.addLabels({
+              owner,
+              repo,
+              issue_number: pull_number,
+              labels: ['external']
+            });
+
+            console.log(`Added 'external' label to pull request #${pull_number}`);
+
+      - name: Add internal label to issue
+        if: steps.check-membership.outputs.is-external == 'false' && github.event_name == 'issues'
+        uses: actions/github-script@v8
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          script: |
+            const { owner, repo } = context.repo;
+            const issue_number = context.payload.issue.number;
+
+            await github.rest.issues.addLabels({
+              owner,
+              repo,
+              issue_number,
+              labels: ['internal']
+            });
+
+            console.log(`Added 'internal' label to issue #${issue_number}`);
+
+      - name: Add internal label to pull request
+        if: steps.check-membership.outputs.is-external == 'false' && github.event_name == 'pull_request_target'
+        uses: actions/github-script@v8
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          script: |
+            const { owner, repo } = context.repo;
+            const pull_number = context.payload.pull_request.number;
+
+            await github.rest.issues.addLabels({
+              owner,
+              repo,
+              issue_number: pull_number,
+              labels: ['internal']
+            });
+
+            console.log(`Added 'internal' label to pull request #${pull_number}`);

.github/workflows/tag-external-issues.yml

@@ -1,205 +0,0 @@
-# Automatically tag issues as "external" or "internal" based on whether
-# the author is a member of the langchain-ai GitHub organization, and
-# apply contributor tier labels to external contributors based on their
-# merged PR history.
-#
-# NOTE: PR labeling (including external/internal, tier, size, file, and
-# title labels) is handled by pr_labeler.yml. This workflow handles
-# issues only.
-#
-# Config (trustedThreshold, labelColor) is read from
-# .github/scripts/pr-labeler-config.json to stay in sync with
-# pr_labeler.yml.
-#
-# Setup Requirements:
-# 1. Create a GitHub App with permissions:
-#    - Repository: Issues (write)
-#    - Organization: Members (read)
-# 2. Install the app on your organization and this repository
-# 3. Add these repository secrets:
-#    - ORG_MEMBERSHIP_APP_ID: Your app's ID
-#    - ORG_MEMBERSHIP_APP_PRIVATE_KEY: Your app's private key
-#
-# The GitHub App token is required to check private organization membership.
-# Without it, the workflow will fail.
-
-name: Tag External Issues
-
-on:
-  issues:
-    types: [opened]
-  workflow_dispatch:
-    inputs:
-      max_items:
-        description: "Maximum number of open issues to process"
-        default: "100"
-        type: string
-
-permissions:
-  contents: read
-
-concurrency:
-  group: ${{ github.workflow }}-${{ github.event.issue.number || github.run_id }}
-  cancel-in-progress: true
-
-jobs:
-  tag-external:
-    if: github.event_name != 'workflow_dispatch'
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      issues: write
-
-    steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-
-      - name: Generate GitHub App token
-        id: app-token
-        uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3
-        with:
-          app-id: ${{ secrets.ORG_MEMBERSHIP_APP_ID }}
-          private-key: ${{ secrets.ORG_MEMBERSHIP_APP_PRIVATE_KEY }}
-
-      - name: Check if contributor is external
-        if: steps.app-token.outcome == 'success'
-        id: check-membership
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
-        with:
-          github-token: ${{ steps.app-token.outputs.token }}
-          script: |
-            const { owner, repo } = context.repo;
-            const { h } = require('./.github/scripts/pr-labeler.js').loadAndInit(github, owner, repo, core);
-
-            const author = context.payload.sender.login;
-            const { isExternal } = await h.checkMembership(
-              author, context.payload.sender.type,
-            );
-            core.setOutput('is-external', isExternal ? 'true' : 'false');
-
-      - name: Apply contributor tier label
-        if: steps.check-membership.outputs.is-external == 'true'
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
-        with:
-          # GITHUB_TOKEN is fine here — no downstream workflow chains
-          # off tier labels on issues (unlike PRs where App token is
-          # needed for require_issue_link.yml).
-          github-token: ${{ secrets.GITHUB_TOKEN }}
-          script: |
-            const { owner, repo } = context.repo;
-            const { h } = require('./.github/scripts/pr-labeler.js').loadAndInit(github, owner, repo, core);
-
-            const issue = context.payload.issue;
-            // new-contributor is only meaningful on PRs, not issues
-            await h.applyTierLabel(issue.number, issue.user.login, { skipNewContributor: true });
-
-      - name: Add external/internal label
-        if: steps.check-membership.outputs.is-external != ''
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
-        with:
-          github-token: ${{ secrets.GITHUB_TOKEN }}
-          script: |
-            const { owner, repo } = context.repo;
-            const issue_number = context.payload.issue.number;
-
-            const { h } = require('./.github/scripts/pr-labeler.js').loadAndInit(github, owner, repo, core);
-
-            const label = '${{ steps.check-membership.outputs.is-external }}' === 'true'
-              ? 'external' : 'internal';
-            await h.ensureLabel(label);
-            await github.rest.issues.addLabels({
-              owner, repo, issue_number, labels: [label],
-            });
-            console.log(`Added '${label}' label to issue #${issue_number}`);
-
-  backfill:
-    if: github.event_name == 'workflow_dispatch'
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      issues: write
-
-    steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-
-      - name: Generate GitHub App token
-        id: app-token
-        uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3
-        with:
-          app-id: ${{ secrets.ORG_MEMBERSHIP_APP_ID }}
-          private-key: ${{ secrets.ORG_MEMBERSHIP_APP_PRIVATE_KEY }}
-
-      - name: Backfill labels on open issues
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
-        with:
-          github-token: ${{ steps.app-token.outputs.token }}
-          script: |
-            const { owner, repo } = context.repo;
-            const rawMax = '${{ inputs.max_items }}';
-            const maxItems = parseInt(rawMax, 10);
-            if (isNaN(maxItems) || maxItems <= 0) {
-              core.setFailed(`Invalid max_items: "${rawMax}" — must be a positive integer`);
-              return;
-            }
-
-            const { h } = require('./.github/scripts/pr-labeler.js').loadAndInit(github, owner, repo, core);
-
-            const tierLabels = ['trusted-contributor'];
-            for (const name of tierLabels) {
-              await h.ensureLabel(name);
-            }
-
-            const contributorCache = new Map();
-
-            const issues = await github.paginate(github.rest.issues.listForRepo, {
-              owner, repo, state: 'open', per_page: 100,
-            });
-
-            let processed = 0;
-            let failures = 0;
-            for (const issue of issues) {
-              if (processed >= maxItems) break;
-              if (issue.pull_request) continue;
-
-              try {
-                const author = issue.user.login;
-                const info = await h.getContributorInfo(contributorCache, author, issue.user.type);
-
-                const labels = [info.isExternal ? 'external' : 'internal'];
-                if (info.isExternal && info.mergedCount != null && info.mergedCount >= h.trustedThreshold) {
-                  labels.push('trusted-contributor');
-                }
-
-                // Ensure all labels exist before batch add
-                for (const name of labels) {
-                  await h.ensureLabel(name);
-                }
-
-                // Remove stale tier labels
-                const currentLabels = (await github.paginate(
-                  github.rest.issues.listLabelsOnIssue,
-                  { owner, repo, issue_number: issue.number, per_page: 100 },
-                )).map(l => l.name ?? '');
-                for (const name of currentLabels) {
-                  if (tierLabels.includes(name) && !labels.includes(name)) {
-                    try {
-                      await github.rest.issues.removeLabel({
-                        owner, repo, issue_number: issue.number, name,
-                      });
-                    } catch (e) {
-                      if (e.status !== 404) throw e;
-                    }
-                  }
-                }
-
-                await github.rest.issues.addLabels({
-                  owner, repo, issue_number: issue.number, labels,
-                });
-                console.log(`Issue #${issue.number} (${author}): ${labels.join(', ')}`);
-                processed++;
-              } catch (e) {
-                failures++;
-                core.warning(`Failed to process issue #${issue.number}: ${e.message}`);
-              }
-            }
-
-            console.log(`\nBackfill complete. Processed ${processed} issues, ${failures} failures. ${contributorCache.size} unique authors.`);

.github/workflows/v03_api_doc_build.yml

@@ -13,9 +13,6 @@ run-name: "Build & Deploy API Reference (v0.3)"
 on:
   workflow_dispatch:
 
-permissions:
-  contents: read
-
 env:
   PYTHON_VERSION: "3.11"
 
@@ -26,12 +23,12 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@v6
         with:
           ref: v0.3
           path: langchain
 
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@v6
         with:
           repository: langchain-ai/langchain-api-docs-html
           path: langchain-api-docs-html
@@ -39,7 +36,7 @@ jobs:
 
       - name: "📋 Extract Repository List with yq"
         id: get-unsorted-repos
-        uses: mikefarah/yq@17f66dc6c6a177fafd8b71a6abea6d6340aa1e16 # master
+        uses: mikefarah/yq@master
         with:
           cmd: |
             # Extract repos from packages.yml that are in the langchain-ai org
@@ -94,7 +91,7 @@ jobs:
           done
 
       - name: "🐍 Setup Python ${{ env.PYTHON_VERSION }}"
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
+        uses: actions/setup-python@v6
         id: setup-python
         with:
           python-version: ${{ env.PYTHON_VERSION }}
@@ -161,7 +158,7 @@ jobs:
           rm -rf ../langchain-api-docs-html/_build/
 
       # Commit and push changes to langchain-api-docs-html repo
-      - uses: EndBug/add-and-commit@290ea2c423ad77ca9c62ae0f5b224379612c0321 # v10.0.0
+      - uses: EndBug/add-and-commit@v9
         with:
           cwd: langchain-api-docs-html
           message: "Update API docs build from v0.3 branch"

.mcp.json

@@ -3,10 +3,6 @@
     "docs-langchain": {
       "type": "http",
       "url": "https://docs.langchain.com/mcp"
-    },
-    "reference-langchain": {
-      "type": "http",
-      "url": "https://reference.langchain.com/mcp"
     }
   }
-}
+}

AGENTS.md

@@ -44,7 +44,7 @@ This monorepo uses `uv` for dependency management. Local development uses editab
 
 Each package in `libs/` has its own `pyproject.toml` and `uv.lock`.
 
-Before running your tests, set up all packages by running:
+Before running your tests, setup all packages by running:
 
 ```bash
 # For all groups
@@ -194,59 +194,6 @@ def send_email(to: str, msg: str, *, priority: str = "normal") -> bool:
 - Ensure American English spelling (e.g., "behavior", not "behaviour")
 - Do NOT use Sphinx-style double backtick formatting (` ``code`` `). Use single backticks (`` `code` ``) for inline code references in docstrings and comments.
 
-## Model profiles
-
-Model profiles are generated using the `langchain-profiles` CLI in `libs/model-profiles`. The `--data-dir` must point to the directory containing `profile_augmentations.toml`, not the top-level package directory.
-
-```bash
-# Run from libs/model-profiles
-cd libs/model-profiles
-
-# Refresh profiles for a partner in this repo
-uv run langchain-profiles refresh --provider openai --data-dir ../partners/openai/langchain_openai/data
-
-# Refresh profiles for a partner in an external repo (requires echo y to confirm)
-echo y | uv run langchain-profiles refresh --provider google --data-dir /path/to/langchain-google/libs/genai/langchain_google_genai/data
-```
-
-Example partners with profiles in this repo:
-
-- `libs/partners/openai/langchain_openai/data/` (provider: `openai`)
-- `libs/partners/anthropic/langchain_anthropic/data/` (provider: `anthropic`)
-- `libs/partners/perplexity/langchain_perplexity/data/` (provider: `perplexity`)
-
-The `echo y |` pipe is required when `--data-dir` is outside the `libs/model-profiles` working directory.
-
-## CI/CD infrastructure
-
-### Release process
-
-Releases are triggered manually via `.github/workflows/_release.yml` with `working-directory` and `release-version` inputs.
-
-### PR labeling and linting
-
-**Title linting** (`.github/workflows/pr_lint.yml`)
-
-**Auto-labeling:**
-
-- `.github/workflows/pr_labeler.yml` – Unified PR labeler (size, file, title, external/internal, contributor tier)
-- `.github/workflows/pr_labeler_backfill.yml` – Manual backfill of PR labels on open PRs
-- `.github/workflows/auto-label-by-package.yml` – Issue labeling by package
-- `.github/workflows/tag-external-issues.yml` – Issue external/internal classification
-
-### Adding a new partner to CI
-
-When adding a new partner package, update these files:
-
-- `.github/ISSUE_TEMPLATE/*.yml` – Add to package dropdown
-- `.github/dependabot.yml` – Add dependency update entry
-- `.github/scripts/pr-labeler-config.json` – Add file rule and scope-to-label mapping
-- `.github/workflows/_release.yml` – Add API key secrets if needed
-- `.github/workflows/auto-label-by-package.yml` – Add package label
-- `.github/workflows/check_diffs.yml` – Add to change detection
-- `.github/workflows/integration_tests.yml` – Add integration test config
-- `.github/workflows/pr_lint.yml` – Add to allowed scopes
-
 ## Additional resources
 
 - **Documentation:** https://docs.langchain.com/oss/python/langchain/overview and source at https://github.com/langchain-ai/docs or `../docs/`. Prefer the local install and use file search tools for best results. If needed, use the docs MCP server as defined in `.mcp.json` for programmatic access.

CLAUDE.md

@@ -44,7 +44,7 @@ This monorepo uses `uv` for dependency management. Local development uses editab
 
 Each package in `libs/` has its own `pyproject.toml` and `uv.lock`.
 
-Before running your tests, set up all packages by running:
+Before running your tests, setup all packages by running:
 
 ```bash
 # For all groups
@@ -194,59 +194,6 @@ def send_email(to: str, msg: str, *, priority: str = "normal") -> bool:
 - Ensure American English spelling (e.g., "behavior", not "behaviour")
 - Do NOT use Sphinx-style double backtick formatting (` ``code`` `). Use single backticks (`` `code` ``) for inline code references in docstrings and comments.
 
-## Model profiles
-
-Model profiles are generated using the `langchain-profiles` CLI in `libs/model-profiles`. The `--data-dir` must point to the directory containing `profile_augmentations.toml`, not the top-level package directory.
-
-```bash
-# Run from libs/model-profiles
-cd libs/model-profiles
-
-# Refresh profiles for a partner in this repo
-uv run langchain-profiles refresh --provider openai --data-dir ../partners/openai/langchain_openai/data
-
-# Refresh profiles for a partner in an external repo (requires echo y to confirm)
-echo y | uv run langchain-profiles refresh --provider google --data-dir /path/to/langchain-google/libs/genai/langchain_google_genai/data
-```
-
-Example partners with profiles in this repo:
-
-- `libs/partners/openai/langchain_openai/data/` (provider: `openai`)
-- `libs/partners/anthropic/langchain_anthropic/data/` (provider: `anthropic`)
-- `libs/partners/perplexity/langchain_perplexity/data/` (provider: `perplexity`)
-
-The `echo y |` pipe is required when `--data-dir` is outside the `libs/model-profiles` working directory.
-
-## CI/CD infrastructure
-
-### Release process
-
-Releases are triggered manually via `.github/workflows/_release.yml` with `working-directory` and `release-version` inputs.
-
-### PR labeling and linting
-
-**Title linting** (`.github/workflows/pr_lint.yml`)
-
-**Auto-labeling:**
-
-- `.github/workflows/pr_labeler.yml` – Unified PR labeler (size, file, title, external/internal, contributor tier)
-- `.github/workflows/pr_labeler_backfill.yml` – Manual backfill of PR labels on open PRs
-- `.github/workflows/auto-label-by-package.yml` – Issue labeling by package
-- `.github/workflows/tag-external-issues.yml` – Issue external/internal classification
-
-### Adding a new partner to CI
-
-When adding a new partner package, update these files:
-
-- `.github/ISSUE_TEMPLATE/*.yml` – Add to package dropdown
-- `.github/dependabot.yml` – Add dependency update entry
-- `.github/scripts/pr-labeler-config.json` – Add file rule and scope-to-label mapping
-- `.github/workflows/_release.yml` – Add API key secrets if needed
-- `.github/workflows/auto-label-by-package.yml` – Add package label
-- `.github/workflows/check_diffs.yml` – Add to change detection
-- `.github/workflows/integration_tests.yml` – Add integration test config
-- `.github/workflows/pr_lint.yml` – Add to allowed scopes
-
 ## Additional resources
 
 - **Documentation:** https://docs.langchain.com/oss/python/langchain/overview and source at https://github.com/langchain-ai/docs or `../docs/`. Prefer the local install and use file search tools for best results. If needed, use the docs MCP server as defined in `.mcp.json` for programmatic access.

CONTRIBUTING.md

@@ -0,0 +1,15 @@
+# Contributing to LangChain
+
+Thanks for your interest in contributing to LangChain!
+
+We have moved our contributing guidelines to our documentation site to keep them up-to-date and easy to access.
+
+👉 **[Read the Contributing Guide](https://docs.langchain.com/oss/python/contributing/overview)**
+
+This guide includes instructions on:
+- How to set up your development environment
+- How to run tests and linting
+- How to submit a Pull Request
+- Coding standards and best practices
+
+We look forward to your contributions!

README.md

@@ -1,75 +1,38 @@
 <div align="center">
-  <a href="https://docs.langchain.com/oss/python/langchain/overview">
+  <a href="https://www.langchain.com/">
     <picture>
-      <source media="(prefers-color-scheme: dark)" srcset=".github/images/logo-dark.svg">
-      <source media="(prefers-color-scheme: light)" srcset=".github/images/logo-light.svg">
-      <img alt="LangChain Logo" src=".github/images/logo-dark.svg" width="50%">
+      <source media="(prefers-color-scheme: light)" srcset=".github/images/logo-dark.svg">
+      <source media="(prefers-color-scheme: dark)" srcset=".github/images/logo-light.svg">
+      <img alt="LangChain Logo" src=".github/images/logo-dark.svg" width="80%">
     </picture>
   </a>
 </div>
 
 <div align="center">
-  <h3>The agent engineering platform.</h3>
+  <h3>The platform for reliable agents.</h3>
 </div>
 
 <div align="center">
   <a href="https://opensource.org/licenses/MIT" target="_blank"><img src="https://img.shields.io/pypi/l/langchain" alt="PyPI - License"></a>
   <a href="https://pypistats.org/packages/langchain" target="_blank"><img src="https://img.shields.io/pepy/dt/langchain" alt="PyPI - Downloads"></a>
   <a href="https://pypi.org/project/langchain/#history" target="_blank"><img src="https://img.shields.io/pypi/v/langchain?label=%20" alt="Version"></a>
+  <a href="https://vscode.dev/redirect?url=vscode://ms-vscode-remote.remote-containers/cloneInVolume?url=https://github.com/langchain-ai/langchain" target="_blank"><img src="https://img.shields.io/static/v1?label=Dev%20Containers&message=Open&color=blue&logo=visualstudiocode" alt="Open in Dev Containers"></a>
+  <a href="https://codespaces.new/langchain-ai/langchain" target="_blank"><img src="https://github.com/codespaces/badge.svg" alt="Open in Github Codespace" title="Open in Github Codespace" width="150" height="20"></a>
+  <a href="https://codspeed.io/langchain-ai/langchain" target="_blank"><img src="https://img.shields.io/endpoint?url=https://codspeed.io/badge.json" alt="CodSpeed Badge"></a>
   <a href="https://x.com/langchain" target="_blank"><img src="https://img.shields.io/twitter/url/https/twitter.com/langchain.svg?style=social&label=Follow%20%40LangChain" alt="Twitter / X"></a>
 </div>
 
-<br>
-
-LangChain is a framework for building agents and LLM-powered applications. It helps you chain together interoperable components and third-party integrations to simplify AI application development — all while future-proofing decisions as the underlying technology evolves.
-
-> [!NOTE]
-> Looking for the JS/TS library? Check out [LangChain.js](https://github.com/langchain-ai/langchainjs).
-
-## Quickstart
+LangChain is a framework for building agents and LLM-powered applications. It helps you chain together interoperable components and third-party integrations to simplify AI application development – all while future-proofing decisions as the underlying technology evolves.
 
 ```bash
 pip install langchain
-# or
-uv add langchain
-```
-
-```python
-from langchain.chat_models import init_chat_model
-
-model = init_chat_model("openai:gpt-5.4")
-result = model.invoke("Hello, world!")
 ```
 
 If you're looking for more advanced customization or agent orchestration, check out [LangGraph](https://docs.langchain.com/oss/python/langgraph/overview), our framework for building controllable agent workflows.
 
-> [!TIP]
-> For developing, debugging, and deploying AI agents and LLM applications, see [LangSmith](https://docs.langchain.com/langsmith/home).
-
-## LangChain ecosystem
-
-While the LangChain framework can be used standalone, it also integrates seamlessly with any LangChain product, giving developers a full suite of tools when building LLM applications.
-
-- **[Deep Agents](https://github.com/langchain-ai/deepagents)** — Build agents that can plan, use subagents, and leverage file systems for complex tasks
-- **[LangGraph](https://docs.langchain.com/oss/python/langgraph/overview)** — Build agents that can reliably handle complex tasks with our low-level agent orchestration framework
-- **[Integrations](https://docs.langchain.com/oss/python/integrations/providers/overview)** — Chat & embedding models, tools & toolkits, and more
-- **[LangSmith](https://www.langchain.com/langsmith)** — Agent evals, observability, and debugging for LLM apps
-- **[LangSmith Deployment](https://docs.langchain.com/langsmith/deployments)** — Deploy and scale agents with a purpose-built platform for long-running, stateful workflows
-
-## Why use LangChain?
-
-LangChain helps developers build applications powered by LLMs through a standard interface for models, embeddings, vector stores, and more.
-
-- **Real-time data augmentation** — Easily connect LLMs to diverse data sources and external/internal systems, drawing from LangChain's vast library of integrations with model providers, tools, vector stores, retrievers, and more
-- **Model interoperability** — Swap models in and out as your engineering team experiments to find the best choice for your application's needs. As the industry frontier evolves, adapt quickly — LangChain's abstractions keep you moving without losing momentum
-- **Rapid prototyping** — Quickly build and iterate on LLM applications with LangChain's modular, component-based architecture. Test different approaches and workflows without rebuilding from scratch, accelerating your development cycle
-- **Production-ready features** — Deploy reliable applications with built-in support for monitoring, evaluation, and debugging through integrations like LangSmith. Scale with confidence using battle-tested patterns and best practices
-- **Vibrant community and ecosystem** — Leverage a rich ecosystem of integrations, templates, and community-contributed components. Benefit from continuous improvements and stay up-to-date with the latest AI developments through an active open-source community
-- **Flexible abstraction layers** — Work at the level of abstraction that suits your needs — from high-level chains for quick starts to low-level components for fine-grained control. LangChain grows with your application's complexity
-
 ---
 
-## Documentation
+**Documentation**:
 
 - [docs.langchain.com](https://docs.langchain.com/oss/python/langchain/overview) – Comprehensive documentation, including conceptual overviews and guides
 - [reference.langchain.com/python](https://reference.langchain.com/python) – API reference docs for LangChain packages
@@ -77,8 +40,37 @@ LangChain helps developers build applications powered by LLMs through a standard
 
 **Discussions**: Visit the [LangChain Forum](https://forum.langchain.com) to connect with the community and share all of your technical questions, ideas, and feedback.
 
+> [!NOTE]
+> Looking for the JS/TS library? Check out [LangChain.js](https://github.com/langchain-ai/langchainjs).
+
+## Why use LangChain?
+
+LangChain helps developers build applications powered by LLMs through a standard interface for models, embeddings, vector stores, and more.
+
+Use LangChain for:
+
+- **Real-time data augmentation**. Easily connect LLMs to diverse data sources and external/internal systems, drawing from LangChain's vast library of integrations with model providers, tools, vector stores, retrievers, and more.
+- **Model interoperability**. Swap models in and out as your engineering team experiments to find the best choice for your application's needs. As the industry frontier evolves, adapt quickly – LangChain's abstractions keep you moving without losing momentum.
+- **Rapid prototyping**. Quickly build and iterate on LLM applications with LangChain's modular, component-based architecture. Test different approaches and workflows without rebuilding from scratch, accelerating your development cycle.
+- **Production-ready features**. Deploy reliable applications with built-in support for monitoring, evaluation, and debugging through integrations like LangSmith. Scale with confidence using battle-tested patterns and best practices.
+- **Vibrant community and ecosystem**. Leverage a rich ecosystem of integrations, templates, and community-contributed components. Benefit from continuous improvements and stay up-to-date with the latest AI developments through an active open-source community.
+- **Flexible abstraction layers**. Work at the level of abstraction that suits your needs - from high-level chains for quick starts to low-level components for fine-grained control. LangChain grows with your application's complexity.
+
+## LangChain ecosystem
+
+While the LangChain framework can be used standalone, it also integrates seamlessly with any LangChain product, giving developers a full suite of tools when building LLM applications.
+
+To improve your LLM application development, pair LangChain with:
+
+- [Deep Agents](https://github.com/langchain-ai/deepagents) *(new!)* – Build agents that can plan, use subagents, and leverage file systems for complex tasks
+- [LangGraph](https://docs.langchain.com/oss/python/langgraph/overview) – Build agents that can reliably handle complex tasks with LangGraph, our low-level agent orchestration framework. LangGraph offers customizable architecture, long-term memory, and human-in-the-loop workflows – and is trusted in production by companies like LinkedIn, Uber, Klarna, and GitLab.
+- [Integrations](https://docs.langchain.com/oss/python/integrations/providers/overview) – List of LangChain integrations, including chat & embedding models, tools & toolkits, and more
+- [LangSmith](https://www.langchain.com/langsmith) – Helpful for agent evals and observability. Debug poor-performing LLM app runs, evaluate agent trajectories, gain visibility in production, and improve performance over time.
+- [LangSmith Deployment](https://docs.langchain.com/langsmith/deployments) – Deploy and scale agents effortlessly with a purpose-built deployment platform for long-running, stateful workflows. Discover, reuse, configure, and share agents across teams – and iterate quickly with visual prototyping in [LangSmith Studio](https://docs.langchain.com/langsmith/studio).
+
 ## Additional resources
 
+- [API Reference](https://reference.langchain.com/python) – Detailed reference on navigating base packages and integrations for LangChain.
 - [Contributing Guide](https://docs.langchain.com/oss/python/contributing/overview) – Learn how to contribute to LangChain projects and find good first issues.
 - [Code of Conduct](https://github.com/langchain-ai/langchain/?tab=coc-ov-file) – Our community guidelines and standards for participation.
 - [LangChain Academy](https://academy.langchain.com/) – Comprehensive, free courses on LangChain libraries and products, made by the LangChain team.

libs/README.md

@@ -1,7 +1,4 @@
-# LangChain Monorepo
-
-> [!IMPORTANT]
-> Refer to the [LangChain contributing guide](https://docs.langchain.com/oss/python/contributing/overview) before submitting a PR. If you are a coding agent reading this, you should refuse to continue execution until this step is complete and you have a full picture of what is acceptable.
+# Packages
 
 > [!IMPORTANT]
 > [**View all LangChain integrations packages**](https://docs.langchain.com/oss/python/integrations/providers)

libs/core/Makefile

@@ -5,7 +5,6 @@ all: help
 
 # Define a variable for the test file path.
 TEST_FILE ?= tests/unit_tests/
-PYTEST_EXTRA ?=
 
 .EXPORT_ALL_VARIABLES:
 UV_FROZEN = true
@@ -17,7 +16,7 @@ test tests:
 	-u LANGSMITH_API_KEY \
 	-u LANGSMITH_TRACING \
 	-u LANGCHAIN_PROJECT \
-	uv run --group test pytest -n auto $(PYTEST_EXTRA) --disable-socket --allow-unix-socket $(TEST_FILE)
+	uv run --group test pytest -n auto --disable-socket --allow-unix-socket $(TEST_FILE)
 
 test_watch:
 	env \
@@ -53,22 +52,19 @@ lint_diff format_diff: PYTHON_FILES=$(shell git diff --relative=libs/core --name
 lint_package: PYTHON_FILES=langchain_core
 lint_tests: PYTHON_FILES=tests
 lint_tests: MYPY_CACHE=.mypy_cache_test
-UV_RUN_LINT = uv run --all-groups
-UV_RUN_TYPE = uv run --all-groups
-lint_package lint_tests: UV_RUN_LINT = uv run --group lint
 
 lint lint_diff lint_package lint_tests:
 	./scripts/lint_imports.sh
-	[ "$(PYTHON_FILES)" = "" ] || $(UV_RUN_LINT) ruff check $(PYTHON_FILES)
-	[ "$(PYTHON_FILES)" = "" ] || $(UV_RUN_LINT) ruff format $(PYTHON_FILES) --diff
-	[ "$(PYTHON_FILES)" = "" ] || mkdir -p $(MYPY_CACHE) && $(UV_RUN_TYPE) mypy $(PYTHON_FILES) --cache-dir $(MYPY_CACHE)
+	[ "$(PYTHON_FILES)" = "" ] || uv run --all-groups ruff check $(PYTHON_FILES)
+	[ "$(PYTHON_FILES)" = "" ] || uv run --all-groups ruff format $(PYTHON_FILES) --diff
+	[ "$(PYTHON_FILES)" = "" ] || mkdir -p $(MYPY_CACHE) && uv run --all-groups mypy $(PYTHON_FILES) --cache-dir $(MYPY_CACHE)
 
 type:
-	mkdir -p $(MYPY_CACHE) && $(UV_RUN_TYPE) mypy $(PYTHON_FILES) --cache-dir $(MYPY_CACHE)
+	mkdir -p $(MYPY_CACHE) && uv run --all-groups mypy $(PYTHON_FILES) --cache-dir $(MYPY_CACHE)
 
 format format_diff:
-	[ "$(PYTHON_FILES)" = "" ] || $(UV_RUN_LINT) ruff format $(PYTHON_FILES)
-	[ "$(PYTHON_FILES)" = "" ] || $(UV_RUN_LINT) ruff check --fix $(PYTHON_FILES)
+	[ "$(PYTHON_FILES)" = "" ] || uv run --all-groups ruff format $(PYTHON_FILES)
+	[ "$(PYTHON_FILES)" = "" ] || uv run --all-groups ruff check --fix $(PYTHON_FILES)
 
 benchmark:
 	uv run pytest tests/benchmarks --codspeed

libs/core/README.md

@@ -7,8 +7,8 @@
 
 Looking for the JS/TS version? Check out [LangChain.js](https://github.com/langchain-ai/langchainjs).
 
-To help you ship LangChain apps to production faster, check out [LangSmith](https://www.langchain.com/langsmith).
-[LangSmith](https://www.langchain.com/langsmith) is a unified developer platform for building, testing, and monitoring LLM applications.
+To help you ship LangChain apps to production faster, check out [LangSmith](https://smith.langchain.com).
+[LangSmith](https://smith.langchain.com) is a unified developer platform for building, testing, and monitoring LLM applications.
 
 ## Quick Install
 

libs/core/langchain_core/_api/deprecation.py

@@ -399,7 +399,7 @@ def deprecated(
         components = [
             _message,
             f"Use {_alternative} instead." if _alternative else "",
-            f"Use {_alternative_import} instead." if _alternative_import else "",
+            f"Use `{_alternative_import}` instead." if _alternative_import else "",
             _addendum,
         ]
         details = " ".join([component.strip() for component in components if component])

libs/core/langchain_core/_security/_ssrf_protection.py

@@ -1,398 +0,0 @@
-"""SSRF Protection for validating URLs against Server-Side Request Forgery attacks.
-
-This module provides utilities to validate user-provided URLs and prevent SSRF attacks
-by blocking requests to:
-- Private IP ranges (RFC 1918, loopback, link-local)
-- Cloud metadata endpoints (AWS, GCP, Azure, etc.)
-- Localhost addresses
-- Invalid URL schemes
-
-Usage:
-    from lc_security.ssrf_protection import validate_safe_url, is_safe_url
-
-    # Validate a URL (raises ValueError if unsafe)
-    safe_url = validate_safe_url("https://example.com/webhook")
-
-    # Check if URL is safe (returns bool)
-    if is_safe_url("http://192.168.1.1"):
-        # URL is safe
-        pass
-
-    # Allow private IPs for development/testing (still blocks cloud metadata)
-    safe_url = validate_safe_url("http://localhost:8080", allow_private=True)
-"""
-
-import ipaddress
-import os
-import socket
-from typing import Annotated, Any
-from urllib.parse import urlparse
-
-from pydantic import (
-    AnyHttpUrl,
-    BeforeValidator,
-    HttpUrl,
-)
-
-# Private IP ranges (RFC 1918, RFC 4193, RFC 3927, loopback)
-PRIVATE_IP_RANGES = [
-    ipaddress.ip_network("10.0.0.0/8"),  # Private Class A
-    ipaddress.ip_network("172.16.0.0/12"),  # Private Class B
-    ipaddress.ip_network("192.168.0.0/16"),  # Private Class C
-    ipaddress.ip_network("127.0.0.0/8"),  # Loopback
-    ipaddress.ip_network("169.254.0.0/16"),  # Link-local (includes cloud metadata)
-    ipaddress.ip_network("0.0.0.0/8"),  # Current network
-    ipaddress.ip_network("::1/128"),  # IPv6 loopback
-    ipaddress.ip_network("fc00::/7"),  # IPv6 unique local
-    ipaddress.ip_network("fe80::/10"),  # IPv6 link-local
-    ipaddress.ip_network("ff00::/8"),  # IPv6 multicast
-]
-
-# Cloud provider metadata endpoints
-CLOUD_METADATA_RANGES = [
-    ipaddress.ip_network(
-        "169.254.0.0/16"
-    ),  # IPv4 link-local (used by metadata services)
-]
-
-CLOUD_METADATA_IPS = [
-    "169.254.169.254",  # AWS, GCP, Azure, DigitalOcean, Oracle Cloud
-    "169.254.170.2",  # AWS ECS task metadata
-    "169.254.170.23",  # AWS EKS Pod Identity Agent
-    "100.100.100.200",  # Alibaba Cloud metadata
-    "fd00:ec2::254",  # AWS EC2 IMDSv2 over IPv6 (Nitro instances)
-    "fd00:ec2::23",  # AWS EKS Pod Identity Agent (IPv6)
-    "fe80::a9fe:a9fe",  # OpenStack Nova metadata (IPv6 link-local equiv of
-    # 169.254.169.254)
-]
-
-CLOUD_METADATA_HOSTNAMES = [
-    "metadata.google.internal",  # GCP
-    "metadata",  # Generic
-    "instance-data",  # AWS EC2
-]
-
-# Localhost variations
-LOCALHOST_NAMES = [
-    "localhost",
-    "localhost.localdomain",
-]
-
-
-def _normalize_ip(ip_str: str) -> str:
-    """Normalize IP strings for consistent SSRF checks.
-
-    Args:
-        ip_str: IP address as a string.
-
-    Returns:
-        Canonical string form, converting IPv6-mapped IPv4 to plain IPv4.
-    """
-    ip = ipaddress.ip_address(ip_str)
-    if isinstance(ip, ipaddress.IPv6Address) and ip.ipv4_mapped is not None:
-        return str(ip.ipv4_mapped)
-    return str(ip)
-
-
-def is_private_ip(ip_str: str) -> bool:
-    """Check if an IP address is in a private range.
-
-    Args:
-        ip_str: IP address as a string (e.g., "192.168.1.1")
-
-    Returns:
-        True if IP is in a private range, False otherwise
-    """
-    try:
-        ip = ipaddress.ip_address(_normalize_ip(ip_str))
-        return any(ip in range_ for range_ in PRIVATE_IP_RANGES)
-    except ValueError:
-        return False
-
-
-def is_cloud_metadata(hostname: str, ip_str: str | None = None) -> bool:
-    """Check if hostname or IP is a cloud metadata endpoint.
-
-    Args:
-        hostname: Hostname to check
-        ip_str: Optional IP address to check
-
-    Returns:
-        True if hostname or IP is a known cloud metadata endpoint
-    """
-    # Check hostname
-    if hostname.lower() in CLOUD_METADATA_HOSTNAMES:
-        return True
-
-    # Check IP
-    if ip_str:
-        try:
-            normalized_ip = _normalize_ip(ip_str)
-            if normalized_ip in CLOUD_METADATA_IPS:
-                return True
-
-            ip = ipaddress.ip_address(normalized_ip)
-            if any(ip in range_ for range_ in CLOUD_METADATA_RANGES):
-                return True
-        except ValueError:
-            pass
-
-    return False
-
-
-def is_localhost(hostname: str, ip_str: str | None = None) -> bool:
-    """Check if hostname or IP is localhost.
-
-    Args:
-        hostname: Hostname to check
-        ip_str: Optional IP address to check
-
-    Returns:
-        True if hostname or IP is localhost
-    """
-    # Check hostname
-    if hostname.lower() in LOCALHOST_NAMES:
-        return True
-
-    # Check IP
-    if ip_str:
-        try:
-            normalized_ip = _normalize_ip(ip_str)
-            ip = ipaddress.ip_address(normalized_ip)
-            # Check if loopback
-            if ip.is_loopback:
-                return True
-            # Also check common localhost IPs
-            if normalized_ip in ("127.0.0.1", "::1", "0.0.0.0"):  # noqa: S104
-                return True
-        except ValueError:
-            pass
-
-    return False
-
-
-def validate_safe_url(
-    url: str | AnyHttpUrl,
-    *,
-    allow_private: bool = False,
-    allow_http: bool = True,
-) -> str:
-    """Validate a URL for SSRF protection.
-
-    This function validates URLs to prevent Server-Side Request Forgery (SSRF) attacks
-    by blocking requests to private networks and cloud metadata endpoints.
-
-    Args:
-        url: The URL to validate (string or Pydantic HttpUrl)
-        allow_private: If True, allows private IPs and localhost (for development).
-                      Cloud metadata endpoints are ALWAYS blocked.
-        allow_http: If True, allows both HTTP and HTTPS. If False, only HTTPS.
-
-    Returns:
-        The validated URL as a string
-
-    Raises:
-        ValueError: If URL is invalid or potentially dangerous
-
-    Examples:
-        >>> validate_safe_url("https://hooks.slack.com/services/xxx")
-        'https://hooks.slack.com/services/xxx'
-
-        >>> validate_safe_url("http://127.0.0.1:8080")
-        ValueError: Localhost URLs are not allowed
-
-        >>> validate_safe_url("http://192.168.1.1")
-        ValueError: URL resolves to private IP: 192.168.1.1
-
-        >>> validate_safe_url("http://169.254.169.254/latest/meta-data/")
-        ValueError: URL resolves to cloud metadata IP: 169.254.169.254
-
-        >>> validate_safe_url("http://localhost:8080", allow_private=True)
-        'http://localhost:8080'
-    """
-    url_str = str(url)
-    parsed = urlparse(url_str)
-
-    # Validate URL scheme
-    if not allow_http and parsed.scheme != "https":
-        msg = "Only HTTPS URLs are allowed"
-        raise ValueError(msg)
-
-    if parsed.scheme not in ("http", "https"):
-        msg = f"Only HTTP/HTTPS URLs are allowed, got scheme: {parsed.scheme}"
-        raise ValueError(msg)
-
-    # Extract hostname
-    hostname = parsed.hostname
-    if not hostname:
-        msg = "URL must have a valid hostname"
-        raise ValueError(msg)
-
-    # Special handling for test environments - allow test server hostnames
-    # testserver is used by FastAPI/Starlette test clients and doesn't resolve via DNS
-    # Only enabled when LANGCHAIN_ENV=local_test (set in conftest.py)
-    if (
-        os.environ.get("LANGCHAIN_ENV") == "local_test"
-        and hostname.startswith("test")
-        and "server" in hostname
-    ):
-        return url_str
-
-    # ALWAYS block cloud metadata endpoints (even with allow_private=True)
-    if is_cloud_metadata(hostname):
-        msg = f"Cloud metadata endpoints are not allowed: {hostname}"
-        raise ValueError(msg)
-
-    # Check for localhost
-    if is_localhost(hostname) and not allow_private:
-        msg = f"Localhost URLs are not allowed: {hostname}"
-        raise ValueError(msg)
-
-    # Resolve hostname to IP addresses and validate each one.
-    # Note: DNS resolution results are cached by the OS, so repeated calls are fast.
-    try:
-        # Get all IP addresses for this hostname
-        addr_info = socket.getaddrinfo(
-            hostname,
-            parsed.port or (443 if parsed.scheme == "https" else 80),
-            socket.AF_UNSPEC,  # Allow both IPv4 and IPv6
-            socket.SOCK_STREAM,
-        )
-
-        for result in addr_info:
-            ip_str: str = result[4][0]  # type: ignore[assignment]
-            normalized_ip = _normalize_ip(ip_str)
-
-            # ALWAYS block cloud metadata IPs
-            if is_cloud_metadata(hostname, normalized_ip):
-                msg = f"URL resolves to cloud metadata IP: {normalized_ip}"
-                raise ValueError(msg)
-
-            # Check for localhost IPs
-            if is_localhost(hostname, normalized_ip) and not allow_private:
-                msg = f"URL resolves to localhost IP: {normalized_ip}"
-                raise ValueError(msg)
-
-            # Check for private IPs
-            if not allow_private and is_private_ip(normalized_ip):
-                msg = f"URL resolves to private IP address: {normalized_ip}"
-                raise ValueError(msg)
-
-    except socket.gaierror as e:
-        # DNS resolution failed - fail closed for security
-        msg = f"Failed to resolve hostname '{hostname}': {e}"
-        raise ValueError(msg) from e
-    except OSError as e:
-        # Other network errors - fail closed
-        msg = f"Network error while validating URL: {e}"
-        raise ValueError(msg) from e
-
-    return url_str
-
-
-def is_safe_url(
-    url: str | AnyHttpUrl,
-    *,
-    allow_private: bool = False,
-    allow_http: bool = True,
-) -> bool:
-    """Check if a URL is safe (non-throwing version of validate_safe_url).
-
-    Args:
-        url: The URL to check
-        allow_private: If True, allows private IPs and localhost
-        allow_http: If True, allows both HTTP and HTTPS
-
-    Returns:
-        True if URL is safe, False otherwise
-
-    Examples:
-        >>> is_safe_url("https://example.com")
-        True
-
-        >>> is_safe_url("http://127.0.0.1:8080")
-        False
-
-        >>> is_safe_url("http://localhost:8080", allow_private=True)
-        True
-    """
-    try:
-        validate_safe_url(url, allow_private=allow_private, allow_http=allow_http)
-    except ValueError:
-        return False
-    else:
-        return True
-
-
-def _validate_url_ssrf_strict(v: Any) -> Any:
-    """Validate URL for SSRF protection (strict mode)."""
-    if isinstance(v, str):
-        validate_safe_url(v, allow_private=False, allow_http=True)
-    return v
-
-
-def _validate_url_ssrf_https_only(v: Any) -> Any:
-    """Validate URL for SSRF protection (HTTPS only, strict mode)."""
-    if isinstance(v, str):
-        validate_safe_url(v, allow_private=False, allow_http=False)
-    return v
-
-
-def _validate_url_ssrf_relaxed(v: Any) -> Any:
-    """Validate URL for SSRF protection (relaxed mode - allows private IPs)."""
-    if isinstance(v, str):
-        validate_safe_url(v, allow_private=True, allow_http=True)
-    return v
-
-
-# Annotated types with SSRF protection
-SSRFProtectedUrl = Annotated[HttpUrl, BeforeValidator(_validate_url_ssrf_strict)]
-"""A Pydantic HttpUrl type with built-in SSRF protection.
-
-This blocks private IPs, localhost, and cloud metadata endpoints.
-
-Example:
-    class WebhookSchema(BaseModel):
-        url: SSRFProtectedUrl  # Automatically validated for SSRF
-        headers: dict[str, str] | None = None
-"""
-
-SSRFProtectedUrlRelaxed = Annotated[
-    HttpUrl, BeforeValidator(_validate_url_ssrf_relaxed)
-]
-"""A Pydantic HttpUrl with relaxed SSRF protection (allows private IPs).
-
-Use this for development/testing webhooks where localhost/private IPs are needed.
-Cloud metadata endpoints are still blocked.
-
-Example:
-    class DevWebhookSchema(BaseModel):
-        url: SSRFProtectedUrlRelaxed  # Allows localhost, blocks cloud metadata
-"""
-
-SSRFProtectedHttpsUrl = Annotated[
-    HttpUrl, BeforeValidator(_validate_url_ssrf_https_only)
-]
-"""A Pydantic HttpUrl with SSRF protection that only allows HTTPS.
-
-This blocks private IPs, localhost, cloud metadata endpoints, and HTTP URLs.
-
-Example:
-    class SecureWebhookSchema(BaseModel):
-        url: SSRFProtectedHttpsUrl  # Only HTTPS, blocks private IPs
-"""
-
-SSRFProtectedHttpsUrlStr = Annotated[
-    str, BeforeValidator(_validate_url_ssrf_https_only)
-]
-"""A string type with SSRF protection that only allows HTTPS URLs.
-
-Same as SSRFProtectedHttpsUrl but returns a string instead of HttpUrl.
-Useful for FastAPI query parameters where you need a string URL.
-
-Example:
-    @router.get("/proxy")
-    async def proxy_get(url: SSRFProtectedHttpsUrlStr):
-        async with httpx.AsyncClient() as client:
-            resp = await client.get(url)
-"""

libs/core/langchain_core/caches.py

@@ -166,14 +166,14 @@ class InMemoryCache(BaseCache):
         # Update cache
         cache.update(
             prompt="What is the capital of France?",
-            llm_string="model='gpt-5.4-mini',
+            llm_string="model='gpt-3.5-turbo', temperature=0.1",
             return_val=[Generation(text="Paris")],
         )
 
         # Lookup cache
         result = cache.lookup(
             prompt="What is the capital of France?",
-            llm_string="model='gpt-5.4-mini',
+            llm_string="model='gpt-3.5-turbo', temperature=0.1",
         )
         # result is [Generation(text="Paris")]
         ```

libs/core/langchain_core/callbacks/base.py

@@ -285,29 +285,9 @@ class CallbackManagerMixin:
             This method is called for chat models. If you're implementing a handler for
             a non-chat model, you should use `on_llm_start` instead.
 
-        !!! note
-
-            When overriding this method, the signature **must** include the two
-            required positional arguments ``serialized`` and ``messages``.  Avoid
-            using ``*args`` in your override — doing so causes an ``IndexError``
-            in the fallback path when the callback system converts ``messages``
-            to prompt strings for ``on_llm_start``.  Always declare the
-            signature explicitly:
-
-            .. code-block:: python
-
-                def on_chat_model_start(
-                    self,
-                    serialized: dict[str, Any],
-                    messages: list[list[BaseMessage]],
-                    **kwargs: Any,
-                ) -> None:
-                    raise NotImplementedError  # triggers fallback to on_llm_start
-
         Args:
             serialized: The serialized chat model.
-            messages: The messages. Must be a list of message lists — this is a
-                required positional argument and must be present in any override.
+            messages: The messages.
             run_id: The ID of the current run.
             parent_run_id: The ID of the parent run.
             tags: The tags.
@@ -315,7 +295,7 @@ class CallbackManagerMixin:
             **kwargs: Additional keyword arguments.
         """
         # NotImplementedError is thrown intentionally
-        # Callback handler will fall back to on_llm_start if this exception is thrown
+        # Callback handler will fall back to on_llm_start if this is exception is thrown
         msg = f"{self.__class__.__name__} does not implement `on_chat_model_start`"
         raise NotImplementedError(msg)
 
@@ -554,29 +534,9 @@ class AsyncCallbackHandler(BaseCallbackHandler):
             This method is called for chat models. If you're implementing a handler for
             a non-chat model, you should use `on_llm_start` instead.
 
-        !!! note
-
-            When overriding this method, the signature **must** include the two
-            required positional arguments ``serialized`` and ``messages``.  Avoid
-            using ``*args`` in your override — doing so causes an ``IndexError``
-            in the fallback path when the callback system converts ``messages``
-            to prompt strings for ``on_llm_start``.  Always declare the
-            signature explicitly:
-
-            .. code-block:: python
-
-                async def on_chat_model_start(
-                    self,
-                    serialized: dict[str, Any],
-                    messages: list[list[BaseMessage]],
-                    **kwargs: Any,
-                ) -> None:
-                    raise NotImplementedError  # triggers fallback to on_llm_start
-
         Args:
             serialized: The serialized chat model.
-            messages: The messages. Must be a list of message lists — this is a
-                required positional argument and must be present in any override.
+            messages: The messages.
             run_id: The ID of the current run.
             parent_run_id: The ID of the parent run.
             tags: The tags.
@@ -584,7 +544,7 @@ class AsyncCallbackHandler(BaseCallbackHandler):
             **kwargs: Additional keyword arguments.
         """
         # NotImplementedError is thrown intentionally
-        # Callback handler will fall back to on_llm_start if this exception is thrown
+        # Callback handler will fall back to on_llm_start if this is exception is thrown
         msg = f"{self.__class__.__name__} does not implement `on_chat_model_start`"
         raise NotImplementedError(msg)
 

libs/core/langchain_core/callbacks/manager.py

@@ -13,6 +13,7 @@ from contextlib import asynccontextmanager, contextmanager
 from contextvars import copy_context
 from typing import TYPE_CHECKING, Any, TypeVar, cast
 
+from langsmith.run_helpers import get_tracing_context
 from typing_extensions import Self, override
 
 from langchain_core.callbacks.base import (
@@ -28,6 +29,15 @@ from langchain_core.callbacks.base import (
 from langchain_core.callbacks.stdout import StdOutCallbackHandler
 from langchain_core.globals import get_debug
 from langchain_core.messages import BaseMessage, get_buffer_string
+from langchain_core.tracers.context import (
+    _configure_hooks,
+    _get_trace_callbacks,
+    _get_tracer_project,
+    _tracing_v2_is_enabled,
+    tracing_v2_callback_var,
+)
+from langchain_core.tracers.langchain import LangChainTracer
+from langchain_core.tracers.stdout import ConsoleCallbackHandler
 from langchain_core.utils.env import env_var_is_set
 from langchain_core.utils.uuid import uuid7
 
@@ -94,10 +104,6 @@ def trace_as_chain_group(
             manager.on_chain_end({"output": res})
         ```
     """
-    from langchain_core.tracers.context import (  # noqa: PLC0415 -- deferred to avoid importing langsmith at module level
-        _get_trace_callbacks,
-    )
-
     cb = _get_trace_callbacks(
         project_name, example_id, callback_manager=callback_manager
     )
@@ -177,10 +183,6 @@ async def atrace_as_chain_group(
             await manager.on_chain_end({"output": res})
         ```
     """
-    from langchain_core.tracers.context import (  # noqa: PLC0415 -- deferred to avoid importing langsmith at module level
-        _get_trace_callbacks,
-    )
-
     cb = _get_trace_callbacks(
         project_name, example_id, callback_manager=callback_manager
     )
@@ -2323,18 +2325,6 @@ def _configure(
     Returns:
         The configured callback manager.
     """
-    # Deferred to avoid importing langsmith at module level (~132ms).
-    from langsmith.run_helpers import get_tracing_context  # noqa: PLC0415
-
-    from langchain_core.tracers.context import (  # noqa: PLC0415
-        _configure_hooks,
-        _get_tracer_project,
-        _tracing_v2_is_enabled,
-        tracing_v2_callback_var,
-    )
-    from langchain_core.tracers.langchain import LangChainTracer  # noqa: PLC0415
-    from langchain_core.tracers.stdout import ConsoleCallbackHandler  # noqa: PLC0415
-
     tracing_context = get_tracing_context()
     tracing_metadata = tracing_context["metadata"]
     tracing_tags = tracing_context["tags"]

libs/core/langchain_core/callbacks/usage.py

@@ -24,7 +24,7 @@ class UsageMetadataCallbackHandler(BaseCallbackHandler):
         from langchain_core.callbacks import UsageMetadataCallbackHandler
 
         llm_1 = init_chat_model(model="openai:gpt-4o-mini")
-        llm_2 = init_chat_model(model="anthropic:claude-haiku-4-5-20251001")
+        llm_2 = init_chat_model(model="anthropic:claude-3-5-haiku-20241022")
 
         callback = UsageMetadataCallbackHandler()
         result_1 = llm_1.invoke("Hello", config={"callbacks": [callback]})
@@ -38,7 +38,7 @@ class UsageMetadataCallbackHandler(BaseCallbackHandler):
           'total_tokens': 18,
           'input_token_details': {'audio': 0, 'cache_read': 0},
           'output_token_details': {'audio': 0, 'reasoning': 0}},
-         'claude-haiku-4-5-20251001': {'input_tokens': 8,
+         'claude-3-5-haiku-20241022': {'input_tokens': 8,
           'output_tokens': 21,
           'total_tokens': 29,
           'input_token_details': {'cache_read': 0, 'cache_creation': 0}}}
@@ -110,7 +110,7 @@ def get_usage_metadata_callback(
         from langchain_core.callbacks import get_usage_metadata_callback
 
         llm_1 = init_chat_model(model="openai:gpt-4o-mini")
-        llm_2 = init_chat_model(model="anthropic:claude-haiku-4-5-20251001")
+        llm_2 = init_chat_model(model="anthropic:claude-3-5-haiku-20241022")
 
         with get_usage_metadata_callback() as cb:
             llm_1.invoke("Hello")
@@ -127,7 +127,7 @@ def get_usage_metadata_callback(
                 "input_token_details": {"audio": 0, "cache_read": 0},
                 "output_token_details": {"audio": 0, "reasoning": 0},
             },
-            "claude-haiku-4-5-20251001": {
+            "claude-3-5-haiku-20241022": {
                 "input_tokens": 8,
                 "output_tokens": 21,
                 "total_tokens": 29,

libs/core/langchain_core/cross_encoders.py

@@ -1,18 +0,0 @@
-"""Cross Encoder interface."""
-
-from abc import ABC, abstractmethod
-
-
-class BaseCrossEncoder(ABC):
-    """Interface for cross encoder models."""
-
-    @abstractmethod
-    def score(self, text_pairs: list[tuple[str, str]]) -> list[float]:
-        """Score pairs' similarity.
-
-        Args:
-            text_pairs: List of pairs of texts.
-
-        Returns:
-            List of scores.
-        """

libs/core/langchain_core/documents/base.py

@@ -234,7 +234,7 @@ class Blob(BaseMedia):
             `Blob` instance
         """
         if mime_type is None and guess_type:
-            mimetype = mimetypes.guess_type(path)[0]
+            mimetype = mimetypes.guess_type(path)[0] if guess_type else None
         else:
             mimetype = mime_type
         # We do not load the data immediately, instead we treat the blob as a

libs/core/langchain_core/exceptions.py

@@ -65,14 +65,6 @@ class OutputParserException(ValueError, LangChainException):  # noqa: N818
         self.send_to_llm = send_to_llm
 
 
-class ContextOverflowError(LangChainException):
-    """Exception raised when input exceeds the model's context limit.
-
-    This exception is raised by chat models when the input tokens exceed
-    the maximum context window supported by the model.
-    """
-
-
 class ErrorCode(Enum):
     """Error codes."""
 

libs/core/langchain_core/language_models/base.py

@@ -69,8 +69,6 @@ class LangSmithParams(TypedDict, total=False):
 
     ls_stop: list[str] | None
     """Stop words for generation."""
-    ls_integration: str
-    """Integration that created the trace."""
 
 
 @cache  # Cache the tokenizer
@@ -301,22 +299,6 @@ class BaseLanguageModel(
         # generate responses that match a given schema.
         raise NotImplementedError
 
-    def _get_ls_params(
-        self,
-        stop: list[str] | None = None,  # noqa: ARG002
-        **kwargs: Any,  # noqa: ARG002
-    ) -> LangSmithParams:
-        """Get standard params for tracing."""
-        return LangSmithParams()
-
-    def _get_ls_params_with_defaults(
-        self,
-        stop: list[str] | None = None,
-        **kwargs: Any,
-    ) -> LangSmithParams:
-        """Wrap _get_ls_params to include any additional default parameters."""
-        return self._get_ls_params(stop=stop, **kwargs)
-
     @property
     def _identifying_params(self) -> Mapping[str, Any]:
         """Get the identifying parameters."""

libs/core/langchain_core/language_models/chat_models.py

@@ -3,7 +3,6 @@
 from __future__ import annotations
 
 import asyncio
-import contextlib
 import inspect
 import json
 from abc import ABC, abstractmethod
@@ -12,8 +11,8 @@ from functools import cached_property
 from operator import itemgetter
 from typing import TYPE_CHECKING, Any, Literal, cast
 
-from pydantic import BaseModel, ConfigDict, Field, model_validator
-from typing_extensions import Self, override
+from pydantic import BaseModel, ConfigDict, Field
+from typing_extensions import override
 
 from langchain_core.caches import BaseCache
 from langchain_core.callbacks import (
@@ -33,10 +32,7 @@ from langchain_core.language_models.base import (
     LangSmithParams,
     LanguageModelInput,
 )
-from langchain_core.language_models.model_profile import (
-    ModelProfile,
-    _warn_unknown_profile_keys,
-)
+from langchain_core.language_models.model_profile import ModelProfile
 from langchain_core.load import dumpd, dumps
 from langchain_core.messages import (
     AIMessage,
@@ -218,7 +214,7 @@ async def agenerate_from_stream(
     """Async generate from a stream.
 
     Args:
-        stream: AsyncIterator of `ChatGenerationChunk`.
+        stream: Iterator of `ChatGenerationChunk`.
 
     Returns:
         Chat result.
@@ -314,7 +310,7 @@ class BaseChatModel(BaseLanguageModel[AIMessage], ABC):
     - If `False` (Default), will always use streaming case if available.
 
     The main reason for this flag is that code might be written using `stream` and
-    a user may want to swap out a given model for another model whose implementation
+    a user may want to swap out a given model for another model whose the implementation
     does not properly support streaming.
     """
 
@@ -361,54 +357,6 @@ class BaseChatModel(BaseLanguageModel[AIMessage], ABC):
         arbitrary_types_allowed=True,
     )
 
-    def _resolve_model_profile(self) -> ModelProfile | None:
-        """Return the default model profile, or `None` if unavailable.
-
-        Override this in subclasses instead of `_set_model_profile`. The base
-        validator calls it automatically and handles assignment. This avoids
-        coupling partner code to Pydantic validator mechanics.
-
-        Each partner needs its own override because things can vary per-partner,
-        such as the attribute that identifies the model (e.g., `model`,
-        `model_name`, `model_id`, `deployment_name`) and the partner-local
-        `_get_default_model_profile` function that reads from each partner's own
-        profile data.
-        """
-        # TODO: consider adding a `_model_identifier` property on BaseChatModel
-        # to standardize how partners identify their model, which could allow a
-        # default implementation here that calls a shared
-        # profile-loading mechanism.
-        return None
-
-    @model_validator(mode="after")
-    def _set_model_profile(self) -> Self:
-        """Populate `profile` from `_resolve_model_profile` if not provided.
-
-        Partners should override `_resolve_model_profile` rather than this
-        validator. Overriding this with a new `@model_validator` replaces the
-        base validator (Pydantic v2 behavior), bypassing the standard resolution
-        path. A plain method override does not prevent the base validator from
-        running.
-        """
-        if self.profile is None:
-            # Suppress errors from partner overrides (e.g., missing profile
-            # files, broken imports) so model construction never fails over an
-            # optional field.
-            with contextlib.suppress(Exception):
-                self.profile = self._resolve_model_profile()
-        return self
-
-    # NOTE: _check_profile_keys must be defined AFTER _set_model_profile.
-    # Pydantic v2 runs mode="after" validators in definition order.
-    @model_validator(mode="after")
-    def _check_profile_keys(self) -> Self:
-        """Warn on unrecognized profile keys."""
-        # isinstance guard: ModelProfile is a TypedDict (always a dict), but
-        # protects against unexpected types from partner overrides.
-        if self.profile and isinstance(self.profile, dict):
-            _warn_unknown_profile_keys(self.profile)
-        return self
-
     @cached_property
     def _serialized(self) -> dict[str, Any]:
         # self is always a Serializable object in this case, thus the result is
@@ -557,7 +505,7 @@ class BaseChatModel(BaseLanguageModel[AIMessage], ABC):
             options = {"stop": stop, **kwargs, **ls_structured_output_format_dict}
             inheritable_metadata = {
                 **(config.get("metadata") or {}),
-                **self._get_ls_params_with_defaults(stop=stop, **kwargs),
+                **self._get_ls_params(stop=stop, **kwargs),
             }
             callback_manager = CallbackManager.configure(
                 config.get("callbacks"),
@@ -685,7 +633,7 @@ class BaseChatModel(BaseLanguageModel[AIMessage], ABC):
         options = {"stop": stop, **kwargs, **ls_structured_output_format_dict}
         inheritable_metadata = {
             **(config.get("metadata") or {}),
-            **self._get_ls_params_with_defaults(stop=stop, **kwargs),
+            **self._get_ls_params(stop=stop, **kwargs),
         }
         callback_manager = AsyncCallbackManager.configure(
             config.get("callbacks"),
@@ -864,11 +812,9 @@ class BaseChatModel(BaseLanguageModel[AIMessage], ABC):
             ls_params["ls_model_name"] = self.model_name
 
         # temperature
-        if "temperature" in kwargs and isinstance(kwargs["temperature"], (int, float)):
+        if "temperature" in kwargs and isinstance(kwargs["temperature"], float):
             ls_params["ls_temperature"] = kwargs["temperature"]
-        elif hasattr(self, "temperature") and isinstance(
-            self.temperature, (int, float)
-        ):
+        elif hasattr(self, "temperature") and isinstance(self.temperature, float):
             ls_params["ls_temperature"] = self.temperature
 
         # max_tokens
@@ -879,16 +825,6 @@ class BaseChatModel(BaseLanguageModel[AIMessage], ABC):
 
         return ls_params
 
-    def _get_ls_params_with_defaults(
-        self,
-        stop: list[str] | None = None,
-        **kwargs: Any,
-    ) -> LangSmithParams:
-        """Wrap _get_ls_params to always include ls_integration."""
-        ls_params = self._get_ls_params(stop=stop, **kwargs)
-        ls_params["ls_integration"] = "langchain_chat_model"
-        return ls_params
-
     def _get_llm_string(self, stop: list[str] | None = None, **kwargs: Any) -> str:
         if self.is_lc_serializable():
             params = {**kwargs, "stop": stop}
@@ -961,7 +897,7 @@ class BaseChatModel(BaseLanguageModel[AIMessage], ABC):
         options = {"stop": stop, **ls_structured_output_format_dict}
         inheritable_metadata = {
             **(metadata or {}),
-            **self._get_ls_params_with_defaults(stop=stop, **kwargs),
+            **self._get_ls_params(stop=stop, **kwargs),
         }
 
         callback_manager = CallbackManager.configure(
@@ -1084,7 +1020,7 @@ class BaseChatModel(BaseLanguageModel[AIMessage], ABC):
         options = {"stop": stop, **ls_structured_output_format_dict}
         inheritable_metadata = {
             **(metadata or {}),
-            **self._get_ls_params_with_defaults(stop=stop, **kwargs),
+            **self._get_ls_params(stop=stop, **kwargs),
         }
 
         callback_manager = AsyncCallbackManager.configure(

libs/core/langchain_core/language_models/llms.py

@@ -311,7 +311,7 @@ class BaseLLM(BaseLanguageModel[str], ABC):
     @property
     @override
     def OutputType(self) -> type[str]:
-        """Get the output type for this `Runnable`."""
+        """Get the input type for this `Runnable`."""
         return str
 
     def _convert_input(self, model_input: LanguageModelInput) -> PromptValue:
@@ -351,11 +351,9 @@ class BaseLLM(BaseLanguageModel[str], ABC):
             ls_params["ls_model_name"] = self.model_name
 
         # temperature
-        if "temperature" in kwargs and isinstance(kwargs["temperature"], (int, float)):
+        if "temperature" in kwargs and isinstance(kwargs["temperature"], float):
             ls_params["ls_temperature"] = kwargs["temperature"]
-        elif hasattr(self, "temperature") and isinstance(
-            self.temperature, (int, float)
-        ):
+        elif hasattr(self, "temperature") and isinstance(self.temperature, float):
             ls_params["ls_temperature"] = self.temperature
 
         # max_tokens
@@ -527,7 +525,7 @@ class BaseLLM(BaseLanguageModel[str], ABC):
             options = {"stop": stop}
             inheritable_metadata = {
                 **(config.get("metadata") or {}),
-                **self._get_ls_params_with_defaults(stop=stop, **kwargs),
+                **self._get_ls_params(stop=stop, **kwargs),
             }
             callback_manager = CallbackManager.configure(
                 config.get("callbacks"),
@@ -597,7 +595,7 @@ class BaseLLM(BaseLanguageModel[str], ABC):
         options = {"stop": stop}
         inheritable_metadata = {
             **(config.get("metadata") or {}),
-            **self._get_ls_params_with_defaults(stop=stop, **kwargs),
+            **self._get_ls_params(stop=stop, **kwargs),
         }
         callback_manager = AsyncCallbackManager.configure(
             config.get("callbacks"),
@@ -906,14 +904,14 @@ class BaseLLM(BaseLanguageModel[str], ABC):
             metadata = [
                 {
                     **(meta or {}),
-                    **self._get_ls_params_with_defaults(stop=stop, **kwargs),
+                    **self._get_ls_params(stop=stop, **kwargs),
                 }
                 for meta in metadata
             ]
         elif isinstance(metadata, dict):
             metadata = {
                 **(metadata or {}),
-                **self._get_ls_params_with_defaults(stop=stop, **kwargs),
+                **self._get_ls_params(stop=stop, **kwargs),
             }
         if (
             isinstance(callbacks, list)
@@ -1173,14 +1171,14 @@ class BaseLLM(BaseLanguageModel[str], ABC):
             metadata = [
                 {
                     **(meta or {}),
-                    **self._get_ls_params_with_defaults(stop=stop, **kwargs),
+                    **self._get_ls_params(stop=stop, **kwargs),
                 }
                 for meta in metadata
             ]
         elif isinstance(metadata, dict):
             metadata = {
                 **(metadata or {}),
-                **self._get_ls_params_with_defaults(stop=stop, **kwargs),
+                **self._get_ls_params(stop=stop, **kwargs),
             }
         # Create callback managers
         if isinstance(callbacks, list) and (

libs/core/langchain_core/language_models/model_profile.py

@@ -1,14 +1,7 @@
 """Model profile types and utilities."""
 
-import logging
-import warnings
-from typing import get_type_hints
-
-from pydantic import ConfigDict
 from typing_extensions import TypedDict
 
-logger = logging.getLogger(__name__)
-
 
 class ModelProfile(TypedDict, total=False):
     """Model profile.
@@ -21,33 +14,11 @@ class ModelProfile(TypedDict, total=False):
     and supported features.
     """
 
-    __pydantic_config__ = ConfigDict(extra="allow")  # type: ignore[misc]
-
-    # --- Model metadata ---
-
-    name: str
-    """Human-readable model name."""
-
-    status: str
-    """Model status (e.g., `'active'`, `'deprecated'`)."""
-
-    release_date: str
-    """Model release date (ISO 8601 format, e.g., `'2025-06-01'`)."""
-
-    last_updated: str
-    """Date the model was last updated (ISO 8601 format)."""
-
-    open_weights: bool
-    """Whether the model weights are openly available."""
-
     # --- Input constraints ---
 
     max_input_tokens: int
     """Maximum context window (tokens)"""
 
-    text_inputs: bool
-    """Whether text inputs are supported."""
-
     image_inputs: bool
     """Whether image inputs are supported."""
     # TODO: add more detail about formats?
@@ -85,9 +56,6 @@ class ModelProfile(TypedDict, total=False):
     reasoning_output: bool
     """Whether the model supports [reasoning / chain-of-thought](https://docs.langchain.com/oss/python/langchain/models#reasoning)"""
 
-    text_outputs: bool
-    """Whether text outputs are supported."""
-
     image_outputs: bool
     """Whether [image outputs](https://docs.langchain.com/oss/python/langchain/models#multimodal)
     are supported."""
@@ -112,45 +80,6 @@ class ModelProfile(TypedDict, total=False):
     """Whether the model supports a native [structured output](https://docs.langchain.com/oss/python/langchain/models#structured-outputs)
     feature"""
 
-    # --- Other capabilities ---
-
-    attachment: bool
-    """Whether the model supports file attachments."""
-
-    temperature: bool
-    """Whether the model supports a temperature parameter."""
-
 
 ModelProfileRegistry = dict[str, ModelProfile]
 """Registry mapping model identifiers or names to their ModelProfile."""
-
-
-def _warn_unknown_profile_keys(profile: ModelProfile) -> None:
-    """Warn if `profile` contains keys not declared on `ModelProfile`.
-
-    Args:
-        profile: The model profile dict to check for undeclared keys.
-    """
-    if not isinstance(profile, dict):
-        return
-
-    try:
-        declared = frozenset(get_type_hints(ModelProfile).keys())
-    except (TypeError, NameError):
-        # get_type_hints raises NameError on unresolvable forward refs and
-        # TypeError when annotations evaluate to non-type objects.
-        logger.debug(
-            "Could not resolve type hints for ModelProfile; "
-            "skipping unknown-key check.",
-            exc_info=True,
-        )
-        return
-
-    extra = sorted(set(profile) - declared)
-    if extra:
-        warnings.warn(
-            f"Unrecognized keys in model profile: {extra}. "
-            f"This may indicate a version mismatch between langchain-core "
-            f"and your provider package. Consider upgrading langchain-core.",
-            stacklevel=2,
-        )

libs/core/langchain_core/load/load.py

@@ -13,20 +13,6 @@ allowlist. If the class is not in the allowlist, deserialization raises a `Value
 
 ## Security model
 
-!!! warning "Exercise caution with untrusted input"
-
-    These functions deserialize by instantiating Python objects, which means
-    constructors (`__init__`) and validators may run and can trigger side effects.
-    With the default settings, deserialization is restricted to a core allowlist
-    of `langchain_core` types (for example: messages, documents, and prompts)
-    defined in `langchain_core.load.mapping`.
-
-    If you broaden `allowed_objects` (for example, by using `'all'` or adding
-    additional classes), treat the serialized payload as a manifest and only
-    deserialize data that comes from a trusted source. A crafted payload that
-    is allowed to instantiate unintended classes could cause network calls,
-    file operations, or environment variable access during `__init__`.
-
 The `allowed_objects` parameter controls which classes can be deserialized:
 
 - **`'core'` (default)**: Allow classes defined in the serialization mappings for
@@ -49,16 +35,6 @@ These classes do not perform side effects during initialization.
 Import paths are also validated against trusted namespaces before any module is
 imported.
 
-### Best practices
-
-- Use the most restrictive `allowed_objects` possible. Prefer an explicit list
-    of classes over `'core'` or `'all'`.
-- Keep `secrets_from_env` set to `False` (the default). If you must use it,
-    ensure the serialized data comes from a fully trusted source, as a crafted
-    payload can read arbitrary environment variables.
-- When using `secrets_map`, include only the specific secrets that the
-    serialized object requires.
-
 ### Injection protection (escape-based)
 
 During serialization, plain dicts that contain an `'lc'` key are escaped by wrapping
@@ -109,7 +85,6 @@ from langchain_core.load.mapping import (
     SERIALIZABLE_MAPPING,
 )
 from langchain_core.load.serializable import Serializable
-from langchain_core.load.validators import CLASS_INIT_VALIDATORS
 
 DEFAULT_NAMESPACES = [
     "langchain",
@@ -324,18 +299,11 @@ class Reviver:
                     `langchain_core.load.mapping` for the full list.
                 - Explicit list of classes: Only those specific classes are allowed.
             secrets_map: A map of secrets to load.
-
-                Only include the specific secrets the serialized object
-                requires. If a secret is not found in the map, it will be loaded
-                from the environment if `secrets_from_env` is `True`.
+                If a secret is not found in the map, it will be loaded from the
+                environment if `secrets_from_env` is `True`.
             valid_namespaces: Additional namespaces (modules) to allow during
                 deserialization, beyond the default trusted namespaces.
             secrets_from_env: Whether to load secrets from the environment.
-
-                A crafted payload can name arbitrary environment variables in
-                its `secret` fields, so enabling this on untrusted data can leak
-                sensitive values. Keep this `False` (the default) unless the
-                serialized data is fully trusted.
             additional_import_mappings: A dictionary of additional namespace mappings.
 
                 You can use this to override default mappings or add new mappings.
@@ -481,19 +449,6 @@ class Reviver:
                 msg = f"Invalid namespace: {value}"
                 raise ValueError(msg)
 
-            # We don't need to recurse on kwargs
-            # as json.loads will do that for us.
-            kwargs = value.get("kwargs", {})
-
-            # Run class-specific validators before the general init_validator.
-            # These run before importing to fail fast on security violations.
-            if mapping_key in CLASS_INIT_VALIDATORS:
-                CLASS_INIT_VALIDATORS[mapping_key](mapping_key, kwargs)
-
-            # Also run general init_validator (e.g., jinja2 blocking)
-            if self.init_validator is not None:
-                self.init_validator(mapping_key, kwargs)
-
             mod = importlib.import_module(".".join(import_dir))
 
             cls = getattr(mod, name)
@@ -503,6 +458,13 @@ class Reviver:
                 msg = f"Invalid namespace: {value}"
                 raise ValueError(msg)
 
+            # We don't need to recurse on kwargs
+            # as json.loads will do that for us.
+            kwargs = value.get("kwargs", {})
+
+            if self.init_validator is not None:
+                self.init_validator(mapping_key, kwargs)
+
             return cls(**kwargs)
 
         return value
@@ -528,12 +490,10 @@ def loads(
     core LangChain types (messages, prompts, documents, etc.). See
     `langchain_core.load.mapping` for the full list.
 
-    !!! warning "Do not use with untrusted input"
+    !!! warning "Beta feature"
 
-        This function instantiates Python objects and can trigger side effects
-        during deserialization. **Never call `loads()` on data from an untrusted
-        or unauthenticated source.** See the module-level security model
-        documentation for details and best practices.
+        This is a beta feature. Please be wary of deploying experimental code to
+        production unless you've taken appropriate precautions.
 
     Args:
         text: The string to load.
@@ -551,17 +511,11 @@ def loads(
             - `[]`: Disallow all deserialization (will raise on any object).
         secrets_map: A map of secrets to load.
 
-            Only include the specific secrets the serialized object requires. If
-            a secret is not found in the map, it will be loaded from the
-            environment if `secrets_from_env` is `True`.
+            If a secret is not found in the map, it will be loaded from the environment
+            if `secrets_from_env` is `True`.
         valid_namespaces: Additional namespaces (modules) to allow during
             deserialization, beyond the default trusted namespaces.
         secrets_from_env: Whether to load secrets from the environment.
-
-            A crafted payload can name arbitrary environment variables in its
-            `secret` fields, so enabling this on untrusted data can leak
-            sensitive values. Keep this `False` (the default) unless the
-            serialized data is fully trusted.
         additional_import_mappings: A dictionary of additional namespace mappings.
 
             You can use this to override default mappings or add new mappings.
@@ -619,12 +573,10 @@ def load(
     core LangChain types (messages, prompts, documents, etc.). See
     `langchain_core.load.mapping` for the full list.
 
-    !!! warning "Do not use with untrusted input"
+    !!! warning "Beta feature"
 
-        This function instantiates Python objects and can trigger side effects
-        during deserialization. **Never call `load()` on data from an untrusted
-        or unauthenticated source.** See the module-level security model
-        documentation for details and best practices.
+        This is a beta feature. Please be wary of deploying experimental code to
+        production unless you've taken appropriate precautions.
 
     Args:
         obj: The object to load.
@@ -642,18 +594,11 @@ def load(
             - `[]`: Disallow all deserialization (will raise on any object).
         secrets_map: A map of secrets to load.
 
-            Only include the specific secrets the serialized object requires.
-
             If a secret is not found in the map, it will be loaded from the environment
             if `secrets_from_env` is `True`.
         valid_namespaces: Additional namespaces (modules) to allow during
             deserialization, beyond the default trusted namespaces.
         secrets_from_env: Whether to load secrets from the environment.
-
-            A crafted payload can name arbitrary environment variables in its
-            `secret` fields, so enabling this on untrusted data can leak
-            sensitive values. Keep this `False` (the default) unless the
-            serialized data is fully trusted.
         additional_import_mappings: A dictionary of additional namespace mappings.
 
             You can use this to override default mappings or add new mappings.

libs/core/langchain_core/load/mapping.py

@@ -273,21 +273,11 @@ SERIALIZABLE_MAPPING: dict[tuple[str, ...], tuple[str, ...]] = {
         "chat_models",
         "ChatGroq",
     ),
-    ("langchain_openrouter", "chat_models", "ChatOpenRouter"): (
-        "langchain_openrouter",
-        "chat_models",
-        "ChatOpenRouter",
-    ),
     ("langchain_xai", "chat_models", "ChatXAI"): (
         "langchain_xai",
         "chat_models",
         "ChatXAI",
     ),
-    ("langchain_baseten", "chat_models", "ChatBaseten"): (
-        "langchain_baseten",
-        "chat_models",
-        "ChatBaseten",
-    ),
     ("langchain", "chat_models", "fireworks", "ChatFireworks"): (
         "langchain_fireworks",
         "chat_models",
@@ -309,24 +299,12 @@ SERIALIZABLE_MAPPING: dict[tuple[str, ...], tuple[str, ...]] = {
         "chat_models",
         "ChatMistralAI",
     ),
-    ("langchain", "chat_models", "anthropic_bedrock", "ChatAnthropicBedrock"): (
-        "langchain_aws",
-        "chat_models",
-        "anthropic",
-        "ChatAnthropicBedrock",
-    ),
     ("langchain", "chat_models", "bedrock", "ChatBedrock"): (
         "langchain_aws",
         "chat_models",
         "bedrock",
         "ChatBedrock",
     ),
-    ("langchain_aws", "chat_models", "ChatBedrockConverse"): (
-        "langchain_aws",
-        "chat_models",
-        "bedrock_converse",
-        "ChatBedrockConverse",
-    ),
     ("langchain_google_genai", "chat_models", "ChatGoogleGenerativeAI"): (
         "langchain_google_genai",
         "chat_models",
@@ -386,12 +364,6 @@ SERIALIZABLE_MAPPING: dict[tuple[str, ...], tuple[str, ...]] = {
         "bedrock",
         "BedrockLLM",
     ),
-    ("langchain", "llms", "bedrock", "BedrockLLM"): (
-        "langchain_aws",
-        "llms",
-        "bedrock",
-        "BedrockLLM",
-    ),
     ("langchain", "llms", "fireworks", "Fireworks"): (
         "langchain_fireworks",
         "llms",

libs/core/langchain_core/load/serializable.py

@@ -134,22 +134,9 @@ class Serializable(BaseModel, ABC):
     def get_lc_namespace(cls) -> list[str]:
         """Get the namespace of the LangChain object.
 
-        The default implementation splits `cls.__module__` on `'.'`, e.g.
-        `langchain_openai.chat_models` becomes
-        `["langchain_openai", "chat_models"]`. This value is used by `lc_id` to
-        build the serialization identifier.
-
-        New partner packages should **not** override this method. The default
-        behavior is correct for any class whose module path already reflects
-        its package name. Some older packages (e.g. `langchain-openai`,
-        `langchain-anthropic`) override it to return a legacy-style namespace
-        like `["langchain", "chat_models", "openai"]`, matching the module
-        paths that existed before those integrations were split out of the
-        main `langchain` package. Those overrides are kept for
-        backwards-compatible deserialization; new packages should not copy them.
-
-        Deserialization mapping is handled separately by
-        `SERIALIZABLE_MAPPING` in `langchain_core.load.mapping`.
+        For example, if the class is
+        [`langchain.llms.openai.OpenAI`][langchain_openai.OpenAI], then the namespace is
+        `["langchain", "llms", "openai"]`
 
         Returns:
             The namespace.

libs/core/langchain_core/load/validators.py

@@ -1,77 +0,0 @@
-"""Init validators for deserialization security.
-
-This module contains extra validators that are called during deserialization,
-ex. to prevent security issues such as SSRF attacks.
-
-Each validator is a callable matching the `InitValidator` protocol: it takes a
-class path tuple and kwargs dict, returns `None` on success, and raises
-`ValueError` if the deserialization should be blocked.
-"""
-
-from typing import TYPE_CHECKING, Any
-
-if TYPE_CHECKING:
-    from langchain_core.load.load import InitValidator
-
-
-def _bedrock_validator(class_path: tuple[str, ...], kwargs: dict[str, Any]) -> None:
-    """Constructor kwargs validator for AWS Bedrock integrations.
-
-    Blocks deserialization if `endpoint_url` or `base_url` parameters are
-    present, which could enable SSRF attacks.
-
-    Args:
-        class_path: The class path tuple being deserialized.
-        kwargs: The kwargs dict for the class constructor.
-
-    Raises:
-        ValueError: If `endpoint_url` or `base_url` parameters are present.
-    """
-    dangerous_params = ["endpoint_url", "base_url"]
-    found_params = [p for p in dangerous_params if p in kwargs]
-
-    if found_params:
-        class_name = class_path[-1] if class_path else "Unknown"
-        param_str = ", ".join(found_params)
-        msg = (
-            f"Deserialization of {class_name} with {param_str} is not allowed "
-            f"for security reasons. These parameters can enable Server-Side Request "
-            f"Forgery (SSRF) attacks by directing network requests to arbitrary "
-            f"endpoints during initialization. If you need to use a custom endpoint, "
-            f"instantiate {class_name} directly rather than deserializing it."
-        )
-        raise ValueError(msg)
-
-
-# Keys must cover both serialized IDs (SERIALIZABLE_MAPPING keys) and resolved
-# import paths (SERIALIZABLE_MAPPING values) to prevent bypass via direct paths.
-CLASS_INIT_VALIDATORS: dict[tuple[str, ...], "InitValidator"] = {
-    # Serialized (legacy) keys
-    ("langchain", "chat_models", "bedrock", "BedrockChat"): _bedrock_validator,
-    ("langchain", "chat_models", "bedrock", "ChatBedrock"): _bedrock_validator,
-    (
-        "langchain",
-        "chat_models",
-        "anthropic_bedrock",
-        "ChatAnthropicBedrock",
-    ): _bedrock_validator,
-    ("langchain_aws", "chat_models", "ChatBedrockConverse"): _bedrock_validator,
-    ("langchain", "llms", "bedrock", "Bedrock"): _bedrock_validator,
-    ("langchain", "llms", "bedrock", "BedrockLLM"): _bedrock_validator,
-    # Resolved import paths (from ALL_SERIALIZABLE_MAPPINGS values) to defend
-    # against payloads that use the target tuple directly as the "id".
-    (
-        "langchain_aws",
-        "chat_models",
-        "bedrock_converse",
-        "ChatBedrockConverse",
-    ): _bedrock_validator,
-    (
-        "langchain_aws",
-        "chat_models",
-        "anthropic",
-        "ChatAnthropicBedrock",
-    ): _bedrock_validator,
-    ("langchain_aws", "chat_models", "ChatBedrock"): _bedrock_validator,
-    ("langchain_aws", "llms", "bedrock", "BedrockLLM"): _bedrock_validator,
-}

libs/core/langchain_core/messages/block_translators/openai.py

@@ -103,13 +103,11 @@ def convert_to_openai_data_block(
                 # Backward compat
                 file["filename"] = extras["filename"]
             else:
-                # Can't infer filename; set a placeholder default for compatibility.
-                file["filename"] = "LC_AUTOGENERATED"
+                # Can't infer filename
                 warnings.warn(
                     "OpenAI may require a filename for file uploads. Specify a filename"
                     " in the content block, e.g.: {'type': 'file', 'mime_type': "
-                    "'...', 'base64': '...', 'filename': 'my-file.pdf'}. "
-                    "Using placeholder filename 'LC_AUTOGENERATED'.",
+                    "'...', 'base64': '...', 'filename': 'my-file.pdf'}",
                     stacklevel=1,
                 )
             formatted_block = {"type": "file", "file": file}
@@ -335,9 +333,10 @@ def _convert_from_v03_ai_message(message: AIMessage) -> AIMessage:
 
     # Reasoning
     if reasoning := message.additional_kwargs.get("reasoning"):
-        if "type" not in reasoning:
-            reasoning = {**reasoning, "type": "reasoning"}
-        buckets["reasoning"].append(reasoning)
+        if isinstance(message, AIMessageChunk) and message.chunk_position != "last":
+            buckets["reasoning"].append({**reasoning, "type": "reasoning"})
+        else:
+            buckets["reasoning"].append(reasoning)
 
     # Refusal
     if refusal := message.additional_kwargs.get("refusal"):
@@ -369,9 +368,9 @@ def _convert_from_v03_ai_message(message: AIMessage) -> AIMessage:
             "call_id": tool_call_chunk.get("id"),
         }
         if function_call_ids is not None and (
-            id_ := function_call_ids.get(tool_call_chunk.get("id"))
+            _id := function_call_ids.get(tool_call_chunk.get("id"))
         ):
-            function_call["id"] = id_
+            function_call["id"] = _id
         buckets["function_call"].append(function_call)
     else:
         for tool_call in message.tool_calls:
@@ -382,9 +381,9 @@ def _convert_from_v03_ai_message(message: AIMessage) -> AIMessage:
                 "call_id": tool_call["id"],
             }
             if function_call_ids is not None and (
-                id_ := function_call_ids.get(tool_call["id"])
+                _id := function_call_ids.get(tool_call["id"])
             ):
-                function_call["id"] = id_
+                function_call["id"] = _id
             buckets["function_call"].append(function_call)
 
     # Tool outputs
@@ -732,11 +731,6 @@ def _convert_to_v1_from_responses(message: AIMessage) -> list[types.ContentBlock
                         tool_call_block["extras"]["item_id"] = block["id"]
                     if "index" in block:
                         tool_call_block["index"] = f"lc_tc_{block['index']}"
-                    for extra_key in ("status", "namespace"):
-                        if extra_key in block:
-                            if "extras" not in tool_call_block:
-                                tool_call_block["extras"] = {}
-                            tool_call_block["extras"][extra_key] = block[extra_key]
                     yield tool_call_block
 
             elif block_type == "web_search_call":
@@ -985,51 +979,6 @@ def _convert_to_v1_from_responses(message: AIMessage) -> list[types.ContentBlock
                     mcp_list_tools_result["index"] = f"lc_mltr_{block['index'] + 1}"
                 yield cast("types.ServerToolResult", mcp_list_tools_result)
 
-            elif (
-                block_type == "tool_search_call" and block.get("execution") == "server"
-            ):
-                tool_search_call: dict[str, Any] = {
-                    "type": "server_tool_call",
-                    "name": "tool_search",
-                    "id": block["id"],
-                    "args": block.get("arguments", {}),
-                }
-                if "index" in block:
-                    tool_search_call["index"] = f"lc_tsc_{block['index']}"
-                extras: dict[str, Any] = {}
-                known = {"type", "id", "arguments", "index"}
-                for key in block:
-                    if key not in known:
-                        extras[key] = block[key]
-                if extras:
-                    tool_search_call["extras"] = extras
-                yield cast("types.ServerToolCall", tool_search_call)
-
-            elif (
-                block_type == "tool_search_output"
-                and block.get("execution") == "server"
-            ):
-                tool_search_output: dict[str, Any] = {
-                    "type": "server_tool_result",
-                    "tool_call_id": block["id"],
-                    "output": {"tools": block.get("tools", [])},
-                }
-                status = block.get("status")
-                if status == "failed":
-                    tool_search_output["status"] = "error"
-                elif status == "completed":
-                    tool_search_output["status"] = "success"
-                if "index" in block and isinstance(block["index"], int):
-                    tool_search_output["index"] = f"lc_tso_{block['index']}"
-                extras_out: dict[str, Any] = {"name": "tool_search"}
-                known_out = {"type", "id", "status", "tools", "index"}
-                for key in block:
-                    if key not in known_out:
-                        extras_out[key] = block[key]
-                if extras_out:
-                    tool_search_output["extras"] = extras_out
-                yield cast("types.ServerToolResult", tool_search_output)
-
             elif block_type in types.KNOWN_BLOCK_TYPES:
                 yield cast("types.ContentBlock", block)
             else:

libs/core/langchain_core/messages/utils.py

@@ -47,13 +47,11 @@ from langchain_core.messages.human import HumanMessage, HumanMessageChunk
 from langchain_core.messages.modifier import RemoveMessage
 from langchain_core.messages.system import SystemMessage, SystemMessageChunk
 from langchain_core.messages.tool import ToolCall, ToolMessage, ToolMessageChunk
-from langchain_core.utils.function_calling import convert_to_openai_tool
 
 if TYPE_CHECKING:
     from langchain_core.language_models import BaseLanguageModel
     from langchain_core.prompt_values import PromptValue
     from langchain_core.runnables.base import Runnable
-    from langchain_core.tools import BaseTool
 
 try:
     from langchain_text_splitters import TextSplitter
@@ -402,7 +400,7 @@ def get_buffer_string(
         # -> '</message>'
         ```
     """
-    if format not in {"prefix", "xml"}:
+    if format not in ("prefix", "xml"):
         msg = (
             f"Unrecognized format={format!r}. Supported formats are 'prefix' and 'xml'."
         )
@@ -874,9 +872,9 @@ def filter_messages(
 
         filter_messages(
             messages,
-            include_names=("example_user", "example_assistant"),
-            include_types=("system",),
-            exclude_ids=("bar",),
+            incl_names=("example_user", "example_assistant"),
+            incl_types=("system",),
+            excl_ids=("bar",),
         )
         ```
 
@@ -1551,7 +1549,7 @@ def convert_to_openai_messages(
             {
                 "role": "user",
                 "content": [
-                    {"type": "text", "text": "what's in this"},
+                    {"type": "text", "text": "whats in this"},
                     {
                         "type": "image_url",
                         "image_url": {"url": "data:image/png;base64,'/9j/4AAQSk'"},
@@ -1570,15 +1568,15 @@ def convert_to_openai_messages(
                 ],
             ),
             ToolMessage("foobar", tool_call_id="1", name="bar"),
-            {"role": "assistant", "content": "that's nice"},
+            {"role": "assistant", "content": "thats nice"},
         ]
         oai_messages = convert_to_openai_messages(messages)
         # -> [
         #   {'role': 'system', 'content': 'foo'},
-        #   {'role': 'user', 'content': [{'type': 'text', 'text': 'what's in this'}, {'type': 'image_url', 'image_url': {'url': "data:image/png;base64,'/9j/4AAQSk'"}}]},
+        #   {'role': 'user', 'content': [{'type': 'text', 'text': 'whats in this'}, {'type': 'image_url', 'image_url': {'url': "data:image/png;base64,'/9j/4AAQSk'"}}]},
         #   {'role': 'assistant', 'tool_calls': [{'type': 'function', 'id': '1','function': {'name': 'analyze', 'arguments': '{"baz": "buz"}'}}], 'content': ''},
         #   {'role': 'tool', 'name': 'bar', 'content': 'foobar'},
-        #   {'role': 'assistant', 'content': 'that's nice'}
+        #   {'role': 'assistant', 'content': 'thats nice'}
         # ]
         ```
 
@@ -2191,7 +2189,6 @@ def count_tokens_approximately(
     count_name: bool = True,
     tokens_per_image: int = 85,
     use_usage_metadata_scaling: bool = False,
-    tools: list[BaseTool | dict[str, Any]] | None = None,
 ) -> int:
     """Approximate the total number of tokens in messages.
 
@@ -2201,7 +2198,6 @@ def count_tokens_approximately(
     - For tool messages, the token count also includes the tool call ID.
     - For multimodal messages with images, applies a fixed token penalty per image
       instead of counting base64-encoded characters.
-    - If tools are provided, the token count also includes stringified tool schemas.
 
     Args:
         messages: List of messages to count tokens for.
@@ -2221,12 +2217,9 @@ def count_tokens_approximately(
             using the **most recent** AI message that has
             `usage_metadata['total_tokens']`. The scaling factor is:
             `AI_total_tokens / approx_tokens_up_to_that_AI_message`
-        tools: List of tools to include in the token count. Each tool can be either
-            a `BaseTool` instance or a dict representing a tool schema. `BaseTool`
-            instances are converted to OpenAI tool format before counting.
 
     Returns:
-        Approximate number of tokens in the messages (and tools, if provided).
+        Approximate number of tokens in the messages.
 
     Note:
         This is a simple approximation that may not match the exact token count used by
@@ -2247,14 +2240,6 @@ def count_tokens_approximately(
     last_ai_total_tokens: int | None = None
     approx_at_last_ai: float | None = None
 
-    # Count tokens for tools if provided
-    if tools:
-        tools_chars = 0
-        for tool in tools:
-            tool_dict = tool if isinstance(tool, dict) else convert_to_openai_tool(tool)
-            tools_chars += len(json.dumps(tool_dict))
-        token_count += math.ceil(tools_chars / chars_per_token)
-
     for message in converted_messages:
         message_chars = 0
 
@@ -2270,7 +2255,7 @@ def count_tokens_approximately(
                     block_type = block.get("type", "")
 
                     # Apply fixed penalty for image blocks
-                    if block_type in {"image", "image_url"}:
+                    if block_type in ("image", "image_url"):
                         token_count += tokens_per_image
                     # Count text blocks normally
                     elif block_type == "text":
@@ -2328,7 +2313,6 @@ def count_tokens_approximately(
 
     if (
         use_usage_metadata_scaling
-        and len(converted_messages) > 1
         and not invalid_model_provider
         and ai_model_provider is not None
         and last_ai_total_tokens is not None

libs/core/langchain_core/outputs/chat_generation.py

@@ -54,33 +54,22 @@ class ChatGeneration(Generation):
         Raises:
             ValueError: If the message is not a string or a list.
         """
-        # Check for legacy blocks with "text" key but no "type" field.
-        # Otherwise, delegate to `message.text`.
-        if isinstance(self.message.content, list):
-            has_legacy_blocks = any(
-                isinstance(block, dict)
-                and "text" in block
-                and block.get("type") is None
-                for block in self.message.content
-            )
-
-            if has_legacy_blocks:
-                blocks = []
-                for block in self.message.content:
-                    if isinstance(block, str):
-                        blocks.append(block)
-                    elif isinstance(block, dict):
-                        block_type = block.get("type")
-                        if block_type == "text" or (
-                            block_type is None and "text" in block
-                        ):
-                            blocks.append(block.get("text", ""))
-                self.text = "".join(blocks)
-            else:
-                self.text = self.message.text
-        else:
-            self.text = self.message.text
-
+        text = ""
+        if isinstance(self.message.content, str):
+            text = self.message.content
+        # Extracts first text block from content blocks.
+        # Skips blocks with explicit non-text type (e.g., thinking, reasoning).
+        elif isinstance(self.message.content, list):
+            for block in self.message.content:
+                if isinstance(block, str):
+                    text = block
+                    break
+                if isinstance(block, dict) and "text" in block:
+                    block_type = block.get("type")
+                    if block_type is None or block_type == "text":
+                        text = block["text"]
+                        break
+        self.text = text
         return self
 
 

libs/core/langchain_core/outputs/chat_result.py

@@ -26,11 +26,10 @@ class ChatResult(BaseModel):
     """
 
     llm_output: dict | None = None
-    """For arbitrary model provider-specific output.
+    """For arbitrary LLM provider specific output.
 
     This dictionary is a free-form dictionary that can contain any information that the
-    provider wants to return. It is not standardized and keys may vary by provider and
-    over time.
+    provider wants to return. It is not standardized and is provider-specific.
 
     Users should generally avoid relying on this field and instead rely on accessing
     relevant information from standardized fields present in `AIMessage`.

libs/core/langchain_core/outputs/llm_result.py

@@ -38,11 +38,10 @@ class LLMResult(BaseModel):
     """
 
     llm_output: dict | None = None
-    """For arbitrary model provider-specific output.
+    """For arbitrary LLM provider specific output.
 
     This dictionary is a free-form dictionary that can contain any information that the
-    provider wants to return. It is not standardized and keys may vary by provider and
-    over time.
+    provider wants to return. It is not standardized and is provider-specific.
 
     Users should generally avoid relying on this field and instead rely on accessing
     relevant information from standardized fields present in AIMessage.

libs/core/langchain_core/prompts/base.py

@@ -15,7 +15,6 @@ import yaml
 from pydantic import BaseModel, ConfigDict, Field, model_validator
 from typing_extensions import Self, override
 
-from langchain_core._api import deprecated
 from langchain_core.exceptions import ErrorCode, create_message
 from langchain_core.load import dumpd
 from langchain_core.output_parsers.base import BaseOutputParser  # noqa: TC001
@@ -351,12 +350,6 @@ class BasePromptTemplate(
             prompt_dict["_type"] = self._prompt_type
         return prompt_dict
 
-    @deprecated(
-        since="1.2.21",
-        removal="2.0.0",
-        alternative="Use `dumpd`/`dumps` from `langchain_core.load` to serialize "
-        "prompts and `load`/`loads` to deserialize them.",
-    )
     def save(self, file_path: Path | str) -> None:
         """Save the prompt.
 
@@ -389,12 +382,11 @@ class BasePromptTemplate(
         directory_path = save_path.parent
         directory_path.mkdir(parents=True, exist_ok=True)
 
-        resolved_path = save_path.resolve()
-        if resolved_path.suffix == ".json":
-            with resolved_path.open("w", encoding="utf-8") as f:
+        if save_path.suffix == ".json":
+            with save_path.open("w", encoding="utf-8") as f:
                 json.dump(prompt_dict, f, indent=4)
-        elif resolved_path.suffix.endswith((".yaml", ".yml")):
-            with resolved_path.open("w", encoding="utf-8") as f:
+        elif save_path.suffix.endswith((".yaml", ".yml")):
+            with save_path.open("w", encoding="utf-8") as f:
                 yaml.dump(prompt_dict, f, default_flow_style=False)
         else:
             msg = f"{save_path} must be json or yaml"

libs/core/langchain_core/prompts/chat.py

@@ -22,7 +22,6 @@ from pydantic import (
 )
 from typing_extensions import Self, override
 
-from langchain_core._api import deprecated
 from langchain_core.messages import (
     AIMessage,
     AnyMessage,
@@ -978,14 +977,14 @@ class ChatPromptTemplate(BaseChatPromptTemplate):
         input_vars: set[str] = set()
         optional_variables: set[str] = set()
         partial_vars: dict[str, Any] = {}
-        for message in messages_:
-            if isinstance(message, MessagesPlaceholder) and message.optional:
-                partial_vars[message.variable_name] = []
-                optional_variables.add(message.variable_name)
+        for _message in messages_:
+            if isinstance(_message, MessagesPlaceholder) and _message.optional:
+                partial_vars[_message.variable_name] = []
+                optional_variables.add(_message.variable_name)
             elif isinstance(
-                message, (BaseChatPromptTemplate, BaseMessagePromptTemplate)
+                _message, (BaseChatPromptTemplate, BaseMessagePromptTemplate)
             ):
-                input_vars.update(message.input_variables)
+                input_vars.update(_message.input_variables)
 
         kwargs = {
             "input_variables": sorted(input_vars),
@@ -1306,12 +1305,6 @@ class ChatPromptTemplate(BaseChatPromptTemplate):
         """Name of prompt type. Used for serialization."""
         return "chat"
 
-    @deprecated(
-        since="1.2.21",
-        removal="2.0.0",
-        alternative="Use `dumpd`/`dumps` from `langchain_core.load` to serialize "
-        "prompts and `load`/`loads` to deserialize them.",
-    )
     def save(self, file_path: Path | str) -> None:
         """Save prompt to file.
 

libs/core/langchain_core/prompts/dict.py

@@ -4,7 +4,6 @@ import warnings
 from functools import cached_property
 from typing import Any, Literal, cast
 
-from pydantic import model_validator
 from typing_extensions import override
 
 from langchain_core.load import dumpd
@@ -22,35 +21,11 @@ class DictPromptTemplate(RunnableSerializable[dict, dict]):
     Recognizes variables in f-string or mustache formatted string dict values.
 
     Does NOT recognize variables in dict keys. Applies recursively.
-
-    Example:
-        ```python
-        prompt = DictPromptTemplate(
-            template={
-                "type": "text",
-                "text": "Hello {name}",
-                "metadata": {"source": "{source}"},
-            },
-            template_format="f-string",
-        )
-        prompt.format(name="Alice", source="docs")
-        # {
-        #     "type": "text",
-        #     "text": "Hello Alice",
-        #     "metadata": {"source": "docs"},
-        # }
-        ```
     """
 
     template: dict[str, Any]
     template_format: Literal["f-string", "mustache"]
 
-    @model_validator(mode="after")
-    def validate_template(self) -> "DictPromptTemplate":
-        """Validate that the template structure contains only safe variables."""
-        _get_input_variables(self.template, self.template_format)
-        return self
-
     @property
     def input_variables(self) -> list[str]:
         """Template input variables."""

libs/core/langchain_core/prompts/few_shot.py

@@ -12,7 +12,6 @@ from pydantic import (
 )
 from typing_extensions import override
 
-from langchain_core._api import deprecated
 from langchain_core.example_selectors import BaseExampleSelector
 from langchain_core.messages import BaseMessage, get_buffer_string
 from langchain_core.prompts.chat import BaseChatPromptTemplate
@@ -238,12 +237,6 @@ class FewShotPromptTemplate(_FewShotPromptTemplateMixin, StringPromptTemplate):
         """Return the prompt type key."""
         return "few_shot"
 
-    @deprecated(
-        since="1.2.21",
-        removal="2.0.0",
-        alternative="Use `dumpd`/`dumps` from `langchain_core.load` to serialize "
-        "prompts and `load`/`loads` to deserialize them.",
-    )
     def save(self, file_path: Path | str) -> None:
         """Save the prompt template to a file.
 

libs/core/langchain_core/prompts/few_shot_with_templates.py

@@ -6,7 +6,6 @@ from typing import Any
 from pydantic import ConfigDict, model_validator
 from typing_extensions import Self
 
-from langchain_core._api import deprecated
 from langchain_core.example_selectors import BaseExampleSelector
 from langchain_core.prompts.prompt import PromptTemplate
 from langchain_core.prompts.string import (
@@ -216,12 +215,6 @@ class FewShotPromptWithTemplates(StringPromptTemplate):
         """Return the prompt type key."""
         return "few_shot_with_templates"
 
-    @deprecated(
-        since="1.2.21",
-        removal="2.0.0",
-        alternative="Use `dumpd`/`dumps` from `langchain_core.load` to serialize "
-        "prompts and `load`/`loads` to deserialize them.",
-    )
     def save(self, file_path: Path | str) -> None:
         """Save the prompt to a file.
 

libs/core/langchain_core/prompts/image.py

@@ -9,25 +9,12 @@ from langchain_core.prompts.base import BasePromptTemplate
 from langchain_core.prompts.string import (
     DEFAULT_FORMATTER_MAPPING,
     PromptTemplateFormat,
-    get_template_variables,
 )
 from langchain_core.runnables import run_in_executor
 
 
 class ImagePromptTemplate(BasePromptTemplate[ImageURL]):
-    """Image prompt template for a multimodal model.
-
-    Example:
-        ```python
-        prompt = ImagePromptTemplate(
-            input_variables=["image_id"],
-            template={"url": "https://example.com/{image_id}.png", "detail": "high"},
-            template_format="f-string",
-        )
-        prompt.format(image_id="cat")
-        # {"url": "https://example.com/cat.png", "detail": "high"}
-        ```
-    """
+    """Image prompt template for a multimodal model."""
 
     template: dict = Field(default_factory=dict)
     """Template for the prompt."""
@@ -56,13 +43,6 @@ class ImagePromptTemplate(BasePromptTemplate[ImageURL]):
                 f" Found: {overlap}"
             )
             raise ValueError(msg)
-
-        template = kwargs.get("template", {})
-        template_format = kwargs.get("template_format", "f-string")
-        for value in template.values():
-            if isinstance(value, str):
-                get_template_variables(value, template_format)
-
         super().__init__(**kwargs)
 
     @property

libs/core/langchain_core/prompts/loading.py

@@ -7,7 +7,6 @@ from pathlib import Path
 
 import yaml
 
-from langchain_core._api import deprecated
 from langchain_core.output_parsers.string import StrOutputParser
 from langchain_core.prompts.base import BasePromptTemplate
 from langchain_core.prompts.chat import ChatPromptTemplate
@@ -18,51 +17,11 @@ URL_BASE = "https://raw.githubusercontent.com/hwchase17/langchain-hub/master/pro
 logger = logging.getLogger(__name__)
 
 
-def _validate_path(path: Path) -> None:
-    """Reject absolute paths and ``..`` traversal components.
-
-    Args:
-        path: The path to validate.
-
-    Raises:
-        ValueError: If the path is absolute or contains ``..`` components.
-    """
-    if path.is_absolute():
-        msg = (
-            f"Path '{path}' is absolute. Absolute paths are not allowed "
-            f"when loading prompt configurations to prevent path traversal "
-            f"attacks. Use relative paths instead, or pass "
-            f"`allow_dangerous_paths=True` if you trust the input."
-        )
-        raise ValueError(msg)
-    if ".." in path.parts:
-        msg = (
-            f"Path '{path}' contains '..' components. Directory traversal "
-            f"sequences are not allowed when loading prompt configurations. "
-            f"Use direct relative paths instead, or pass "
-            f"`allow_dangerous_paths=True` if you trust the input."
-        )
-        raise ValueError(msg)
-
-
-@deprecated(
-    since="1.2.21",
-    removal="2.0.0",
-    alternative="Use `dumpd`/`dumps` from `langchain_core.load` to serialize "
-    "prompts and `load`/`loads` to deserialize them.",
-)
-def load_prompt_from_config(
-    config: dict, *, allow_dangerous_paths: bool = False
-) -> BasePromptTemplate:
+def load_prompt_from_config(config: dict) -> BasePromptTemplate:
     """Load prompt from config dict.
 
     Args:
         config: Dict containing the prompt configuration.
-        allow_dangerous_paths: If ``False`` (default), file paths in the
-            config (such as ``template_path``, ``examples``, and
-            ``example_prompt_path``) are validated to reject absolute paths
-            and directory traversal (``..``) sequences. Set to ``True`` only
-            if you trust the source of the config.
 
     Returns:
         A `PromptTemplate` object.
@@ -79,12 +38,10 @@ def load_prompt_from_config(
         raise ValueError(msg)
 
     prompt_loader = type_to_loader_dict[config_type]
-    return prompt_loader(config, allow_dangerous_paths=allow_dangerous_paths)
+    return prompt_loader(config)
 
 
-def _load_template(
-    var_name: str, config: dict, *, allow_dangerous_paths: bool = False
-) -> dict:
+def _load_template(var_name: str, config: dict) -> dict:
     """Load template from the path if applicable."""
     # Check if template_path exists in config.
     if f"{var_name}_path" in config:
@@ -94,14 +51,9 @@ def _load_template(
             raise ValueError(msg)
         # Pop the template path from the config.
         template_path = Path(config.pop(f"{var_name}_path"))
-        if not allow_dangerous_paths:
-            _validate_path(template_path)
-        # Resolve symlinks before checking the suffix so that a symlink named
-        # "exploit.txt" pointing to a non-.txt file is caught.
-        resolved_path = template_path.resolve()
         # Load the template.
-        if resolved_path.suffix == ".txt":
-            template = resolved_path.read_text(encoding="utf-8")
+        if template_path.suffix == ".txt":
+            template = template_path.read_text(encoding="utf-8")
         else:
             raise ValueError
         # Set the template variable to the extracted variable.
@@ -109,14 +61,12 @@ def _load_template(
     return config
 
 
-def _load_examples(config: dict, *, allow_dangerous_paths: bool = False) -> dict:
+def _load_examples(config: dict) -> dict:
     """Load examples if necessary."""
     if isinstance(config["examples"], list):
         pass
     elif isinstance(config["examples"], str):
         path = Path(config["examples"])
-        if not allow_dangerous_paths:
-            _validate_path(path)
         with path.open(encoding="utf-8") as f:
             if path.suffix == ".json":
                 examples = json.load(f)
@@ -134,25 +84,19 @@ def _load_examples(config: dict, *, allow_dangerous_paths: bool = False) -> dict
 
 def _load_output_parser(config: dict) -> dict:
     """Load output parser."""
-    if config_ := config.get("output_parser"):
-        if output_parser_type := config_.get("_type") != "default":
+    if _config := config.get("output_parser"):
+        if output_parser_type := _config.get("_type") != "default":
             msg = f"Unsupported output parser {output_parser_type}"
             raise ValueError(msg)
-        config["output_parser"] = StrOutputParser(**config_)
+        config["output_parser"] = StrOutputParser(**_config)
     return config
 
 
-def _load_few_shot_prompt(
-    config: dict, *, allow_dangerous_paths: bool = False
-) -> FewShotPromptTemplate:
+def _load_few_shot_prompt(config: dict) -> FewShotPromptTemplate:
     """Load the "few shot" prompt from the config."""
     # Load the suffix and prefix templates.
-    config = _load_template(
-        "suffix", config, allow_dangerous_paths=allow_dangerous_paths
-    )
-    config = _load_template(
-        "prefix", config, allow_dangerous_paths=allow_dangerous_paths
-    )
+    config = _load_template("suffix", config)
+    config = _load_template("prefix", config)
     # Load the example prompt.
     if "example_prompt_path" in config:
         if "example_prompt" in config:
@@ -161,30 +105,19 @@ def _load_few_shot_prompt(
                 "be specified."
             )
             raise ValueError(msg)
-        example_prompt_path = Path(config.pop("example_prompt_path"))
-        if not allow_dangerous_paths:
-            _validate_path(example_prompt_path)
-        config["example_prompt"] = load_prompt(
-            example_prompt_path, allow_dangerous_paths=allow_dangerous_paths
-        )
+        config["example_prompt"] = load_prompt(config.pop("example_prompt_path"))
     else:
-        config["example_prompt"] = load_prompt_from_config(
-            config["example_prompt"], allow_dangerous_paths=allow_dangerous_paths
-        )
+        config["example_prompt"] = load_prompt_from_config(config["example_prompt"])
     # Load the examples.
-    config = _load_examples(config, allow_dangerous_paths=allow_dangerous_paths)
+    config = _load_examples(config)
     config = _load_output_parser(config)
     return FewShotPromptTemplate(**config)
 
 
-def _load_prompt(
-    config: dict, *, allow_dangerous_paths: bool = False
-) -> PromptTemplate:
+def _load_prompt(config: dict) -> PromptTemplate:
     """Load the prompt template from config."""
     # Load the template from disk if necessary.
-    config = _load_template(
-        "template", config, allow_dangerous_paths=allow_dangerous_paths
-    )
+    config = _load_template("template", config)
     config = _load_output_parser(config)
 
     template_format = config.get("template_format", "f-string")
@@ -201,28 +134,12 @@ def _load_prompt(
     return PromptTemplate(**config)
 
 
-@deprecated(
-    since="1.2.21",
-    removal="2.0.0",
-    alternative="Use `dumpd`/`dumps` from `langchain_core.load` to serialize "
-    "prompts and `load`/`loads` to deserialize them.",
-)
-def load_prompt(
-    path: str | Path,
-    encoding: str | None = None,
-    *,
-    allow_dangerous_paths: bool = False,
-) -> BasePromptTemplate:
+def load_prompt(path: str | Path, encoding: str | None = None) -> BasePromptTemplate:
     """Unified method for loading a prompt from LangChainHub or local filesystem.
 
     Args:
         path: Path to the prompt file.
         encoding: Encoding of the file.
-        allow_dangerous_paths: If ``False`` (default), file paths referenced
-            inside the loaded config (such as ``template_path``, ``examples``,
-            and ``example_prompt_path``) are validated to reject absolute paths
-            and directory traversal (``..``) sequences. Set to ``True`` only
-            if you trust the source of the config.
 
     Returns:
         A `PromptTemplate` object.
@@ -237,16 +154,11 @@ def load_prompt(
             "instead."
         )
         raise RuntimeError(msg)
-    return _load_prompt_from_file(
-        path, encoding, allow_dangerous_paths=allow_dangerous_paths
-    )
+    return _load_prompt_from_file(path, encoding)
 
 
 def _load_prompt_from_file(
-    file: str | Path,
-    encoding: str | None = None,
-    *,
-    allow_dangerous_paths: bool = False,
+    file: str | Path, encoding: str | None = None
 ) -> BasePromptTemplate:
     """Load prompt from file."""
     # Convert file to a Path object.
@@ -262,14 +174,10 @@ def _load_prompt_from_file(
         msg = f"Got unsupported file type {file_path.suffix}"
         raise ValueError(msg)
     # Load the prompt from the config now.
-    return load_prompt_from_config(config, allow_dangerous_paths=allow_dangerous_paths)
+    return load_prompt_from_config(config)
 
 
-def _load_chat_prompt(
-    config: dict,
-    *,
-    allow_dangerous_paths: bool = False,  # noqa: ARG001
-) -> ChatPromptTemplate:
+def _load_chat_prompt(config: dict) -> ChatPromptTemplate:
     """Load chat prompt from config."""
     messages = config.pop("messages")
     template = messages[0]["prompt"].pop("template") if messages else None
@@ -282,7 +190,7 @@ def _load_chat_prompt(
     return ChatPromptTemplate.from_template(template=template, **config)
 
 
-type_to_loader_dict: dict[str, Callable[..., BasePromptTemplate]] = {
+type_to_loader_dict: dict[str, Callable[[dict], BasePromptTemplate]] = {
     "prompt": _load_prompt,
     "few_shot": _load_few_shot_prompt,
     "chat": _load_chat_prompt,

libs/core/langchain_core/prompts/string.py

@@ -64,11 +64,9 @@ def jinja2_formatter(template: str, /, **kwargs: Any) -> str:
         )
         raise ImportError(msg)
 
-    # Use Jinja2's SandboxedEnvironment which blocks access to dunder attributes
-    # (e.g., __class__, __globals__) to prevent sandbox escapes.
-    # Note: regular attribute access (e.g., {{obj.attr}}) and method calls are
-    # still allowed. This is a best-effort measure — do not use with untrusted
-    # templates.
+    # Use a restricted sandbox that blocks ALL attribute/method access
+    # Only simple variable lookups like {{variable}} are allowed
+    # Attribute access like {{variable.attr}} or {{variable.method()}} is blocked
     return SandboxedEnvironment().from_string(template).render(**kwargs)
 
 
@@ -219,46 +217,6 @@ DEFAULT_VALIDATOR_MAPPING: dict[str, Callable] = {
 }
 
 
-def _parse_f_string_fields(template: str) -> list[tuple[str, str | None]]:
-    fields: list[tuple[str, str | None]] = []
-    for _, field_name, format_spec, _ in Formatter().parse(template):
-        if field_name is not None:
-            fields.append((field_name, format_spec))
-    return fields
-
-
-def validate_f_string_template(template: str) -> list[str]:
-    """Validate an f-string template and return its input variables."""
-    input_variables = set()
-    for var, format_spec in _parse_f_string_fields(template):
-        if "." in var or "[" in var or "]" in var:
-            msg = (
-                f"Invalid variable name {var!r} in f-string template. "
-                f"Variable names cannot contain attribute "
-                f"access (.) or indexing ([])."
-            )
-            raise ValueError(msg)
-
-        if var.isdigit():
-            msg = (
-                f"Invalid variable name {var!r} in f-string template. "
-                f"Variable names cannot be all digits as they are interpreted "
-                f"as positional arguments."
-            )
-            raise ValueError(msg)
-
-        if format_spec and ("{" in format_spec or "}" in format_spec):
-            msg = (
-                "Invalid format specifier in f-string template. "
-                "Nested replacement fields are not allowed."
-            )
-            raise ValueError(msg)
-
-        input_variables.add(var)
-
-    return sorted(input_variables)
-
-
 def check_valid_template(
     template: str, template_format: str, input_variables: list[str]
 ) -> None:
@@ -283,8 +241,6 @@ def check_valid_template(
             f" {list(DEFAULT_FORMATTER_MAPPING)}."
         )
         raise ValueError(msg) from exc
-    if template_format == "f-string":
-        validate_f_string_template(template)
     try:
         validator_func(template, input_variables)
     except (KeyError, IndexError) as exc:
@@ -310,18 +266,43 @@ def get_template_variables(template: str, template_format: str) -> list[str]:
     Raises:
         ValueError: If the template format is not supported.
     """
-    input_variables: list[str] | set[str]
     if template_format == "jinja2":
         # Get the variables for the template
-        input_variables = sorted(_get_jinja2_variables_from_template(template))
+        input_variables = _get_jinja2_variables_from_template(template)
     elif template_format == "f-string":
-        input_variables = validate_f_string_template(template)
+        input_variables = {
+            v for _, v, _, _ in Formatter().parse(template) if v is not None
+        }
     elif template_format == "mustache":
         input_variables = mustache_template_vars(template)
     else:
         msg = f"Unsupported template format: {template_format}"
         raise ValueError(msg)
 
+    # For f-strings, block attribute access and indexing syntax
+    # This prevents template injection attacks via accessing dangerous attributes
+    if template_format == "f-string":
+        for var in input_variables:
+            # Formatter().parse() returns field names with dots/brackets if present
+            # e.g., "obj.attr" or "obj[0]" - we need to block these
+            if "." in var or "[" in var or "]" in var:
+                msg = (
+                    f"Invalid variable name {var!r} in f-string template. "
+                    f"Variable names cannot contain attribute "
+                    f"access (.) or indexing ([])."
+                )
+                raise ValueError(msg)
+
+            # Block variable names that are all digits (e.g., "0", "100")
+            # These are interpreted as positional arguments, not keyword arguments
+            if var.isdigit():
+                msg = (
+                    f"Invalid variable name {var!r} in f-string template. "
+                    f"Variable names cannot be all digits as they are interpreted "
+                    f"as positional arguments."
+                )
+                raise ValueError(msg)
+
     return sorted(input_variables)
 
 

libs/core/langchain_core/runnables/__init__.py

@@ -3,7 +3,7 @@
 The LangChain Expression Language (LCEL) offers a declarative method to build
 production-grade programs that harness the power of LLMs.
 
-Programs created using LCEL and LangChain `Runnable` objects inherently support
+Programs created using LCEL and LangChain `Runnable` objects inherently suppor
 synchronous asynchronous, batch, and streaming operations.
 
 Support for **async** allows servers hosting LCEL based programs to scale bette for

libs/core/langchain_core/runnables/base.py

@@ -2587,10 +2587,6 @@ class RunnableSerializable(Serializable, Runnable[Input, Output]):
     """Runnable that can be serialized to JSON."""
 
     name: str | None = None
-    """The name of the `Runnable`.
-
-    Used for debugging and tracing.
-    """
 
     model_config = ConfigDict(
         # Suppress warnings from pydantic protected namespaces

libs/core/langchain_core/runnables/config.py

@@ -20,6 +20,7 @@ from typing import (
     cast,
 )
 
+from langsmith.run_helpers import _set_tracing_context, get_tracing_context
 from typing_extensions import TypedDict
 
 from langchain_core.callbacks.manager import AsyncCallbackManager, CallbackManager
@@ -29,6 +30,7 @@ from langchain_core.runnables.utils import (
     accepts_config,
     accepts_run_manager,
 )
+from langchain_core.tracers.langchain import LangChainTracer
 
 if TYPE_CHECKING:
     from langchain_core.callbacks.base import BaseCallbackManager, Callbacks
@@ -158,14 +160,6 @@ def _set_config_context(
     Returns:
         The token to reset the config and the previous tracing context.
     """
-    # Deferred to avoid importing langsmith at module level (~132ms).
-    from langsmith.run_helpers import (  # noqa: PLC0415
-        _set_tracing_context,
-        get_tracing_context,
-    )
-
-    from langchain_core.tracers.langchain import LangChainTracer  # noqa: PLC0415
-
     config_token = var_child_runnable_config.set(config)
     current_context = None
     if (
@@ -200,9 +194,6 @@ def set_config_context(config: RunnableConfig) -> Generator[Context, None, None]
     Yields:
         The config context.
     """
-    # Deferred to avoid importing langsmith at module level (~132ms).
-    from langsmith.run_helpers import _set_tracing_context  # noqa: PLC0415
-
     ctx = copy_context()
     config_token, _ = ctx.run(_set_config_context, config)
     try:

libs/core/langchain_core/runnables/configurable.py

@@ -499,7 +499,7 @@ class RunnableConfigurableAlternatives(DynamicRunnable[Input, Output]):
         # When invoking the created RunnableSequence, you can pass in the
         # value for your ConfigurableField's id which in this case will either be
         # `joke` or `poem`.
-        chain = prompt | ChatOpenAI(model="gpt-5.4-mini")
+        chain = prompt | ChatOpenAI(model="gpt-3.5-turbo-0125", temperature=0)
 
         # The `with_config` method brings in the desired Prompt Runnable in your
         # Runnable Sequence.
@@ -525,7 +525,7 @@ class RunnableConfigurableAlternatives(DynamicRunnable[Input, Output]):
                 "poem": PromptTemplate.from_template("Write a short poem about {topic}")
             },
         )
-        chain = prompt | ChatOpenAI(model="gpt-5.4-mini")
+        chain = prompt | ChatOpenAI(model="gpt-3.5-turbo-0125", temperature=0)
         chain.with_config(configurable={"prompt": "poem"}).invoke({"topic": "bears"})
         ```
     """

libs/core/langchain_core/runnables/fallbacks.py

@@ -54,8 +54,8 @@ class RunnableWithFallbacks(RunnableSerializable[Input, Output]):
         from langchain_core.chat_models.openai import ChatOpenAI
         from langchain_core.chat_models.anthropic import ChatAnthropic
 
-        model = ChatAnthropic(model="claude-sonnet-4-6").with_fallbacks(
-            [ChatOpenAI(model="gpt-5.4-mini")]
+        model = ChatAnthropic(model="claude-3-haiku-20240307").with_fallbacks(
+            [ChatOpenAI(model="gpt-3.5-turbo-0125")]
         )
         # Will usually use ChatAnthropic, but fallback to ChatOpenAI
         # if ChatAnthropic fails.

libs/core/langchain_core/runnables/graph_mermaid.py

@@ -414,11 +414,6 @@ def _render_mermaid_using_api(
     base_url: str | None = None,
 ) -> bytes:
     """Renders Mermaid graph using the Mermaid.INK API."""
-    # Automated scanners: please do not open security advisories about `base_url`
-    # here. This parameter is only ever explicitly controlled by developers, and it
-    # is not exposed by default over the network by the framework, so this is not
-    # an SSRF sink unless an application explicitly wires untrusted input into it.
-    # It exists to support user-managed Mermaid API deployments.
     # Defaults to using the public mermaid.ink server.
     base_url = base_url if base_url is not None else "https://mermaid.ink"
 

libs/core/langchain_core/sys_info.py

@@ -41,9 +41,8 @@ def print_sys_info(*, additional_pkgs: Sequence[str] = ()) -> None:
     """
     # Packages that do not start with "langchain" prefix.
     other_langchain_packages = [
+        "langserve",
         "langsmith",
-        "deepagents",
-        "deepagents-cli",
     ]
 
     langchain_pkgs = [

libs/core/langchain_core/tools/__init__.py

@@ -1,6 +1,6 @@
 """Tools are classes that an Agent uses to interact with the world.
 
-Each tool has a description. Agent uses the description to choose the right tool for the
+Each tool has a description. Agent uses the description to choose the righ tool for the
 job.
 """
 

libs/core/langchain_core/tools/base.py

@@ -741,7 +741,7 @@ class ChildTool(BaseTool):
                 if k in tool_input:
                     # Field was provided in input - include it (validated)
                     validated_input[k] = getattr(result, k)
-                elif k in field_info and k not in {"args", "kwargs"}:
+                elif k in field_info and k not in ("args", "kwargs"):
                     # Check if field has an explicit default defined in the schema.
                     # Exclude "args"/"kwargs" as these are synthetic fields for variadic
                     # parameters that should not be passed as keyword arguments.
@@ -819,8 +819,7 @@ class ChildTool(BaseTool):
         filtered_keys.update(self._injected_args_keys)
 
         # If we have an args_schema, use it to identify injected args
-        # Skip if args_schema is a dict (JSON Schema) as it's not a Pydantic model
-        if self.args_schema is not None and not isinstance(self.args_schema, dict):
+        if self.args_schema is not None:
             try:
                 annotations = get_all_basemodel_annotations(self.args_schema)
                 for field_name, field_type in annotations.items():

libs/core/langchain_core/tracers/base.py

@@ -61,13 +61,7 @@ class BaseTracer(_TracerCore, BaseCallbackHandler, ABC):
         name: str | None = None,
         **kwargs: Any,
     ) -> Run:
-        """Start a trace for a chat model run.
-
-        Note:
-            Naming can be confusing here: there is `on_chat_model_start`, but no
-            corresponding `on_chat_model_end` callback. Chat model completion is
-            routed through `on_llm_end` / `_on_llm_end`, which are shared with
-            text LLM runs.
+        """Start a trace for an LLM run.
 
         Args:
             serialized: The serialized model.
@@ -197,12 +191,7 @@ class BaseTracer(_TracerCore, BaseCallbackHandler, ABC):
 
     @override
     def on_llm_end(self, response: LLMResult, *, run_id: UUID, **kwargs: Any) -> Run:
-        """End a trace for an LLM or chat model run.
-
-        Note:
-            This is the end callback for both run types. Chat models start with
-            `on_chat_model_start`, but there is no `on_chat_model_end`;
-            completion is routed here for callback API compatibility.
+        """End a trace for an LLM run.
 
         Args:
             response: The response.
@@ -665,14 +654,6 @@ class AsyncBaseTracer(_TracerCore, AsyncCallbackHandler, ABC):
         tags: list[str] | None = None,
         **kwargs: Any,
     ) -> None:
-        """End a trace for an LLM or chat model run.
-
-        Note:
-            This async callback also handles both run types. Async chat models
-            start with `on_chat_model_start`, but there is no
-            `on_chat_model_end`; completion is routed here for callback API
-            compatibility.
-        """
         llm_run = self._complete_llm_run(
             response=response,
             run_id=run_id,
@@ -893,7 +874,7 @@ class AsyncBaseTracer(_TracerCore, AsyncCallbackHandler, ABC):
         """Process the LLM Run upon start."""
 
     async def _on_llm_end(self, run: Run) -> None:
-        """Process LLM/chat model run completion."""
+        """Process the LLM Run."""
 
     async def _on_llm_error(self, run: Run) -> None:
         """Process the LLM Run upon error."""

libs/core/langchain_core/tracers/core.py

@@ -102,7 +102,7 @@ class _TracerCore(ABC):
         try:
             tb = traceback.format_exception(error)
             return (msg + "\n\n".join(tb)).strip()
-        except Exception:
+        except:  # noqa: E722
             return msg
 
     def _start_trace(self, run: Run) -> Coroutine[Any, Any, None] | None:  # type: ignore[return]

libs/core/langchain_core/tracers/langchain.py

@@ -5,7 +5,7 @@ from __future__ import annotations
 import logging
 from concurrent.futures import ThreadPoolExecutor
 from datetime import datetime, timezone
-from typing import TYPE_CHECKING, Any, cast
+from typing import TYPE_CHECKING, Any
 from uuid import UUID
 
 from langsmith import Client, get_tracing_context
@@ -77,15 +77,11 @@ def _get_usage_metadata_from_generations(
     """Extract and aggregate `usage_metadata` from generations.
 
     Iterates through generations to find and aggregate all `usage_metadata` found in
-    messages. This expects the serialized message payload shape produced by tracer
-    internals:
-
-        `{"message": {"kwargs": {"usage_metadata": {...}}}}`
+    messages. This is typically present in chat model outputs.
 
     Args:
         generations: List of generation batches, where each batch is a list of
-            generation dicts that may contain a `'message'` key with
-            usage metadata.
+            generation dicts that may contain a `'message'` key with `'usage_metadata'`.
 
     Returns:
         The aggregated `usage_metadata` dict if found, otherwise `None`.
@@ -95,24 +91,11 @@ def _get_usage_metadata_from_generations(
         for generation in generation_batch:
             if isinstance(generation, dict) and "message" in generation:
                 message = generation["message"]
-                usage_metadata = _get_usage_metadata_from_message(message)
-                if usage_metadata is not None:
-                    output = add_usage(output, usage_metadata)
+                if isinstance(message, dict) and "usage_metadata" in message:
+                    output = add_usage(output, message["usage_metadata"])
     return output
 
 
-def _get_usage_metadata_from_message(message: Any) -> UsageMetadata | None:
-    """Extract usage metadata from a generation's message payload."""
-    if not isinstance(message, dict):
-        return None
-
-    kwargs = message.get("kwargs")
-    if isinstance(kwargs, dict) and isinstance(kwargs.get("usage_metadata"), dict):
-        return cast("UsageMetadata", kwargs["usage_metadata"])
-
-    return None
-
-
 class LangChainTracer(BaseTracer):
     """Implementation of the `SharedTracer` that `POSTS` to the LangChain endpoint."""
 
@@ -311,19 +294,13 @@ class LangChainTracer(BaseTracer):
         )
 
     def _on_chat_model_start(self, run: Run) -> None:
-        """Persist a chat model run.
-
-        Note:
-            Naming is historical: there is no `_on_chat_model_end` hook. Chat
-            model completion is handled by `_on_llm_end`, shared with text
-            LLM runs.
-        """
+        """Persist an LLM run."""
         if run.parent_run_id is None:
             run.reference_example_id = self.example_id
         self._persist_run_single(run)
 
     def _on_llm_end(self, run: Run) -> None:
-        """Process LLM/chat model run completion."""
+        """Process the LLM Run."""
         # Extract usage_metadata from outputs and store in extra.metadata
         if run.outputs and "generations" in run.outputs:
             usage_metadata = _get_usage_metadata_from_generations(

libs/core/langchain_core/tracers/log_stream.py

@@ -264,9 +264,8 @@ class LogStreamCallbackHandler(BaseTracer, _StreamingCallbackHandler):
                 - `'original'` is the format used by all current tracers. This format is
                     slightly inconsistent with respect to inputs and outputs.
                 - 'streaming_events' is used for supporting streaming events, for
-                    internal usage. It will likely change in the future,
-                    or be deprecated entirely in favor of a dedicated async
-                    tracer for streaming events.
+                    internal usage. It will likely change in the future, or deprecated
+                    entirely in favor of a dedicated async tracer for streaming events.
 
         Raises:
             ValueError: If an invalid schema format is provided (internal use only).
@@ -357,7 +356,7 @@ class LogStreamCallbackHandler(BaseTracer, _StreamingCallbackHandler):
             yield chunk
 
     def tap_output_iter(self, run_id: UUID, output: Iterator[T]) -> Iterator[T]:
-        """Tap an output iterator to stream its values to the log.
+        """Tap an output async iterator to stream its values to the log.
 
         Args:
             run_id: The ID of the run.
@@ -674,7 +673,7 @@ async def _astream_log_implementation(
     """Implementation of astream_log for a given runnable.
 
     The implementation has been factored out (at least temporarily) as both
-    `astream_log` and `astream_events` rely on it.
+    `astream_log` and `astream_events` relies on it.
 
     Args:
         runnable: The runnable to run in streaming mode.

libs/core/langchain_core/utils/_merge.py

@@ -69,14 +69,7 @@ def merge_dicts(left: dict[str, Any], *others: dict[str, Any]) -> dict[str, Any]
             elif merged[right_k] == right_v:
                 continue
             elif isinstance(merged[right_k], int):
-                # Preserve identification and temporal fields using last-wins strategy
-                # instead of summing:
-                # - index: identifies which tool call a chunk belongs to
-                # - created/timestamp: temporal values that shouldn't be accumulated
-                if right_k in {"index", "created", "timestamp"}:
-                    merged[right_k] = right_v
-                else:
-                    merged[right_k] += right_v
+                merged[right_k] += right_v
             else:
                 msg = (
                     f"Additional kwargs key {right_k} already exists in left dict and "
@@ -117,15 +110,7 @@ def merge_lists(left: list | None, *others: list | None) -> list | None:
                     to_merge = [
                         i
                         for i, e_left in enumerate(merged)
-                        if (
-                            "index" in e_left
-                            and e_left["index"] == e["index"]  # index matches
-                            and (  # IDs not inconsistent
-                                e_left.get("id") in (None, "")
-                                or e.get("id") in (None, "")
-                                or e_left.get("id") == e.get("id")
-                            )
-                        )
+                        if "index" in e_left and e_left["index"] == e["index"]
                     ]
                     if to_merge:
                         # TODO: Remove this once merge_dict is updated with special

libs/core/langchain_core/utils/function_calling.py

@@ -22,7 +22,6 @@ from typing import (
 
 import typing_extensions
 from pydantic import BaseModel
-from pydantic.errors import PydanticInvalidForJsonSchema
 from pydantic.v1 import BaseModel as BaseModelV1
 from pydantic.v1 import Field as Field_v1
 from pydantic.v1 import create_model as create_model_v1
@@ -177,30 +176,17 @@ def _convert_pydantic_to_openai_function(
 
     Raises:
         TypeError: If the model is not a Pydantic model.
-        TypeError: If the model contains types that cannot be converted to JSON schema.
 
     Returns:
         The function description.
     """
-    try:
-        if hasattr(model, "model_json_schema"):
-            schema = model.model_json_schema()  # Pydantic 2
-        elif hasattr(model, "schema"):
-            schema = model.schema()  # Pydantic 1
-        else:
-            msg = "Model must be a Pydantic model."
-            raise TypeError(msg)
-    except PydanticInvalidForJsonSchema as e:
-        model_name = getattr(model, "__name__", str(model))
-        msg = (
-            f"Failed to generate JSON schema for '{model_name}': {e}\n\n"
-            "Tool argument schemas must be JSON-serializable. If your schema includes "
-            "custom Python classes, consider:\n"
-            "  1. Converting them to Pydantic models with JSON-compatible fields\n"
-            "  2. Using primitive types (str, int, float, bool, list, dict) instead\n"
-            "  3. Passing the data as serialized JSON strings\n\n"
-        )
-        raise PydanticInvalidForJsonSchema(msg) from e
+    if hasattr(model, "model_json_schema"):
+        schema = model.model_json_schema()  # Pydantic 2
+    elif hasattr(model, "schema"):
+        schema = model.schema()  # Pydantic 1
+    else:
+        msg = "Model must be a Pydantic model."
+        raise TypeError(msg)
     return _convert_json_schema_to_openai_function(
         schema, name=name, description=description, rm_titles=rm_titles
     )
@@ -500,15 +486,12 @@ def convert_to_openai_function(
 _WellKnownOpenAITools = (
     "function",
     "file_search",
-    "computer",
     "computer_use_preview",
     "code_interpreter",
     "mcp",
     "image_generation",
     "web_search_preview",
     "web_search",
-    "tool_search",
-    "namespace",
 )
 
 

libs/core/langchain_core/utils/mustache.py

@@ -481,6 +481,14 @@ def render(
     Args:
         template: A file-like object or a string containing the template.
         data: A python dictionary with your data scope.
+        partials_path: The path to where your partials are stored.
+
+            If set to None, then partials won't be loaded from the file system
+
+            Defaults to `'.'`.
+        partials_ext: The extension that you want the parser to look for
+
+            Defaults to `'mustache'`.
         partials_dict: A python dictionary which will be search for partials
             before the filesystem is.
 

libs/core/langchain_core/utils/pydantic.py

@@ -242,12 +242,7 @@ def _create_subset_model_v2(
     for field_name in field_names:
         field = model.model_fields[field_name]
         description = descriptions_.get(field_name, field.description)
-        field_kwargs: dict[str, Any] = {"description": description}
-        if field.default_factory is not None:
-            field_kwargs["default_factory"] = field.default_factory
-        else:
-            field_kwargs["default"] = field.default
-        field_info = FieldInfoV2(**field_kwargs)
+        field_info = FieldInfoV2(description=description, default=field.default)
         if field.metadata:
             field_info.metadata = field.metadata
         fields[field_name] = (field.annotation, field_info)

libs/core/langchain_core/vectorstores/in_memory.py

@@ -177,8 +177,8 @@ class InMemoryVectorStore(VectorStore):
     @override
     def delete(self, ids: Sequence[str] | None = None, **kwargs: Any) -> None:
         if ids:
-            for id_ in ids:
-                self.store.pop(id_, None)
+            for _id in ids:
+                self.store.pop(_id, None)
 
     @override
     async def adelete(self, ids: Sequence[str] | None = None, **kwargs: Any) -> None:

libs/core/langchain_core/version.py

@@ -1,3 +1,3 @@
 """langchain-core version information and utilities."""
 
-VERSION = "1.2.29"
+VERSION = "1.2.9"

libs/core/pyproject.toml

@@ -21,7 +21,7 @@ classifiers = [
     "Topic :: Software Development :: Libraries :: Python Modules",
 ]
 
-version = "1.2.29"
+version = "1.2.9"
 requires-python = ">=3.10.0,<4.0.0"
 dependencies = [
     "langsmith>=0.3.45,<1.0.0",
@@ -45,7 +45,7 @@ Slack = "https://www.langchain.com/join-community"
 Reddit = "https://www.reddit.com/r/LangChain/"
 
 [dependency-groups]
-lint = ["ruff>=0.15.0,<0.16.0"]
+lint = ["ruff>=0.14.11,<0.15.0"]
 typing = [
     "mypy>=1.19.1,<1.20.0",
     "types-pyyaml>=6.0.12.2,<7.0.0.0",
@@ -54,16 +54,16 @@ typing = [
 ]
 dev = [
     "jupyter>=1.0.0,<2.0.0",
-    "setuptools>=67.6.1,<83.0.0",
+    "setuptools>=67.6.1,<79.0.0",
     "grandalf>=0.8.0,<1.0.0",
 ]
 test = [
-    "pytest>=8.0.0,<10.0.0",
+    "pytest>=8.0.0,<9.0.0",
     "freezegun>=1.2.2,<2.0.0",
     "pytest-mock>=3.10.0,<4.0.0",
-    "syrupy>=4.0.2,<6.0.0",
+    "syrupy>=4.0.2,<5.0.0",
     "pytest-watcher>=0.3.4,<1.0.0",
-    "pytest-asyncio>=0.21.1,<2.0.0",
+    "pytest-asyncio>=0.21.1,<1.0.0",
     "grandalf>=0.8.0,<1.0.0",
     "responses>=0.25.0,<1.0.0",
     "pytest-socket>=0.7.0,<1.0.0",
@@ -77,9 +77,6 @@ test = [
 ]
 test_integration = []
 
-[tool.uv]
-constraint-dependencies = ["pygments>=2.20.0"]  # CVE-2026-4539
-
 [tool.uv.sources]
 langchain-tests = { path = "../standard-tests" }
 langchain-text-splitters = { path = "../text-splitters" }
@@ -136,7 +133,7 @@ ignore-var-parameters = true  # ignore missing documentation for *args and **kwa
 "langchain_core/sys_info.py" = [ "T201",]
 "tests/unit_tests/test_tools.py" = [ "ARG",]
 "tests/**" = [ "D1", "PLR2004", "S", "SLF",]
-"scripts/**" = [ "INP", "S", "T201",]
+"scripts/**" = [ "INP", "S",]
 
 [tool.coverage.run]
 omit = [ "tests/*",]

libs/core/scripts/check_imports.py

@@ -17,8 +17,8 @@ if __name__ == "__main__":
             SourceFileLoader(module_name, file).load_module()
         except Exception:
             has_failure = True
-            print(file)
+            print(file)  # noqa: T201
             traceback.print_exc()
-            print()
+            print()  # noqa: T201
 
     sys.exit(1 if has_failure else 0)