Skip to content

chore(deps)(deps): bump the langchain group across 1 directory with 5 updates#93

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/langchain-ea1f28acff
Open

chore(deps)(deps): bump the langchain group across 1 directory with 5 updates#93
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/langchain-ea1f28acff

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the langchain group with 5 updates in the / directory:

Package From To
langchain-core 1.3.3 1.4.9
langchain 1.2.18 1.3.13
langchain-openai 1.2.1 1.3.5
langchain-anthropic 1.4.3 1.4.8
langchain-google-genai 4.2.2 4.2.7

Updates langchain-core from 1.3.3 to 1.4.9

Release notes

Sourced from langchain-core's releases.

langchain-core==1.4.9

Changes since langchain-core==1.4.8

release(core): 1.4.9 (#38728) fix(core): improve langsmith loader error messages (#35648) fix(core): output parser bugs in xml.py and pydantic.py (#35641) style(core): fix some ruff preview rules (#38656) fix(core): avoid dict shadowing in language models (#38480) fix(core): _parse_google_docstring mishandling continuation lines with colons (#35680) fix(core): add messages to bare raise ValueError calls (#38158) fix(core): use asyncio.get_running_loop() in async contexts (#38157) chore: bump langsmith from 0.8.0 to 0.8.18 in /libs/core (#38319) chore: bump jupyterlab from 4.5.7 to 4.5.9 in /libs/core (#38326) chore: bump vcrpy from 8.1.1 to 8.2.1 in /libs/core (#38327)

langchain-core==1.4.8

Changes since langchain-core==1.4.7

chore: bump jupyter-server from 2.18.0 to 2.20.0 in /libs/core (#38252) chore: bump tornado from 6.5.6 to 6.5.7 in /libs/core (#38184) chore: bump bleach from 6.3.0 to 6.4.0 in /libs/core (#38198) release(core): 1.4.8 (#38254) refactor(langchain-classic): remove code for Python < 3.10 (#38194) perf(core): memoize BaseTool.tool_call_schema subset model and cache model_json_schema (#38073) style(core): fix style in langchain_core/_security (#38189) fix(core): preserve usage token details in v3 streaming events (#38021) fix(core): disallow_any_generics (#38156) chore(core): add mypy warn_unreachable (#38109) docs: refresh README installation and resources (#38119) test(core,langchain): update tests for explicit deserialization allowlists (#38118)

langchain-core==1.4.7

Changes since langchain-core==1.4.6

chore: bump tornado from 6.5.5 to 6.5.6 in /libs/core (#38115) release(core): 1.4.7 (#38111) fix(core,partners): rename package version trace metadata (#38110) fix(core): fix Pydantic v1 support in tools/runnable (#33698) style(core,langchain,langchain-classic,partners): replace double backticks in docstrings (#38095)

langchain-core==1.4.6

Changes since langchain-core==1.4.5

release(core): 1.4.6 (#38061) feat(core,partners): add package version tracking to tracing metadata (#35295) fix(core,openai): normalize v1 streamed tool calls (#35983) chore(infra): bump mypy to 2.1 and unify type-check config across the monorepo (#36470)

langchain-core==1.4.5

Changes since langchain-core==1.4.4

... (truncated)

Commits
  • 1c3a418 release(core): 1.4.9 (#38728)
  • 1619f3d chore(standard-tests): fix some typings detected by ty (#38707)
  • a6f0369 chore(qdrant): bump fastembed to latest (#38726)
  • fca0a97 fix(langchain): propagate interrupts through ToolRetryMiddleware (#38722)
  • 874bada chore(model-profiles): refresh model profile data (#38712)
  • 6e51a7e chore(model-profiles): refresh model profile data (#38699)
  • 2d8100c fix(langchain-classic): fix Chain.save() regression from dict-to-`model_dum...
  • b08c391 test(openai): skip Codex VCR tests before cassette setup (#38690)
  • 83386b5 chore(model-profiles): refresh model profile data (#38689)
  • 701cc0e test(deps): Include Python 3.14 in integration test matrix (#34993)
  • Additional commits viewable in compare view

Updates langchain from 1.2.18 to 1.3.13

Release notes

Sourced from langchain's releases.

langchain==1.3.13

Changes since langchain==1.3.12

release(langchain): 1.3.13 (#38787) feat(langchain): add meta extra and support langchain-meta in init_chat_model (#38786) feat(openai): support explicit prompt caching (#38762) chore(deps): refresh lockfiles (#38746)

langchain==1.3.12

Changes since langchain==1.3.11

release(langchain): 1.3.12 (#38730) fix(langchain): propagate interrupts through ToolRetryMiddleware (#38722) fix(langchain): avoid shared process-group kill in shell middleware (#36359) fix(langchain): sanitize anthropic cache markers on fallback retries (#37867) style: fix some ruff preview rules in langchain_v1 and standard-tests (#38657) chore(langchain): add types in agent middleware tests (#38188)

langchain==1.3.11

Changes since langchain==1.3.10

release(langchain): 1.3.11 (#38377) fix(langchain,openai): only set strict=True on tools for OpenAI-compatible models in ProviderStrategy (#38370) chore: bump pydantic-settings from 2.12.0 to 2.14.2 in /libs/langchain_v1 (#38279) chore: bump vcrpy from 8.1.1 to 8.2.1 in /libs/langchain_v1 (#38280) chore: bump langsmith from 0.8.9 to 0.8.18 in /libs/langchain_v1 (#38281) docs(langchain): document summarization prompt contract (#38256)

langchain==1.3.10

Changes since langchain==1.3.9

release(langchain): 1.3.10 (#38255) chore: bump cryptography from 46.0.7 to 48.0.1 in /libs/langchain_v1 (#38176) chore: bump aiohttp from 3.14.0 to 3.14.1 in /libs/langchain_v1 (#38179) fix(langchain): switch summary format (#38171) fix(langchain): detect provider strategy for dated gpt-5.2/gpt-5.4 snapshots (#38222) chore(langchain): improve typing in tests (#38163) chore: bump pyjwt from 2.12.0 to 2.13.0 in /libs/langchain_v1 (#38168) release(openai): 1.3.2 (#38130) hotfix(openai): switch version (#38123) release(openai): 1.4.0 (#38120) docs: refresh README installation and resources (#38119) test(core,langchain): update tests for explicit deserialization allowlists (#38118) release(core): 1.4.7 (#38111) release(anthropic): 1.4.6 (#38105)

langchain==1.3.9

Changes since langchain==1.3.8

release(anthropic): 1.4.6 (#38105)

... (truncated)

Commits

Updates langchain-openai from 1.2.1 to 1.3.5

Release notes

Sourced from langchain-openai's releases.

langchain-openai==1.3.5

Changes since langchain-openai==1.3.4

release(openai): 1.3.5 (#38785) feat(openai): support explicit prompt caching (#38762) chore(model-profiles): refresh model profile data (#38774)

langchain-openai==1.3.4

Changes since langchain-openai==1.3.3

release(openai): 1.3.4 (#38731) fix(openai): suppress Pydantic serializer warning on structured output parsed field (#37727) test(openai): skip Codex VCR tests before cassette setup (#38690) chore: bump the minor-and-patch group across 3 directories with 11 updates (#38587) chore: bump langgraph-checkpoint from 4.1.0 to 4.1.1 in /libs/partners/openai (#38476) fix(core): use asyncio.get_running_loop() in async contexts (#38157) test(openai): clarify async API key sync failure trace (#38379)

langchain-openai==1.3.3

Changes since langchain-openai==1.3.2

release(openai): 1.3.3 (#38375) fix(openai): drop response item ids when store is false (#38372) fix(langchain,openai): only set strict=True on tools for OpenAI-compatible models in ProviderStrategy (#38370) test(openai): clarify expected strict schema error (#38338) fix(openai): drop stop from Responses API payload (#38336) chore: bump langsmith from 0.8.5 to 0.8.18 in /libs/partners/openai (#38293) chore: bump vcrpy from 8.1.1 to 8.2.1 in /libs/partners/openai (#38294) chore(model-profiles): refresh model profile data (#38274) test(openai): vcr embedding raw equivalence tests (#38199)

langchain-openai==1.3.2

Changes since langchain-openai==1.3.1

release(openai): 1.3.2 (#38130)

langchain-openai==1.3.1

Changes since langchain-openai==1.3.0

docs: refresh README installation and resources (#38119) test(core,langchain): update tests for explicit deserialization allowlists (#38118) release(core): 1.4.7 (#38111) fix(core,partners): rename package version trace metadata (#38110) style(core,langchain,langchain-classic,partners): replace double backticks in docstrings (#38095) test(openai): use gpt-4o for image token counting (#38089) release(core): 1.4.6 (#38061) feat(core,partners): add package version tracking to tracing metadata (#35295) fix(core,openai): normalize v1 streamed tool calls (#35983) chore(infra): bump mypy to 2.1 and unify type-check config across the monorepo (#36470) feat(standard-tests): validate tool call chunks during streaming (#34707)

... (truncated)

Commits

Updates langchain-anthropic from 1.4.3 to 1.4.8

Release notes

Sourced from langchain-anthropic's releases.

langchain-anthropic==1.4.8

Changes since langchain-anthropic==1.4.7

release(anthropic): 1.4.8 (#38490) fix(anthropic): keep initial text on content_block_start (#38442) chore: bump langgraph-checkpoint from 4.1.0 to 4.1.1 in /libs/partners/anthropic (#38479) fix(core): add messages to bare raise ValueError calls (#38158)

langchain-anthropic==1.4.7

Changes since langchain-anthropic==1.4.6

hotfix(anthropic): regenerate cassette (#38376) release(anthropic): 1.4.7 (#38373) chore: bump vcrpy from 8.1.1 to 8.2.1 in /libs/partners/anthropic (#38324) chore: bump langsmith from 0.8.5 to 0.8.18 in /libs/partners/anthropic (#38325) docs(anthropic): clarify prompt caching middleware docstring (#38206) docs: refresh README installation and resources (#38119) test(core,langchain): update tests for explicit deserialization allowlists (#38118) release(core): 1.4.7 (#38111) fix(core,partners): rename package version trace metadata (#38110)

langchain-anthropic==1.4.6

Changes since langchain-anthropic==1.4.5

release(anthropic): 1.4.6 (#38105) fix(langchain,anthropic): confine file-search results and tighten anthropic allowed_prefixes (#38106) release(core): 1.4.6 (#38061) feat(core,partners): add package version tracking to tracing metadata (#35295) chore(infra): bump mypy to 2.1 and unify type-check config across the monorepo (#36470) feat(standard-tests): validate tool call chunks during streaming (#34707) test(anthropic): make expected warnings explicit (#38044) test(anthropic): make tests robust to gateway base URL (#38043)

langchain-anthropic==1.4.5

Changes since langchain-anthropic==1.4.4

release(anthropic): 1.4.5 (#38036) fix(core): support content block tokens in callbacks (#34739) chore(model-profiles): refresh model profile data (#38012) hotfix(openai): min core dep (#37990) test(langchain,partners): disable pytest-benchmark under xdist to silence PytestBenchmarkWarning (#37901) chore(model-profiles): refresh model profile data (#37895) chore(model-profiles): refresh model profile data (#37771)

langchain-anthropic==1.4.4

Changes since langchain-anthropic==1.4.3

release(anthropic): 1.4.4 (#37757) fix(anthropic): normalize cross-provider tool-call IDs (#37756) test(anthropic): retry integration tests on transient failures (#37697)

... (truncated)

Commits
  • e495651 release(anthropic): 1.4.8 (#38490)
  • bfc65cc fix(anthropic): keep initial text on content_block_start (#38442)
  • 00ad96c chore: bump langgraph-checkpoint from 4.1.0 to 4.1.1 in /libs/partners/huggin...
  • e7c3834 chore: bump langgraph-checkpoint from 4.0.3 to 4.1.1 in /libs/langchain (#38477)
  • 9b245de chore: bump langgraph-checkpoint from 4.1.0 to 4.1.1 in /libs/partners/openai...
  • 0a71a1d chore: bump langgraph-sdk from 0.3.13 to 0.3.15 in /libs/langchain (#38475)
  • 5f99048 chore: bump langgraph-checkpoint from 4.1.0 to 4.1.1 in /libs/model-profiles ...
  • 3e6f1e3 chore: bump langgraph-checkpoint from 4.1.0 to 4.1.1 in /libs/partners/anthro...
  • d3eb229 fix(core): avoid dict shadowing in language models (#38480)
  • 20ba43d release(fireworks): 1.4.3
  • Additional commits viewable in compare view

Updates langchain-google-genai from 4.2.2 to 4.2.7

Release notes

Sourced from langchain-google-genai's releases.

langchain-google-genai==4.2.7

Changes since libs/genai/v4.2.6

release(genai): 4.2.7 (#1881) fix(genai): handle empty items dict in array schema conversion (#1587) chore(model-profiles): refresh model profile data (#1802) chore: bump vcrpy from 8.1.1 to 8.2.1 in /libs/genai (#1857)

langchain-google-genai==4.2.6

Changes since libs/genai/v4.2.5

release(genai): 4.2.6 (#1871) fix(genai): propagate generation config fields (#1870) fix(genai): support constructor thinking config (#1869) chore: bump langsmith from 0.8.0 to 0.8.18 in /libs/genai (#1860) test(genai,vertexai,community): refresh Gemini model references (#1856) chore: bump types-google-cloud-ndb from 2.4.0.20260402 to 2.4.0.20260518 in /libs/genai (#1778) chore: bump cryptography from 46.0.7 to 48.0.1 in /libs/genai (#1851) chore: bump the major group across 1 directory with 3 updates (#1810) feat(genai,vertexai): add package version metadata (#1841) fix(genai): stop docstring cross-refs resolving to wrong class (#1839) chore(genai,vertexai): bump min version of langchain-core (#1835) test(genai): make tool-calling integration tests deterministic (#1833)

langchain-google-genai==4.2.5

Changes since libs/genai/v4.2.4

release(genai): 4.2.5 (#1831) fix(genai): merge per-request http options into chat config (#1830)

langchain-google-genai==4.2.4

Changes since libs/genai/v4.2.3

release(genai): 4.2.4 (#1815) fix(genai): fix tests (#1814) chore(genai): Update google-genai dependency to support 2.x (#1766) test(genai): force google_search use in structured-output test (#1801) chore: bump the minor-and-patch group across 1 directory with 5 updates (#1797) test(genai): fix context caching assertions, increase flaky retries (#1798) fix(genai): walrus operator precedence in v1 image/file url conversion (#1683) chore(genai): silence pytest-benchmark xdist warning (#1794)

langchain-google-genai==4.2.3

Changes since libs/genai/v4.2.2

release(genai): 4.2.3 (#1795) feat(genai): expose api_version (#1793) chore(model-profiles): refresh model profile data (#1792) chore: bump idna from 3.11 to 3.15 in /libs/genai (#1786) fix(genai): fix tests (#1785)

... (truncated)

Commits
  • 7dea1be release(genai): 4.2.7 (#1881)
  • e1572b5 fix(genai): handle empty items dict in array schema conversion (#1587)
  • a48242a chore(model-profiles): refresh model profile data (#1802)
  • 08f6171 chore: bump vcrpy from 8.1.1 to 8.2.1 in /libs/genai (#1857)
  • f7bba53 chore: bump langgraph-checkpoint from 4.0.0 to 4.1.1 in /libs/vertexai (#1872)
  • 366dd38 chore: bump langgraph-sdk from 0.3.9 to 0.3.15 in /libs/vertexai (#1873)
  • 29780ea release(genai): 4.2.6 (#1871)
  • d2fb18c fix(genai): propagate generation config fields (#1870)
  • 3086854 fix(genai): support constructor thinking config (#1869)
  • 32b18c6 chore: bump langsmith from 0.8.0 to 0.8.18 in /libs/vertexai (#1858)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jun 1, 2026
@dependabot dependabot Bot force-pushed the dependabot/pip/langchain-ea1f28acff branch 4 times, most recently from e626dcd to 6fadb03 Compare June 12, 2026 09:25
@dependabot dependabot Bot force-pushed the dependabot/pip/langchain-ea1f28acff branch 2 times, most recently from c347be1 to 1e5c02a Compare June 24, 2026 08:20
@dependabot dependabot Bot force-pushed the dependabot/pip/langchain-ea1f28acff branch from 1e5c02a to 689183b Compare July 6, 2026 06:10
@github-actions

github-actions Bot commented Jul 6, 2026

Copy link
Copy Markdown

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 10 package(s) with unknown licenses.
See the Details below.

License Issues

requirements.txt

PackageVersionLicenseIssue Type
langchain1.3.13NullUnknown License
langchain-anthropic1.4.8NullUnknown License
langchain-core1.4.9NullUnknown License
langchain-google-genai4.2.7NullUnknown License
langchain-openai1.3.5NullUnknown License

setup.py

PackageVersionLicenseIssue Type
langchain1.3.13NullUnknown License
langchain-anthropic1.4.8NullUnknown License
langchain-core1.4.9NullUnknown License
langchain-google-genai4.2.7NullUnknown License
langchain-openai1.3.5NullUnknown License

OpenSSF Scorecard

PackageVersionScoreDetails
pip/langchain 1.3.13 UnknownUnknown
pip/langchain-anthropic 1.4.8 UnknownUnknown
pip/langchain-core 1.4.9 UnknownUnknown
pip/langchain-google-genai 4.2.7 UnknownUnknown
pip/langchain-openai 1.3.5 UnknownUnknown
pip/langchain 1.3.13 UnknownUnknown
pip/langchain-anthropic 1.4.8 UnknownUnknown
pip/langchain-core 1.4.9 UnknownUnknown
pip/langchain-google-genai 4.2.7 UnknownUnknown
pip/langchain-openai 1.3.5 UnknownUnknown

Scanned Files

  • requirements.txt
  • setup.py

… updates

Bumps the langchain group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [langchain-core](https://github.com/langchain-ai/langchain) | `1.3.3` | `1.4.9` |
| [langchain](https://github.com/langchain-ai/langchain) | `1.2.18` | `1.3.13` |
| [langchain-openai](https://github.com/langchain-ai/langchain) | `1.2.1` | `1.3.5` |
| [langchain-anthropic](https://github.com/langchain-ai/langchain) | `1.4.3` | `1.4.8` |
| [langchain-google-genai](https://github.com/langchain-ai/langchain-google) | `4.2.2` | `4.2.7` |



Updates `langchain-core` from 1.3.3 to 1.4.9
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-core==1.3.3...langchain-core==1.4.9)

Updates `langchain` from 1.2.18 to 1.3.13
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain==1.2.18...langchain==1.3.13)

Updates `langchain-openai` from 1.2.1 to 1.3.5
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-openai==1.2.1...langchain-openai==1.3.5)

Updates `langchain-anthropic` from 1.4.3 to 1.4.8
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-anthropic==1.4.3...langchain-anthropic==1.4.8)

Updates `langchain-google-genai` from 4.2.2 to 4.2.7
- [Release notes](https://github.com/langchain-ai/langchain-google/releases)
- [Commits](langchain-ai/langchain-google@libs/genai/v4.2.2...libs/genai/v4.2.7)

---
updated-dependencies:
- dependency-name: langchain
  dependency-version: 1.3.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: langchain
- dependency-name: langchain-anthropic
  dependency-version: 1.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: langchain
- dependency-name: langchain-core
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: langchain
- dependency-name: langchain-google-genai
  dependency-version: 4.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: langchain
- dependency-name: langchain-openai
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: langchain
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/pip/langchain-ea1f28acff branch from 689183b to 3a43c76 Compare July 13, 2026 06:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants