langchain-ai/langchain - CodSpeed

langchain

Blog Docs Changelog

Performance History

Latest Results

fix(core): validate paths in `prompt.save` and `load_prompt`, deprecate methods (#36200)

erny:backport/cve-2026-34070-load-prompt-path-traversal

47 minutes ago

chore: bump mistune from 3.1.4 to 3.2.1 in /libs/core Bumps [mistune](https://github.com/lepture/mistune) from 3.1.4 to 3.2.1. - [Release notes](https://github.com/lepture/mistune/releases) - [Changelog](https://github.com/lepture/mistune/blob/main/docs/changes.rst) - [Commits](https://github.com/lepture/mistune/compare/v3.1.4...v3.2.1) --- updated-dependencies: - dependency-name: mistune dependency-version: 3.2.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot/uv/libs/core/mistune-3.2.1

48 minutes ago

chore(langchain-classic): deprecate hub, limit loads/dumps (#37234) deprecate hub classic and hub runnable. This code path isn't expected to be active for most users (it's dependent on having a very old version of the langsmith sdk). harden usage of loads/dumps.

master

53 minutes ago

eugene/security_hardening

1 hour ago

Merge branch 'v1.4' into sr/release-langchain-1.3.0a2

sr/release-langchain-1.3.0a2

21 hours ago

release(langchain): 1.3.0a2

sr/release-langchain-1.3.0a2

21 hours ago

fix(agents): ordered schema resolution — list replaces set so last middleware wins _resolve_schemas previously accepted a set[type], making field-conflict resolution non-deterministic. This caused DeltaChannel annotations to be silently overwritten by BinaryOperatorAggregate depending on set iteration order. Change to list[type] with base_state first; middleware schemas follow in registration order. Last entry wins any conflict, so a middleware appended last can reliably override a base-state field — e.g. DeltaChannel over BinaryOperatorAggregate — without a post-compilation patch at the call site.

sr/ordered-schema-resolution

21 hours ago

fix(agents): ordered schema resolution — list replaces set so last middleware wins _resolve_schemas previously accepted a set[type], making field-conflict resolution non-deterministic. This caused DeltaChannel annotations to be silently overwritten by BinaryOperatorAggregate depending on set iteration order. Change to list[type] with base_state first; middleware schemas follow in registration order. Last entry wins any conflict, so a middleware appended last can reliably override a base-state field — e.g. DeltaChannel over BinaryOperatorAggregate — without a post-compilation patch at the call site.

sr/ordered-schema-resolution

21 hours ago

Latest Branches

×3.1

fix(core): backport path-traversal fix to v0.3 (CVE-2026-34070, GHSA-qh6h-p6c9-ff54)#37233

1 month ago

35d7a0d

erny:backport/cve-2026-34070-load-prompt-path-traversal

0%

chore: bump mistune from 3.1.4 to 3.2.1 in /libs/core#37237

53 minutes ago

3550075

dependabot/uv/libs/core/mistune-3.2.1

0%

chore(langchain-classic): deprecate hub, limit loads/dumps#37234

1 hour ago

3c560f3

eugene/security_hardening

© 2026 CodSpeed Technology

Home Terms Privacy Docs