Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion generative_ai/evaluation/requirements.txt
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ google-cloud-aiplatform[all]==1.69.0
sentencepiece==0.2.0
google-auth==2.38.0
anthropic[vertex]==0.28.0
langchain-core==0.2.33
langchain-core==1.2.11
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

critical

Updating langchain-core to a new major version (0.2.x to 1.x) introduces a significant risk of breaking changes. The project's test suite contains multiple skipped tests (e.g., in generative_ai/reasoning_engine/test_reasoning_engine_examples.py and generative_ai/model_tuning/supervised_tuning_examples_test.py), which means that potential regressions introduced by this upgrade may not be caught. It is critical to enable and run the full test suite to validate this change before merging.

langchain-google-vertexai==1.0.10
numpy<3
openai==1.68.2
Expand Down
2 changes: 1 addition & 1 deletion generative_ai/extensions/requirements.txt
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ google-cloud-aiplatform[all]==1.69.0
sentencepiece==0.2.0
google-auth==2.38.0
anthropic[vertex]==0.28.0
langchain-core==0.2.33
langchain-core==1.2.11
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

This update addresses CVE-2026-26013, a vulnerability in the langchain-openai package. The patch is in langchain-openai>=1.1.9, which requires langchain-core>=1.2.11. While this PR correctly updates langchain-core, the langchain-openai package is not listed as a dependency. If the project uses langchain-openai, it must be explicitly added to the requirements (e.g., langchain-openai>=1.1.9) to ensure the vulnerability is fully remediated.

langchain-google-vertexai==1.0.10
numpy<3
openai==1.68.2
Expand Down
2 changes: 1 addition & 1 deletion generative_ai/image_generation/requirements.txt
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ google-cloud-aiplatform[all]==1.69.0
sentencepiece==0.2.0
google-auth==2.38.0
anthropic[vertex]==0.28.0
langchain-core==0.2.33
langchain-core==1.2.11
langchain-google-vertexai==1.0.10
numpy<3
openai==1.68.2
Expand Down
2 changes: 1 addition & 1 deletion generative_ai/model_garden/requirements.txt
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ google-cloud-aiplatform[all]==1.69.0
sentencepiece==0.2.0
google-auth==2.38.0
anthropic[vertex]==0.28.0
langchain-core==0.2.33
langchain-core==1.2.11
langchain-google-vertexai==1.0.10
numpy<3
openai==1.68.2
Expand Down
2 changes: 1 addition & 1 deletion generative_ai/model_tuning/requirements.txt
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ google-cloud-aiplatform[all]==1.69.0
sentencepiece==0.2.0
google-auth==2.38.0
anthropic[vertex]==0.28.0
langchain-core==0.2.33
langchain-core==1.2.11
langchain-google-vertexai==1.0.10
numpy<3
openai==1.68.2
Expand Down
2 changes: 1 addition & 1 deletion generative_ai/prompts/requirements.txt
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ google-cloud-aiplatform[all]==1.74.0
sentencepiece==0.2.0
google-auth==2.38.0
anthropic[vertex]==0.28.0
langchain-core==0.2.33
langchain-core==1.2.11
langchain-google-vertexai==1.0.10
numpy<3
openai==1.68.2
Expand Down
2 changes: 1 addition & 1 deletion generative_ai/reasoning_engine/requirements.txt
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ google-cloud-aiplatform[all]==1.69.0
sentencepiece==0.2.0
google-auth==2.38.0
anthropic[vertex]==0.28.0
langchain-core==0.2.33
langchain-core==1.2.11
langchain-google-vertexai==1.0.10
numpy<3
openai==1.68.2
Expand Down