[Snyk] Upgrade langchain from 1.2.24 to 1.5.2

[CMiville42]

Snyk has created this PR to upgrade langchain from 1.2.24 to 1.5.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 68 versions ahead of your current version.

• The recommended version was released a month ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Interpretation Conflict SNYK-JS-FASTURI-18021349	49	No Known Exploit
	Directory Traversal SNYK-JS-HONONODESERVER-18170326	49	No Known Exploit
	Deserialization of Untrusted Data SNYK-JS-LANGSMITH-16658749	49	No Known Exploit
	Improper Check for Unusual or Exceptional Conditions SNYK-JS-PROTOBUFJSCODEGEN-16643292	49	No Known Exploit
	Allocation of Resources Without Limits or Throttling SNYK-JS-BODYPARSER-17906397	49	No Known Exploit
	Prototype Pollution SNYK-JS-LANGSMITH-15969264	49	Proof of Concept
	Improper Validation of Specified Index, Position, or Offset in Input SNYK-JS-UUID-16133035	49	Proof of Concept
	Insertion of Sensitive Information into Log File SNYK-JS-LANGSMITH-16082039	49	No Known Exploit

Breaking Change Risk

Notice: This assessment is enhanced by AI.

Release notes

Package name: langchain

• 1.5.2 - 2026-06-23
  

  Patch Changes

  • #11255 c8bd4c4 Thanks @ hntrl! - feat(anthropic): add claude-opus-5 support
• 1.5.1 - 2026-06-22
• 1.5.1-dev-1781824996270 - 2026-06-18
• 1.5.0 - 2026-06-18
• 1.4.6 - 2026-06-17
• 1.4.6-dev-1781497519109 - 2026-06-15
• 1.4.6-dev-1781485641139 - 2026-06-15
• 1.4.5 - 2026-06-12
  

  Patch Changes

  • Updated dependencies [a9f123a, 09e7f6d]:
    • @ langchain/openai@1.5.5
• 1.4.5-dev-1781048185730 - 2026-06-09
• 1.4.5-dev-1781044436312 - 2026-06-09
• 1.4.4 - 2026-06-01
  

  Patch Changes

  • Updated dependencies [988ca7d]:
    • @ langchain/openai@1.5.4
• 1.4.2 - 2026-05-21
• 1.4.1 - 2026-05-18
• 1.4.0 - 2026-05-05
• 1.4.0-dev-1777615538778 - 2026-05-01
• 1.4.0-dev-1777614121244 - 2026-05-01
• 1.4.0-dev-1777590051413 - 2026-04-30
• 1.4.0-dev-1777587649451 - 2026-04-30
• 1.4.0-dev-1777581929346 - 2026-04-30
• 1.4.0-dev-1777576880340 - 2026-04-30
• 1.4.0-dev-1777434736305 - 2026-04-29
• 1.4.0-dev-1777426124745 - 2026-04-29
• 1.4.0-dev-1777322538999 - 2026-04-27
• 1.4.0-dev-1777129500398 - 2026-04-25
• 1.4.0-dev-1777128506086 - 2026-04-25
• 1.4.0-dev-1777073688723 - 2026-04-24
• 1.4.0-dev-1777073198653 - 2026-04-24
• 1.4.0-dev-1776832091014 - 2026-04-22
• 1.4.0-dev-1776805421926 - 2026-04-21
• 1.4.0-dev-1776378339387 - 2026-04-16
• 1.4.0-dev-1776142825946 - 2026-04-14
• 1.4.0-dev-1776142183904 - 2026-04-14
• 1.4.0-dev-1776140265950 - 2026-04-14
• 1.4.0-dev-1776132989638 - 2026-04-14
• 1.3.5 - 2026-04-27
• 1.3.4 - 2026-04-22
• 1.3.3 - 2026-04-15
• 1.3.2 - 2026-04-13
• 1.3.1 - 2026-04-07
• 1.3.0 - 2026-04-03
• 1.3.0-dev-1775244116634 - 2026-04-03
• 1.3.0-dev-1773962633795 - 2026-03-19
• 1.2.39 - 2026-03-31
• 1.2.38 - 2026-03-30
• 1.2.37 - 2026-03-24
• 1.2.36 - 2026-03-22
• 1.2.35 - 2026-03-18
• 1.2.34 - 2026-03-17
• 1.2.33 - 2026-03-17
• 1.2.33-dev-1773786580575 - 2026-03-17
• 1.2.33-dev-1773785150055 - 2026-03-17
• 1.2.33-dev-1773776071697 - 2026-03-17
• 1.2.33-dev-1773712098100 - 2026-03-17
• 1.2.33-dev-1773710628974 - 2026-03-17
• 1.2.33-dev-1773709997654 - 2026-03-17
• 1.2.33-dev-1773698445534 - 2026-03-16
• 1.2.32 - 2026-03-12
• 1.2.32-dev-1773350943759 - 2026-03-12
• 1.2.32-dev-1773348967855 - 2026-03-12
• 1.2.31 - 2026-03-11
• 1.2.31-dev-1773345797648 - 2026-03-12
• 1.2.30 - 2026-03-05
• 1.2.29 - 2026-03-03
• 1.2.28 - 2026-02-26
• 1.2.27 - 2026-02-24
• 1.2.26 - 2026-02-23
• 1.2.25 - 2026-02-18
• 1.2.25-dev-1771375941312 - 2026-02-18
• 1.2.24 - 2026-02-13

from langchain GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[CMiville42]

This is a minor version upgrade. According to LangChain's official versioning policy, minor releases in the 1.x series should not contain breaking API changes. However, the official changelog and the library's rapid development pace indicate some changes that may require developer attention.

Potential Breaking Changes & Key Updates:

• Google GenAI Integration: The integration with Google's Generative AI SDK has been rewritten. This is cited as having "minimal breaking changes" and involves deprecated packages in langchain-google-vertexai. If you use this integration, you must consult the release notes and migration guide for details. [1]
• Deep Agents: For users of deepagents, the ToDoListMiddleware is no longer included by default and must be explicitly added. Some backend compatibility shims have also been removed. [1]
• New Features: The versions include numerous new features, such as multi-modal support in the read_file tool, changes to conversation history summarization, and the introduction of a reasoning_effort parameter in langchain-core. [1, 2]

Recommendation:
While the core APIs are expected to be stable, the changes to specific integrations (like Google GenAI) and features (Deep Agents) introduce a medium risk. It is recommended to review your implementation, especially if you use these components, and test thoroughly after the upgrade.

Source: LangChain Official Changelog [1, 3]

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.