Bump the minor-and-patch group with 13 updates by dependabot[bot] · Pull Request #325 · langchain-ai/agent-chat-ui

dependabot · 2026-09-28T00:59:50Z

Bumps the minor-and-patch group with 13 updates:

Package	From	To
@langchain/core	`1.2.11`	`1.2.12`
@langchain/langgraph	`1.4.15`	`1.4.17`
@langchain/langgraph-sdk	`1.11.0`	`1.11.2`
framer-motion	`13.4.0`	`13.4.3`
katex	`0.18.7`	`0.18.9`
lucide-react	`1.47.0`	`1.48.0`
@types/node	`26.6.1`	`26.6.2`
dotenv	`18.0.0`	`18.0.3`
eslint	`10.10.0`	`10.11.0`
eslint-config-next	`16.3.5`	`16.3.6`
next	`16.3.5`	`16.3.6`
prettier	`3.9.8`	`3.9.9`
typescript-eslint	`8.70.0`	`8.70.1`

Updates @langchain/core from 1.2.11 to 1.2.12

Release notes

Sourced from @langchain/core's releases.

@langchain/core@1.2.12

Patch Changes

#11675 030a726 Thanks @hntrl! - Preserve structured tool arguments in tracer run inputs.

Commits

bd44054 chore: version packages (#11674)
030a726 fix(core): preserve structured tool inputs in traces (#11675)
8837c7a feat(typesafe): add model-router and auto-mode agent middleware (#11670)
206d8b9 chore: version packages (#11668)
70c42ac feat(typesafe): add TypeSafe System One classifier package (#11666)
See full diff in compare view

Updates @langchain/langgraph from 1.4.15 to 1.4.17

Release notes

Sourced from @langchain/langgraph's releases.

@langchain/langgraph@1.4.17

Patch Changes

#2861 7639085 Thanks @casparb! - Add GraphCallbackHandler with typed handleInterrupt and handleResume events through normal callback configuration, matching Python graph lifecycle behavior. Lifecycle callbacks are awaited before terminal chain callbacks and work independently of stream mode.

@langchain/langgraph@1.4.16

Patch Changes

#2824 e75f6a0 Thanks @eliornl! - feat(langgraph): add responseSchema option to interrupt()

interrupt(value, { responseSchema }) lets a graph declare the shape of the value it expects on resume. A Zod schema validates the resume value and the parsed result is what interrupt() returns; a raw JSON Schema object is passed through as-is. The schema is surfaced on Interrupt.response_schema so clients such as Studio can render a typed form instead of a free-form JSON editor. Omitting the option keeps today's behavior.

Updated dependencies [e75f6a0]:

@langchain/langgraph-sdk@1.11.1

Changelog

Sourced from @langchain/langgraph's changelog.

1.4.17

Patch Changes

#2861 7639085 Thanks @casparb! - Add GraphCallbackHandler with typed handleInterrupt and handleResume events through normal callback configuration, matching Python graph lifecycle behavior. Lifecycle callbacks are awaited before terminal chain callbacks and work independently of stream mode.

1.4.16

Patch Changes

#2824 e75f6a0 Thanks @eliornl! - feat(langgraph): add responseSchema option to interrupt()

interrupt(value, { responseSchema }) lets a graph declare the shape of the value it expects on resume. A Zod schema validates the resume value and the parsed result is what interrupt() returns; a raw JSON Schema object is passed through as-is. The schema is surfaced on Interrupt.response_schema so clients such as Studio can render a typed form instead of a free-form JSON editor. Omitting the option keeps today's behavior.

Updated dependencies [e75f6a0]:

@langchain/langgraph-sdk@1.11.1

Commits

3dd35b6 chore: version packages (#2862)
7639085 feat(langgraph): add graph lifecycle callbacks (#2861)
ec67d5d chore: version packages (#2852)
e75f6a0 feat(langgraph): add responseSchema option to interrupt() (#2824)
See full diff in compare view

Updates @langchain/langgraph-sdk from 1.11.0 to 1.11.2

Release notes

Sourced from @langchain/langgraph-sdk's releases.

@langchain/langgraph-sdk@1.11.2

Patch Changes

#2855 0284323 Thanks @hntrl! - Preserve metadata from v2 message SSE events when constructing frontend message objects, so applications can inspect message provenance and model completion details without parsing raw events.

Retain namespace, graph node, callback run_id, and message-start metadata in additional_kwargs, including messages returned by awaiting a StreamingMessage.

Expose finish reasons and provider response metadata in response_metadata across message roles, accepting both Python metadata and JavaScript responseMetadata event fields.

Populate the standard AI usage_metadata field while retaining additional_kwargs.usage for compatibility. Preserve earlier usage when a finish event omits it.

Keep interleaved streams at the same namespace and node separate using callback run_id, while retaining fallback behavior for legacy events without run IDs.

These fields describe individual messages and model calls: a finish reason does not identify the final response of a graph turn, and callback run IDs are not necessarily server run IDs. This change does not add an is_final marker or persist stream-only metadata into historical checkpoints.

@langchain/langgraph-sdk@1.11.1

Patch Changes

#2824 e75f6a0 Thanks @eliornl! - feat(langgraph): add responseSchema option to interrupt()

interrupt(value, { responseSchema }) lets a graph declare the shape of the value it expects on resume. A Zod schema validates the resume value and the parsed result is what interrupt() returns; a raw JSON Schema object is passed through as-is. The schema is surfaced on Interrupt.response_schema so clients such as Studio can render a typed form instead of a free-form JSON editor. Omitting the option keeps today's behavior.

Changelog

Sourced from @langchain/langgraph-sdk's changelog.

1.11.2

Patch Changes

#2855 0284323 Thanks @hntrl! - Preserve metadata from v2 message SSE events when constructing frontend message objects, so applications can inspect message provenance and model completion details without parsing raw events.

Retain namespace, graph node, callback run_id, and message-start metadata in additional_kwargs, including messages returned by awaiting a StreamingMessage.

Expose finish reasons and provider response metadata in response_metadata across message roles, accepting both Python metadata and JavaScript responseMetadata event fields.

Populate the standard AI usage_metadata field while retaining additional_kwargs.usage for compatibility. Preserve earlier usage when a finish event omits it.

Keep interleaved streams at the same namespace and node separate using callback run_id, while retaining fallback behavior for legacy events without run IDs.

These fields describe individual messages and model calls: a finish reason does not identify the final response of a graph turn, and callback run IDs are not necessarily server run IDs. This change does not add an is_final marker or persist stream-only metadata into historical checkpoints.

1.11.1

Patch Changes

#2824 e75f6a0 Thanks @eliornl! - feat(langgraph): add responseSchema option to interrupt()

interrupt(value, { responseSchema }) lets a graph declare the shape of the value it expects on resume. A Zod schema validates the resume value and the parsed result is what interrupt() returns; a raw JSON Schema object is passed through as-is. The schema is surfaced on Interrupt.response_schema so clients such as Studio can render a typed form instead of a free-form JSON editor. Omitting the option keeps today's behavior.

Commits

42d419c chore: version packages (#2856)
0284323 fix(sdk): preserve streamed message metadata in frontend projections (#2855)
ec67d5d chore: version packages (#2852)
e75f6a0 feat(langgraph): add responseSchema option to interrupt() (#2824)
See full diff in compare view

Updates framer-motion from 13.4.0 to 13.4.3

Changelog

Sourced from framer-motion's changelog.

[13.4.3] 2026-09-24

Fixed

<motion />: Ensure animations replay when Suspense reveals memoized content.

[13.4.2] 2026-09-23

Fixed

Reorder: Don't scale position of elements at origin 0 when dragConstraints changes.

Unrecognised easing names no longer throw.

[13.4.1] 2026-09-22

Fixed

animate: CSS variable writes on SVGs apply to style attribute.

Commits

164be2b v13.4.3
d2747a2 Updating changelog
720530a Merge pull request #3833 from motiondivision/cursor/bc-824bfd3c-7a94-4eee-be1...
7eb469a Fix #3832: Replay animations when Suspense reveals memoized motion content
be8a4b3 Add failing Cypress test for Suspense reveal of memoized content (#3832)
ef59724 Add failing tests for animations after Suspense reveals memoized content (#3832)
50f9558 v13.4.2
edc9bc4 Updating changlelog
c0194e5 Updating changelog
6300064 Merge pull request #3831 from motiondivision/cursor/issue-resolution-process-...
Additional commits viewable in compare view

Updates katex from 0.18.7 to 0.18.9

Release notes

Sourced from katex's releases.

v0.18.9

0.18.9 (2026-09-23)

Features

types: add contrib module declarations (#4250) (aafa187)

v0.18.8

0.18.8 (2026-09-23)

Bug Fixes

array: preserve trailing rows in align (#4283) (ddfcc29)

Changelog

Sourced from katex's changelog.

0.18.9 (2026-09-23)

Features

types: add contrib module declarations (#4250) (aafa187)

0.18.8 (2026-09-23)

Bug Fixes

array: preserve trailing rows in align (#4283) (ddfcc29)

Commits

71a7bc0 chore(release): 0.18.9 [ci skip]
aafa187 feat(types): add contrib module declarations (#4250)
e749fd1 chore(release): 0.18.8 [ci skip]
ddfcc29 fix(array): preserve trailing rows in align (#4283)
96e751c chore(deps): bump github/codeql-action from 4.38.0 to 4.38.1 (#4292)
726c2d4 chore(deps): bump github/codeql-action from 4.37.9 to 4.38.0 (#4287)
f71045d chore(deps): update dependency js-yaml to v4.3.2 [security] (#4286)
See full diff in compare view

Updates lucide-react from 1.47.0 to 1.48.0

Release notes

Sourced from lucide-react's releases.

Version 1.48.0

What's Changed

feat(icons): added briefcase-plus icon by @tylerkade in lucide-icons/lucide#4757

feat(icons): added square-sparkles icon by @nananecy in lucide-icons/lucide#3610

feat(icons): added line-dot-left-horizontal icon by @nathan-de-pachtere in lucide-icons/lucide#3855

fix(packages/svelte,solid): fix shared type imports in Solid and Svelte by @karsa-mistmere in lucide-icons/lucide#4846

chore(deps-dev): bump react-native from 0.76.9 to 0.87.1 in the react-native-deps group across 1 directory by @dependabot[bot] in lucide-icons/lucide#4673

feat(packages): export __iconNode data across framework packages by @lx3133584 in lucide-icons/lucide#4761

fix(icons): Tweak card-sim chip by @danielbayley in lucide-icons/lucide#3649

feat(icons): added line-dot-top-vertical icon by @nathan-de-pachtere in lucide-icons/lucide#3856

feat(icons): added line-dot-bottom-vertical icon by @nathan-de-pachtere in lucide-icons/lucide#3857

fix(packages/react-native): pass testID to the rendered Svg element by @OlegBezr in lucide-icons/lucide#4881

chore(@lucide/vue): Fix types @lucide/vue package and added workflow for it. by @ericfennis in lucide-icons/lucide#4883

test(packages/shared): cover buildLucideIconForReact by @vugarbbakhishov-hub in lucide-icons/lucide#4872

feat(site): Better icon detail page and add unreleased flag by @ericfennis in lucide-icons/lucide#4877

fix(icons): changed map-pinned icon by @jguddas in lucide-icons/lucide#4880

fix(icons): changed mail-pen by @karsa-mistmere in lucide-icons/lucide#4899

chore(deps-dev): bump the angular-deps group across 1 directory with 14 updates by @dependabot[bot] in lucide-icons/lucide#4895

chore(deps): bump the vue-deps group with 3 updates by @dependabot[bot] in lucide-icons/lucide#4893

chore(typchecking): More typecheck jobs for all packages by @ericfennis in lucide-icons/lucide#4885

feat(icons): add house-cog icon by @ajaxjiang96 in lucide-icons/lucide#4904

New Contributors

@nananecy made their first contribution in lucide-icons/lucide#3610

@OlegBezr made their first contribution in lucide-icons/lucide#4881

@vugarbbakhishov-hub made their first contribution in lucide-icons/lucide#4872

@ajaxjiang96 made their first contribution in lucide-icons/lucide#4904

Full Changelog: lucide-icons/lucide@1.47.0...1.48.0

Commits

f06ac67 chore(typchecking): More typecheck jobs for all packages (#4885)
See full diff in compare view

Updates @types/node from 26.6.1 to 26.6.2

Commits

See full diff in compare view

Updates dotenv from 18.0.0 to 18.0.3

Changelog

Sourced from dotenv's changelog.

18.0.3 (2026-09-22)

Changed

Patch DOTENV_QUIET setting when inside .env file (#1059)

18.0.2 (2026-09-21)

Changed

Patch additional edge cases for the fast parser (#1056)

18.0.1 (2026-09-18)

Changed

Handle file urls in config logging (#1054)

Commits

f6390d1 18.0.3
456da68 changelog
12ea34b Merge pull request #1059 from motdotla/config-quiet
a654bc2 patch DOTENV_QUIET
a0ae3e0 Merge pull request #1058 from SulimanAbdulrazzaq/fix/fast-parser-lone-export-...
d6b3a1d demonstrate DOTENV_QUIET failing
d57e0bc fix: keep assignments after a bare export line in the fast parser
5203712 perf: skip quoted text and short-circuit ASCII whitespace checks
c69ed11 chore: align package version with 18.0.2 changelog
2db9acf fix: retain closing quote candidates in the fast scanner
Additional commits viewable in compare view

Updates eslint from 10.10.0 to 10.11.0

Release notes

Sourced from eslint's releases.

v10.11.0

Features

d136fa4 feat: object-shorthand handle quoted properties for ignoreConstructors (#21271) (Pavel)

397b3b8 feat: report unsafe labeled continue in no-unsafe-finally rule (#21316) (electrohyun)

d3dd47f feat: only exempt new-cap built-ins that reference the global (#21290) (sethamus)

Bug Fixes

22b09f5 fix: ignore __proto__ properties in prefer-object-spread (#21311) (xbinaryx)

b684bb1 fix: make TimePass.parse optional in types and docs (#21313) (ntnyq)

26d11bc fix: don't report __proto__ properties in object-shorthand (#21310) (xbinaryx)

Documentation

9ecfdc5 docs: note that --cache can serve stale results for cross-file rules (#21312) (bytedoe)

6c789ff docs: Update README (GitHub Actions Bot)

5997825 docs: clarify preserve-caught-error known limitation (#21294) (Akinyemi Toluwalase)

Chores

520dd77 perf: Implement fast paths in critical areas (#21210) (Nicholas C. Zakas)

92086c8 test: update EMFILE error generation for Node.js 26.9.0 compatibility (#21330) (Francesco Trotta)

9ac7eb6 chore: update github/codeql-action action to v4.38.0 (#21331) (renovate[bot])

24310e3 chore: update ecosystem plugins (#21324) (ESLint Bot)

45ad79e ci: bump pnpm/action-setup from 6.0.10 to 6.1.0 (#21318) (dependabot[bot])

ac74e37 chore: Add AGENTS.md with AI disclosure requirements (#21221) (Nicholas C. Zakas)

c832660 chore: Upgrade Stylelint to the latest version in docs (#21245) (Jung Hyeon Jun)

f9f88fc chore: update ecosystem plugins (#21308) (ESLint Bot)

fc81076 ci: add more types integration tests (#20395) (Nitin Kumar)

Commits

3c0b7c6 10.11.0
321f0a7 Build: changelog update for 10.11.0
520dd77 perf: Implement fast paths in critical areas (#21210)
9ecfdc5 docs: note that --cache can serve stale results for cross-file rules (#21312)
92086c8 test: update EMFILE error generation for Node.js 26.9.0 compatibility (#21330)
9ac7eb6 chore: update github/codeql-action action to v4.38.0 (#21331)
22b09f5 fix: ignore __proto__ properties in prefer-object-spread (#21311)
24310e3 chore: update ecosystem plugins (#21324)
d136fa4 feat: object-shorthand handle quoted properties for ignoreConstructors (#21...
45ad79e ci: bump pnpm/action-setup from 6.0.10 to 6.1.0 (#21318)
Additional commits viewable in compare view

Updates eslint-config-next from 16.3.5 to 16.3.6

Release notes

Sourced from eslint-config-next's releases.

v16.3.6

This release contains a security fix for GHSA-vcvr-r3jv-pc5j: Remote Code Execution in next/og ImageResponse

Commits

a758ffc v16.3.6
See full diff in compare view

Updates next from 16.3.5 to 16.3.6

Release notes

Sourced from next's releases.

v16.3.6

This release contains a security fix for GHSA-vcvr-r3jv-pc5j: Remote Code Execution in next/og ImageResponse

Commits

a758ffc v16.3.6
868fad3 [active-lts] Harden next/og SVG serialization
8c81cbb [lts-active] test: remove unsupported deployment ID builder cases (#98821)
See full diff in compare view

Updates prettier from 3.9.8 to 3.9.9

Release notes

Sourced from prettier's releases.

3.9.9

Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @fisker)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.9

diff

Markdown: Fix text with `$` been incorrectly parsed as math syntax (#20140 by `@fisker`)

<!-- Input -->
**Uses $FOO** from `a.sh` and `b.sh`, plus `$BAR` from `c.sh`, before anything else runs here.
<!-- Prettier 3.9.8 -->
Uses $FOO from a.sh and b.sh, plus $BARfromc.sh, before anything else runs here.
<!-- Prettier 3.9.9 -->
Uses $FOO from a.sh and b.sh, plus $BAR from c.sh, before anything else runs here.

Commits

cdd17f2 Release 3.9.9
dc7b896 Disable singleDollarTextMath in mdast-util-math (#20140)
f9be58f Git blame ignore 3.9.8
88470cb Bump Prettier dependency to 3.9.8
9559cab Clean changelog_unreleased
4fc8ee8 Update dependents count
See full diff in compare view

Updates typescript-eslint from 8.70.0 to 8.70.1

Release notes

Sourced from typescript-eslint's releases.

v8.70.1

8.70.1 (2026-09-21)

🩹 Fixes

ast-spec: narrow import attribute keys to identifiers and strings (#12879)

eslint-plugin: [no-useless-default-assignment] avoid false positives on tuples with a rest element (#12768)

eslint-plugin: [no-unnecessary-type-parameters] handle type precedence in the suggestion fixer (#12637)

eslint-plugin: [no-explicit-any] use unknown[] for bare any rest parameters (#12818)

eslint-plugin: [no-generated-empty-object-type] don't report a mapped type whose keys are not resolved yet (#12854)

eslint-plugin: [no-misused-spread] omit WeakMap spread suggestions (#12850)

eslint-plugin: [no-unnecessary-type-assertion] false positive for empty object asserted to a type alias of Record (#12869)

eslint-plugin: [no-meaningless-void-operator] allow void on assignment expressions (#12873)

eslint-plugin: [await-thenable] prevent autofix from breaking code when removing await (#12716)

eslint-plugin: [no-unnecessary-parameter-property-assignment] account for parameter reassignment (#12880)

eslint-plugin: [unbound-method] treat Intl.Collator.prototype.compare as spec-bound (#12845)

eslint-plugin: [no-unnecessary-condition] handle union-keyed index access on the left-hand side of nullish assignment (#12747)

eslint-plugin: [no-useless-default-assignment] convert the fixer to a suggestion fixer (#12826)

eslint-plugin: [no-misused-promises] handle multiple Promise constituents (#12904)

rule-tester: test the final autofix output instead of the first pass (#12867)

scope-manager: merge implicit global definitions (#12809)

type-utils: match package specifiers on whole path components (#12838)

typescript-estree: resolve symlinked paths when matching files to projects (#12725)

typescript-estree: add missing < token opening type arguments (#12821)

typescript-estree: require string literal import attribute values (#12894)

website: prevent playground from breaking down after opening link with the .js file type (#12777)

❤️ Thank You

Amin @amiin-dev

Brad Zacher @bradzacher

Cameron

Diptajoy Mistry @diptomistry

Evyatar Daud @StyleShit

Grit @Grit03

Hugo @hugop95

Josh Goldberg ✨

Michael Naumov @mnaoumov

Mikhail Baev @baevm

Om Rawat

overlookmotel

Sanath @sansynx

Shinji

stoicism @stoicism02

Vinccool96

Younsang Na @nayounsang

김채영 @cchaeyoung

송재욱

See GitHub Releases for more information.

... (truncated)

Changelog

Sourced from typescript-eslint's changelog.

8.70.1 (2026-09-21)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

23d38ce chore(release): publish 8.70.1
eb42d9b chore: cleanup and fix Nx dependencies and missing tasks (#12897)
8c80531 chore: fix typos in comments and docs (#12846)
b6b86a1 chore: migrate to nx 23.2.0 (#12843)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-and-patch group with 13 updates: | Package | From | To | | --- | --- | --- | | [@langchain/core](https://github.com/langchain-ai/langchainjs) | `1.2.11` | `1.2.12` | | [@langchain/langgraph](https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/langgraph-core) | `1.4.15` | `1.4.17` | | [@langchain/langgraph-sdk](https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/sdk) | `1.11.0` | `1.11.2` | | [framer-motion](https://github.com/motiondivision/motion) | `13.4.0` | `13.4.3` | | [katex](https://github.com/KaTeX/KaTeX) | `0.18.7` | `0.18.9` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.47.0` | `1.48.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.1` | `26.6.2` | | [dotenv](https://github.com/motdotla/dotenv) | `18.0.0` | `18.0.3` | | [eslint](https://github.com/eslint/eslint) | `10.10.0` | `10.11.0` | | [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.3.5` | `16.3.6` | | [next](https://github.com/vercel/next.js) | `16.3.5` | `16.3.6` | | [prettier](https://github.com/prettier/prettier) | `3.9.8` | `3.9.9` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.70.0` | `8.70.1` | Updates `@langchain/core` from 1.2.11 to 1.2.12 - [Release notes](https://github.com/langchain-ai/langchainjs/releases) - [Commits](https://github.com/langchain-ai/langchainjs/compare/@langchain/core@1.2.11...@langchain/core@1.2.12) Updates `@langchain/langgraph` from 1.4.15 to 1.4.17 - [Release notes](https://github.com/langchain-ai/langgraphjs/releases) - [Changelog](https://github.com/langchain-ai/langgraphjs/blob/main/libs/langgraph-core/CHANGELOG.md) - [Commits](https://github.com/langchain-ai/langgraphjs/commits/@langchain/langgraph@1.4.17/libs/langgraph-core) Updates `@langchain/langgraph-sdk` from 1.11.0 to 1.11.2 - [Release notes](https://github.com/langchain-ai/langgraphjs/releases) - [Changelog](https://github.com/langchain-ai/langgraphjs/blob/main/libs/sdk/CHANGELOG.md) - [Commits](https://github.com/langchain-ai/langgraphjs/commits/@langchain/langgraph-sdk@1.11.2/libs/sdk) Updates `framer-motion` from 13.4.0 to 13.4.3 - [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md) - [Commits](motiondivision/motion@v13.4.0...v13.4.3) Updates `katex` from 0.18.7 to 0.18.9 - [Release notes](https://github.com/KaTeX/KaTeX/releases) - [Changelog](https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md) - [Commits](KaTeX/KaTeX@v0.18.7...v0.18.9) Updates `lucide-react` from 1.47.0 to 1.48.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.48.0/packages/lucide-react) Updates `@types/node` from 26.6.1 to 26.6.2 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `dotenv` from 18.0.0 to 18.0.3 - [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md) - [Commits](motdotla/dotenv@v18.0.0...v18.0.3) Updates `eslint` from 10.10.0 to 10.11.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.10.0...v10.11.0) Updates `eslint-config-next` from 16.3.5 to 16.3.6 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](https://github.com/vercel/next.js/commits/v16.3.6/packages/eslint-config-next) Updates `next` from 16.3.5 to 16.3.6 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.3.5...v16.3.6) Updates `prettier` from 3.9.8 to 3.9.9 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.9.8...3.9.9) Updates `typescript-eslint` from 8.70.0 to 8.70.1 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.70.1/packages/typescript-eslint) --- updated-dependencies: - dependency-name: "@langchain/core" dependency-version: 1.2.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@langchain/langgraph" dependency-version: 1.4.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@langchain/langgraph-sdk" dependency-version: 1.11.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: framer-motion dependency-version: 13.4.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: katex dependency-version: 0.18.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: lucide-react dependency-version: 1.48.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@types/node" dependency-version: 26.6.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: dotenv dependency-version: 18.0.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: eslint dependency-version: 10.11.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: eslint-config-next dependency-version: 16.3.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: next dependency-version: 16.3.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: prettier dependency-version: 3.9.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: typescript-eslint dependency-version: 8.70.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

vercel · 2026-09-28T00:59:53Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
langgraph-chat	Ready	Preview	Sep 28, 2026 1:00am UTC

socket-security · 2026-09-28T01:00:08Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Vulnerability	Quality	Maintenance
next@16.3.5 ⏵ 16.3.6		⁺⁷⁵	⁺¹
eslint-config-next@16.3.5 ⏵ 16.3.6
@langchain/langgraph-sdk@1.11.0 ⏵ 1.11.2	⁺¹		⁺¹	⁺¹
typescript-eslint@8.70.0 ⏵ 8.70.1
lucide-react@1.47.0 ⏵ 1.48.0	⁺¹		⁺¹
@types/node@26.6.2 ⏵ 26.6.3
@langchain/langgraph@1.4.15 ⏵ 1.4.17			⁺¹	⁺¹
katex@0.18.7 ⏵ 0.18.9	⁺¹		⁺¹
eslint@10.10.0 ⏵ 10.11.0	⁺¹
dotenv@18.0.0 ⏵ 18.0.3	⁺¹		⁺¹	⁺⁹
@langchain/core@1.2.11 ⏵ 1.2.12			⁺¹	^-1
prettier@3.9.8 ⏵ 3.9.9
framer-motion@13.4.0 ⏵ 13.4.3	⁺¹		⁺¹	⁺¹

View full report

Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai> (cherry picked from commit cf72cb0)

Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai> (cherry picked from commit cf72cb0)

… upstream SHA is in branch history Resolved package.json with the fork's newer specifiers and branch-only packages (@supabase/*, tsx, @marsidev/react-turnstile, lucide-react, lodash, langgraph-nextjs-api-passthrough); regenerated pnpm-lock.yaml. Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 28, 2026

vercel Bot deployed to Preview September 28, 2026 01:00

View deployment

John Kennedy (jkennedyvz) merged commit cf72cb0 into main Sep 28, 2026
9 checks passed

John Kennedy (jkennedyvz) deleted the dependabot/npm_and_yarn/minor-and-patch-bf3b2b9fbc branch September 28, 2026 07:42

Navigation Menu

Repository navigation

Bump the minor-and-patch group with 13 updates - #325

Bump the minor-and-patch group with 13 updates#325
John Kennedy (jkennedyvz) merged 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-bf3b2b9fbc

dependabot Bot commented on behalf of github Sep 28, 2026

Uh oh!

vercel Bot commented Sep 28, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Sep 28, 2026

Uh oh!

Uh oh!

This branch was successfully deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Sep 28, 2026

@​langchain/core@​1.2.12

Patch Changes

@​langchain/langgraph@​1.4.17

Patch Changes

@​langchain/langgraph@​1.4.16

Patch Changes

1.4.17

Patch Changes

1.4.16

Patch Changes

@​langchain/langgraph-sdk@​1.11.2

Patch Changes

@​langchain/langgraph-sdk@​1.11.1

Patch Changes

1.11.2

Patch Changes

1.11.1

Patch Changes

[13.4.3] 2026-09-24

Fixed

[13.4.2] 2026-09-23

Fixed

[13.4.1] 2026-09-22

Fixed

v0.18.9

0.18.9 (2026-09-23)

Features

v0.18.8

0.18.8 (2026-09-23)

Bug Fixes

0.18.9 (2026-09-23)

Features

0.18.8 (2026-09-23)

Bug Fixes

Version 1.48.0

What's Changed

New Contributors

18.0.3 (2026-09-22)

Changed

18.0.2 (2026-09-21)

Changed

18.0.1 (2026-09-18)

Changed

v10.11.0

Features

Bug Fixes

Documentation

Chores

v16.3.6

v16.3.6

3.9.9

3.9.9

Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

v8.70.1

8.70.1 (2026-09-21)

🩹 Fixes

❤️ Thank You

8.70.1 (2026-09-21)

Uh oh!

vercel Bot commented Sep 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Sep 28, 2026

Uh oh!

Uh oh!

This branch was successfully deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`@langchain/core@1`.2.12

`@langchain/langgraph@1`.4.17

`@langchain/langgraph@1`.4.16

`@langchain/langgraph-sdk@1`.11.2

`@langchain/langgraph-sdk@1`.11.1

Markdown: Fix text with `$` been incorrectly parsed as math syntax (#20140 by `@fisker`)

vercel Bot commented Sep 28, 2026 •

edited

Loading