From cf120001228a50c0b6690b8890f7c58cdcee3daa Mon Sep 17 00:00:00 2001
From: Tianjing Li <tianjinglimail@gmail.com>
Date: Wed, 8 Jan 2025 14:57:27 -0500
Subject: [PATCH] security: Update Langchain versions  (#894)

awaiting testing
---
 poetry.lock    | 22 +++++++++++-----------
 pyproject.toml |  6 +++---
 2 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/poetry.lock b/poetry.lock
index 37373d97f5..60ad60700c 100644
--- a/poetry.lock
+++ b/poetry.lock
@@ -2415,18 +2415,18 @@ adal = ["adal (>=1.0.2)"]
 
 [[package]]
 name = "langchain"
-version = "0.2.15"
+version = "0.2.17"
 description = "Building applications with LLMs through composability"
 optional = false
 python-versions = "<4.0,>=3.8.1"
 files = [
-    {file = "langchain-0.2.15-py3-none-any.whl", hash = "sha256:9e6231441870aaa8523be24a5785ccccfdde759a7e27dd082b6ec80f68e49dec"},
-    {file = "langchain-0.2.15.tar.gz", hash = "sha256:f613ce7594be34f9bac687134a56f6e8274951907b798dbd037aefc95df78953"},
+    {file = "langchain-0.2.17-py3-none-any.whl", hash = "sha256:a97a33e775f8de074370aecab95db148b879c794695d9e443c95457dce5eb525"},
+    {file = "langchain-0.2.17.tar.gz", hash = "sha256:5a99ce94aae05925851777dba45cbf2c475565d1e91cbe7d82c5e329d514627e"},
 ]
 
 [package.dependencies]
 aiohttp = ">=3.8.3,<4.0.0"
-langchain-core = ">=0.2.35,<0.3.0"
+langchain-core = ">=0.2.43,<0.3.0"
 langchain-text-splitters = ">=0.2.0,<0.3.0"
 langsmith = ">=0.1.17,<0.2.0"
 numpy = {version = ">=1,<2", markers = "python_version < \"3.12\""}
@@ -2459,21 +2459,21 @@ langchain-community = ["langchain-community (>=0.2.4)"]
 
 [[package]]
 name = "langchain-community"
-version = "0.2.15"
+version = "0.2.19"
 description = "Community contributed LangChain integrations."
 optional = false
 python-versions = "<4.0,>=3.8.1"
 files = [
-    {file = "langchain_community-0.2.15-py3-none-any.whl", hash = "sha256:edcf8e9829559822a044a193b66cbea40600b8b9ce9b435fa0ae96f69377be46"},
-    {file = "langchain_community-0.2.15.tar.gz", hash = "sha256:5bd5a6d055b07ee228eb6a9f0ca59d8124a1d450e4c82a6a62cec3add3cb73a9"},
+    {file = "langchain_community-0.2.19-py3-none-any.whl", hash = "sha256:651d761f2d37d63f89de75d65858f6c7f6ea99c455622e9c13ca041622dad0c5"},
+    {file = "langchain_community-0.2.19.tar.gz", hash = "sha256:74f8db6992d03668c3d82e0d896845c413d167dad3b8e349fb2a9a57fd2d1396"},
 ]
 
 [package.dependencies]
 aiohttp = ">=3.8.3,<4.0.0"
 dataclasses-json = ">=0.5.7,<0.7"
-langchain = ">=0.2.15,<0.3.0"
-langchain-core = ">=0.2.37,<0.3.0"
-langsmith = ">=0.1.0,<0.2.0"
+langchain = ">=0.2.17,<0.3.0"
+langchain-core = ">=0.2.43,<0.3.0"
+langsmith = ">=0.1.112,<0.2.0"
 numpy = {version = ">=1,<2", markers = "python_version < \"3.12\""}
 PyYAML = ">=5.3"
 requests = ">=2,<3"
@@ -6957,4 +6957,4 @@ type = ["pytest-mypy"]
 [metadata]
 lock-version = "2.0"
 python-versions = "~3.11"
-content-hash = "3401e52ef1a8338c52e191b8661a008bd928dd28052c6dd41c58f1b99ab0d38c"
+content-hash = "9cf4c3aa73e1b1181ad0c993c36b9585edf7827f33a4cb1cc1f0c67c6bdc8f87"
diff --git a/pyproject.toml b/pyproject.toml
index 42b6a6374b..f7adcecc21 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -25,9 +25,9 @@ httpx = {extras = ["http2"], version = "^0.27.0"}
 chromadb = "^0.4.16"
 cohere = "^5.5.7"
 inquirer = "^3.2.4"
-langchain = "0.2.15"
+langchain = "0.2.17"
 langchain-cohere = "^0.1.1"
-langchain-community = "0.2.15"
+langchain-community = "0.2.19"
 py-expression-eval = "^0.3.14"
 tavily-python = "^0.3.3"
 arxiv = "^2.1.0"
@@ -88,7 +88,7 @@ fastapi = "0.115.5"
 psycopg2 = "^2.9.9"
 boto3 = "^1.0.0"
 py-expression-eval = "^0.3.14"
-langchain = "0.2.15"
+langchain = "0.2.17"
 langchain-cohere = "^0.1.1"
 tavily-python = "^0.3.3"