Skip to content

Conversation

@skurzyp-blockydevs
Copy link
Contributor

@skurzyp-blockydevs skurzyp-blockydevs commented Jan 8, 2026

Description:

  • Upgraded dependencies flagged by Dependabot for security and maintenance, including LangChain- and Hashgraph-related packages across the TypeScript SDK and examples.

  • Consolidated multiple Dependabot PRs (e.g. glob, express, and related packages) into a single update, reducing lockfile churn and review overhead.

Updated package-lock.json files across:

  • contracts/
  • `typescript/
  • modelcontextprotocol/
  • example projects from /examples
  • Upgraded LangChain-related dependencies across the TypeScript SDK and examples:

    • @langchain/core 1.1.81.1.11
    • @langchain/openai 1.1.x–1.2.01.2.1
    • langchain 1.2.31.2.6
    • @langchain/classic 1.0.71.0.8
    • @langchain/anthropic 1.3.31.3.6
  • Upgraded Hashgraph SDK versions across the TypeScript SDK and examples:

    • @hashgraph/sdk 2.68.0 / 2.77.02.79.0
  • Synchronized LangChain and Hashgraph dependency versions across:

    • TypeScript SDK
    • LangChain examples (current and v1)
    • Next.js example
  • Removed no-longer-needed overrides for @langchain/core following upstream fixes

  • Updated related package-lock.json files to reflect the new dependency graph and resolutions

Related issue(s):

Partialy fixes #442

Notes for reviewer:
Merging this PR will resolve the following:

Checklist

  • Documented (Code comments, README, etc.)
  • Tested (unit, integration, etc.)

dependabot bot and others added 8 commits December 8, 2025 13:35
Bumps [glob](https://github.com/isaacs/node-glob) from 10.4.5 to 10.5.0.
- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)
- [Commits](isaacs/node-glob@v10.4.5...v10.5.0)

---
updated-dependencies:
- dependency-name: glob
  dependency-version: 10.5.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [express](https://github.com/expressjs/express) from 5.1.0 to 5.2.1.
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](expressjs/express@v5.1.0...v5.2.1)

---
updated-dependencies:
- dependency-name: express
  dependency-version: 5.2.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps  and [js-yaml](https://github.com/nodeca/js-yaml). These dependencies needed to be updated together.

Updates `js-yaml` from 4.1.0 to 4.1.1
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.1.0...4.1.1)

Updates `js-yaml` from 3.14.1 to 3.14.2
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.1.0...4.1.1)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.1.1
  dependency-type: indirect
- dependency-name: js-yaml
  dependency-version: 3.14.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
…pt/express-5.2.1' into chore/upgrade-dependabot-marked-packages
…s/multi-75e6bc5210' into chore/upgrade-dependabot-marked-packages
…yarn/contracts/glob-10.5.0' into chore/upgrade-dependabot-marked-packages
….0.16 and Glob in some packages

Signed-off-by: skurzyp-blockydevs <stanislaw.kurzyp@blockydevs.com>
…chain/core to v1.1.11, @langchain/openai to v1.2.1, and langchain to v1.2.6

Signed-off-by: skurzyp-blockydevs <stanislaw.kurzyp@blockydevs.com>
@skurzyp-blockydevs skurzyp-blockydevs self-assigned this Jan 8, 2026
@skurzyp-blockydevs skurzyp-blockydevs requested review from a team as code owners January 8, 2026 13:46
…e updates across projects

Signed-off-by: skurzyp-blockydevs <stanislaw.kurzyp@blockydevs.com>
…ry tests for retry support

Signed-off-by: skurzyp-blockydevs <stanislaw.kurzyp@blockydevs.com>
…enarios

Signed-off-by: skurzyp-blockydevs <stanislaw.kurzyp@blockydevs.com>
@piotrswierzy piotrswierzy merged commit f1c19cc into main Jan 13, 2026
13 checks passed
@piotrswierzy piotrswierzy deleted the chore/upgrade-dependabot-marked-packages branch January 13, 2026 11:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Resolve dependabot PRs

3 participants