62 Commits

Author SHA1 Message Date
John Kennedy a9669df57f Merge pull request #36 from langchain-ai/dependabot/npm_and_yarn/langsmith-0.7.0
chore(deps): bump langsmith from 0.5.11 to 0.7.5
2026-06-07 14:43:43 -07:00
dependabot[bot] 2eb973ba6c chore(deps): bump langsmith from 0.5.11 to 0.7.5
Bumps [langsmith](https://github.com/langchain-ai/langsmith-sdk) from 0.5.11 to 0.7.5.
- [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases)
- [Commits](https://github.com/langchain-ai/langsmith-sdk/commits/v0.7.5)

---
updated-dependencies:
- dependency-name: langsmith
  dependency-version: 0.7.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-07 21:42:48 +00:00
John Kennedy 5f7701dfcc Merge pull request #33 from langchain-ai/dependabot/npm_and_yarn/minor-and-patch-a56eaf0145
chore(deps): bump the minor-and-patch group across 1 directory with 6 updates
2026-06-07 14:40:55 -07:00
John Kennedy 30c4107e62 Merge pull request #30 from langchain-ai/dependabot/npm_and_yarn/eslint-config-prettier-10.1.8
chore(deps-dev): bump eslint-config-prettier from 8.10.0 to 10.1.8
2026-06-07 14:40:47 -07:00
John Kennedy 86e2d429e3 Merge pull request #28 from langchain-ai/dependabot/npm_and_yarn/eslint-plugin-prettier-5.5.5
chore(deps-dev): bump eslint-plugin-prettier from 4.2.1 to 5.5.5
2026-06-07 14:40:40 -07:00
dependabot[bot] 5b1a163ceb chore(deps): bump the minor-and-patch group across 1 directory with 6 updates
Bumps the minor-and-patch group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@langchain/core](https://github.com/langchain-ai/langchainjs) | `1.1.36` | `1.1.42` |
| [@langchain/langgraph](https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/langgraph-core) | `1.2.5` | `1.2.9` |
| [zod](https://github.com/colinhacks/zod) | `4.3.6` | `4.4.2` |
| [dotenv](https://github.com/motdotla/dotenv) | `17.3.1` | `17.4.2` |
| [prettier](https://github.com/prettier/prettier) | `3.8.1` | `3.8.3` |
| [ts-jest](https://github.com/kulshekhar/ts-jest) | `29.4.6` | `29.4.9` |



Updates `@langchain/core` from 1.1.36 to 1.1.42
- [Release notes](https://github.com/langchain-ai/langchainjs/releases)
- [Commits](https://github.com/langchain-ai/langchainjs/commits)

Updates `@langchain/langgraph` from 1.2.5 to 1.2.9
- [Release notes](https://github.com/langchain-ai/langgraphjs/releases)
- [Changelog](https://github.com/langchain-ai/langgraphjs/blob/main/libs/langgraph-core/CHANGELOG.md)
- [Commits](https://github.com/langchain-ai/langgraphjs/commits/@langchain/langgraph@1.2.9/libs/langgraph-core)

Updates `zod` from 4.3.6 to 4.4.2
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](https://github.com/colinhacks/zod/compare/v4.3.6...v4.4.2)

Updates `dotenv` from 17.3.1 to 17.4.2
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](https://github.com/motdotla/dotenv/compare/v17.3.1...v17.4.2)

Updates `prettier` from 3.8.1 to 3.8.3
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/prettier/compare/3.8.1...3.8.3)

Updates `ts-jest` from 29.4.6 to 29.4.9
- [Release notes](https://github.com/kulshekhar/ts-jest/releases)
- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/kulshekhar/ts-jest/compare/v29.4.6...v29.4.9)

---
updated-dependencies:
- dependency-name: "@langchain/core"
  dependency-version: 1.1.42
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@langchain/langgraph"
  dependency-version: 1.2.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: zod
  dependency-version: 4.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: dotenv
  dependency-version: 17.4.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: prettier
  dependency-version: 3.8.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: ts-jest
  dependency-version: 29.4.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-01 23:11:24 +00:00
dependabot[bot] d521cd8a88 chore(deps-dev): bump eslint-config-prettier from 8.10.0 to 10.1.8
Bumps [eslint-config-prettier](https://github.com/prettier/eslint-config-prettier) from 8.10.0 to 10.1.8.
- [Release notes](https://github.com/prettier/eslint-config-prettier/releases)
- [Changelog](https://github.com/prettier/eslint-config-prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/eslint-config-prettier/compare/v8.10.0...v10.1.8)

---
updated-dependencies:
- dependency-name: eslint-config-prettier
  dependency-version: 10.1.8
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-02 00:25:25 +00:00
dependabot[bot] fb8c793c2b chore(deps-dev): bump eslint-plugin-prettier from 4.2.1 to 5.5.5
Bumps [eslint-plugin-prettier](https://github.com/prettier/eslint-plugin-prettier) from 4.2.1 to 5.5.5.
- [Release notes](https://github.com/prettier/eslint-plugin-prettier/releases)
- [Changelog](https://github.com/prettier/eslint-plugin-prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/eslint-plugin-prettier/compare/v4.2.1...v5.5.5)

---
updated-dependencies:
- dependency-name: eslint-plugin-prettier
  dependency-version: 5.5.5
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-02 00:24:39 +00:00
John Kennedy a90693e805 Merge pull request #25 from langchain-ai/dependabot/npm_and_yarn/handlebars-4.7.9
chore(deps): bump handlebars from 4.7.8 to 4.7.9
2026-03-30 20:22:28 -07:00
John Kennedy 2df52555b8 Merge pull request #23 from langchain-ai/dependabot/npm_and_yarn/picomatch-2.3.2
chore(deps): bump picomatch from 2.3.1 to 2.3.2
2026-03-30 20:22:15 -07:00
John Kennedy e35295b768 Merge pull request #26 from langchain-ai/dependabot/npm_and_yarn/brace-expansion-1.1.13
chore(deps): bump brace-expansion from 1.1.11 to 1.1.13
2026-03-30 20:19:17 -07:00
dependabot[bot] 4bd3052ff4 chore(deps): bump brace-expansion from 1.1.11 to 1.1.13
Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 1.1.11 to 1.1.13.
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](https://github.com/juliangruber/brace-expansion/compare/1.1.11...v1.1.13)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 1.1.13
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-29 10:56:40 +00:00
dependabot[bot] 35b699f5bb chore(deps): bump handlebars from 4.7.8 to 4.7.9
Bumps [handlebars](https://github.com/handlebars-lang/handlebars.js) from 4.7.8 to 4.7.9.
- [Release notes](https://github.com/handlebars-lang/handlebars.js/releases)
- [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.9/release-notes.md)
- [Commits](https://github.com/handlebars-lang/handlebars.js/compare/v4.7.8...v4.7.9)

---
updated-dependencies:
- dependency-name: handlebars
  dependency-version: 4.7.9
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-27 02:07:55 +00:00
dependabot[bot] aecd71e62d chore(deps): bump picomatch from 2.3.1 to 2.3.2
Bumps [picomatch](https://github.com/micromatch/picomatch) from 2.3.1 to 2.3.2.
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](https://github.com/micromatch/picomatch/compare/2.3.1...2.3.2)

---
updated-dependencies:
- dependency-name: picomatch
  dependency-version: 2.3.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-25 23:22:12 +00:00
John Kennedy d566e2c8df Merge pull request #20 from langchain-ai/dependabot/npm_and_yarn/zod-4.3.6
chore(deps): bump zod from 3.25.76 to 4.3.6
2026-03-25 16:15:04 -07:00
John Kennedy 47ee42f946 Merge pull request #19 from langchain-ai/dependabot/npm_and_yarn/eslint/js-10.0.1
chore(deps-dev): bump @eslint/js from 9.28.0 to 10.0.1
2026-03-25 16:14:49 -07:00
John Kennedy 9e1b8becf0 Merge pull request #18 from langchain-ai/dependabot/npm_and_yarn/typescript-5.9.3
chore(deps-dev): bump typescript from 5.8.3 to 5.9.3
2026-03-25 16:14:41 -07:00
dependabot[bot] fc864887b5 chore(deps): bump zod from 3.25.76 to 4.3.6
Bumps [zod](https://github.com/colinhacks/zod) from 3.25.76 to 4.3.6.
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](https://github.com/colinhacks/zod/compare/v3.25.76...v4.3.6)

---
updated-dependencies:
- dependency-name: zod
  dependency-version: 4.3.6
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-25 23:11:40 +00:00
dependabot[bot] 06f3a5cb88 chore(deps-dev): bump typescript from 5.8.3 to 5.9.3
Bumps [typescript](https://github.com/microsoft/TypeScript) from 5.8.3 to 5.9.3.
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](https://github.com/microsoft/TypeScript/compare/v5.8.3...v5.9.3)

---
updated-dependencies:
- dependency-name: typescript
  dependency-version: 5.9.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-25 23:11:38 +00:00
dependabot[bot] a56876feb2 chore(deps-dev): bump @eslint/js from 9.28.0 to 10.0.1
Bumps [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) from 9.28.0 to 10.0.1.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](https://github.com/eslint/eslint/commits/v10.0.1/packages/js)

---
updated-dependencies:
- dependency-name: "@eslint/js"
  dependency-version: 10.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-25 23:11:26 +00:00
John Kennedy 1cdc902b66 Merge pull request #21 from langchain-ai/dependabot/npm_and_yarn/dotenv-17.3.1
chore(deps-dev): bump dotenv from 16.5.0 to 17.3.1
2026-03-25 16:10:39 -07:00
John Kennedy c1f6456295 Merge pull request #17 from langchain-ai/dependabot/npm_and_yarn/minor-and-patch-fec5e84922
chore(deps): bump the minor-and-patch group with 7 updates
2026-03-25 16:10:13 -07:00
John Kennedy 2e1a803284 Merge pull request #16 from langchain-ai/dependabot/github_actions/actions/checkout-6
chore(deps): bump actions/checkout from 4 to 6
2026-03-25 16:09:52 -07:00
John Kennedy 9a2d364faf Merge pull request #15 from langchain-ai/dependabot/github_actions/actions/setup-node-6
chore(deps): bump actions/setup-node from 3 to 6
2026-03-25 16:09:42 -07:00
John Kennedy 3715301387 Merge pull request #14 from langchain-ai/dependabot/github_actions/minor-and-patch-d2fb3483aa
chore(deps): bump codespell-project/actions-codespell from 2.1 to 2.2 in the minor-and-patch group
2026-03-25 16:09:32 -07:00
dependabot[bot] 30dd4a1d9f chore(deps-dev): bump dotenv from 16.5.0 to 17.3.1
Bumps [dotenv](https://github.com/motdotla/dotenv) from 16.5.0 to 17.3.1.
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](https://github.com/motdotla/dotenv/compare/v16.5.0...v17.3.1)

---
updated-dependencies:
- dependency-name: dotenv
  dependency-version: 17.3.1
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-25 22:58:54 +00:00
dependabot[bot] 38171beba0 chore(deps): bump the minor-and-patch group with 7 updates
Bumps the minor-and-patch group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [@langchain/core](https://github.com/langchain-ai/langchainjs) | `1.1.34` | `1.1.36` |
| [@langchain/langgraph](https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/langgraph-core) | `1.2.3` | `1.2.5` |
| [@eslint/eslintrc](https://github.com/eslint/eslintrc) | `3.3.1` | `3.3.5` |
| [@tsconfig/recommended](https://github.com/tsconfig/bases/tree/HEAD/bases) | `1.0.8` | `1.0.13` |
| [eslint-plugin-import](https://github.com/import-js/eslint-plugin-import) | `2.31.0` | `2.32.0` |
| [prettier](https://github.com/prettier/prettier) | `3.5.3` | `3.8.1` |
| [ts-jest](https://github.com/kulshekhar/ts-jest) | `29.3.4` | `29.4.6` |


Updates `@langchain/core` from 1.1.34 to 1.1.36
- [Release notes](https://github.com/langchain-ai/langchainjs/releases)
- [Commits](https://github.com/langchain-ai/langchainjs/compare/@langchain/core@1.1.34...@langchain/core@1.1.36)

Updates `@langchain/langgraph` from 1.2.3 to 1.2.5
- [Release notes](https://github.com/langchain-ai/langgraphjs/releases)
- [Changelog](https://github.com/langchain-ai/langgraphjs/blob/main/libs/langgraph-core/CHANGELOG.md)
- [Commits](https://github.com/langchain-ai/langgraphjs/commits/@langchain/langgraph@1.2.5/libs/langgraph-core)

Updates `@eslint/eslintrc` from 3.3.1 to 3.3.5
- [Release notes](https://github.com/eslint/eslintrc/releases)
- [Changelog](https://github.com/eslint/eslintrc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslintrc/compare/v3.3.1...eslintrc-v3.3.5)

Updates `@tsconfig/recommended` from 1.0.8 to 1.0.13
- [Commits](https://github.com/tsconfig/bases/commits/HEAD/bases)

Updates `eslint-plugin-import` from 2.31.0 to 2.32.0
- [Release notes](https://github.com/import-js/eslint-plugin-import/releases)
- [Changelog](https://github.com/import-js/eslint-plugin-import/blob/main/CHANGELOG.md)
- [Commits](https://github.com/import-js/eslint-plugin-import/compare/v2.31.0...v2.32.0)

Updates `prettier` from 3.5.3 to 3.8.1
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/prettier/compare/3.5.3...3.8.1)

Updates `ts-jest` from 29.3.4 to 29.4.6
- [Release notes](https://github.com/kulshekhar/ts-jest/releases)
- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/kulshekhar/ts-jest/compare/v29.3.4...v29.4.6)

---
updated-dependencies:
- dependency-name: "@langchain/core"
  dependency-version: 1.1.36
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@langchain/langgraph"
  dependency-version: 1.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@eslint/eslintrc"
  dependency-version: 3.3.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@tsconfig/recommended"
  dependency-version: 1.0.13
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: eslint-plugin-import
  dependency-version: 2.32.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: prettier
  dependency-version: 3.8.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: ts-jest
  dependency-version: 29.4.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-25 22:58:08 +00:00
dependabot[bot] b7ebfea55c chore(deps): bump actions/checkout from 4 to 6
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-25 22:56:41 +00:00
dependabot[bot] 96093bfc5f chore(deps): bump actions/setup-node from 3 to 6
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 3 to 6.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v3...v6)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-25 22:56:37 +00:00
dependabot[bot] 09f6c4123c chore(deps): bump codespell-project/actions-codespell
Bumps the minor-and-patch group with 1 update: [codespell-project/actions-codespell](https://github.com/codespell-project/actions-codespell).


Updates `codespell-project/actions-codespell` from 2.1 to 2.2
- [Release notes](https://github.com/codespell-project/actions-codespell/releases)
- [Commits](https://github.com/codespell-project/actions-codespell/compare/406322ec52dd7b488e48c1c4b82e2a8b3a1bf630...8f01853be192eb0f849a5c7d721450e7a467c579)

---
updated-dependencies:
- dependency-name: codespell-project/actions-codespell
  dependency-version: '2.2'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-25 22:56:34 +00:00
John Kennedy 09c42d998f Merge pull request #12 from langchain-ai/chore/upgrade-deprecated-runtimes
chore: upgrade deprecated runtime versions to supported releases
2026-03-25 15:56:13 -07:00
John Kennedy ae0498f8ba Merge pull request #11 from langchain-ai/chore/fix-dependabot-config
chore: update dependabot.yml to comply with posture checks
2026-03-25 15:55:55 -07:00
John Kennedy 9141d1d1ff Merge pull request #13 from langchain-ai/ci/add-minimum-workflow-permissions
ci: add minimum workflow permissions
2026-03-25 15:55:38 -07:00
John Kennedy 73a932506e ci: add minimum workflow permissions 2026-03-25 22:51:06 +00:00
John Kennedy 0f12518ac6 chore: upgrade deprecated runtime versions to supported releases 2026-03-25 22:50:42 +00:00
John Kennedy 9d4765a435 chore: update dependabot.yml to comply with posture checks 2026-03-25 22:50:32 +00:00
John Kennedy ca58e1753d Merge pull request #10 from langchain-ai/dependabot/npm_and_yarn/npm_and_yarn-e5a595f223
chore(deps): bump flatted from 3.3.3 to 3.4.2 in the npm_and_yarn group across 1 directory
2026-03-25 15:44:35 -07:00
dependabot[bot] 469780dbe5 chore(deps): bump flatted in the npm_and_yarn group across 1 directory
Bumps the npm_and_yarn group with 1 update in the / directory: [flatted](https://github.com/WebReflection/flatted).


Updates `flatted` from 3.3.3 to 3.4.2
- [Commits](https://github.com/WebReflection/flatted/compare/v3.3.3...v3.4.2)

---
updated-dependencies:
- dependency-name: flatted
  dependency-version: 3.4.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-21 11:16:30 +00:00
John Kennedy 8f1ae1703e Merge pull request #9 from langchain-ai/fix/security-alerts-2026-03-19
fix: patch 5 security alerts (minimatch, langsmith, js-yaml)
2026-03-18 21:26:06 -07:00
John Kennedy 350996438e ci: replace Node 18 with Node 22 in test matrix
@langchain/core 1.x and @langchain/langgraph 1.x require Node >= 20.
Drop 18.x and add 22.x to the CI matrix.
2026-03-19 04:23:40 +00:00
John Kennedy b6d9d4bac6 fix: patch 3 medium-severity security alerts (langsmith, js-yaml)
- langsmith 0.3.87 → 0.5.11: SSRF via tracing header injection
  (CVE-2026-25528). Strategy B — bump @langchain/core from 0.3.x to
  1.x and @langchain/langgraph from 0.3.x to 1.x. Added zod as direct
  dependency to satisfy new peer requirement.
- js-yaml 4.1.0 → 4.1.1: prototype pollution via merge (CVE-2025-64718).
  Lockfile re-resolution within ^4.1.0 range.
- js-yaml 3.14.1 → 3.14.2: same CVE, older major line.
  Lockfile re-resolution within ^3.13.1 range.

All are transitive dependencies. Build, lint, and tests pass.
2026-03-19 04:22:06 +00:00
John Kennedy fdcc843c29 fix: patch 2 high-severity security alerts (minimatch CVE-2026-27903)
minimatch < 3.1.3 and >= 5.0.0, < 5.1.8 are vulnerable to ReDoS via
combinatorial backtracking in matchOne() with multiple GLOBSTAR segments.

- minimatch 3.1.2 → 3.1.3: lockfile re-resolution (within ^3.x range)
- minimatch 5.1.6 → 5.1.8: yarn resolution (**/filelist/minimatch)

Both are transitive dev-only dependencies. Strategy C (resolution) used
for the 5.x version since filelist's lockfile entry was pinned to 5.1.6.
Remove the resolution once filelist or jake releases a version that
transitively requires minimatch >= 5.1.8.
2026-03-19 04:08:07 +00:00
John Kennedy 1dfe379605 Merge pull request #8 from langchain-ai/dependabot/npm_and_yarn/langchain/core-0.3.80
Bump @langchain/core from 0.3.57 to 0.3.80
2026-02-28 14:10:48 -08:00
dependabot[bot] d04728ddf7 Bump @langchain/core from 0.3.57 to 0.3.80
Bumps [@langchain/core](https://github.com/langchain-ai/langchainjs) from 0.3.57 to 0.3.80.
- [Release notes](https://github.com/langchain-ai/langchainjs/releases)
- [Commits](https://github.com/langchain-ai/langchainjs/compare/@langchain/core==0.3.57...@langchain/core==0.3.80)

---
updated-dependencies:
- dependency-name: "@langchain/core"
  dependency-version: 0.3.80
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-02-28 22:07:41 +00:00
David Duong e8d0f6b3d6 Merge pull request #6 from langchain-ai/dqbd/bump-deps
chore: bump @langchain/core and @langchain/langgraph
2025-06-03 22:47:53 +02:00
Tat Dat Duong 940c1e7cc8 chore: bump @langchain/core and @langchain/langgraph 2025-06-03 22:40:27 +02:00
Asamu David 2926c52197 Merge pull request #5 from langchain-ai/david/06-03/add-image-distro
Add image distro
2025-06-03 20:57:20 +01:00
David Asamu 35afaa3565 update dependencies 2025-06-03 20:50:20 +01:00
David Asamu 4fb36b70ef set wolfi has default image distro 2025-06-03 20:50:09 +01:00
lc-arjun a70e29198c Merge pull request #4 from langchain-ai/arjun/update_readme_
update readme
2025-05-14 07:28:33 -07:00