deps(deps): bump langchain from 1.3.4 to 1.3.9 - #2369
Conversation
Bumps [langchain](https://github.com/langchain-ai/langchain) from 1.3.4 to 1.3.9. - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain==1.3.4...langchain==1.3.9) --- updated-dependencies: - dependency-name: langchain dependency-version: 1.3.9 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
github-actions
Bot
added
the
agents:allow-change
Automated Status SummaryHead SHA: f800659
Coverage Overview
Coverage Trend
Top Coverage Hotspots (lowest coverage)
Low Coverage Files (<50.0%)
Updated automatically; will refresh on subsequent CI/Docker completions. Keepalive checklistScopeNo scope information available Tasks
Acceptance criteria
|
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 5ac606ed11
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
|
|
||
| # LangChain integration | ||
| langchain==1.3.4 | ||
| langchain==1.3.9 |
There was a problem hiding this comment.
This new pin is installed by workflows that run pip install -r requirements.txt (for example .github/workflows/agents-auto-pilot.yml), but langchain 1.3.9's PyPI metadata requires langchain-core>=1.4.6 while requirements.txt still pins langchain-core==1.4.3 on the next line. In those installs pip has no satisfiable set, so agent/LLM jobs will fail before executing; bump the core pin and regenerate requirements.lock with the same change.
Useful? React with 👍 / 👎.
| # - Do not pin `langchain-core` directly here; let the selected `langchain` | ||
| # release resolve a mutually compatible core version. | ||
| langchain==1.3.4 | ||
| langchain==1.3.9 |
There was a problem hiding this comment.
This file is an exact template-sync source (.github/sync-manifest.yml lines 213-215), and maint-68-sync-consumer-repos.yml copies consumer files from templates/consumer-repo, where templates/consumer-repo/tools/requirements-llm.txt still says langchain==1.3.4. With only the source changed, Health 72/validate_template_sync.py will flag drift and consumer sync PRs won't deliver the bumped LLM dependency; update the template copy in the same commit.
Useful? React with 👍 / 👎.
|
Closing: Workflows moved Dependabot -> Renovate (#2385). Renovate re-proposes runtime/Actions bumps grouped + automerged. |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
1 participant
Bumps langchain from 1.3.4 to 1.3.9.
Release notes
Sourced from langchain's releases.
Commits
3bfb6a3release(langchain): 1.3.9 (#38104)dcaf779fix(langchain,anthropic): confine file-search results and tighten anthropic `...0392b6bfix(core): fix Pydantic v1 support in tools/runnable (#33698)f6d63bcrelease(langchain): 1.3.8 (#38096)5d20596style(core,langchain,langchain-classic,partners): replace double backticks in...fb55c66chore: bump langsmith from 0.8.9 to 0.8.14 in /libs/partners/huggingface (#38...51daae5chore: bump langsmith from 0.8.9 to 0.8.14 in /libs/partners/chroma (#38092)70e9579chore: bump langsmith from 0.8.9 to 0.8.14 in /libs/partners/fireworks (#38093)6c0e9afchore: bump langsmith from 0.8.9 to 0.8.14 in /libs/partners/xai (#38094)222dc84ci(infra): clarify early PR auto-close guidance (#38090)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)