langchain-ai
langchain
Blog
Docs
Changelog
Blog
Docs
Changelog
Overview
Branches
Benchmarks
Runs
Performance History
Latest Results
fix(core): validate paths in `prompt.save` and `load_prompt`, deprecate methods (#36200)
erny:backport/cve-2026-34070-load-prompt-path-traversal
47 minutes ago
chore: bump mistune from 3.1.4 to 3.2.1 in /libs/core Bumps [mistune](https://github.com/lepture/mistune) from 3.1.4 to 3.2.1. - [Release notes](https://github.com/lepture/mistune/releases) - [Changelog](https://github.com/lepture/mistune/blob/main/docs/changes.rst) - [Commits](https://github.com/lepture/mistune/compare/v3.1.4...v3.2.1) --- updated-dependencies: - dependency-name: mistune dependency-version: 3.2.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot/uv/libs/core/mistune-3.2.1
48 minutes ago
chore(langchain-classic): deprecate hub, limit loads/dumps (#37234) deprecate hub classic and hub runnable. This code path isn't expected to be active for most users (it's dependent on having a very old version of the langsmith sdk). harden usage of loads/dumps.
master
53 minutes ago
x
eugene/security_hardening
1 hour ago
Merge branch 'v1.4' into sr/release-langchain-1.3.0a2
sr/release-langchain-1.3.0a2
21 hours ago
release(langchain): 1.3.0a2
sr/release-langchain-1.3.0a2
21 hours ago
fix(agents): ordered schema resolution — list replaces set so last middleware wins _resolve_schemas previously accepted a set[type], making field-conflict resolution non-deterministic. This caused DeltaChannel annotations to be silently overwritten by BinaryOperatorAggregate depending on set iteration order. Change to list[type] with base_state first; middleware schemas follow in registration order. Last entry wins any conflict, so a middleware appended last can reliably override a base-state field — e.g. DeltaChannel over BinaryOperatorAggregate — without a post-compilation patch at the call site.
sr/ordered-schema-resolution
21 hours ago
fix(agents): ordered schema resolution — list replaces set so last middleware wins _resolve_schemas previously accepted a set[type], making field-conflict resolution non-deterministic. This caused DeltaChannel annotations to be silently overwritten by BinaryOperatorAggregate depending on set iteration order. Change to list[type] with base_state first; middleware schemas follow in registration order. Last entry wins any conflict, so a middleware appended last can reliably override a base-state field — e.g. DeltaChannel over BinaryOperatorAggregate — without a post-compilation patch at the call site.
sr/ordered-schema-resolution
21 hours ago
Latest Branches
CodSpeed Performance Gauge
×3.1
fix(core): backport path-traversal fix to v0.3 (CVE-2026-34070, GHSA-qh6h-p6c9-ff54)
#37233
1 month ago
35d7a0d
erny:backport/cve-2026-34070-load-prompt-path-traversal
CodSpeed Performance Gauge
0%
chore: bump mistune from 3.1.4 to 3.2.1 in /libs/core
#37237
53 minutes ago
3550075
dependabot/uv/libs/core/mistune-3.2.1
CodSpeed Performance Gauge
0%
chore(langchain-classic): deprecate hub, limit loads/dumps
#37234
1 hour ago
3c560f3
eugene/security_hardening
© 2026 CodSpeed Technology
Home
Terms
Privacy
Docs