Skip to content

Bump langchain-classic from 1.0.1 to 1.0.4#146

Merged
nithishr merged 1 commit intomainfrom
dependabot/pip/langchain-classic-1.0.3
Apr 28, 2026
Merged

Bump langchain-classic from 1.0.1 to 1.0.4#146
nithishr merged 1 commit intomainfrom
dependabot/pip/langchain-classic-1.0.3

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 1, 2026

Bumps langchain-classic from 1.0.1 to 1.0.4.

Release notes

Sourced from langchain-classic's releases.

langchain-classic==1.0.4

Changes since langchain-classic==1.0.3

release(langchain-classic): 1.0.4 (#36827) chore(langchain-classic): add deprecations (#36826) fix(langchain-classic): suppress mypy errors in compat code (#36806) chore(deps): bump pytest to 9.0.3 (#36801) chore: bump pytest from 9.0.2 to 9.0.3 in /libs/langchain (#36718) chore: bump pillow from 12.1.1 to 12.2.0 in /libs/langchain (#36709) chore: bump cryptography from 46.0.6 to 46.0.7 in /libs/langchain (#36620) chore: bump aiohttp from 3.13.3 to 3.13.4 in /libs/langchain (#36439) chore: pygments>=2.20.0 across all packages (CVE-2026-4539) (#36385) chore: bump cryptography from 46.0.5 to 46.0.6 in /libs/langchain (#36325) chore: bump requests from 2.32.5 to 2.33.0 in /libs/langchain (#36242) fix(langchain,langchain-classic): update model provider classes for Azure AI Foundry (#35812) ci: suppress pytest streaming output in CI (#36092) chore: bump pyasn1 from 0.6.2 to 0.6.3 in /libs/langchain (#36030) chore: bump black from 25.9.0 to 26.3.1 in /libs/langchain (#35858) chore: bump orjson from 3.11.5 to 3.11.6 in /libs/langchain (#35806) fix(langchain-classic): format (#35854) perf(.github): set a timeout on get min versions HTTP calls (#35851) chore: housekeeping (#35850)

langchain-classic==1.0.3

Changes since langchain-classic==1.0.2

release(langchain): 1.0.3 (#35834) chore(core): move BaseCrossEncoder to langchain-core (#35809) chore: bump tornado from 6.5.2 to 6.5.5 in /libs/langchain (#35773) release(langchain_v1): 1.2.11 (#35723) chore: bump the minor-and-patch group across 3 directories with 7 updates (#35605) chore: bump types-pytz from 2025.2.0.20251108 to 2026.1.1.20260304 in /libs/langchain (#35592) chore: bump packaging from 24.2 to 26.0 in /libs/langchain (#35591)

langchain-classic==1.0.2

Changes since langchain-classic==1.0.1

release(langchain): bump langchain-classic to 1.0.2 (#35601) fix(langchain-classic): patch ReDoS vulnerability in MRKL and ReAct action regex (CVE-2024-58340) (#35598) chore: bump the langchain-deps group across 3 directories with 7 updates (#35513) chore: bump the langchain-deps group across 3 directories with 14 updates (#35441) chore: bump google-cloud-aiplatform from 1.117.0 to 1.133.0 in /libs/langchain (#35392) docs: fix docstring inaccuracies and update outdated LangSmith URLs (#35283) feat(openai): support automatic server-side compaction (#35212) chore: bump langchainhub from 0.1.18 to 0.1.21 in /libs/langchain in the langchain-deps group across 1 directory (#35280) chore: bump the langchain-deps group across 3 directories with 8 updates (#35257) style: bump ruff version to 0.15 (#35042) docs(langchain-classic): clarify MultiVectorRetriever usage (#35053) fix(langchain-classic): validate ensemble retriever weights (#35078) chore(deps): bump pillow from 11.3.0 to 12.1.1 in /libs/langchain (#35175)

... (truncated)

Commits
  • 92a6e57 release(langchain-classic): 1.0.4 (#36827)
  • 1749eb8 chore(langchain-classic): add deprecations (#36826)
  • 58c4e5b release(text-splitters): 1.1.2 (#36822)
  • c289bf1 fix(text-splitters): deprecate and use SSRF-safe transport in split_text_from...
  • b7447c6 fix(infra): skip serdes tests in min-version release step (#36818)
  • 41c0cc5 release(openai): 1.1.14 (#36820)
  • 0516156 fix(openai): use SSRF-safe transport for image token counting (#36819)
  • 338aa81 fix(core): restore cloud metadata IPs and link-local range in SSRF policy (#3...
  • 51e9548 chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/text-splitters (#36797)
  • e85c418 chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/model-profiles (#36798)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Apr 1, 2026
@dependabot dependabot Bot changed the title Bump langchain-classic from 1.0.1 to 1.0.3 Bump langchain-classic from 1.0.1 to 1.0.4 Apr 28, 2026
@dependabot dependabot Bot force-pushed the dependabot/pip/langchain-classic-1.0.3 branch from 12f3eac to 147a768 Compare April 28, 2026 09:08
Bumps [langchain-classic](https://github.com/langchain-ai/langchain) from 1.0.1 to 1.0.4.
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-classic==1.0.1...langchain-classic==1.0.4)

---
updated-dependencies:
- dependency-name: langchain-classic
  dependency-version: 1.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/pip/langchain-classic-1.0.3 branch from 147a768 to beeaca3 Compare April 28, 2026 09:17
@nithishr nithishr merged commit 05626af into main Apr 28, 2026
1 check passed
@dependabot dependabot Bot deleted the dependabot/pip/langchain-classic-1.0.3 branch April 28, 2026 09:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant