chore(deps): bump langchain from 1.2.26 to 1.2.36

[dependabot]

Bumps langchain from 1.2.26 to 1.2.36.

Release notes

Sourced from langchain's releases.

langchain@1.2.36

Patch Changes

• #10489 21094f3 Thanks @​maahir30! - support structured output (providerStrategy) for Google Gemini models in createAgent

• #10433 7af0b65 Thanks @​tanushree-sharma! - feat: Add LangSmith integration metadata to createAgent and initChatModel

• Updated dependencies [5dc11b5, 7af0b65]:

  • @​langchain/core@​1.1.35

langchain@1.2.35

Patch Changes

• #10466 4b1a874 Thanks @​hntrl! - fix: renamed getSubgraphAsync -> getSubgraphsAsync

• Updated dependencies [bfb7944]:

  • @​langchain/core@​1.1.34

langchain@1.2.34

Patch Changes

• #10443 ff6822e Thanks @​christian-bromann! - fix(langchain): respect version:"v1" in afterModel router's pending tool call path

• #10446 888224c Thanks @​hntrl! - fix(agents): propagate store and configurable to ToolNode middleware runtime

• #10444 82d56cb Thanks @​christian-bromann! - fix(langchain/agents): dispatch tool calls via Send in afterModel router for version:"v2"

  Breaking change for version: "v2" + afterModel middleware users.

  Previously, when afterModel middleware was present, createAgent always routed all tool calls from an AIMessage to a single ToolNode invocation — regardless of the version option. This meant version: "v2" silently behaved like version: "v1" (parallel via Promise.all in one node) whenever afterModel middleware was used.

  #createAfterModelRouter now correctly respects #toolBehaviorVersion:

  • version: "v1" — routes the full AIMessage to a single ToolNode invocation; all tool calls run concurrently via Promise.all (unchanged behaviour).
  • version: "v2" — dispatches each tool call as a separate Send task, matching the behaviour of #createModelRouter when no afterModel middleware is present, and matching Python LangGraph's post_model_hook_router.

  Migration: If you use version: "v2" (the default) together with afterModel middleware and rely on the previous single-node parallel execution, switch to version: "v1" to preserve that behaviour. See the version JSDoc on CreateAgentParams for guidance on which option to choose.

langchain@1.2.33

Patch Changes

• #9862 5b250b1 Thanks @​stellarrover! - fix(langchain/agents): Fix ReactAgent routing with returnDirect + beforeModel middleware

  This fixes a routing error when an agent has both tools with returnDirect: true and middleware with beforeModel hooks (e.g., summarizationMiddleware). Before this fix, non-returnDirect tools would fail with "Branch condition returned unknown or null destination".

• Updated dependencies [6db417b, d69dfcc]:

  • @​langchain/core@​1.1.33

langchain@1.2.32

Patch Changes

... (truncated)

Commits

• 443253b chore: version packages (#10469)
• 005d4a1 chore(deps-dev): bump fast-xml-parser from 5.5.6 to 5.5.7 (#10473)
• 63b7268 fix(@​langchain/google) Duplicate function call (#10493)
• 75e9d56 fix: support structured output (providerStrategy) for Google Gemini models in...
• 21094f3 Create nasty-cars-fold.md
• ab11688 format
• b741848 add google response schema to invokation params
• 0c14206 fix: patch 30+ Dependabot security alerts (critical/high/medium) (#10488)
• ec2b0b5 structured output via model profiles
• 5dc11b5 fix(core): replace exported zod type references with structural interfaces to...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.