Bump the uv group across 4 directories with 3 updates (#374)
Bumps the uv group with 1 update in the / directory: [langchain-text-splitters](https://github.com/langchain-ai/langchain). Bumps the uv group with 3 updates in the /libs/langchain-mongodb directory: [langchain-text-splitters](https://github.com/langchain-ai/langchain), [langchain-openai](https://github.com/langchain-ai/langchain) and [pypdf](https://github.com/py-pdf/pypdf). Bumps the uv group with 2 updates in the /libs/langgraph-checkpoint-mongodb directory: [langchain-text-splitters](https://github.com/langchain-ai/langchain) and [langchain-openai](https://github.com/langchain-ai/langchain). Bumps the uv group with 1 update in the /libs/langgraph-store-mongodb directory: [langchain-text-splitters](https://github.com/langchain-ai/langchain). Updates `langchain-text-splitters` from 1.0.0 to 1.1.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langchain/releases">langchain-text-splitters's releases</a>.</em></p> <blockquote> <h2>langchain-text-splitters==1.1.2</h2> <p>Changes since langchain-text-splitters==1.1.1</p> <p>release(text-splitters): 1.1.2 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36822">#36822</a>) fix(text-splitters): deprecate and use SSRF-safe transport in split_text_from_url (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36821">#36821</a>) chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/text-splitters (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36797">#36797</a>) chore(deps): bump pytest to <code>9.0.3</code> (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36801">#36801</a>) chore: bump pytest from 9.0.2 to 9.0.3 in /libs/text-splitters (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36714">#36714</a>) chore: add comment explaining <code>pygments>=2.20.0</code> (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36570">#36570</a>) release(core): 1.2.26 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36511">#36511</a>) chore: pygments>=2.20.0 across all packages (CVE-2026-4539) (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36385">#36385</a>) fix(text-splitters): prevent silent data loss for empty dict values in RecursiveJsonSplitter (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35079">#35079</a>) feat(text-splitters): support spacy tests with Python 3.14 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36198">#36198</a>) fix(infra): correct lint_diff relative paths in package makefiles (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36333">#36333</a>) chore: bump requests from 2.32.5 to 2.33.0 in /libs/text-splitters (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36238">#36238</a>) chore: bump nltk from 3.9.3 to 3.9.4 in /libs/text-splitters (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36237">#36237</a>) chore(partners): bump <code>langchain-core</code> min to <code>1.2.21</code> (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36183">#36183</a>) chore(text-splitters): bump nltk in lock file (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36112">#36112</a>) ci: suppress pytest streaming output in CI (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36092">#36092</a>) chore(text-splitters): speed up ci (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36050">#36050</a>) ci: avoid unnecessary dep installs in lint targets (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36046">#36046</a>) chore: bump orjson from 3.11.5 to 3.11.6 in /libs/text-splitters (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35856">#35856</a>) chore: bump locks, lint (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35985">#35985</a>) perf(.github): set a timeout on get min versions HTTP calls (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35851">#35851</a>) chore: bump tornado from 6.5.2 to 6.5.5 in /libs/text-splitters (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35774">#35774</a>) chore: bump the minor-and-patch group across 3 directories with 3 updates (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35589">#35589</a>) chore: bump the other-deps group across 3 directories with 2 updates (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35512">#35512</a>) chore: bump nltk from 3.9.2 to 3.9.3 in /libs/text-splitters (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35449">#35449</a>) chore: bump the other-deps group across 3 directories with 2 updates (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35407">#35407</a>)</p> <h2>langchain-text-splitters==1.1.1</h2> <p>Changes since langchain-text-splitters==1.1.0</p> <p>release(text-splitters): 1.1.1 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35318">#35318</a>) fix(text-splitters): prevent JSFrameworkTextSplitter from mutating self._separators on each split_text() call (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35316">#35316</a>) chore: bump transformers from 5.1.0 to 5.2.0 in /libs/text-splitters in the other-deps group across 1 directory (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35279">#35279</a>) chore: bump the other-deps group across 3 directories with 2 updates (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35255">#35255</a>) style: bump ruff version to 0.15 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35042">#35042</a>) fix: Server-Side Request Forgery (SSRF) in HTMLHeaderTextSplitter.split_text_from_url (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35196">#35196</a>) feat(text-splitters): add model_kwargs to SentenceTransformersTokenTextSplitter (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35113">#35113</a>) chore(deps): bump langsmith from 0.4.31 to 0.6.3 in /libs/text-splitters (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35162">#35162</a>) chore(deps): bump the other-deps group across 3 directories with 12 updates (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35127">#35127</a>) chore(deps): bump the other-deps group across 3 directories with 8 updates (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35120">#35120</a>) chore: add <code>make type</code> target (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35015">#35015</a>) revert: "chore: add typing target in <code>Makefile</code>" (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35013">#35013</a>) chore: add typing target in <code>Makefile</code> (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35012">#35012</a>) fix(text-splitters): reverse preserved elements iterator in <code>HTMLSemanticPreservingSplitter</code> (<a href="https://redirect.github.com/langchain-ai/langchain/issues/34080">#34080</a>) chore: enrich <code>pyproject.toml</code> files (<a href="https://redirect.github.com/langchain-ai/langchain/issues/34980">#34980</a>) chore(deps): bump the uv group across 20 directories with 3 updates (<a href="https://redirect.github.com/langchain-ai/langchain/issues/34941">#34941</a>) chore: upgrade urllib3 to 2.6.3 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/34940">#34940</a>)</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/langchain-ai/langchain/commit/58c4e5bbdd9d18d7fe7ec83b5a05477d06fe2a8e"><code>58c4e5b</code></a> release(text-splitters): 1.1.2 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36822">#36822</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/c289bf10e940e960a132d7403482283114063063"><code>c289bf1</code></a> fix(text-splitters): deprecate and use SSRF-safe transport in split_text_from...</li> <li><a href="https://github.com/langchain-ai/langchain/commit/b7447c6969fc928ec3f29c200e2e56c0a46c4c77"><code>b7447c6</code></a> fix(infra): skip serdes tests in min-version release step (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36818">#36818</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/41c0cc58b0dac82000d24715f7a4b44dc8b01fd3"><code>41c0cc5</code></a> release(openai): 1.1.14 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36820">#36820</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/0516156ef98f5001129f6d47bc8682d6536d58fb"><code>0516156</code></a> fix(openai): use SSRF-safe transport for image token counting (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36819">#36819</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/338aa8131a8124e7aa1e042616ccd2366ff9f699"><code>338aa81</code></a> fix(core): restore cloud metadata IPs and link-local range in SSRF policy (<a href="https://redirect.github.com/langchain-ai/langchain/issues/3">#3</a>...</li> <li><a href="https://github.com/langchain-ai/langchain/commit/51e954877efd2d2c3c5bf09364dcfec8794eadb0"><code>51e9548</code></a> chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/text-splitters (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36797">#36797</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/e85c418cfa559d4a794ddc6db92c6febab44651c"><code>e85c418</code></a> chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/model-profiles (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36798">#36798</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/789126e6c78ad74664bea26228dda6e72e135dce"><code>789126e</code></a> chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/standard-tests (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36799">#36799</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/937b3eb3827551d17ee4736f9acc4aa57e88c716"><code>937b3eb</code></a> chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/langchain_v1 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36800">#36800</a>)</li> <li>Additional commits viewable in <a href="https://github.com/langchain-ai/langchain/compare/langchain-text-splitters==1.0.0...langchain-text-splitters==1.1.2">compare view</a></li> </ul> </details> <br /> Updates `langchain-text-splitters` from 1.0.0 to 1.1.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langchain/releases">langchain-text-splitters's releases</a>.</em></p> <blockquote> <h2>langchain-text-splitters==1.1.2</h2> <p>Changes since langchain-text-splitters==1.1.1</p> <p>release(text-splitters): 1.1.2 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36822">#36822</a>) fix(text-splitters): deprecate and use SSRF-safe transport in split_text_from_url (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36821">#36821</a>) chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/text-splitters (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36797">#36797</a>) chore(deps): bump pytest to <code>9.0.3</code> (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36801">#36801</a>) chore: bump pytest from 9.0.2 to 9.0.3 in /libs/text-splitters (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36714">#36714</a>) chore: add comment explaining <code>pygments>=2.20.0</code> (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36570">#36570</a>) release(core): 1.2.26 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36511">#36511</a>) chore: pygments>=2.20.0 across all packages (CVE-2026-4539) (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36385">#36385</a>) fix(text-splitters): prevent silent data loss for empty dict values in RecursiveJsonSplitter (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35079">#35079</a>) feat(text-splitters): support spacy tests with Python 3.14 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36198">#36198</a>) fix(infra): correct lint_diff relative paths in package makefiles (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36333">#36333</a>) chore: bump requests from 2.32.5 to 2.33.0 in /libs/text-splitters (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36238">#36238</a>) chore: bump nltk from 3.9.3 to 3.9.4 in /libs/text-splitters (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36237">#36237</a>) chore(partners): bump <code>langchain-core</code> min to <code>1.2.21</code> (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36183">#36183</a>) chore(text-splitters): bump nltk in lock file (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36112">#36112</a>) ci: suppress pytest streaming output in CI (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36092">#36092</a>) chore(text-splitters): speed up ci (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36050">#36050</a>) ci: avoid unnecessary dep installs in lint targets (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36046">#36046</a>) chore: bump orjson from 3.11.5 to 3.11.6 in /libs/text-splitters (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35856">#35856</a>) chore: bump locks, lint (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35985">#35985</a>) perf(.github): set a timeout on get min versions HTTP calls (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35851">#35851</a>) chore: bump tornado from 6.5.2 to 6.5.5 in /libs/text-splitters (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35774">#35774</a>) chore: bump the minor-and-patch group across 3 directories with 3 updates (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35589">#35589</a>) chore: bump the other-deps group across 3 directories with 2 updates (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35512">#35512</a>) chore: bump nltk from 3.9.2 to 3.9.3 in /libs/text-splitters (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35449">#35449</a>) chore: bump the other-deps group across 3 directories with 2 updates (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35407">#35407</a>)</p> <h2>langchain-text-splitters==1.1.1</h2> <p>Changes since langchain-text-splitters==1.1.0</p> <p>release(text-splitters): 1.1.1 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35318">#35318</a>) fix(text-splitters): prevent JSFrameworkTextSplitter from mutating self._separators on each split_text() call (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35316">#35316</a>) chore: bump transformers from 5.1.0 to 5.2.0 in /libs/text-splitters in the other-deps group across 1 directory (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35279">#35279</a>) chore: bump the other-deps group across 3 directories with 2 updates (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35255">#35255</a>) style: bump ruff version to 0.15 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35042">#35042</a>) fix: Server-Side Request Forgery (SSRF) in HTMLHeaderTextSplitter.split_text_from_url (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35196">#35196</a>) feat(text-splitters): add model_kwargs to SentenceTransformersTokenTextSplitter (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35113">#35113</a>) chore(deps): bump langsmith from 0.4.31 to 0.6.3 in /libs/text-splitters (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35162">#35162</a>) chore(deps): bump the other-deps group across 3 directories with 12 updates (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35127">#35127</a>) chore(deps): bump the other-deps group across 3 directories with 8 updates (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35120">#35120</a>) chore: add <code>make type</code> target (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35015">#35015</a>) revert: "chore: add typing target in <code>Makefile</code>" (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35013">#35013</a>) chore: add typing target in <code>Makefile</code> (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35012">#35012</a>) fix(text-splitters): reverse preserved elements iterator in <code>HTMLSemanticPreservingSplitter</code> (<a href="https://redirect.github.com/langchain-ai/langchain/issues/34080">#34080</a>) chore: enrich <code>pyproject.toml</code> files (<a href="https://redirect.github.com/langchain-ai/langchain/issues/34980">#34980</a>) chore(deps): bump the uv group across 20 directories with 3 updates (<a href="https://redirect.github.com/langchain-ai/langchain/issues/34941">#34941</a>) chore: upgrade urllib3 to 2.6.3 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/34940">#34940</a>)</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/langchain-ai/langchain/commit/58c4e5bbdd9d18d7fe7ec83b5a05477d06fe2a8e"><code>58c4e5b</code></a> release(text-splitters): 1.1.2 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36822">#36822</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/c289bf10e940e960a132d7403482283114063063"><code>c289bf1</code></a> fix(text-splitters): deprecate and use SSRF-safe transport in split_text_from...</li> <li><a href="https://github.com/langchain-ai/langchain/commit/b7447c6969fc928ec3f29c200e2e56c0a46c4c77"><code>b7447c6</code></a> fix(infra): skip serdes tests in min-version release step (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36818">#36818</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/41c0cc58b0dac82000d24715f7a4b44dc8b01fd3"><code>41c0cc5</code></a> release(openai): 1.1.14 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36820">#36820</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/0516156ef98f5001129f6d47bc8682d6536d58fb"><code>0516156</code></a> fix(openai): use SSRF-safe transport for image token counting (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36819">#36819</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/338aa8131a8124e7aa1e042616ccd2366ff9f699"><code>338aa81</code></a> fix(core): restore cloud metadata IPs and link-local range in SSRF policy (<a href="https://redirect.github.com/langchain-ai/langchain/issues/3">#3</a>...</li> <li><a href="https://github.com/langchain-ai/langchain/commit/51e954877efd2d2c3c5bf09364dcfec8794eadb0"><code>51e9548</code></a> chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/text-splitters (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36797">#36797</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/e85c418cfa559d4a794ddc6db92c6febab44651c"><code>e85c418</code></a> chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/model-profiles (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36798">#36798</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/789126e6c78ad74664bea26228dda6e72e135dce"><code>789126e</code></a> chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/standard-tests (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36799">#36799</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/937b3eb3827551d17ee4736f9acc4aa57e88c716"><code>937b3eb</code></a> chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/langchain_v1 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36800">#36800</a>)</li> <li>Additional commits viewable in <a href="https://github.com/langchain-ai/langchain/compare/langchain-text-splitters==1.0.0...langchain-text-splitters==1.1.2">compare view</a></li> </ul> </details> <br /> Updates `langchain-openai` from 1.1.0 to 1.1.14 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langchain/releases">langchain-openai's releases</a>.</em></p> <blockquote> <h2>langchain-openai==1.1.14</h2> <p>Changes since langchain-openai==1.1.13</p> <p>release(openai): 1.1.14 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36820">#36820</a>) fix(openai): use SSRF-safe transport for image token counting (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36819">#36819</a>) chore(deps): bump pytest to <code>9.0.3</code> (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36801">#36801</a>) chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/partners/openai (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36795">#36795</a>) chore: bump pillow from 12.1.1 to 12.2.0 in /libs/partners/openai (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36777">#36777</a>)</p> <h2>langchain-openai==1.1.13</h2> <p>Changes since langchain-openai==1.1.12</p> <p>release(openai): 1.1.13 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36729">#36729</a>) fix(openai): handle content blocks without type key in responses api conversion (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36725">#36725</a>) chore(model-profiles): refresh model profile data (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36539">#36539</a>) chore(openai): fix broken vcr cassette playback and add ci guard (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36502">#36502</a>) fix(openai,groq,openrouter): use is-not-None checks in usage metadata token extraction (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36500">#36500</a>) fix(core): fixed typos in the documentation (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36459">#36459</a>) chore(model-profiles): refresh model profile data (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36455">#36455</a>) feat(core): impute placeholder filenames for OpenAI file inputs (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36433">#36433</a>) chore: pygments>=2.20.0 across all packages (CVE-2026-4539) (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36385">#36385</a>) chore(model-profiles): refresh model profile data (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36368">#36368</a>) fix(openai): update computer call test (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36352">#36352</a>) fix(openai): let user-provided User-Agent override the Azure default (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35523">#35523</a>) chore: bump requests from 2.32.5 to 2.33.0 in /libs/partners/openai (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36248">#36248</a>)</p> <h2>langchain-openai==1.1.12</h2> <p>Changes since langchain-openai==1.1.11</p> <p>fix(openai): bump min core version (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36180">#36180</a>) release(openai): 1.1.12 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36178">#36178</a>) fix(core,model-profiles): add missing <code>ModelProfile</code> fields, warn on schema drift (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36129">#36129</a>) fix(openai): support phase parameter (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36161">#36161</a>) fix(openai): preserve namespace field in streaming function_call chunks (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36108">#36108</a>) ci: suppress pytest streaming output in CI (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36092">#36092</a>) ci: avoid unnecessary dep installs in lint targets (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36046">#36046</a>) chore(model-profiles): refresh model profile data (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36039">#36039</a>) chore: bump orjson from 3.11.5 to 3.11.6 in /libs/partners/openai (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35860">#35860</a>) fix(openai): add type: message to Responses API input items (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35693">#35693</a>) perf(.github): set a timeout on get min versions HTTP calls (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35851">#35851</a>) feat(model-profiles): new fields + <code>Makefile</code> target (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35788">#35788</a>) fix(openai): close PIL Image handles in token counting to prevent fd leak (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35742">#35742</a>) fix(openai): typo (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35763">#35763</a>) chore(model-profiles): refresh model profile data (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35754">#35754</a>)</p> <h2>langchain-openai==1.1.11</h2> <p>Changes since langchain-openai==1.1.10</p> <p>fix(openai): bump min core version (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35705">#35705</a>) release(openai): 1.1.11 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35703">#35703</a>)</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/langchain-ai/langchain/commit/b7447c6969fc928ec3f29c200e2e56c0a46c4c77"><code>b7447c6</code></a> fix(infra): skip serdes tests in min-version release step (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36818">#36818</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/41c0cc58b0dac82000d24715f7a4b44dc8b01fd3"><code>41c0cc5</code></a> release(openai): 1.1.14 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36820">#36820</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/0516156ef98f5001129f6d47bc8682d6536d58fb"><code>0516156</code></a> fix(openai): use SSRF-safe transport for image token counting (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36819">#36819</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/338aa8131a8124e7aa1e042616ccd2366ff9f699"><code>338aa81</code></a> fix(core): restore cloud metadata IPs and link-local range in SSRF policy (<a href="https://redirect.github.com/langchain-ai/langchain/issues/3">#3</a>...</li> <li><a href="https://github.com/langchain-ai/langchain/commit/51e954877efd2d2c3c5bf09364dcfec8794eadb0"><code>51e9548</code></a> chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/text-splitters (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36797">#36797</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/e85c418cfa559d4a794ddc6db92c6febab44651c"><code>e85c418</code></a> chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/model-profiles (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36798">#36798</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/789126e6c78ad74664bea26228dda6e72e135dce"><code>789126e</code></a> chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/standard-tests (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36799">#36799</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/937b3eb3827551d17ee4736f9acc4aa57e88c716"><code>937b3eb</code></a> chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/langchain_v1 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36800">#36800</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/a06c205738cf5953e28c37287ddb1559d67c01f6"><code>a06c205</code></a> ci(infra): validate issue checkboxes by section (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36811">#36811</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/aa33b06deb0d65489ce254b48a8aaf8a86304c18"><code>aa33b06</code></a> fix(langchain-classic): suppress mypy errors in compat code (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36806">#36806</a>)</li> <li>Additional commits viewable in <a href="https://github.com/langchain-ai/langchain/compare/langchain-openai==1.1.0...langchain-openai==1.1.14">compare view</a></li> </ul> </details> <br /> Updates `pypdf` from 6.10.1 to 6.10.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/py-pdf/pypdf/releases">pypdf's releases</a>.</em></p> <blockquote> <h2>Version 6.10.2, 2026-04-15</h2> <h2>What's new</h2> <h3>Security (SEC)</h3> <ul> <li>Do not rely on possibly invalid /Size for incremental cloning (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3735">#3735</a>) by <a href="https://github.com/stefan6419846"><code>@stefan6419846</code></a></li> <li>Introduce limits for FlateDecode parameters and image decoding (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3734">#3734</a>) by <a href="https://github.com/stefan6419846"><code>@stefan6419846</code></a></li> </ul> <p><a href="https://github.com/py-pdf/pypdf/compare/6.10.1...6.10.2">Full Changelog</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md">pypdf's changelog</a>.</em></p> <blockquote> <h2>Version 6.10.2, 2026-04-15</h2> <h3>Security (SEC)</h3> <ul> <li>Do not rely on possibly invalid /Size for incremental cloning (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3735">#3735</a>)</li> <li>Introduce limits for FlateDecode parameters and image decoding (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3734">#3734</a>)</li> </ul> <p><a href="https://github.com/py-pdf/pypdf/compare/6.10.1...6.10.2">Full Changelog</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/py-pdf/pypdf/commit/c476b4f293c8ef4cac07dfb755e5582d838fcdc0"><code>c476b4f</code></a> REL: 6.10.2</li> <li><a href="https://github.com/py-pdf/pypdf/commit/c50a0104cf083356f7c7f5d61410466a57f5c88a"><code>c50a010</code></a> SEC: Do not rely on possibly invalid /Size for incremental cloning (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3735">#3735</a>)</li> <li><a href="https://github.com/py-pdf/pypdf/commit/ac734dab4eef92bcce50d503949b4d9887d89f11"><code>ac734da</code></a> SEC: Introduce limits for FlateDecode parameters and image decoding (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3734">#3734</a>)</li> <li>See full diff in <a href="https://github.com/py-pdf/pypdf/compare/6.10.1...6.10.2">compare view</a></li> </ul> </details> <br /> Updates `langchain-text-splitters` from 1.0.0 to 1.1.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langchain/releases">langchain-text-splitters's releases</a>.</em></p> <blockquote> <h2>langchain-text-splitters==1.1.2</h2> <p>Changes since langchain-text-splitters==1.1.1</p> <p>release(text-splitters): 1.1.2 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36822">#36822</a>) fix(text-splitters): deprecate and use SSRF-safe transport in split_text_from_url (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36821">#36821</a>) chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/text-splitters (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36797">#36797</a>) chore(deps): bump pytest to <code>9.0.3</code> (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36801">#36801</a>) chore: bump pytest from 9.0.2 to 9.0.3 in /libs/text-splitters (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36714">#36714</a>) chore: add comment explaining <code>pygments>=2.20.0</code> (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36570">#36570</a>) release(core): 1.2.26 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36511">#36511</a>) chore: pygments>=2.20.0 across all packages (CVE-2026-4539) (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36385">#36385</a>) fix(text-splitters): prevent silent data loss for empty dict values in RecursiveJsonSplitter (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35079">#35079</a>) feat(text-splitters): support spacy tests with Python 3.14 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36198">#36198</a>) fix(infra): correct lint_diff relative paths in package makefiles (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36333">#36333</a>) chore: bump requests from 2.32.5 to 2.33.0 in /libs/text-splitters (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36238">#36238</a>) chore: bump nltk from 3.9.3 to 3.9.4 in /libs/text-splitters (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36237">#36237</a>) chore(partners): bump <code>langchain-core</code> min to <code>1.2.21</code> (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36183">#36183</a>) chore(text-splitters): bump nltk in lock file (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36112">#36112</a>) ci: suppress pytest streaming output in CI (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36092">#36092</a>) chore(text-splitters): speed up ci (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36050">#36050</a>) ci: avoid unnecessary dep installs in lint targets (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36046">#36046</a>) chore: bump orjson from 3.11.5 to 3.11.6 in /libs/text-splitters (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35856">#35856</a>) chore: bump locks, lint (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35985">#35985</a>) perf(.github): set a timeout on get min versions HTTP calls (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35851">#35851</a>) chore: bump tornado from 6.5.2 to 6.5.5 in /libs/text-splitters (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35774">#35774</a>) chore: bump the minor-and-patch group across 3 directories with 3 updates (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35589">#35589</a>) chore: bump the other-deps group across 3 directories with 2 updates (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35512">#35512</a>) chore: bump nltk from 3.9.2 to 3.9.3 in /libs/text-splitters (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35449">#35449</a>) chore: bump the other-deps group across 3 directories with 2 updates (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35407">#35407</a>)</p> <h2>langchain-text-splitters==1.1.1</h2> <p>Changes since langchain-text-splitters==1.1.0</p> <p>release(text-splitters): 1.1.1 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35318">#35318</a>) fix(text-splitters): prevent JSFrameworkTextSplitter from mutating self._separators on each split_text() call (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35316">#35316</a>) chore: bump transformers from 5.1.0 to 5.2.0 in /libs/text-splitters in the other-deps group across 1 directory (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35279">#35279</a>) chore: bump the other-deps group across 3 directories with 2 updates (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35255">#35255</a>) style: bump ruff version to 0.15 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35042">#35042</a>) fix: Server-Side Request Forgery (SSRF) in HTMLHeaderTextSplitter.split_text_from_url (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35196">#35196</a>) feat(text-splitters): add model_kwargs to SentenceTransformersTokenTextSplitter (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35113">#35113</a>) chore(deps): bump langsmith from 0.4.31 to 0.6.3 in /libs/text-splitters (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35162">#35162</a>) chore(deps): bump the other-deps group across 3 directories with 12 updates (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35127">#35127</a>) chore(deps): bump the other-deps group across 3 directories with 8 updates (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35120">#35120</a>) chore: add <code>make type</code> target (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35015">#35015</a>) revert: "chore: add typing target in <code>Makefile</code>" (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35013">#35013</a>) chore: add typing target in <code>Makefile</code> (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35012">#35012</a>) fix(text-splitters): reverse preserved elements iterator in <code>HTMLSemanticPreservingSplitter</code> (<a href="https://redirect.github.com/langchain-ai/langchain/issues/34080">#34080</a>) chore: enrich <code>pyproject.toml</code> files (<a href="https://redirect.github.com/langchain-ai/langchain/issues/34980">#34980</a>) chore(deps): bump the uv group across 20 directories with 3 updates (<a href="https://redirect.github.com/langchain-ai/langchain/issues/34941">#34941</a>) chore: upgrade urllib3 to 2.6.3 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/34940">#34940</a>)</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/langchain-ai/langchain/commit/58c4e5bbdd9d18d7fe7ec83b5a05477d06fe2a8e"><code>58c4e5b</code></a> release(text-splitters): 1.1.2 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36822">#36822</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/c289bf10e940e960a132d7403482283114063063"><code>c289bf1</code></a> fix(text-splitters): deprecate and use SSRF-safe transport in split_text_from...</li> <li><a href="https://github.com/langchain-ai/langchain/commit/b7447c6969fc928ec3f29c200e2e56c0a46c4c77"><code>b7447c6</code></a> fix(infra): skip serdes tests in min-version release step (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36818">#36818</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/41c0cc58b0dac82000d24715f7a4b44dc8b01fd3"><code>41c0cc5</code></a> release(openai): 1.1.14 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36820">#36820</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/0516156ef98f5001129f6d47bc8682d6536d58fb"><code>0516156</code></a> fix(openai): use SSRF-safe transport for image token counting (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36819">#36819</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/338aa8131a8124e7aa1e042616ccd2366ff9f699"><code>338aa81</code></a> fix(core): restore cloud metadata IPs and link-local range in SSRF policy (<a href="https://redirect.github.com/langchain-ai/langchain/issues/3">#3</a>...</li> <li><a href="https://github.com/langchain-ai/langchain/commit/51e954877efd2d2c3c5bf09364dcfec8794eadb0"><code>51e9548</code></a> chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/text-splitters (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36797">#36797</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/e85c418cfa559d4a794ddc6db92c6febab44651c"><code>e85c418</code></a> chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/model-profiles (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36798">#36798</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/789126e6c78ad74664bea26228dda6e72e135dce"><code>789126e</code></a> chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/standard-tests (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36799">#36799</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/937b3eb3827551d17ee4736f9acc4aa57e88c716"><code>937b3eb</code></a> chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/langchain_v1 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36800">#36800</a>)</li> <li>Additional commits viewable in <a href="https://github.com/langchain-ai/langchain/compare/langchain-text-splitters==1.0.0...langchain-text-splitters==1.1.2">compare view</a></li> </ul> </details> <br /> Updates `langchain-openai` from 1.0.3 to 1.1.14 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langchain/releases">langchain-openai's releases</a>.</em></p> <blockquote> <h2>langchain-openai==1.1.14</h2> <p>Changes since langchain-openai==1.1.13</p> <p>release(openai): 1.1.14 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36820">#36820</a>) fix(openai): use SSRF-safe transport for image token counting (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36819">#36819</a>) chore(deps): bump pytest to <code>9.0.3</code> (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36801">#36801</a>) chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/partners/openai (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36795">#36795</a>) chore: bump pillow from 12.1.1 to 12.2.0 in /libs/partners/openai (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36777">#36777</a>)</p> <h2>langchain-openai==1.1.13</h2> <p>Changes since langchain-openai==1.1.12</p> <p>release(openai): 1.1.13 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36729">#36729</a>) fix(openai): handle content blocks without type key in responses api conversion (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36725">#36725</a>) chore(model-profiles): refresh model profile data (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36539">#36539</a>) chore(openai): fix broken vcr cassette playback and add ci guard (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36502">#36502</a>) fix(openai,groq,openrouter): use is-not-None checks in usage metadata token extraction (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36500">#36500</a>) fix(core): fixed typos in the documentation (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36459">#36459</a>) chore(model-profiles): refresh model profile data (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36455">#36455</a>) feat(core): impute placeholder filenames for OpenAI file inputs (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36433">#36433</a>) chore: pygments>=2.20.0 across all packages (CVE-2026-4539) (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36385">#36385</a>) chore(model-profiles): refresh model profile data (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36368">#36368</a>) fix(openai): update computer call test (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36352">#36352</a>) fix(openai): let user-provided User-Agent override the Azure default (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35523">#35523</a>) chore: bump requests from 2.32.5 to 2.33.0 in /libs/partners/openai (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36248">#36248</a>)</p> <h2>langchain-openai==1.1.12</h2> <p>Changes since langchain-openai==1.1.11</p> <p>fix(openai): bump min core version (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36180">#36180</a>) release(openai): 1.1.12 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36178">#36178</a>) fix(core,model-profiles): add missing <code>ModelProfile</code> fields, warn on schema drift (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36129">#36129</a>) fix(openai): support phase parameter (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36161">#36161</a>) fix(openai): preserve namespace field in streaming function_call chunks (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36108">#36108</a>) ci: suppress pytest streaming output in CI (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36092">#36092</a>) ci: avoid unnecessary dep installs in lint targets (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36046">#36046</a>) chore(model-profiles): refresh model profile data (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36039">#36039</a>) chore: bump orjson from 3.11.5 to 3.11.6 in /libs/partners/openai (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35860">#35860</a>) fix(openai): add type: message to Responses API input items (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35693">#35693</a>) perf(.github): set a timeout on get min versions HTTP calls (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35851">#35851</a>) feat(model-profiles): new fields + <code>Makefile</code> target (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35788">#35788</a>) fix(openai): close PIL Image handles in token counting to prevent fd leak (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35742">#35742</a>) fix(openai): typo (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35763">#35763</a>) chore(model-profiles): refresh model profile data (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35754">#35754</a>)</p> <h2>langchain-openai==1.1.11</h2> <p>Changes since langchain-openai==1.1.10</p> <p>fix(openai): bump min core version (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35705">#35705</a>) release(openai): 1.1.11 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35703">#35703</a>)</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/langchain-ai/langchain/commit/b7447c6969fc928ec3f29c200e2e56c0a46c4c77"><code>b7447c6</code></a> fix(infra): skip serdes tests in min-version release step (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36818">#36818</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/41c0cc58b0dac82000d24715f7a4b44dc8b01fd3"><code>41c0cc5</code></a> release(openai): 1.1.14 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36820">#36820</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/0516156ef98f5001129f6d47bc8682d6536d58fb"><code>0516156</code></a> fix(openai): use SSRF-safe transport for image token counting (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36819">#36819</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/338aa8131a8124e7aa1e042616ccd2366ff9f699"><code>338aa81</code></a> fix(core): restore cloud metadata IPs and link-local range in SSRF policy (<a href="https://redirect.github.com/langchain-ai/langchain/issues/3">#3</a>...</li> <li><a href="https://github.com/langchain-ai/langchain/commit/51e954877efd2d2c3c5bf09364dcfec8794eadb0"><code>51e9548</code></a> chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/text-splitters (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36797">#36797</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/e85c418cfa559d4a794ddc6db92c6febab44651c"><code>e85c418</code></a> chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/model-profiles (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36798">#36798</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/789126e6c78ad74664bea26228dda6e72e135dce"><code>789126e</code></a> chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/standard-tests (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36799">#36799</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/937b3eb3827551d17ee4736f9acc4aa57e88c716"><code>937b3eb</code></a> chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/langchain_v1 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36800">#36800</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/a06c205738cf5953e28c37287ddb1559d67c01f6"><code>a06c205</code></a> ci(infra): validate issue checkboxes by section (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36811">#36811</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/aa33b06deb0d65489ce254b48a8aaf8a86304c18"><code>aa33b06</code></a> fix(langchain-classic): suppress mypy errors in compat code (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36806">#36806</a>)</li> <li>Additional commits viewable in <a href="https://github.com/langchain-ai/langchain/compare/langchain-openai==1.1.0...langchain-openai==1.1.14">compare view</a></li> </ul> </details> <br /> Updates `langchain-text-splitters` from 1.1.0 to 1.1.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langchain/releases">langchain-text-splitters's releases</a>.</em></p> <blockquote> <h2>langchain-text-splitters==1.1.2</h2> <p>Changes since langchain-text-splitters==1.1.1</p> <p>release(text-splitters): 1.1.2 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36822">#36822</a>) fix(text-splitters): deprecate and use SSRF-safe transport in split_text_from_url (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36821">#36821</a>) chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/text-splitters (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36797">#36797</a>) chore(deps): bump pytest to <code>9.0.3</code> (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36801">#36801</a>) chore: bump pytest from 9.0.2 to 9.0.3 in /libs/text-splitters (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36714">#36714</a>) chore: add comment explaining <code>pygments>=2.20.0</code> (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36570">#36570</a>) release(core): 1.2.26 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36511">#36511</a>) chore: pygments>=2.20.0 across all packages (CVE-2026-4539) (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36385">#36385</a>) fix(text-splitters): prevent silent data loss for empty dict values in RecursiveJsonSplitter (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35079">#35079</a>) feat(text-splitters): support spacy tests with Python 3.14 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36198">#36198</a>) fix(infra): correct lint_diff relative paths in package makefiles (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36333">#36333</a>) chore: bump requests from 2.32.5 to 2.33.0 in /libs/text-splitters (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36238">#36238</a>) chore: bump nltk from 3.9.3 to 3.9.4 in /libs/text-splitters (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36237">#36237</a>) chore(partners): bump <code>langchain-core</code> min to <code>1.2.21</code> (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36183">#36183</a>) chore(text-splitters): bump nltk in lock file (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36112">#36112</a>) ci: suppress pytest streaming output in CI (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36092">#36092</a>) chore(text-splitters): speed up ci (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36050">#36050</a>) ci: avoid unnecessary dep installs in lint targets (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36046">#36046</a>) chore: bump orjson from 3.11.5 to 3.11.6 in /libs/text-splitters (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35856">#35856</a>) chore: bump locks, lint (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35985">#35985</a>) perf(.github): set a timeout on get min versions HTTP calls (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35851">#35851</a>) chore: bump tornado from 6.5.2 to 6.5.5 in /libs/text-splitters (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35774">#35774</a>) chore: bump the minor-and-patch group across 3 directories with 3 updates (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35589">#35589</a>) chore: bump the other-deps group across 3 directories with 2 updates (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35512">#35512</a>) chore: bump nltk from 3.9.2 to 3.9.3 in /libs/text-splitters (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35449">#35449</a>) chore: bump the other-deps group across 3 directories with 2 updates (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35407">#35407</a>)</p> <h2>langchain-text-splitters==1.1.1</h2> <p>Changes since langchain-text-splitters==1.1.0</p> <p>release(text-splitters): 1.1.1 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35318">#35318</a>) fix(text-splitters): prevent JSFrameworkTextSplitter from mutating self._separators on each split_text() call (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35316">#35316</a>) chore: bump transformers from 5.1.0 to 5.2.0 in /libs/text-splitters in the other-deps group across 1 directory (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35279">#35279</a>) chore: bump the other-deps group across 3 directories with 2 updates (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35255">#35255</a>) style: bump ruff version to 0.15 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35042">#35042</a>) fix: Server-Side Request Forgery (SSRF) in HTMLHeaderTextSplitter.split_text_from_url (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35196">#35196</a>) feat(text-splitters): add model_kwargs to SentenceTransformersTokenTextSplitter (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35113">#35113</a>) chore(deps): bump langsmith from 0.4.31 to 0.6.3 in /libs/text-splitters (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35162">#35162</a>) chore(deps): bump the other-deps group across 3 directories with 12 updates (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35127">#35127</a>) chore(deps): bump the other-deps group across 3 directories with 8 updates (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35120">#35120</a>) chore: add <code>make type</code> target (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35015">#35015</a>) revert: "chore: add typing target in <code>Makefile</code>" (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35013">#35013</a>) chore: add typing target in <code>Makefile</code> (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35012">#35012</a>) fix(text-splitters): reverse preserved elements iterator in <code>HTMLSemanticPreservingSplitter</code> (<a href="https://redirect.github.com/langchain-ai/langchain/issues/34080">#34080</a>) chore: enrich <code>pyproject.toml</code> files (<a href="https://redirect.github.com/langchain-ai/langchain/issues/34980">#34980</a>) chore(deps): bump the uv group across 20 directories with 3 updates (<a href="https://redirect.github.com/langchain-ai/langchain/issues/34941">#34941</a>) chore: upgrade urllib3 to 2.6.3 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/34940">#34940</a>)</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/langchain-ai/langchain/commit/58c4e5bbdd9d18d7fe7ec83b5a05477d06fe2a8e"><code>58c4e5b</code></a> release(text-splitters): 1.1.2 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36822">#36822</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/c289bf10e940e960a132d7403482283114063063"><code>c289bf1</code></a> fix(text-splitters): deprecate and use SSRF-safe transport in split_text_from...</li> <li><a href="https://github.com/langchain-ai/langchain/commit/b7447c6969fc928ec3f29c200e2e56c0a46c4c77"><code>b7447c6</code></a> fix(infra): skip serdes tests in min-version release step (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36818">#36818</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/41c0cc58b0dac82000d24715f7a4b44dc8b01fd3"><code>41c0cc5</code></a> release(openai): 1.1.14 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36820">#36820</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/0516156ef98f5001129f6d47bc8682d6536d58fb"><code>0516156</code></a> fix(openai): use SSRF-safe transport for image token counting (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36819">#36819</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/338aa8131a8124e7aa1e042616ccd2366ff9f699"><code>338aa81</code></a> fix(core): restore cloud metadata IPs and link-local range in SSRF policy (<a href="https://redirect.github.com/langchain-ai/langchain/issues/3">#3</a>...</li> <li><a href="https://github.com/langchain-ai/langchain/commit/51e954877efd2d2c3c5bf09364dcfec8794eadb0"><code>51e9548</code></a> chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/text-splitters (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36797">#36797</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/e85c418cfa559d4a794ddc6db92c6febab44651c"><code>e85c418</code></a> chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/model-profiles (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36798">#36798</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/789126e6c78ad74664bea26228dda6e72e135dce"><code>789126e</code></a> chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/standard-tests (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36799">#36799</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/937b3eb3827551d17ee4736f9acc4aa57e88c716"><code>937b3eb</code></a> chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/langchain_v1 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36800">#36800</a>)</li> <li>Additional commits viewable in <a href="https://github.com/langchain-ai/langchain/compare/langchain-text-splitters==1.0.0...langchain-text-splitters==1.1.2">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/langchain-ai/langchain-mongodb/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
D
dependabot[bot] committed
564f3382c37f079c8c94fb92f4a52b6626db9b27
Parent: edee54e
Committed by GitHub <noreply@github.com>
on 4/21/2026, 3:06:12 AM