Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Jan 9, 2026

Bumps langchain from 1.0.3 to 1.2.3.

Release notes

Sourced from langchain's releases.

langchain-core==1.2.3

Changes since langchain-core==1.2.2

release(core): 1.2.3 (#34421) fix(core): allow unknown blocks in convert_to_openai_messages (#34420) feat(infra): add CI check for out of date lockfiles (#34397)

langchain==1.2.3

Changes since langchain==1.2.2

release(langchain): 1.2.3 (#34668) refactor(langchain): engage summarization based on reported usage_metadata (#34632) fix(langchain): keep tool call / AIMessage pairings when summarizing (#34609) test(langchain): cover chat model provider inference (#34657) fix(langchain): fix copy-paste error on azure_openai embedding provider map (#34655)

langchain-core==1.2.2

Changes since langchain-core==1.2.1

chore(core): bump lockfile (#34392) release(core): 1.2.2 (#34391) fix(core): use get_type_hints for Python 3.14 TypedDict compatibility (#34390)

langchain==1.2.2

Changes since langchain==1.2.1

fix(langchain): add test to verify version (#34644) release(langchain): release 1.2.2 (#34643) fix(langchain): handle parallel usage of the todo tool in planning middleware (#34637) chore(langchain): fix types in test_wrap_model_call (#34573)

langchain-core==1.2.1

Changes since langchain-core==1.2.0

release(core): 1.2.1 (#34370) fix(core): handle None arguments in parse_tool_call (#34242) chore(core): fix some types related to ToolCallChunk (#34283)

langchain-xai==1.2.1

Changes since langchain-xai==1.2.0

release(xai): 1.2.1 (#34604) fix(xai): count reasoning tokens in output total (#34603)

langchain==1.2.1

Changes since langchain==1.2.0

release(langchain): 1.2.1 (#34622) fix(core,langchain): use get_buffer_string for message summarization (#34607) chore(langchain): fix types in test_model_fallback (#34615)

... (truncated)

Commits
  • 76da99e release(langchain): 1.2.3 (#34668)
  • 2847814 feat(core): add more file extensions to ignore in HTML link extraction (#34552)
  • d383f00 refactor(langchain): engage summarization based on reported usage_metadata ...
  • 50c5bb5 refactor(core): improve docstrings for HTML link extraction utilities (#34550)
  • 2b6911d fix(langchain): keep tool call / AIMessage pairings when summarizing (#34609)
  • f805ea9 test(langchain): cover chat model provider inference (#34657)
  • 0276cc0 fix(langchain): fix copy-paste error on azure_openai embedding provider map (...
  • ceca38d fix(langchain): add test to verify version (#34644)
  • 5554a36 release(langchain): release 1.2.2 (#34643)
  • bda22aa fix(langchain): handle parallel usage of the todo tool in planning middleware...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [langchain](https://github.com/langchain-ai/langchain) from 1.0.3 to 1.2.3.
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain==1.0.3...langchain==1.2.3)

---
updated-dependencies:
- dependency-name: langchain
  dependency-version: 1.2.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jan 9, 2026
@sonarqubecloud
Copy link

sonarqubecloud bot commented Jan 9, 2026

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant