github-actions[bot]
commented
3 weeks ago Dependency Review
✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.
OpenSSF Scorecard
| Package | Version | Score | Details | ||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| npm/@langchain/community | 0.2.31 | Unknown | Unknown | ||||||||||||||||||||||||||||||||||||||||||||||||
| npm/@langchain/core | 0.2.30 | Unknown | Unknown | ||||||||||||||||||||||||||||||||||||||||||||||||
| npm/@langchain/google-genai | 0.0.26 | Unknown | Unknown | ||||||||||||||||||||||||||||||||||||||||||||||||
| npm/@langchain/openai | 0.2.8 | Unknown | Unknown | ||||||||||||||||||||||||||||||||||||||||||||||||
| npm/@types/uuid | 10.0.0 | :green_circle: 6.9 | Details
| ||||||||||||||||||||||||||||||||||||||||||||||||
| npm/langchain | 0.2.17 | Unknown | Unknown | ||||||||||||||||||||||||||||||||||||||||||||||||
| npm/langsmith | 0.1.47 | :green_circle: 6 | Details
| ||||||||||||||||||||||||||||||||||||||||||||||||
| npm/openai | 4.56.0 | Unknown | Unknown | ||||||||||||||||||||||||||||||||||||||||||||||||
| npm/@langchain/google-genai | ^0.0.26 | Unknown | Unknown |
Scanned Manifest Files
package-lock.json
- @langchain/community@0.2.31
- @langchain/core@0.2.30
- @langchain/google-genai@0.0.26
- @langchain/openai@0.2.8
- @types/uuid@10.0.0
- langchain@0.2.17
- langsmith@0.1.47
- openai@4.56.0
- @langchain/community@0.2.22
- @langchain/core@0.2.19
- @langchain/google-genai@0.0.23
- @langchain/openai@0.2.5
- @types/uuid@9.0.8
- binary-search@1.3.6
- is-any-array@2.0.1
- langchain@0.2.12
- langchainhub@0.0.11
- langsmith@0.1.40
- ml-array-mean@1.1.6
- ml-array-sum@1.1.6
- ml-distance@4.0.1
- ml-distance-euclidean@2.0.0
- ml-tree-similarity@1.0.0
- num-sort@2.1.0
- openai@4.53.2
package.json
- @langchain/google-genai@^0.0.26
- @langchain/google-genai@^0.0.23
dependabot[bot]
Bumps the langchain group with 4 updates in the / directory: @langchain/community, @langchain/google-genai, @langchain/openai and langchain.
Updates
@langchain/communityfrom 0.2.22 to 0.2.31Release notes
Sourced from
@langchain/community's releases.... (truncated)
Commits
Updates
@langchain/corefrom 0.2.19 to 0.2.30Release notes
Sourced from
@langchain/core's releases.... (truncated)
Commits
Updates
@langchain/google-genaifrom 0.0.23 to 0.0.26Release notes
Sourced from
@langchain/google-genai's releases.... (truncated)
Commits
Updates
@langchain/openaifrom 0.2.5 to 0.2.8Release notes
Sourced from
@langchain/openai's releases.... (truncated)
Commits
d37a6d2langchain[patch]: Release 0.2.8 (#5926)056b871langchain[minor],docs[minor]: openai formatted tools in create agent funcs (#...4f545f1aws[patch]: Release 0.0.1 (#5925)f8c69c3langchain-aws[major]: LangChain AWS package (#5907)9110192community[patch]: Release 0.2.15 (#5924)f2fe566community[minor],docs[minor]: Add ChromeAI chat model (#5903)f3585ebcommunity[patch]: cheerio loader fetch headers type error (#5905)ea1c763Update search term (#5923)58442e9ci[patch]: Run all integration tests daily (#5920)f8ae881Release 0.2.1 (#5921)Updates
langchainfrom 0.2.12 to 0.2.17Release notes
Sourced from langchain's releases.
... (truncated)
Commits
5975471Release 0.2.1775180d3community[patch]: Release 0.2.31 (#6610)6223e71scripts[patch]: Revert change to delete folder func (#6607)f4964c7google[patch]: Release 0.0.27 (#6609)f8cd559google-common[patch]: Release 0.0.27 (#6608)01375eflangchain[minor]: Support storing and retrieving Document id field in MemoryV...d71ce68docs[minor]: Add missing link to Runnables guide (#6566)9050b50google-common[minor]: export GoogleAISafetyError type (#6582)409b5b4all[patch]: Bump scripts version (#6606)7589891scripts[minor]: Release 0.1.0 (#6605)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it ... _Description has been truncated_