Skip to content

Bump langchain-classic from 1.0.1 to 1.0.2#5769

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/pip/langchain-classic-1.0.2
Open

Bump langchain-classic from 1.0.1 to 1.0.2#5769
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/pip/langchain-classic-1.0.2

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 9, 2026

Bumps langchain-classic from 1.0.1 to 1.0.2.

Release notes

Sourced from langchain-classic's releases.

langchain-classic==1.0.2

Changes since langchain-classic==1.0.1

release(langchain): bump langchain-classic to 1.0.2 (#35601) fix(langchain-classic): patch ReDoS vulnerability in MRKL and ReAct action regex (CVE-2024-58340) (#35598) chore: bump the langchain-deps group across 3 directories with 7 updates (#35513) chore: bump the langchain-deps group across 3 directories with 14 updates (#35441) chore: bump google-cloud-aiplatform from 1.117.0 to 1.133.0 in /libs/langchain (#35392) docs: fix docstring inaccuracies and update outdated LangSmith URLs (#35283) feat(openai): support automatic server-side compaction (#35212) chore: bump langchainhub from 0.1.18 to 0.1.21 in /libs/langchain in the langchain-deps group across 1 directory (#35280) chore: bump the langchain-deps group across 3 directories with 8 updates (#35257) style: bump ruff version to 0.15 (#35042) docs(langchain-classic): clarify MultiVectorRetriever usage (#35053) fix(langchain-classic): validate ensemble retriever weights (#35078) chore(deps): bump pillow from 11.3.0 to 12.1.1 in /libs/langchain (#35175) chore(deps): bump cryptography from 46.0.1 to 46.0.5 in /libs/langchain (#35147) chore(deps): bump the langchain-deps group across 3 directories with 40 updates (#35129) chore(deps): bump the langchain-deps group across 3 directories with 11 updates (#35121) docs(langchain-classic): warn about older create_react_agent (#35052) docs(langchain-classic): add warning for initialize_agent function (#35051) feat: support state updates from wrap_model_call with command(s) (#35033) chore: add make type target (#35015) revert: "chore: add typing target in Makefile" (#35013) chore: add typing target in Makefile (#35012) chore: enrich pyproject.toml files (#34980) chore(deps): bump the uv group across 20 directories with 3 updates (#34941) chore: upgrade urllib3 to 2.6.3 (#34940) refactor: replace print with logger.info in llm_summarization_checker (#34903) fix(langchain): fix typo 'safegaurd' -> 'safeguard' (#34789) chore(deps): bump langgraph-checkpoint from 2.1.2 to 3.0.0 in /libs/cli in the uv group across 1 directory (#34787) chore(deps): bump the uv group across 5 directories with 5 updates (#34785) chore(deps): bump the uv group across 3 directories with 1 update (#34741) chore: update twitter URLs (#34736) test(langchain): delete ontotext graphdb test (#34710) fix(core): make yield_keys prefix keyword-only to match BaseStore (#34659) chore: ban relative imports on all packages (#34691) style: bump ruff version to 0.14.11 (#34674) fix(langchain,langchain-classic): more descriptive error msg when dep is not installed (#34679) fix(langchain): correct typo 'langchain experiment' to 'langchain_experimental' in error messages (#34608) fix(infra): use langchain_v1 for dev container deps (#34534) chore(deps): bump mypy to v1.19 and ruff to v1.14 (#34521) chore(langchain-classic): bump markupsafe lock for python 3.14 (#34523) fix(langchain-classic): pass default to config.getoption (#34034) style(core): fix mypy no-any-return violations (#34204)

Commits
  • 409c20a release(langchain): bump langchain-classic to 1.0.2 (#35601)
  • 0bc8314 fix(langchain-classic): patch ReDoS vulnerability in MRKL and ReAct action re...
  • 3241d64 chore(model-profiles): refresh model profile data (#35593)
  • 86aaa8a chore: bump the minor-and-patch group across 3 directories with 3 updates (#3...
  • bb8b057 ci(infra): add top-level permissions and SHA-pin third-party actions [INF-000...
  • 53e9ca3 chore(infra): update dependabot.yml to monthly schedule with update-type spli...
  • 673737f chore: add note to release workflow (#35583)
  • 7a4cc3e fix(anthropic): update integration test (#35577)
  • f698b43 fix(openai): avoid PydanticSerializationUnexpectedValue for structured output...
  • 3101794 feat(groq): Strict Mode for Groq (#35029)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [langchain-classic](https://github.com/langchain-ai/langchain) from 1.0.1 to 1.0.2.
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-classic==1.0.1...langchain-classic==1.0.2)

---
updated-dependencies:
- dependency-name: langchain-classic
  dependency-version: 1.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Mar 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants