This release keeps dependencies and maintenance posture current for teams operating this tool.
✓ No known CVEs patched in this version
Topics
+11 more
Summary
AI summaryMinor fixes and improvements.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Dependency | Low |
bump urllib3 from 2.6.3 to 2.7.0 in /libs/partners/anthropic bump urllib3 from 2.6.3 to 2.7.0 in /libs/partners/anthropic Source: llm_adapter@2026-05-28 Confidence: high |
— |
| Dependency | Low |
bump requests from 2.33.0 to 2.33.1 in /libs/partners/anthropic bump requests from 2.33.0 to 2.33.1 in /libs/partners/anthropic Source: llm_adapter@2026-05-28 Confidence: high |
— |
| Dependency | Low |
bump langsmith from 0.7.31 to 0.8.3 in /libs/partners/anthropic bump langsmith from 0.7.31 to 0.8.3 in /libs/partners/anthropic Source: llm_adapter@2026-05-28 Confidence: high |
— |
| Dependency | Low |
bump langchain-core from 1.3.2 to 1.3.3 in /libs/partners/anthropic bump langchain-core from 1.3.2 to 1.3.3 in /libs/partners/anthropic Source: llm_adapter@2026-05-28 Confidence: high |
— |
| Dependency | Low |
bump idna from 3.11 to 3.15 in /libs/partners/anthropic bump idna from 3.11 to 3.15 in /libs/partners/anthropic Source: llm_adapter@2026-05-28 Confidence: high |
— |
| Dependency | Low |
bump `langchain-tests` floor to 1.1.9 in infra bump `langchain-tests` floor to 1.1.9 in infra Source: llm_adapter@2026-05-28 Confidence: high |
— |
| Bugfix | Medium |
normalize cross-provider tool-call IDs normalize cross-provider tool-call IDs Source: llm_adapter@2026-05-28 Confidence: high |
— |
| Refactor | Low |
retry integration tests on transient failures retry integration tests on transient failures Source: llm_adapter@2026-05-28 Confidence: high |
— |
| Refactor | Low |
harden Dependabot version-bound preservation in CI harden Dependabot version-bound preservation in CI Source: llm_adapter@2026-05-28 Confidence: high |
— |
Full changelog
Changes since langchain-anthropic==1.4.3
release(anthropic): 1.4.4 (#37757)
fix(anthropic): normalize cross-provider tool-call IDs (#37756)
test(anthropic): retry integration tests on transient failures (#37697)
chore(infra): bump langchain-tests floor to 1.1.9 (#37610)
chore: bump langsmith from 0.8.3 to 0.8.5 in /libs/partners/anthropic (#37564)
chore: bump idna from 3.11 to 3.15 in /libs/partners/anthropic (#37565)
ci(infra): harden Dependabot version-bound preservation (#37510)
chore(infra): merge v1.4 into master (#37350)
chore: bump urllib3 from 2.6.3 to 2.7.0 in /libs/partners/anthropic (#37343)
chore: bump requests from 2.33.0 to 2.33.1 in /libs/partners/anthropic (#37286)
chore: bump langsmith from 0.7.31 to 0.8.3 in /libs/partners/anthropic (#37287)
chore: bump langchain-core from 1.3.2 to 1.3.3 in /libs/partners/anthropic (#37288)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Earlier breaking changes
- vlangchain-core==1.4.0 Deletes schema items marked for removal in schemas.py
- vlangchain-core==1.4.0 Deletes function_calling.py utils marked for removal
- vlangchain-core==1.4.0 Deletes get_relevant_documents function from API
- vlangchain-core==1.4.0 Deletes pydantic_v1 module entirely from codebase
- vlangchain-core==1.4.0 Deletes BaseMemory module, moved to langchain-classic
Beta — feedback welcome: [email protected]