Skip to content

chore(deps): bump the patch-updates group with 8 updates#58

Merged
github-actions[bot] merged 1 commit intomasterfrom
dependabot/npm_and_yarn/master/patch-updates-3d448b052a
Feb 26, 2026
Merged

chore(deps): bump the patch-updates group with 8 updates#58
github-actions[bot] merged 1 commit intomasterfrom
dependabot/npm_and_yarn/master/patch-updates-3d448b052a

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Feb 26, 2026

Bumps the patch-updates group with 8 updates:

Package From To
@huggingface/inference 4.13.12 4.13.13
@langchain/community 1.1.16 1.1.19
@langchain/core 1.1.26 1.1.28
@langchain/groq 1.1.1 1.1.2
@simplewebauthn/server 13.2.2 13.2.3
langchain 1.2.25 1.2.27
mongoose 9.2.1 9.2.2
eslint 10.0.0 10.0.2

Updates @huggingface/inference from 4.13.12 to 4.13.13

Commits

Updates @langchain/community from 1.1.16 to 1.1.19

Release notes

Sourced from @​langchain/community's releases.

@​langchain/community@​1.1.19

Patch Changes

@​langchain/community@​1.1.18

Patch Changes

  • #10108 e7576ee Thanks @​hntrl! - fix: replace retired Anthropic model IDs with active replacements

    • Update default model in ChatAnthropic from claude-3-5-sonnet-latest to claude-sonnet-4-5-20250929
    • Regenerate model profiles with latest data from models.dev API
    • Replace retired claude-3-5-haiku-20241022, claude-3-7-sonnet-20250219, claude-3-5-sonnet-20240620, and claude-3-5-sonnet-20241022 in tests, docstrings, and examples
  • #10116 2812d2b Thanks @​hntrl! - Validate redirects in RecursiveUrlLoader to prevent SSRF bypasses.

  • Updated dependencies []:

    • @​langchain/classic@​1.0.19
Commits
  • a847b97 chore: version packages (#10139)
  • 87a585e fix(langchain): use StateSchema value types in middleware (#10137)
  • 62ba83e fix(openai): emit handleLLMNewToken for usage chunk in Completions API stream...
  • 10a876c fix(core): merge content blocks by string index during streaming (#10140)
  • b46d96a feat: implement aynchronous generator tool calling for streaming partial tool...
  • f71e3ff chore: fix broken lockfile (#10136)
  • 91ba2f1 chore(deps-dev): bump the root-dev-minor-and-patch group across 1 directory w...
  • 032a23e chore(deps-dev): bump fast-xml-parser from 5.3.6 to 5.3.7 (#10107)
  • 7c1ba7e chore(deps): bump @​aws-sdk/credential-provider-node from 3.972.6 to 3.972.10 ...
  • 6100810 chore(deps): bump @​typescript/native-preview from 7.0.0-dev.20260218.1 to 7.0...
  • Additional commits viewable in compare view

Updates @langchain/core from 1.1.26 to 1.1.28

Release notes

Sourced from @​langchain/core's releases.

@​langchain/core@​1.1.28

Patch Changes

Commits
  • a847b97 chore: version packages (#10139)
  • 87a585e fix(langchain): use StateSchema value types in middleware (#10137)
  • 62ba83e fix(openai): emit handleLLMNewToken for usage chunk in Completions API stream...
  • 10a876c fix(core): merge content blocks by string index during streaming (#10140)
  • b46d96a feat: implement aynchronous generator tool calling for streaming partial tool...
  • f71e3ff chore: fix broken lockfile (#10136)
  • 91ba2f1 chore(deps-dev): bump the root-dev-minor-and-patch group across 1 directory w...
  • 032a23e chore(deps-dev): bump fast-xml-parser from 5.3.6 to 5.3.7 (#10107)
  • 7c1ba7e chore(deps): bump @​aws-sdk/credential-provider-node from 3.972.6 to 3.972.10 ...
  • 6100810 chore(deps): bump @​typescript/native-preview from 7.0.0-dev.20260218.1 to 7.0...
  • Additional commits viewable in compare view

Updates @langchain/groq from 1.1.1 to 1.1.2

Commits
  • 8a77e9a chore: version packages (#9491)
  • 38f0162 feat(core,anthropic): tool extras, tool search support (#9531)
  • 42ae02a chore(deps): bump actions/checkout from 5.0.1 to 6.0.0 in the major-deps-upda...
  • 9563a7f chore(mongodb): remove unused testing setup (#9506)
  • 6cecddf fix: pass cwd to mcp sdk correctly (#9514)
  • 6f8fa47 feat(aws): allow bedrock Application Inference Profile (#9129)
  • 8b9f66f fix(community): enable import plugins, remove bad load export (#9501)
  • fa8c36e chore(mongodb): bump mongodb dep (#9502)
  • 636b994 fix(core): use dynamic import for p-retry to support CJS (#9495)
  • 31240d4 feat(community/ibm): enable model gateway usage in IBM implementation, apply ...
  • Additional commits viewable in compare view

Updates @simplewebauthn/server from 13.2.2 to 13.2.3

Release notes

Sourced from @​simplewebauthn/server's releases.

v13.2.3

Changes

  • [server] Dependencies have been updated to fix a "Cannot get schema" error that may occur when verifying responses after upgrading to v13.2.0+ (#747)
Changelog

Sourced from @​simplewebauthn/server's changelog.

v13.2.3

Changes

  • [server] Dependencies have been updated to fix a "Cannot get schema" error that may occur when verifying responses after upgrading to v13.2.0+ (#747)
Commits

Updates langchain from 1.2.25 to 1.2.27

Release notes

Sourced from langchain's releases.

langchain@1.2.27

Patch Changes

langchain@1.2.26

Patch Changes

  • #10108 e7576ee Thanks @​hntrl! - fix: replace retired Anthropic model IDs with active replacements

    • Update default model in ChatAnthropic from claude-3-5-sonnet-latest to claude-sonnet-4-5-20250929
    • Regenerate model profiles with latest data from models.dev API
    • Replace retired claude-3-5-haiku-20241022, claude-3-7-sonnet-20250219, claude-3-5-sonnet-20240620, and claude-3-5-sonnet-20241022 in tests, docstrings, and examples
  • #10114 0050c91 Thanks @​christian-bromann! - fix(langchain): reset shared currentSystemMessage on middleware handler retry

Commits
  • a847b97 chore: version packages (#10139)
  • 87a585e fix(langchain): use StateSchema value types in middleware (#10137)
  • 62ba83e fix(openai): emit handleLLMNewToken for usage chunk in Completions API stream...
  • 10a876c fix(core): merge content blocks by string index during streaming (#10140)
  • b46d96a feat: implement aynchronous generator tool calling for streaming partial tool...
  • f71e3ff chore: fix broken lockfile (#10136)
  • 91ba2f1 chore(deps-dev): bump the root-dev-minor-and-patch group across 1 directory w...
  • 032a23e chore(deps-dev): bump fast-xml-parser from 5.3.6 to 5.3.7 (#10107)
  • 7c1ba7e chore(deps): bump @​aws-sdk/credential-provider-node from 3.972.6 to 3.972.10 ...
  • 6100810 chore(deps): bump @​typescript/native-preview from 7.0.0-dev.20260218.1 to 7.0...
  • Additional commits viewable in compare view

Updates mongoose from 9.2.1 to 9.2.2

Release notes

Sourced from mongoose's releases.

9.2.2 / 2026-02-23

  • fix(document): make pathsToSave filter all update operators and preserve unsaved state #16027
  • fix(setDefaultsOnInsert): check child filter paths before applying defaults, fix dot-notation handling, and prevent prototype pollution #16031 #16030
  • fix(populate): make refPath work as a function, including map paths with $* #16035 #16028
  • perf: optimize pathsToSave and indexed-path checks for subdocuments
  • types: remove duplicate definition of UUIDToJSON type #16029
  • docs(field-level-encryption): clarify crypt_shared library usage and move extraOptions under autoEncryption #16026 #16015
  • test(types): introduce TSTyche for type testing #16024
Changelog

Sourced from mongoose's changelog.

9.2.2 / 2026-02-23

  • fix(document): make pathsToSave filter all update operators and preserve unsaved state #16027
  • fix(setDefaultsOnInsert): check child filter paths before applying defaults, fix dot-notation handling, and prevent prototype pollution #16031 #16030
  • fix(populate): make refPath work as a function, including map paths with $* #16035 #16028
  • perf: optimize pathsToSave and indexed-path checks for subdocuments
  • types: remove duplicate definition of UUIDToJSON type #16029
  • docs(field-level-encryption): clarify crypt_shared library usage and move extraOptions under autoEncryption #16026 #16015
  • test(types): introduce TSTyche for type testing #16024
Commits
  • 518970c chore: release 9.2.2
  • 94ee9f1 Merge pull request #16026 from Automattic/vkarpov15/gh-16015
  • 781f5c0 Merge pull request #16014 from Automattic/chore/suppress-test-warnings
  • 7c9a03e Merge pull request #16024 from mrazauskas/introduce-tstyche
  • 0defff0 clean up script
  • 36b0729 Merge pull request #16035 from Automattic/codex/gh-16028-codex
  • 5676472 fix tests
  • 3e61ae9 perf: consolidate _getSubdocsWithIndexedPaths to avoid unnecessary array and ...
  • 0d565ae Merge pull request #16038 from hasezoey/fixSchemaType
  • 04f8727 Merge pull request #16031 from Automattic/fix-gh-16030-dot-notation-upsert
  • Additional commits viewable in compare view

Updates eslint from 10.0.0 to 10.0.2

Release notes

Sourced from eslint's releases.

v10.0.2

Bug Fixes

  • 2b72361 fix: update ajv to 6.14.0 to address security vulnerabilities (#20537) (루밀LuMir)

Documentation

  • 13eeedb docs: link rule type explanation to CLI option --fix-type (#20548) (Mike McCready)
  • 98cbf6b docs: update migration guide per Program range change (#20534) (Huáng Jùnliàng)
  • 61a2405 docs: add missing semicolon in vars-on-top rule example (#20533) (Abilash)

Chores

  • 951223b chore: update dependency @​eslint/eslintrc to ^3.3.4 (#20553) (renovate[bot])
  • 6aa1afe chore: update dependency eslint-plugin-jsdoc to ^62.7.0 (#20536) (Milos Djermanovic)

v10.0.1

Bug Fixes

  • c87d5bd fix: update eslint (#20531) (renovate[bot])
  • d841001 fix: update minimatch to 10.2.1 to address security vulnerabilities (#20519) (루밀LuMir)
  • 04c2147 fix: update error message for unused suppressions (#20496) (fnx)
  • 38b089c fix: update dependency @​eslint/config-array to ^0.23.1 (#20484) (renovate[bot])

Documentation

  • 5b3dbce docs: add AI acknowledgement section to templates (#20431) (루밀LuMir)
  • 6f23076 docs: toggle nav in no-JS mode (#20476) (Tanuj Kanti)
  • b69cfb3 docs: Update README (GitHub Actions Bot)

Chores

  • e5c281f chore: updates for v9.39.3 release (Jenkins)
  • 8c3832a chore: update @​typescript-eslint/parser to ^8.56.0 (#20514) (Milos Djermanovic)
  • 8330d23 test: add tests for config-api (#20493) (Milos Djermanovic)
  • 37d6e91 chore: remove eslint v10 prereleases from eslint-config-eslint deps (#20494) (Milos Djermanovic)
  • da7cd0e refactor: cleanup error message templates (#20479) (Francesco Trotta)
  • 84fb885 chore: package.json update for @​eslint/js release (Jenkins)
  • 1f66734 chore: add eslint to peerDependencies of @eslint/js (#20467) (Milos Djermanovic)
Commits
  • 55122d6 10.0.2
  • 80f1e29 Build: changelog update for 10.0.2
  • 951223b chore: update dependency @​eslint/eslintrc to ^3.3.4 (#20553)
  • 13eeedb docs: link rule type explanation to CLI option --fix-type (#20548)
  • 6aa1afe chore: update dependency eslint-plugin-jsdoc to ^62.7.0 (#20536)
  • 2b72361 fix: update ajv to 6.14.0 to address security vulnerabilities (#20537)
  • 98cbf6b docs: update migration guide per Program range change (#20534)
  • 61a2405 docs: add missing semicolon in vars-on-top rule example (#20533)
  • 0bd5497 10.0.1
  • ddb80ef Build: changelog update for 10.0.1
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the patch-updates group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [@huggingface/inference](https://github.com/huggingface/huggingface.js) | `4.13.12` | `4.13.13` |
| [@langchain/community](https://github.com/langchain-ai/langchainjs) | `1.1.16` | `1.1.19` |
| [@langchain/core](https://github.com/langchain-ai/langchainjs) | `1.1.26` | `1.1.28` |
| [@langchain/groq](https://github.com/langchain-ai/langchainjs) | `1.1.1` | `1.1.2` |
| [@simplewebauthn/server](https://github.com/MasterKale/SimpleWebAuthn/tree/HEAD/packages/server) | `13.2.2` | `13.2.3` |
| [langchain](https://github.com/langchain-ai/langchainjs) | `1.2.25` | `1.2.27` |
| [mongoose](https://github.com/Automattic/mongoose) | `9.2.1` | `9.2.2` |
| [eslint](https://github.com/eslint/eslint) | `10.0.0` | `10.0.2` |


Updates `@huggingface/inference` from 4.13.12 to 4.13.13
- [Release notes](https://github.com/huggingface/huggingface.js/releases)
- [Commits](https://github.com/huggingface/huggingface.js/commits)

Updates `@langchain/community` from 1.1.16 to 1.1.19
- [Release notes](https://github.com/langchain-ai/langchainjs/releases)
- [Commits](https://github.com/langchain-ai/langchainjs/compare/@langchain/community@1.1.16...@langchain/community@1.1.19)

Updates `@langchain/core` from 1.1.26 to 1.1.28
- [Release notes](https://github.com/langchain-ai/langchainjs/releases)
- [Commits](https://github.com/langchain-ai/langchainjs/compare/@langchain/core@1.1.26...@langchain/core@1.1.28)

Updates `@langchain/groq` from 1.1.1 to 1.1.2
- [Release notes](https://github.com/langchain-ai/langchainjs/releases)
- [Commits](https://github.com/langchain-ai/langchainjs/compare/@langchain/groq@1.1.1...langchain@1.1.2)

Updates `@simplewebauthn/server` from 13.2.2 to 13.2.3
- [Release notes](https://github.com/MasterKale/SimpleWebAuthn/releases)
- [Changelog](https://github.com/MasterKale/SimpleWebAuthn/blob/master/CHANGELOG.md)
- [Commits](https://github.com/MasterKale/SimpleWebAuthn/commits/v13.2.3/packages/server)

Updates `langchain` from 1.2.25 to 1.2.27
- [Release notes](https://github.com/langchain-ai/langchainjs/releases)
- [Commits](https://github.com/langchain-ai/langchainjs/compare/langchain@1.2.25...langchain@1.2.27)

Updates `mongoose` from 9.2.1 to 9.2.2
- [Release notes](https://github.com/Automattic/mongoose/releases)
- [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md)
- [Commits](Automattic/mongoose@9.2.1...9.2.2)

Updates `eslint` from 10.0.0 to 10.0.2
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.0.0...v10.0.2)

---
updated-dependencies:
- dependency-name: "@huggingface/inference"
  dependency-version: 4.13.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@langchain/community"
  dependency-version: 1.1.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@langchain/core"
  dependency-version: 1.1.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@langchain/groq"
  dependency-version: 1.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@simplewebauthn/server"
  dependency-version: 13.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: langchain
  dependency-version: 1.2.27
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: mongoose
  dependency-version: 9.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: eslint
  dependency-version: 10.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Feb 26, 2026
@github-actions github-actions bot merged commit 41a551b into master Feb 26, 2026
3 checks passed
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/master/patch-updates-3d448b052a branch February 26, 2026 11:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants