Skip to content

deps(deps): bump the langchain group with 4 updates - #115

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/langchain-9ace9d294a
Open

deps(deps): bump the langchain group with 4 updates#115
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/langchain-9ace9d294a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the langchain group with 4 updates: @langchain/core, @langchain/langgraph, @langchain/langgraph-checkpoint and @langchain/langgraph-sdk.

Updates @langchain/core from 1.2.14 to 1.2.17

Release notes

Sourced from @​langchain/core's releases.

@​langchain/core@​1.2.17

Patch Changes

  • #11849 b1d9c7a Thanks @​KyleCodes! - Preserve runtime context in ambient runnable config across tool calls, nested runnables, and streaming.

@​langchain/core@​1.2.16

Patch Changes

Commits
  • 59776b1 chore: version packages (#11874)
  • b1d9c7a fix(core): preserve ambient runtime context across tool calls (#11849)
  • 5dfb0cb chore: version packages (#11848)
  • bb50952 fix(core): expose branded class type for provider declarations (#11847)
  • 5a86552 chore: version packages (#11826)
  • 1b5ac16 fix(mcp-adapters): use a single underscore for server tool prefixes (#11845)
  • 0552450 fix(mcp-adapters): keep the SDK error as cause after an HTTP→SSE fallback (#1...
  • f2ff71c chore(deps): bump the minor-and-patch group across 1 directory with 48 update...
  • 71ede02 chore(deps): bump the build-and-test group across 1 directory with 8 updates ...
  • c4dba61 chore(deps): bump the langchain group across 1 directory with 4 updates (#11791)
  • Additional commits viewable in compare view

Updates @langchain/langgraph from 1.4.19 to 1.4.20

Release notes

Sourced from @​langchain/langgraph's releases.

@​langchain/langgraph@​1.4.20

Patch Changes

  • #2923 8adc03d Thanks @​eliornl! - give each update of a multi-update bulkUpdateState super-step its own task id, so a DeltaChannel keeps every update instead of only the first

  • #2927 46584bc Thanks @​eliornl! - don't ask the checkpointer for the history of a DeltaChannel that was never written; it is empty, and the walk for it read every ancestor of the thread on every load. Only checkpoints whose metadata has delta_writes_versioned skip it: graphs with a DeltaChannel set it on new threads, where every DeltaChannel write has a version, so threads started by earlier versions keep reading as before. updateState now versions the writes it takes from the head, which also stops PostgresSaver from dropping them, and keeps the DeltaChannel writes it makes on a new thread.

  • #2954 f9483ca Thanks @​eliornl! - exit durability no longer saves a checkpoint as its own parent when a run ends without running anything, such as replaying the newest checkpoint of a finished thread; with a DeltaChannel, reading such a thread crashed

  • Updated dependencies [8d6e6cf, 413a9c7, 67cfdd2]:

    • @​langchain/langgraph-checkpoint@​1.1.6
    • @​langchain/langgraph-sdk@​1.12.2
Changelog

Sourced from @​langchain/langgraph's changelog.

1.4.20

Patch Changes

  • #2923 8adc03d Thanks @​eliornl! - give each update of a multi-update bulkUpdateState super-step its own task id, so a DeltaChannel keeps every update instead of only the first

  • #2927 46584bc Thanks @​eliornl! - don't ask the checkpointer for the history of a DeltaChannel that was never written; it is empty, and the walk for it read every ancestor of the thread on every load. Only checkpoints whose metadata has delta_writes_versioned skip it: graphs with a DeltaChannel set it on new threads, where every DeltaChannel write has a version, so threads started by earlier versions keep reading as before. updateState now versions the writes it takes from the head, which also stops PostgresSaver from dropping them, and keeps the DeltaChannel writes it makes on a new thread.

  • #2954 f9483ca Thanks @​eliornl! - exit durability no longer saves a checkpoint as its own parent when a run ends without running anything, such as replaying the newest checkpoint of a finished thread; with a DeltaChannel, reading such a thread crashed

  • Updated dependencies [8d6e6cf, 413a9c7, 67cfdd2]:

    • @​langchain/langgraph-checkpoint@​1.1.6
    • @​langchain/langgraph-sdk@​1.12.2
Commits
  • 5abc406 chore: version packages (#2953)
  • f9483ca fix(langgraph): don't save a checkpoint as its own parent in exit durability ...
  • 8adc03d fix(langgraph): give each bulkUpdateState update its own task id (#2923)
  • 46584bc fix(langgraph): don't walk history for a DeltaChannel that was never written ...
  • See full diff in compare view

Updates @langchain/langgraph-checkpoint from 1.1.5 to 1.1.6

Release notes

Sourced from @​langchain/langgraph-checkpoint's releases.

@​langchain/langgraph-checkpoint@​1.1.6

Patch Changes

  • #2828 8d6e6cf Thanks @​byhow! - Match InMemoryStore search prefixes at namespace segment boundaries and reject colon-containing labels. Preserve unrestricted empty-prefix searches.
Changelog

Sourced from @​langchain/langgraph-checkpoint's changelog.

1.1.6

Patch Changes

  • #2828 8d6e6cf Thanks @​byhow! - Match InMemoryStore search prefixes at namespace segment boundaries and reject colon-containing labels. Preserve unrestricted empty-prefix searches.
Commits

Updates @langchain/langgraph-sdk from 1.12.1 to 1.12.2

Release notes

Sourced from @​langchain/langgraph-sdk's releases.

@​langchain/langgraph-sdk@​1.12.2

Patch Changes

  • #2944 413a9c7 Thanks @​thushanth-bengre-langchain! - fix(sdk): URL-encode caller-supplied identifiers (thread, assistant, run, cron and checkpoint IDs, subgraph namespaces) in request paths so an untrusted ID can't redirect a request to another endpoint. IDs containing reserved characters such as /, ?, #, % or spaces are now sent percent-encoded, so pass raw IDs rather than pre-encoded ones. . and .. are no longer accepted as IDs: the method rejects with an Invalid path segment error instead of sending a request.

  • #2959 67cfdd2 Thanks @​casparb! - Export the Agent Server graph factory ServerRuntime type from @langchain/langgraph-sdk.

Changelog

Sourced from @​langchain/langgraph-sdk's changelog.

1.12.2

Patch Changes

  • #2944 413a9c7 Thanks @​thushanth-bengre-langchain! - fix(sdk): URL-encode caller-supplied identifiers (thread, assistant, run, cron and checkpoint IDs, subgraph namespaces) in request paths so an untrusted ID can't redirect a request to another endpoint. IDs containing reserved characters such as /, ?, #, % or spaces are now sent percent-encoded, so pass raw IDs rather than pre-encoded ones. . and .. are no longer accepted as IDs: the method rejects with an Invalid path segment error instead of sending a request.

  • #2959 67cfdd2 Thanks @​casparb! - Export the Agent Server graph factory ServerRuntime type from @langchain/langgraph-sdk.

Commits
  • 5abc406 chore: version packages (#2953)
  • 67cfdd2 feat(sdk): export Agent Server graph factory runtime type (#2959)
  • 413a9c7 fix(sdk): URL-encode identifiers in request paths to prevent endpoint redirec...
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
deps(deps): bump the langchain group with 4 updates
97a4e48 
Bumps the langchain group with 4 updates: [@langchain/core](https://github.com/langchain-ai/langchainjs), [@langchain/langgraph](https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/langgraph-core), [@langchain/langgraph-checkpoint](https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/checkpoint) and [@langchain/langgraph-sdk](https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/sdk).


Updates `@langchain/core` from 1.2.14 to 1.2.17
- [Release notes](https://github.com/langchain-ai/langchainjs/releases)
- [Commits](https://github.com/langchain-ai/langchainjs/compare/@langchain/core@1.2.14...@langchain/core@1.2.17)

Updates `@langchain/langgraph` from 1.4.19 to 1.4.20
- [Release notes](https://github.com/langchain-ai/langgraphjs/releases)
- [Changelog](https://github.com/langchain-ai/langgraphjs/blob/main/libs/langgraph-core/CHANGELOG.md)
- [Commits](https://github.com/langchain-ai/langgraphjs/commits/@langchain/langgraph@1.4.20/libs/langgraph-core)

Updates `@langchain/langgraph-checkpoint` from 1.1.5 to 1.1.6
- [Release notes](https://github.com/langchain-ai/langgraphjs/releases)
- [Changelog](https://github.com/langchain-ai/langgraphjs/blob/main/libs/checkpoint/CHANGELOG.md)
- [Commits](https://github.com/langchain-ai/langgraphjs/commits/@langchain/langgraph-checkpoint@1.1.6/libs/checkpoint)

Updates `@langchain/langgraph-sdk` from 1.12.1 to 1.12.2
- [Release notes](https://github.com/langchain-ai/langgraphjs/releases)
- [Changelog](https://github.com/langchain-ai/langgraphjs/blob/main/libs/sdk/CHANGELOG.md)
- [Commits](https://github.com/langchain-ai/langgraphjs/commits/@langchain/langgraph-sdk@1.12.2/libs/sdk)

---
updated-dependencies:
- dependency-name: "@langchain/core"
  dependency-version: 1.2.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: langchain
- dependency-name: "@langchain/langgraph"
  dependency-version: 1.4.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: langchain
- dependency-name: "@langchain/langgraph-checkpoint"
  dependency-version: 1.1.6
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: langchain
- dependency-name: "@langchain/langgraph-sdk"
  dependency-version: 1.12.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: langchain
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file npm Pull requests that update npm dependencies labels Oct 9, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file npm Pull requests that update npm dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants