[PR #6612] fix: add msgpack allowlist #5165

Closed
opened 2026-02-20 17:51:19 -05:00 by yindo · 0 comments
Owner

Original Pull Request: https://github.com/langchain-ai/langgraph/pull/6612

State: closed
Merged: No


adds msgpack deserialization allowlist

  • add SAFE_MSGPACK_TYPES constant containing types with safe constructors . these always deserialize without warnings
  • add allowed_msgpack_modules to JsonPlusSerializer. default is True right now but will switch to None later
    • when true, warns on unregistered types
    • when None, enter strict mode and those types are blocked
    • users can set to an explicit allowlist to silence warnings

beware this involves a schema change

**Original Pull Request:** https://github.com/langchain-ai/langgraph/pull/6612 **State:** closed **Merged:** No --- adds msgpack deserialization allowlist - add SAFE_MSGPACK_TYPES constant containing types with safe constructors . these always deserialize without warnings - add allowed_msgpack_modules to JsonPlusSerializer. default is True right now but will switch to None later - when true, warns on unregistered types - when None, enter strict mode and those types are blocked - users can set to an explicit allowlist to silence warnings beware this involves a schema change
yindo added the pull-request label 2026-02-20 17:51:19 -05:00
yindo closed this issue 2026-02-20 17:51:19 -05:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: langchain-ai/langgraph#5165