dima/langchain
1
0 Fork 0
mirror of https://github.com/langchain-ai/langchain.git synced 2026-10-05 17:35:28 +03:00
Code Issues Packages Projects Releases Wiki Activity
16,482 Commits 1,236 Branches 1,383 Tags
nm/cache_openai_tool
Commit Graph
2423 Commits
Author SHA1 Message Date
Mason Daugherty 40956c3882 release(fireworks): 1.5.2 (#39093) 
Bump `langchain-fireworks` from 1.5.1 to 1.5.2 to ship the model profile
refreshes landed since the last release.

## Release note

`langchain-fireworks` 1.5.2 refreshes Fireworks model profile data.

*AI-assisted contribution.*
 2026-07-27 12:53:20 -04:00
langchain-oss-model-profiles[bot]andmdrxy 828335a920 chore(model-profiles): refresh model profile data (#39092) 
Automated refresh of model profile data for all in-monorepo partner
integrations via `langchain-profiles refresh`.

🤖 Generated by the [`refresh_model_profiles`
workflow](https://github.com/langchain-ai/langchain/blob/master/.github/workflows/refresh_model_profiles.yml).


## Summary of changes

**2 added · 0 removed · 0 changed** across 1 provider(s).

### fireworks-ai

**➕ 2 added**
- `accounts/fireworks/models/kimi-k3` — 1,048,576 ctx, 131,072 out,
text+image in, reasoning, tools
- `accounts/fireworks/routers/kimi-k3-fast` — 1,048,576 ctx, 131,072
out, text+image in, reasoning, tools

Co-authored-by: mdrxy <61371264+mdrxy@users.noreply.github.com>
 2026-07-27 12:37:41 -04:00
langchain-oss-model-profiles[bot]andmdrxy c5066f1d12 chore(model-profiles): refresh model profile data (#39084) 
Automated refresh of model profile data for all in-monorepo partner
integrations via `langchain-profiles refresh`.

🤖 Generated by the [`refresh_model_profiles`
workflow](https://github.com/langchain-ai/langchain/blob/master/.github/workflows/refresh_model_profiles.yml).


## Summary of changes

**0 added · 3 removed · 4 changed** across 2 provider(s).

<details>
<summary>fireworks-ai</summary>

**✏️ 2 changed**
- `accounts/fireworks/models/glm-5p1`: attachments no → unset; audio
input no → unset; audio output no → unset; image input no → unset; image
output no → unset; last updated `2026-04-01` → unset; max input tokens
202,800 → unset; max output tokens 131,072 → unset; display name `GLM
5.1` → unset; removed open weights; removed reasoning; release date
`2026-04-01` → unset; removed temperature control; removed text input;
removed text output; removed tool calling; video input no → unset; video
output no → unset
- `accounts/fireworks/routers/glm-5p1-fast`: attachments no → unset;
audio input no → unset; audio output no → unset; image input no → unset;
image output no → unset; last updated `2026-04-01` → unset; max input
tokens 202,800 → unset; max output tokens 131,072 → unset; display name
`GLM 5.1 Fast` → unset; removed open weights; removed reasoning; release
date `2026-04-01` → unset; removed temperature control; removed text
input; removed text output; removed tool calling; video input no →
unset; video output no → unset

</details>

<details>
<summary>openrouter</summary>

**➖ 3 removed**
- `inflection/inflection-3-pi`
- `inflection/inflection-3-productivity`
- `openai/gpt-4o-mini-search-preview`

**✏️ 2 changed**
- `openai/gpt-5.1-codex-mini`: max output tokens 100,000 → 128,000
- `qwen/qwen3-30b-a3b`: max output tokens 8,192 → 16,384

</details>

Co-authored-by: mdrxy <61371264+mdrxy@users.noreply.github.com>
 2026-07-27 09:58:45 -04:00
langchain-oss-model-profiles[bot]andmdrxy 39701d6b8e chore(model-profiles): refresh model profile data (#39050) 
Automated refresh of model profile data for all in-monorepo partner
integrations via `langchain-profiles refresh`.

🤖 Generated by the [`refresh_model_profiles`
workflow](https://github.com/langchain-ai/langchain/blob/master/.github/workflows/refresh_model_profiles.yml).


## Summary of changes

**4 added · 2 removed · 31 changed** across 4 provider(s).

<details>
<summary>fireworks-ai</summary>

**✏️ 1 changed**
- `accounts/fireworks/models/minimax-m3`: added image input; added video
input

</details>

<details>
<summary>openai</summary>

**➖ 2 removed**
- `o3-deep-research`
- `o4-mini-deep-research`

**✏️ 17 changed**
- `gpt-3.5-turbo`: status unset → `deprecated`
- `gpt-4`: status unset → `deprecated`
- `gpt-4-turbo`: status unset → `deprecated`
- `gpt-4.1-nano`: status unset → `deprecated`
- `gpt-4o-2024-05-13`: status unset → `deprecated`
- `gpt-5-chat-latest`: removed attachments; audio input no → unset;
audio output no → unset; removed image input; image output no → unset;
last updated `2025-08-07` → unset; max output tokens 128,000 → unset;
display name `GPT-5 Chat (latest)` → unset; open weights no → unset;
removed reasoning; release date `2025-08-07` → unset; removed structured
output; removed temperature control; removed text input; removed text
output; tool calling no → unset; video input no → unset; video output no
→ unset
- `gpt-5-codex`: attachments no → unset; audio input no → unset; audio
output no → unset; removed image input; image output no → unset; last
updated `2025-09-15` → unset; max output tokens 128,000 → unset; display
name `GPT-5-Codex` → unset; open weights no → unset; removed reasoning;
release date `2025-09-15` → unset; removed structured output;
temperature control no → unset; removed text input; removed text output;
removed tool calling; video input no → unset; video output no → unset
- `gpt-5.1-chat-latest`: removed attachments; audio input no → unset;
audio output no → unset; removed image input; image output no → unset;
last updated `2025-11-13` → unset; max output tokens 16,384 → unset;
display name `GPT-5.1 Chat` → unset; open weights no → unset; removed
reasoning; release date `2025-11-13` → unset; removed structured output;
temperature control no → unset; removed text input; removed text output;
removed tool calling; video input no → unset; video output no → unset
- `gpt-5.1-codex`: removed attachments; audio input no → unset; audio
output no → unset; removed image input; image output no → unset; last
updated `2025-11-13` → unset; max output tokens 128,000 → unset; display
name `GPT-5.1 Codex` → unset; open weights no → unset; removed
reasoning; release date `2025-11-13` → unset; removed structured output;
temperature control no → unset; removed text input; removed text output;
removed tool calling; video input no → unset; video output no → unset
- `gpt-5.1-codex-max`: removed attachments; audio input no → unset;
audio output no → unset; removed image input; image output no → unset;
last updated `2025-11-13` → unset; max output tokens 128,000 → unset;
display name `GPT-5.1 Codex Max` → unset; open weights no → unset;
removed reasoning; release date `2025-11-13` → unset; removed structured
output; temperature control no → unset; removed text input; removed text
output; removed tool calling; video input no → unset; video output no →
unset
- `gpt-5.1-codex-mini`: removed attachments; audio input no → unset;
audio output no → unset; removed image input; image output no → unset;
last updated `2025-11-13` → unset; max output tokens 128,000 → unset;
display name `GPT-5.1 Codex mini` → unset; open weights no → unset;
removed reasoning; release date `2025-11-13` → unset; removed structured
output; temperature control no → unset; removed text input; removed text
output; removed tool calling; video input no → unset; video output no →
unset
- `gpt-5.2-codex`: removed attachments; audio input no → unset; audio
output no → unset; removed image input; image output no → unset; last
updated `2025-12-11` → unset; max input tokens 400,000 → unset; max
output tokens 128,000 → unset; display name `GPT-5.2 Codex` → unset;
open weights no → unset; removed reasoning; release date `2025-12-11` →
unset; removed structured output; temperature control no → unset;
removed text input; removed text output; removed tool calling; video
input no → unset; video output no → unset
- `gpt-image-1`: status unset → `deprecated`
- `o1`: status unset → `deprecated`
- `o1-pro`: status unset → `deprecated`
- `o3-mini`: status unset → `deprecated`
- `o4-mini`: status unset → `deprecated`

</details>

<details>
<summary>openrouter</summary>

**➕ 3 added**
- `anthropic/claude-opus-5` — 1,000,000 ctx, 128,000 out, text+image+pdf
in, reasoning, tools
- `anthropic/claude-opus-5-fast` — 1,000,000 ctx, 128,000 out,
text+image+pdf in, reasoning, tools
- `inclusionai/ling-3.0-flash:free` — 262,144 ctx, 32,768 out,
reasoning, tools

**✏️ 13 changed**
- `arcee-ai/trinity-large-thinking`: max output tokens 80,000 → 262,144
- `deepseek/deepseek-v4-flash`: max output tokens 65,536 → 393,216
- `google/gemini-3.1-flash-lite-image`: max output tokens 65,536 →
66,000; display name `Nano Banana 2 Lite (Gemini 3.1 Flash Lite Image)`
→ `Nano Banana 2 Lite`
- `google/gemma-4-26b-a4b-it`: max output tokens 16,384 → 262,144
- `google/lyria-3-clip-preview`: last updated `2026-03-30` →
`2026-03-25`; release date `2026-03-30` → `2026-03-25`
- `google/lyria-3-pro-preview`: last updated `2026-03-30` →
`2026-03-25`; release date `2026-03-30` → `2026-03-25`
- `meta-llama/llama-3.2-3b-instruct`: max output tokens 80,000 → 131,072
- `qwen/qwen3-14b`: max output tokens 16,384 → 8,192
- `qwen/qwen3-vl-30b-a3b-instruct`: max output tokens 32,768 → 16,384
- `qwen/qwen3.5-27b`: max output tokens 81,920 → 65,536
- `tencent/hy3`: max output tokens 262,144 → 128,000
- `thinkingmachines/inkling`: max input tokens 524,288 → 1,048,576
- `z-ai/glm-4.7-flash`: max output tokens 131,072 → 16,384

</details>

<details>
<summary>xai</summary>

**➕ 1 added**
- `grok-imagine-video-1.5` — 1,024 ctx, text+image+pdf in

</details>

Co-authored-by: mdrxy <61371264+mdrxy@users.noreply.github.com>
 2026-07-26 21:24:00 -04:00
Hunter Lovell c19eee28fa release(anthropic): 1.5.2 (#39056) 2026-07-24 12:04:21 -07:00
Hunter Lovell 76b4b2472a feat(anthropic): add Claude Opus 5 support (#39054) 
Upgrades langchain-anthropic to the latest sdk version (0.120.0) and
regenerates model profiles to include entries for claude-opus-5. This
also adds a validation closure to fail fast on model specific
configuration (with Opus 5, thinking cannot be disabled for xhigh and
max reasoning effort levels).
 2026-07-24 11:55:37 -07:00
ccurme f6885a79b8 release(openai): 1.4.1 (#39045) 2026-07-23 16:24:24 -04:00
ccurme 8bce594d1e release(fireworks): 1.5.1 (#39044) 2026-07-23 16:23:24 -04:00
ccurme f4e462774e release(anthropic): 1.5.1 (#39043) 2026-07-23 16:19:22 -04:00
ccurme d35a4ef183 feat(anthropic,fireworks,openai): support langsmith gateway through env var (#38742) 2026-07-23 15:49:06 -04:00
langchain-oss-model-profiles[bot]andmdrxy 64f5ebf971 chore(model-profiles): refresh model profile data (#39036) 
Automated refresh of model profile data for all in-monorepo partner
integrations via `langchain-profiles refresh`.

🤖 Generated by the [`refresh_model_profiles`
workflow](https://github.com/langchain-ai/langchain/blob/master/.github/workflows/refresh_model_profiles.yml).


## Summary of changes

**1 added · 0 removed · 1 changed** across 2 provider(s).

<details>
<summary>huggingface</summary>

**➕ 1 added**
- `XiaomiMiMo/MiMo-V2.5` — 262,144 ctx, 131,072 out, reasoning, tools

</details>

<details>
<summary>openrouter</summary>

**✏️ 1 changed**
- `google/gemma-4-31b-it`: max output tokens 16,384 → 262,144

</details>

Co-authored-by: mdrxy <61371264+mdrxy@users.noreply.github.com>
 2026-07-23 09:24:05 -04:00
Mason Daugherty 1e385eb298 release(openrouter): 0.2.7 (#39022) 2026-07-22 16:12:54 -04:00
Mason Daugherty 50e9126b15 fix(anthropic): enable structured output for Claude Opus 4.8 (#39021) 
[Anthropic's structured-output
documentation](https://platform.claude.com/docs/en/build-with-claude/structured-outputs)
lists `claude-opus-4-8` as supporting native structured output, but
`ChatAnthropic` currently reports that capability as disabled.

This updates the Anthropic profile augmentation and regenerates the
model profile so
`ChatAnthropic(model="claude-opus-4-8").profile["structured_output"]` is
`True`.
 2026-07-22 15:45:42 -04:00
langchain-oss-model-profiles[bot]andmdrxy 339fcf33b3 chore(model-profiles): refresh model profile data (#39010) 
Automated refresh of model profile data for all in-monorepo partner
integrations via `langchain-profiles refresh`.

🤖 Generated by the [`refresh_model_profiles`
workflow](https://github.com/langchain-ai/langchain/blob/master/.github/workflows/refresh_model_profiles.yml).


## Summary of changes

**4 added · 1 removed · 42 changed** across 1 provider(s).

### openrouter

**➕ 4 added**
- `google/gemini-3.5-flash-lite` — 1,048,576 ctx, 65,536 out,
text+image+audio+video+pdf in, reasoning, tools
- `google/gemini-3.6-flash` — 1,048,576 ctx, 65,536 out,
text+image+audio+video+pdf in, reasoning, tools
- `poolside/laguna-s-2.1` — 1,048,576 ctx, 131,072 out, reasoning, tools
- `poolside/laguna-s-2.1:free` — 262,144 ctx, 32,768 out, reasoning,
tools

**➖ 1 removed**
- `tencent/hy3:free`

**✏️ 42 changed**
- `anthracite-org/magnum-v4-72b`: max input tokens 32,768 → 16,384
- `baidu/ernie-4.5-vl-424b-a47b`: max input tokens 131,072 → 123,000
- `deepseek/deepseek-chat`: max input tokens 131,072 → 163,840
- `deepseek/deepseek-r1-distill-llama-70b`: max input tokens 128,000 →
8,192
- `deepseek/deepseek-v3.1-terminus`: max input tokens 131,072 → 163,840
- `google/gemini-3-pro-image`: max input tokens 65,536 → 131,072
- `google/gemini-3.1-flash-image-preview`: max output tokens 32,768 →
65,536
- `google/gemini-3.1-pro-preview-customtools`: max input tokens
1,048,756 → 1,048,576
- `google/gemma-3-27b-it`: max input tokens 131,072 → 262,144
- `google/gemma-4-31b-it`: max output tokens 262,144 → 16,384
- `gryphe/mythomax-l2-13b`: max input tokens 4,096 → 8,192
- `kwaipilot/kat-coder-pro-v2`: max input tokens 256,000 → 262,144
- `meta-llama/llama-3.2-1b-instruct`: max input tokens 131,072 → 60,000
- `meta-llama/llama-4-scout`: max input tokens 10,000,000 → 1,310,720
- `meta-llama/llama-guard-4-12b`: max input tokens 163,840 → 1,048,576
- `microsoft/wizardlm-2-8x22b`: max input tokens 65,536 → 65,535
- `mistralai/mistral-small-3.2-24b-instruct`: max input tokens 131,072 →
256,000
- `nvidia/nemotron-3-super-120b-a12b:free`: max input tokens 1,000,000 →
262,144
- `nvidia/nemotron-3-ultra-550b-a55b`: max input tokens 1,000,000 →
512,288
- `qwen/qwen-2.5-72b-instruct`: max input tokens 131,072 → 32,768
- `qwen/qwen-2.5-7b-instruct`: max input tokens 131,072 → 32,768
- `qwen/qwen-2.5-coder-32b-instruct`: max input tokens 128,000 → 32,768
- `qwen/qwen2.5-vl-72b-instruct`: max input tokens 131,072 → 128,000
- `qwen/qwen3-14b`: max input tokens 131,702 → 131,072
- `qwen/qwen3-30b-a3b-thinking-2507`: max input tokens 131,072 → 81,920
- …and 17 more

Co-authored-by: mdrxy <61371264+mdrxy@users.noreply.github.com>
 2026-07-22 09:41:16 -04:00
Mason Daugherty 592055e15e fix(openai): correct gpt-5.3-chat-latest profile (#39009) 
`gpt-5.3-chat-latest` is OpenAI's non-reasoning GPT-5.3 Instant model,
but its generated LangChain profile advertises configurable
`reasoning_effort_levels` while also reporting `reasoning_output=False`.
Profile-driven clients can therefore offer settings that the model does
not support.

OpenAI's [model
page](https://developers.openai.com/api/docs/models/gpt-5.3-chat-latest)
identifies this alias as GPT-5.3 Instant. Its [launch
announcement](https://openai.com/index/gpt-5-3-instant/) separates
Instant from Thinking and Pro, while the [reasoning
guide](https://developers.openai.com/api/docs/guides/reasoning) says
effort support is model-dependent and must be checked on the relevant
model page.

This removes only the incorrect manual effort augmentation, regenerates
the OpenAI profile, and adds focused coverage that keeps the
non-reasoning profile free of effort levels. No other model profiles
change.

## Release note

The `gpt-5.3-chat-latest` OpenAI model profile no longer advertises
unsupported configurable reasoning effort levels.

This contribution was prepared with assistance from an AI coding agent.
 2026-07-21 23:22:06 -04:00
Nishitha MandMason Daugherty 789c6abdc2 release(xai): 1.3.0 (#38984) 
xai version bump from 1.2.2 to 1.3.0 and upgrade langchain-core version
to 1.5.0

---------

Co-authored-by: Mason Daugherty <mason@langchain.dev>
 2026-07-21 12:11:24 -04:00
Nishitha MandMason Daugherty 8ccd16ae92 release(anthropic): 1.5.0 (#38985) 
anthropic version bump from 1.4.8 to 1.5.0 and upgrade langchain-core
version to 1.5.0

---------

Co-authored-by: Mason Daugherty <mason@langchain.dev>
 2026-07-21 12:11:06 -04:00
Nishitha MandMason Daugherty fff9a4d65d release(fireworks): 1.5.0 (#38986) 
fireworks version bump from 1.4.4 to 1.5.0 and upgrade langchain-core
version to 1.5.0

---------

Co-authored-by: Mason Daugherty <mason@langchain.dev>
 2026-07-21 12:10:44 -04:00
Nishitha MandMason Daugherty 46ca9e9477 release(openai): 1.4.0 (#38983) 
openai version bump from 1.3.5 to 1.3.6 and langchain-core from 1.4.9 to
1.5.0

---------

Co-authored-by: Mason Daugherty <mason@langchain.dev>
 2026-07-21 11:53:13 -04:00
dependabot[bot] 226458b3d9 chore: bump pillow from 12.2.0 to 12.3.0 in /libs/partners/qdrant (#38998) 
Bumps [pillow](https://github.com/python-pillow/Pillow) from 12.2.0 to
12.3.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/python-pillow/Pillow/releases">pillow's
releases</a>.</em></p>
<blockquote>
<h2>12.3.0</h2>
<p><a
href="https://pillow.readthedocs.io/en/stable/releasenotes/12.3.0.html">https://pillow.readthedocs.io/en/stable/releasenotes/12.3.0.html</a></p>
<h2>Removals</h2>
<ul>
<li>Remove non-image ImageCms modes <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9697">#9697</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
</ul>
<h2>Documentation</h2>
<ul>
<li>Add release notes for SBOM and performance improvements <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9747">#9747</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Add security release notes <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9741">#9741</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Add release notes for Python 3.15 beta wheels <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9696">#9696</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>ImageFont can also be used with ImageText <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9597">#9597</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Additional guidelines for security reports <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9659">#9659</a>
[<a
href="https://github.com/wiredfool"><code>@​wiredfool</code></a>]</li>
<li>Fixed typo <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9636">#9636</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Added CVEs to 12.2.0 release notes <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9591">#9591</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Revise development support information in README <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9583">#9583</a>
[<a
href="https://github.com/aclark4life"><code>@​aclark4life</code></a>]</li>
<li>Add INCIDENT_RESPONSE.md <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9555">#9555</a>
[<a
href="https://github.com/aclark4life"><code>@​aclark4life</code></a>]</li>
<li>Add STRIDE threat model to security docs <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9562">#9562</a>
[<a
href="https://github.com/aclark4life"><code>@​aclark4life</code></a>]</li>
<li>Add CVEs to 12.2.0 release notes <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9556">#9556</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Update README with revised security policy <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9553">#9553</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Update security policy <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9552">#9552</a>
[<a
href="https://github.com/aclark4life"><code>@​aclark4life</code></a>]</li>
<li>Update macOS tested Python versions <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9534">#9534</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
</ul>
<h2>Dependencies</h2>
<ul>
<li>Update dependency harfbuzz to v14.2.1 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9720">#9720</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency mypy to v2 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9653">#9653</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency cibuildwheel to v4 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9665">#9665</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update github-actions <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9655">#9655</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency libavif to v1.4.2 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9652">#9652</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency lcms2 to v2.19.1 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9651">#9651</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency check-jsonschema to v0.37.2 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9650">#9650</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update google/oss-fuzz digest to d872252 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9614">#9614</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency lcms2 to v2.19 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9609">#9609</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency libpng to v1.6.58 - autoclosed <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9608">#9608</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency harfbuzz to v14 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9610">#9610</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency mypy to v1.20.2 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9599">#9599</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update github-actions <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9611">#9611</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency cibuildwheel to v3.4.1 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9607">#9607</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Move dependency versions to single JSON and enable Renovate <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9559">#9559</a>
[<a href="https://github.com/hugovk"><code>@​hugovk</code></a>]</li>
<li>Updated raqm to 0.10.5 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9557">#9557</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Update dependency cibuildwheel to v3.4.0 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9532">#9532</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
</ul>
<h2>Testing</h2>
<ul>
<li>Remove matrix.os from benchmark <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9735">#9735</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Remove references to libavif patch <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9734">#9734</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Add benchmark tests <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9654">#9654</a>
[<a href="https://github.com/akx"><code>@​akx</code></a>]</li>
<li>Use reshape() instead of setting NumPy array shape directly <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9728">#9728</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/python-pillow/Pillow/commit/bb1d8e8ab8d29048624d96e3ee53cecf7c13d13d"><code>bb1d8e8</code></a>
12.3.0 version bump</li>
<li><a
href="https://github.com/python-pillow/Pillow/commit/e63fc481dc2e07e21d5403deafb8f1ed98a513af"><code>e63fc48</code></a>
Add release notes for SBOM and performance improvements (<a
href="https://redirect.github.com/python-pillow/Pillow/issues/9747">#9747</a>)</li>
<li><a
href="https://github.com/python-pillow/Pillow/commit/13b701bbab291eec4bc87ea17ba06c94e5fe3054"><code>13b701b</code></a>
Add release notes for <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9679">#9679</a></li>
<li><a
href="https://github.com/python-pillow/Pillow/commit/5564ca72fcd59d040e270af5dcf17a0d7161c364"><code>5564ca7</code></a>
List methods</li>
<li><a
href="https://github.com/python-pillow/Pillow/commit/a0920fd384f800b5d0ba3dd29ecdeae4f1d4043b"><code>a0920fd</code></a>
Speed up ImageChops operations (<a
href="https://redirect.github.com/python-pillow/Pillow/issues/9738">#9738</a>)</li>
<li><a
href="https://github.com/python-pillow/Pillow/commit/07e9a6cd5336dc6cf8cae9165cd70cdd2b3e42fc"><code>07e9a6c</code></a>
Speed up <code>Image.filter()</code> (<a
href="https://redirect.github.com/python-pillow/Pillow/issues/9736">#9736</a>)</li>
<li><a
href="https://github.com/python-pillow/Pillow/commit/a94578cf9649ea13e426cf7fb2b71b39ffc0dd50"><code>a94578c</code></a>
Speed up <code>Image.getchannel()</code>, <code>Image.merge()</code>,
<code>Image.putalpha()</code> and `Image...</li>
<li><a
href="https://github.com/python-pillow/Pillow/commit/53e02c43c919d149b2a154a5180079f9df18fbbb"><code>53e02c4</code></a>
Speed up <code>Image.fill()</code>, <code>Image.linear_gradient()</code>
and `Image.radial_gradient...</li>
<li><a
href="https://github.com/python-pillow/Pillow/commit/af037475be8634ba739744243164ba9e2c8346a6"><code>af03747</code></a>
Speed up <code>Image.resample()</code> (<a
href="https://redirect.github.com/python-pillow/Pillow/issues/9739">#9739</a>)</li>
<li><a
href="https://github.com/python-pillow/Pillow/commit/5c9ca56c3e5fba52b647809fbb0986c87e73a571"><code>5c9ca56</code></a>
Speed up <code>alpha_composite</code>, <code>matrix</code>,
<code>negative</code>, <code>quantize</code> (<a
href="https://redirect.github.com/python-pillow/Pillow/issues/9740">#9740</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/python-pillow/Pillow/compare/12.2.0...12.3.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pillow&package-manager=uv&previous-version=12.2.0&new-version=12.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/langchain-ai/langchain/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-21 10:43:57 -04:00
dependabot[bot] 9307c5f21b chore: bump pillow from 12.2.0 to 12.3.0 in /libs/partners/openai (#38999) 
Bumps [pillow](https://github.com/python-pillow/Pillow) from 12.2.0 to
12.3.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/python-pillow/Pillow/releases">pillow's
releases</a>.</em></p>
<blockquote>
<h2>12.3.0</h2>
<p><a
href="https://pillow.readthedocs.io/en/stable/releasenotes/12.3.0.html">https://pillow.readthedocs.io/en/stable/releasenotes/12.3.0.html</a></p>
<h2>Removals</h2>
<ul>
<li>Remove non-image ImageCms modes <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9697">#9697</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
</ul>
<h2>Documentation</h2>
<ul>
<li>Add release notes for SBOM and performance improvements <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9747">#9747</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Add security release notes <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9741">#9741</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Add release notes for Python 3.15 beta wheels <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9696">#9696</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>ImageFont can also be used with ImageText <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9597">#9597</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Additional guidelines for security reports <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9659">#9659</a>
[<a
href="https://github.com/wiredfool"><code>@​wiredfool</code></a>]</li>
<li>Fixed typo <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9636">#9636</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Added CVEs to 12.2.0 release notes <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9591">#9591</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Revise development support information in README <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9583">#9583</a>
[<a
href="https://github.com/aclark4life"><code>@​aclark4life</code></a>]</li>
<li>Add INCIDENT_RESPONSE.md <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9555">#9555</a>
[<a
href="https://github.com/aclark4life"><code>@​aclark4life</code></a>]</li>
<li>Add STRIDE threat model to security docs <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9562">#9562</a>
[<a
href="https://github.com/aclark4life"><code>@​aclark4life</code></a>]</li>
<li>Add CVEs to 12.2.0 release notes <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9556">#9556</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Update README with revised security policy <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9553">#9553</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Update security policy <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9552">#9552</a>
[<a
href="https://github.com/aclark4life"><code>@​aclark4life</code></a>]</li>
<li>Update macOS tested Python versions <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9534">#9534</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
</ul>
<h2>Dependencies</h2>
<ul>
<li>Update dependency harfbuzz to v14.2.1 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9720">#9720</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency mypy to v2 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9653">#9653</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency cibuildwheel to v4 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9665">#9665</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update github-actions <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9655">#9655</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency libavif to v1.4.2 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9652">#9652</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency lcms2 to v2.19.1 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9651">#9651</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency check-jsonschema to v0.37.2 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9650">#9650</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update google/oss-fuzz digest to d872252 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9614">#9614</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency lcms2 to v2.19 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9609">#9609</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency libpng to v1.6.58 - autoclosed <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9608">#9608</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency harfbuzz to v14 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9610">#9610</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency mypy to v1.20.2 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9599">#9599</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update github-actions <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9611">#9611</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency cibuildwheel to v3.4.1 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9607">#9607</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Move dependency versions to single JSON and enable Renovate <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9559">#9559</a>
[<a href="https://github.com/hugovk"><code>@​hugovk</code></a>]</li>
<li>Updated raqm to 0.10.5 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9557">#9557</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Update dependency cibuildwheel to v3.4.0 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9532">#9532</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
</ul>
<h2>Testing</h2>
<ul>
<li>Remove matrix.os from benchmark <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9735">#9735</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Remove references to libavif patch <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9734">#9734</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Add benchmark tests <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9654">#9654</a>
[<a href="https://github.com/akx"><code>@​akx</code></a>]</li>
<li>Use reshape() instead of setting NumPy array shape directly <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9728">#9728</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/python-pillow/Pillow/commit/bb1d8e8ab8d29048624d96e3ee53cecf7c13d13d"><code>bb1d8e8</code></a>
12.3.0 version bump</li>
<li><a
href="https://github.com/python-pillow/Pillow/commit/e63fc481dc2e07e21d5403deafb8f1ed98a513af"><code>e63fc48</code></a>
Add release notes for SBOM and performance improvements (<a
href="https://redirect.github.com/python-pillow/Pillow/issues/9747">#9747</a>)</li>
<li><a
href="https://github.com/python-pillow/Pillow/commit/13b701bbab291eec4bc87ea17ba06c94e5fe3054"><code>13b701b</code></a>
Add release notes for <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9679">#9679</a></li>
<li><a
href="https://github.com/python-pillow/Pillow/commit/5564ca72fcd59d040e270af5dcf17a0d7161c364"><code>5564ca7</code></a>
List methods</li>
<li><a
href="https://github.com/python-pillow/Pillow/commit/a0920fd384f800b5d0ba3dd29ecdeae4f1d4043b"><code>a0920fd</code></a>
Speed up ImageChops operations (<a
href="https://redirect.github.com/python-pillow/Pillow/issues/9738">#9738</a>)</li>
<li><a
href="https://github.com/python-pillow/Pillow/commit/07e9a6cd5336dc6cf8cae9165cd70cdd2b3e42fc"><code>07e9a6c</code></a>
Speed up <code>Image.filter()</code> (<a
href="https://redirect.github.com/python-pillow/Pillow/issues/9736">#9736</a>)</li>
<li><a
href="https://github.com/python-pillow/Pillow/commit/a94578cf9649ea13e426cf7fb2b71b39ffc0dd50"><code>a94578c</code></a>
Speed up <code>Image.getchannel()</code>, <code>Image.merge()</code>,
<code>Image.putalpha()</code> and `Image...</li>
<li><a
href="https://github.com/python-pillow/Pillow/commit/53e02c43c919d149b2a154a5180079f9df18fbbb"><code>53e02c4</code></a>
Speed up <code>Image.fill()</code>, <code>Image.linear_gradient()</code>
and `Image.radial_gradient...</li>
<li><a
href="https://github.com/python-pillow/Pillow/commit/af037475be8634ba739744243164ba9e2c8346a6"><code>af03747</code></a>
Speed up <code>Image.resample()</code> (<a
href="https://redirect.github.com/python-pillow/Pillow/issues/9739">#9739</a>)</li>
<li><a
href="https://github.com/python-pillow/Pillow/commit/5c9ca56c3e5fba52b647809fbb0986c87e73a571"><code>5c9ca56</code></a>
Speed up <code>alpha_composite</code>, <code>matrix</code>,
<code>negative</code>, <code>quantize</code> (<a
href="https://redirect.github.com/python-pillow/Pillow/issues/9740">#9740</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/python-pillow/Pillow/compare/12.2.0...12.3.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pillow&package-manager=uv&previous-version=12.2.0&new-version=12.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/langchain-ai/langchain/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-21 10:43:49 -04:00
langchain-oss-model-profiles[bot]andmdrxy 0d32ca0956 chore(model-profiles): refresh model profile data (#38990) 
Automated refresh of model profile data for all in-monorepo partner
integrations via `langchain-profiles refresh`.

🤖 Generated by the [`refresh_model_profiles`
workflow](https://github.com/langchain-ai/langchain/blob/master/.github/workflows/refresh_model_profiles.yml).


## Summary of changes

**1 added · 0 removed · 1 changed** across 1 provider(s).

### openrouter

**➕ 1 added**
- `meituan/longcat-2.0` — 1,048,756 ctx, 262,144 out, reasoning, tools

**✏️ 1 changed**
- `arcee-ai/trinity-large-thinking`: added structured output

Co-authored-by: mdrxy <61371264+mdrxy@users.noreply.github.com>
 2026-07-21 10:38:33 -04:00
dependabot[bot] e9cbf087c1 chore: bump pillow from 12.2.0 to 12.3.0 in /libs/partners/perplexity (#38991) 
Bumps [pillow](https://github.com/python-pillow/Pillow) from 12.2.0 to
12.3.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/python-pillow/Pillow/releases">pillow's
releases</a>.</em></p>
<blockquote>
<h2>12.3.0</h2>
<p><a
href="https://pillow.readthedocs.io/en/stable/releasenotes/12.3.0.html">https://pillow.readthedocs.io/en/stable/releasenotes/12.3.0.html</a></p>
<h2>Removals</h2>
<ul>
<li>Remove non-image ImageCms modes <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9697">#9697</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
</ul>
<h2>Documentation</h2>
<ul>
<li>Add release notes for SBOM and performance improvements <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9747">#9747</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Add security release notes <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9741">#9741</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Add release notes for Python 3.15 beta wheels <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9696">#9696</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>ImageFont can also be used with ImageText <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9597">#9597</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Additional guidelines for security reports <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9659">#9659</a>
[<a
href="https://github.com/wiredfool"><code>@​wiredfool</code></a>]</li>
<li>Fixed typo <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9636">#9636</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Added CVEs to 12.2.0 release notes <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9591">#9591</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Revise development support information in README <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9583">#9583</a>
[<a
href="https://github.com/aclark4life"><code>@​aclark4life</code></a>]</li>
<li>Add INCIDENT_RESPONSE.md <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9555">#9555</a>
[<a
href="https://github.com/aclark4life"><code>@​aclark4life</code></a>]</li>
<li>Add STRIDE threat model to security docs <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9562">#9562</a>
[<a
href="https://github.com/aclark4life"><code>@​aclark4life</code></a>]</li>
<li>Add CVEs to 12.2.0 release notes <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9556">#9556</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Update README with revised security policy <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9553">#9553</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Update security policy <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9552">#9552</a>
[<a
href="https://github.com/aclark4life"><code>@​aclark4life</code></a>]</li>
<li>Update macOS tested Python versions <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9534">#9534</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
</ul>
<h2>Dependencies</h2>
<ul>
<li>Update dependency harfbuzz to v14.2.1 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9720">#9720</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency mypy to v2 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9653">#9653</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency cibuildwheel to v4 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9665">#9665</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update github-actions <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9655">#9655</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency libavif to v1.4.2 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9652">#9652</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency lcms2 to v2.19.1 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9651">#9651</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency check-jsonschema to v0.37.2 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9650">#9650</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update google/oss-fuzz digest to d872252 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9614">#9614</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency lcms2 to v2.19 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9609">#9609</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency libpng to v1.6.58 - autoclosed <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9608">#9608</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency harfbuzz to v14 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9610">#9610</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency mypy to v1.20.2 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9599">#9599</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update github-actions <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9611">#9611</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency cibuildwheel to v3.4.1 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9607">#9607</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Move dependency versions to single JSON and enable Renovate <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9559">#9559</a>
[<a href="https://github.com/hugovk"><code>@​hugovk</code></a>]</li>
<li>Updated raqm to 0.10.5 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9557">#9557</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Update dependency cibuildwheel to v3.4.0 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9532">#9532</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
</ul>
<h2>Testing</h2>
<ul>
<li>Remove matrix.os from benchmark <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9735">#9735</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Remove references to libavif patch <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9734">#9734</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Add benchmark tests <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9654">#9654</a>
[<a href="https://github.com/akx"><code>@​akx</code></a>]</li>
<li>Use reshape() instead of setting NumPy array shape directly <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9728">#9728</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/python-pillow/Pillow/commit/bb1d8e8ab8d29048624d96e3ee53cecf7c13d13d"><code>bb1d8e8</code></a>
12.3.0 version bump</li>
<li><a
href="https://github.com/python-pillow/Pillow/commit/e63fc481dc2e07e21d5403deafb8f1ed98a513af"><code>e63fc48</code></a>
Add release notes for SBOM and performance improvements (<a
href="https://redirect.github.com/python-pillow/Pillow/issues/9747">#9747</a>)</li>
<li><a
href="https://github.com/python-pillow/Pillow/commit/13b701bbab291eec4bc87ea17ba06c94e5fe3054"><code>13b701b</code></a>
Add release notes for <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9679">#9679</a></li>
<li><a
href="https://github.com/python-pillow/Pillow/commit/5564ca72fcd59d040e270af5dcf17a0d7161c364"><code>5564ca7</code></a>
List methods</li>
<li><a
href="https://github.com/python-pillow/Pillow/commit/a0920fd384f800b5d0ba3dd29ecdeae4f1d4043b"><code>a0920fd</code></a>
Speed up ImageChops operations (<a
href="https://redirect.github.com/python-pillow/Pillow/issues/9738">#9738</a>)</li>
<li><a
href="https://github.com/python-pillow/Pillow/commit/07e9a6cd5336dc6cf8cae9165cd70cdd2b3e42fc"><code>07e9a6c</code></a>
Speed up <code>Image.filter()</code> (<a
href="https://redirect.github.com/python-pillow/Pillow/issues/9736">#9736</a>)</li>
<li><a
href="https://github.com/python-pillow/Pillow/commit/a94578cf9649ea13e426cf7fb2b71b39ffc0dd50"><code>a94578c</code></a>
Speed up <code>Image.getchannel()</code>, <code>Image.merge()</code>,
<code>Image.putalpha()</code> and `Image...</li>
<li><a
href="https://github.com/python-pillow/Pillow/commit/53e02c43c919d149b2a154a5180079f9df18fbbb"><code>53e02c4</code></a>
Speed up <code>Image.fill()</code>, <code>Image.linear_gradient()</code>
and `Image.radial_gradient...</li>
<li><a
href="https://github.com/python-pillow/Pillow/commit/af037475be8634ba739744243164ba9e2c8346a6"><code>af03747</code></a>
Speed up <code>Image.resample()</code> (<a
href="https://redirect.github.com/python-pillow/Pillow/issues/9739">#9739</a>)</li>
<li><a
href="https://github.com/python-pillow/Pillow/commit/5c9ca56c3e5fba52b647809fbb0986c87e73a571"><code>5c9ca56</code></a>
Speed up <code>alpha_composite</code>, <code>matrix</code>,
<code>negative</code>, <code>quantize</code> (<a
href="https://redirect.github.com/python-pillow/Pillow/issues/9740">#9740</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/python-pillow/Pillow/compare/12.2.0...12.3.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pillow&package-manager=uv&previous-version=12.2.0&new-version=12.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/langchain-ai/langchain/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-21 10:38:00 -04:00
dependabot[bot] 913e2cf487 chore: bump pillow from 12.2.0 to 12.3.0 in /libs/partners/nomic (#38992) 
Bumps [pillow](https://github.com/python-pillow/Pillow) from 12.2.0 to
12.3.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/python-pillow/Pillow/releases">pillow's
releases</a>.</em></p>
<blockquote>
<h2>12.3.0</h2>
<p><a
href="https://pillow.readthedocs.io/en/stable/releasenotes/12.3.0.html">https://pillow.readthedocs.io/en/stable/releasenotes/12.3.0.html</a></p>
<h2>Removals</h2>
<ul>
<li>Remove non-image ImageCms modes <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9697">#9697</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
</ul>
<h2>Documentation</h2>
<ul>
<li>Add release notes for SBOM and performance improvements <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9747">#9747</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Add security release notes <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9741">#9741</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Add release notes for Python 3.15 beta wheels <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9696">#9696</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>ImageFont can also be used with ImageText <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9597">#9597</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Additional guidelines for security reports <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9659">#9659</a>
[<a
href="https://github.com/wiredfool"><code>@​wiredfool</code></a>]</li>
<li>Fixed typo <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9636">#9636</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Added CVEs to 12.2.0 release notes <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9591">#9591</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Revise development support information in README <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9583">#9583</a>
[<a
href="https://github.com/aclark4life"><code>@​aclark4life</code></a>]</li>
<li>Add INCIDENT_RESPONSE.md <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9555">#9555</a>
[<a
href="https://github.com/aclark4life"><code>@​aclark4life</code></a>]</li>
<li>Add STRIDE threat model to security docs <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9562">#9562</a>
[<a
href="https://github.com/aclark4life"><code>@​aclark4life</code></a>]</li>
<li>Add CVEs to 12.2.0 release notes <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9556">#9556</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Update README with revised security policy <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9553">#9553</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Update security policy <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9552">#9552</a>
[<a
href="https://github.com/aclark4life"><code>@​aclark4life</code></a>]</li>
<li>Update macOS tested Python versions <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9534">#9534</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
</ul>
<h2>Dependencies</h2>
<ul>
<li>Update dependency harfbuzz to v14.2.1 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9720">#9720</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency mypy to v2 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9653">#9653</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency cibuildwheel to v4 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9665">#9665</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update github-actions <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9655">#9655</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency libavif to v1.4.2 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9652">#9652</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency lcms2 to v2.19.1 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9651">#9651</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency check-jsonschema to v0.37.2 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9650">#9650</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update google/oss-fuzz digest to d872252 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9614">#9614</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency lcms2 to v2.19 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9609">#9609</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency libpng to v1.6.58 - autoclosed <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9608">#9608</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency harfbuzz to v14 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9610">#9610</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency mypy to v1.20.2 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9599">#9599</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update github-actions <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9611">#9611</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Update dependency cibuildwheel to v3.4.1 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9607">#9607</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
<li>Move dependency versions to single JSON and enable Renovate <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9559">#9559</a>
[<a href="https://github.com/hugovk"><code>@​hugovk</code></a>]</li>
<li>Updated raqm to 0.10.5 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9557">#9557</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Update dependency cibuildwheel to v3.4.0 <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9532">#9532</a>
[@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li>
</ul>
<h2>Testing</h2>
<ul>
<li>Remove matrix.os from benchmark <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9735">#9735</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Remove references to libavif patch <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9734">#9734</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
<li>Add benchmark tests <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9654">#9654</a>
[<a href="https://github.com/akx"><code>@​akx</code></a>]</li>
<li>Use reshape() instead of setting NumPy array shape directly <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9728">#9728</a>
[<a
href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/python-pillow/Pillow/commit/bb1d8e8ab8d29048624d96e3ee53cecf7c13d13d"><code>bb1d8e8</code></a>
12.3.0 version bump</li>
<li><a
href="https://github.com/python-pillow/Pillow/commit/e63fc481dc2e07e21d5403deafb8f1ed98a513af"><code>e63fc48</code></a>
Add release notes for SBOM and performance improvements (<a
href="https://redirect.github.com/python-pillow/Pillow/issues/9747">#9747</a>)</li>
<li><a
href="https://github.com/python-pillow/Pillow/commit/13b701bbab291eec4bc87ea17ba06c94e5fe3054"><code>13b701b</code></a>
Add release notes for <a
href="https://redirect.github.com/python-pillow/Pillow/issues/9679">#9679</a></li>
<li><a
href="https://github.com/python-pillow/Pillow/commit/5564ca72fcd59d040e270af5dcf17a0d7161c364"><code>5564ca7</code></a>
List methods</li>
<li><a
href="https://github.com/python-pillow/Pillow/commit/a0920fd384f800b5d0ba3dd29ecdeae4f1d4043b"><code>a0920fd</code></a>
Speed up ImageChops operations (<a
href="https://redirect.github.com/python-pillow/Pillow/issues/9738">#9738</a>)</li>
<li><a
href="https://github.com/python-pillow/Pillow/commit/07e9a6cd5336dc6cf8cae9165cd70cdd2b3e42fc"><code>07e9a6c</code></a>
Speed up <code>Image.filter()</code> (<a
href="https://redirect.github.com/python-pillow/Pillow/issues/9736">#9736</a>)</li>
<li><a
href="https://github.com/python-pillow/Pillow/commit/a94578cf9649ea13e426cf7fb2b71b39ffc0dd50"><code>a94578c</code></a>
Speed up <code>Image.getchannel()</code>, <code>Image.merge()</code>,
<code>Image.putalpha()</code> and `Image...</li>
<li><a
href="https://github.com/python-pillow/Pillow/commit/53e02c43c919d149b2a154a5180079f9df18fbbb"><code>53e02c4</code></a>
Speed up <code>Image.fill()</code>, <code>Image.linear_gradient()</code>
and `Image.radial_gradient...</li>
<li><a
href="https://github.com/python-pillow/Pillow/commit/af037475be8634ba739744243164ba9e2c8346a6"><code>af03747</code></a>
Speed up <code>Image.resample()</code> (<a
href="https://redirect.github.com/python-pillow/Pillow/issues/9739">#9739</a>)</li>
<li><a
href="https://github.com/python-pillow/Pillow/commit/5c9ca56c3e5fba52b647809fbb0986c87e73a571"><code>5c9ca56</code></a>
Speed up <code>alpha_composite</code>, <code>matrix</code>,
<code>negative</code>, <code>quantize</code> (<a
href="https://redirect.github.com/python-pillow/Pillow/issues/9740">#9740</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/python-pillow/Pillow/compare/12.2.0...12.3.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pillow&package-manager=uv&previous-version=12.2.0&new-version=12.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/langchain-ai/langchain/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-21 10:37:54 -04:00
Nishitha M 5ddfd0ed87 feat(core): add reasoning_effort as a standard chat model parameter (#38887) 
`langchain-anthropic`, `langchain-openai`, `langchain-fireworks`, and
`langchain-xai` now support a standard `reasoning_effort` parameter. It
can be set at model construction or per invocation, with each provider
translating it to the appropriate API.
`ModelProfile` now exposes supported reasoning effort levels and the
default level for supported models.

---

Adds a standard `reasoning_effort` parameter across chat model
integrations. Like `temperature`, it can be set on the model or per
call, while each provider translates it into its own API format.

Motivating example: [`deepagents-code`
(dcode)](https://docs.langchain.com/oss/python/deepagents/code/overview)
implemented provider-agnostic reasoning effort itself. This PR upstreams
that support into LangChain's provider integrations, making
`reasoning_effort` a standard parameter and exposing supported levels
via `ModelProfile`.

```python
from langchain_anthropic import ChatAnthropic

model = ChatAnthropic(model="claude-sonnet-4-6")
model.invoke(
    "Why do parrots have colorful feathers?",
    reasoning_effort="high",
)
```

### Model specific labels and default

| Provider | Model / version | Levels supported | Default |
|----------|-----------------|------------------|---------|
| **OpenAI** | gpt-5.5, gpt-5.6* | `none`, `low`, `medium`, `high`,
`xhigh` (+ `max` on gpt-5.6+) | `medium` |
| | other gpt-5* | `none`, `low`, `medium`, `high`, `xhigh` | — |
| **Anthropic** | Opus 4.0 / 4.1 | *(none – predates effort entirely)* |
— |
| | Opus 4.5 | `low`, `medium`, `high` | `high` |
| | Opus 4.6 | `low`, `medium`, `high`, `max` | `high` |
| | Opus 4.7+ | `low`, `medium`, `high`, `xhigh`, `max` | `high` |
| | Sonnet 4.0 / 4.1 / 4.5 | *(none – predates or rejects effort)* | — |
| | Sonnet 4.6 | `low`, `medium`, `high`, `max` | `high` |
| | Sonnet 5+ | `low`, `medium`, `high`, `xhigh`, `max` | `high` |
| **Fireworks** | DeepSeek V4 Pro | `none`, `low`, `medium`, `high`,
`xhigh`, `max` | `high` |
| | Kimi K2 | `low`, `medium`, `high` | — |
| | GLM 5 | `none`, `high`, `max` | `max` |
| **xAI** | Grok 4.5-class models | `low`, `medium`, `high` | `high` |

### Provider specific details

| Provider | Model class | Translation |
|----------|-------------|-------------|
| **OpenAI** | `ChatOpenAI` | Translates `reasoning_effort` to
`reasoning.effort` and adds `summary: "auto"`. |
| **Anthropic** | `ChatAnthropic` | Translates `reasoning_effort` to
`output_config.effort` and defaults `thinking` to `adaptive`. |
| **Fireworks** | `ChatFireworks` | Sends `reasoning_effort` as a flat
field unchanged. |
| **xAI** | `ChatXAI` | Nests `reasoning_effort` under
`extra_body.reasoning_effort`. |

### Anthropic: `effort` alias

`ChatAnthropic` already exposed an `effort` parameter. This PR makes it
a true Pydantic alias for `reasoning_effort` while preserving existing
behavior.

- Both `effort` and `reasoning_effort` work at construction; if both are
provided, `effort` wins.
- Call-time (`.invoke()`, `.bind()`) support is handled manually to
preserve the same precedence, since Pydantic aliases only apply at
construction.
- `effort` remains supported (no deprecation).

### Other providers

- **DeepSeek**: inherits support from `BaseChatOpenAI`.
- **Groq** and **Perplexity**: already have native `reasoning_effort`
support.
- **OpenRouter** and **Mistral AI**: out of scope (no native support
today).
- **Google (Gemini)**: implemented separately in
[`langchain-google`](https://github.com/langchain-ai/langchain-google/pull/1895)
 2026-07-20 16:15:00 -04:00
Mason Daugherty 7d2bbba25f fix(groq): update reasoning integration model (#38976) 
Requests for `qwen/qwen3-32b` now return `model_not_found` under the
Groq integration-test credentials, so the reasoning invoke, stream, and
disabled-effort tests fail before exercising `ChatGroq`. This switches
those cases to `qwen/qwen3.6-27b`, which Groq documents as supporting
parsed reasoning and `reasoning_effort="none"`, and shares the
reasoning-model constant across all three tests.
 2026-07-20 15:49:26 -04:00
langchain-oss-model-profiles[bot]andmdrxy 30697d4c81 chore(model-profiles): refresh model profile data (#38927) 
Automated refresh of model profile data for all in-monorepo partner
integrations via `langchain-profiles refresh`.

🤖 Generated by the [`refresh_model_profiles`
workflow](https://github.com/langchain-ai/langchain/blob/master/.github/workflows/refresh_model_profiles.yml).


## Summary of changes

**1 added · 8 removed · 8 changed** across 1 provider(s).

### openrouter

**➕ 1 added**
- `thinkingmachines/inkling` — 1,048,576 ctx, 1,048,576 out,
text+image+audio in, reasoning, tools

**➖ 8 removed**
- `cognitivecomputations/dolphin-mistral-24b-venice-edition:free`
- `meta-llama/llama-3.2-11b-vision-instruct`
- `meta-llama/llama-3.2-3b-instruct:free`
- `meta-llama/llama-3.3-70b-instruct:free`
- `nousresearch/hermes-3-llama-3.1-405b:free`
- `nvidia/llama-3.3-nemotron-super-49b-v1.5`
- `qwen/qwen3-coder:free`
- `qwen/qwen3-next-80b-a3b-instruct:free`

**✏️ 8 changed**
- `google/gemma-4-26b-a4b-it`: max output tokens 256,000 → 16,384
- `meta-llama/llama-3.2-3b-instruct`: max output tokens 131,072 → 80,000
- `moonshotai/kimi-k2-thinking`: max output tokens 262,144 → 100,352
- `qwen/qwen3-14b`: max output tokens 40,960 → 16,384
- `qwen/qwen3-235b-a22b-thinking-2507`: max output tokens 262,144 →
32,768
- `qwen/qwen3-30b-a3b`: max output tokens 16,384 → 8,192
- `qwen/qwen3.5-27b`: max output tokens 65,536 → 81,920
- `z-ai/glm-5`: max input tokens 202,752 → 204,800; max output tokens
202,752 → 131,072

Co-authored-by: mdrxy <61371264+mdrxy@users.noreply.github.com>
 2026-07-20 09:30:51 -04:00
dependabot[bot] 04b88ddaab chore: bump langsmith from 0.10.2 to 0.10.6 in /libs/partners/fireworks (#38914) 
Bumps [langsmith](https://github.com/langchain-ai/langsmith-sdk) from
0.10.2 to 0.10.6.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/langsmith-sdk/releases">langsmith's
releases</a>.</em></p>
<blockquote>
<h2>v0.10.6</h2>
<h2>What's Changed</h2>
<ul>
<li>Patch Dependabot alert dependencies by <a
href="https://github.com/langsmith-fleet"><code>@​langsmith-fleet</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3216">langchain-ai/langsmith-sdk#3216</a></li>
<li>feat(pipecat): capture realtime tool calls and OpenAI realtime
history by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3218">langchain-ai/langsmith-sdk#3218</a></li>
<li>feat(py,js): Spread OpenAI request metadata into traced metadata by
<a href="https://github.com/jacoblee93"><code>@​jacoblee93</code></a> in
<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3220">langchain-ai/langsmith-sdk#3220</a></li>
<li>feat: capture Pipecat realtime transcripts by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3219">langchain-ai/langsmith-sdk#3219</a></li>
<li>fix(deps): correct uv override-dependencies syntax for json-repair
by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3221">langchain-ai/langsmith-sdk#3221</a></li>
<li>chore(deps): bump mcp from 1.26.0 to 1.28.1 in /python by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3222">langchain-ai/langsmith-sdk#3222</a></li>
<li>fix: preserve env replica project names by <a
href="https://github.com/jacoblee93"><code>@​jacoblee93</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3224">langchain-ai/langsmith-sdk#3224</a></li>
<li>release(py): Bump version: 0.10.5 → 0.10.6 by <a
href="https://github.com/jacoblee93"><code>@​jacoblee93</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3225">langchain-ai/langsmith-sdk#3225</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.5...v0.10.6">https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.5...v0.10.6</a></p>
<h2>v0.10.5</h2>
<h2>What's Changed</h2>
<ul>
<li>chore: sync langsmith_api by <a
href="https://github.com/langtions-bot"><code>@​langtions-bot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3205">langchain-ai/langsmith-sdk#3205</a></li>
<li>fix: patch high-severity JS dependencies by <a
href="https://github.com/jkennedyvz"><code>@​jkennedyvz</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3210">langchain-ai/langsmith-sdk#3210</a></li>
<li>release(js): 0.8.3 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3213">langchain-ai/langsmith-sdk#3213</a></li>
<li>release(python): bump py version to 0.10.5 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3212">langchain-ai/langsmith-sdk#3212</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.4...v0.10.5">https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.4...v0.10.5</a></p>
<h2>v0.10.4</h2>
<h2>What's Changed</h2>
<ul>
<li>release(js): 0.8.2 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3204">langchain-ai/langsmith-sdk#3204</a></li>
<li>feat(livekit): capture realtime user transcript via
instrument_session by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3201">langchain-ai/langsmith-sdk#3201</a></li>
<li>feat(voice): capture OpenAI Agents realtime model costs by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3193">langchain-ai/langsmith-sdk#3193</a></li>
<li>feat(voice): capture Google ADK Live (Gemini) model costs by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3194">langchain-ai/langsmith-sdk#3194</a></li>
<li>release(python): bump py version to 0.10.4 by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3207">langchain-ai/langsmith-sdk#3207</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.3...v0.10.4">https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.3...v0.10.4</a></p>
<h2>v0.10.3</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: Auto-Batch Processing Drops Workspace Override Leading to
Cross-Tenant Data Leakage by <a
href="https://github.com/corridor-security"><code>@​corridor-security</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3174">langchain-ai/langsmith-sdk#3174</a></li>
<li>chore: bump _MIN_BACKEND_VERSION to 0.16.13rc1 by <a
href="https://github.com/langtions-bot"><code>@​langtions-bot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3182">langchain-ai/langsmith-sdk#3182</a></li>
<li>feat(voice): capture LiveKit realtime model costs by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3191">langchain-ai/langsmith-sdk#3191</a></li>
<li>feat(voice): capture Pipecat TTS/realtime model costs by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3192">langchain-ai/langsmith-sdk#3192</a></li>
<li>chore(deps): bump esbuild from 0.17.19 to 0.28.1 in
/js/internal/environment_tests/test-exports-cf in the npm_and_yarn group
across 1 directory by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3172">langchain-ai/langsmith-sdk#3172</a></li>
<li>chore(deps): bump nltk from 3.9.4 to 3.10.0 in /python by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3186">langchain-ai/langsmith-sdk#3186</a></li>
<li>chore(deps): bump soupsieve from 2.8.3 to 2.8.4 in /python by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3200">langchain-ai/langsmith-sdk#3200</a></li>
<li>chore: sync langsmith_api by <a
href="https://github.com/langtions-bot"><code>@​langtions-bot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3165">langchain-ai/langsmith-sdk#3165</a></li>
<li>release(python): bump py version to 0.10.3 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3203">langchain-ai/langsmith-sdk#3203</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.2...v0.10.3">https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.2...v0.10.3</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/d6cd6082f09e7826a2d6afe444ae6119e61b82a6"><code>d6cd608</code></a>
release(py): Bump version: 0.10.5 → 0.10.6 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3225">#3225</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/1ff410c81651d98068911005c6de2f737fc94fb8"><code>1ff410c</code></a>
fix: preserve env replica project names (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3224">#3224</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/0140e9fc17ec845b58f1fa1ae2ee0bff2cacb8ef"><code>0140e9f</code></a>
chore(deps): bump mcp from 1.26.0 to 1.28.1 in /python (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3222">#3222</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/8ffae665dc04a09788dcba069079e061a2c17292"><code>8ffae66</code></a>
fix(deps): correct uv override-dependencies syntax for json-repair (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3221">#3221</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/591b06d0ec931bf6a8e8371b45eef0e19905a6bc"><code>591b06d</code></a>
feat: capture Pipecat realtime transcripts (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3219">#3219</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/58f96bf967d9f797ce7ee1a18216f385c7638a32"><code>58f96bf</code></a>
feat(py,js): Spread OpenAI request metadata into traced metadata (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3220">#3220</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/71d5c6274aefff31855e4640fec619493ba7bedf"><code>71d5c62</code></a>
feat(pipecat): capture realtime tool calls and OpenAI realtime history
(<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3218">#3218</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/ce093c9b6331ccb1682c35670d1830c9a28f2bdb"><code>ce093c9</code></a>
Patch Dependabot alert dependencies (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3216">#3216</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/c2450d95237768ddd7e77a60f4939f164fca3e8d"><code>c2450d9</code></a>
release(python): bump py version to 0.10.5 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3212">#3212</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/8ba1a60ed54ae9637842d351f7858ce60fdca18d"><code>8ba1a60</code></a>
release(js): 0.8.3 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3213">#3213</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.2...v0.10.6">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=langsmith&package-manager=uv&previous-version=0.10.2&new-version=0.10.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/langchain-ai/langchain/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-17 13:23:27 -07:00
dependabot[bot] bb3facc76c chore: bump langsmith from 0.10.2 to 0.10.6 in /libs/partners/chroma (#38916) 
Bumps [langsmith](https://github.com/langchain-ai/langsmith-sdk) from
0.10.2 to 0.10.6.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/langsmith-sdk/releases">langsmith's
releases</a>.</em></p>
<blockquote>
<h2>v0.10.6</h2>
<h2>What's Changed</h2>
<ul>
<li>Patch Dependabot alert dependencies by <a
href="https://github.com/langsmith-fleet"><code>@​langsmith-fleet</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3216">langchain-ai/langsmith-sdk#3216</a></li>
<li>feat(pipecat): capture realtime tool calls and OpenAI realtime
history by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3218">langchain-ai/langsmith-sdk#3218</a></li>
<li>feat(py,js): Spread OpenAI request metadata into traced metadata by
<a href="https://github.com/jacoblee93"><code>@​jacoblee93</code></a> in
<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3220">langchain-ai/langsmith-sdk#3220</a></li>
<li>feat: capture Pipecat realtime transcripts by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3219">langchain-ai/langsmith-sdk#3219</a></li>
<li>fix(deps): correct uv override-dependencies syntax for json-repair
by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3221">langchain-ai/langsmith-sdk#3221</a></li>
<li>chore(deps): bump mcp from 1.26.0 to 1.28.1 in /python by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3222">langchain-ai/langsmith-sdk#3222</a></li>
<li>fix: preserve env replica project names by <a
href="https://github.com/jacoblee93"><code>@​jacoblee93</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3224">langchain-ai/langsmith-sdk#3224</a></li>
<li>release(py): Bump version: 0.10.5 → 0.10.6 by <a
href="https://github.com/jacoblee93"><code>@​jacoblee93</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3225">langchain-ai/langsmith-sdk#3225</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.5...v0.10.6">https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.5...v0.10.6</a></p>
<h2>v0.10.5</h2>
<h2>What's Changed</h2>
<ul>
<li>chore: sync langsmith_api by <a
href="https://github.com/langtions-bot"><code>@​langtions-bot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3205">langchain-ai/langsmith-sdk#3205</a></li>
<li>fix: patch high-severity JS dependencies by <a
href="https://github.com/jkennedyvz"><code>@​jkennedyvz</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3210">langchain-ai/langsmith-sdk#3210</a></li>
<li>release(js): 0.8.3 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3213">langchain-ai/langsmith-sdk#3213</a></li>
<li>release(python): bump py version to 0.10.5 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3212">langchain-ai/langsmith-sdk#3212</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.4...v0.10.5">https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.4...v0.10.5</a></p>
<h2>v0.10.4</h2>
<h2>What's Changed</h2>
<ul>
<li>release(js): 0.8.2 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3204">langchain-ai/langsmith-sdk#3204</a></li>
<li>feat(livekit): capture realtime user transcript via
instrument_session by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3201">langchain-ai/langsmith-sdk#3201</a></li>
<li>feat(voice): capture OpenAI Agents realtime model costs by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3193">langchain-ai/langsmith-sdk#3193</a></li>
<li>feat(voice): capture Google ADK Live (Gemini) model costs by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3194">langchain-ai/langsmith-sdk#3194</a></li>
<li>release(python): bump py version to 0.10.4 by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3207">langchain-ai/langsmith-sdk#3207</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.3...v0.10.4">https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.3...v0.10.4</a></p>
<h2>v0.10.3</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: Auto-Batch Processing Drops Workspace Override Leading to
Cross-Tenant Data Leakage by <a
href="https://github.com/corridor-security"><code>@​corridor-security</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3174">langchain-ai/langsmith-sdk#3174</a></li>
<li>chore: bump _MIN_BACKEND_VERSION to 0.16.13rc1 by <a
href="https://github.com/langtions-bot"><code>@​langtions-bot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3182">langchain-ai/langsmith-sdk#3182</a></li>
<li>feat(voice): capture LiveKit realtime model costs by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3191">langchain-ai/langsmith-sdk#3191</a></li>
<li>feat(voice): capture Pipecat TTS/realtime model costs by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3192">langchain-ai/langsmith-sdk#3192</a></li>
<li>chore(deps): bump esbuild from 0.17.19 to 0.28.1 in
/js/internal/environment_tests/test-exports-cf in the npm_and_yarn group
across 1 directory by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3172">langchain-ai/langsmith-sdk#3172</a></li>
<li>chore(deps): bump nltk from 3.9.4 to 3.10.0 in /python by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3186">langchain-ai/langsmith-sdk#3186</a></li>
<li>chore(deps): bump soupsieve from 2.8.3 to 2.8.4 in /python by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3200">langchain-ai/langsmith-sdk#3200</a></li>
<li>chore: sync langsmith_api by <a
href="https://github.com/langtions-bot"><code>@​langtions-bot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3165">langchain-ai/langsmith-sdk#3165</a></li>
<li>release(python): bump py version to 0.10.3 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3203">langchain-ai/langsmith-sdk#3203</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.2...v0.10.3">https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.2...v0.10.3</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/d6cd6082f09e7826a2d6afe444ae6119e61b82a6"><code>d6cd608</code></a>
release(py): Bump version: 0.10.5 → 0.10.6 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3225">#3225</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/1ff410c81651d98068911005c6de2f737fc94fb8"><code>1ff410c</code></a>
fix: preserve env replica project names (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3224">#3224</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/0140e9fc17ec845b58f1fa1ae2ee0bff2cacb8ef"><code>0140e9f</code></a>
chore(deps): bump mcp from 1.26.0 to 1.28.1 in /python (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3222">#3222</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/8ffae665dc04a09788dcba069079e061a2c17292"><code>8ffae66</code></a>
fix(deps): correct uv override-dependencies syntax for json-repair (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3221">#3221</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/591b06d0ec931bf6a8e8371b45eef0e19905a6bc"><code>591b06d</code></a>
feat: capture Pipecat realtime transcripts (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3219">#3219</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/58f96bf967d9f797ce7ee1a18216f385c7638a32"><code>58f96bf</code></a>
feat(py,js): Spread OpenAI request metadata into traced metadata (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3220">#3220</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/71d5c6274aefff31855e4640fec619493ba7bedf"><code>71d5c62</code></a>
feat(pipecat): capture realtime tool calls and OpenAI realtime history
(<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3218">#3218</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/ce093c9b6331ccb1682c35670d1830c9a28f2bdb"><code>ce093c9</code></a>
Patch Dependabot alert dependencies (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3216">#3216</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/c2450d95237768ddd7e77a60f4939f164fca3e8d"><code>c2450d9</code></a>
release(python): bump py version to 0.10.5 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3212">#3212</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/8ba1a60ed54ae9637842d351f7858ce60fdca18d"><code>8ba1a60</code></a>
release(js): 0.8.3 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3213">#3213</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.2...v0.10.6">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=langsmith&package-manager=uv&previous-version=0.10.2&new-version=0.10.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/langchain-ai/langchain/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-17 13:23:22 -07:00
dependabot[bot] 858ec85a5f chore: bump langsmith from 0.10.2 to 0.10.6 in /libs/partners/huggingface (#38912) 
Bumps [langsmith](https://github.com/langchain-ai/langsmith-sdk) from
0.10.2 to 0.10.6.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/langsmith-sdk/releases">langsmith's
releases</a>.</em></p>
<blockquote>
<h2>v0.10.6</h2>
<h2>What's Changed</h2>
<ul>
<li>Patch Dependabot alert dependencies by <a
href="https://github.com/langsmith-fleet"><code>@​langsmith-fleet</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3216">langchain-ai/langsmith-sdk#3216</a></li>
<li>feat(pipecat): capture realtime tool calls and OpenAI realtime
history by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3218">langchain-ai/langsmith-sdk#3218</a></li>
<li>feat(py,js): Spread OpenAI request metadata into traced metadata by
<a href="https://github.com/jacoblee93"><code>@​jacoblee93</code></a> in
<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3220">langchain-ai/langsmith-sdk#3220</a></li>
<li>feat: capture Pipecat realtime transcripts by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3219">langchain-ai/langsmith-sdk#3219</a></li>
<li>fix(deps): correct uv override-dependencies syntax for json-repair
by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3221">langchain-ai/langsmith-sdk#3221</a></li>
<li>chore(deps): bump mcp from 1.26.0 to 1.28.1 in /python by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3222">langchain-ai/langsmith-sdk#3222</a></li>
<li>fix: preserve env replica project names by <a
href="https://github.com/jacoblee93"><code>@​jacoblee93</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3224">langchain-ai/langsmith-sdk#3224</a></li>
<li>release(py): Bump version: 0.10.5 → 0.10.6 by <a
href="https://github.com/jacoblee93"><code>@​jacoblee93</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3225">langchain-ai/langsmith-sdk#3225</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.5...v0.10.6">https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.5...v0.10.6</a></p>
<h2>v0.10.5</h2>
<h2>What's Changed</h2>
<ul>
<li>chore: sync langsmith_api by <a
href="https://github.com/langtions-bot"><code>@​langtions-bot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3205">langchain-ai/langsmith-sdk#3205</a></li>
<li>fix: patch high-severity JS dependencies by <a
href="https://github.com/jkennedyvz"><code>@​jkennedyvz</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3210">langchain-ai/langsmith-sdk#3210</a></li>
<li>release(js): 0.8.3 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3213">langchain-ai/langsmith-sdk#3213</a></li>
<li>release(python): bump py version to 0.10.5 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3212">langchain-ai/langsmith-sdk#3212</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.4...v0.10.5">https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.4...v0.10.5</a></p>
<h2>v0.10.4</h2>
<h2>What's Changed</h2>
<ul>
<li>release(js): 0.8.2 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3204">langchain-ai/langsmith-sdk#3204</a></li>
<li>feat(livekit): capture realtime user transcript via
instrument_session by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3201">langchain-ai/langsmith-sdk#3201</a></li>
<li>feat(voice): capture OpenAI Agents realtime model costs by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3193">langchain-ai/langsmith-sdk#3193</a></li>
<li>feat(voice): capture Google ADK Live (Gemini) model costs by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3194">langchain-ai/langsmith-sdk#3194</a></li>
<li>release(python): bump py version to 0.10.4 by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3207">langchain-ai/langsmith-sdk#3207</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.3...v0.10.4">https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.3...v0.10.4</a></p>
<h2>v0.10.3</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: Auto-Batch Processing Drops Workspace Override Leading to
Cross-Tenant Data Leakage by <a
href="https://github.com/corridor-security"><code>@​corridor-security</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3174">langchain-ai/langsmith-sdk#3174</a></li>
<li>chore: bump _MIN_BACKEND_VERSION to 0.16.13rc1 by <a
href="https://github.com/langtions-bot"><code>@​langtions-bot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3182">langchain-ai/langsmith-sdk#3182</a></li>
<li>feat(voice): capture LiveKit realtime model costs by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3191">langchain-ai/langsmith-sdk#3191</a></li>
<li>feat(voice): capture Pipecat TTS/realtime model costs by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3192">langchain-ai/langsmith-sdk#3192</a></li>
<li>chore(deps): bump esbuild from 0.17.19 to 0.28.1 in
/js/internal/environment_tests/test-exports-cf in the npm_and_yarn group
across 1 directory by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3172">langchain-ai/langsmith-sdk#3172</a></li>
<li>chore(deps): bump nltk from 3.9.4 to 3.10.0 in /python by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3186">langchain-ai/langsmith-sdk#3186</a></li>
<li>chore(deps): bump soupsieve from 2.8.3 to 2.8.4 in /python by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3200">langchain-ai/langsmith-sdk#3200</a></li>
<li>chore: sync langsmith_api by <a
href="https://github.com/langtions-bot"><code>@​langtions-bot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3165">langchain-ai/langsmith-sdk#3165</a></li>
<li>release(python): bump py version to 0.10.3 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3203">langchain-ai/langsmith-sdk#3203</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.2...v0.10.3">https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.2...v0.10.3</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/d6cd6082f09e7826a2d6afe444ae6119e61b82a6"><code>d6cd608</code></a>
release(py): Bump version: 0.10.5 → 0.10.6 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3225">#3225</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/1ff410c81651d98068911005c6de2f737fc94fb8"><code>1ff410c</code></a>
fix: preserve env replica project names (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3224">#3224</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/0140e9fc17ec845b58f1fa1ae2ee0bff2cacb8ef"><code>0140e9f</code></a>
chore(deps): bump mcp from 1.26.0 to 1.28.1 in /python (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3222">#3222</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/8ffae665dc04a09788dcba069079e061a2c17292"><code>8ffae66</code></a>
fix(deps): correct uv override-dependencies syntax for json-repair (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3221">#3221</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/591b06d0ec931bf6a8e8371b45eef0e19905a6bc"><code>591b06d</code></a>
feat: capture Pipecat realtime transcripts (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3219">#3219</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/58f96bf967d9f797ce7ee1a18216f385c7638a32"><code>58f96bf</code></a>
feat(py,js): Spread OpenAI request metadata into traced metadata (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3220">#3220</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/71d5c6274aefff31855e4640fec619493ba7bedf"><code>71d5c62</code></a>
feat(pipecat): capture realtime tool calls and OpenAI realtime history
(<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3218">#3218</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/ce093c9b6331ccb1682c35670d1830c9a28f2bdb"><code>ce093c9</code></a>
Patch Dependabot alert dependencies (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3216">#3216</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/c2450d95237768ddd7e77a60f4939f164fca3e8d"><code>c2450d9</code></a>
release(python): bump py version to 0.10.5 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3212">#3212</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/8ba1a60ed54ae9637842d351f7858ce60fdca18d"><code>8ba1a60</code></a>
release(js): 0.8.3 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3213">#3213</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.2...v0.10.6">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=langsmith&package-manager=uv&previous-version=0.10.2&new-version=0.10.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/langchain-ai/langchain/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-17 13:23:10 -07:00
dependabot[bot] 50f57310ff chore: bump torch from 2.12.1 to 2.13.0 in /libs/partners/huggingface (#38911) 
Bumps [torch](https://github.com/pytorch/pytorch) from 2.12.1 to 2.13.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pytorch/pytorch/releases">torch's
releases</a>.</em></p>
<blockquote>
<h1>PyTorch 2.13.0 Release Notes</h1>
<ul>
<li><a
href="https://github.com/pytorch/pytorch/blob/HEAD/#highlights">Highlights</a></li>
<li><a
href="https://github.com/pytorch/pytorch/blob/HEAD/#backwards-incompatible-changes">Backwards
Incompatible Changes</a></li>
<li><a
href="https://github.com/pytorch/pytorch/blob/HEAD/#deprecations">Deprecations</a></li>
<li><a
href="https://github.com/pytorch/pytorch/blob/HEAD/#new-features">New
Features</a></li>
<li><a
href="https://github.com/pytorch/pytorch/blob/HEAD/#improvements">Improvements</a></li>
<li><a
href="https://github.com/pytorch/pytorch/blob/HEAD/#bug-fixes">Bug
fixes</a></li>
<li><a
href="https://github.com/pytorch/pytorch/blob/HEAD/#performance">Performance</a></li>
<li><a
href="https://github.com/pytorch/pytorch/blob/HEAD/#documentation">Documentation</a></li>
<li><a
href="https://github.com/pytorch/pytorch/blob/HEAD/#developers">Developers</a></li>
</ul>
<h1>Highlights</h1>
<!-- raw HTML omitted -->
<p>For more details about these highlighted features, you can look at
the release blogpost. Below are the full release notes for this
release.</p>
<h1>Tracked Regressions</h1>
<h3>ROCm wheels break <code>torch.compile</code> on CPU in environments
without a GPU</h3>
<p>Running a <code>torch==2.13.0+rocm7.2</code> wheel in an environment
where no GPU is available (<code>torch.cuda.is_available()</code> is
<code>False</code>) breaks <code>torch.compile</code> on the CPU path:
the first compile raises <code>RuntimeError: Can't detect vectorized ISA
for CPU</code> (<a
href="https://redirect.github.com/pytorch/pytorch/issues/189194">#189194</a>).
This is a regression from <code>torch==2.12.1+rocm7.2</code>, which
compiles CPU code fine (detecting e.g. <code>VecAVX2</code>) in the same
setup. The 2.13 ROCm wheel appears to rely on something present in the
ROCm builder image to detect the CPU vectorized ISA, so it works when
run on a ROCm image but fails on a plain CPU-only image.</p>
<p>Workaround: run the <code>+rocm</code> wheel on a ROCm image, or
install a standard CPU/CUDA build for GPU-less environments.</p>
<h1>Backwards Incompatible Changes</h1>
<ul>
<li>
<p>Stop building CPython 3.13t (free-threaded) binaries (<a
href="https://redirect.github.com/pytorch/pytorch/issues/182951">#182951</a>)</p>
<p>Upstream <code>pypa/manylinux</code> removed CPython 3.13t
(free-threaded) on 2026-05-07, because 3.13t
was experimental and has been superseded by the now-non-experimental
CPython 3.14t. As a result,
PyTorch 2.13 no longer ships <code>cp313t</code> wheels (Linux, Triton,
and related artifacts). Users on the
free-threaded interpreter should move to Python 3.14t.</p>
<p>PyTorch 2.12:</p>
<pre lang="bash"><code># cp313t (free-threaded 3.13) wheels were
available
python3.13t -m pip install torch
</code></pre>
<p>PyTorch 2.13:</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pytorch/pytorch/commit/cf30153c4c131c8164ee7798e5022d810682e2cb"><code>cf30153</code></a>
[release/2.13] Strip +PTX from CUDA arch list on release/RC builds (<a
href="https://redirect.github.com/pytorch/pytorch/issues/188914">#188914</a>)
...</li>
<li><a
href="https://github.com/pytorch/pytorch/commit/3e3e24bd95b010f8f74915f0c30476906e60d4fc"><code>3e3e24b</code></a>
[release/2.13] Restrict cuda-bindings to Python &lt; 3.15 for CUDA 12.9
builds (...</li>
<li><a
href="https://github.com/pytorch/pytorch/commit/7986b068032abf5e22ea51fe7fea63ef5bcaf3b1"><code>7986b06</code></a>
[release/2.13] Bump binary build timeout 280 -&gt; 400 minutes (<a
href="https://redirect.github.com/pytorch/pytorch/issues/188551">#188551</a>)</li>
<li><a
href="https://github.com/pytorch/pytorch/commit/0bdbc268e08fba9debac8f35a8a12e9c008ec0fd"><code>0bdbc26</code></a>
[release/2.13] Add CUDA 12.9 to TORCH_CUDA_ARCH_LIST tables (<a
href="https://redirect.github.com/pytorch/pytorch/issues/188443">#188443</a>)</li>
<li><a
href="https://github.com/pytorch/pytorch/commit/9cabb45ca6e6ed3bb4645c929bcfd07691651f74"><code>9cabb45</code></a>
[release/2.13] Update manywheel docker image pin to 78e737ad (<a
href="https://redirect.github.com/pytorch/pytorch/issues/188409">#188409</a>)</li>
<li><a
href="https://github.com/pytorch/pytorch/commit/78e737ad29420ffc4800e677c51e2a852caf8359"><code>78e737a</code></a>
[release/2.13] Revert &quot;Tighten generalized scatter graph target (<a
href="https://redirect.github.com/pytorch/pytorch/issues/184075">#184075</a>)&quot;
(#...</li>
<li><a
href="https://github.com/pytorch/pytorch/commit/0bb9b5bc24bed3278488372d62d9f2235e9e77e3"><code>0bb9b5b</code></a>
[release/2.13] Revert &quot;dynamo: round-trip torch.cuda.stream ctx mgr
across gr...</li>
<li><a
href="https://github.com/pytorch/pytorch/commit/aaac2bfe460c04a4d41e83e03452d2347f7142b9"><code>aaac2bf</code></a>
[release/2.13] Revert &quot;[Reland] Port D104346887/PR 182675 for
index_add fast ...</li>
<li><a
href="https://github.com/pytorch/pytorch/commit/933081368c3ab64fa2e953217e413b3ba52844e3"><code>9330813</code></a>
Fix build_with_debinfo.py broken by CONFIGURE_DEPENDS globbing (<a
href="https://redirect.github.com/pytorch/pytorch/issues/188192">#188192</a>)</li>
<li><a
href="https://github.com/pytorch/pytorch/commit/4e077a7dcf29167db9e97d86cc62f431905e09f7"><code>4e077a7</code></a>
Remove setuptools upper bound (<a
href="https://redirect.github.com/pytorch/pytorch/issues/188190">#188190</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/pytorch/pytorch/compare/v2.12.1...v2.13.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=torch&package-manager=uv&previous-version=2.12.1&new-version=2.13.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/langchain-ai/langchain/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-17 13:19:30 -07:00
langchain-oss-model-profiles[bot]andmdrxy 0736ddeb1e chore(model-profiles): refresh model profile data (#38905) 
Automated refresh of model profile data for all in-monorepo partner
integrations via `langchain-profiles refresh`.

🤖 Generated by the [`refresh_model_profiles`
workflow](https://github.com/langchain-ai/langchain/blob/master/.github/workflows/refresh_model_profiles.yml).


## Summary of changes

**2 added · 0 removed · 8 changed** across 1 provider(s).

### openrouter

**➕ 2 added**
- `meta/muse-spark-1.1` — 1,048,576 ctx, 1,048,576 out,
text+image+audio+video+pdf in, reasoning, tools
- `moonshotai/kimi-k3` — 1,048,576 ctx, 1,048,576 out, text+image in,
reasoning, tools

**✏️ 8 changed**
- `anthropic/claude-opus-4.7-fast`: last updated `2026-05-12` →
`2026-04-16`; release date `2026-05-12` → `2026-04-16`
- `anthropic/claude-opus-4.8-fast`: last updated `2026-05-27` →
`2026-05-28`; release date `2026-05-27` → `2026-05-28`
- `google/gemini-3.1-flash-lite-image`: max output tokens 66,000 →
65,536
- `~anthropic/claude-sonnet-latest`: last updated `2026-06-30` →
`2026-04-27`; release date `2026-06-30` → `2026-04-27`
- `~google/gemini-flash-latest`: last updated `2026-05-19` →
`2026-04-27`; release date `2026-05-19` → `2026-04-27`
- `~google/gemini-pro-latest`: last updated `2026-02-19` → `2026-04-27`;
release date `2026-02-19` → `2026-04-27`
- `~moonshotai/kimi-latest`: max input tokens 262,144 → 1,048,576;
removed temperature control
- `~openai/gpt-latest`: last updated `2026-07-09` → `2026-04-27`;
release date `2026-07-09` → `2026-04-27`

Co-authored-by: mdrxy <61371264+mdrxy@users.noreply.github.com>
 2026-07-17 11:20:47 -04:00
langchain-oss-model-profiles[bot]andmdrxy cf2115a6cf chore(model-profiles): refresh model profile data (#38876) 
Automated refresh of model profile data for all in-monorepo partner
integrations via `langchain-profiles refresh`.

🤖 Generated by the [`refresh_model_profiles`
workflow](https://github.com/langchain-ai/langchain/blob/master/.github/workflows/refresh_model_profiles.yml).


## Summary of changes

**0 added · 1 removed · 32 changed** across 1 provider(s).

### openrouter

**➖ 1 removed**
- `arcee-ai/coder-large`

**✏️ 32 changed**
- `deepseek/deepseek-chat-v3-0324`: max output tokens 16,384 → 65,536
- `deepseek/deepseek-v3.1-terminus`: max input tokens 163,840 → 131,072
- `deepseek/deepseek-v3.2`: max input tokens 131,072 → 163,840; max
output tokens 64,000 → 65,536
- `google/gemini-2.5-flash-image`: max output tokens 32,768 → 8,192
- `google/gemma-3-27b-it`: max output tokens 16,384 → 131,072
- `google/gemma-4-26b-a4b-it`: max output tokens 262,144 → 256,000
- `google/gemma-4-31b-it`: max output tokens 8,192 → 262,144
- `meta-llama/llama-3.1-8b-instruct`: max output tokens 16,384 → 131,072
- `meta-llama/llama-3.3-70b-instruct`: max output tokens 16,384 →
128,000
- `minimax/minimax-m2.7`: max output tokens 196,608 → 131,072
- `minimax/minimax-m3`: max output tokens 131,072 → 512,000
- `mistralai/mistral-nemo`: max output tokens 131,072 → 16,384
- `mistralai/mistral-small-3.2-24b-instruct`: max input tokens 128,000 →
131,072
- `moonshotai/kimi-k2-thinking`: max output tokens 100,352 → 262,144
- `moonshotai/kimi-k2.5`: max output tokens 256,000 → 262,144
- `openai/gpt-5.1-chat`: max output tokens 32,000 → 16,384
- `qwen/qwen3-30b-a3b-instruct-2507`: max input tokens 131,072 → 262,144
- `qwen/qwen3-next-80b-a3b-instruct`: max output tokens 16,384 → 262,144
- `qwen/qwen3-vl-235b-a22b-instruct`: max input tokens 262,144 →
131,072; max output tokens 16,384 → 32,768
- `qwen/qwen3.5-122b-a10b`: max output tokens 262,144 → 65,536
- `qwen/qwen3.5-35b-a3b`: max output tokens 81,920 → 262,144
- `qwen/qwen3.5-397b-a17b`: max input tokens 256,000 → 262,144; max
output tokens 64,000 → 65,536
- `qwen/qwen3.6-27b`: max output tokens 131,072 → 65,536
- `z-ai/glm-4.6`: max input tokens 200,000 → 202,752; max output tokens
16,384 → 131,072
- `z-ai/glm-4.7-flash`: max input tokens 202,752 → 200,000; max output
tokens 16,384 → 131,072
- …and 7 more

Co-authored-by: mdrxy <61371264+mdrxy@users.noreply.github.com>
 2026-07-16 10:25:25 -04:00
langchain-oss-model-profiles[bot]andmdrxy 7bf8fe2216 chore(model-profiles): refresh model profile data (#38856) 
Automated refresh of model profile data for all in-monorepo partner
integrations via `langchain-profiles refresh`.

🤖 Generated by the [`refresh_model_profiles`
workflow](https://github.com/langchain-ai/langchain/blob/master/.github/workflows/refresh_model_profiles.yml).


## Summary of changes

**2 added · 4 removed · 5 changed** across 1 provider(s).

### openrouter

**➕ 2 added**
- `kwaipilot/kat-coder-air-v2.5` — 256,000 ctx, 80,000 out, tools
- `kwaipilot/kat-coder-pro-v2.5` — 256,000 ctx, 80,000 out, tools

**➖ 4 removed**
- `liquid/lfm-2.5-1.2b-instruct:free`
- `liquid/lfm-2.5-1.2b-thinking:free`
- `openai/gpt-oss-120b:free`
- `sao10k/l3.1-70b-hanami-x1`

**✏️ 5 changed**
- `deepseek/deepseek-v4-flash`: max output tokens 384,000 → 65,536
- `google/gemma-4-31b-it`: max output tokens 262,144 → 8,192
- `google/gemma-4-31b-it:free`: max output tokens 8,192 → 32,768
- `qwen/qwen3.6-27b`: max output tokens 262,140 → 131,072
- `z-ai/glm-5.2`: max output tokens 131,072 → 128,000

Co-authored-by: mdrxy <61371264+mdrxy@users.noreply.github.com>
 2026-07-15 06:56:48 -04:00
John Kennedy 22869321b2 fix: patch Dependabot dependency vulnerabilities (#38853) 
## Summary

- remove obsolete aiohttp <3.14.0 constraints and resolve the xAI and
Fireworks locks to aiohttp 3.14.1
- set langchain-fireworks' runtime floor to aiohttp >=3.14.1
- constrain the langchain-classic lock to langchain 1.3.9, resolving
CVE-2026-55443

## Dependabot alerts

Resolves the patchable aiohttp and langchain alerts in the current
backlog.

The critical ChromaDB CVE-2026-45829 remains open because no patched
upstream version exists. It is tracked in
[SEC-969](https://linear.app/langchain/issue/SEC-969/critical-mitigate-unpatched-chromadb-cve-2026-45829).

## Verification

-  for xAI, Fireworks, and langchain-classic
- xAI unit tests: 38 passed
- Fireworks unit tests: 129 passed (with local FIREWORKS_API_BASE
removed to avoid snapshot pollution)
- imported vcrpy's aiohttp stub under aiohttp 3.14.1 in both partner
environments
 2026-07-14 21:57:41 +00:00
dependabot[bot] b255847eb4 chore: bump langsmith from 0.9.5 to 0.10.2 in /libs/partners/fireworks (#38830) 
Bumps [langsmith](https://github.com/langchain-ai/langsmith-sdk) from
0.9.5 to 0.10.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/langsmith-sdk/releases">langsmith's
releases</a>.</em></p>
<blockquote>
<h2>v0.10.2</h2>
<h2>What's Changed</h2>
<ul>
<li>release(js): 0.8.1 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3185">langchain-ai/langsmith-sdk#3185</a></li>
<li>refactor(voice): move span attribute setters onto TranslatedSpan by
<a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3179">langchain-ai/langsmith-sdk#3179</a></li>
<li>feat: add SmithDB by-key path to add_runs_to_annotation_queue (runs=
param) [LSDK-287] by <a
href="https://github.com/ayoung19"><code>@​ayoung19</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3077">langchain-ai/langsmith-sdk#3077</a></li>
<li>refactor(livekit + pipecat): Refactor for clarity by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3187">langchain-ai/langsmith-sdk#3187</a></li>
<li>feat(py): re-export OpenAPI client exceptions from langsmith package
by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3188">langchain-ai/langsmith-sdk#3188</a></li>
<li>release(python): bump py version to 0.10.2 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3189">langchain-ai/langsmith-sdk#3189</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/ayoung19"><code>@​ayoung19</code></a>
made their first contribution in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3077">langchain-ai/langsmith-sdk#3077</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.1...v0.10.2">https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.1...v0.10.2</a></p>
<h2>v0.10.1</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: bound voice streaming audio buffers by <a
href="https://github.com/jkennedyvz"><code>@​jkennedyvz</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3169">langchain-ai/langsmith-sdk#3169</a></li>
<li>fix: escape insights report html repr by <a
href="https://github.com/corridor-security"><code>@​corridor-security</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3176">langchain-ai/langsmith-sdk#3176</a></li>
<li>chore: bump _MIN_BACKEND_VERSION to 0.16.12rc1 by <a
href="https://github.com/langtions-bot"><code>@​langtions-bot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3178">langchain-ai/langsmith-sdk#3178</a></li>
<li>Fix URL Path Injection via Unencoded Resource Names in Python
Sandbox Client (Sync) by <a
href="https://github.com/corridor-security"><code>@​corridor-security</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3177">langchain-ai/langsmith-sdk#3177</a></li>
<li>feat(js): expose openapi client error classes by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3181">langchain-ai/langsmith-sdk#3181</a></li>
<li>release(py): 0.10.1 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3184">langchain-ai/langsmith-sdk#3184</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/corridor-security"><code>@​corridor-security</code></a>[bot]
made their first contribution in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3176">langchain-ai/langsmith-sdk#3176</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.0...v0.10.1">https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.0...v0.10.1</a></p>
<h2>v0.10.0</h2>
<h2>What's Changed</h2>
<ul>
<li>chore: sync langsmith_api by <a
href="https://github.com/langtions-bot"><code>@​langtions-bot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3152">langchain-ai/langsmith-sdk#3152</a></li>
<li>release(js): bump JS SDK to 0.7.16 by <a
href="https://github.com/sineha-mani"><code>@​sineha-mani</code></a> in
<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3160">langchain-ai/langsmith-sdk#3160</a></li>
<li>feat: expose OTel-safe metadata helpers [closes LSDK-262] by <a
href="https://github.com/open-swe"><code>@​open-swe</code></a>[bot] in
<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3091">langchain-ai/langsmith-sdk#3091</a></li>
<li>feat(integrations): helpers to build LangSmith run URLs from OTel
spans [LSDK-273] by <a
href="https://github.com/harisaiharish"><code>@​harisaiharish</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3142">langchain-ai/langsmith-sdk#3142</a></li>
<li>fix(python): remove projects accessor from AsyncClient by <a
href="https://github.com/QuentinBrosse"><code>@​QuentinBrosse</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3163">langchain-ai/langsmith-sdk#3163</a></li>
<li>chore: sync langsmith_api by <a
href="https://github.com/langtions-bot"><code>@​langtions-bot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3162">langchain-ai/langsmith-sdk#3162</a></li>
<li>feat(js): Extends wrapAnthropic JS wrapper to support Claude Managed
Agents methods by <a
href="https://github.com/jacoblee93"><code>@​jacoblee93</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3155">langchain-ai/langsmith-sdk#3155</a></li>
<li>release(js): 0.7.17 by <a
href="https://github.com/jacoblee93"><code>@​jacoblee93</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3166">langchain-ai/langsmith-sdk#3166</a></li>
<li>feat(client): expose threads and traces resource accessors on Python
and JS clients by <a
href="https://github.com/QuentinBrosse"><code>@​QuentinBrosse</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3164">langchain-ai/langsmith-sdk#3164</a></li>
<li>ci: freeze pnpm environment test installs by <a
href="https://github.com/jkennedyvz"><code>@​jkennedyvz</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3168">langchain-ai/langsmith-sdk#3168</a></li>
<li>Quote sandbox client URL path segments by <a
href="https://github.com/langsmith-fleet"><code>@​langsmith-fleet</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3167">langchain-ai/langsmith-sdk#3167</a></li>
<li>release(js): 0.8.0 by <a
href="https://github.com/QuentinBrosse"><code>@​QuentinBrosse</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3171">langchain-ai/langsmith-sdk#3171</a></li>
<li>release(py): 0.10.0 by <a
href="https://github.com/QuentinBrosse"><code>@​QuentinBrosse</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3170">langchain-ai/langsmith-sdk#3170</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/langsmith-fleet"><code>@​langsmith-fleet</code></a>[bot]
made their first contribution in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3167">langchain-ai/langsmith-sdk#3167</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.9.8...v0.10.0">https://github.com/langchain-ai/langsmith-sdk/compare/v0.9.8...v0.10.0</a></p>
<h2>v0.9.8</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/687fc8d527a28504432f52bd08c75f2894c209fe"><code>687fc8d</code></a>
release(python): bump py version to 0.10.2 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3189">#3189</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/08cbc910be1b91f4a2714a158b32fa3a56bf7040"><code>08cbc91</code></a>
feat(py): re-export OpenAPI client exceptions from langsmith package (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3188">#3188</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/d309be59b951dc3b3796753b25908c029bead7d8"><code>d309be5</code></a>
refactor(livekit + pipecat): Refactor for clarity (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3187">#3187</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/2e61f5418458fa559943da2ce274dfcd231cf074"><code>2e61f54</code></a>
feat: add SmithDB by-key path to add_runs_to_annotation_queue (runs=
param) [...</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/fab828a2b074aab98bc22d73c569ece2435e17ae"><code>fab828a</code></a>
refactor(voice): move span attribute setters onto TranslatedSpan (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3179">#3179</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/2f7709cdaaf6626a22daefa9fecef712abf3e39c"><code>2f7709c</code></a>
release(js): 0.8.1 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3185">#3185</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/6388e488ba28f8b18e18e34a3452f4a7e0c755aa"><code>6388e48</code></a>
release(py): 0.10.1 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3184">#3184</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/de74fb8f42bb632257de19f22d18a41c7d5a59b0"><code>de74fb8</code></a>
feat(js): expose openapi client error classes (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3181">#3181</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/6c0729a9bc00ab49a804b57731a423714b879a0e"><code>6c0729a</code></a>
Fix URL Path Injection via Unencoded Resource Names in Python Sandbox
Client ...</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/996073e478d6960b189d5a12d1f4f5adda9d7272"><code>996073e</code></a>
chore: bump _MIN_BACKEND_VERSION to 0.16.12rc1 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3178">#3178</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.9.5...v0.10.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=langsmith&package-manager=uv&previous-version=0.9.5&new-version=0.10.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/langchain-ai/langchain/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-13 17:58:55 -04:00
dependabot[bot] dde88cdb49 chore: bump langsmith from 0.9.5 to 0.10.2 in /libs/partners/huggingface (#38829) 
Bumps [langsmith](https://github.com/langchain-ai/langsmith-sdk) from
0.9.5 to 0.10.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/langsmith-sdk/releases">langsmith's
releases</a>.</em></p>
<blockquote>
<h2>v0.10.2</h2>
<h2>What's Changed</h2>
<ul>
<li>release(js): 0.8.1 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3185">langchain-ai/langsmith-sdk#3185</a></li>
<li>refactor(voice): move span attribute setters onto TranslatedSpan by
<a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3179">langchain-ai/langsmith-sdk#3179</a></li>
<li>feat: add SmithDB by-key path to add_runs_to_annotation_queue (runs=
param) [LSDK-287] by <a
href="https://github.com/ayoung19"><code>@​ayoung19</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3077">langchain-ai/langsmith-sdk#3077</a></li>
<li>refactor(livekit + pipecat): Refactor for clarity by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3187">langchain-ai/langsmith-sdk#3187</a></li>
<li>feat(py): re-export OpenAPI client exceptions from langsmith package
by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3188">langchain-ai/langsmith-sdk#3188</a></li>
<li>release(python): bump py version to 0.10.2 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3189">langchain-ai/langsmith-sdk#3189</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/ayoung19"><code>@​ayoung19</code></a>
made their first contribution in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3077">langchain-ai/langsmith-sdk#3077</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.1...v0.10.2">https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.1...v0.10.2</a></p>
<h2>v0.10.1</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: bound voice streaming audio buffers by <a
href="https://github.com/jkennedyvz"><code>@​jkennedyvz</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3169">langchain-ai/langsmith-sdk#3169</a></li>
<li>fix: escape insights report html repr by <a
href="https://github.com/corridor-security"><code>@​corridor-security</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3176">langchain-ai/langsmith-sdk#3176</a></li>
<li>chore: bump _MIN_BACKEND_VERSION to 0.16.12rc1 by <a
href="https://github.com/langtions-bot"><code>@​langtions-bot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3178">langchain-ai/langsmith-sdk#3178</a></li>
<li>Fix URL Path Injection via Unencoded Resource Names in Python
Sandbox Client (Sync) by <a
href="https://github.com/corridor-security"><code>@​corridor-security</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3177">langchain-ai/langsmith-sdk#3177</a></li>
<li>feat(js): expose openapi client error classes by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3181">langchain-ai/langsmith-sdk#3181</a></li>
<li>release(py): 0.10.1 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3184">langchain-ai/langsmith-sdk#3184</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/corridor-security"><code>@​corridor-security</code></a>[bot]
made their first contribution in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3176">langchain-ai/langsmith-sdk#3176</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.0...v0.10.1">https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.0...v0.10.1</a></p>
<h2>v0.10.0</h2>
<h2>What's Changed</h2>
<ul>
<li>chore: sync langsmith_api by <a
href="https://github.com/langtions-bot"><code>@​langtions-bot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3152">langchain-ai/langsmith-sdk#3152</a></li>
<li>release(js): bump JS SDK to 0.7.16 by <a
href="https://github.com/sineha-mani"><code>@​sineha-mani</code></a> in
<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3160">langchain-ai/langsmith-sdk#3160</a></li>
<li>feat: expose OTel-safe metadata helpers [closes LSDK-262] by <a
href="https://github.com/open-swe"><code>@​open-swe</code></a>[bot] in
<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3091">langchain-ai/langsmith-sdk#3091</a></li>
<li>feat(integrations): helpers to build LangSmith run URLs from OTel
spans [LSDK-273] by <a
href="https://github.com/harisaiharish"><code>@​harisaiharish</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3142">langchain-ai/langsmith-sdk#3142</a></li>
<li>fix(python): remove projects accessor from AsyncClient by <a
href="https://github.com/QuentinBrosse"><code>@​QuentinBrosse</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3163">langchain-ai/langsmith-sdk#3163</a></li>
<li>chore: sync langsmith_api by <a
href="https://github.com/langtions-bot"><code>@​langtions-bot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3162">langchain-ai/langsmith-sdk#3162</a></li>
<li>feat(js): Extends wrapAnthropic JS wrapper to support Claude Managed
Agents methods by <a
href="https://github.com/jacoblee93"><code>@​jacoblee93</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3155">langchain-ai/langsmith-sdk#3155</a></li>
<li>release(js): 0.7.17 by <a
href="https://github.com/jacoblee93"><code>@​jacoblee93</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3166">langchain-ai/langsmith-sdk#3166</a></li>
<li>feat(client): expose threads and traces resource accessors on Python
and JS clients by <a
href="https://github.com/QuentinBrosse"><code>@​QuentinBrosse</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3164">langchain-ai/langsmith-sdk#3164</a></li>
<li>ci: freeze pnpm environment test installs by <a
href="https://github.com/jkennedyvz"><code>@​jkennedyvz</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3168">langchain-ai/langsmith-sdk#3168</a></li>
<li>Quote sandbox client URL path segments by <a
href="https://github.com/langsmith-fleet"><code>@​langsmith-fleet</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3167">langchain-ai/langsmith-sdk#3167</a></li>
<li>release(js): 0.8.0 by <a
href="https://github.com/QuentinBrosse"><code>@​QuentinBrosse</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3171">langchain-ai/langsmith-sdk#3171</a></li>
<li>release(py): 0.10.0 by <a
href="https://github.com/QuentinBrosse"><code>@​QuentinBrosse</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3170">langchain-ai/langsmith-sdk#3170</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/langsmith-fleet"><code>@​langsmith-fleet</code></a>[bot]
made their first contribution in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3167">langchain-ai/langsmith-sdk#3167</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.9.8...v0.10.0">https://github.com/langchain-ai/langsmith-sdk/compare/v0.9.8...v0.10.0</a></p>
<h2>v0.9.8</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/687fc8d527a28504432f52bd08c75f2894c209fe"><code>687fc8d</code></a>
release(python): bump py version to 0.10.2 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3189">#3189</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/08cbc910be1b91f4a2714a158b32fa3a56bf7040"><code>08cbc91</code></a>
feat(py): re-export OpenAPI client exceptions from langsmith package (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3188">#3188</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/d309be59b951dc3b3796753b25908c029bead7d8"><code>d309be5</code></a>
refactor(livekit + pipecat): Refactor for clarity (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3187">#3187</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/2e61f5418458fa559943da2ce274dfcd231cf074"><code>2e61f54</code></a>
feat: add SmithDB by-key path to add_runs_to_annotation_queue (runs=
param) [...</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/fab828a2b074aab98bc22d73c569ece2435e17ae"><code>fab828a</code></a>
refactor(voice): move span attribute setters onto TranslatedSpan (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3179">#3179</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/2f7709cdaaf6626a22daefa9fecef712abf3e39c"><code>2f7709c</code></a>
release(js): 0.8.1 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3185">#3185</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/6388e488ba28f8b18e18e34a3452f4a7e0c755aa"><code>6388e48</code></a>
release(py): 0.10.1 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3184">#3184</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/de74fb8f42bb632257de19f22d18a41c7d5a59b0"><code>de74fb8</code></a>
feat(js): expose openapi client error classes (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3181">#3181</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/6c0729a9bc00ab49a804b57731a423714b879a0e"><code>6c0729a</code></a>
Fix URL Path Injection via Unencoded Resource Names in Python Sandbox
Client ...</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/996073e478d6960b189d5a12d1f4f5adda9d7272"><code>996073e</code></a>
chore: bump _MIN_BACKEND_VERSION to 0.16.12rc1 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3178">#3178</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.9.5...v0.10.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=langsmith&package-manager=uv&previous-version=0.9.5&new-version=0.10.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/langchain-ai/langchain/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-13 17:58:26 -04:00
dependabot[bot] b27f55498f chore: bump transformers from 5.3.0 to 5.5.0 in /libs/partners/huggingface (#38828) 
Bumps [transformers](https://github.com/huggingface/transformers) from
5.3.0 to 5.5.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/huggingface/transformers/releases">transformers's
releases</a>.</em></p>
<blockquote>
<h1>Release v5.5.0</h1>
<!-- raw HTML omitted -->
<h2>New Model additions</h2>
<h3>Gemma4</h3>
<p><a
href="https://github.com/huggingface/transformers/blob/HEAD/INSET_PAPER_LINK">Gemma
4</a> is a multimodal model with pretrained and instruction-tuned
variants, available in 1B, 13B, and 27B parameters. The architecture is
mostly the same as the previous Gemma versions. The key differences are
a vision processor that can output images of fixed token budget and a
spatial 2D RoPE to encode vision-specific information across height and
width axis.</p>
<!-- raw HTML omitted -->
<p>You can find all the original Gemma 4 checkpoints under the <a
href="https://huggingface.co/collections/google/gemma-4-release-67c6c6f89c4f76621268bb6d">Gemma
4</a> release.</p>
<p>The key difference from previous Gemma releases is the new design to
process <strong>images of different sizes</strong> using a
<strong>fixed-budget number of tokens</strong>. Unlike many models that
squash every image into a fixed square (like 224×224), Gemma 4 keeps the
image's natural aspect ratio while making it the right size. There a a
couple constraints to follow:</p>
<ul>
<li>The total number of pixels must fit within a patch budget</li>
<li>Both height and width must be divisible by <strong>48</strong> (=
patch size 16 × pooling kernel 3)</li>
</ul>
<blockquote>
<p>[!IMPORTANT]
Gemma 4 does <strong>not</strong> apply the standard ImageNet mean/std
normalization that many other vision models use. The model's own patch
embedding layer handles the final scaling internally (shifting values to
the [-1, 1] range).</p>
</blockquote>
<p>The number of &quot;soft tokens&quot; (aka vision tokens) an image
processor can produce is configurable. The supported options are
outlined below and the default is <strong>280 soft tokens</strong> per
image.</p>
<table>
<thead>
<tr>
<th align="center">Soft Tokens</th>
<th align="center">Patches (before pooling)</th>
<th align="center">Approx. Image Area</th>
</tr>
</thead>
<tbody>
<tr>
<td align="center">70</td>
<td align="center">630</td>
<td align="center">~161K pixels</td>
</tr>
<tr>
<td align="center">140</td>
<td align="center">1,260</td>
<td align="center">~323K pixels</td>
</tr>
<tr>
<td align="center"><strong>280</strong></td>
<td align="center"><strong>2,520</strong></td>
<td align="center"><strong>~645K pixels</strong></td>
</tr>
<tr>
<td align="center">560</td>
<td align="center">5,040</td>
<td align="center">~1.3M pixels</td>
</tr>
<tr>
<td align="center">1,120</td>
<td align="center">10,080</td>
<td align="center">~2.6M pixels</td>
</tr>
</tbody>
</table>
<p>To encode positional information for each patch in the image, Gemma 4
uses a learned 2D position embedding table. The position table stores up
to 10,240 positions per axis, which allows the model to handle very
large images. Each position is a learned vector of the same dimensions
as the patch embedding. The 2D RoPE which Gemma 4 uses independently
rotate half the attention head dimensions for the x-axis and the other
half for the y-axis. This allows the model to understand spatial
relationships like &quot;above,&quot; &quot;below,&quot; &quot;left
of,&quot; and &quot;right of.&quot;</p>
<h3>NomicBERT</h3>
<p>NomicBERT is a BERT-inspired encoder model that applies Rotary
Position Embeddings (RoPE) to create reproducible long context text
embeddings. It is the first fully reproducible, open-source text
embedding model with 8192 context length that outperforms both OpenAI
Ada-002 and OpenAI text-embedding-3-small on short-context MTEB and long
context LoCo benchmarks. The model generates dense vector embeddings for
various tasks including search, clustering, and classification using
specific instruction prefixes.</p>
<p><strong>Links:</strong> <a
href="https://huggingface.co/docs/transformers/main/en/model_doc/nomic_bert">Documentation</a>
| <a href="https://arxiv.org/abs/2402.01613">Paper</a></p>
<ul>
<li>Internalise the NomicBERT model (<a
href="https://redirect.github.com/huggingface/transformers/issues/43067">#43067</a>)
by <a href="https://github.com/ed22699"><code>@​ed22699</code></a> in <a
href="https://redirect.github.com/huggingface/transformers/pull/43067">#43067</a></li>
</ul>
<h3>MusicFlamingo</h3>
<p>Music Flamingo is a fully open large audio–language model designed
for robust understanding and reasoning over music. It builds upon the
Audio Flamingo 3 architecture by including Rotary Time Embeddings
(RoTE), which injects temporal position information to enable the model
to handle audio sequences up to 20 minutes. The model features a unified
audio encoder across speech, sound, and music with special sound
boundary tokens for improved audio sequence modeling.</p>
<p><strong>Links:</strong> <a
href="https://huggingface.co/docs/transformers/main/en/model_doc/musicflamingo">Documentation</a>
| <a href="https://huggingface.co/papers/2511.10289">Paper</a></p>
<ul>
<li>Add Music Flamingo (<a
href="https://redirect.github.com/huggingface/transformers/issues/43538">#43538</a>)
by <a href="https://github.com/lashahub"><code>@​lashahub</code></a> in
<a
href="https://redirect.github.com/huggingface/transformers/pull/43538">#43538</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/huggingface/transformers/commit/c1c34249fa27deefbd4a377dfbf883a39baf5c6d"><code>c1c3424</code></a>
update</li>
<li><a
href="https://github.com/huggingface/transformers/commit/20bff6865a756a074f5b893b57f0ae438b25ec46"><code>20bff68</code></a>
update release workflow</li>
<li><a
href="https://github.com/huggingface/transformers/commit/89564412a56ae6581f8aa48a533a835860dc9f43"><code>8956441</code></a>
v5.5.0</li>
<li><a
href="https://github.com/huggingface/transformers/commit/5135e5efa7203cd23aac0866de12dfeef038422d"><code>5135e5e</code></a>
casually dropping the most capable open weights on the planet (<a
href="https://redirect.github.com/huggingface/transformers/issues/45192">#45192</a>)</li>
<li><a
href="https://github.com/huggingface/transformers/commit/a594e09e3924120f1f5508e7d81946bf3504df2b"><code>a594e09</code></a>
Internalise the NomicBERT model (<a
href="https://redirect.github.com/huggingface/transformers/issues/43067">#43067</a>)</li>
<li><a
href="https://github.com/huggingface/transformers/commit/4932e9721e230bea915341e7f04db32885b6c6af"><code>4932e97</code></a>
Fix resized LM head weights being overwritten by post_init (<a
href="https://redirect.github.com/huggingface/transformers/issues/45079">#45079</a>)</li>
<li><a
href="https://github.com/huggingface/transformers/commit/57e84139542c8c297873f35fcd25f66ffcf132ae"><code>57e8413</code></a>
[Qwen3.5 MoE] Add _tp_plan to ForConditionalGeneration (<a
href="https://redirect.github.com/huggingface/transformers/issues/45124">#45124</a>)</li>
<li><a
href="https://github.com/huggingface/transformers/commit/b10552e99dc4974b30126995baea455df43f8476"><code>b10552e</code></a>
Fix TypeError: 'NoneType' object is not iterable in
GenerationMixin.generate ...</li>
<li><a
href="https://github.com/huggingface/transformers/commit/423f2a31d2bd05bdc1dc30dd938389edaa998fde"><code>423f2a3</code></a>
fix(models): Fix dtype mismatch in SwitchTransformers and
TimmWrapperModel (#...</li>
<li><a
href="https://github.com/huggingface/transformers/commit/ade7a05a42bf53b183bb78c181743be063c5ff14"><code>ade7a05</code></a>
Generalize gemma vision mask to videos (<a
href="https://redirect.github.com/huggingface/transformers/issues/45185">#45185</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/huggingface/transformers/compare/v5.3.0...v5.5.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=transformers&package-manager=uv&previous-version=5.3.0&new-version=5.5.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/langchain-ai/langchain/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-13 17:58:17 -04:00
dependabot[bot] 3d4426d427 chore: bump langsmith from 0.9.5 to 0.10.2 in /libs/partners/chroma (#38831) 
Bumps [langsmith](https://github.com/langchain-ai/langsmith-sdk) from
0.9.5 to 0.10.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/langsmith-sdk/releases">langsmith's
releases</a>.</em></p>
<blockquote>
<h2>v0.10.2</h2>
<h2>What's Changed</h2>
<ul>
<li>release(js): 0.8.1 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3185">langchain-ai/langsmith-sdk#3185</a></li>
<li>refactor(voice): move span attribute setters onto TranslatedSpan by
<a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3179">langchain-ai/langsmith-sdk#3179</a></li>
<li>feat: add SmithDB by-key path to add_runs_to_annotation_queue (runs=
param) [LSDK-287] by <a
href="https://github.com/ayoung19"><code>@​ayoung19</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3077">langchain-ai/langsmith-sdk#3077</a></li>
<li>refactor(livekit + pipecat): Refactor for clarity by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3187">langchain-ai/langsmith-sdk#3187</a></li>
<li>feat(py): re-export OpenAPI client exceptions from langsmith package
by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3188">langchain-ai/langsmith-sdk#3188</a></li>
<li>release(python): bump py version to 0.10.2 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3189">langchain-ai/langsmith-sdk#3189</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/ayoung19"><code>@​ayoung19</code></a>
made their first contribution in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3077">langchain-ai/langsmith-sdk#3077</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.1...v0.10.2">https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.1...v0.10.2</a></p>
<h2>v0.10.1</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: bound voice streaming audio buffers by <a
href="https://github.com/jkennedyvz"><code>@​jkennedyvz</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3169">langchain-ai/langsmith-sdk#3169</a></li>
<li>fix: escape insights report html repr by <a
href="https://github.com/corridor-security"><code>@​corridor-security</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3176">langchain-ai/langsmith-sdk#3176</a></li>
<li>chore: bump _MIN_BACKEND_VERSION to 0.16.12rc1 by <a
href="https://github.com/langtions-bot"><code>@​langtions-bot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3178">langchain-ai/langsmith-sdk#3178</a></li>
<li>Fix URL Path Injection via Unencoded Resource Names in Python
Sandbox Client (Sync) by <a
href="https://github.com/corridor-security"><code>@​corridor-security</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3177">langchain-ai/langsmith-sdk#3177</a></li>
<li>feat(js): expose openapi client error classes by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3181">langchain-ai/langsmith-sdk#3181</a></li>
<li>release(py): 0.10.1 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3184">langchain-ai/langsmith-sdk#3184</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/corridor-security"><code>@​corridor-security</code></a>[bot]
made their first contribution in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3176">langchain-ai/langsmith-sdk#3176</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.0...v0.10.1">https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.0...v0.10.1</a></p>
<h2>v0.10.0</h2>
<h2>What's Changed</h2>
<ul>
<li>chore: sync langsmith_api by <a
href="https://github.com/langtions-bot"><code>@​langtions-bot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3152">langchain-ai/langsmith-sdk#3152</a></li>
<li>release(js): bump JS SDK to 0.7.16 by <a
href="https://github.com/sineha-mani"><code>@​sineha-mani</code></a> in
<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3160">langchain-ai/langsmith-sdk#3160</a></li>
<li>feat: expose OTel-safe metadata helpers [closes LSDK-262] by <a
href="https://github.com/open-swe"><code>@​open-swe</code></a>[bot] in
<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3091">langchain-ai/langsmith-sdk#3091</a></li>
<li>feat(integrations): helpers to build LangSmith run URLs from OTel
spans [LSDK-273] by <a
href="https://github.com/harisaiharish"><code>@​harisaiharish</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3142">langchain-ai/langsmith-sdk#3142</a></li>
<li>fix(python): remove projects accessor from AsyncClient by <a
href="https://github.com/QuentinBrosse"><code>@​QuentinBrosse</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3163">langchain-ai/langsmith-sdk#3163</a></li>
<li>chore: sync langsmith_api by <a
href="https://github.com/langtions-bot"><code>@​langtions-bot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3162">langchain-ai/langsmith-sdk#3162</a></li>
<li>feat(js): Extends wrapAnthropic JS wrapper to support Claude Managed
Agents methods by <a
href="https://github.com/jacoblee93"><code>@​jacoblee93</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3155">langchain-ai/langsmith-sdk#3155</a></li>
<li>release(js): 0.7.17 by <a
href="https://github.com/jacoblee93"><code>@​jacoblee93</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3166">langchain-ai/langsmith-sdk#3166</a></li>
<li>feat(client): expose threads and traces resource accessors on Python
and JS clients by <a
href="https://github.com/QuentinBrosse"><code>@​QuentinBrosse</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3164">langchain-ai/langsmith-sdk#3164</a></li>
<li>ci: freeze pnpm environment test installs by <a
href="https://github.com/jkennedyvz"><code>@​jkennedyvz</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3168">langchain-ai/langsmith-sdk#3168</a></li>
<li>Quote sandbox client URL path segments by <a
href="https://github.com/langsmith-fleet"><code>@​langsmith-fleet</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3167">langchain-ai/langsmith-sdk#3167</a></li>
<li>release(js): 0.8.0 by <a
href="https://github.com/QuentinBrosse"><code>@​QuentinBrosse</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3171">langchain-ai/langsmith-sdk#3171</a></li>
<li>release(py): 0.10.0 by <a
href="https://github.com/QuentinBrosse"><code>@​QuentinBrosse</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3170">langchain-ai/langsmith-sdk#3170</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/langsmith-fleet"><code>@​langsmith-fleet</code></a>[bot]
made their first contribution in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3167">langchain-ai/langsmith-sdk#3167</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.9.8...v0.10.0">https://github.com/langchain-ai/langsmith-sdk/compare/v0.9.8...v0.10.0</a></p>
<h2>v0.9.8</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/687fc8d527a28504432f52bd08c75f2894c209fe"><code>687fc8d</code></a>
release(python): bump py version to 0.10.2 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3189">#3189</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/08cbc910be1b91f4a2714a158b32fa3a56bf7040"><code>08cbc91</code></a>
feat(py): re-export OpenAPI client exceptions from langsmith package (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3188">#3188</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/d309be59b951dc3b3796753b25908c029bead7d8"><code>d309be5</code></a>
refactor(livekit + pipecat): Refactor for clarity (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3187">#3187</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/2e61f5418458fa559943da2ce274dfcd231cf074"><code>2e61f54</code></a>
feat: add SmithDB by-key path to add_runs_to_annotation_queue (runs=
param) [...</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/fab828a2b074aab98bc22d73c569ece2435e17ae"><code>fab828a</code></a>
refactor(voice): move span attribute setters onto TranslatedSpan (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3179">#3179</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/2f7709cdaaf6626a22daefa9fecef712abf3e39c"><code>2f7709c</code></a>
release(js): 0.8.1 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3185">#3185</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/6388e488ba28f8b18e18e34a3452f4a7e0c755aa"><code>6388e48</code></a>
release(py): 0.10.1 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3184">#3184</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/de74fb8f42bb632257de19f22d18a41c7d5a59b0"><code>de74fb8</code></a>
feat(js): expose openapi client error classes (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3181">#3181</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/6c0729a9bc00ab49a804b57731a423714b879a0e"><code>6c0729a</code></a>
Fix URL Path Injection via Unencoded Resource Names in Python Sandbox
Client ...</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/996073e478d6960b189d5a12d1f4f5adda9d7272"><code>996073e</code></a>
chore: bump _MIN_BACKEND_VERSION to 0.16.12rc1 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3178">#3178</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.9.5...v0.10.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=langsmith&package-manager=uv&previous-version=0.9.5&new-version=0.10.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/langchain-ai/langchain/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-13 17:58:05 -04:00
dependabot[bot] 0f27cf9dac chore: bump langsmith from 0.9.5 to 0.10.2 in /libs/partners/xai (#38832) 
Bumps [langsmith](https://github.com/langchain-ai/langsmith-sdk) from
0.9.5 to 0.10.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/langsmith-sdk/releases">langsmith's
releases</a>.</em></p>
<blockquote>
<h2>v0.10.2</h2>
<h2>What's Changed</h2>
<ul>
<li>release(js): 0.8.1 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3185">langchain-ai/langsmith-sdk#3185</a></li>
<li>refactor(voice): move span attribute setters onto TranslatedSpan by
<a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3179">langchain-ai/langsmith-sdk#3179</a></li>
<li>feat: add SmithDB by-key path to add_runs_to_annotation_queue (runs=
param) [LSDK-287] by <a
href="https://github.com/ayoung19"><code>@​ayoung19</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3077">langchain-ai/langsmith-sdk#3077</a></li>
<li>refactor(livekit + pipecat): Refactor for clarity by <a
href="https://github.com/carolinedivittorio"><code>@​carolinedivittorio</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3187">langchain-ai/langsmith-sdk#3187</a></li>
<li>feat(py): re-export OpenAPI client exceptions from langsmith package
by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3188">langchain-ai/langsmith-sdk#3188</a></li>
<li>release(python): bump py version to 0.10.2 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3189">langchain-ai/langsmith-sdk#3189</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/ayoung19"><code>@​ayoung19</code></a>
made their first contribution in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3077">langchain-ai/langsmith-sdk#3077</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.1...v0.10.2">https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.1...v0.10.2</a></p>
<h2>v0.10.1</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: bound voice streaming audio buffers by <a
href="https://github.com/jkennedyvz"><code>@​jkennedyvz</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3169">langchain-ai/langsmith-sdk#3169</a></li>
<li>fix: escape insights report html repr by <a
href="https://github.com/corridor-security"><code>@​corridor-security</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3176">langchain-ai/langsmith-sdk#3176</a></li>
<li>chore: bump _MIN_BACKEND_VERSION to 0.16.12rc1 by <a
href="https://github.com/langtions-bot"><code>@​langtions-bot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3178">langchain-ai/langsmith-sdk#3178</a></li>
<li>Fix URL Path Injection via Unencoded Resource Names in Python
Sandbox Client (Sync) by <a
href="https://github.com/corridor-security"><code>@​corridor-security</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3177">langchain-ai/langsmith-sdk#3177</a></li>
<li>feat(js): expose openapi client error classes by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3181">langchain-ai/langsmith-sdk#3181</a></li>
<li>release(py): 0.10.1 by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3184">langchain-ai/langsmith-sdk#3184</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/corridor-security"><code>@​corridor-security</code></a>[bot]
made their first contribution in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3176">langchain-ai/langsmith-sdk#3176</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.0...v0.10.1">https://github.com/langchain-ai/langsmith-sdk/compare/v0.10.0...v0.10.1</a></p>
<h2>v0.10.0</h2>
<h2>What's Changed</h2>
<ul>
<li>chore: sync langsmith_api by <a
href="https://github.com/langtions-bot"><code>@​langtions-bot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3152">langchain-ai/langsmith-sdk#3152</a></li>
<li>release(js): bump JS SDK to 0.7.16 by <a
href="https://github.com/sineha-mani"><code>@​sineha-mani</code></a> in
<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3160">langchain-ai/langsmith-sdk#3160</a></li>
<li>feat: expose OTel-safe metadata helpers [closes LSDK-262] by <a
href="https://github.com/open-swe"><code>@​open-swe</code></a>[bot] in
<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3091">langchain-ai/langsmith-sdk#3091</a></li>
<li>feat(integrations): helpers to build LangSmith run URLs from OTel
spans [LSDK-273] by <a
href="https://github.com/harisaiharish"><code>@​harisaiharish</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3142">langchain-ai/langsmith-sdk#3142</a></li>
<li>fix(python): remove projects accessor from AsyncClient by <a
href="https://github.com/QuentinBrosse"><code>@​QuentinBrosse</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3163">langchain-ai/langsmith-sdk#3163</a></li>
<li>chore: sync langsmith_api by <a
href="https://github.com/langtions-bot"><code>@​langtions-bot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3162">langchain-ai/langsmith-sdk#3162</a></li>
<li>feat(js): Extends wrapAnthropic JS wrapper to support Claude Managed
Agents methods by <a
href="https://github.com/jacoblee93"><code>@​jacoblee93</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3155">langchain-ai/langsmith-sdk#3155</a></li>
<li>release(js): 0.7.17 by <a
href="https://github.com/jacoblee93"><code>@​jacoblee93</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3166">langchain-ai/langsmith-sdk#3166</a></li>
<li>feat(client): expose threads and traces resource accessors on Python
and JS clients by <a
href="https://github.com/QuentinBrosse"><code>@​QuentinBrosse</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3164">langchain-ai/langsmith-sdk#3164</a></li>
<li>ci: freeze pnpm environment test installs by <a
href="https://github.com/jkennedyvz"><code>@​jkennedyvz</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3168">langchain-ai/langsmith-sdk#3168</a></li>
<li>Quote sandbox client URL path segments by <a
href="https://github.com/langsmith-fleet"><code>@​langsmith-fleet</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3167">langchain-ai/langsmith-sdk#3167</a></li>
<li>release(js): 0.8.0 by <a
href="https://github.com/QuentinBrosse"><code>@​QuentinBrosse</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3171">langchain-ai/langsmith-sdk#3171</a></li>
<li>release(py): 0.10.0 by <a
href="https://github.com/QuentinBrosse"><code>@​QuentinBrosse</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3170">langchain-ai/langsmith-sdk#3170</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/langsmith-fleet"><code>@​langsmith-fleet</code></a>[bot]
made their first contribution in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/3167">langchain-ai/langsmith-sdk#3167</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.9.8...v0.10.0">https://github.com/langchain-ai/langsmith-sdk/compare/v0.9.8...v0.10.0</a></p>
<h2>v0.9.8</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/687fc8d527a28504432f52bd08c75f2894c209fe"><code>687fc8d</code></a>
release(python): bump py version to 0.10.2 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3189">#3189</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/08cbc910be1b91f4a2714a158b32fa3a56bf7040"><code>08cbc91</code></a>
feat(py): re-export OpenAPI client exceptions from langsmith package (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3188">#3188</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/d309be59b951dc3b3796753b25908c029bead7d8"><code>d309be5</code></a>
refactor(livekit + pipecat): Refactor for clarity (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3187">#3187</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/2e61f5418458fa559943da2ce274dfcd231cf074"><code>2e61f54</code></a>
feat: add SmithDB by-key path to add_runs_to_annotation_queue (runs=
param) [...</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/fab828a2b074aab98bc22d73c569ece2435e17ae"><code>fab828a</code></a>
refactor(voice): move span attribute setters onto TranslatedSpan (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3179">#3179</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/2f7709cdaaf6626a22daefa9fecef712abf3e39c"><code>2f7709c</code></a>
release(js): 0.8.1 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3185">#3185</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/6388e488ba28f8b18e18e34a3452f4a7e0c755aa"><code>6388e48</code></a>
release(py): 0.10.1 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3184">#3184</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/de74fb8f42bb632257de19f22d18a41c7d5a59b0"><code>de74fb8</code></a>
feat(js): expose openapi client error classes (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3181">#3181</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/6c0729a9bc00ab49a804b57731a423714b879a0e"><code>6c0729a</code></a>
Fix URL Path Injection via Unencoded Resource Names in Python Sandbox
Client ...</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/996073e478d6960b189d5a12d1f4f5adda9d7272"><code>996073e</code></a>
chore: bump _MIN_BACKEND_VERSION to 0.16.12rc1 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/3178">#3178</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.9.5...v0.10.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=langsmith&package-manager=uv&previous-version=0.9.5&new-version=0.10.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/langchain-ai/langchain/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-13 17:58:00 -04:00
langchain-oss-model-profiles[bot]andmdrxy fb274a9ab4 chore(model-profiles): refresh model profile data (#38821) 
Automated refresh of model profile data for all in-monorepo partner
integrations via `langchain-profiles refresh`.

🤖 Generated by the [`refresh_model_profiles`
workflow](https://github.com/langchain-ai/langchain/blob/master/.github/workflows/refresh_model_profiles.yml).


## Summary of changes

**0 added · 0 removed · 5 changed** across 2 provider(s).

<details>
<summary>huggingface</summary>

**✏️ 1 changed**
- `stepfun-ai/Step-3.7-Flash`: added video input

</details>

<details>
<summary>openrouter</summary>

**✏️ 4 changed**
- `google/gemini-3-pro-image`: last updated `2026-06-18` → `2026-05-28`;
display name `Nano Banana Pro (Gemini 3 Pro Image)` → `Nano Banana Pro`;
release date `2026-06-18` → `2026-05-28`
- `google/gemini-3.1-flash-image`: last updated `2026-06-18` →
`2026-05-28`; display name `Nano Banana 2 (Gemini 3.1 Flash Image)` →
`Nano Banana 2`; release date `2026-06-18` → `2026-05-28`
- `z-ai/glm-4.6`: max input tokens 202,752 → 200,000; max output tokens
131,072 → 16,384
- `z-ai/glm-5.2`: max output tokens 128,000 → 131,072

</details>

Co-authored-by: mdrxy <61371264+mdrxy@users.noreply.github.com>
 2026-07-13 09:28:19 -04:00
langchain-oss-model-profiles[bot]andmdrxy 233e02a822 chore(model-profiles): refresh model profile data (#38810) 
Automated refresh of model profile data for all in-monorepo partner
integrations via `langchain-profiles refresh`.

🤖 Generated by the [`refresh_model_profiles`
workflow](https://github.com/langchain-ai/langchain/blob/master/.github/workflows/refresh_model_profiles.yml).


## Summary of changes

**0 added · 1 removed · 1 changed** across 1 provider(s).

### openrouter

**➖ 1 removed**
- `meta-llama/llama-3-8b-instruct`

**✏️ 1 changed**
- `z-ai/glm-5.2`: max output tokens 131,072 → 128,000

Co-authored-by: mdrxy <61371264+mdrxy@users.noreply.github.com>
 2026-07-12 17:59:19 -04:00
langchain-oss-model-profiles[bot]andmdrxy a8fd0da2b7 chore(model-profiles): refresh model profile data (#38797) 
Automated refresh of model profile data for all in-monorepo partner
integrations via `langchain-profiles refresh`.

🤖 Generated by the [`refresh_model_profiles`
workflow](https://github.com/langchain-ai/langchain/blob/master/.github/workflows/refresh_model_profiles.yml).


## Summary of changes

**1 added · 1 removed · 2 changed** across 2 provider(s).

<details>
<summary>openai</summary>

**➕ 1 added**
- `gpt-realtime-2.1` — 128,000 ctx, 32,000 out, text+image+audio+pdf in,
reasoning, tools

</details>

<details>
<summary>openrouter</summary>

**➖ 1 removed**
- `arcee-ai/trinity-mini`

**✏️ 2 changed**
- `deepseek/deepseek-v4-flash`: max output tokens 65,536 → 384,000
- `z-ai/glm-5.2`: max output tokens 101,376 → 131,072

</details>

Co-authored-by: mdrxy <61371264+mdrxy@users.noreply.github.com>
 2026-07-11 18:01:26 -04:00
Mason Daugherty 1c6bfc8f60 release(openai): 1.3.5 (#38785) 
Prepared with AI-agent assistance.
 2026-07-10 14:47:52 -04:00
Mason DaughertyandClaude Opus 4.8 4717cfc83b feat(openai): support explicit prompt caching (#38762) 
`ChatOpenAI` now supports OpenAI explicit prompt-cache options and
content-block breakpoints, and exposes cache-write token counts through
`input_token_details["cache_creation"]`.
[(Docs)](https://developers.openai.com/api/docs/guides/prompt-caching?prompt-cache-api=responses#prompt-cache-breakpoints)

---

OpenAI users can now configure explicit prompt caching through
`ChatOpenAI` without cache controls being dropped when messages are
converted for the Responses API.

The change preserves `prompt_cache_breakpoint` on text, image, and file
content blocks; forwards request-level cache options and legacy
retention settings; and reports `cache_write_tokens` as `cache_creation`
usage metadata, including priority and flex service-tier variants. It
also raises the minimum OpenAI SDK version to 2.45.0 so the integration
can rely on the SDK's current prompt-caching schemas instead of
compatibility normalization.

---------

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-07-10 14:11:10 -04:00
langchain-oss-model-profiles[bot]andmdrxy 2f527debdd chore(model-profiles): refresh model profile data (#38774) 
Automated refresh of model profile data for all in-monorepo partner
integrations via `langchain-profiles refresh`.

🤖 Generated by the [`refresh_model_profiles`
workflow](https://github.com/langchain-ai/langchain/blob/master/.github/workflows/refresh_model_profiles.yml).


## Summary of changes

**11 added · 4 removed · 44 changed** across 2 provider(s).

<details>
<summary>openai</summary>

**➕ 4 added**
- `gpt-5.6` — 1,050,000 ctx, 128,000 out, text+image+pdf in, reasoning,
tools
- `gpt-5.6-luna` — 1,050,000 ctx, 128,000 out, text+image+pdf in,
reasoning, tools
- `gpt-5.6-sol` — 1,050,000 ctx, 128,000 out, text+image+pdf in,
reasoning, tools
- `gpt-5.6-terra` — 1,050,000 ctx, 128,000 out, text+image+pdf in,
reasoning, tools

</details>

<details>
<summary>openrouter</summary>

**➕ 7 added**
- `cognitivecomputations/dolphin-mistral-24b-venice-edition` — 128,000
ctx, 8,192 out
- `openai/gpt-5.6-luna` — 1,050,000 ctx, 128,000 out, text+image+pdf in,
reasoning, tools
- `openai/gpt-5.6-luna-pro` — 1,050,000 ctx, 128,000 out, text+image+pdf
in, reasoning, tools
- `openai/gpt-5.6-sol` — 1,050,000 ctx, 128,000 out, text+image+pdf in,
reasoning, tools
- `openai/gpt-5.6-sol-pro` — 1,050,000 ctx, 128,000 out, text+image+pdf
in, reasoning, tools
- `openai/gpt-5.6-terra` — 1,050,000 ctx, 128,000 out, text+image+pdf
in, reasoning, tools
- `openai/gpt-5.6-terra-pro` — 1,050,000 ctx, 128,000 out,
text+image+pdf in, reasoning, tools

**➖ 4 removed**
- `google/gemini-2.5-flash-lite-preview-09-2025`
- `liquid/lfm-2-24b-a2b`
- `poolside/laguna-xs.2`
- `poolside/laguna-xs.2:free`

**✏️ 44 changed**
- `anthracite-org/magnum-v4-72b`: max input tokens 16,384 → 32,768
- `baidu/ernie-4.5-vl-424b-a47b`: max input tokens 123,000 → 131,072
- `deepseek/deepseek-chat`: max input tokens 128,000 → 131,072
- `deepseek/deepseek-r1`: max input tokens 64,000 → 163,840
- `deepseek/deepseek-r1-distill-llama-70b`: max input tokens 8,192 →
128,000
- `deepseek/deepseek-v3.2`: max input tokens 128,000 → 131,072
- `google/gemini-3.1-pro-preview-customtools`: max input tokens
1,048,576 → 1,048,756
- `google/gemma-4-26b-a4b-it:free`: max input tokens 131,072 → 262,144
- `meta-llama/llama-3.2-1b-instruct`: max input tokens 60,000 → 131,072
- `meta-llama/llama-3.3-70b-instruct:free`: max input tokens 65,536 →
131,072
- `meta-llama/llama-4-scout`: max input tokens 327,680 → 10,000,000
- `microsoft/wizardlm-2-8x22b`: max input tokens 65,535 → 65,536
- `minimax/minimax-m2.5`: max input tokens 196,608 → 204,800
- `minimax/minimax-m2.7`: max input tokens 196,608 → 204,800
- `minimax/minimax-m3`: max input tokens 524,288 → 1,048,576; max output
tokens 512,000 → 131,072
- `moonshotai/kimi-k2.5`: max input tokens 256,000 → 262,144
- `moonshotai/kimi-k2.7-code`: max output tokens 16,384 → 262,144
- `nvidia/nemotron-3-super-120b-a12b`: max input tokens 262,144 →
1,000,000
- `nvidia/nemotron-3-super-120b-a12b:free`: max input tokens 262,144 →
1,000,000
- `nvidia/nemotron-3-ultra-550b-a55b`: max input tokens 262,144 →
1,000,000
- `poolside/laguna-m.1`: last updated `2026-04-28` → `2026-06-13`
- `poolside/laguna-m.1:free`: last updated `2026-04-28` → `2026-06-13`
- `qwen/qwen-2.5-72b-instruct`: max input tokens 32,768 → 131,072
- `qwen/qwen-2.5-7b-instruct`: max input tokens 32,768 → 131,072
- `qwen/qwen-2.5-coder-32b-instruct`: max input tokens 32,768 → 128,000
- …and 19 more

</details>

Co-authored-by: mdrxy <61371264+mdrxy@users.noreply.github.com>
 2026-07-10 10:24:05 -04:00
Radhakrishnan Pachyappan a07356f839 fix(anthropic): add advisor_ prefix to builtin tool recognition (#38686) 2026-07-09 22:18:52 -04:00
Mason Daugherty 8107ff4065 release(fireworks): 1.4.4 (#38753) 2026-07-09 13:45:31 -04:00
Mason DaughertyandAndrei Boldyrev ea24fb1e13 fix(fireworks): report cached prompt token usage (#38751) 
Closes #38648

`langchain-fireworks` now reports Fireworks cached prompt tokens in
`AIMessage.usage_metadata.input_token_details.cache_read` and no longer
crashes when combining nested token usage from batched `generate()`
calls.

---

Fireworks can return nested token usage details when prompt caching is
involved, including cached prompt token counts. Batched `generate()`
calls were crashing when those nested dictionaries were combined, and
regular chat results did not expose the cached-token breakdown in the
standard LangChain usage metadata shape.

This updates `ChatFireworks` so nested token usage is merged safely and
cached prompt tokens are reported as `input_token_details.cache_read`.
Users and downstream tracing systems can now distinguish cached
Fireworks input tokens from regular input tokens instead of treating the
full prompt as uncached input.

Thanks to @abcgco for the original report and recursive merge fix in
#38646, and to @abhi-0203 for independently identifying the same nested
`token_usage` failure in #38735. This PR builds on that work by using
the recursive merge approach and extending the fix to normalize cached
prompt tokens into standard usage metadata for tracing and cost
reporting.

Co-authored-by: Andrei Boldyrev <abcgco@gmail.com>
 2026-07-09 13:39:38 -04:00
Mason Daugherty a4294f9a39 chore(deps): refresh lockfiles (#38746) 2026-07-09 12:43:43 -04:00