SIGN IN SIGN UP

Bump the uv group across 4 directories with 3 updates (#374)

Bumps the uv group with 1 update in the / directory:
[langchain-text-splitters](https://github.com/langchain-ai/langchain).
Bumps the uv group with 3 updates in the /libs/langchain-mongodb
directory:
[langchain-text-splitters](https://github.com/langchain-ai/langchain),
[langchain-openai](https://github.com/langchain-ai/langchain) and
[pypdf](https://github.com/py-pdf/pypdf).
Bumps the uv group with 2 updates in the
/libs/langgraph-checkpoint-mongodb directory:
[langchain-text-splitters](https://github.com/langchain-ai/langchain)
and [langchain-openai](https://github.com/langchain-ai/langchain).
Bumps the uv group with 1 update in the /libs/langgraph-store-mongodb
directory:
[langchain-text-splitters](https://github.com/langchain-ai/langchain).

Updates `langchain-text-splitters` from 1.0.0 to 1.1.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/langchain/releases">langchain-text-splitters's
releases</a>.</em></p>
<blockquote>
<h2>langchain-text-splitters==1.1.2</h2>
<p>Changes since langchain-text-splitters==1.1.1</p>
<p>release(text-splitters): 1.1.2 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36822">#36822</a>)
fix(text-splitters): deprecate and use SSRF-safe transport in
split_text_from_url (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36821">#36821</a>)
chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/text-splitters (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36797">#36797</a>)
chore(deps): bump pytest to <code>9.0.3</code> (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36801">#36801</a>)
chore: bump pytest from 9.0.2 to 9.0.3 in /libs/text-splitters (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36714">#36714</a>)
chore: add comment explaining <code>pygments&gt;=2.20.0</code> (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36570">#36570</a>)
release(core): 1.2.26 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36511">#36511</a>)
chore: pygments&gt;=2.20.0 across all packages (CVE-2026-4539) (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36385">#36385</a>)
fix(text-splitters): prevent silent data loss for empty dict values in
RecursiveJsonSplitter (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35079">#35079</a>)
feat(text-splitters): support spacy tests with Python 3.14 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36198">#36198</a>)
fix(infra): correct lint_diff relative paths in package makefiles (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36333">#36333</a>)
chore: bump requests from 2.32.5 to 2.33.0 in /libs/text-splitters (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36238">#36238</a>)
chore: bump nltk from 3.9.3 to 3.9.4 in /libs/text-splitters (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36237">#36237</a>)
chore(partners): bump <code>langchain-core</code> min to
<code>1.2.21</code> (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36183">#36183</a>)
chore(text-splitters): bump nltk in lock file (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36112">#36112</a>)
ci: suppress pytest streaming output in CI (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36092">#36092</a>)
chore(text-splitters): speed up ci (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36050">#36050</a>)
ci: avoid unnecessary dep installs in lint targets (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36046">#36046</a>)
chore: bump orjson from 3.11.5 to 3.11.6 in /libs/text-splitters (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35856">#35856</a>)
chore: bump locks, lint (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35985">#35985</a>)
perf(.github): set a timeout on get min versions HTTP calls (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35851">#35851</a>)
chore: bump tornado from 6.5.2 to 6.5.5 in /libs/text-splitters (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35774">#35774</a>)
chore: bump the minor-and-patch group across 3 directories with 3
updates (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35589">#35589</a>)
chore: bump the other-deps group across 3 directories with 2 updates (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35512">#35512</a>)
chore: bump nltk from 3.9.2 to 3.9.3 in /libs/text-splitters (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35449">#35449</a>)
chore: bump the other-deps group across 3 directories with 2 updates (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35407">#35407</a>)</p>
<h2>langchain-text-splitters==1.1.1</h2>
<p>Changes since langchain-text-splitters==1.1.0</p>
<p>release(text-splitters): 1.1.1 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35318">#35318</a>)
fix(text-splitters): prevent JSFrameworkTextSplitter from mutating
self._separators on each split_text() call (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35316">#35316</a>)
chore: bump transformers from 5.1.0 to 5.2.0 in /libs/text-splitters in
the other-deps group across 1 directory (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35279">#35279</a>)
chore: bump the other-deps group across 3 directories with 2 updates (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35255">#35255</a>)
style: bump ruff version to 0.15 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35042">#35042</a>)
fix: Server-Side Request Forgery (SSRF) in
HTMLHeaderTextSplitter.split_text_from_url (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35196">#35196</a>)
feat(text-splitters): add model_kwargs to
SentenceTransformersTokenTextSplitter (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35113">#35113</a>)
chore(deps): bump langsmith from 0.4.31 to 0.6.3 in /libs/text-splitters
(<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35162">#35162</a>)
chore(deps): bump the other-deps group across 3 directories with 12
updates (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35127">#35127</a>)
chore(deps): bump the other-deps group across 3 directories with 8
updates (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35120">#35120</a>)
chore: add <code>make type</code> target (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35015">#35015</a>)
revert: &quot;chore: add typing target in <code>Makefile</code>&quot;
(<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35013">#35013</a>)
chore: add typing target in <code>Makefile</code> (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35012">#35012</a>)
fix(text-splitters): reverse preserved elements iterator in
<code>HTMLSemanticPreservingSplitter</code> (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/34080">#34080</a>)
chore: enrich <code>pyproject.toml</code> files (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/34980">#34980</a>)
chore(deps): bump the uv group across 20 directories with 3 updates (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/34941">#34941</a>)
chore: upgrade urllib3 to 2.6.3 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/34940">#34940</a>)</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/langchain-ai/langchain/commit/58c4e5bbdd9d18d7fe7ec83b5a05477d06fe2a8e"><code>58c4e5b</code></a>
release(text-splitters): 1.1.2 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36822">#36822</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/c289bf10e940e960a132d7403482283114063063"><code>c289bf1</code></a>
fix(text-splitters): deprecate and use SSRF-safe transport in
split_text_from...</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/b7447c6969fc928ec3f29c200e2e56c0a46c4c77"><code>b7447c6</code></a>
fix(infra): skip serdes tests in min-version release step (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36818">#36818</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/41c0cc58b0dac82000d24715f7a4b44dc8b01fd3"><code>41c0cc5</code></a>
release(openai): 1.1.14 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36820">#36820</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/0516156ef98f5001129f6d47bc8682d6536d58fb"><code>0516156</code></a>
fix(openai): use SSRF-safe transport for image token counting (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36819">#36819</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/338aa8131a8124e7aa1e042616ccd2366ff9f699"><code>338aa81</code></a>
fix(core): restore cloud metadata IPs and link-local range in SSRF
policy (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/3">#3</a>...</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/51e954877efd2d2c3c5bf09364dcfec8794eadb0"><code>51e9548</code></a>
chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/text-splitters (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36797">#36797</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/e85c418cfa559d4a794ddc6db92c6febab44651c"><code>e85c418</code></a>
chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/model-profiles (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36798">#36798</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/789126e6c78ad74664bea26228dda6e72e135dce"><code>789126e</code></a>
chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/standard-tests (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36799">#36799</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/937b3eb3827551d17ee4736f9acc4aa57e88c716"><code>937b3eb</code></a>
chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/langchain_v1 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36800">#36800</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/langchain-ai/langchain/compare/langchain-text-splitters==1.0.0...langchain-text-splitters==1.1.2">compare
view</a></li>
</ul>
</details>
<br />

Updates `langchain-text-splitters` from 1.0.0 to 1.1.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/langchain/releases">langchain-text-splitters's
releases</a>.</em></p>
<blockquote>
<h2>langchain-text-splitters==1.1.2</h2>
<p>Changes since langchain-text-splitters==1.1.1</p>
<p>release(text-splitters): 1.1.2 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36822">#36822</a>)
fix(text-splitters): deprecate and use SSRF-safe transport in
split_text_from_url (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36821">#36821</a>)
chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/text-splitters (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36797">#36797</a>)
chore(deps): bump pytest to <code>9.0.3</code> (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36801">#36801</a>)
chore: bump pytest from 9.0.2 to 9.0.3 in /libs/text-splitters (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36714">#36714</a>)
chore: add comment explaining <code>pygments&gt;=2.20.0</code> (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36570">#36570</a>)
release(core): 1.2.26 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36511">#36511</a>)
chore: pygments&gt;=2.20.0 across all packages (CVE-2026-4539) (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36385">#36385</a>)
fix(text-splitters): prevent silent data loss for empty dict values in
RecursiveJsonSplitter (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35079">#35079</a>)
feat(text-splitters): support spacy tests with Python 3.14 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36198">#36198</a>)
fix(infra): correct lint_diff relative paths in package makefiles (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36333">#36333</a>)
chore: bump requests from 2.32.5 to 2.33.0 in /libs/text-splitters (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36238">#36238</a>)
chore: bump nltk from 3.9.3 to 3.9.4 in /libs/text-splitters (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36237">#36237</a>)
chore(partners): bump <code>langchain-core</code> min to
<code>1.2.21</code> (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36183">#36183</a>)
chore(text-splitters): bump nltk in lock file (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36112">#36112</a>)
ci: suppress pytest streaming output in CI (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36092">#36092</a>)
chore(text-splitters): speed up ci (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36050">#36050</a>)
ci: avoid unnecessary dep installs in lint targets (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36046">#36046</a>)
chore: bump orjson from 3.11.5 to 3.11.6 in /libs/text-splitters (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35856">#35856</a>)
chore: bump locks, lint (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35985">#35985</a>)
perf(.github): set a timeout on get min versions HTTP calls (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35851">#35851</a>)
chore: bump tornado from 6.5.2 to 6.5.5 in /libs/text-splitters (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35774">#35774</a>)
chore: bump the minor-and-patch group across 3 directories with 3
updates (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35589">#35589</a>)
chore: bump the other-deps group across 3 directories with 2 updates (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35512">#35512</a>)
chore: bump nltk from 3.9.2 to 3.9.3 in /libs/text-splitters (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35449">#35449</a>)
chore: bump the other-deps group across 3 directories with 2 updates (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35407">#35407</a>)</p>
<h2>langchain-text-splitters==1.1.1</h2>
<p>Changes since langchain-text-splitters==1.1.0</p>
<p>release(text-splitters): 1.1.1 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35318">#35318</a>)
fix(text-splitters): prevent JSFrameworkTextSplitter from mutating
self._separators on each split_text() call (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35316">#35316</a>)
chore: bump transformers from 5.1.0 to 5.2.0 in /libs/text-splitters in
the other-deps group across 1 directory (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35279">#35279</a>)
chore: bump the other-deps group across 3 directories with 2 updates (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35255">#35255</a>)
style: bump ruff version to 0.15 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35042">#35042</a>)
fix: Server-Side Request Forgery (SSRF) in
HTMLHeaderTextSplitter.split_text_from_url (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35196">#35196</a>)
feat(text-splitters): add model_kwargs to
SentenceTransformersTokenTextSplitter (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35113">#35113</a>)
chore(deps): bump langsmith from 0.4.31 to 0.6.3 in /libs/text-splitters
(<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35162">#35162</a>)
chore(deps): bump the other-deps group across 3 directories with 12
updates (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35127">#35127</a>)
chore(deps): bump the other-deps group across 3 directories with 8
updates (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35120">#35120</a>)
chore: add <code>make type</code> target (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35015">#35015</a>)
revert: &quot;chore: add typing target in <code>Makefile</code>&quot;
(<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35013">#35013</a>)
chore: add typing target in <code>Makefile</code> (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35012">#35012</a>)
fix(text-splitters): reverse preserved elements iterator in
<code>HTMLSemanticPreservingSplitter</code> (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/34080">#34080</a>)
chore: enrich <code>pyproject.toml</code> files (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/34980">#34980</a>)
chore(deps): bump the uv group across 20 directories with 3 updates (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/34941">#34941</a>)
chore: upgrade urllib3 to 2.6.3 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/34940">#34940</a>)</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/langchain-ai/langchain/commit/58c4e5bbdd9d18d7fe7ec83b5a05477d06fe2a8e"><code>58c4e5b</code></a>
release(text-splitters): 1.1.2 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36822">#36822</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/c289bf10e940e960a132d7403482283114063063"><code>c289bf1</code></a>
fix(text-splitters): deprecate and use SSRF-safe transport in
split_text_from...</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/b7447c6969fc928ec3f29c200e2e56c0a46c4c77"><code>b7447c6</code></a>
fix(infra): skip serdes tests in min-version release step (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36818">#36818</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/41c0cc58b0dac82000d24715f7a4b44dc8b01fd3"><code>41c0cc5</code></a>
release(openai): 1.1.14 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36820">#36820</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/0516156ef98f5001129f6d47bc8682d6536d58fb"><code>0516156</code></a>
fix(openai): use SSRF-safe transport for image token counting (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36819">#36819</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/338aa8131a8124e7aa1e042616ccd2366ff9f699"><code>338aa81</code></a>
fix(core): restore cloud metadata IPs and link-local range in SSRF
policy (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/3">#3</a>...</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/51e954877efd2d2c3c5bf09364dcfec8794eadb0"><code>51e9548</code></a>
chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/text-splitters (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36797">#36797</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/e85c418cfa559d4a794ddc6db92c6febab44651c"><code>e85c418</code></a>
chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/model-profiles (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36798">#36798</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/789126e6c78ad74664bea26228dda6e72e135dce"><code>789126e</code></a>
chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/standard-tests (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36799">#36799</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/937b3eb3827551d17ee4736f9acc4aa57e88c716"><code>937b3eb</code></a>
chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/langchain_v1 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36800">#36800</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/langchain-ai/langchain/compare/langchain-text-splitters==1.0.0...langchain-text-splitters==1.1.2">compare
view</a></li>
</ul>
</details>
<br />

Updates `langchain-openai` from 1.1.0 to 1.1.14
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/langchain/releases">langchain-openai's
releases</a>.</em></p>
<blockquote>
<h2>langchain-openai==1.1.14</h2>
<p>Changes since langchain-openai==1.1.13</p>
<p>release(openai): 1.1.14 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36820">#36820</a>)
fix(openai): use SSRF-safe transport for image token counting (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36819">#36819</a>)
chore(deps): bump pytest to <code>9.0.3</code> (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36801">#36801</a>)
chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/partners/openai (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36795">#36795</a>)
chore: bump pillow from 12.1.1 to 12.2.0 in /libs/partners/openai (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36777">#36777</a>)</p>
<h2>langchain-openai==1.1.13</h2>
<p>Changes since langchain-openai==1.1.12</p>
<p>release(openai): 1.1.13 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36729">#36729</a>)
fix(openai): handle content blocks without type key in responses api
conversion (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36725">#36725</a>)
chore(model-profiles): refresh model profile data (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36539">#36539</a>)
chore(openai): fix broken vcr cassette playback and add ci guard (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36502">#36502</a>)
fix(openai,groq,openrouter): use is-not-None checks in usage metadata
token extraction (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36500">#36500</a>)
fix(core): fixed typos in the documentation (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36459">#36459</a>)
chore(model-profiles): refresh model profile data (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36455">#36455</a>)
feat(core): impute placeholder filenames for OpenAI file inputs (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36433">#36433</a>)
chore: pygments&gt;=2.20.0 across all packages (CVE-2026-4539) (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36385">#36385</a>)
chore(model-profiles): refresh model profile data (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36368">#36368</a>)
fix(openai): update computer call test (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36352">#36352</a>)
fix(openai): let user-provided User-Agent override the Azure default (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35523">#35523</a>)
chore: bump requests from 2.32.5 to 2.33.0 in /libs/partners/openai (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36248">#36248</a>)</p>
<h2>langchain-openai==1.1.12</h2>
<p>Changes since langchain-openai==1.1.11</p>
<p>fix(openai): bump min core version (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36180">#36180</a>)
release(openai): 1.1.12 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36178">#36178</a>)
fix(core,model-profiles): add missing <code>ModelProfile</code> fields,
warn on schema drift (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36129">#36129</a>)
fix(openai): support phase parameter (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36161">#36161</a>)
fix(openai): preserve namespace field in streaming function_call chunks
(<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36108">#36108</a>)
ci: suppress pytest streaming output in CI (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36092">#36092</a>)
ci: avoid unnecessary dep installs in lint targets (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36046">#36046</a>)
chore(model-profiles): refresh model profile data (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36039">#36039</a>)
chore: bump orjson from 3.11.5 to 3.11.6 in /libs/partners/openai (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35860">#35860</a>)
fix(openai): add type: message to Responses API input items (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35693">#35693</a>)
perf(.github): set a timeout on get min versions HTTP calls (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35851">#35851</a>)
feat(model-profiles): new fields + <code>Makefile</code> target (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35788">#35788</a>)
fix(openai): close PIL Image handles in token counting to prevent fd
leak (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35742">#35742</a>)
fix(openai): typo (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35763">#35763</a>)
chore(model-profiles): refresh model profile data (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35754">#35754</a>)</p>
<h2>langchain-openai==1.1.11</h2>
<p>Changes since langchain-openai==1.1.10</p>
<p>fix(openai): bump min core version (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35705">#35705</a>)
release(openai): 1.1.11 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35703">#35703</a>)</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/langchain-ai/langchain/commit/b7447c6969fc928ec3f29c200e2e56c0a46c4c77"><code>b7447c6</code></a>
fix(infra): skip serdes tests in min-version release step (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36818">#36818</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/41c0cc58b0dac82000d24715f7a4b44dc8b01fd3"><code>41c0cc5</code></a>
release(openai): 1.1.14 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36820">#36820</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/0516156ef98f5001129f6d47bc8682d6536d58fb"><code>0516156</code></a>
fix(openai): use SSRF-safe transport for image token counting (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36819">#36819</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/338aa8131a8124e7aa1e042616ccd2366ff9f699"><code>338aa81</code></a>
fix(core): restore cloud metadata IPs and link-local range in SSRF
policy (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/3">#3</a>...</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/51e954877efd2d2c3c5bf09364dcfec8794eadb0"><code>51e9548</code></a>
chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/text-splitters (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36797">#36797</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/e85c418cfa559d4a794ddc6db92c6febab44651c"><code>e85c418</code></a>
chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/model-profiles (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36798">#36798</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/789126e6c78ad74664bea26228dda6e72e135dce"><code>789126e</code></a>
chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/standard-tests (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36799">#36799</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/937b3eb3827551d17ee4736f9acc4aa57e88c716"><code>937b3eb</code></a>
chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/langchain_v1 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36800">#36800</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/a06c205738cf5953e28c37287ddb1559d67c01f6"><code>a06c205</code></a>
ci(infra): validate issue checkboxes by section (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36811">#36811</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/aa33b06deb0d65489ce254b48a8aaf8a86304c18"><code>aa33b06</code></a>
fix(langchain-classic): suppress mypy errors in compat code (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36806">#36806</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/langchain-ai/langchain/compare/langchain-openai==1.1.0...langchain-openai==1.1.14">compare
view</a></li>
</ul>
</details>
<br />

Updates `pypdf` from 6.10.1 to 6.10.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/py-pdf/pypdf/releases">pypdf's
releases</a>.</em></p>
<blockquote>
<h2>Version 6.10.2, 2026-04-15</h2>
<h2>What's new</h2>
<h3>Security (SEC)</h3>
<ul>
<li>Do not rely on possibly invalid /Size for incremental cloning (<a
href="https://redirect.github.com/py-pdf/pypdf/issues/3735">#3735</a>)
by <a
href="https://github.com/stefan6419846"><code>@​stefan6419846</code></a></li>
<li>Introduce limits for FlateDecode parameters and image decoding (<a
href="https://redirect.github.com/py-pdf/pypdf/issues/3734">#3734</a>)
by <a
href="https://github.com/stefan6419846"><code>@​stefan6419846</code></a></li>
</ul>
<p><a
href="https://github.com/py-pdf/pypdf/compare/6.10.1...6.10.2">Full
Changelog</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md">pypdf's
changelog</a>.</em></p>
<blockquote>
<h2>Version 6.10.2, 2026-04-15</h2>
<h3>Security (SEC)</h3>
<ul>
<li>Do not rely on possibly invalid /Size for incremental cloning (<a
href="https://redirect.github.com/py-pdf/pypdf/issues/3735">#3735</a>)</li>
<li>Introduce limits for FlateDecode parameters and image decoding (<a
href="https://redirect.github.com/py-pdf/pypdf/issues/3734">#3734</a>)</li>
</ul>
<p><a
href="https://github.com/py-pdf/pypdf/compare/6.10.1...6.10.2">Full
Changelog</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/py-pdf/pypdf/commit/c476b4f293c8ef4cac07dfb755e5582d838fcdc0"><code>c476b4f</code></a>
REL: 6.10.2</li>
<li><a
href="https://github.com/py-pdf/pypdf/commit/c50a0104cf083356f7c7f5d61410466a57f5c88a"><code>c50a010</code></a>
SEC: Do not rely on possibly invalid /Size for incremental cloning (<a
href="https://redirect.github.com/py-pdf/pypdf/issues/3735">#3735</a>)</li>
<li><a
href="https://github.com/py-pdf/pypdf/commit/ac734dab4eef92bcce50d503949b4d9887d89f11"><code>ac734da</code></a>
SEC: Introduce limits for FlateDecode parameters and image decoding (<a
href="https://redirect.github.com/py-pdf/pypdf/issues/3734">#3734</a>)</li>
<li>See full diff in <a
href="https://github.com/py-pdf/pypdf/compare/6.10.1...6.10.2">compare
view</a></li>
</ul>
</details>
<br />

Updates `langchain-text-splitters` from 1.0.0 to 1.1.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/langchain/releases">langchain-text-splitters's
releases</a>.</em></p>
<blockquote>
<h2>langchain-text-splitters==1.1.2</h2>
<p>Changes since langchain-text-splitters==1.1.1</p>
<p>release(text-splitters): 1.1.2 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36822">#36822</a>)
fix(text-splitters): deprecate and use SSRF-safe transport in
split_text_from_url (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36821">#36821</a>)
chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/text-splitters (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36797">#36797</a>)
chore(deps): bump pytest to <code>9.0.3</code> (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36801">#36801</a>)
chore: bump pytest from 9.0.2 to 9.0.3 in /libs/text-splitters (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36714">#36714</a>)
chore: add comment explaining <code>pygments&gt;=2.20.0</code> (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36570">#36570</a>)
release(core): 1.2.26 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36511">#36511</a>)
chore: pygments&gt;=2.20.0 across all packages (CVE-2026-4539) (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36385">#36385</a>)
fix(text-splitters): prevent silent data loss for empty dict values in
RecursiveJsonSplitter (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35079">#35079</a>)
feat(text-splitters): support spacy tests with Python 3.14 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36198">#36198</a>)
fix(infra): correct lint_diff relative paths in package makefiles (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36333">#36333</a>)
chore: bump requests from 2.32.5 to 2.33.0 in /libs/text-splitters (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36238">#36238</a>)
chore: bump nltk from 3.9.3 to 3.9.4 in /libs/text-splitters (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36237">#36237</a>)
chore(partners): bump <code>langchain-core</code> min to
<code>1.2.21</code> (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36183">#36183</a>)
chore(text-splitters): bump nltk in lock file (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36112">#36112</a>)
ci: suppress pytest streaming output in CI (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36092">#36092</a>)
chore(text-splitters): speed up ci (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36050">#36050</a>)
ci: avoid unnecessary dep installs in lint targets (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36046">#36046</a>)
chore: bump orjson from 3.11.5 to 3.11.6 in /libs/text-splitters (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35856">#35856</a>)
chore: bump locks, lint (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35985">#35985</a>)
perf(.github): set a timeout on get min versions HTTP calls (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35851">#35851</a>)
chore: bump tornado from 6.5.2 to 6.5.5 in /libs/text-splitters (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35774">#35774</a>)
chore: bump the minor-and-patch group across 3 directories with 3
updates (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35589">#35589</a>)
chore: bump the other-deps group across 3 directories with 2 updates (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35512">#35512</a>)
chore: bump nltk from 3.9.2 to 3.9.3 in /libs/text-splitters (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35449">#35449</a>)
chore: bump the other-deps group across 3 directories with 2 updates (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35407">#35407</a>)</p>
<h2>langchain-text-splitters==1.1.1</h2>
<p>Changes since langchain-text-splitters==1.1.0</p>
<p>release(text-splitters): 1.1.1 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35318">#35318</a>)
fix(text-splitters): prevent JSFrameworkTextSplitter from mutating
self._separators on each split_text() call (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35316">#35316</a>)
chore: bump transformers from 5.1.0 to 5.2.0 in /libs/text-splitters in
the other-deps group across 1 directory (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35279">#35279</a>)
chore: bump the other-deps group across 3 directories with 2 updates (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35255">#35255</a>)
style: bump ruff version to 0.15 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35042">#35042</a>)
fix: Server-Side Request Forgery (SSRF) in
HTMLHeaderTextSplitter.split_text_from_url (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35196">#35196</a>)
feat(text-splitters): add model_kwargs to
SentenceTransformersTokenTextSplitter (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35113">#35113</a>)
chore(deps): bump langsmith from 0.4.31 to 0.6.3 in /libs/text-splitters
(<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35162">#35162</a>)
chore(deps): bump the other-deps group across 3 directories with 12
updates (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35127">#35127</a>)
chore(deps): bump the other-deps group across 3 directories with 8
updates (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35120">#35120</a>)
chore: add <code>make type</code> target (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35015">#35015</a>)
revert: &quot;chore: add typing target in <code>Makefile</code>&quot;
(<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35013">#35013</a>)
chore: add typing target in <code>Makefile</code> (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35012">#35012</a>)
fix(text-splitters): reverse preserved elements iterator in
<code>HTMLSemanticPreservingSplitter</code> (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/34080">#34080</a>)
chore: enrich <code>pyproject.toml</code> files (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/34980">#34980</a>)
chore(deps): bump the uv group across 20 directories with 3 updates (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/34941">#34941</a>)
chore: upgrade urllib3 to 2.6.3 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/34940">#34940</a>)</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/langchain-ai/langchain/commit/58c4e5bbdd9d18d7fe7ec83b5a05477d06fe2a8e"><code>58c4e5b</code></a>
release(text-splitters): 1.1.2 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36822">#36822</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/c289bf10e940e960a132d7403482283114063063"><code>c289bf1</code></a>
fix(text-splitters): deprecate and use SSRF-safe transport in
split_text_from...</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/b7447c6969fc928ec3f29c200e2e56c0a46c4c77"><code>b7447c6</code></a>
fix(infra): skip serdes tests in min-version release step (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36818">#36818</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/41c0cc58b0dac82000d24715f7a4b44dc8b01fd3"><code>41c0cc5</code></a>
release(openai): 1.1.14 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36820">#36820</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/0516156ef98f5001129f6d47bc8682d6536d58fb"><code>0516156</code></a>
fix(openai): use SSRF-safe transport for image token counting (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36819">#36819</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/338aa8131a8124e7aa1e042616ccd2366ff9f699"><code>338aa81</code></a>
fix(core): restore cloud metadata IPs and link-local range in SSRF
policy (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/3">#3</a>...</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/51e954877efd2d2c3c5bf09364dcfec8794eadb0"><code>51e9548</code></a>
chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/text-splitters (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36797">#36797</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/e85c418cfa559d4a794ddc6db92c6febab44651c"><code>e85c418</code></a>
chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/model-profiles (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36798">#36798</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/789126e6c78ad74664bea26228dda6e72e135dce"><code>789126e</code></a>
chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/standard-tests (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36799">#36799</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/937b3eb3827551d17ee4736f9acc4aa57e88c716"><code>937b3eb</code></a>
chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/langchain_v1 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36800">#36800</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/langchain-ai/langchain/compare/langchain-text-splitters==1.0.0...langchain-text-splitters==1.1.2">compare
view</a></li>
</ul>
</details>
<br />

Updates `langchain-openai` from 1.0.3 to 1.1.14
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/langchain/releases">langchain-openai's
releases</a>.</em></p>
<blockquote>
<h2>langchain-openai==1.1.14</h2>
<p>Changes since langchain-openai==1.1.13</p>
<p>release(openai): 1.1.14 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36820">#36820</a>)
fix(openai): use SSRF-safe transport for image token counting (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36819">#36819</a>)
chore(deps): bump pytest to <code>9.0.3</code> (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36801">#36801</a>)
chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/partners/openai (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36795">#36795</a>)
chore: bump pillow from 12.1.1 to 12.2.0 in /libs/partners/openai (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36777">#36777</a>)</p>
<h2>langchain-openai==1.1.13</h2>
<p>Changes since langchain-openai==1.1.12</p>
<p>release(openai): 1.1.13 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36729">#36729</a>)
fix(openai): handle content blocks without type key in responses api
conversion (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36725">#36725</a>)
chore(model-profiles): refresh model profile data (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36539">#36539</a>)
chore(openai): fix broken vcr cassette playback and add ci guard (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36502">#36502</a>)
fix(openai,groq,openrouter): use is-not-None checks in usage metadata
token extraction (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36500">#36500</a>)
fix(core): fixed typos in the documentation (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36459">#36459</a>)
chore(model-profiles): refresh model profile data (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36455">#36455</a>)
feat(core): impute placeholder filenames for OpenAI file inputs (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36433">#36433</a>)
chore: pygments&gt;=2.20.0 across all packages (CVE-2026-4539) (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36385">#36385</a>)
chore(model-profiles): refresh model profile data (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36368">#36368</a>)
fix(openai): update computer call test (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36352">#36352</a>)
fix(openai): let user-provided User-Agent override the Azure default (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35523">#35523</a>)
chore: bump requests from 2.32.5 to 2.33.0 in /libs/partners/openai (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36248">#36248</a>)</p>
<h2>langchain-openai==1.1.12</h2>
<p>Changes since langchain-openai==1.1.11</p>
<p>fix(openai): bump min core version (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36180">#36180</a>)
release(openai): 1.1.12 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36178">#36178</a>)
fix(core,model-profiles): add missing <code>ModelProfile</code> fields,
warn on schema drift (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36129">#36129</a>)
fix(openai): support phase parameter (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36161">#36161</a>)
fix(openai): preserve namespace field in streaming function_call chunks
(<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36108">#36108</a>)
ci: suppress pytest streaming output in CI (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36092">#36092</a>)
ci: avoid unnecessary dep installs in lint targets (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36046">#36046</a>)
chore(model-profiles): refresh model profile data (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36039">#36039</a>)
chore: bump orjson from 3.11.5 to 3.11.6 in /libs/partners/openai (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35860">#35860</a>)
fix(openai): add type: message to Responses API input items (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35693">#35693</a>)
perf(.github): set a timeout on get min versions HTTP calls (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35851">#35851</a>)
feat(model-profiles): new fields + <code>Makefile</code> target (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35788">#35788</a>)
fix(openai): close PIL Image handles in token counting to prevent fd
leak (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35742">#35742</a>)
fix(openai): typo (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35763">#35763</a>)
chore(model-profiles): refresh model profile data (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35754">#35754</a>)</p>
<h2>langchain-openai==1.1.11</h2>
<p>Changes since langchain-openai==1.1.10</p>
<p>fix(openai): bump min core version (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35705">#35705</a>)
release(openai): 1.1.11 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35703">#35703</a>)</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/langchain-ai/langchain/commit/b7447c6969fc928ec3f29c200e2e56c0a46c4c77"><code>b7447c6</code></a>
fix(infra): skip serdes tests in min-version release step (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36818">#36818</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/41c0cc58b0dac82000d24715f7a4b44dc8b01fd3"><code>41c0cc5</code></a>
release(openai): 1.1.14 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36820">#36820</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/0516156ef98f5001129f6d47bc8682d6536d58fb"><code>0516156</code></a>
fix(openai): use SSRF-safe transport for image token counting (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36819">#36819</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/338aa8131a8124e7aa1e042616ccd2366ff9f699"><code>338aa81</code></a>
fix(core): restore cloud metadata IPs and link-local range in SSRF
policy (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/3">#3</a>...</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/51e954877efd2d2c3c5bf09364dcfec8794eadb0"><code>51e9548</code></a>
chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/text-splitters (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36797">#36797</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/e85c418cfa559d4a794ddc6db92c6febab44651c"><code>e85c418</code></a>
chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/model-profiles (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36798">#36798</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/789126e6c78ad74664bea26228dda6e72e135dce"><code>789126e</code></a>
chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/standard-tests (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36799">#36799</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/937b3eb3827551d17ee4736f9acc4aa57e88c716"><code>937b3eb</code></a>
chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/langchain_v1 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36800">#36800</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/a06c205738cf5953e28c37287ddb1559d67c01f6"><code>a06c205</code></a>
ci(infra): validate issue checkboxes by section (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36811">#36811</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/aa33b06deb0d65489ce254b48a8aaf8a86304c18"><code>aa33b06</code></a>
fix(langchain-classic): suppress mypy errors in compat code (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36806">#36806</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/langchain-ai/langchain/compare/langchain-openai==1.1.0...langchain-openai==1.1.14">compare
view</a></li>
</ul>
</details>
<br />

Updates `langchain-text-splitters` from 1.1.0 to 1.1.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/langchain/releases">langchain-text-splitters's
releases</a>.</em></p>
<blockquote>
<h2>langchain-text-splitters==1.1.2</h2>
<p>Changes since langchain-text-splitters==1.1.1</p>
<p>release(text-splitters): 1.1.2 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36822">#36822</a>)
fix(text-splitters): deprecate and use SSRF-safe transport in
split_text_from_url (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36821">#36821</a>)
chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/text-splitters (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36797">#36797</a>)
chore(deps): bump pytest to <code>9.0.3</code> (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36801">#36801</a>)
chore: bump pytest from 9.0.2 to 9.0.3 in /libs/text-splitters (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36714">#36714</a>)
chore: add comment explaining <code>pygments&gt;=2.20.0</code> (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36570">#36570</a>)
release(core): 1.2.26 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36511">#36511</a>)
chore: pygments&gt;=2.20.0 across all packages (CVE-2026-4539) (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36385">#36385</a>)
fix(text-splitters): prevent silent data loss for empty dict values in
RecursiveJsonSplitter (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35079">#35079</a>)
feat(text-splitters): support spacy tests with Python 3.14 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36198">#36198</a>)
fix(infra): correct lint_diff relative paths in package makefiles (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36333">#36333</a>)
chore: bump requests from 2.32.5 to 2.33.0 in /libs/text-splitters (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36238">#36238</a>)
chore: bump nltk from 3.9.3 to 3.9.4 in /libs/text-splitters (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36237">#36237</a>)
chore(partners): bump <code>langchain-core</code> min to
<code>1.2.21</code> (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36183">#36183</a>)
chore(text-splitters): bump nltk in lock file (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36112">#36112</a>)
ci: suppress pytest streaming output in CI (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36092">#36092</a>)
chore(text-splitters): speed up ci (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36050">#36050</a>)
ci: avoid unnecessary dep installs in lint targets (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36046">#36046</a>)
chore: bump orjson from 3.11.5 to 3.11.6 in /libs/text-splitters (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35856">#35856</a>)
chore: bump locks, lint (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35985">#35985</a>)
perf(.github): set a timeout on get min versions HTTP calls (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35851">#35851</a>)
chore: bump tornado from 6.5.2 to 6.5.5 in /libs/text-splitters (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35774">#35774</a>)
chore: bump the minor-and-patch group across 3 directories with 3
updates (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35589">#35589</a>)
chore: bump the other-deps group across 3 directories with 2 updates (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35512">#35512</a>)
chore: bump nltk from 3.9.2 to 3.9.3 in /libs/text-splitters (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35449">#35449</a>)
chore: bump the other-deps group across 3 directories with 2 updates (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35407">#35407</a>)</p>
<h2>langchain-text-splitters==1.1.1</h2>
<p>Changes since langchain-text-splitters==1.1.0</p>
<p>release(text-splitters): 1.1.1 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35318">#35318</a>)
fix(text-splitters): prevent JSFrameworkTextSplitter from mutating
self._separators on each split_text() call (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35316">#35316</a>)
chore: bump transformers from 5.1.0 to 5.2.0 in /libs/text-splitters in
the other-deps group across 1 directory (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35279">#35279</a>)
chore: bump the other-deps group across 3 directories with 2 updates (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35255">#35255</a>)
style: bump ruff version to 0.15 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35042">#35042</a>)
fix: Server-Side Request Forgery (SSRF) in
HTMLHeaderTextSplitter.split_text_from_url (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35196">#35196</a>)
feat(text-splitters): add model_kwargs to
SentenceTransformersTokenTextSplitter (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35113">#35113</a>)
chore(deps): bump langsmith from 0.4.31 to 0.6.3 in /libs/text-splitters
(<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35162">#35162</a>)
chore(deps): bump the other-deps group across 3 directories with 12
updates (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35127">#35127</a>)
chore(deps): bump the other-deps group across 3 directories with 8
updates (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35120">#35120</a>)
chore: add <code>make type</code> target (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35015">#35015</a>)
revert: &quot;chore: add typing target in <code>Makefile</code>&quot;
(<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35013">#35013</a>)
chore: add typing target in <code>Makefile</code> (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/35012">#35012</a>)
fix(text-splitters): reverse preserved elements iterator in
<code>HTMLSemanticPreservingSplitter</code> (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/34080">#34080</a>)
chore: enrich <code>pyproject.toml</code> files (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/34980">#34980</a>)
chore(deps): bump the uv group across 20 directories with 3 updates (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/34941">#34941</a>)
chore: upgrade urllib3 to 2.6.3 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/34940">#34940</a>)</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/langchain-ai/langchain/commit/58c4e5bbdd9d18d7fe7ec83b5a05477d06fe2a8e"><code>58c4e5b</code></a>
release(text-splitters): 1.1.2 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36822">#36822</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/c289bf10e940e960a132d7403482283114063063"><code>c289bf1</code></a>
fix(text-splitters): deprecate and use SSRF-safe transport in
split_text_from...</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/b7447c6969fc928ec3f29c200e2e56c0a46c4c77"><code>b7447c6</code></a>
fix(infra): skip serdes tests in min-version release step (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36818">#36818</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/41c0cc58b0dac82000d24715f7a4b44dc8b01fd3"><code>41c0cc5</code></a>
release(openai): 1.1.14 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36820">#36820</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/0516156ef98f5001129f6d47bc8682d6536d58fb"><code>0516156</code></a>
fix(openai): use SSRF-safe transport for image token counting (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36819">#36819</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/338aa8131a8124e7aa1e042616ccd2366ff9f699"><code>338aa81</code></a>
fix(core): restore cloud metadata IPs and link-local range in SSRF
policy (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/3">#3</a>...</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/51e954877efd2d2c3c5bf09364dcfec8794eadb0"><code>51e9548</code></a>
chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/text-splitters (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36797">#36797</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/e85c418cfa559d4a794ddc6db92c6febab44651c"><code>e85c418</code></a>
chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/model-profiles (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36798">#36798</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/789126e6c78ad74664bea26228dda6e72e135dce"><code>789126e</code></a>
chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/standard-tests (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36799">#36799</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchain/commit/937b3eb3827551d17ee4736f9acc4aa57e88c716"><code>937b3eb</code></a>
chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/langchain_v1 (<a
href="https://redirect.github.com/langchain-ai/langchain/issues/36800">#36800</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/langchain-ai/langchain/compare/langchain-text-splitters==1.0.0...langchain-text-splitters==1.1.2">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/langchain-ai/langchain-mongodb/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
D
dependabot[bot] committed
564f3382c37f079c8c94fb92f4a52b6626db9b27
Parent: edee54e
Committed by GitHub <noreply@github.com> on 4/21/2026, 3:06:12 AM