langchain-ai/langchain - CodSpeed

langchain

Blog Docs Changelog

Performance History

Latest Results

revert: patch vulnerable integration dependencies (#41481) Reverts langchain-ai/langchain#41473

master

7 hours ago

Revert "build(deps): patch vulnerable integration dependencies (#41473)" This reverts commit 0c9e1ef5962fd45497fcb231280941e83680127f.

revert-41473-jkennedyvz/infra/dependabot-security-patches

7 hours ago

build(deps): patch vulnerable integration dependencies (#41473) Upgrade Pillow to 13.0.0, filelock to 4.2.4, and setuptools to 84.2.1 across the affected dependency locks, addressing all 171 currently open Dependabot alerts. Raise Qdrant's optional fastembed minimum to 0.9.1 so it accepts patched Pillow. **Breaking change:** Chroma, Hugging Face, Nomic, OpenAI, Perplexity, Qdrant, LangChain, and LangChain Classic now require Python 3.11 or newer. Patched Pillow and filelock dropped Python 3.10; downstream package requirements and locks are updated consistently. PR and scheduled integration CI use a plain Python 3.11 minimum, with no custom matrix selection, added tests, or integration-group exceptions. Text-splitters retains its existing package Python requirement. Text-splitters lock validation succeeded offline with the unchanged, hash-verified official spaCy wheel; online validation is blocked by a GitHub release redirect returning HTTP 401. Prepared with AI-agent assistance. ## References - [Slack thread](https://langchain.slack.com/archives/D0B5PRNJA05/p1792921848727259) Made by [Open SWE](https://github.com/langchain-ai/open-swe) · [view thread](https://openswe.langchain.dev/agents/4344b5aa-e3c2-5381-897f-24c9c5785146) · openai:gpt-6.1-sol (medium) --------- Co-authored-by: John Kennedy <jkennedyvz@users.noreply.github.com> Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com>

master

11 hours ago

build(deps)!: simplify Python 3.10 removal Use a uniform Python 3.11 CI floor, remove custom matrix selection and its tests, and raise dependent LangChain packages consistently instead of introducing test-group exceptions. Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com>

jkennedyvz/infra/dependabot-security-patches

12 hours ago

fix(ci): use supported integration Python versions Use the existing Python 3.11 matrix for affected integration environments while preserving Python 3.10 coverage elsewhere and honoring compatible manual overrides. Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com>

jkennedyvz/infra/dependabot-security-patches

12 hours ago

fix(deps): scope Pillow Python minimum to integration tests Restore Python 3.10 runtime compatibility for OpenAI and Perplexity so downstream local locks resolve; require Python 3.11 only in their integration dependency groups. Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com>

jkennedyvz/infra/dependabot-security-patches

12 hours ago

perf(core): parse streamed tool call args lazily in `AIMessageChunk`

mdrxy/core/lazy-tool-call-parse

22 hours ago

perf(core): stop `parse_partial_json` from retrying one character at a time

mdrxy/core/partial-json-linear-trim

22 hours ago

Latest Branches

0%

revert: patch vulnerable integration dependencies#41481

8 hours ago

41a10a7

revert-41473-jkennedyvz/infra/dependabot-security-patches

0%

build(deps): patch vulnerable integration dependencies#41473

12 hours ago

3991f49

jkennedyvz/infra/dependabot-security-patches

-1%

perf(core): parse streamed tool call args lazily in `AIMessageChunk`#41468

22 hours ago

de486dd

mdrxy/core/lazy-tool-call-parse

© 2026 CodSpeed Technology

Home Terms Privacy Docs