chore(deps): bump the production-dependencies group across 1 directory with 17 updates by dependabot[bot] · Pull Request #87 · vectorMindsAI/vectorMindsAI-v0

dependabot · 2026-04-13T09:48:08Z

Bumps the production-dependencies group with 15 updates in the / directory:

Package	From	To
@langchain/community	`1.1.25`	`1.1.27`
@langchain/groq	`1.1.5`	`1.2.0`
@pinecone-database/pinecone	`7.1.0`	`7.2.0`
@sentry/nextjs	`10.46.0`	`10.48.0`
express-rate-limit	`8.3.1`	`8.3.2`
inngest	`4.1.0`	`4.2.1`
langchain	`1.2.37`	`1.3.1`
lucide-react	`1.7.0`	`1.8.0`
mongoose	`9.3.3`	`9.4.1`
next	`16.2.1`	`16.2.3`
posthog-js	`1.364.1`	`1.367.0`
react	`19.2.4`	`19.2.5`
react-dom	`19.2.4`	`19.2.5`
react-hook-form	`7.72.0`	`7.72.1`
react-resizable-panels	`4.8.0`	`4.10.0`

Updates @langchain/community from 1.1.25 to 1.1.27

Release notes

Sourced from @langchain/community's releases.

@langchain/community@1.1.27

Patch Changes

Updated dependencies [9270c48, 589ab9b]:

@langchain/openai@1.4.1

@langchain/core@1.1.38

@langchain/classic@1.0.27

@langchain/community@1.1.26

Patch Changes

Updated dependencies [6933769, 50d5f32, 5552999, 8331833]:

@langchain/core@1.1.37

@langchain/openai@1.4.0

@langchain/classic@1.0.26

Commits

6b914bc chore: version packages (#10553)
7ed93b8 fix(langchain): allow dynamic tools in wrapModelCall with wrapToolCall (#10543)
9270c48 fix(openai): preserve reasoning_content in ChatOpenAICompletions (#10551)
f548053 fix(langchain): bump langgraph dep (#10555)
11a295f fix(langchain): add support for dynamic structured output (#10554)
589ab9b fix(langchain): accept cross-version runnable models in createAgent (#10552)
cd86fea fix: implement tool choice required on anthropic (#10519)
b57760c chore: version packages (#10516)
6e2d29e tests(@langchain/google): Lyria 3 (#10522)
68e0a19 fix(langchain): revert zod import in utils.ts to fix v3/v4 interop (#10545)
Additional commits viewable in compare view

Updates @langchain/core from 1.1.36 to 1.1.39

Release notes

Sourced from @langchain/core's releases.

@langchain/core@1.1.39

Patch Changes

#10430 d3d0922 Thanks @christian-bromann! - feat(langchain): support for browser tools

@langchain/core@1.1.38

Patch Changes

#10552 589ab9b Thanks @christian-bromann! - fix(langchain): accept cross-version runnable models in createAgent

@langchain/core@1.1.37

Patch Changes

#10511 6933769 Thanks @hntrl! - cache Zod-to-JSON-Schema conversions in toJsonSchema()

#10541 50d5f32 Thanks @jacoblee93! - revert: Revert "feat(core): Add all chat model/llm invocation params to metadata"

#10509 5552999 Thanks @hntrl! - feat(openai): add support for phase parameter on Responses API messages

Extract phase from message output items and surface it on text content blocks

Support phase in streaming via response.output_item.added events

Round-trip phase through both raw provider and standard content paths

Move phase into extras dict in the core standard content translator

#10528 8331833 Thanks @christian-bromann! - fix(core): normalize single-block content in mergeContent

Commits

daece6d chore: version packages (#10560)
9781bff fix(google): align ChatGoogle mediaResolution with Gemini scalar type (#10550)
3bd85c1 feat(langchain): add ChatGoogle support to initChatModel (#10654)
d3d0922 feat(core): support for headless tools (#10430)
793bc69 feat(aws): impute file name for document content blocks#963 (#10658)
d6bf4fc feat(openai): impute placeholder filenames for openai file inputs (#10614)
0a7a729 fix(examples): update dependencies (#10651)
6f8dafc Bump vitest (#10649)
e89cfd2 chore(deps): bump @cloudflare/workers-types from 4.20260207.0 to 4.20260402.1...
0de2c14 chore(deps): bump @aws-sdk/client-bedrock-agent-runtime from 3.1006.0 to 3.10...
Additional commits viewable in compare view

Updates @langchain/groq from 1.1.5 to 1.2.0

Release notes

Sourced from @langchain/groq's releases.

@langchain/groq@1.2.0

Minor Changes

#10603 66effb0 Thanks @dependabot! - chore(deps): bump groq-sdk from 0.37.0 to 1.1.2

Commits

daece6d chore: version packages (#10560)
9781bff fix(google): align ChatGoogle mediaResolution with Gemini scalar type (#10550)
3bd85c1 feat(langchain): add ChatGoogle support to initChatModel (#10654)
d3d0922 feat(core): support for headless tools (#10430)
793bc69 feat(aws): impute file name for document content blocks#963 (#10658)
d6bf4fc feat(openai): impute placeholder filenames for openai file inputs (#10614)
0a7a729 fix(examples): update dependencies (#10651)
6f8dafc Bump vitest (#10649)
e89cfd2 chore(deps): bump @cloudflare/workers-types from 4.20260207.0 to 4.20260402.1...
0de2c14 chore(deps): bump @aws-sdk/client-bedrock-agent-runtime from 3.1006.0 to 3.10...
Additional commits viewable in compare view

Updates @langchain/openai from 1.3.1 to 1.4.1

Release notes

Sourced from @langchain/openai's releases.

@langchain/openai@1.4.1

Patch Changes

#10551 9270c48 Thanks @muhammadosama984! - fix(openai): preserve reasoning_content in ChatOpenAICompletions

Updated dependencies [589ab9b]:

@langchain/core@1.1.38

@langchain/openai@1.4.0

Minor Changes

#10509 5552999 Thanks @hntrl! - feat(openai): add support for phase parameter on Responses API messages

Extract phase from message output items and surface it on text content blocks

Support phase in streaming via response.output_item.added events

Round-trip phase through both raw provider and standard content paths

Move phase into extras dict in the core standard content translator

Patch Changes

Updated dependencies [6933769, 50d5f32, 5552999, 8331833]:

@langchain/core@1.1.37

Commits

6b914bc chore: version packages (#10553)
7ed93b8 fix(langchain): allow dynamic tools in wrapModelCall with wrapToolCall (#10543)
9270c48 fix(openai): preserve reasoning_content in ChatOpenAICompletions (#10551)
f548053 fix(langchain): bump langgraph dep (#10555)
11a295f fix(langchain): add support for dynamic structured output (#10554)
589ab9b fix(langchain): accept cross-version runnable models in createAgent (#10552)
cd86fea fix: implement tool choice required on anthropic (#10519)
b57760c chore: version packages (#10516)
6e2d29e tests(@langchain/google): Lyria 3 (#10522)
68e0a19 fix(langchain): revert zod import in utils.ts to fix v3/v4 interop (#10545)
Additional commits viewable in compare view

Updates @pinecone-database/pinecone from 7.1.0 to 7.2.0

Release notes

Sourced from @pinecone-database/pinecone's releases.

Release v7.2.0

Streaming file uploads for Assistant

uploadFile now accepts a Buffer, Blob, or Node.js ReadableStream directly, in addition to the existing local file path. This makes it possible to forward an incoming HTTP upload to the Assistant without writing the file to disk or buffering it in memory first.
// Existing path-based usage — unchanged
await assistant.uploadFile({ path: 'report.pdf' });
// New: upload from a Buffer (e.g. multer memory storage)
await assistant.uploadFile({
file: req.file.buffer,
fileName: req.file.originalname,
});
// New: upload from a ReadableStream (zero server-side buffering)
await assistant.uploadFile({
file: req.file.stream,
fileName: req.file.filename,
});
When a ReadableStream is provided, the file is streamed directly to Pinecone without ever being fully loaded into memory. This eliminates the out-of-memory pressure that previously made it necessary to limit concurrent upload requests on memory-constrained servers.

Note: ReadableStream inputs do not support automatic retries, since the stream is consumed after the first read. Buffer and Blob inputs continue to retry on server errors as before.

The path-based upload path also switches from a synchronous file read (fs.readFileSync) to an async one, so it no longer blocks the Node.js event loop while reading large files.

New type export

Uploadable (Buffer | Blob | NodeJS.ReadableStream) is now exported from the package for use in application-level type annotations.

What's Changed

docs(assistant): file management idempotency - file identifiers, upsert by @andrewyu47 in pinecone-io/pinecone-ts-client#381

Revert "docs(assistant): file management idempotency - file identifiers, upsert" by @andrewyu47 in pinecone-io/pinecone-ts-client#382

feat(assistant): support Buffer, Blob, and ReadableStream inputs for uploadFile by @austin-denoble in pinecone-io/pinecone-ts-client#383

New Contributors

@andrewyu47 made their first contribution in pinecone-io/pinecone-ts-client#381

Full Changelog: pinecone-io/pinecone-ts-client@v7.1.0...v7.2.0

Commits

a7e2612 [skip ci] Publish release v7.2.0
64c89d4 feat(assistant): support Buffer, Blob, and ReadableStream inputs for uploadFi...
e98d145 Revert "docs(assistant): file management idempotency - file identifiers, upse...
ad00ab0 docs(assistant): file management idempotency - file identifiers, upsert (#381)
See full diff in compare view

Updates @sentry/nextjs from 10.46.0 to 10.48.0

Release notes

Sourced from @sentry/nextjs's releases.

10.48.0

Important Changes
feat(aws-serverless): Ship Lambda extension in npm package for container image Lambdas (#20133)

The Sentry Lambda extension is now included in the npm package, enabling container image-based Lambda functions to use it. Copy the extension files into your Docker image and set the tunnel option:
RUN mkdir -p /opt/sentry-extension
COPY node_modules/@sentry/aws-serverless/build/lambda-extension/sentry-extension /opt/extensions/sentry-extension
COPY node_modules/@sentry/aws-serverless/build/lambda-extension/index.mjs /opt/sentry-extension/index.mjs
RUN chmod +x /opt/extensions/sentry-extension /opt/sentry-extension/index.mjs
Sentry.init({
  dsn: '__DSN__',
  tunnel: 'http://localhost:9000/envelope',
});
This works with any Sentry SDK (@sentry/aws-serverless, @sentry/sveltekit, @sentry/node, etc.).
feat(cloudflare): Support basic WorkerEntrypoint (#19884)

withSentry now supports instrumenting classes extending Cloudflare's WorkerEntrypoint. This instruments fetch, scheduled, queue, and tail handlers.
import * as Sentry from '@sentry/cloudflare';
import { WorkerEntrypoint } from 'cloudflare:workers';
class MyWorker extends WorkerEntrypoint {
async fetch(request: Request): Promise<Response> {
return new Response('Hello World!');
}
}
export default Sentry.withSentry(env => ({ dsn: env.SENTRY_DSN, tracesSampleRate: 1.0 }), MyWorker);
ref(core): Unify .do* span ops to gen_ai.generate_content (#20074)

All Vercel AI do* spans (ai.generateText.doGenerate, ai.streamText.doStream, ai.generateObject.doGenerate, ai.streamObject.doStream) now use a single unified span op gen_ai.generate_content instead of separate ops like gen_ai.generate_text, gen_ai.stream_text, gen_ai.generate_object, and gen_ai.stream_object.

ref(core): Remove provider-specific AI span attributes in favor of gen_ai attributes in sentry conventions (#20011)

The following provider-specific span attributes have been removed from the OpenAI and Anthropic AI integrations. Use the standardized gen_ai.* equivalents instead:

Removed attribute Replacement

... (truncated)

Changelog

Sourced from @sentry/nextjs's changelog.

10.48.0

Important Changes
feat(aws-serverless): Ship Lambda extension in npm package for container image Lambdas (#20133)

The Sentry Lambda extension is now included in the npm package, enabling container image-based Lambda functions to use it. Copy the extension files into your Docker image and set the tunnel option:
RUN mkdir -p /opt/sentry-extension
COPY node_modules/@sentry/aws-serverless/build/lambda-extension/sentry-extension /opt/extensions/sentry-extension
COPY node_modules/@sentry/aws-serverless/build/lambda-extension/index.mjs /opt/sentry-extension/index.mjs
RUN chmod +x /opt/extensions/sentry-extension /opt/sentry-extension/index.mjs
Sentry.init({
  dsn: '__DSN__',
  tunnel: 'http://localhost:9000/envelope',
});
This works with any Sentry SDK (@sentry/aws-serverless, @sentry/sveltekit, @sentry/node, etc.).
feat(cloudflare): Support basic WorkerEntrypoint (#19884)

withSentry now supports instrumenting classes extending Cloudflare's WorkerEntrypoint. This instruments fetch, scheduled, queue, and tail handlers.
import * as Sentry from '@sentry/cloudflare';
import { WorkerEntrypoint } from 'cloudflare:workers';
class MyWorker extends WorkerEntrypoint {
async fetch(request: Request): Promise<Response> {
return new Response('Hello World!');
}
}
export default Sentry.withSentry(env => ({ dsn: env.SENTRY_DSN, tracesSampleRate: 1.0 }), MyWorker);
ref(core): Unify .do* span ops to gen_ai.generate_content (#20074)

All Vercel AI do* spans (ai.generateText.doGenerate, ai.streamText.doStream, ai.generateObject.doGenerate, ai.streamObject.doStream) now use a single unified span op gen_ai.generate_content instead of separate ops like gen_ai.generate_text, gen_ai.stream_text, gen_ai.generate_object, and gen_ai.stream_object.

ref(core): Remove provider-specific AI span attributes in favor of gen_ai attributes in sentry conventions (#20011)

The following provider-specific span attributes have been removed from the OpenAI and Anthropic AI integrations. Use the standardized gen_ai.* equivalents instead:

| Removed attribute | Replacement |

... (truncated)

Commits

a67df4d release: 10.48.0
e0732ff Merge pull request #20172 from getsentry/prepare-release/10.48.0
d1ee40f meta(changelog): Update changelog for 10.48.0
2897297 feat(nuxt): Exclude tracing meta tags on cached pages in Nuxt 5 (#20168)
1cc3dd0 chore(deps-dev): Bump effect from 3.20.0 to 3.21.0 (#19999)
c273167 fix(core): Fix withStreamedSpan typing error add missing exports (#20124)
b6f7b86 feat(core): Apply ignoreSpans to streamed spans (#19934)
7bd8449 test(node,node-core): Add span streaming integration tests (#19806)
51fc6d1 feat(node-core): Add POtel server-side span streaming implementation (#19741)
77357c7 fix(core): Replace global interval with trace-specific interval based flushin...
Additional commits viewable in compare view

Updates express-rate-limit from 8.3.1 to 8.3.2

Release notes

Sourced from express-rate-limit's releases.

v8.3.2

You can view the changelog here.

Commits

c4dbb42 8.3.2
8f1cc66 v8.3.2 changelog
601b87f Fix skipFailedRequests for for connections that close very early (#611)
014c2f3 chore(deps-dev): bump the development-dependencies group with 6 updates (#612)
4e8b18b Remove Zuplo sponsorship details from README (#613)
31dab19 test: use numeric range for reset timestamp assertion (#610)
f82ad13 chore(deps-dev): bump the development-dependencies group with 2 updates (#609)
fa0b098 docs: fix broken link
See full diff in compare view

Updates inngest from 4.1.0 to 4.2.1

Release notes

Sourced from inngest's releases.

inngest@4.2.1

Patch Changes

#1453 3645404f Thanks @amh4r! - Add default checkpointing maxRuntime

inngest@4.2.0

Minor Changes

#1424 14fc7ef4 Thanks @Linell! - Add streaming support to Durable Endpoints

inngest@4.1.2

Patch Changes

#1435 d8fc84b2 Thanks @KiKoS0! - Fix Connect worker blocking flushing & termination issues

#1437 ad7ae27a Thanks @amh4r! - Fix worker thread strategy missing graceful shutdown

inngest@4.1.1

Patch Changes

#1420 38c6e27c Thanks @BrunoScheufler! - Connect: Refactor internal architecture

#1412 556a32eb Thanks @rhino1998! - Extended Traces: Include step attributes in userland spans

#1414 7e699a06 Thanks @rhino1998! - Step Metadata: Collapse step/step_attempt behavior

#1418 31300308 Thanks @BrunoScheufler! - Fix graceful shutdown cleanup in case of draining connection replacement

494364eb Thanks @jpwilliams! - Fix type exports not being available for composite: true projects

Changelog

Sourced from inngest's changelog.

4.2.1

Patch Changes

#1453 3645404f Thanks @amh4r! - Add default checkpointing maxRuntime

4.2.0

Minor Changes

#1424 14fc7ef4 Thanks @Linell! - Add streaming support to Durable Endpoints

4.1.2

Patch Changes

#1435 d8fc84b2 Thanks @KiKoS0! - Fix Connect worker blocking flushing & termination issues

#1437 ad7ae27a Thanks @amh4r! - Fix worker thread strategy missing graceful shutdown

4.1.1

Patch Changes

#1420 38c6e27c Thanks @BrunoScheufler! - Connect: Refactor internal architecture

#1412 556a32eb Thanks @rhino1998! - Extended Traces: Include step attributes in userland spans

#1414 7e699a06 Thanks @rhino1998! - Step Metadata: Collapse step/step_attempt behavior

#1418 31300308 Thanks @BrunoScheufler! - Fix graceful shutdown cleanup in case of draining connection replacement

494364eb Thanks @jpwilliams! - Fix type exports not being available for composite: true projects

Commits

d1f0888 Release @latest (#1454)
3645404 Add default checkpointing maxRuntime (#1453)
462fc93 Release @latest (#1449)
14fc7ef Durable Endpoint Streaming via SSE (#1424)
d15d974 Release @latest (#1438)
d8fc84b Fix Connect worker termination issues (#1435)
ad7ae27 Fix worker thread strategy missing graceful shutdown (#1437)
bee549f Release @latest (#1413)
da69c41 Add optional metadata to OutgoingOp and FoundStep interfaces for checkpoint p...
4b24e5e Fix/composite project type exports 2 (#1433)
Additional commits viewable in compare view

Updates langchain from 1.2.37 to 1.3.1

Release notes

Sourced from langchain's releases.

langchain@1.3.1

Patch Changes

#10673 f069365 Thanks @hntrl! - bump langgraph dependency to 1.2.8

langchain@1.3.0

Minor Changes

#10430 d3d0922 Thanks @christian-bromann! - feat(langchain): support for browser tools

Patch Changes

#10591 d7a98cd Thanks @christian-bromann! - feat: add @langchain/perplexity standalone provider package

#10594 884c2d3 Thanks @christian-bromann! - feat(fireworks): extract standalone provider package

#10593 0fb6fa4 Thanks @christian-bromann! - feat(together-ai): migrate Together AI into provider package

#10654 3bd85c1 Thanks @jabiinfante! - feat(langchain): add ChatGoogle support to initChatModel

Updated dependencies [d3d0922]:

@langchain/core@1.1.39

langchain@1.2.39

Patch Changes

#10543 7ed93b8 Thanks @pawel-twardziak! - fix(langchain): allow dynamic tools in wrapModelCall with wrapToolCall

#10554 11a295f Thanks @christian-bromann! - fix(langchain): add support for dynamic structured output

#10555 f548053 Thanks @christian-bromann! - fix(langchain): bump langgraph dep

#10552 589ab9b Thanks @christian-bromann! - fix(langchain): accept cross-version runnable models in createAgent

Updated dependencies [589ab9b]:

@langchain/core@1.1.38

langchain@1.2.38

Patch Changes

#10527 3408008 Thanks @pawel-twardziak! - fix(langchain): export createAgent and prebuilt middleware from browser entry point

#10545 68e0a19 Thanks @JadenKim-dev! - fix(langchain): revert zod import in utils.ts to fix v3/v4 interop

Updated dependencies [6933769, 50d5f32, 5552999, 8331833]:

@langchain/core@1.1.37

Commits

9a65edf chore: version packages (#10671)
f069365 chore(langchain): bump langgraph (#10673)
6b8ef6c fix(openai): preserve plain string responses content (#10670)
80561a0 chore: remove community package, relocate providers (#10667)
f09cb65 fix: patch 10 critical+high security alerts (#10557)
47cc3ec fix: patch 16 security alerts (all severities) (#10663)
daece6d chore: version packages (#10560)
9781bff fix(google): align ChatGoogle mediaResolution with Gemini scalar type (#10550)
3bd85c1 feat(langchain): add ChatGoogle support to initChatModel (#10654)
d3d0922 feat(core): support for headless tools (#10430)
Additional commits viewable in compare view

Updates lucide-react from 1.7.0 to 1.8.0

Release notes

Sourced from lucide-react's releases.

Version 1.8.0

What's Changed

docs(packages/angular): add packageDirname for @lucide/angular by @rhutchison in lucide-icons/lucide#4211

chore(icons): Username change knarlix to RajnishKMehta by @RajnishKMehta in lucide-icons/lucide#4208

ci(@lucide/angular): Fix publishing problem by @ericfennis in lucide-icons/lucide#4213

docs: fix broken links in pull_request_template.md (got 404 page) by @whoisBugsbunny in lucide-icons/lucide#4224

fix(lucide-static): add viewBox to sprite symbol elements by @TomaTV in lucide-icons/lucide#4223

docs: Fix link to icon design principles in statement by @whoisBugsbunny in lucide-icons/lucide#4225

feat(docs): add Zephyr Cloud to Hero Backers tier by @karsa-mistmere in lucide-icons/lucide#4226

fix(icons): fixes gap issues in radio-off.svg by @karsa-mistmere in lucide-icons/lucide#4227

fix(icons): renamed text-select to square-dashed-text by @jguddas in lucide-icons/lucide#3943

fix(docs): improve mobile layout of v1 banner by @karsa-mistmere in lucide-icons/lucide#4254

fix(@lucide/svelte): aria-hidden="true" was never set by @blt-r in lucide-icons/lucide#4234

fix(icons): remove ui/ux tag from heart-minus, add delete instead by @karsa-mistmere in lucide-icons/lucide#4266

chore(deps-dev): bump vite from 7.3.1 to 7.3.2 by @dependabot[bot] in lucide-icons/lucide#4276

chore(deps): bump lodash-es from 4.17.23 to 4.18.1 by @dependabot[bot] in lucide-icons/lucide#4251

chore(deps): bump vite from 5.4.21 to 6.4.2 by @dependabot[bot] in lucide-icons/lucide#4286

feat(docs): use initOnMounted: true for useSessionStorage in CarbonAdOverlay by @karsa-mistmere in lucide-icons/lucide#4275

feat(icons): added bookmark-off icon by @ZeenatLawal in lucide-icons/lucide#4283

New Contributors

@rhutchison made their first contribution in lucide-icons/lucide#4211

@whoisBugsbunny made their first contribution in lucide-icons/lucide#4224

@TomaTV made their first contribution in lucide-icons/lucide#4223

@blt-r made their first contribution in lucide-icons/lucide#4234

@ZeenatLawal made their first contribution in lucide-icons/lucide#4283

Full Changelog: lucide-icons/lucide@1.7.0...1.8.0

Commits

7623e23 feat(docs): add Zephyr Cloud to Hero Backers tier & rework updateSponsors scr...
See full diff in compare view

Updates mongoose from 9.3.3 to 9.4.1

Release notes

Sourced from mongoose's releases.

9.4.1 / 2026-04-03

Revert "fix(setDefaultsOnInsert): run setters on default values during upsert" #16218 #16051

9.4.0 / 2026-04-03

perf(document+model): avoid parallel save error instantiation, simplify resetting atomics, streamline validation and collection handling

feat(document): add $getChanges() alias, deprecate getChanges() #15959 techcodie

fix(schema): support toJSONSchema on unions #16179

fix(schema): implement validation for Union schemas and subdocuments techcodie

fix(connection): snapshot Date in heartbeat handler and flush queue on recovery #16183 andreialecu

fix(model): use duck-typing with version check to validate the argument to useConnection() is actually a connection #16098

fix(setD...
Description has been truncated

…y with 17 updates Bumps the production-dependencies group with 15 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@langchain/community](https://github.com/langchain-ai/langchainjs) | `1.1.25` | `1.1.27` | | [@langchain/groq](https://github.com/langchain-ai/langchainjs) | `1.1.5` | `1.2.0` | | [@pinecone-database/pinecone](https://github.com/pinecone-io/pinecone-ts-client) | `7.1.0` | `7.2.0` | | [@sentry/nextjs](https://github.com/getsentry/sentry-javascript) | `10.46.0` | `10.48.0` | | [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) | `8.3.1` | `8.3.2` | | [inngest](https://github.com/inngest/inngest-js/tree/HEAD/packages/inngest) | `4.1.0` | `4.2.1` | | [langchain](https://github.com/langchain-ai/langchainjs) | `1.2.37` | `1.3.1` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.7.0` | `1.8.0` | | [mongoose](https://github.com/Automattic/mongoose) | `9.3.3` | `9.4.1` | | [next](https://github.com/vercel/next.js) | `16.2.1` | `16.2.3` | | [posthog-js](https://github.com/PostHog/posthog-js) | `1.364.1` | `1.367.0` | | [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.4` | `19.2.5` | | [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.4` | `19.2.5` | | [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.72.0` | `7.72.1` | | [react-resizable-panels](https://github.com/bvaughn/react-resizable-panels) | `4.8.0` | `4.10.0` | Updates `@langchain/community` from 1.1.25 to 1.1.27 - [Release notes](https://github.com/langchain-ai/langchainjs/releases) - [Commits](https://github.com/langchain-ai/langchainjs/compare/@langchain/community@1.1.25...@langchain/community@1.1.27) Updates `@langchain/core` from 1.1.36 to 1.1.39 - [Release notes](https://github.com/langchain-ai/langchainjs/releases) - [Commits](https://github.com/langchain-ai/langchainjs/compare/@langchain/core@1.1.36...@langchain/core@1.1.39) Updates `@langchain/groq` from 1.1.5 to 1.2.0 - [Release notes](https://github.com/langchain-ai/langchainjs/releases) - [Commits](https://github.com/langchain-ai/langchainjs/compare/@langchain/groq@1.1.5...@langchain/groq@1.2.0) Updates `@langchain/openai` from 1.3.1 to 1.4.1 - [Release notes](https://github.com/langchain-ai/langchainjs/releases) - [Commits](https://github.com/langchain-ai/langchainjs/compare/@langchain/openai@1.3.1...@langchain/openai@1.4.1) Updates `@pinecone-database/pinecone` from 7.1.0 to 7.2.0 - [Release notes](https://github.com/pinecone-io/pinecone-ts-client/releases) - [Commits](pinecone-io/pinecone-ts-client@v7.1.0...v7.2.0) Updates `@sentry/nextjs` from 10.46.0 to 10.48.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@10.46.0...10.48.0) Updates `express-rate-limit` from 8.3.1 to 8.3.2 - [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases) - [Commits](express-rate-limit/express-rate-limit@v8.3.1...v8.3.2) Updates `inngest` from 4.1.0 to 4.2.1 - [Release notes](https://github.com/inngest/inngest-js/releases) - [Changelog](https://github.com/inngest/inngest-js/blob/main/packages/inngest/CHANGELOG.md) - [Commits](https://github.com/inngest/inngest-js/commits/inngest@4.2.1/packages/inngest) Updates `langchain` from 1.2.37 to 1.3.1 - [Release notes](https://github.com/langchain-ai/langchainjs/releases) - [Commits](https://github.com/langchain-ai/langchainjs/compare/langchain@1.2.37...langchain@1.3.1) Updates `lucide-react` from 1.7.0 to 1.8.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.8.0/packages/lucide-react) Updates `mongoose` from 9.3.3 to 9.4.1 - [Release notes](https://github.com/Automattic/mongoose/releases) - [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md) - [Commits](Automattic/mongoose@9.3.3...9.4.1) Updates `next` from 16.2.1 to 16.2.3 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v16.2.1...v16.2.3) Updates `posthog-js` from 1.364.1 to 1.367.0 - [Release notes](https://github.com/PostHog/posthog-js/releases) - [Changelog](https://github.com/PostHog/posthog-js/blob/main/CHANGELOG.md) - [Commits](https://github.com/PostHog/posthog-js/compare/posthog-js@1.364.1...posthog-js@1.367.0) Updates `react` from 19.2.4 to 19.2.5 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.5/packages/react) Updates `react-dom` from 19.2.4 to 19.2.5 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.5/packages/react-dom) Updates `react-hook-form` from 7.72.0 to 7.72.1 - [Release notes](https://github.com/react-hook-form/react-hook-form/releases) - [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md) - [Commits](react-hook-form/react-hook-form@v7.72.0...v7.72.1) Updates `react-resizable-panels` from 4.8.0 to 4.10.0 - [Release notes](https://github.com/bvaughn/react-resizable-panels/releases) - [Changelog](https://github.com/bvaughn/react-resizable-panels/blob/main/CHANGELOG.md) - [Commits](bvaughn/react-resizable-panels@4.8.0...4.10.0) --- updated-dependencies: - dependency-name: "@langchain/community" dependency-version: 1.1.27 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@langchain/core" dependency-version: 1.1.39 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@langchain/groq" dependency-version: 1.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@langchain/openai" dependency-version: 1.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@pinecone-database/pinecone" dependency-version: 7.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@sentry/nextjs" dependency-version: 10.48.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: express-rate-limit dependency-version: 8.3.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: inngest dependency-version: 4.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: langchain dependency-version: 1.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: lucide-react dependency-version: 1.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: mongoose dependency-version: 9.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: next dependency-version: 16.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: posthog-js dependency-version: 1.367.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: react dependency-version: 19.2.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: react-dom dependency-version: 19.2.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: react-hook-form dependency-version: 7.72.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: react-resizable-panels dependency-version: 4.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-04-13T09:48:09Z

Assignees

The following users could not be added as assignees: vectorMindsAI. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

vanshaj2023 merged commit bc025c5 into main Apr 16, 2026
5 of 17 checks passed

dependabot Bot deleted the dependabot/npm_and_yarn/production-dependencies-fdf4650c5b branch April 16, 2026 17:31

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the production-dependencies group across 1 directory with 17 updates#87

chore(deps): bump the production-dependencies group across 1 directory with 17 updates#87
vanshaj2023 merged 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-fdf4650c5b

dependabot Bot commented on behalf of github Apr 13, 2026

Uh oh!

dependabot Bot commented on behalf of github Apr 13, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Apr 13, 2026

@​langchain/community@​1.1.27

Patch Changes

@​langchain/community@​1.1.26

Patch Changes

@​langchain/core@​1.1.39

Patch Changes

@​langchain/core@​1.1.38

Patch Changes

@​langchain/core@​1.1.37

Patch Changes

@​langchain/groq@​1.2.0

Minor Changes

@​langchain/openai@​1.4.1

Patch Changes

@​langchain/openai@​1.4.0

Minor Changes

Patch Changes

Release v7.2.0

Streaming file uploads for Assistant

New type export

What's Changed

New Contributors

10.48.0

Important Changes

10.48.0

Important Changes

v8.3.2

inngest@4.2.1

Patch Changes

inngest@4.2.0

Minor Changes

inngest@4.1.2

Patch Changes

inngest@4.1.1

Patch Changes

4.2.1

Patch Changes

4.2.0

Minor Changes

4.1.2

Patch Changes

4.1.1

Patch Changes

langchain@1.3.1

Patch Changes

langchain@1.3.0

Minor Changes

Patch Changes

langchain@1.2.39

Patch Changes

langchain@1.2.38

Patch Changes

Version 1.8.0

What's Changed

New Contributors

9.4.1 / 2026-04-03

9.4.0 / 2026-04-03

Uh oh!

dependabot Bot commented on behalf of github Apr 13, 2026

Assignees

Labels

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`@langchain/community@1`.1.27

`@langchain/community@1`.1.26

`@langchain/core@1`.1.39

`@langchain/core@1`.1.38

`@langchain/core@1`.1.37

`@langchain/groq@1`.2.0

`@langchain/openai@1`.4.1

`@langchain/openai@1`.4.0