Skip to content

chore(deps): bump uuid, @langchain/community, @langchain/core, @langchain/mongodb, @langchain/textsplitters and langchain - #50

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-62be900244
Open

chore(deps): bump uuid, @langchain/community, @langchain/core, @langchain/mongodb, @langchain/textsplitters and langchain#50
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-62be900244

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 23, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps uuid to 14.0.0 and updates ancestor dependencies uuid, @langchain/community, @langchain/core, @langchain/mongodb, @langchain/textsplitters and langchain. These dependencies need to be updated together.

Updates uuid from 9.0.1 to 14.0.0

Release notes

Sourced from uuid's releases.

v14.0.0

14.0.0 (2026-04-19)

⚠ BREAKING CHANGES

  • expect crypto to be global everywhere (requires node@20+) (#935)
  • drop node@18 support (#934)

Features

Bug Fixes

  • expect crypto to be global everywhere (requires node@20+) (#935) (f2c235f)
  • Use GITHUB_TOKEN for release-please and enable npm provenance (#925) (ffa3138)

v13.0.2

13.0.2 (2026-05-04)

Bug Fixes

  • rerelease to fix provenance. (49ccb35)

v13.0.1

13.0.1 (2026-04-27)

Bug Fixes

v13.0.0

13.0.0 (2025-09-08)

⚠ BREAKING CHANGES

  • make browser exports the default (#901)

Bug Fixes

v12.0.1

12.0.1 (2026-04-29)

... (truncated)

Changelog

Sourced from uuid's changelog.

14.0.0 (2026-04-19)

Security

  • Fixes GHSA-w5hq-g745-h8pq: v3(), v5(), and v6() did not validate that writes would remain within the bounds of a caller-supplied buffer, allowing out-of-bounds writes when an invalid offset was provided. A RangeError is now thrown if offset < 0 or offset + 16 > buf.length.

⚠ BREAKING CHANGES

  • crypto is now expected to be globally defined (requires node@20+) (#935)
  • drop node@18 support (#934)
  • upgrade minimum supported TypeScript version to 5.4.3, in keeping with the project's policy of supporting TypeScript versions released within the last two years

13.0.0 (2025-09-08)

⚠ BREAKING CHANGES

  • make browser exports the default (#901)

Bug Fixes

12.0.0 (2025-09-05)

⚠ BREAKING CHANGES

  • update to typescript@5.2 (#887)
  • remove CommonJS support (#886)
  • drop node@16 support (#883)

Features

Bug Fixes

11.1.0 (2025-02-19)

... (truncated)

Commits
  • 7c1ea08 chore(main): release 14.0.0 (#926)
  • 3d2c5b0 Merge commit from fork
  • f2c235f fix!: expect crypto to be global everywhere (requires node@20+) (#935)
  • 529ef08 chore: upgrade TypeScript and fixup types (#927)
  • 086fd79 chore: update dependencies (#933)
  • dc4ddb8 feat!: drop node@18 support (#934)
  • 0f1f9c9 chore: switch to Biome for parsing and linting (#932)
  • e2879e6 chore: use maintained version of npm-run-all (#930)
  • ffa3138 fix: Use GITHUB_TOKEN for release-please and enable npm provenance (#925)
  • 0423d49 docs: remove obsolete v1 option notes (#915)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for uuid since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates @langchain/community from 0.3.57 to 1.1.29

Release notes

Sourced from @​langchain/community's releases.

@​langchain/community@​1.1.29

Patch Changes

  • #63 bb52506 Thanks @​hntrl! - The community package is being sunsetted. See #61 for details and guidance. Thank you to everyone who has contributed integrations, fixes, reviews, and maintenance over the years.

@​langchain/community@​1.1.28

Patch Changes

  • #44 f9a922e Thanks @​dependabot! - chore(deps): bump fast-xml-parser from 5.5.9 to 5.7.0

  • #30 9cd006c Thanks @​christian-bromann! - fix(pdf-loader): support both pdf-parse v1 and v2

  • #36 1e2e4bf Thanks @​hntrl! - Fix Milvus collection loading before delete operations (#9749) and partition name handling in search/delete (#9748)

    • Added loadCollectionSync() call in the delete() method to ensure collection is loaded before delete operations
    • Added partition_names parameter to search() call in similaritySearchVectorWithScore()
    • Added partition_name parameter to both deleteEntities() and delete() calls
    • Updated error message in delete method from "before search" to "before deletion"

  • #41 5bd4246 Thanks @​RaschidJFR! - Expose basePath option in VoyageEmbeddings class

  • #43 b835751 Thanks @​jkennedyvz! - chore(deps): bump transitive dependencies to patch 6 security alerts

    Updates pnpm overrides to resolve critical and high severity Dependabot alerts in transitive dependencies reached via optional peerDependencies and dev tooling:

    No workspace package has these as direct dependencies; overrides affect the monorepo lockfile only and do not change published package contents.

  • #42 3657e90 Thanks @​RaschidJFR! - surface Voyage AI API errors in VoyageEmbeddings

Commits

Updates @langchain/core from 0.3.80 to 1.2.0

Release notes

Sourced from @​langchain/core's releases.

@​langchain/core@​1.2.0

Minor Changes

Patch Changes

  • #11047 ac0f71d Thanks @​christian-bromann! - fix(core): preserve AIMessage content blocks

    Keep existing v1 contentBlocks when constructing AIMessage instances so serialized messages do not lose block content during deserialization.

@​langchain/core@​1.1.48

Patch Changes

  • #10832 1b24369 Thanks @​info-arnav! - fix(core, openrouter): make CJS default re-exports callable

  • #10666 2bb55b0 Thanks @​hnustwjj! - feat(openrouter): surface reasoning content as v1 standard content blocks

    convertOpenRouterResponseToBaseMessage and convertOpenRouterDeltaToBaseMessageChunk now copy OpenRouter's reasoning (flat string) and reasoning_details (structured array) fields onto additional_kwargs.reasoning_content / additional_kwargs.reasoning_details. A new ChatOpenRouterTranslator is registered in @langchain/core under the "openrouter" provider key so AIMessage.contentBlocks emits standard {type: "reasoning"} blocks alongside text and tool calls.

    Previously, reasoning text returned by reasoning-capable models routed through OpenRouter (DeepSeek R1, Minimax M2, Claude extended thinking, o-series, etc.) was silently dropped: only the reasoning_tokens count was preserved via usage_metadata. Consumers using standard content blocks (including the frontend agent UI patterns shown in the docs) could not display the model's chain of thought.

  • #10918 3999fab Thanks @​christian-bromann! - fix(openai): stream custom tool calls through Responses API chunks

@​langchain/core@​1.1.47

Patch Changes

  • #10906 f61b345 Thanks @​hntrl! - feat(core): add uuid v6 utility support

    Add v6 UUID generation support to @langchain/core/utils/uuid by vendoring the upstream uuidjs v6 implementation and its v1ToV6 helper, exporting v6 from the UUID utils index, and adding tests for deterministic generation, buffer/offset behavior, validation/versioning, and ordering.

  • #10872 a640079 Thanks @​hntrl! - chore(deps): remove redundant @​types/uuid declarations

    Remove @types/uuid from package manifests that rely on @langchain/core/utils/uuid or do not require uuid type stubs directly, and refresh the lockfile entries accordingly.

  • #10792 3682268 Thanks @​Genmin! - fix(core): apply v1 message casting after implicit streaming aggregation

  • #10901 f26fc4a Thanks @​christian-bromann! - fix(testing): share fakeModel invocation state across bindTools instances

... (truncated)

Commits
  • c5e8962 chore: version packages (#11059)
  • e51478a feat(aws): bedrock prompt caching middleware (#11080)
  • 7d61f5f fix(groq): tighten @​langchain/core peer dependency to ^1.1.30 (#11069)
  • 2e28115 feat(deps): native streamEvents ChatModelStreamEvent protocol (#10924)
  • 6d212ef docs(tavily): fix "refering" typo in tool description (#11067)
  • a001816 chore(deps): bump esbuild from 0.28.0 to 0.28.1 in /environment_tests/test-ex...
  • 234c8bb ci(infra): pin GitHub Actions to full-length commit SHAs (#11061)
  • 4aeaa76 feat(langchain): add when predicate to human-in-the-loop middleware (#11012)
  • ac0f71d fix(core): preserve AIMessage content blocks (#11047)
  • 39f338e chore: remove deprecated @​langchain/google-cloud-sql-pg package (#11060)
  • Additional commits viewable in compare view

Updates @langchain/mongodb from 0.1.1 to 1.3.0

Release notes

Sourced from @​langchain/mongodb's releases.

@​langchain/mongodb@​1.2.1

Patch Changes

  • #10872 a640079 Thanks @​hntrl! - chore(deps): remove redundant @​types/uuid declarations

    Remove @types/uuid from package manifests that rely on @langchain/core/utils/uuid or do not require uuid type stubs directly, and refresh the lockfile entries accordingly.

Commits
  • daece6d chore: version packages (#10560)
  • 9781bff fix(google): align ChatGoogle mediaResolution with Gemini scalar type (#10550)
  • 3bd85c1 feat(langchain): add ChatGoogle support to initChatModel (#10654)
  • d3d0922 feat(core): support for headless tools (#10430)
  • 793bc69 feat(aws): impute file name for document content blocks#963 (#10658)
  • d6bf4fc feat(openai): impute placeholder filenames for openai file inputs (#10614)
  • 0a7a729 fix(examples): update dependencies (#10651)
  • 6f8dafc Bump vitest (#10649)
  • e89cfd2 chore(deps): bump @​cloudflare/workers-types from 4.20260207.0 to 4.20260402.1...
  • 0de2c14 chore(deps): bump @​aws-sdk/client-bedrock-agent-runtime from 3.1006.0 to 3.10...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​langchain/mongodb since your current version.


Updates @langchain/textsplitters from 0.1.0 to 1.0.1

Release notes

Sourced from @​langchain/textsplitters's releases.

@​langchain/together-ai@​0.2.1

Patch Changes

  • Updated dependencies [80b43ec]:
    • @​langchain/openai@​1.5.1

@​langchain/fireworks@​0.2.1

Patch Changes

  • Updated dependencies [80b43ec]:
    • @​langchain/openai@​1.5.1

@​langchain/neo4j@​0.1.8

Patch Changes

  • Updated dependencies []:
    • @​langchain/classic@​1.0.36

@​langchain/openrouter@​0.4.1

Patch Changes

  • Updated dependencies [80b43ec]:
    • @​langchain/openai@​1.5.1

@​langchain/ibm@​0.2.0

Minor Changes

@​langchain/perplexity@​0.3.0

Minor Changes

@​langchain/together-ai@​0.2.0

Minor Changes

Patch Changes

  • Updated dependencies [2e28115]:
    • @​langchain/openai@​1.5.0

@​langchain/neo4j@​0.1.7

Patch Changes

  • Updated dependencies []:
    • @​langchain/classic@​1.0.35

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​langchain/textsplitters since your current version.


Updates langchain from 0.3.37 to 1.5.0

Release notes

Sourced from langchain's releases.

langchain@1.5.0

Minor Changes

  • #11062 3ebd10a Thanks @​christian-bromann! - feat(langchain): surface tool-dispatched subagents on run.subagents

    Add a native subagent stream transformer to createAgent so v3 runs expose named nested agents (createAgent({ name }) invoked from tools) as typed SubagentRunStream handles with name, cause, scoped messages / toolCalls, and output. Refactors agent stream transformers into agents/transformers/ and exports only the public stream types from the package entry.

langchain@1.4.6

Patch Changes

  • #11012 4aeaa76 Thanks @​christian-bromann! - feat(langchain): add when predicate to human-in-the-loop middleware

    Add an optional when callback on InterruptOnConfig so callers can dynamically skip interrupts for specific tool calls. The predicate receives a ToolCallRequest (batch afterModel context) and returns whether to interrupt or auto-approve, matching Python HumanInTheLoopMiddleware.

  • #11080 e51478a Thanks @​aolsenjazz! - feat(aws): bedrock prompt caching middleware

    Adds bedrockPromptCachingMiddleware. The interface largely matches what was previous implemented with anthropicPromptCachingMiddleware, making a best-effort attempt at utilizing prompt caching features for supported models.

langchain@1.4.2

Patch Changes

langchain@1.4.1

Patch Changes

  • #10879 eb480cb Thanks @​vignesh-gep! - fix(langchain/createAgent): throw on terminal providerStrategy parse failure instead of silently resolving with structuredResponse: undefined

    When createAgent was configured with responseFormat resolving to a providerStrategy (either passed explicitly or auto-promoted from a bare Zod / JSON schema for models whose profile reports structuredOutput: true), and the model produced a terminal response (no tool_calls) whose text could not be JSON-parsed or did not satisfy the schema, the agent silently exited with no structuredResponse, surfacing later as TypeError: Cannot read properties of undefined. The agent now throws a StructuredOutputParsingError in that case while still allowing the agent loop to continue when tool calls are present. Closes #10878.

  • #10872 a640079 Thanks @​hntrl! - chore(deps): remove redundant @​types/uuid declarations

    Remove @types/uuid from package manifests that rely on @langchain/core/utils/uuid or do not require uuid type stubs directly, and refresh the lockfile entries accordingly.

  • #10160 bba900c Thanks @​JadenKim-dev! - fix(langchain): prevent llmToolSelectorMiddleware from leaking into message stream

langchain@1.3.4

Patch Changes

... (truncated)

Commits

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 23, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-62be900244 branch from 23cf7d2 to 8b61df1 Compare June 11, 2026 14:00
@dependabot
chore(deps): bump uuid, @langchain/community, @langchain/core, @langc…
c079af9 
…hain/mongodb, @langchain/textsplitters and langchain

Bumps [uuid](https://github.com/uuidjs/uuid) to 14.0.0 and updates ancestor dependencies [uuid](https://github.com/uuidjs/uuid), [@langchain/community](https://github.com/langchain-ai/langchainjs-community), [@langchain/core](https://github.com/langchain-ai/langchainjs), [@langchain/mongodb](https://github.com/langchain-ai/langchainjs), [@langchain/textsplitters](https://github.com/langchain-ai/langchainjs) and [langchain](https://github.com/langchain-ai/langchainjs). These dependencies need to be updated together.


Updates `uuid` from 9.0.1 to 14.0.0
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](uuidjs/uuid@v9.0.1...v14.0.0)

Updates `@langchain/community` from 0.3.57 to 1.1.29
- [Release notes](https://github.com/langchain-ai/langchainjs-community/releases)
- [Commits](https://github.com/langchain-ai/langchainjs-community/commits/@langchain/community@1.1.29)

Updates `@langchain/core` from 0.3.80 to 1.2.0
- [Release notes](https://github.com/langchain-ai/langchainjs/releases)
- [Commits](https://github.com/langchain-ai/langchainjs/compare/@langchain/core==0.3.80...@langchain/core@1.2.0)

Updates `@langchain/mongodb` from 0.1.1 to 1.3.0
- [Release notes](https://github.com/langchain-ai/langchainjs/releases)
- [Commits](https://github.com/langchain-ai/langchainjs/compare/0.1.1...langchain@1.3.0)

Updates `@langchain/textsplitters` from 0.1.0 to 1.0.1
- [Release notes](https://github.com/langchain-ai/langchainjs/releases)
- [Commits](https://github.com/langchain-ai/langchainjs/compare/0.1.0...@langchain/textsplitters@1.0.1)

Updates `langchain` from 0.3.37 to 1.5.0
- [Release notes](https://github.com/langchain-ai/langchainjs/releases)
- [Commits](https://github.com/langchain-ai/langchainjs/commits/langchain@1.5.0)

---
updated-dependencies:
- dependency-name: "@langchain/community"
  dependency-version: 1.1.28
  dependency-type: direct:production
- dependency-name: "@langchain/core"
  dependency-version: 1.1.48
  dependency-type: direct:production
- dependency-name: "@langchain/mongodb"
  dependency-version: 1.2.1
  dependency-type: direct:production
- dependency-name: "@langchain/textsplitters"
  dependency-version: 1.0.1
  dependency-type: direct:production
- dependency-name: langchain
  dependency-version: 1.4.2
  dependency-type: direct:production
- dependency-name: uuid
  dependency-version: 14.0.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-62be900244 branch from 8b61df1 to c079af9 Compare June 19, 2026 04:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants