Skip to content

chore: udpate langgraph version#11

Merged
andres-javier-lopez merged 8 commits intomainfrom
chore/security-bump-langgraph
Dec 19, 2025
Merged

chore: udpate langgraph version#11
andres-javier-lopez merged 8 commits intomainfrom
chore/security-bump-langgraph

Conversation

@DarkDreizer
Copy link
Contributor

Description

Updates version of langgraph while comparing the security issues found in assistant.

Type of change

  • Bugfix
  • New feature
  • Documentation update
  • Refactor
  • Chore

Checklist

Please run through the checklist and mark the items off before requesting review.

  • Tests added/updated for changes in behavior
  • Linter/formatter run (make format / make lint)
  • Documentation updated (if applicable)
  • CHANGELOG.md updated with a short entry describing the change (Required)

How to test

You should be able to install poetry without errors.

Additional context

Make sure the python version of the env matches the 3.12 version as described in pyproject.toml, if a newer version is used instead pydantic-core will fail.

Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates dependency version constraints for langgraph and langchain to address security concerns, while also modifying the .gitignore file to exclude poetry.lock and clean up trailing whitespace.

Key Changes

  • Broadens version constraints for langchain (from ^0.3.17 to >=0.3,<2.0) and langgraph (from ^0.2.68 to >=0.3,<2.0)
  • Adds poetry.lock to .gitignore to exclude the lockfile from version control
  • Updates CHANGELOG.md with an entry describing the security-focused version update

Reviewed changes

Copilot reviewed 2 out of 4 changed files in this pull request and generated 2 comments.

File Description
pyproject.toml Relaxes version constraints for langchain and langgraph dependencies to allow broader version ranges
CHANGELOG.md Adds entry documenting the langgraph version update for security improvements
.gitignore Uncomments poetry.lock to exclude it from version control and removes trailing whitespace from comments

Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 2 out of 4 changed files in this pull request and generated 2 comments.

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
@andres-javier-lopez andres-javier-lopez merged commit 9be5c7d into main Dec 19, 2025
1 check passed
@andres-javier-lopez andres-javier-lopez deleted the chore/security-bump-langgraph branch December 19, 2025 21:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants