Bump langchain from 1.2.15 to 1.3.11 by dependabot[bot] · Pull Request #243 · Integration-Automation/JEDITOR

dependabot · 2026-06-23T11:23:04Z

Bumps langchain from 1.2.15 to 1.3.11.

Release notes

langchain==1.3.11

Changes since langchain==1.3.10

release(langchain): 1.3.11 (#38377) fix(langchain,openai): only set strict=True on tools for OpenAI-compatible models in ProviderStrategy (#38370) chore: bump pydantic-settings from 2.12.0 to 2.14.2 in /libs/langchain_v1 (#38279) chore: bump vcrpy from 8.1.1 to 8.2.1 in /libs/langchain_v1 (#38280) chore: bump langsmith from 0.8.9 to 0.8.18 in /libs/langchain_v1 (#38281) docs(langchain): document summarization prompt contract (#38256)

langchain==1.3.10

Changes since langchain==1.3.9

release(langchain): 1.3.10 (#38255) chore: bump cryptography from 46.0.7 to 48.0.1 in /libs/langchain_v1 (#38176) chore: bump aiohttp from 3.14.0 to 3.14.1 in /libs/langchain_v1 (#38179) fix(langchain): switch summary format (#38171) fix(langchain): detect provider strategy for dated gpt-5.2/gpt-5.4 snapshots (#38222) chore(langchain): improve typing in tests (#38163) chore: bump pyjwt from 2.12.0 to 2.13.0 in /libs/langchain_v1 (#38168) release(openai): 1.3.2 (#38130) hotfix(openai): switch version (#38123) release(openai): 1.4.0 (#38120) docs: refresh README installation and resources (#38119) test(core,langchain): update tests for explicit deserialization allowlists (#38118) release(core): 1.4.7 (#38111) release(anthropic): 1.4.6 (#38105)

langchain==1.3.9

Changes since langchain==1.3.8

release(anthropic): 1.4.6 (#38105) release(langchain): 1.3.9 (#38104) fix(langchain,anthropic): confine file-search results and tighten anthropic allowed_prefixes (#38106)

langchain==1.3.8

Changes since langchain==1.3.7

release(langchain): 1.3.8 (#38096) style(core,langchain,langchain-classic,partners): replace double backticks in docstrings (#38095) release(core): 1.4.6 (#38061) chore(langchain): add overloads to create_agent (#34309) chore(infra): bump mypy to 2.1 and unify type-check config across the monorepo (#36470) fix(langchain): support async middleware decorator typing (#34584) fix(langchain): tighten structured output model fallbacks (#38042) release(anthropic): 1.4.5 (#38036) hotfix(core): bump lockfile(s) (#38032) refactor(langchain): refactor test_create_agent_tool_validation (#34443)

langchain==1.3.7

... (truncated)

Commits

83e8249 release(langchain): 1.3.11 (#38377)
6dd45c9 hotfix(anthropic): regenerate cassette (#38376)
4a83756 release(openai): 1.3.3 (#38375)
792c1a7 fix(openai): drop response item ids when store is false (#38372)
9f7e46f release(anthropic): 1.4.7 (#38373)
9ef324c fix(langchain,openai): only set strict=True on tools for OpenAI-compatible ...
05b5af1 chore(infra): update workflow key name (#38367)
8e81774 test(groq): xfail flaky tool choice test (#38365)
946fbbb fix(groq): replace deprecated Groq llama models (#38363)
d11b1fc chore(model-profiles): refresh model profile data (#38341)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [langchain](https://github.com/langchain-ai/langchain) from 1.2.15 to 1.3.11. - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain==1.2.15...langchain==1.3.11) --- updated-dependencies: - dependency-name: langchain dependency-version: 1.3.11 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>

sonarqubecloud · 2026-06-23T11:23:54Z

Quality Gate failed

Failed conditions
C Security Rating on New Code (required ≥ A)

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE

codacy-production · 2026-06-23T11:24:42Z

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric Results

Complexity 0

Duplication 0

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer}
_{TIP This summary will be updated as you push new changes.}

JE-Chen · 2026-08-02T19:39:17Z

Superseded by #255, which removed the langchain dependency outright rather than upgrading it.

Nothing in the project imported langchain: the AI widget uses langchain_core.prompts and langchain_openai, and langchain_openai depends on langchain-core rather than langchain. Upgrading would have shipped a newer copy of code that never runs, and langchain 1.3.x additionally requires langgraph. Removing it takes CVE-2026-55443 out of the install altogether; langchain_core is now declared directly, since it is imported directly.

dependabot · 2026-08-02T19:39:20Z

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jun 23, 2026

dependabot Bot mentioned this pull request Jun 23, 2026

Bump langchain from 1.2.15 to 1.3.10 #242

Closed

JE-Chen mentioned this pull request Aug 2, 2026

Add an architecture record, rewrite the README around real screenshots, and clear the analyser backlog #255

Merged

JE-Chen closed this Aug 2, 2026

dependabot Bot deleted the dependabot/pip/langchain-1.3.11 branch August 2, 2026 19:39

Navigation Menu

Uh oh!

Bump langchain from 1.2.15 to 1.3.11 - #243

Bump langchain from 1.2.15 to 1.3.11#243
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/langchain-1.3.11

dependabot Bot commented on behalf of github Jun 23, 2026

Uh oh!

sonarqubecloud Bot commented Jun 23, 2026

Uh oh!

codacy-production Bot commented Jun 23, 2026

Uh oh!

JE-Chen commented Aug 2, 2026

Uh oh!

dependabot Bot commented on behalf of github Aug 2, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jun 23, 2026

langchain==1.3.11

langchain==1.3.10

langchain==1.3.9

langchain==1.3.8

langchain==1.3.7

Uh oh!

sonarqubecloud Bot commented Jun 23, 2026

Quality Gate failed

Uh oh!

codacy-production Bot commented Jun 23, 2026

Up to standards ✅

Uh oh!

JE-Chen commented Aug 2, 2026

Uh oh!

dependabot Bot commented on behalf of github Aug 2, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant