Skip to content

Bump langchain-classic from 1.0.1 to 1.0.2#5769

Merged
marco-c merged 1 commit intomasterfrom
dependabot/pip/langchain-classic-1.0.2
Mar 12, 2026
Merged

Bump langchain-classic from 1.0.1 to 1.0.2#5769
marco-c merged 1 commit intomasterfrom
dependabot/pip/langchain-classic-1.0.2

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 9, 2026

Bumps langchain-classic from 1.0.1 to 1.0.2.

Release notes

Sourced from langchain-classic's releases.

langchain-classic==1.0.2

Changes since langchain-classic==1.0.1

release(langchain): bump langchain-classic to 1.0.2 (#35601) fix(langchain-classic): patch ReDoS vulnerability in MRKL and ReAct action regex (CVE-2024-58340) (#35598) chore: bump the langchain-deps group across 3 directories with 7 updates (#35513) chore: bump the langchain-deps group across 3 directories with 14 updates (#35441) chore: bump google-cloud-aiplatform from 1.117.0 to 1.133.0 in /libs/langchain (#35392) docs: fix docstring inaccuracies and update outdated LangSmith URLs (#35283) feat(openai): support automatic server-side compaction (#35212) chore: bump langchainhub from 0.1.18 to 0.1.21 in /libs/langchain in the langchain-deps group across 1 directory (#35280) chore: bump the langchain-deps group across 3 directories with 8 updates (#35257) style: bump ruff version to 0.15 (#35042) docs(langchain-classic): clarify MultiVectorRetriever usage (#35053) fix(langchain-classic): validate ensemble retriever weights (#35078) chore(deps): bump pillow from 11.3.0 to 12.1.1 in /libs/langchain (#35175) chore(deps): bump cryptography from 46.0.1 to 46.0.5 in /libs/langchain (#35147) chore(deps): bump the langchain-deps group across 3 directories with 40 updates (#35129) chore(deps): bump the langchain-deps group across 3 directories with 11 updates (#35121) docs(langchain-classic): warn about older create_react_agent (#35052) docs(langchain-classic): add warning for initialize_agent function (#35051) feat: support state updates from wrap_model_call with command(s) (#35033) chore: add make type target (#35015) revert: "chore: add typing target in Makefile" (#35013) chore: add typing target in Makefile (#35012) chore: enrich pyproject.toml files (#34980) chore(deps): bump the uv group across 20 directories with 3 updates (#34941) chore: upgrade urllib3 to 2.6.3 (#34940) refactor: replace print with logger.info in llm_summarization_checker (#34903) fix(langchain): fix typo 'safegaurd' -> 'safeguard' (#34789) chore(deps): bump langgraph-checkpoint from 2.1.2 to 3.0.0 in /libs/cli in the uv group across 1 directory (#34787) chore(deps): bump the uv group across 5 directories with 5 updates (#34785) chore(deps): bump the uv group across 3 directories with 1 update (#34741) chore: update twitter URLs (#34736) test(langchain): delete ontotext graphdb test (#34710) fix(core): make yield_keys prefix keyword-only to match BaseStore (#34659) chore: ban relative imports on all packages (#34691) style: bump ruff version to 0.14.11 (#34674) fix(langchain,langchain-classic): more descriptive error msg when dep is not installed (#34679) fix(langchain): correct typo 'langchain experiment' to 'langchain_experimental' in error messages (#34608) fix(infra): use langchain_v1 for dev container deps (#34534) chore(deps): bump mypy to v1.19 and ruff to v1.14 (#34521) chore(langchain-classic): bump markupsafe lock for python 3.14 (#34523) fix(langchain-classic): pass default to config.getoption (#34034) style(core): fix mypy no-any-return violations (#34204)

Commits
  • 409c20a release(langchain): bump langchain-classic to 1.0.2 (#35601)
  • 0bc8314 fix(langchain-classic): patch ReDoS vulnerability in MRKL and ReAct action re...
  • 3241d64 chore(model-profiles): refresh model profile data (#35593)
  • 86aaa8a chore: bump the minor-and-patch group across 3 directories with 3 updates (#3...
  • bb8b057 ci(infra): add top-level permissions and SHA-pin third-party actions [INF-000...
  • 53e9ca3 chore(infra): update dependabot.yml to monthly schedule with update-type spli...
  • 673737f chore: add note to release workflow (#35583)
  • 7a4cc3e fix(anthropic): update integration test (#35577)
  • f698b43 fix(openai): avoid PydanticSerializationUnexpectedValue for structured output...
  • 3101794 feat(groq): Strict Mode for Groq (#35029)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Mar 9, 2026
suhaibmujahid
suhaibmujahid previously approved these changes Mar 12, 2026
@suhaibmujahid suhaibmujahid enabled auto-merge (squash) March 12, 2026 15:14
auto-merge was automatically disabled March 12, 2026 15:22

Head branch was modified

@dependabot dependabot bot force-pushed the dependabot/pip/langchain-classic-1.0.2 branch 3 times, most recently from 9cc3e1c to 5d3d66a Compare March 12, 2026 23:08
Bumps [langchain-classic](https://github.com/langchain-ai/langchain) from 1.0.1 to 1.0.2.
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-classic==1.0.1...langchain-classic==1.0.2)

---
updated-dependencies:
- dependency-name: langchain-classic
  dependency-version: 1.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/pip/langchain-classic-1.0.2 branch from 5d3d66a to dd287ad Compare March 12, 2026 23:10
@marco-c marco-c merged commit 10cf596 into master Mar 12, 2026
9 checks passed
@marco-c marco-c deleted the dependabot/pip/langchain-classic-1.0.2 branch March 12, 2026 23:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants