Update langchain to 1.x to fix CVE in langchain-core (dependabot #174)

Browse Source

langchain-core had a high-severity path traversal vulnerability in
legacy load_prompt functions, fixed in 1.2.22. Declare langchain and
openpipe extras as conflicting since langchain-openai now requires
openai>=2.26 while openpipe caps openai<=1.97.1.

...

This commit is contained in:

Mark Backman

2026-03-29 09:47:51 -04:00

parent e1756688bc

commit 336954f83f

2 changed files with 384 additions and 249 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

623

uv.lock generated

File diff suppressed because it is too large Load Diff