-
Notifications
You must be signed in to change notification settings - Fork 15.4k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
core[patch]: Further restrict recursive URL loader (CVE-2024-0243) #15559
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
The latest updates on your projects. Learn more about Vercel for Git ↗︎ 1 Ignored Deployment
|
dosubot
bot
added
size:M
This PR changes 30-99 lines, ignoring generated files.
Ɑ: doc loader
Related to document loader module (not documentation)
🤖:bug
Related to a bug, vulnerability, unexpected error with an existing feature
labels
Jan 4, 2024
eyurtsev
changed the title
core(patch): Restrict recursive URL loader
core[patch]: Restrict recursive URL loader
Jan 4, 2024
eyurtsev
changed the title
core[patch]: Restrict recursive URL loader
core[patch]: Further restrict recursive URL loader
Jan 4, 2024
efriis
approved these changes
Jan 4, 2024
dosubot
bot
added
the
lgtm
PR looks good. Use to confirm that a PR is ready for merging.
label
Jan 4, 2024
nicolewhite
referenced
this pull request
in autoblocksai/autoblocks-examples
Jan 8, 2024
[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [@types/node](https://togithub.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node) ([source](https://togithub.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node)) | [`20.10.6` -> `20.10.7`](https://renovatebot.com/diffs/npm/@types%2fnode/20.10.6/20.10.7) | [![age](https://developer.mend.io/api/mc/badges/age/npm/@types%2fnode/20.10.7?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/@types%2fnode/20.10.7?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/@types%2fnode/20.10.6/20.10.7?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@types%2fnode/20.10.6/20.10.7?slim=true)](https://docs.renovatebot.com/merge-confidence/) | | [@types/react](https://togithub.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/react) ([source](https://togithub.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react)) | [`18.2.46` -> `18.2.47`](https://renovatebot.com/diffs/npm/@types%2freact/18.2.46/18.2.47) | [![age](https://developer.mend.io/api/mc/badges/age/npm/@types%2freact/18.2.47?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/@types%2freact/18.2.47?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/@types%2freact/18.2.46/18.2.47?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@types%2freact/18.2.46/18.2.47?slim=true)](https://docs.renovatebot.com/merge-confidence/) | | [ai](https://sdk.vercel.ai/docs) ([source](https://togithub.com/vercel/ai)) | [`2.2.30` -> `2.2.31`](https://renovatebot.com/diffs/npm/ai/2.2.30/2.2.31) | [![age](https://developer.mend.io/api/mc/badges/age/npm/ai/2.2.31?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/ai/2.2.31?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/ai/2.2.30/2.2.31?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/ai/2.2.30/2.2.31?slim=true)](https://docs.renovatebot.com/merge-confidence/) | | [langchain](https://togithub.com/langchain-ai/langchain) | `^0.0.353` -> `^0.1.0` | [![age](https://developer.mend.io/api/mc/badges/age/pypi/langchain/0.1.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/pypi/langchain/0.1.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/pypi/langchain/0.0.353/0.1.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/langchain/0.0.353/0.1.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | | [langchain](https://togithub.com/langchain-ai/langchainjs) | [`^0.0.213` -> `^0.1.0`](https://renovatebot.com/diffs/npm/langchain/0.0.213/0.1.1) | [![age](https://developer.mend.io/api/mc/badges/age/npm/langchain/0.1.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/langchain/0.1.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/langchain/0.0.213/0.1.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/langchain/0.0.213/0.1.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | | [postcss](https://postcss.org/) ([source](https://togithub.com/postcss/postcss)) | [`8.4.32` -> `8.4.33`](https://renovatebot.com/diffs/npm/postcss/8.4.32/8.4.33) | [![age](https://developer.mend.io/api/mc/badges/age/npm/postcss/8.4.33?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/postcss/8.4.33?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/postcss/8.4.32/8.4.33?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/postcss/8.4.32/8.4.33?slim=true)](https://docs.renovatebot.com/merge-confidence/) | | [tailwindcss](https://tailwindcss.com) ([source](https://togithub.com/tailwindlabs/tailwindcss)) | [`3.4.0` -> `3.4.1`](https://renovatebot.com/diffs/npm/tailwindcss/3.4.0/3.4.1) | [![age](https://developer.mend.io/api/mc/badges/age/npm/tailwindcss/3.4.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/tailwindcss/3.4.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/tailwindcss/3.4.0/3.4.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/tailwindcss/3.4.0/3.4.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>vercel/ai (ai)</summary> ### [`v2.2.31`](https://togithub.com/vercel/ai/releases/tag/ai%402.2.31) [Compare Source](https://togithub.com/vercel/ai/compare/ai@2.2.30...ai@2.2.31) ##### Patch Changes - [`9b89c4d`](https://togithub.com/vercel/ai/commit/9b89c4d): react/use-assistant: Expose setInput - [`75751c9`](https://togithub.com/vercel/ai/commit/75751c9): ai/react: Add experimental_onToolCall to useChat. </details> <details> <summary>langchain-ai/langchain (langchain)</summary> ### [`v0.1.0`](https://togithub.com/langchain-ai/langchain/releases/tag/v0.1.0) [Compare Source](https://togithub.com/langchain-ai/langchain/compare/v0.0.354...v0.1.0) #### What's Changed - docs: contributor faq by [@​efriis](https://togithub.com/efriis) in [https://github.com/langchain-ai/langchain/pull/15502](https://togithub.com/langchain-ai/langchain/pull/15502) - templates: fix deps by [@​efriis](https://togithub.com/efriis) in [https://github.com/langchain-ai/langchain/pull/15439](https://togithub.com/langchain-ai/langchain/pull/15439) - infra: fail check_diffs if too many files changed by [@​efriis](https://togithub.com/efriis) in [https://github.com/langchain-ai/langchain/pull/15423](https://togithub.com/langchain-ai/langchain/pull/15423) - docs: broken link in contributor docs by [@​efriis](https://togithub.com/efriis) in [https://github.com/langchain-ai/langchain/pull/15436](https://togithub.com/langchain-ai/langchain/pull/15436) - docs: fix broken link by [@​efriis](https://togithub.com/efriis) in [https://github.com/langchain-ai/langchain/pull/15509](https://togithub.com/langchain-ai/langchain/pull/15509) - add new chain howtos by [@​hwchase17](https://togithub.com/hwchase17) in [https://github.com/langchain-ai/langchain/pull/15430](https://togithub.com/langchain-ai/langchain/pull/15430) - Revert [#​15326](https://togithub.com/langchain-ai/langchain/issues/15326) by [@​baskaryan](https://togithub.com/baskaryan) in [https://github.com/langchain-ai/langchain/pull/15546](https://togithub.com/langchain-ai/langchain/pull/15546) - core\[patch]: Release 0.1.6 by [@​baskaryan](https://togithub.com/baskaryan) in [https://github.com/langchain-ai/langchain/pull/15547](https://togithub.com/langchain-ai/langchain/pull/15547) - core\[patch]: Further restrict recursive URL loader by [@​eyurtsev](https://togithub.com/eyurtsev) in [https://github.com/langchain-ai/langchain/pull/15559](https://togithub.com/langchain-ai/langchain/pull/15559) - add ragatouille by [@​hwchase17](https://togithub.com/hwchase17) in [https://github.com/langchain-ai/langchain/pull/15561](https://togithub.com/langchain-ai/langchain/pull/15561) - langchain\[minor]: add warnings when importing integrations from langchain by [@​baskaryan](https://togithub.com/baskaryan) in [https://github.com/langchain-ai/langchain/pull/15505](https://togithub.com/langchain-ai/langchain/pull/15505) - removed deprecated openai model by [@​VpkPrasanna](https://togithub.com/VpkPrasanna) in [https://github.com/langchain-ai/langchain/pull/15533](https://togithub.com/langchain-ai/langchain/pull/15533) - Feat: support Milvus more params by [@​chyroc](https://togithub.com/chyroc) in [https://github.com/langchain-ai/langchain/pull/15447](https://togithub.com/langchain-ai/langchain/pull/15447) - Docs: Fix typos in question_answering by [@​Speuce](https://togithub.com/Speuce) in [https://github.com/langchain-ai/langchain/pull/15565](https://togithub.com/langchain-ai/langchain/pull/15565) - fix links by [@​hwchase17](https://togithub.com/hwchase17) in [https://github.com/langchain-ai/langchain/pull/15566](https://togithub.com/langchain-ai/langchain/pull/15566) - core\[minor], langchain\[minor]: deprecate Chain and BaseLanguageModel … by [@​baskaryan](https://togithub.com/baskaryan) in [https://github.com/langchain-ai/langchain/pull/15499](https://togithub.com/langchain-ai/langchain/pull/15499) - update chain docs by [@​hwchase17](https://togithub.com/hwchase17) in [https://github.com/langchain-ai/langchain/pull/15495](https://togithub.com/langchain-ai/langchain/pull/15495) - langchain\[patch]: deprecate old agent classes and methods by [@​baskaryan](https://togithub.com/baskaryan) in [https://github.com/langchain-ai/langchain/pull/15558](https://togithub.com/langchain-ai/langchain/pull/15558) - update memory by [@​hwchase17](https://togithub.com/hwchase17) in [https://github.com/langchain-ai/langchain/pull/15507](https://togithub.com/langchain-ai/langchain/pull/15507) - core\[patch]: add beta decorator by [@​baskaryan](https://togithub.com/baskaryan) in [https://github.com/langchain-ai/langchain/pull/15589](https://togithub.com/langchain-ai/langchain/pull/15589) - google-vertexai: added langchain_google_vertexai package by [@​lkuligin](https://togithub.com/lkuligin) in [https://github.com/langchain-ai/langchain/pull/15218](https://togithub.com/langchain-ai/langchain/pull/15218) - Fix chain docs redirects by [@​baskaryan](https://togithub.com/baskaryan) in [https://github.com/langchain-ai/langchain/pull/15600](https://togithub.com/langchain-ai/langchain/pull/15600) - core\[patch], community\[patch]: mark context, load as beta by [@​baskaryan](https://togithub.com/baskaryan) in [https://github.com/langchain-ai/langchain/pull/15603](https://togithub.com/langchain-ai/langchain/pull/15603) - openai\[minor]: implement langchain-openai package by [@​efriis](https://togithub.com/efriis) in [https://github.com/langchain-ai/langchain/pull/15503](https://togithub.com/langchain-ai/langchain/pull/15503) - infra: vertex integration test creds by [@​efriis](https://togithub.com/efriis) in [https://github.com/langchain-ai/langchain/pull/15609](https://togithub.com/langchain-ai/langchain/pull/15609) - google-vertexai, openai: release candidate version by [@​efriis](https://togithub.com/efriis) in [https://github.com/langchain-ai/langchain/pull/15611](https://togithub.com/langchain-ai/langchain/pull/15611) - core\[patch]: Release 0.1.7 by [@​baskaryan](https://togithub.com/baskaryan) in [https://github.com/langchain-ai/langchain/pull/15610](https://togithub.com/langchain-ai/langchain/pull/15610) - google-vertexai: release 0.0.1 by [@​efriis](https://togithub.com/efriis) in [https://github.com/langchain-ai/langchain/pull/15613](https://togithub.com/langchain-ai/langchain/pull/15613) - infra: title release action runs by [@​efriis](https://togithub.com/efriis) in [https://github.com/langchain-ai/langchain/pull/15612](https://togithub.com/langchain-ai/langchain/pull/15612) - openai: core version, rc1 by [@​efriis](https://togithub.com/efriis) in [https://github.com/langchain-ai/langchain/pull/15614](https://togithub.com/langchain-ai/langchain/pull/15614) - community\[patch]: Release 0.0.9 by [@​baskaryan](https://togithub.com/baskaryan) in [https://github.com/langchain-ai/langchain/pull/15615](https://togithub.com/langchain-ai/langchain/pull/15615) - infra: community bump min core version by [@​baskaryan](https://togithub.com/baskaryan) in [https://github.com/langchain-ai/langchain/pull/15617](https://togithub.com/langchain-ai/langchain/pull/15617) - core\[patch]: deprecate v1 tracer by [@​baskaryan](https://togithub.com/baskaryan) in [https://github.com/langchain-ai/langchain/pull/15608](https://togithub.com/langchain-ai/langchain/pull/15608) - openai\[patch]: v0.0.2 by [@​efriis](https://togithub.com/efriis) in [https://github.com/langchain-ai/langchain/pull/15618](https://togithub.com/langchain-ai/langchain/pull/15618) - docs: update cohere chat integration by [@​baskaryan](https://togithub.com/baskaryan) in [https://github.com/langchain-ai/langchain/pull/15562](https://togithub.com/langchain-ai/langchain/pull/15562) - langchain\[minor]: Release 0.1.0 by [@​baskaryan](https://togithub.com/baskaryan) in [https://github.com/langchain-ai/langchain/pull/15619](https://togithub.com/langchain-ai/langchain/pull/15619) - infra: fix langchain openai test dep by [@​baskaryan](https://togithub.com/baskaryan) in [https://github.com/langchain-ai/langchain/pull/15620](https://togithub.com/langchain-ai/langchain/pull/15620) #### New Contributors - [@​VpkPrasanna](https://togithub.com/VpkPrasanna) made their first contribution in [https://github.com/langchain-ai/langchain/pull/15533](https://togithub.com/langchain-ai/langchain/pull/15533) - [@​Speuce](https://togithub.com/Speuce) made their first contribution in [https://github.com/langchain-ai/langchain/pull/15565](https://togithub.com/langchain-ai/langchain/pull/15565) **Full Changelog**: https://github.com/langchain-ai/langchain/compare/v0.0.354...v0.1.0 ### [`v0.0.354`](https://togithub.com/langchain-ai/langchain/releases/tag/v0.0.354) [Compare Source](https://togithub.com/langchain-ai/langchain/compare/v0.0.353...v0.0.354) #### What's Changed - Improve markdown list parser by [@​nfcampos](https://togithub.com/nfcampos) in [https://github.com/langchain-ai/langchain/pull/15295](https://togithub.com/langchain-ai/langchain/pull/15295) - \[core] add test for json parser by [@​hwchase17](https://togithub.com/hwchase17) in [https://github.com/langchain-ai/langchain/pull/15297](https://togithub.com/langchain-ai/langchain/pull/15297) - community\[patch]: Release 0.0.7 by [@​baskaryan](https://togithub.com/baskaryan) in [https://github.com/langchain-ai/langchain/pull/15320](https://togithub.com/langchain-ai/langchain/pull/15320) - langchain: Exclude non-utf8 file from loader since it causes an error in the code_understanding example by [@​Tchotchke](https://togithub.com/Tchotchke) in [https://github.com/langchain-ai/langchain/pull/15324](https://togithub.com/langchain-ai/langchain/pull/15324) - langchain: minor changes to StuffDocumentsChain.\_get_inputs by [@​romainfd](https://togithub.com/romainfd) in [https://github.com/langchain-ai/langchain/pull/15321](https://togithub.com/langchain-ai/langchain/pull/15321) - Upgrades the Tongyi LLM and ChatTongyi Model by [@​liushuaikobe](https://togithub.com/liushuaikobe) in [https://github.com/langchain-ai/langchain/pull/14793](https://togithub.com/langchain-ai/langchain/pull/14793) - Update vectorstore_retriever_memory.mdx by [@​kellyelton](https://togithub.com/kellyelton) in [https://github.com/langchain-ai/langchain/pull/15275](https://togithub.com/langchain-ai/langchain/pull/15275) - community: corrected typo in .readthedocs.yaml by [@​piyuple](https://togithub.com/piyuple) in [https://github.com/langchain-ai/langchain/pull/15309](https://togithub.com/langchain-ai/langchain/pull/15309) - core: Update messages/**init**.py to account for AIMessageChunk which breaks message history runnable. by [@​jonnolen](https://togithub.com/jonnolen) in [https://github.com/langchain-ai/langchain/pull/15327](https://togithub.com/langchain-ai/langchain/pull/15327) - Patch: improve check openai version by [@​chyroc](https://togithub.com/chyroc) in [https://github.com/langchain-ai/langchain/pull/15301](https://togithub.com/langchain-ai/langchain/pull/15301) - \[documentation] documentation revamp by [@​hwchase17](https://togithub.com/hwchase17) in [https://github.com/langchain-ai/langchain/pull/15281](https://togithub.com/langchain-ai/langchain/pull/15281) - Delete V1 tracer and refactor tracer tests to core by [@​agola11](https://togithub.com/agola11) in [https://github.com/langchain-ai/langchain/pull/15326](https://togithub.com/langchain-ai/langchain/pull/15326) - Propagate context vars in all classes/methods by [@​nfcampos](https://togithub.com/nfcampos) in [https://github.com/langchain-ai/langchain/pull/15329](https://togithub.com/langchain-ai/langchain/pull/15329) - Catch type errors in dumps/dumpd by [@​nfcampos](https://togithub.com/nfcampos) in [https://github.com/langchain-ai/langchain/pull/15336](https://togithub.com/langchain-ai/langchain/pull/15336) - Community: Newlines before bullets in IPYNB files (Vectara) by [@​ofermend](https://togithub.com/ofermend) in [https://github.com/langchain-ai/langchain/pull/15330](https://togithub.com/langchain-ai/langchain/pull/15330) - docs: cleanup rag use case by [@​baskaryan](https://togithub.com/baskaryan) in [https://github.com/langchain-ai/langchain/pull/15284](https://togithub.com/langchain-ai/langchain/pull/15284) - docs: revamp redirects by [@​baskaryan](https://togithub.com/baskaryan) in [https://github.com/langchain-ai/langchain/pull/15366](https://togithub.com/langchain-ai/langchain/pull/15366) - community:qianfan endpoint support init params & remove useless params definition by [@​danielhjz](https://togithub.com/danielhjz) in [https://github.com/langchain-ai/langchain/pull/15381](https://togithub.com/langchain-ai/langchain/pull/15381) - Update Multi_modal_RAG.ipynb by [@​naveentnj](https://togithub.com/naveentnj) in [https://github.com/langchain-ai/langchain/pull/15378](https://togithub.com/langchain-ai/langchain/pull/15378) - docs(ollama): Fix Documentation in `CallbackManager`, missing `])` by [@​yhzhu99](https://togithub.com/yhzhu99) in [https://github.com/langchain-ai/langchain/pull/15380](https://togithub.com/langchain-ai/langchain/pull/15380) - \[docs] update agent cookbook lcel by [@​hwchase17](https://togithub.com/hwchase17) in [https://github.com/langchain-ai/langchain/pull/15349](https://togithub.com/langchain-ai/langchain/pull/15349) - Docs: Fix spelling and grammar on Concepts page by [@​donovanmuller](https://togithub.com/donovanmuller) in [https://github.com/langchain-ai/langchain/pull/15364](https://togithub.com/langchain-ai/langchain/pull/15364) - Langchain: Fix quickstart doc code not working by [@​AhmedHathout](https://togithub.com/AhmedHathout) in [https://github.com/langchain-ai/langchain/pull/15352](https://togithub.com/langchain-ai/langchain/pull/15352) - Docs: add param comment for `tracing_v2_enabled` by [@​chyroc](https://togithub.com/chyroc) in [https://github.com/langchain-ai/langchain/pull/15308](https://togithub.com/langchain-ai/langchain/pull/15308) - Documentation: Update playwright documentation for langchain version >= 0.0.351 by [@​abhishek9909](https://togithub.com/abhishek9909) in [https://github.com/langchain-ai/langchain/pull/15260](https://togithub.com/langchain-ai/langchain/pull/15260) - fix(minor): added missing \*\*kwargs parameter to chroma query function by [@​joel-teratis](https://togithub.com/joel-teratis) in [https://github.com/langchain-ai/langchain/pull/14919](https://togithub.com/langchain-ai/langchain/pull/14919) - feat: mask api_key for konko by [@​chyroc](https://togithub.com/chyroc) in [https://github.com/langchain-ai/langchain/pull/14010](https://togithub.com/langchain-ai/langchain/pull/14010) - Add missing comment char "#" before Load in chain.py for the rag-pinecone-rerank template by [@​samuelpath](https://togithub.com/samuelpath) in [https://github.com/langchain-ai/langchain/pull/15209](https://togithub.com/langchain-ai/langchain/pull/15209) - ci: upgrade actions by [@​purificant](https://togithub.com/purificant) in [https://github.com/langchain-ai/langchain/pull/15114](https://togithub.com/langchain-ai/langchain/pull/15114) - community:Lazy load wikipedia dump file by [@​cjaniake](https://togithub.com/cjaniake) in [https://github.com/langchain-ai/langchain/pull/15111](https://togithub.com/langchain-ai/langchain/pull/15111) - docs: updated document for 'Return Source Documents' Functionality by [@​cyai](https://togithub.com/cyai) in [https://github.com/langchain-ai/langchain/pull/15106](https://togithub.com/langchain-ai/langchain/pull/15106) - fix: call correct stream method in ollama by [@​David-Kristek](https://togithub.com/David-Kristek) in [https://github.com/langchain-ai/langchain/pull/15104](https://togithub.com/langchain-ai/langchain/pull/15104) - Langchain: Fix typo in documentation by [@​GauravWaghmare](https://togithub.com/GauravWaghmare) in [https://github.com/langchain-ai/langchain/pull/15124](https://togithub.com/langchain-ai/langchain/pull/15124) - Update LLaMA2\_sql_chat.ipynb by [@​naveentnj](https://togithub.com/naveentnj) in [https://github.com/langchain-ai/langchain/pull/15379](https://togithub.com/langchain-ai/langchain/pull/15379) - \[docs] update toolkit docs by [@​hwchase17](https://togithub.com/hwchase17) in [https://github.com/langchain-ai/langchain/pull/15294](https://togithub.com/langchain-ai/langchain/pull/15294) - Feat add volcano embedding by [@​lujingxuansc](https://togithub.com/lujingxuansc) in [https://github.com/langchain-ai/langchain/pull/14693](https://togithub.com/langchain-ai/langchain/pull/14693) - community: Integration of New Chat Model Based on ChatGLM3 via ZhipuAI API by [@​linancn](https://togithub.com/linancn) in [https://github.com/langchain-ai/langchain/pull/15105](https://togithub.com/langchain-ai/langchain/pull/15105) - Refactor: use SecretStr for GPTRouter chat-model by [@​chyroc](https://togithub.com/chyroc) in [https://github.com/langchain-ai/langchain/pull/15101](https://togithub.com/langchain-ai/langchain/pull/15101) - Refactor: use SecretStr for palm chat-model by [@​chyroc](https://togithub.com/chyroc) in [https://github.com/langchain-ai/langchain/pull/15100](https://togithub.com/langchain-ai/langchain/pull/15100) - Refactor: use SecretStr for edenai embeddings by [@​chyroc](https://togithub.com/chyroc) in [https://github.com/langchain-ai/langchain/pull/15092](https://togithub.com/langchain-ai/langchain/pull/15092) - Refactor: use SecretStr for embaas embeddings by [@​chyroc](https://togithub.com/chyroc) in [https://github.com/langchain-ai/langchain/pull/15091](https://togithub.com/langchain-ai/langchain/pull/15091) - Refactor: use SecretStr for llm_rails embeddings by [@​chyroc](https://togithub.com/chyroc) in [https://github.com/langchain-ai/langchain/pull/15090](https://togithub.com/langchain-ai/langchain/pull/15090) - Update regex in output parser by [@​sharrajesh](https://togithub.com/sharrajesh) in [https://github.com/langchain-ai/langchain/pull/15082](https://togithub.com/langchain-ai/langchain/pull/15082) - Added more filtering options to pgvector vectorstore by [@​savoiepe](https://togithub.com/savoiepe) in [https://github.com/langchain-ai/langchain/pull/14852](https://togithub.com/langchain-ai/langchain/pull/14852) - Restore self message sent before OSX 12 Monterey by [@​idvorkin](https://togithub.com/idvorkin) in [https://github.com/langchain-ai/langchain/pull/14818](https://togithub.com/langchain-ai/langchain/pull/14818) - docs `microsoft` pages sort order fix by [@​leo-gan](https://togithub.com/leo-gan) in [https://github.com/langchain-ai/langchain/pull/14771](https://togithub.com/langchain-ai/langchain/pull/14771) - Add AstraDB document loader by [@​cbornet](https://togithub.com/cbornet) in [https://github.com/langchain-ai/langchain/pull/14747](https://togithub.com/langchain-ai/langchain/pull/14747) - Added: docs Headers to Steam Tool notebook steps by [@​muntaqamahmood](https://togithub.com/muntaqamahmood) in [https://github.com/langchain-ai/langchain/pull/14749](https://togithub.com/langchain-ai/langchain/pull/14749) - python-lint by [@​joshuasundance-swca](https://togithub.com/joshuasundance-swca) in [https://github.com/langchain-ai/langchain/pull/14689](https://togithub.com/langchain-ai/langchain/pull/14689) - Update \_retrieve_ref inside json_schema.py to include an isdigit() check by [@​pareshchiramel](https://togithub.com/pareshchiramel) in [https://github.com/langchain-ai/langchain/pull/14745](https://togithub.com/langchain-ai/langchain/pull/14745) - fix: syntax error in function docs by [@​Undertone0809](https://togithub.com/Undertone0809) in [https://github.com/langchain-ai/langchain/pull/14641](https://togithub.com/langchain-ai/langchain/pull/14641) - Enhancement on feature/yaml output parser by [@​TomTom101](https://togithub.com/TomTom101) in [https://github.com/langchain-ai/langchain/pull/14674](https://togithub.com/langchain-ai/langchain/pull/14674) - Fixing the Issue with DashScopeEmbeddings Handling More than 25 Rows of Data by [@​xu-xiang](https://togithub.com/xu-xiang) in [https://github.com/langchain-ai/langchain/pull/14662](https://togithub.com/langchain-ai/langchain/pull/14662) - Fix for openai multi tools input format. by [@​themrzmaster](https://togithub.com/themrzmaster) in [https://github.com/langchain-ai/langchain/pull/14653](https://togithub.com/langchain-ai/langchain/pull/14653) - add api_base to \_client_params (community version of [#​14393](https://togithub.com/langchain-ai/langchain/issues/14393)) by [@​DavidLMS](https://togithub.com/DavidLMS) in [https://github.com/langchain-ai/langchain/pull/14644](https://togithub.com/langchain-ai/langchain/pull/14644) - GITLAB_URL should take default https://gitlab.com instead of error by [@​manjunathshiva](https://togithub.com/manjunathshiva) in [https://github.com/langchain-ai/langchain/pull/14638](https://togithub.com/langchain-ai/langchain/pull/14638) - WatsonxLLM updates/enhancements by [@​MateuszOssGit](https://togithub.com/MateuszOssGit) in [https://github.com/langchain-ai/langchain/pull/14598](https://togithub.com/langchain-ai/langchain/pull/14598) - Langchain_community: Small Fix when loading facebook messages by [@​keenborder786](https://togithub.com/keenborder786) in [https://github.com/langchain-ai/langchain/pull/15358](https://togithub.com/langchain-ai/langchain/pull/15358) - Update `gpt4all.mdx` doc by [@​169](https://togithub.com/169) in [https://github.com/langchain-ai/langchain/pull/15392](https://togithub.com/langchain-ai/langchain/pull/15392) - infra: remove path filter on check_diffs by [@​efriis](https://togithub.com/efriis) in [https://github.com/langchain-ai/langchain/pull/15418](https://togithub.com/langchain-ai/langchain/pull/15418) - Calculate trace_id and dotted_order client side by [@​agola11](https://togithub.com/agola11) in [https://github.com/langchain-ai/langchain/pull/15351](https://togithub.com/langchain-ai/langchain/pull/15351) - docs: fix agents index links by [@​baskaryan](https://togithub.com/baskaryan) in [https://github.com/langchain-ai/langchain/pull/15419](https://togithub.com/langchain-ai/langchain/pull/15419) - docs: fix modelio index links by [@​baskaryan](https://togithub.com/baskaryan) in [https://github.com/langchain-ai/langchain/pull/15421](https://togithub.com/langchain-ai/langchain/pull/15421) - langchain\[patch], experimental\[patch]: replace langchain.schema imports by [@​baskaryan](https://togithub.com/baskaryan) in [https://github.com/langchain-ai/langchain/pull/15410](https://togithub.com/langchain-ai/langchain/pull/15410) - Fetch runnable config from context var inside runnable lambda and runnable generator by [@​nfcampos](https://togithub.com/nfcampos) in [https://github.com/langchain-ai/langchain/pull/15334](https://togithub.com/langchain-ai/langchain/pull/15334) - docs, community\[patch], experimental\[patch], langchain\[patch], cli\[pa… by [@​baskaryan](https://togithub.com/baskaryan) in [https://github.com/langchain-ai/langchain/pull/15412](https://togithub.com/langchain-ai/langchain/pull/15412) - Use tz-aware utc datetimes in tracer by [@​nfcampos](https://togithub.com/nfcampos) in [https://github.com/langchain-ai/langchain/pull/15187](https://togithub.com/langchain-ai/langchain/pull/15187) - add get prompts method by [@​hwchase17](https://togithub.com/hwchase17) in [https://github.com/langchain-ai/langchain/pull/15425](https://togithub.com/langchain-ai/langchain/pull/15425) - docs, experimenta\[patch], langchain\[patch], community\[patch]: update storage imports by [@​baskaryan](https://togithub.com/baskaryan) in [https://github.com/langchain-ai/langchain/pull/15429](https://togithub.com/langchain-ai/langchain/pull/15429) - refactor `utils` by [@​leo-gan](https://togithub.com/leo-gan) in [https://github.com/langchain-ai/langchain/pull/15432](https://togithub.com/langchain-ai/langchain/pull/15432) - docs `Microsoft` platform page update by [@​leo-gan](https://togithub.com/leo-gan) in [https://github.com/langchain-ai/langchain/pull/15420](https://togithub.com/langchain-ai/langchain/pull/15420) - added fix for key error: doc_id by [@​suhas-kotaki](https://togithub.com/suhas-kotaki) in [https://github.com/langchain-ai/langchain/pull/15428](https://togithub.com/langchain-ai/langchain/pull/15428) - core:adds tests for partial_variables by [@​dkajtoch](https://togithub.com/dkajtoch) in [https://github.com/langchain-ai/langchain/pull/15427](https://togithub.com/langchain-ai/langchain/pull/15427) - Remove unused `_get_python_repl` by [@​169](https://togithub.com/169) in [https://github.com/langchain-ai/langchain/pull/15389](https://togithub.com/langchain-ai/langchain/pull/15389) - langchain\[patch], experimental\[patch], docs: update tools imports by [@​baskaryan](https://togithub.com/baskaryan) in [https://github.com/langchain-ai/langchain/pull/15433](https://togithub.com/langchain-ai/langchain/pull/15433) - Fix: fix Bing Search empty result exception, fix [#​15384](https://togithub.com/langchain-ai/langchain/issues/15384) by [@​chyroc](https://togithub.com/chyroc) in [https://github.com/langchain-ai/langchain/pull/15387](https://togithub.com/langchain-ai/langchain/pull/15387) - SQLDatabase drop the column names in the result. by [@​dudub12](https://togithub.com/dudub12) in [https://github.com/langchain-ai/langchain/pull/15361](https://togithub.com/langchain-ai/langchain/pull/15361) - Fixed minor type in self_query.ipynb by [@​aqibamir](https://togithub.com/aqibamir) in [https://github.com/langchain-ai/langchain/pull/15196](https://togithub.com/langchain-ai/langchain/pull/15196) - community: Semanticscholar tool to search 200M+ scientific articles by [@​shauryr](https://togithub.com/shauryr) in [https://github.com/langchain-ai/langchain/pull/15151](https://togithub.com/langchain-ai/langchain/pull/15151) - Refactor: use SecretStr for tongyi chat-model by [@​chyroc](https://togithub.com/chyroc) in [https://github.com/langchain-ai/langchain/pull/15102](https://togithub.com/langchain-ai/langchain/pull/15102) - Use args option in jaguar so it takes more options in similarity search by [@​fserv](https://togithub.com/fserv) in [https://github.com/langchain-ai/langchain/pull/15080](https://togithub.com/langchain-ai/langchain/pull/15080) - feat: add Google BigQueryVectorSearch in vectorstore by [@​ashleyxuu](https://togithub.com/ashleyxuu) in [https://github.com/langchain-ai/langchain/pull/14829](https://togithub.com/langchain-ai/langchain/pull/14829) - langchain\[patch], docs: update agent toolkit imports by [@​baskaryan](https://togithub.com/baskaryan) in [https://github.com/langchain-ai/langchain/pull/15434](https://togithub.com/langchain-ai/langchain/pull/15434) - docs: together ai updates by [@​efriis](https://togithub.com/efriis) in [https://github.com/langchain-ai/langchain/pull/15435](https://togithub.com/langchain-ai/langchain/pull/15435) - Milvus allows to store metadata as json field by [@​mokeyish](https://togithub.com/mokeyish) in [https://github.com/langchain-ai/langchain/pull/14636](https://togithub.com/langchain-ai/langchain/pull/14636) - Fix failing serpapi response processing for Google Maps API by [@​LoopKarma](https://togithub.com/LoopKarma) in [https://github.com/langchain-ai/langchain/pull/14817](https://togithub.com/langchain-ai/langchain/pull/14817) - Add the collection_description parameter to Milvus by [@​mokeyish](https://togithub.com/mokeyish) in [https://github.com/langchain-ai/langchain/pull/14524](https://togithub.com/langchain-ai/langchain/pull/14524) - core: update json output parser by [@​apisani1](https://togithub.com/apisani1) in [https://github.com/langchain-ai/langchain/pull/15079](https://togithub.com/langchain-ai/langchain/pull/15079) - Support `score_threshold` in SupabaseVectorStore similarity search by [@​codehound42](https://togithub.com/codehound42) in [https://github.com/langchain-ai/langchain/pull/14439](https://togithub.com/langchain-ai/langchain/pull/14439) - Improvement: Allow passing parameters to the underlying es_client. Closes: [#​14403](https://togithub.com/langchain-ai/langchain/issues/14403) by [@​169](https://togithub.com/169) in [https://github.com/langchain-ai/langchain/pull/14435](https://togithub.com/langchain-ai/langchain/pull/14435) - adding vectorstore_kwarg attribute to search_similarity function by [@​amaleki2](https://togithub.com/amaleki2) in [https://github.com/langchain-ai/langchain/pull/14604](https://togithub.com/langchain-ai/langchain/pull/14604) - Fix Bedrock broad error catching by [@​JuR-0](https://togithub.com/JuR-0) in [https://github.com/langchain-ai/langchain/pull/14398](https://togithub.com/langchain-ai/langchain/pull/14398) - update LanguageModelInput from List to Sequence by [@​alan910127](https://togithub.com/alan910127) in [https://github.com/langchain-ai/langchain/pull/14405](https://togithub.com/langchain-ai/langchain/pull/14405) - refactor: Qdrant async improvements by [@​Anush008](https://togithub.com/Anush008) in [https://github.com/langchain-ai/langchain/pull/14492](https://togithub.com/langchain-ai/langchain/pull/14492) - \[Improvement] Evals: Add git info by [@​hinthornw](https://togithub.com/hinthornw) in [https://github.com/langchain-ai/langchain/pull/15446](https://togithub.com/langchain-ai/langchain/pull/15446) - fixed a dependency duplicate by [@​leo-gan](https://togithub.com/leo-gan) in [https://github.com/langchain-ai/langchain/pull/15444](https://togithub.com/langchain-ai/langchain/pull/15444) - cleanup getting started by [@​hwchase17](https://togithub.com/hwchase17) in [https://github.com/langchain-ai/langchain/pull/15450](https://togithub.com/langchain-ai/langchain/pull/15450) - feat: new integration `wasm_chat` by [@​apepkuss](https://togithub.com/apepkuss) in [https://github.com/langchain-ai/langchain/pull/14787](https://togithub.com/langchain-ai/langchain/pull/14787) - Add option to preserve headers in MarkdownHeaderTextSplitter by [@​finnless](https://togithub.com/finnless) in [https://github.com/langchain-ai/langchain/pull/14433](https://togithub.com/langchain-ai/langchain/pull/14433) - Fix `llms.Mlflow` example by [@​harupy](https://togithub.com/harupy) in [https://github.com/langchain-ai/langchain/pull/14386](https://togithub.com/langchain-ai/langchain/pull/14386) - Patch: improve type hint by [@​chyroc](https://togithub.com/chyroc) in [https://github.com/langchain-ai/langchain/pull/15451](https://togithub.com/langchain-ai/langchain/pull/15451) - Remove unused `Params` by [@​harupy](https://togithub.com/harupy) in [https://github.com/langchain-ai/langchain/pull/14385](https://togithub.com/langchain-ai/langchain/pull/14385) - langchain\[patch], experimental\[patch]: update utilities imports by [@​baskaryan](https://togithub.com/baskaryan) in [https://github.com/langchain-ai/langchain/pull/15438](https://togithub.com/langchain-ai/langchain/pull/15438) - core\[patch]: Release 0.1.5 by [@​baskaryan](https://togithub.com/baskaryan) in [https://github.com/langchain-ai/langchain/pull/15480](https://togithub.com/langchain-ai/langchain/pull/15480) - infra: add minimum deps pre release check by [@​baskaryan](https://togithub.com/baskaryan) in [https://github.com/langchain-ai/langchain/pull/15485](https://togithub.com/langchain-ai/langchain/pull/15485) - community\[patch]: Release 0.0.8 by [@​baskaryan](https://togithub.com/baskaryan) in [https://github.com/langchain-ai/langchain/pull/15481](https://togithub.com/langchain-ai/langchain/pull/15481) - infra: fix min deps test by [@​baskaryan](https://togithub.com/baskaryan) in [https://github.com/langchain-ai/langchain/pull/15486](https://togithub.com/langchain-ai/langchain/pull/15486) - community\[patch]: bump core version >=0.1.5,<0.2 by [@​baskaryan](https://togithub.com/baskaryan) in [https://github.com/langchain-ai/langchain/pull/15488](https://togithub.com/langchain-ai/langchain/pull/15488) - infra: update community test min reqs by [@​baskaryan](https://togithub.com/baskaryan) in [https://github.com/langchain-ai/langchain/pull/15490](https://togithub.com/langchain-ai/langchain/pull/15490) - langchain\[patch]: Release 0.0.354 by [@​baskaryan](https://togithub.com/baskaryan) in [https://github.com/langchain-ai/langchain/pull/15482](https://togithub.com/langchain-ai/langchain/pull/15482) - langchain\[patch]: bump community >=0.0.8,<0.1 by [@​baskaryan](https://togithub.com/baskaryan) in [https://github.com/langchain-ai/langchain/pull/15492](https://togithub.com/langchain-ai/langchain/pull/15492) #### New Contributors - [@​Tchotchke](https://togithub.com/Tchotchke) made their first contribution in [https://github.com/langchain-ai/langchain/pull/15324](https://togithub.com/langchain-ai/langchain/pull/15324) - [@​romainfd](https://togithub.com/romainfd) made their first contribution in [https://github.com/langchain-ai/langchain/pull/15321](https://togithub.com/langchain-ai/langchain/pull/15321) - [@​liushuaikobe](https://togithub.com/liushuaikobe) made their first contribution in [https://github.com/langchain-ai/langchain/pull/14793](https://togithub.com/langchain-ai/langchain/pull/14793) - [@​kellyelton](https://togithub.com/kellyelton) made their first contribution in [https://github.com/langchain-ai/langchain/pull/15275](https://togithub.com/langchain-ai/langchain/pull/15275) - [@​piyuple](https://togithub.com/piyuple) made their first contribution in [https://github.com/langchain-ai/langchain/pull/15309](https://togithub.com/langchain-ai/langchain/pull/15309) - [@​jonnolen](https://togithub.com/jonnolen) made their first contribution in [https://github.com/langchain-ai/langchain/pull/15327](https://togithub.com/langchain-ai/langchain/pull/15327) - [@​naveentnj](https://togithub.com/naveentnj) made their first contribution in [https://github.com/langchain-ai/langchain/pull/15378](https://togithub.com/langchain-ai/langchain/pull/15378) - [@​yhzhu99](https://togithub.com/yhzhu99) made their first contribution in [https://github.com/langchain-ai/langchain/pull/15380](https://togithub.com/langchain-ai/langchain/pull/15380) - [@​donovanmuller](https://togithub.com/donovanmuller) made their first contribution in [https://github.com/langchain-ai/langchain/pull/15364](https://togithub.com/langchain-ai/langchain/pull/15364) - [@​AhmedHathout](https://togithub.com/AhmedHathout) made their first contribution in [https://github.com/langchain-ai/langchain/pull/15352](https://togithub.com/langchain-ai/langchain/pull/15352) - [@​abhishek9909](https://togithub.com/abhishek9909) made their first contribution in [https://github.com/langchain-ai/langchain/pull/15260](https://togithub.com/langchain-ai/langchain/pull/15260) - [@​joel-teratis](https://togithub.com/joel-teratis) made their first contribution in [https://github.com/langchain-ai/langchain/pull/14919](https://togithub.com/langchain-ai/langchain/pull/14919) - [@​purificant](https://togithub.com/purificant) made their first contribution in [https://github.com/langchain-ai/langchain/pull/15114](https://togithub.com/langchain-ai/langchain/pull/15114) - [@​cjaniake](https://togithub.com/cjaniake) made their first contribution in [https://github.com/langchain-ai/langchain/pull/15111](https://togithub.com/langchain-ai/langchain/pull/15111) - [@​David-Kristek](https://togithub.com/David-Kristek) made their first contribution in [https://github.com/langchain-ai/langchain/pull/15104](https://togithub.com/langchain-ai/langchain/pull/15104) - [@​GauravWaghmare](https://togithub.com/GauravWaghmare) made their first contribution in [https://github.com/langchain-ai/langchain/pull/15124](https://togithub.com/langchain-ai/langchain/pull/15124) - [@​sharrajesh](https://togithub.com/sharrajesh) made their first contribution in [https://github.com/langchain-ai/langchain/pull/15082](https://togithub.com/langchain-ai/langchain/pull/15082) - [@​savoiepe](https://togithub.com/savoiepe) made their first contribution in [https://github.com/langchain-ai/langchain/pull/14852](https://togithub.com/langchain-ai/langchain/pull/14852) - [@​pareshchiramel](https://togithub.com/pareshchiramel) made their first contribution in [https://github.com/langchain-ai/langchain/pull/14745](https://togithub.com/langchain-ai/langchain/pull/14745) - [@​xu-xiang](https://togithub.com/xu-xiang) made their first contribution in [https://github.com/langchain-ai/langchain/pull/14662](https://togithub.com/langchain-ai/langchain/pull/14662) - [@​themrzmaster](https://togithub.com/themrzmaster) made their first contribution in [https://github.com/langchain-ai/langchain/pull/14653](https://togithub.com/langchain-ai/langchain/pull/14653) - [@​DavidLMS](https://togithub.com/DavidLMS) made their first contribution in [https://github.com/langchain-ai/langchain/pull/14644](https://togithub.com/langchain-ai/langchain/pull/14644) - [@​manjunathshiva](https://togithub.com/manjunathshiva) made their first contribution in [https://github.com/langchain-ai/langchain/pull/14638](https://togithub.com/langchain-ai/langchain/pull/14638) - [@​suhas-kotaki](https://togithub.com/suhas-kotaki) made their first contribution in [https://github.com/langchain-ai/langchain/pull/15428](https://togithub.com/langchain-ai/langchain/pull/15428) - [@​dkajtoch](https://togithub.com/dkajtoch) made their first contribution in [https://github.com/langchain-ai/langchain/pull/15427](https://togithub.com/langchain-ai/langchain/pull/15427) - [@​aqibamir](https://togithub.com/aqibamir) made their first contribution in [https://github.com/langchain-ai/langchain/pull/15196](https://togithub.com/langchain-ai/langchain/pull/15196) - [@​ashleyxuu](https://togithub.com/ashleyxuu) made their first contribution in [https://github.com/langchain-ai/langchain/pull/14829](https://togithub.com/langchain-ai/langchain/pull/14829) - [@​mokeyish](https://togithub.com/mokeyish) made their first contribution in [https://github.com/langchain-ai/langchain/pull/14636](https://togithub.com/langchain-ai/langchain/pull/14636) - [@​LoopKarma](https://togithub.com/LoopKarma) made their first contribution in [https://github.com/langchain-ai/langchain/pull/14817](https://togithub.com/langchain-ai/langchain/pull/14817) - [@​apisani1](https://togithub.com/apisani1) made their first contribution in [https://github.com/langchain-ai/langchain/pull/15079](https://togithub.com/langchain-ai/langchain/pull/15079) - [@​codehound42](https://togithub.com/codehound42) made their first contribution in [https://github.com/langchain-ai/langchain/pull/14439](https://togithub.com/langchain-ai/langchain/pull/14439) - [@​amaleki2](https://togithub.com/amaleki2) made their first contribution in [https://github.com/langchain-ai/langchain/pull/14604](https://togithub.com/langchain-ai/langchain/pull/14604) - [@​JuR-0](https://togithub.com/JuR-0) made their first contribution in [https://github.com/langchain-ai/langchain/pull/14398](https://togithub.com/langchain-ai/langchain/pull/14398) - [@​alan910127](https://togithub.com/alan910127) made their first contribution in [https://github.com/langchain-ai/langchain/pull/14405](https://togithub.com/langchain-ai/langchain/pull/14405) - [@​apepkuss](https://togithub.com/apepkuss) made their first contribution in [https://github.com/langchain-ai/langchain/pull/14787](https://togithub.com/langchain-ai/langchain/pull/14787) **Full Changelog**: https://github.com/langchain-ai/langchain/compare/v0.0.353...v0.0.354 </details> <details> <summary>langchain-ai/langchainjs (langchain)</summary> ### [`v0.1.1`](https://togithub.com/langchain-ai/langchainjs/releases/tag/0.1.1) [Compare Source](https://togithub.com/langchain-ai/langchainjs/compare/0.1.0...0.1.1) #### What's Changed - langchain\[minor]: Release 0.1.0 by [@​jacoblee93](https://togithub.com/jacoblee93) in [https://github.com/langchain-ai/langchainjs/pull/3933](https://togithub.com/langchain-ai/langchainjs/pull/3933) - docs\[patch]: Replace imports by [@​bracesproul](https://togithub.com/bracesproul) in [https://github.com/langchain-ai/langchainjs/pull/3931](https://togithub.com/langchain-ai/langchainjs/pull/3931) - langchain\[patch]: Fix lint by [@​jacoblee93](https://togithub.com/jacoblee93) in [https://github.com/langchain-ai/langchainjs/pull/3936](https://togithub.com/langchain-ai/langchainjs/pull/3936) - langchain\[patch]\[tests]: Added tests for new create agent functions by [@​bracesproul](https://togithub.com/bracesproul) in [https://github.com/langchain-ai/langchainjs/pull/3930](https://togithub.com/langchain-ai/langchainjs/pull/3930) - core\[patch]: Narrow iterable readable stream typing by [@​jacoblee93](https://togithub.com/jacoblee93) in [https://github.com/langchain-ai/langchainjs/pull/3938](https://togithub.com/langchain-ai/langchainjs/pull/3938) - docs\[patch]: Fix features having strikethrough when not deprecated by [@​bracesproul](https://togithub.com/bracesproul) in [https://github.com/langchain-ai/langchainjs/pull/3940](https://togithub.com/langchain-ai/langchainjs/pull/3940) - langchain\[minor]: Adds create runnable chain functions by [@​bracesproul](https://togithub.com/bracesproul) in [https://github.com/langchain-ai/langchainjs/pull/3928](https://togithub.com/langchain-ai/langchainjs/pull/3928) **Full Changelog**: https://github.com/langchain-ai/langchainjs/compare/0.1.0...0.1.1 ### [`v0.1.0`](https://togithub.com/langchain-ai/langchainjs/releases/tag/0.1.0) [Compare Source](https://togithub.com/langchain-ai/langchainjs/compare/0.0.214...0.1.0) ##### What's Changed - langchain\[patch]: Release 0.0.214 by [@​jacoblee93](https://togithub.com/jacoblee93) in [https://github.com/langchain-ai/langchainjs/pull/3876](https://togithub.com/langchain-ai/langchainjs/pull/3876) - core\[patch]: Release 0.1.7 by [@​jacoblee93](https://togithub.com/jacoblee93) in [https://github.com/langchain-ai/langchainjs/pull/3877](https://togithub.com/langchain-ai/langchainjs/pull/3877) - docs\[patch]: Update imports in docs by [@​jacoblee93](https://togithub.com/jacoblee93) in [https://github.com/langchain-ai/langchainjs/pull/3878](https://togithub.com/langchain-ai/langchainjs/pull/3878) - core\[patch]: Add token usage interface to core by [@​bracesproul](https://togithub.com/bracesproul) in [https://github.com/langchain-ai/langchainjs/pull/3871](https://togithub.com/langchain-ai/langchainjs/pull/3871) - ci\[patch]: Adds initial dependency range test, move tests by [@​jacoblee93](https://togithub.com/jacoblee93) in [https://github.com/langchain-ai/langchainjs/pull/3887](https://togithub.com/langchain-ai/langchainjs/pull/3887) - docs\[patch]: update llm quickstart section heading by [@​medic-code](https://togithub.com/medic-code) in [https://github.com/langchain-ai/langchainjs/pull/3889](https://togithub.com/langchain-ai/langchainjs/pull/3889) - community\[patch]: Move all tests to community by [@​jacoblee93](https://togithub.com/jacoblee93) in [https://github.com/langchain-ai/langchainjs/pull/3893](https://togithub.com/langchain-ai/langchainjs/pull/3893) - docs\[patch]: Replace lc proper OpenAI imports with [@​langchain/openai](https://togithub.com/langchain/openai) by [@​bracesproul](https://togithub.com/bracesproul) in [https://github.com/langchain-ai/langchainjs/pull/3886](https://togithub.com/langchain-ai/langchainjs/pull/3886) - docs\[patch]: Add storage docs by [@​bracesproul](https://togithub.com/bracesproul) in [https://github.com/langchain-ai/langchainjs/pull/3870](https://togithub.com/langchain-ai/langchainjs/pull/3870) - Jacob/connery update by [@​jacoblee93](https://togithub.com/jacoblee93) in [https://github.com/langchain-ai/langchainjs/pull/3896](https://togithub.com/langchain-ai/langchainjs/pull/3896) - Jacob/llmonitor to lunary by [@​jacoblee93](https://togithub.com/jacoblee93) in [https://github.com/langchain-ai/langchainjs/pull/3895](https://togithub.com/langchain-ai/langchainjs/pull/3895) - community\[patch]: Release 0.0.14 by [@​jacoblee93](https://togithub.com/jacoblee93) in [https://github.com/langchain-ai/langchainjs/pull/3899](https://togithub.com/langchain-ai/langchainjs/pull/3899) - Update embedQuery to use inputType by [@​EricThompson-PeopleReign](https://togithub.com/EricThompson-PeopleReign) in [https://github.com/langchain-ai/langchainjs/pull/3901](https://togithub.com/langchain-ai/langchainjs/pull/3901) - cohere\[patch]: Fix Cohere release command by [@​jacoblee93](https://togithub.com/jacoblee93) in [https://github.com/langchain-ai/langchainjs/pull/3902](https://togithub.com/langchain-ai/langchainjs/pull/3902) - cohere\[patch]: Release 0.0.2 by [@​jacoblee93](https://togithub.com/jacoblee93) in [https://github.com/langchain-ai/langchainjs/pull/3904](https://togithub.com/langchain-ai/langchainjs/pull/3904) - template\[patch]: Add passWithNoTests to template jest config by [@​bracesproul](https://togithub.com/bracesproul) in [https://github.com/langchain-ai/langchainjs/pull/3903](https://togithub.com/langchain-ai/langchainjs/pull/3903) - template\[patch]: Bump create-langchain-integration by [@​jacoblee93](https://togithub.com/jacoblee93) in [https://github.com/langchain-ai/langchainjs/pull/3905](https://togithub.com/langchain-ai/langchainjs/pull/3905) - docs\[patch]: Update examples imports to use core by [@​bracesproul](https://togithub.com/bracesproul) in [https://github.com/langchain-ai/langchainjs/pull/3898](https://togithub.com/langchain-ai/langchainjs/pull/3898) - ci\[minor]: Add lowest dependency range CI check by [@​jacoblee93](https://togithub.com/jacoblee93) in [https://github.com/langchain-ai/langchainjs/pull/3906](https://togithub.com/langchain-ai/langchainjs/pull/3906) - community\[patch]: Add external dep to tree shaking list by [@​jacoblee93](https://togithub.com/jacoblee93) in [https://github.com/langchain-ai/langchainjs/pull/3911](https://togithub.com/langchain-ai/langchainjs/pull/3911) - core\[patch]: Readd core entrypoint by [@​jacoblee93](https://togithub.com/jacoblee93) in [https://github.com/langchain-ai/langchainjs/pull/3912](https://togithub.com/langchain-ai/langchainjs/pull/3912) - langchain\[patch]: Test housekeeping by [@​jacoblee93](https://togithub.com/jacoblee93) in [https://github.com/langchain-ai/langchainjs/pull/3913](https://togithub.com/langchain-ai/langchainjs/pull/3913) - core\[patch]: Add generics to `RunnablePassthrough.assign` by [@​zirkelc](https://togithub.com/zirkelc) in [https://github.com/langchain-ai/langchainjs/pull/3844](https://togithub.com/langchain-ai/langchainjs/pull/3844) - core\[patch]: Release 0.1.8 by [@​jacoblee93](https://togithub.com/jacoblee93) in [https://github.com/langchain-ai/langchainjs/pull/3914](https://togithub.com/langchain-ai/langchainjs/pull/3914) - docs\[patch]: Update anthropic imports to use anthropic package by [@​bracesproul](https://togithub.com/bracesproul) in [https://github.com/langchain-ai/langchainjs/pull/3915](https://togithub.com/langchain-ai/langchainjs/pull/3915) - docs\[patch]: Add more distinct deprecation warning in api refs by [@​bracesproul](https://togithub.com/bracesproul) in [https://github.com/langchain-ai/langchainjs/pull/3926](https://togithub.com/langchain-ai/langchainjs/pull/3926) - langchain\[minor], core\[patch]: 0.1.0 by [@​jacoblee93](https://togithub.com/jacoblee93) in [https://github.com/langchain-ai/langchainjs/pull/3861](https://togithub.com/langchain-ai/langchainjs/pull/3861) ##### New Contributors - [@​medic-code](https://togithub.com/medic-code) made their first contribution in [https://github.com/langchain-ai/langchainjs/pull/3889](https://togithub.com/langchain-ai/langchainjs/pull/3889) - [@​EricThompson-PeopleReign](https://togithub.com/EricThompson-PeopleReign) made their first contribution in [https://github.com/langchain-ai/langchainjs/pull/3901](https://togithub.com/langchain-ai/langchainjs/pull/3901) - [@​zirkelc](https://togithub.com/zirkelc) made their first contribution in [https://github.com/langchain-ai/langchainjs/pull/3844](https://togithub.com/langchain-ai/langchainjs/pull/3844) **Full Changelog**: https://github.com/langchain-ai/langchainjs/compare/0.0.214...0.1.0 ### [`v0.0.214`](https://togithub.com/langchain-ai/langchainjs/releases/tag/0.0.214) [Compare Source](https://togithub.com/langchain-ai/langchainjs/compare/0.0.213...0.0.214) ##### What's Changed - docs\[minor]: Revamp model io docs by [@​nfcampos](https://togithub.com/nfcampos) in [https://github.com/langchain-ai/langchainjs/pull/3815](https://togithub.com/langchain-ai/langchainjs/pull/3815) - docs\[patch]: Add CMD + K shortcut to API refs by [@​bracesproul](https://togithub.com/bracesproul) in [https://github.com/langchain-ai/langchainjs/pull/3832](https://togithub.com/langchain-ai/langchainjs/pull/3832) - cohere\[major]: [@​langchain/cohere](https://togithub.com/langchain/cohere) init by [@​bracesproul](https://togithub.com/bracesproul) in [https://github.com/langchain-ai/langchainjs/pull/3762](https://togithub.com/langchain-ai/langchainjs/pull/3762) - docs\[patch]: module customization and prompt hub links by [@​jacoblee93](https://togithub.com/jacoblee93) in [https://github.com/langchain-ai/langchainjs/pull/3833](https://togithub.com/langchain-ai/langchainjs/pull/3833) - core\[patch]: Fix tracing order for transform streaming runnables by [@​jacoblee93](https://togithub.com/jacoblee93) in [https://github.com/langchain-ai/langchainjs/pull/3835](https://togithub.com/langchain-ai/langchainjs/pull/3835) - core\[patch]: Release 0.1.6 by [@​jacoblee93](https://togithub.com/jacoblee93) in [https://github.com/langchain-ai/langchainjs/pull/3838](https://togithub.com/langchain-ai/langchainjs/pull/3838) - Return run manager arg to not being a promise by [@​nfcampos](https://togithub.com/nfcampos) in [https://github.com/langchain-ai/langchainjs/pull/3839](https://togithub.com/langchain-ai/langchainjs/pull/3839) - fix(doc): Sidebar how_to (tools) by [@​gkhngyk](https://togithub.com/gkhngyk) in [https://github.com/langchain-ai/langchainjs/pull/3843](https://togithub.com/langchain-ai/langchainjs/pull/3843) - docs\[patch]: relevant example for map reduce by [@​anass-arrhioui-nw](https://togithub.com/anass-arrhioui-nw) in [https://github.com/langchain-ai/langchainjs/pull/3842](https://togithub.com/langchain-ai/langchainjs/pull/3842) - fix: textFieldMaxLength parameter missing by [@​CoalYa](https://togithub.com/CoalYa) in [https://github.com/langchain-ai/langchainjs/pull/3846](https://togithub.com/langchain-ai/langchainjs/pull/3846) - feat: add formatMessages types & prompt test by [@​gkhngyk](https://togithub.com/gkhngyk) in [https://github.com/langchain-ai/langchainjs/pull/3820](https://togithub.com/langchain-ai/langchainjs/pull/3820) - docs\[patch]: Use component for integration install instructions by [@​jacoblee93](https://togithub.com/jacoblee93) in [https://github.com/langchain-ai/langchainjs/pull/3859](https://togithub.com/langchain-ai/langchainjs/pull/3859) - langchain\[patch]: Adds entrypoint deprecation log method by [@​jacoblee93](https://togithub.com/jacoblee93) in [https://github.com/langchain-ai/langchainjs/pull/3860](https://togithub.com/langchain-ai/langchainjs/pull/3860) - Todo: propagate error in Neo4jGraph by [@​tomasonjo](https://togithub.com/tomasonjo) in [https://github.com/langchain-ai/langchainjs/pull/3855](https://togithub.com/langchain-ai/langchainjs/pull/3855) - google-genai: fix streaming via callback handlers for ChatGoogleGenerativeAI by [@​StreetLamb](https://togithub.com/StreetLamb) in [https://github.com/langchain-ai/langchainjs/pull/3834](https://togithub.com/langchain-ai/langchainjs/pull/3834) - google-genai\[patch]: Release 0.0.7 by [@​jacoblee93](https: </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 4am on Monday" in timezone America/Chicago, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://togithub.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/autoblocksai/autoblocks-examples). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xMjEuMCIsInVwZGF0ZWRJblZlciI6IjM3LjEyMS4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
eyurtsev
changed the title
core[patch]: Further restrict recursive URL loader
core[patch]: Further restrict recursive URL loader (CVE-2024-0243)
Mar 13, 2024
Fix for CVE: CVE-2024-0243 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Labels
🤖:bug
Related to a bug, vulnerability, unexpected error with an existing feature
Ɑ: doc loader
Related to document loader module (not documentation)
lgtm
PR looks good. Use to confirm that a PR is ready for merging.
size:M
This PR changes 30-99 lines, ignoring generated files.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Code from this PR:
HEAD...m0kr4n3:security/fix_ssrf
Added unit tests