langchain-ai/langchain - CodSpeed

langchain

Blog Docs Changelog

Performance History

Latest Results

Merge branch 'langchain-ai:master' into patch-1

bansalkanav:patch-1

10 hours ago

revert: patch vulnerable integration dependencies (#41481) Reverts langchain-ai/langchain#41473

master

20 hours ago

Revert "build(deps): patch vulnerable integration dependencies (#41473)" This reverts commit 0c9e1ef5962fd45497fcb231280941e83680127f.

revert-41473-jkennedyvz/infra/dependabot-security-patches

20 hours ago

build(deps): patch vulnerable integration dependencies (#41473) Upgrade Pillow to 13.0.0, filelock to 4.2.4, and setuptools to 84.2.1 across the affected dependency locks, addressing all 171 currently open Dependabot alerts. Raise Qdrant's optional fastembed minimum to 0.9.1 so it accepts patched Pillow. **Breaking change:** Chroma, Hugging Face, Nomic, OpenAI, Perplexity, Qdrant, LangChain, and LangChain Classic now require Python 3.11 or newer. Patched Pillow and filelock dropped Python 3.10; downstream package requirements and locks are updated consistently. PR and scheduled integration CI use a plain Python 3.11 minimum, with no custom matrix selection, added tests, or integration-group exceptions. Text-splitters retains its existing package Python requirement. Text-splitters lock validation succeeded offline with the unchanged, hash-verified official spaCy wheel; online validation is blocked by a GitHub release redirect returning HTTP 401. Prepared with AI-agent assistance. ## References - [Slack thread](https://langchain.slack.com/archives/D0B5PRNJA05/p1792921848727259) Made by [Open SWE](https://github.com/langchain-ai/open-swe) · [view thread](https://openswe.langchain.dev/agents/4344b5aa-e3c2-5381-897f-24c9c5785146) · openai:gpt-6.1-sol (medium) --------- Co-authored-by: John Kennedy <jkennedyvz@users.noreply.github.com> Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com>

master

1 day ago

build(deps)!: simplify Python 3.10 removal Use a uniform Python 3.11 CI floor, remove custom matrix selection and its tests, and raise dependent LangChain packages consistently instead of introducing test-group exceptions. Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com>

jkennedyvz/infra/dependabot-security-patches

1 day ago

fix(ci): use supported integration Python versions Use the existing Python 3.11 matrix for affected integration environments while preserving Python 3.10 coverage elsewhere and honoring compatible manual overrides. Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com>

jkennedyvz/infra/dependabot-security-patches

1 day ago

fix(deps): scope Pillow Python minimum to integration tests Restore Python 3.10 runtime compatibility for OpenAI and Perplexity so downstream local locks resolve; require Python 3.11 only in their integration dependency groups. Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com>

jkennedyvz/infra/dependabot-security-patches

1 day ago

perf(core): parse streamed tool call args lazily in `AIMessageChunk`

mdrxy/core/lazy-tool-call-parse

1 day ago

Latest Branches

0%

fix(core): validate score_threshold range in VectorStoreRetriever#39266

10 hours ago

b8798a8

bansalkanav:patch-1

0%

revert: patch vulnerable integration dependencies#41481

20 hours ago

41a10a7

revert-41473-jkennedyvz/infra/dependabot-security-patches

0%

build(deps): patch vulnerable integration dependencies#41473

1 day ago

3991f49

jkennedyvz/infra/dependabot-security-patches

© 2026 CodSpeed Technology

Home Terms Privacy Docs