Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

core[patch]: Further restrict recursive URL loader (CVE-2024-0243) #15559

Merged
merged 4 commits into from
Jan 4, 2024

Conversation

eyurtsev
Copy link
Collaborator

@eyurtsev eyurtsev commented Jan 4, 2024

Code from this PR:
HEAD...m0kr4n3:security/fix_ssrf

Added unit tests

Copy link

vercel bot commented Jan 4, 2024

The latest updates on your projects. Learn more about Vercel for Git ↗︎

1 Ignored Deployment
Name Status Preview Comments Updated (UTC)
langchain ⬜️ Ignored (Inspect) Visit Preview Jan 4, 2024 9:15pm

@dosubot dosubot bot added size:M This PR changes 30-99 lines, ignoring generated files. Ɑ: doc loader Related to document loader module (not documentation) 🤖:bug Related to a bug, vulnerability, unexpected error with an existing feature labels Jan 4, 2024
@eyurtsev eyurtsev changed the title core(patch): Restrict recursive URL loader core[patch]: Restrict recursive URL loader Jan 4, 2024
@eyurtsev eyurtsev requested a review from efriis January 4, 2024 20:38
@eyurtsev eyurtsev changed the title core[patch]: Restrict recursive URL loader core[patch]: Further restrict recursive URL loader Jan 4, 2024
@dosubot dosubot bot added the lgtm PR looks good. Use to confirm that a PR is ready for merging. label Jan 4, 2024
@eyurtsev eyurtsev merged commit bf0b3cc into master Jan 4, 2024
76 checks passed
@eyurtsev eyurtsev deleted the eugene/patch_recursive_url branch January 4, 2024 21:33
nicolewhite referenced this pull request in autoblocksai/autoblocks-examples Jan 8, 2024
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
|
[@types/node](https://togithub.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node)
([source](https://togithub.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node))
| [`20.10.6` ->
`20.10.7`](https://renovatebot.com/diffs/npm/@types%2fnode/20.10.6/20.10.7)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/@types%2fnode/20.10.7?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/@types%2fnode/20.10.7?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/@types%2fnode/20.10.6/20.10.7?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@types%2fnode/20.10.6/20.10.7?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
|
[@types/react](https://togithub.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/react)
([source](https://togithub.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react))
| [`18.2.46` ->
`18.2.47`](https://renovatebot.com/diffs/npm/@types%2freact/18.2.46/18.2.47)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/@types%2freact/18.2.47?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/@types%2freact/18.2.47?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/@types%2freact/18.2.46/18.2.47?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@types%2freact/18.2.46/18.2.47?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [ai](https://sdk.vercel.ai/docs)
([source](https://togithub.com/vercel/ai)) | [`2.2.30` ->
`2.2.31`](https://renovatebot.com/diffs/npm/ai/2.2.30/2.2.31) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/ai/2.2.31?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/ai/2.2.31?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/ai/2.2.30/2.2.31?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/ai/2.2.30/2.2.31?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [langchain](https://togithub.com/langchain-ai/langchain) | `^0.0.353`
-> `^0.1.0` |
[![age](https://developer.mend.io/api/mc/badges/age/pypi/langchain/0.1.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/pypi/langchain/0.1.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/pypi/langchain/0.0.353/0.1.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/langchain/0.0.353/0.1.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [langchain](https://togithub.com/langchain-ai/langchainjs) |
[`^0.0.213` ->
`^0.1.0`](https://renovatebot.com/diffs/npm/langchain/0.0.213/0.1.1) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/langchain/0.1.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/langchain/0.1.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/langchain/0.0.213/0.1.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/langchain/0.0.213/0.1.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [postcss](https://postcss.org/)
([source](https://togithub.com/postcss/postcss)) | [`8.4.32` ->
`8.4.33`](https://renovatebot.com/diffs/npm/postcss/8.4.32/8.4.33) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/postcss/8.4.33?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/postcss/8.4.33?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/postcss/8.4.32/8.4.33?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/postcss/8.4.32/8.4.33?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [tailwindcss](https://tailwindcss.com)
([source](https://togithub.com/tailwindlabs/tailwindcss)) | [`3.4.0` ->
`3.4.1`](https://renovatebot.com/diffs/npm/tailwindcss/3.4.0/3.4.1) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/tailwindcss/3.4.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/tailwindcss/3.4.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/tailwindcss/3.4.0/3.4.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/tailwindcss/3.4.0/3.4.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>vercel/ai (ai)</summary>

### [`v2.2.31`](https://togithub.com/vercel/ai/releases/tag/ai%402.2.31)

[Compare
Source](https://togithub.com/vercel/ai/compare/ai@2.2.30...ai@2.2.31)

##### Patch Changes

- [`9b89c4d`](https://togithub.com/vercel/ai/commit/9b89c4d):
react/use-assistant: Expose setInput
- [`75751c9`](https://togithub.com/vercel/ai/commit/75751c9): ai/react:
Add experimental_onToolCall to useChat.

</details>

<details>
<summary>langchain-ai/langchain (langchain)</summary>

###
[`v0.1.0`](https://togithub.com/langchain-ai/langchain/releases/tag/v0.1.0)

[Compare
Source](https://togithub.com/langchain-ai/langchain/compare/v0.0.354...v0.1.0)

#### What's Changed

- docs: contributor faq by [@&#8203;efriis](https://togithub.com/efriis)
in
[https://github.com/langchain-ai/langchain/pull/15502](https://togithub.com/langchain-ai/langchain/pull/15502)
- templates: fix deps by [@&#8203;efriis](https://togithub.com/efriis)
in
[https://github.com/langchain-ai/langchain/pull/15439](https://togithub.com/langchain-ai/langchain/pull/15439)
- infra: fail check_diffs if too many files changed by
[@&#8203;efriis](https://togithub.com/efriis) in
[https://github.com/langchain-ai/langchain/pull/15423](https://togithub.com/langchain-ai/langchain/pull/15423)
- docs: broken link in contributor docs by
[@&#8203;efriis](https://togithub.com/efriis) in
[https://github.com/langchain-ai/langchain/pull/15436](https://togithub.com/langchain-ai/langchain/pull/15436)
- docs: fix broken link by [@&#8203;efriis](https://togithub.com/efriis)
in
[https://github.com/langchain-ai/langchain/pull/15509](https://togithub.com/langchain-ai/langchain/pull/15509)
- add new chain howtos by
[@&#8203;hwchase17](https://togithub.com/hwchase17) in
[https://github.com/langchain-ai/langchain/pull/15430](https://togithub.com/langchain-ai/langchain/pull/15430)
- Revert
[#&#8203;15326](https://togithub.com/langchain-ai/langchain/issues/15326)
by [@&#8203;baskaryan](https://togithub.com/baskaryan) in
[https://github.com/langchain-ai/langchain/pull/15546](https://togithub.com/langchain-ai/langchain/pull/15546)
- core\[patch]: Release 0.1.6 by
[@&#8203;baskaryan](https://togithub.com/baskaryan) in
[https://github.com/langchain-ai/langchain/pull/15547](https://togithub.com/langchain-ai/langchain/pull/15547)
- core\[patch]: Further restrict recursive URL loader by
[@&#8203;eyurtsev](https://togithub.com/eyurtsev) in
[https://github.com/langchain-ai/langchain/pull/15559](https://togithub.com/langchain-ai/langchain/pull/15559)
- add ragatouille by [@&#8203;hwchase17](https://togithub.com/hwchase17)
in
[https://github.com/langchain-ai/langchain/pull/15561](https://togithub.com/langchain-ai/langchain/pull/15561)
- langchain\[minor]: add warnings when importing integrations from
langchain by [@&#8203;baskaryan](https://togithub.com/baskaryan) in
[https://github.com/langchain-ai/langchain/pull/15505](https://togithub.com/langchain-ai/langchain/pull/15505)
- removed deprecated openai model by
[@&#8203;VpkPrasanna](https://togithub.com/VpkPrasanna) in
[https://github.com/langchain-ai/langchain/pull/15533](https://togithub.com/langchain-ai/langchain/pull/15533)
- Feat: support Milvus more params by
[@&#8203;chyroc](https://togithub.com/chyroc) in
[https://github.com/langchain-ai/langchain/pull/15447](https://togithub.com/langchain-ai/langchain/pull/15447)
- Docs: Fix typos in question_answering by
[@&#8203;Speuce](https://togithub.com/Speuce) in
[https://github.com/langchain-ai/langchain/pull/15565](https://togithub.com/langchain-ai/langchain/pull/15565)
- fix links by [@&#8203;hwchase17](https://togithub.com/hwchase17) in
[https://github.com/langchain-ai/langchain/pull/15566](https://togithub.com/langchain-ai/langchain/pull/15566)
- core\[minor], langchain\[minor]: deprecate Chain and BaseLanguageModel
… by [@&#8203;baskaryan](https://togithub.com/baskaryan) in
[https://github.com/langchain-ai/langchain/pull/15499](https://togithub.com/langchain-ai/langchain/pull/15499)
- update chain docs by
[@&#8203;hwchase17](https://togithub.com/hwchase17) in
[https://github.com/langchain-ai/langchain/pull/15495](https://togithub.com/langchain-ai/langchain/pull/15495)
- langchain\[patch]: deprecate old agent classes and methods by
[@&#8203;baskaryan](https://togithub.com/baskaryan) in
[https://github.com/langchain-ai/langchain/pull/15558](https://togithub.com/langchain-ai/langchain/pull/15558)
- update memory by [@&#8203;hwchase17](https://togithub.com/hwchase17)
in
[https://github.com/langchain-ai/langchain/pull/15507](https://togithub.com/langchain-ai/langchain/pull/15507)
- core\[patch]: add beta decorator by
[@&#8203;baskaryan](https://togithub.com/baskaryan) in
[https://github.com/langchain-ai/langchain/pull/15589](https://togithub.com/langchain-ai/langchain/pull/15589)
- google-vertexai: added langchain_google_vertexai package by
[@&#8203;lkuligin](https://togithub.com/lkuligin) in
[https://github.com/langchain-ai/langchain/pull/15218](https://togithub.com/langchain-ai/langchain/pull/15218)
- Fix chain docs redirects by
[@&#8203;baskaryan](https://togithub.com/baskaryan) in
[https://github.com/langchain-ai/langchain/pull/15600](https://togithub.com/langchain-ai/langchain/pull/15600)
- core\[patch], community\[patch]: mark context, load as beta by
[@&#8203;baskaryan](https://togithub.com/baskaryan) in
[https://github.com/langchain-ai/langchain/pull/15603](https://togithub.com/langchain-ai/langchain/pull/15603)
- openai\[minor]: implement langchain-openai package by
[@&#8203;efriis](https://togithub.com/efriis) in
[https://github.com/langchain-ai/langchain/pull/15503](https://togithub.com/langchain-ai/langchain/pull/15503)
- infra: vertex integration test creds by
[@&#8203;efriis](https://togithub.com/efriis) in
[https://github.com/langchain-ai/langchain/pull/15609](https://togithub.com/langchain-ai/langchain/pull/15609)
-   google-vertexai, openai: release candidate version
by [@&#8203;efriis](https://togithub.com/efriis) in
[https://github.com/langchain-ai/langchain/pull/15611](https://togithub.com/langchain-ai/langchain/pull/15611)
- core\[patch]: Release 0.1.7 by
[@&#8203;baskaryan](https://togithub.com/baskaryan) in
[https://github.com/langchain-ai/langchain/pull/15610](https://togithub.com/langchain-ai/langchain/pull/15610)
- google-vertexai: release 0.0.1 by
[@&#8203;efriis](https://togithub.com/efriis) in
[https://github.com/langchain-ai/langchain/pull/15613](https://togithub.com/langchain-ai/langchain/pull/15613)
- infra: title release action runs by
[@&#8203;efriis](https://togithub.com/efriis) in
[https://github.com/langchain-ai/langchain/pull/15612](https://togithub.com/langchain-ai/langchain/pull/15612)
- openai: core version, rc1 by
[@&#8203;efriis](https://togithub.com/efriis) in
[https://github.com/langchain-ai/langchain/pull/15614](https://togithub.com/langchain-ai/langchain/pull/15614)
- community\[patch]: Release 0.0.9 by
[@&#8203;baskaryan](https://togithub.com/baskaryan) in
[https://github.com/langchain-ai/langchain/pull/15615](https://togithub.com/langchain-ai/langchain/pull/15615)
- infra: community bump min core version by
[@&#8203;baskaryan](https://togithub.com/baskaryan) in
[https://github.com/langchain-ai/langchain/pull/15617](https://togithub.com/langchain-ai/langchain/pull/15617)
- core\[patch]: deprecate v1 tracer by
[@&#8203;baskaryan](https://togithub.com/baskaryan) in
[https://github.com/langchain-ai/langchain/pull/15608](https://togithub.com/langchain-ai/langchain/pull/15608)
- openai\[patch]: v0.0.2 by
[@&#8203;efriis](https://togithub.com/efriis) in
[https://github.com/langchain-ai/langchain/pull/15618](https://togithub.com/langchain-ai/langchain/pull/15618)
- docs: update cohere chat integration by
[@&#8203;baskaryan](https://togithub.com/baskaryan) in
[https://github.com/langchain-ai/langchain/pull/15562](https://togithub.com/langchain-ai/langchain/pull/15562)
- langchain\[minor]: Release 0.1.0 by
[@&#8203;baskaryan](https://togithub.com/baskaryan) in
[https://github.com/langchain-ai/langchain/pull/15619](https://togithub.com/langchain-ai/langchain/pull/15619)
- infra: fix langchain openai test dep by
[@&#8203;baskaryan](https://togithub.com/baskaryan) in
[https://github.com/langchain-ai/langchain/pull/15620](https://togithub.com/langchain-ai/langchain/pull/15620)

#### New Contributors

- [@&#8203;VpkPrasanna](https://togithub.com/VpkPrasanna) made their
first contribution in
[https://github.com/langchain-ai/langchain/pull/15533](https://togithub.com/langchain-ai/langchain/pull/15533)
- [@&#8203;Speuce](https://togithub.com/Speuce) made their first
contribution in
[https://github.com/langchain-ai/langchain/pull/15565](https://togithub.com/langchain-ai/langchain/pull/15565)

**Full Changelog**:
https://github.com/langchain-ai/langchain/compare/v0.0.354...v0.1.0

###
[`v0.0.354`](https://togithub.com/langchain-ai/langchain/releases/tag/v0.0.354)

[Compare
Source](https://togithub.com/langchain-ai/langchain/compare/v0.0.353...v0.0.354)

#### What's Changed

- Improve markdown list parser by
[@&#8203;nfcampos](https://togithub.com/nfcampos) in
[https://github.com/langchain-ai/langchain/pull/15295](https://togithub.com/langchain-ai/langchain/pull/15295)
- \[core] add test for json parser by
[@&#8203;hwchase17](https://togithub.com/hwchase17) in
[https://github.com/langchain-ai/langchain/pull/15297](https://togithub.com/langchain-ai/langchain/pull/15297)
- community\[patch]: Release 0.0.7 by
[@&#8203;baskaryan](https://togithub.com/baskaryan) in
[https://github.com/langchain-ai/langchain/pull/15320](https://togithub.com/langchain-ai/langchain/pull/15320)
- langchain: Exclude non-utf8 file from loader since it causes an error
in the code_understanding example by
[@&#8203;Tchotchke](https://togithub.com/Tchotchke) in
[https://github.com/langchain-ai/langchain/pull/15324](https://togithub.com/langchain-ai/langchain/pull/15324)
- langchain: minor changes to StuffDocumentsChain.\_get_inputs by
[@&#8203;romainfd](https://togithub.com/romainfd) in
[https://github.com/langchain-ai/langchain/pull/15321](https://togithub.com/langchain-ai/langchain/pull/15321)
- Upgrades the Tongyi LLM and ChatTongyi Model by
[@&#8203;liushuaikobe](https://togithub.com/liushuaikobe) in
[https://github.com/langchain-ai/langchain/pull/14793](https://togithub.com/langchain-ai/langchain/pull/14793)
- Update vectorstore_retriever_memory.mdx by
[@&#8203;kellyelton](https://togithub.com/kellyelton) in
[https://github.com/langchain-ai/langchain/pull/15275](https://togithub.com/langchain-ai/langchain/pull/15275)
- community: corrected typo in .readthedocs.yaml by
[@&#8203;piyuple](https://togithub.com/piyuple) in
[https://github.com/langchain-ai/langchain/pull/15309](https://togithub.com/langchain-ai/langchain/pull/15309)
- core: Update messages/**init**.py to account for AIMessageChunk which
breaks message history runnable. by
[@&#8203;jonnolen](https://togithub.com/jonnolen) in
[https://github.com/langchain-ai/langchain/pull/15327](https://togithub.com/langchain-ai/langchain/pull/15327)
- Patch: improve check openai version by
[@&#8203;chyroc](https://togithub.com/chyroc) in
[https://github.com/langchain-ai/langchain/pull/15301](https://togithub.com/langchain-ai/langchain/pull/15301)
- \[documentation] documentation revamp by
[@&#8203;hwchase17](https://togithub.com/hwchase17) in
[https://github.com/langchain-ai/langchain/pull/15281](https://togithub.com/langchain-ai/langchain/pull/15281)
- Delete V1 tracer and refactor tracer tests to core by
[@&#8203;agola11](https://togithub.com/agola11) in
[https://github.com/langchain-ai/langchain/pull/15326](https://togithub.com/langchain-ai/langchain/pull/15326)
- Propagate context vars in all classes/methods by
[@&#8203;nfcampos](https://togithub.com/nfcampos) in
[https://github.com/langchain-ai/langchain/pull/15329](https://togithub.com/langchain-ai/langchain/pull/15329)
- Catch type errors in dumps/dumpd by
[@&#8203;nfcampos](https://togithub.com/nfcampos) in
[https://github.com/langchain-ai/langchain/pull/15336](https://togithub.com/langchain-ai/langchain/pull/15336)
- Community: Newlines before bullets in IPYNB files (Vectara) by
[@&#8203;ofermend](https://togithub.com/ofermend) in
[https://github.com/langchain-ai/langchain/pull/15330](https://togithub.com/langchain-ai/langchain/pull/15330)
- docs: cleanup rag use case by
[@&#8203;baskaryan](https://togithub.com/baskaryan) in
[https://github.com/langchain-ai/langchain/pull/15284](https://togithub.com/langchain-ai/langchain/pull/15284)
- docs: revamp redirects by
[@&#8203;baskaryan](https://togithub.com/baskaryan) in
[https://github.com/langchain-ai/langchain/pull/15366](https://togithub.com/langchain-ai/langchain/pull/15366)
- community:qianfan endpoint support init params & remove useless params
definition by [@&#8203;danielhjz](https://togithub.com/danielhjz) in
[https://github.com/langchain-ai/langchain/pull/15381](https://togithub.com/langchain-ai/langchain/pull/15381)
- Update Multi_modal_RAG.ipynb by
[@&#8203;naveentnj](https://togithub.com/naveentnj) in
[https://github.com/langchain-ai/langchain/pull/15378](https://togithub.com/langchain-ai/langchain/pull/15378)
- docs(ollama): Fix Documentation in `CallbackManager`, missing `])` by
[@&#8203;yhzhu99](https://togithub.com/yhzhu99) in
[https://github.com/langchain-ai/langchain/pull/15380](https://togithub.com/langchain-ai/langchain/pull/15380)
- \[docs] update agent cookbook lcel by
[@&#8203;hwchase17](https://togithub.com/hwchase17) in
[https://github.com/langchain-ai/langchain/pull/15349](https://togithub.com/langchain-ai/langchain/pull/15349)
- Docs: Fix spelling and grammar on Concepts page by
[@&#8203;donovanmuller](https://togithub.com/donovanmuller) in
[https://github.com/langchain-ai/langchain/pull/15364](https://togithub.com/langchain-ai/langchain/pull/15364)
- Langchain: Fix quickstart doc code not working by
[@&#8203;AhmedHathout](https://togithub.com/AhmedHathout) in
[https://github.com/langchain-ai/langchain/pull/15352](https://togithub.com/langchain-ai/langchain/pull/15352)
- Docs: add param comment for `tracing_v2_enabled` by
[@&#8203;chyroc](https://togithub.com/chyroc) in
[https://github.com/langchain-ai/langchain/pull/15308](https://togithub.com/langchain-ai/langchain/pull/15308)
- Documentation: Update playwright documentation for langchain version
>= 0.0.351 by [@&#8203;abhishek9909](https://togithub.com/abhishek9909)
in
[https://github.com/langchain-ai/langchain/pull/15260](https://togithub.com/langchain-ai/langchain/pull/15260)
- fix(minor): added missing \*\*kwargs parameter to chroma query
function by [@&#8203;joel-teratis](https://togithub.com/joel-teratis) in
[https://github.com/langchain-ai/langchain/pull/14919](https://togithub.com/langchain-ai/langchain/pull/14919)
- feat: mask api_key for konko by
[@&#8203;chyroc](https://togithub.com/chyroc) in
[https://github.com/langchain-ai/langchain/pull/14010](https://togithub.com/langchain-ai/langchain/pull/14010)
- Add missing comment char "#" before Load in chain.py for the
rag-pinecone-rerank template by
[@&#8203;samuelpath](https://togithub.com/samuelpath) in
[https://github.com/langchain-ai/langchain/pull/15209](https://togithub.com/langchain-ai/langchain/pull/15209)
- ci: upgrade actions by
[@&#8203;purificant](https://togithub.com/purificant) in
[https://github.com/langchain-ai/langchain/pull/15114](https://togithub.com/langchain-ai/langchain/pull/15114)
- community:Lazy load wikipedia dump file by
[@&#8203;cjaniake](https://togithub.com/cjaniake) in
[https://github.com/langchain-ai/langchain/pull/15111](https://togithub.com/langchain-ai/langchain/pull/15111)
- docs: updated document for 'Return Source Documents' Functionality by
[@&#8203;cyai](https://togithub.com/cyai) in
[https://github.com/langchain-ai/langchain/pull/15106](https://togithub.com/langchain-ai/langchain/pull/15106)
- fix: call correct stream method in ollama by
[@&#8203;David-Kristek](https://togithub.com/David-Kristek) in
[https://github.com/langchain-ai/langchain/pull/15104](https://togithub.com/langchain-ai/langchain/pull/15104)
- Langchain: Fix typo in documentation by
[@&#8203;GauravWaghmare](https://togithub.com/GauravWaghmare) in
[https://github.com/langchain-ai/langchain/pull/15124](https://togithub.com/langchain-ai/langchain/pull/15124)
- Update LLaMA2\_sql_chat.ipynb by
[@&#8203;naveentnj](https://togithub.com/naveentnj) in
[https://github.com/langchain-ai/langchain/pull/15379](https://togithub.com/langchain-ai/langchain/pull/15379)
- \[docs] update toolkit docs by
[@&#8203;hwchase17](https://togithub.com/hwchase17) in
[https://github.com/langchain-ai/langchain/pull/15294](https://togithub.com/langchain-ai/langchain/pull/15294)
- Feat add volcano embedding by
[@&#8203;lujingxuansc](https://togithub.com/lujingxuansc) in
[https://github.com/langchain-ai/langchain/pull/14693](https://togithub.com/langchain-ai/langchain/pull/14693)
- community: Integration of New Chat Model Based on ChatGLM3 via ZhipuAI
API by [@&#8203;linancn](https://togithub.com/linancn) in
[https://github.com/langchain-ai/langchain/pull/15105](https://togithub.com/langchain-ai/langchain/pull/15105)
- Refactor: use SecretStr for GPTRouter chat-model by
[@&#8203;chyroc](https://togithub.com/chyroc) in
[https://github.com/langchain-ai/langchain/pull/15101](https://togithub.com/langchain-ai/langchain/pull/15101)
- Refactor: use SecretStr for palm chat-model by
[@&#8203;chyroc](https://togithub.com/chyroc) in
[https://github.com/langchain-ai/langchain/pull/15100](https://togithub.com/langchain-ai/langchain/pull/15100)
- Refactor: use SecretStr for edenai embeddings by
[@&#8203;chyroc](https://togithub.com/chyroc) in
[https://github.com/langchain-ai/langchain/pull/15092](https://togithub.com/langchain-ai/langchain/pull/15092)
- Refactor: use SecretStr for embaas embeddings by
[@&#8203;chyroc](https://togithub.com/chyroc) in
[https://github.com/langchain-ai/langchain/pull/15091](https://togithub.com/langchain-ai/langchain/pull/15091)
- Refactor: use SecretStr for llm_rails embeddings by
[@&#8203;chyroc](https://togithub.com/chyroc) in
[https://github.com/langchain-ai/langchain/pull/15090](https://togithub.com/langchain-ai/langchain/pull/15090)
- Update regex in output parser by
[@&#8203;sharrajesh](https://togithub.com/sharrajesh) in
[https://github.com/langchain-ai/langchain/pull/15082](https://togithub.com/langchain-ai/langchain/pull/15082)
- Added more filtering options to pgvector vectorstore by
[@&#8203;savoiepe](https://togithub.com/savoiepe) in
[https://github.com/langchain-ai/langchain/pull/14852](https://togithub.com/langchain-ai/langchain/pull/14852)
- Restore self message sent before OSX 12 Monterey by
[@&#8203;idvorkin](https://togithub.com/idvorkin) in
[https://github.com/langchain-ai/langchain/pull/14818](https://togithub.com/langchain-ai/langchain/pull/14818)
- docs `microsoft` pages sort order fix by
[@&#8203;leo-gan](https://togithub.com/leo-gan) in
[https://github.com/langchain-ai/langchain/pull/14771](https://togithub.com/langchain-ai/langchain/pull/14771)
- Add AstraDB document loader by
[@&#8203;cbornet](https://togithub.com/cbornet) in
[https://github.com/langchain-ai/langchain/pull/14747](https://togithub.com/langchain-ai/langchain/pull/14747)
- Added: docs Headers to Steam Tool notebook steps by
[@&#8203;muntaqamahmood](https://togithub.com/muntaqamahmood) in
[https://github.com/langchain-ai/langchain/pull/14749](https://togithub.com/langchain-ai/langchain/pull/14749)
- python-lint by
[@&#8203;joshuasundance-swca](https://togithub.com/joshuasundance-swca)
in
[https://github.com/langchain-ai/langchain/pull/14689](https://togithub.com/langchain-ai/langchain/pull/14689)
- Update \_retrieve_ref inside json_schema.py to include an isdigit()
check by [@&#8203;pareshchiramel](https://togithub.com/pareshchiramel)
in
[https://github.com/langchain-ai/langchain/pull/14745](https://togithub.com/langchain-ai/langchain/pull/14745)
- fix: syntax error in function docs by
[@&#8203;Undertone0809](https://togithub.com/Undertone0809) in
[https://github.com/langchain-ai/langchain/pull/14641](https://togithub.com/langchain-ai/langchain/pull/14641)
- Enhancement on feature/yaml output parser by
[@&#8203;TomTom101](https://togithub.com/TomTom101) in
[https://github.com/langchain-ai/langchain/pull/14674](https://togithub.com/langchain-ai/langchain/pull/14674)
- Fixing the Issue with DashScopeEmbeddings Handling More than 25 Rows
of Data by [@&#8203;xu-xiang](https://togithub.com/xu-xiang) in
[https://github.com/langchain-ai/langchain/pull/14662](https://togithub.com/langchain-ai/langchain/pull/14662)
- Fix for openai multi tools input format. by
[@&#8203;themrzmaster](https://togithub.com/themrzmaster) in
[https://github.com/langchain-ai/langchain/pull/14653](https://togithub.com/langchain-ai/langchain/pull/14653)
- add api_base to \_client_params (community version of
[#&#8203;14393](https://togithub.com/langchain-ai/langchain/issues/14393))
by [@&#8203;DavidLMS](https://togithub.com/DavidLMS) in
[https://github.com/langchain-ai/langchain/pull/14644](https://togithub.com/langchain-ai/langchain/pull/14644)
- GITLAB_URL should take default https://gitlab.com instead of error by
[@&#8203;manjunathshiva](https://togithub.com/manjunathshiva) in
[https://github.com/langchain-ai/langchain/pull/14638](https://togithub.com/langchain-ai/langchain/pull/14638)
- WatsonxLLM updates/enhancements by
[@&#8203;MateuszOssGit](https://togithub.com/MateuszOssGit) in
[https://github.com/langchain-ai/langchain/pull/14598](https://togithub.com/langchain-ai/langchain/pull/14598)
- Langchain_community: Small Fix when loading facebook messages by
[@&#8203;keenborder786](https://togithub.com/keenborder786) in
[https://github.com/langchain-ai/langchain/pull/15358](https://togithub.com/langchain-ai/langchain/pull/15358)
- Update `gpt4all.mdx` doc by [@&#8203;169](https://togithub.com/169) in
[https://github.com/langchain-ai/langchain/pull/15392](https://togithub.com/langchain-ai/langchain/pull/15392)
- infra: remove path filter on check_diffs by
[@&#8203;efriis](https://togithub.com/efriis) in
[https://github.com/langchain-ai/langchain/pull/15418](https://togithub.com/langchain-ai/langchain/pull/15418)
- Calculate trace_id and dotted_order client side by
[@&#8203;agola11](https://togithub.com/agola11) in
[https://github.com/langchain-ai/langchain/pull/15351](https://togithub.com/langchain-ai/langchain/pull/15351)
- docs: fix agents index links by
[@&#8203;baskaryan](https://togithub.com/baskaryan) in
[https://github.com/langchain-ai/langchain/pull/15419](https://togithub.com/langchain-ai/langchain/pull/15419)
- docs: fix modelio index links by
[@&#8203;baskaryan](https://togithub.com/baskaryan) in
[https://github.com/langchain-ai/langchain/pull/15421](https://togithub.com/langchain-ai/langchain/pull/15421)
- langchain\[patch], experimental\[patch]: replace langchain.schema
imports by [@&#8203;baskaryan](https://togithub.com/baskaryan) in
[https://github.com/langchain-ai/langchain/pull/15410](https://togithub.com/langchain-ai/langchain/pull/15410)
- Fetch runnable config from context var inside runnable lambda and
runnable generator by [@&#8203;nfcampos](https://togithub.com/nfcampos)
in
[https://github.com/langchain-ai/langchain/pull/15334](https://togithub.com/langchain-ai/langchain/pull/15334)
- docs, community\[patch], experimental\[patch], langchain\[patch],
cli\[pa… by [@&#8203;baskaryan](https://togithub.com/baskaryan) in
[https://github.com/langchain-ai/langchain/pull/15412](https://togithub.com/langchain-ai/langchain/pull/15412)
- Use tz-aware utc datetimes in tracer by
[@&#8203;nfcampos](https://togithub.com/nfcampos) in
[https://github.com/langchain-ai/langchain/pull/15187](https://togithub.com/langchain-ai/langchain/pull/15187)
- add get prompts method by
[@&#8203;hwchase17](https://togithub.com/hwchase17) in
[https://github.com/langchain-ai/langchain/pull/15425](https://togithub.com/langchain-ai/langchain/pull/15425)
- docs, experimenta\[patch], langchain\[patch], community\[patch]:
update storage imports by
[@&#8203;baskaryan](https://togithub.com/baskaryan) in
[https://github.com/langchain-ai/langchain/pull/15429](https://togithub.com/langchain-ai/langchain/pull/15429)
- refactor `utils` by [@&#8203;leo-gan](https://togithub.com/leo-gan) in
[https://github.com/langchain-ai/langchain/pull/15432](https://togithub.com/langchain-ai/langchain/pull/15432)
- docs `Microsoft` platform page update by
[@&#8203;leo-gan](https://togithub.com/leo-gan) in
[https://github.com/langchain-ai/langchain/pull/15420](https://togithub.com/langchain-ai/langchain/pull/15420)
- added fix for key error: doc_id by
[@&#8203;suhas-kotaki](https://togithub.com/suhas-kotaki) in
[https://github.com/langchain-ai/langchain/pull/15428](https://togithub.com/langchain-ai/langchain/pull/15428)
- core:adds tests for partial_variables by
[@&#8203;dkajtoch](https://togithub.com/dkajtoch) in
[https://github.com/langchain-ai/langchain/pull/15427](https://togithub.com/langchain-ai/langchain/pull/15427)
- Remove unused `_get_python_repl` by
[@&#8203;169](https://togithub.com/169) in
[https://github.com/langchain-ai/langchain/pull/15389](https://togithub.com/langchain-ai/langchain/pull/15389)
- langchain\[patch], experimental\[patch], docs: update tools imports by
[@&#8203;baskaryan](https://togithub.com/baskaryan) in
[https://github.com/langchain-ai/langchain/pull/15433](https://togithub.com/langchain-ai/langchain/pull/15433)
- Fix: fix Bing Search empty result exception, fix
[#&#8203;15384](https://togithub.com/langchain-ai/langchain/issues/15384)
by [@&#8203;chyroc](https://togithub.com/chyroc) in
[https://github.com/langchain-ai/langchain/pull/15387](https://togithub.com/langchain-ai/langchain/pull/15387)
- SQLDatabase drop the column names in the result. by
[@&#8203;dudub12](https://togithub.com/dudub12) in
[https://github.com/langchain-ai/langchain/pull/15361](https://togithub.com/langchain-ai/langchain/pull/15361)
- Fixed minor type in self_query.ipynb by
[@&#8203;aqibamir](https://togithub.com/aqibamir) in
[https://github.com/langchain-ai/langchain/pull/15196](https://togithub.com/langchain-ai/langchain/pull/15196)
- community: Semanticscholar tool to search 200M+ scientific articles by
[@&#8203;shauryr](https://togithub.com/shauryr) in
[https://github.com/langchain-ai/langchain/pull/15151](https://togithub.com/langchain-ai/langchain/pull/15151)
- Refactor: use SecretStr for tongyi chat-model by
[@&#8203;chyroc](https://togithub.com/chyroc) in
[https://github.com/langchain-ai/langchain/pull/15102](https://togithub.com/langchain-ai/langchain/pull/15102)
- Use args option in jaguar so it takes more options in similarity
search by [@&#8203;fserv](https://togithub.com/fserv) in
[https://github.com/langchain-ai/langchain/pull/15080](https://togithub.com/langchain-ai/langchain/pull/15080)
- feat: add Google BigQueryVectorSearch in vectorstore by
[@&#8203;ashleyxuu](https://togithub.com/ashleyxuu) in
[https://github.com/langchain-ai/langchain/pull/14829](https://togithub.com/langchain-ai/langchain/pull/14829)
- langchain\[patch], docs: update agent toolkit imports by
[@&#8203;baskaryan](https://togithub.com/baskaryan) in
[https://github.com/langchain-ai/langchain/pull/15434](https://togithub.com/langchain-ai/langchain/pull/15434)
- docs: together ai updates by
[@&#8203;efriis](https://togithub.com/efriis) in
[https://github.com/langchain-ai/langchain/pull/15435](https://togithub.com/langchain-ai/langchain/pull/15435)
- Milvus allows to store metadata as json field by
[@&#8203;mokeyish](https://togithub.com/mokeyish) in
[https://github.com/langchain-ai/langchain/pull/14636](https://togithub.com/langchain-ai/langchain/pull/14636)
- Fix failing serpapi response processing for Google Maps API by
[@&#8203;LoopKarma](https://togithub.com/LoopKarma) in
[https://github.com/langchain-ai/langchain/pull/14817](https://togithub.com/langchain-ai/langchain/pull/14817)
- Add the collection_description parameter to Milvus by
[@&#8203;mokeyish](https://togithub.com/mokeyish) in
[https://github.com/langchain-ai/langchain/pull/14524](https://togithub.com/langchain-ai/langchain/pull/14524)
- core: update json output parser by
[@&#8203;apisani1](https://togithub.com/apisani1) in
[https://github.com/langchain-ai/langchain/pull/15079](https://togithub.com/langchain-ai/langchain/pull/15079)
- Support `score_threshold` in SupabaseVectorStore similarity search by
[@&#8203;codehound42](https://togithub.com/codehound42) in
[https://github.com/langchain-ai/langchain/pull/14439](https://togithub.com/langchain-ai/langchain/pull/14439)
- Improvement: Allow passing parameters to the underlying es_client.
Closes:
[#&#8203;14403](https://togithub.com/langchain-ai/langchain/issues/14403)
by [@&#8203;169](https://togithub.com/169) in
[https://github.com/langchain-ai/langchain/pull/14435](https://togithub.com/langchain-ai/langchain/pull/14435)
- adding vectorstore_kwarg attribute to search_similarity function by
[@&#8203;amaleki2](https://togithub.com/amaleki2) in
[https://github.com/langchain-ai/langchain/pull/14604](https://togithub.com/langchain-ai/langchain/pull/14604)
- Fix Bedrock broad error catching by
[@&#8203;JuR-0](https://togithub.com/JuR-0) in
[https://github.com/langchain-ai/langchain/pull/14398](https://togithub.com/langchain-ai/langchain/pull/14398)
- update LanguageModelInput from List to Sequence by
[@&#8203;alan910127](https://togithub.com/alan910127) in
[https://github.com/langchain-ai/langchain/pull/14405](https://togithub.com/langchain-ai/langchain/pull/14405)
- refactor: Qdrant async improvements by
[@&#8203;Anush008](https://togithub.com/Anush008) in
[https://github.com/langchain-ai/langchain/pull/14492](https://togithub.com/langchain-ai/langchain/pull/14492)
- \[Improvement] Evals: Add git info by
[@&#8203;hinthornw](https://togithub.com/hinthornw) in
[https://github.com/langchain-ai/langchain/pull/15446](https://togithub.com/langchain-ai/langchain/pull/15446)
- fixed a dependency duplicate by
[@&#8203;leo-gan](https://togithub.com/leo-gan) in
[https://github.com/langchain-ai/langchain/pull/15444](https://togithub.com/langchain-ai/langchain/pull/15444)
- cleanup getting started by
[@&#8203;hwchase17](https://togithub.com/hwchase17) in
[https://github.com/langchain-ai/langchain/pull/15450](https://togithub.com/langchain-ai/langchain/pull/15450)
- feat: new integration `wasm_chat` by
[@&#8203;apepkuss](https://togithub.com/apepkuss) in
[https://github.com/langchain-ai/langchain/pull/14787](https://togithub.com/langchain-ai/langchain/pull/14787)
- Add option to preserve headers in MarkdownHeaderTextSplitter by
[@&#8203;finnless](https://togithub.com/finnless) in
[https://github.com/langchain-ai/langchain/pull/14433](https://togithub.com/langchain-ai/langchain/pull/14433)
- Fix `llms.Mlflow` example by
[@&#8203;harupy](https://togithub.com/harupy) in
[https://github.com/langchain-ai/langchain/pull/14386](https://togithub.com/langchain-ai/langchain/pull/14386)
- Patch: improve type hint by
[@&#8203;chyroc](https://togithub.com/chyroc) in
[https://github.com/langchain-ai/langchain/pull/15451](https://togithub.com/langchain-ai/langchain/pull/15451)
- Remove unused `Params` by
[@&#8203;harupy](https://togithub.com/harupy) in
[https://github.com/langchain-ai/langchain/pull/14385](https://togithub.com/langchain-ai/langchain/pull/14385)
- langchain\[patch], experimental\[patch]: update utilities imports by
[@&#8203;baskaryan](https://togithub.com/baskaryan) in
[https://github.com/langchain-ai/langchain/pull/15438](https://togithub.com/langchain-ai/langchain/pull/15438)
- core\[patch]: Release 0.1.5 by
[@&#8203;baskaryan](https://togithub.com/baskaryan) in
[https://github.com/langchain-ai/langchain/pull/15480](https://togithub.com/langchain-ai/langchain/pull/15480)
- infra: add minimum deps pre release check by
[@&#8203;baskaryan](https://togithub.com/baskaryan) in
[https://github.com/langchain-ai/langchain/pull/15485](https://togithub.com/langchain-ai/langchain/pull/15485)
- community\[patch]: Release 0.0.8 by
[@&#8203;baskaryan](https://togithub.com/baskaryan) in
[https://github.com/langchain-ai/langchain/pull/15481](https://togithub.com/langchain-ai/langchain/pull/15481)
- infra: fix min deps test by
[@&#8203;baskaryan](https://togithub.com/baskaryan) in
[https://github.com/langchain-ai/langchain/pull/15486](https://togithub.com/langchain-ai/langchain/pull/15486)
- community\[patch]: bump core version >=0.1.5,<0.2 by
[@&#8203;baskaryan](https://togithub.com/baskaryan) in
[https://github.com/langchain-ai/langchain/pull/15488](https://togithub.com/langchain-ai/langchain/pull/15488)
- infra: update community test min reqs by
[@&#8203;baskaryan](https://togithub.com/baskaryan) in
[https://github.com/langchain-ai/langchain/pull/15490](https://togithub.com/langchain-ai/langchain/pull/15490)
- langchain\[patch]: Release 0.0.354 by
[@&#8203;baskaryan](https://togithub.com/baskaryan) in
[https://github.com/langchain-ai/langchain/pull/15482](https://togithub.com/langchain-ai/langchain/pull/15482)
- langchain\[patch]: bump community >=0.0.8,<0.1 by
[@&#8203;baskaryan](https://togithub.com/baskaryan) in
[https://github.com/langchain-ai/langchain/pull/15492](https://togithub.com/langchain-ai/langchain/pull/15492)

#### New Contributors

- [@&#8203;Tchotchke](https://togithub.com/Tchotchke) made their first
contribution in
[https://github.com/langchain-ai/langchain/pull/15324](https://togithub.com/langchain-ai/langchain/pull/15324)
- [@&#8203;romainfd](https://togithub.com/romainfd) made their first
contribution in
[https://github.com/langchain-ai/langchain/pull/15321](https://togithub.com/langchain-ai/langchain/pull/15321)
- [@&#8203;liushuaikobe](https://togithub.com/liushuaikobe) made their
first contribution in
[https://github.com/langchain-ai/langchain/pull/14793](https://togithub.com/langchain-ai/langchain/pull/14793)
- [@&#8203;kellyelton](https://togithub.com/kellyelton) made their first
contribution in
[https://github.com/langchain-ai/langchain/pull/15275](https://togithub.com/langchain-ai/langchain/pull/15275)
- [@&#8203;piyuple](https://togithub.com/piyuple) made their first
contribution in
[https://github.com/langchain-ai/langchain/pull/15309](https://togithub.com/langchain-ai/langchain/pull/15309)
- [@&#8203;jonnolen](https://togithub.com/jonnolen) made their first
contribution in
[https://github.com/langchain-ai/langchain/pull/15327](https://togithub.com/langchain-ai/langchain/pull/15327)
- [@&#8203;naveentnj](https://togithub.com/naveentnj) made their first
contribution in
[https://github.com/langchain-ai/langchain/pull/15378](https://togithub.com/langchain-ai/langchain/pull/15378)
- [@&#8203;yhzhu99](https://togithub.com/yhzhu99) made their first
contribution in
[https://github.com/langchain-ai/langchain/pull/15380](https://togithub.com/langchain-ai/langchain/pull/15380)
- [@&#8203;donovanmuller](https://togithub.com/donovanmuller) made their
first contribution in
[https://github.com/langchain-ai/langchain/pull/15364](https://togithub.com/langchain-ai/langchain/pull/15364)
- [@&#8203;AhmedHathout](https://togithub.com/AhmedHathout) made their
first contribution in
[https://github.com/langchain-ai/langchain/pull/15352](https://togithub.com/langchain-ai/langchain/pull/15352)
- [@&#8203;abhishek9909](https://togithub.com/abhishek9909) made their
first contribution in
[https://github.com/langchain-ai/langchain/pull/15260](https://togithub.com/langchain-ai/langchain/pull/15260)
- [@&#8203;joel-teratis](https://togithub.com/joel-teratis) made their
first contribution in
[https://github.com/langchain-ai/langchain/pull/14919](https://togithub.com/langchain-ai/langchain/pull/14919)
- [@&#8203;purificant](https://togithub.com/purificant) made their first
contribution in
[https://github.com/langchain-ai/langchain/pull/15114](https://togithub.com/langchain-ai/langchain/pull/15114)
- [@&#8203;cjaniake](https://togithub.com/cjaniake) made their first
contribution in
[https://github.com/langchain-ai/langchain/pull/15111](https://togithub.com/langchain-ai/langchain/pull/15111)
- [@&#8203;David-Kristek](https://togithub.com/David-Kristek) made their
first contribution in
[https://github.com/langchain-ai/langchain/pull/15104](https://togithub.com/langchain-ai/langchain/pull/15104)
- [@&#8203;GauravWaghmare](https://togithub.com/GauravWaghmare) made
their first contribution in
[https://github.com/langchain-ai/langchain/pull/15124](https://togithub.com/langchain-ai/langchain/pull/15124)
- [@&#8203;sharrajesh](https://togithub.com/sharrajesh) made their first
contribution in
[https://github.com/langchain-ai/langchain/pull/15082](https://togithub.com/langchain-ai/langchain/pull/15082)
- [@&#8203;savoiepe](https://togithub.com/savoiepe) made their first
contribution in
[https://github.com/langchain-ai/langchain/pull/14852](https://togithub.com/langchain-ai/langchain/pull/14852)
- [@&#8203;pareshchiramel](https://togithub.com/pareshchiramel) made
their first contribution in
[https://github.com/langchain-ai/langchain/pull/14745](https://togithub.com/langchain-ai/langchain/pull/14745)
- [@&#8203;xu-xiang](https://togithub.com/xu-xiang) made their first
contribution in
[https://github.com/langchain-ai/langchain/pull/14662](https://togithub.com/langchain-ai/langchain/pull/14662)
- [@&#8203;themrzmaster](https://togithub.com/themrzmaster) made their
first contribution in
[https://github.com/langchain-ai/langchain/pull/14653](https://togithub.com/langchain-ai/langchain/pull/14653)
- [@&#8203;DavidLMS](https://togithub.com/DavidLMS) made their first
contribution in
[https://github.com/langchain-ai/langchain/pull/14644](https://togithub.com/langchain-ai/langchain/pull/14644)
- [@&#8203;manjunathshiva](https://togithub.com/manjunathshiva) made
their first contribution in
[https://github.com/langchain-ai/langchain/pull/14638](https://togithub.com/langchain-ai/langchain/pull/14638)
- [@&#8203;suhas-kotaki](https://togithub.com/suhas-kotaki) made their
first contribution in
[https://github.com/langchain-ai/langchain/pull/15428](https://togithub.com/langchain-ai/langchain/pull/15428)
- [@&#8203;dkajtoch](https://togithub.com/dkajtoch) made their first
contribution in
[https://github.com/langchain-ai/langchain/pull/15427](https://togithub.com/langchain-ai/langchain/pull/15427)
- [@&#8203;aqibamir](https://togithub.com/aqibamir) made their first
contribution in
[https://github.com/langchain-ai/langchain/pull/15196](https://togithub.com/langchain-ai/langchain/pull/15196)
- [@&#8203;ashleyxuu](https://togithub.com/ashleyxuu) made their first
contribution in
[https://github.com/langchain-ai/langchain/pull/14829](https://togithub.com/langchain-ai/langchain/pull/14829)
- [@&#8203;mokeyish](https://togithub.com/mokeyish) made their first
contribution in
[https://github.com/langchain-ai/langchain/pull/14636](https://togithub.com/langchain-ai/langchain/pull/14636)
- [@&#8203;LoopKarma](https://togithub.com/LoopKarma) made their first
contribution in
[https://github.com/langchain-ai/langchain/pull/14817](https://togithub.com/langchain-ai/langchain/pull/14817)
- [@&#8203;apisani1](https://togithub.com/apisani1) made their first
contribution in
[https://github.com/langchain-ai/langchain/pull/15079](https://togithub.com/langchain-ai/langchain/pull/15079)
- [@&#8203;codehound42](https://togithub.com/codehound42) made their
first contribution in
[https://github.com/langchain-ai/langchain/pull/14439](https://togithub.com/langchain-ai/langchain/pull/14439)
- [@&#8203;amaleki2](https://togithub.com/amaleki2) made their first
contribution in
[https://github.com/langchain-ai/langchain/pull/14604](https://togithub.com/langchain-ai/langchain/pull/14604)
- [@&#8203;JuR-0](https://togithub.com/JuR-0) made their first
contribution in
[https://github.com/langchain-ai/langchain/pull/14398](https://togithub.com/langchain-ai/langchain/pull/14398)
- [@&#8203;alan910127](https://togithub.com/alan910127) made their first
contribution in
[https://github.com/langchain-ai/langchain/pull/14405](https://togithub.com/langchain-ai/langchain/pull/14405)
- [@&#8203;apepkuss](https://togithub.com/apepkuss) made their first
contribution in
[https://github.com/langchain-ai/langchain/pull/14787](https://togithub.com/langchain-ai/langchain/pull/14787)

**Full Changelog**:
https://github.com/langchain-ai/langchain/compare/v0.0.353...v0.0.354

</details>

<details>
<summary>langchain-ai/langchainjs (langchain)</summary>

###
[`v0.1.1`](https://togithub.com/langchain-ai/langchainjs/releases/tag/0.1.1)

[Compare
Source](https://togithub.com/langchain-ai/langchainjs/compare/0.1.0...0.1.1)

#### What's Changed

- langchain\[minor]: Release 0.1.0 by
[@&#8203;jacoblee93](https://togithub.com/jacoblee93) in
[https://github.com/langchain-ai/langchainjs/pull/3933](https://togithub.com/langchain-ai/langchainjs/pull/3933)
- docs\[patch]: Replace imports by
[@&#8203;bracesproul](https://togithub.com/bracesproul) in
[https://github.com/langchain-ai/langchainjs/pull/3931](https://togithub.com/langchain-ai/langchainjs/pull/3931)
- langchain\[patch]: Fix lint by
[@&#8203;jacoblee93](https://togithub.com/jacoblee93) in
[https://github.com/langchain-ai/langchainjs/pull/3936](https://togithub.com/langchain-ai/langchainjs/pull/3936)
- langchain\[patch]\[tests]: Added tests for new create agent functions
by [@&#8203;bracesproul](https://togithub.com/bracesproul) in
[https://github.com/langchain-ai/langchainjs/pull/3930](https://togithub.com/langchain-ai/langchainjs/pull/3930)
- core\[patch]: Narrow iterable readable stream typing by
[@&#8203;jacoblee93](https://togithub.com/jacoblee93) in
[https://github.com/langchain-ai/langchainjs/pull/3938](https://togithub.com/langchain-ai/langchainjs/pull/3938)
- docs\[patch]: Fix features having strikethrough when not deprecated by
[@&#8203;bracesproul](https://togithub.com/bracesproul) in
[https://github.com/langchain-ai/langchainjs/pull/3940](https://togithub.com/langchain-ai/langchainjs/pull/3940)
- langchain\[minor]: Adds create runnable chain functions by
[@&#8203;bracesproul](https://togithub.com/bracesproul) in
[https://github.com/langchain-ai/langchainjs/pull/3928](https://togithub.com/langchain-ai/langchainjs/pull/3928)

**Full Changelog**:
https://github.com/langchain-ai/langchainjs/compare/0.1.0...0.1.1

###
[`v0.1.0`](https://togithub.com/langchain-ai/langchainjs/releases/tag/0.1.0)

[Compare
Source](https://togithub.com/langchain-ai/langchainjs/compare/0.0.214...0.1.0)

##### What's Changed

- langchain\[patch]: Release 0.0.214 by
[@&#8203;jacoblee93](https://togithub.com/jacoblee93) in
[https://github.com/langchain-ai/langchainjs/pull/3876](https://togithub.com/langchain-ai/langchainjs/pull/3876)
- core\[patch]: Release 0.1.7 by
[@&#8203;jacoblee93](https://togithub.com/jacoblee93) in
[https://github.com/langchain-ai/langchainjs/pull/3877](https://togithub.com/langchain-ai/langchainjs/pull/3877)
- docs\[patch]: Update imports in docs by
[@&#8203;jacoblee93](https://togithub.com/jacoblee93) in
[https://github.com/langchain-ai/langchainjs/pull/3878](https://togithub.com/langchain-ai/langchainjs/pull/3878)
- core\[patch]: Add token usage interface to core by
[@&#8203;bracesproul](https://togithub.com/bracesproul) in
[https://github.com/langchain-ai/langchainjs/pull/3871](https://togithub.com/langchain-ai/langchainjs/pull/3871)
- ci\[patch]: Adds initial dependency range test, move tests by
[@&#8203;jacoblee93](https://togithub.com/jacoblee93) in
[https://github.com/langchain-ai/langchainjs/pull/3887](https://togithub.com/langchain-ai/langchainjs/pull/3887)
- docs\[patch]: update llm quickstart section heading by
[@&#8203;medic-code](https://togithub.com/medic-code) in
[https://github.com/langchain-ai/langchainjs/pull/3889](https://togithub.com/langchain-ai/langchainjs/pull/3889)
- community\[patch]: Move all tests to community by
[@&#8203;jacoblee93](https://togithub.com/jacoblee93) in
[https://github.com/langchain-ai/langchainjs/pull/3893](https://togithub.com/langchain-ai/langchainjs/pull/3893)
- docs\[patch]: Replace lc proper OpenAI imports with
[@&#8203;langchain/openai](https://togithub.com/langchain/openai) by
[@&#8203;bracesproul](https://togithub.com/bracesproul) in
[https://github.com/langchain-ai/langchainjs/pull/3886](https://togithub.com/langchain-ai/langchainjs/pull/3886)
- docs\[patch]: Add storage docs by
[@&#8203;bracesproul](https://togithub.com/bracesproul) in
[https://github.com/langchain-ai/langchainjs/pull/3870](https://togithub.com/langchain-ai/langchainjs/pull/3870)
- Jacob/connery update by
[@&#8203;jacoblee93](https://togithub.com/jacoblee93) in
[https://github.com/langchain-ai/langchainjs/pull/3896](https://togithub.com/langchain-ai/langchainjs/pull/3896)
- Jacob/llmonitor to lunary by
[@&#8203;jacoblee93](https://togithub.com/jacoblee93) in
[https://github.com/langchain-ai/langchainjs/pull/3895](https://togithub.com/langchain-ai/langchainjs/pull/3895)
- community\[patch]: Release 0.0.14 by
[@&#8203;jacoblee93](https://togithub.com/jacoblee93) in
[https://github.com/langchain-ai/langchainjs/pull/3899](https://togithub.com/langchain-ai/langchainjs/pull/3899)
- Update embedQuery to use inputType by
[@&#8203;EricThompson-PeopleReign](https://togithub.com/EricThompson-PeopleReign)
in
[https://github.com/langchain-ai/langchainjs/pull/3901](https://togithub.com/langchain-ai/langchainjs/pull/3901)
- cohere\[patch]: Fix Cohere release command by
[@&#8203;jacoblee93](https://togithub.com/jacoblee93) in
[https://github.com/langchain-ai/langchainjs/pull/3902](https://togithub.com/langchain-ai/langchainjs/pull/3902)
- cohere\[patch]: Release 0.0.2 by
[@&#8203;jacoblee93](https://togithub.com/jacoblee93) in
[https://github.com/langchain-ai/langchainjs/pull/3904](https://togithub.com/langchain-ai/langchainjs/pull/3904)
- template\[patch]: Add passWithNoTests to template jest config by
[@&#8203;bracesproul](https://togithub.com/bracesproul) in
[https://github.com/langchain-ai/langchainjs/pull/3903](https://togithub.com/langchain-ai/langchainjs/pull/3903)
- template\[patch]: Bump create-langchain-integration by
[@&#8203;jacoblee93](https://togithub.com/jacoblee93) in
[https://github.com/langchain-ai/langchainjs/pull/3905](https://togithub.com/langchain-ai/langchainjs/pull/3905)
- docs\[patch]: Update examples imports to use core by
[@&#8203;bracesproul](https://togithub.com/bracesproul) in
[https://github.com/langchain-ai/langchainjs/pull/3898](https://togithub.com/langchain-ai/langchainjs/pull/3898)
- ci\[minor]: Add lowest dependency range CI check by
[@&#8203;jacoblee93](https://togithub.com/jacoblee93) in
[https://github.com/langchain-ai/langchainjs/pull/3906](https://togithub.com/langchain-ai/langchainjs/pull/3906)
- community\[patch]: Add external dep to tree shaking list by
[@&#8203;jacoblee93](https://togithub.com/jacoblee93) in
[https://github.com/langchain-ai/langchainjs/pull/3911](https://togithub.com/langchain-ai/langchainjs/pull/3911)
- core\[patch]: Readd core entrypoint by
[@&#8203;jacoblee93](https://togithub.com/jacoblee93) in
[https://github.com/langchain-ai/langchainjs/pull/3912](https://togithub.com/langchain-ai/langchainjs/pull/3912)
- langchain\[patch]: Test housekeeping by
[@&#8203;jacoblee93](https://togithub.com/jacoblee93) in
[https://github.com/langchain-ai/langchainjs/pull/3913](https://togithub.com/langchain-ai/langchainjs/pull/3913)
- core\[patch]: Add generics to `RunnablePassthrough.assign` by
[@&#8203;zirkelc](https://togithub.com/zirkelc) in
[https://github.com/langchain-ai/langchainjs/pull/3844](https://togithub.com/langchain-ai/langchainjs/pull/3844)
- core\[patch]: Release 0.1.8 by
[@&#8203;jacoblee93](https://togithub.com/jacoblee93) in
[https://github.com/langchain-ai/langchainjs/pull/3914](https://togithub.com/langchain-ai/langchainjs/pull/3914)
- docs\[patch]: Update anthropic imports to use anthropic package by
[@&#8203;bracesproul](https://togithub.com/bracesproul) in
[https://github.com/langchain-ai/langchainjs/pull/3915](https://togithub.com/langchain-ai/langchainjs/pull/3915)
- docs\[patch]: Add more distinct deprecation warning in api refs by
[@&#8203;bracesproul](https://togithub.com/bracesproul) in
[https://github.com/langchain-ai/langchainjs/pull/3926](https://togithub.com/langchain-ai/langchainjs/pull/3926)
- langchain\[minor], core\[patch]: 0.1.0 by
[@&#8203;jacoblee93](https://togithub.com/jacoblee93) in
[https://github.com/langchain-ai/langchainjs/pull/3861](https://togithub.com/langchain-ai/langchainjs/pull/3861)

##### New Contributors

- [@&#8203;medic-code](https://togithub.com/medic-code) made their first
contribution in
[https://github.com/langchain-ai/langchainjs/pull/3889](https://togithub.com/langchain-ai/langchainjs/pull/3889)
-
[@&#8203;EricThompson-PeopleReign](https://togithub.com/EricThompson-PeopleReign)
made their first contribution in
[https://github.com/langchain-ai/langchainjs/pull/3901](https://togithub.com/langchain-ai/langchainjs/pull/3901)
- [@&#8203;zirkelc](https://togithub.com/zirkelc) made their first
contribution in
[https://github.com/langchain-ai/langchainjs/pull/3844](https://togithub.com/langchain-ai/langchainjs/pull/3844)

**Full Changelog**:
https://github.com/langchain-ai/langchainjs/compare/0.0.214...0.1.0

###
[`v0.0.214`](https://togithub.com/langchain-ai/langchainjs/releases/tag/0.0.214)

[Compare
Source](https://togithub.com/langchain-ai/langchainjs/compare/0.0.213...0.0.214)

##### What's Changed

- docs\[minor]: Revamp model io docs by
[@&#8203;nfcampos](https://togithub.com/nfcampos) in
[https://github.com/langchain-ai/langchainjs/pull/3815](https://togithub.com/langchain-ai/langchainjs/pull/3815)
- docs\[patch]: Add CMD + K shortcut to API refs by
[@&#8203;bracesproul](https://togithub.com/bracesproul) in
[https://github.com/langchain-ai/langchainjs/pull/3832](https://togithub.com/langchain-ai/langchainjs/pull/3832)
- cohere\[major]:
[@&#8203;langchain/cohere](https://togithub.com/langchain/cohere) init
by [@&#8203;bracesproul](https://togithub.com/bracesproul) in
[https://github.com/langchain-ai/langchainjs/pull/3762](https://togithub.com/langchain-ai/langchainjs/pull/3762)
- docs\[patch]: module customization and prompt hub links by
[@&#8203;jacoblee93](https://togithub.com/jacoblee93) in
[https://github.com/langchain-ai/langchainjs/pull/3833](https://togithub.com/langchain-ai/langchainjs/pull/3833)
- core\[patch]: Fix tracing order for transform streaming runnables by
[@&#8203;jacoblee93](https://togithub.com/jacoblee93) in
[https://github.com/langchain-ai/langchainjs/pull/3835](https://togithub.com/langchain-ai/langchainjs/pull/3835)
- core\[patch]: Release 0.1.6 by
[@&#8203;jacoblee93](https://togithub.com/jacoblee93) in
[https://github.com/langchain-ai/langchainjs/pull/3838](https://togithub.com/langchain-ai/langchainjs/pull/3838)
- Return run manager arg to not being a promise by
[@&#8203;nfcampos](https://togithub.com/nfcampos) in
[https://github.com/langchain-ai/langchainjs/pull/3839](https://togithub.com/langchain-ai/langchainjs/pull/3839)
- fix(doc): Sidebar how_to (tools) by
[@&#8203;gkhngyk](https://togithub.com/gkhngyk) in
[https://github.com/langchain-ai/langchainjs/pull/3843](https://togithub.com/langchain-ai/langchainjs/pull/3843)
- docs\[patch]: relevant example for map reduce by
[@&#8203;anass-arrhioui-nw](https://togithub.com/anass-arrhioui-nw) in
[https://github.com/langchain-ai/langchainjs/pull/3842](https://togithub.com/langchain-ai/langchainjs/pull/3842)
- fix: textFieldMaxLength parameter missing by
[@&#8203;CoalYa](https://togithub.com/CoalYa) in
[https://github.com/langchain-ai/langchainjs/pull/3846](https://togithub.com/langchain-ai/langchainjs/pull/3846)
- feat: add formatMessages types & prompt test by
[@&#8203;gkhngyk](https://togithub.com/gkhngyk) in
[https://github.com/langchain-ai/langchainjs/pull/3820](https://togithub.com/langchain-ai/langchainjs/pull/3820)
- docs\[patch]: Use component for integration install instructions by
[@&#8203;jacoblee93](https://togithub.com/jacoblee93) in
[https://github.com/langchain-ai/langchainjs/pull/3859](https://togithub.com/langchain-ai/langchainjs/pull/3859)
- langchain\[patch]: Adds entrypoint deprecation log method by
[@&#8203;jacoblee93](https://togithub.com/jacoblee93) in
[https://github.com/langchain-ai/langchainjs/pull/3860](https://togithub.com/langchain-ai/langchainjs/pull/3860)
- Todo: propagate error in Neo4jGraph by
[@&#8203;tomasonjo](https://togithub.com/tomasonjo) in
[https://github.com/langchain-ai/langchainjs/pull/3855](https://togithub.com/langchain-ai/langchainjs/pull/3855)
- google-genai: fix streaming via callback handlers for
ChatGoogleGenerativeAI by
[@&#8203;StreetLamb](https://togithub.com/StreetLamb) in
[https://github.com/langchain-ai/langchainjs/pull/3834](https://togithub.com/langchain-ai/langchainjs/pull/3834)
-   google-genai\[patch]: Release 0.0.7 by [@&#8203;jacoblee93](https:

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on Monday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/autoblocksai/autoblocks-examples).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xMjEuMCIsInVwZGF0ZWRJblZlciI6IjM3LjEyMS4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@eyurtsev eyurtsev changed the title core[patch]: Further restrict recursive URL loader core[patch]: Further restrict recursive URL loader (CVE-2024-0243) Mar 13, 2024
@eyurtsev
Copy link
Collaborator Author

Fix for CVE: CVE-2024-0243

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
🤖:bug Related to a bug, vulnerability, unexpected error with an existing feature Ɑ: doc loader Related to document loader module (not documentation) lgtm PR looks good. Use to confirm that a PR is ready for merging. size:M This PR changes 30-99 lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants