●Change8

langchain-classic==1.0.2

📦 langchainView on GitHub →
✨ 2 features🐛 7 fixes⚡ 2 deprecations🔧 9 symbols

Summary

This release bumps `langchain-classic` to 1.0.2, patching a ReDoS vulnerability and including various dependency updates. New features include support for automatic server-side compaction in OpenAI integrations.

Migration Steps

  1. If using MRKL or ReAct agents, ensure you are on the latest `langchain-classic` version to mitigate the ReDoS vulnerability.

✨ New Features

  • Support for automatic server-side compaction in OpenAI integrations.
  • Support state updates from `wrap_model_call` with command(s).

🐛 Bug Fixes

  • Patched ReDoS vulnerability in MRKL and ReAct action regex in `langchain-classic` (CVE-2024-58340).
  • Validated ensemble retriever weights in `langchain-classic`.
  • Made `yield_keys` prefix keyword-only in `core` to match `BaseStore`.
  • Provided more descriptive error messages when a dependency is not installed in `langchain` and `langchain-classic`.
  • Corrected typo 'langchain experiment' to 'langchain_experimental' in error messages in `langchain`.
  • Replaced print statements with logger.info in `llm_summarization_checker`.
  • Fixed typo 'safegaurd' -> 'safeguard' in `langchain`.

Affected Symbols

MRKLReActMultiVectorRetrieverwrap_model_callllm_summarization_checkerBaseStoreyield_keyscreate_react_agentinitialize_agent

⚡ Deprecations

  • Documentation warns about older usage of `create_react_agent` in `langchain-classic`.
  • Documentation adds a warning for the `initialize_agent` function in `langchain-classic`.