chore(deps): bump the prod-dependencies group across 1 directory with 10 updates by dependabot[bot] · Pull Request #52 · cap-js/agents

dependabot · 2026-08-25T04:14:26Z

Bumps the prod-dependencies group with 7 updates in the / directory:

Package	From	To
@langchain/anthropic	`1.5.6`	`1.5.8`
@langchain/langgraph	`1.4.10`	`1.4.12`
@langchain/mcp-adapters	`1.1.3`	`1.1.4`
@sap-ai-sdk/langchain	`2.14.0`	`2.15.0`
deepagents	`1.12.4`	`1.13.1`
marked	`18.0.9`	`18.0.10`
@sap/cds	`10.0.5`	`10.0.6`

Updates @langchain/anthropic from 1.5.6 to 1.5.8

Release notes

Sourced from @langchain/anthropic's releases.

@langchain/anthropic@1.5.8

Patch Changes

#11421 041a755 Thanks @priprocess! - Preserve the generic tool_search_tool_result block type in streaming output and message payload conversion. The Anthropic API emits this un-suffixed type for both tool search variants; previously only the variant-suffixed names were allowlisted, so multi-turn conversations using tool search still failed with INVALID_TOOL_RESULTS after a client-tool round-trip.

@langchain/anthropic@1.5.7

Patch Changes

#11407 3ceef4b Thanks @chenzimin! - Round-trip the tool search server-tool result blocks (tool_search_tool_bm25_tool_result / tool_search_tool_regex_tool_result) through message translation, mirroring web_search_tool_result. Without this, a multi-turn conversation using the tool search tool fails on the next request with 400 invalid_request_error … tool use … found without a corresponding … tool_result block, because the result block was dropped from the assistant message (streaming capture) and on re-send (toolTypes passthrough).

Commits

d5264a1 chore: version packages (#11427)
c26c87e fix(openai): send content null (not []) for tool-call-only v1 assistant messa...
041a755 fix(anthropic): preserve generic tool_search_tool_result blocks (#11421)
e493ed6 chore: version packages (#11393)
8384848 fix(google-common): release endpoint routing fix as patch (#11413)
8cfff4d feat(google): add gateway support for genai (#11405)
7df258c chore(langchain): update langgraph deps (#11412)
3ceef4b fix(anthropic): round-trip tool search server-tool result blocks (#11407)
fe8eec1 fix(openai): drop Gemini functionCall content blocks in Chat Completions mess...
0e7c765 fix(google-genai): throw ContentBlockedError when Gemini candidate has no con...
Additional commits viewable in compare view

Updates @langchain/core from 1.2.8 to 1.2.9

Release notes

Sourced from @langchain/core's releases.

@langchain/core@1.2.9

Patch Changes

#11402 43e4396 Thanks @thushanth-bengre-langchain! - Fix ChatVertexAI/ChatGoogle content blocks: include tool_call blocks from message.tool_calls and skip spurious empty text blocks in contentBlocks.

Commits

e493ed6 chore: version packages (#11393)
8384848 fix(google-common): release endpoint routing fix as patch (#11413)
8cfff4d feat(google): add gateway support for genai (#11405)
7df258c chore(langchain): update langgraph deps (#11412)
3ceef4b fix(anthropic): round-trip tool search server-tool result blocks (#11407)
fe8eec1 fix(openai): drop Gemini functionCall content blocks in Chat Completions mess...
0e7c765 fix(google-genai): throw ContentBlockedError when Gemini candidate has no con...
5c9fdf2 fix(openai): retain cache_write_tokens, update to v7 sdk (#11399)
5ff9179 fix(google-genai): guard streaming chunks when candidate has no content (#10742)
43e4396 fix(core): include tool_call blocks and skip empty text blocks in ChatVertexA...
Additional commits viewable in compare view

Updates @langchain/langgraph from 1.4.10 to 1.4.12

Release notes

Sourced from @langchain/langgraph's releases.

@langchain/langgraph@1.4.12

Patch Changes

#2714 a2a59ec Thanks @hntrl! - Update checkpoint integrations to require the patched checkpoint serializer release.

Updated dependencies [a2a59ec]:

@langchain/langgraph-checkpoint@1.1.5

@langchain/langgraph@1.4.11

Patch Changes

#2706 eaa5472 Thanks @zduric-langchain! - fix(langgraph): dedupe merged callback handlers by identity

mergeCallbacks concatenated handlers and inheritableHandlers while deduping tags, so a handler inherited by both the ambient and the explicit config picked up an extra registration at every graph boundary. With tracing on, a nested streamMode: "messages" run delivered every token twice.

Updated dependencies [3ce9f8d, 51b4202, a86f813]:

@langchain/langgraph-sdk@1.9.30

Changelog

Sourced from @langchain/langgraph's changelog.

1.4.12

Patch Changes

#2714 a2a59ec Thanks @hntrl! - Update checkpoint integrations to require the patched checkpoint serializer release.

Updated dependencies [a2a59ec]:

@langchain/langgraph-checkpoint@1.1.5

1.4.11

Patch Changes

#2706 eaa5472 Thanks @zduric-langchain! - fix(langgraph): dedupe merged callback handlers by identity

mergeCallbacks concatenated handlers and inheritableHandlers while deduping tags, so a handler inherited by both the ambient and the explicit config picked up an extra registration at every graph boundary. With tracing on, a nested streamMode: "messages" run delivered every token twice.

Updated dependencies [3ce9f8d, 51b4202, a86f813]:

@langchain/langgraph-sdk@1.9.30

Commits

6530ba9 chore: version packages (#2715)
c3b27a9 fix(checkpoint): narrow re-constructable types in JsonPlusSerializer (#2709)
659d628 chore: version packages (#2704)
eaa5472 fix(langgraph): dedupe merged callback handlers by identity (#2706)
See full diff in compare view

Updates @langchain/mcp-adapters from 1.1.3 to 1.1.4

Release notes

Sourced from @langchain/mcp-adapters's releases.

@langchain/mcp-adapters@1.1.4

Patch Changes

#11412 7df258c Thanks @hntrl! - chore(langgraph): update langgraph deps to track serialization fix

Commits

e493ed6 chore: version packages (#11393)
8384848 fix(google-common): release endpoint routing fix as patch (#11413)
8cfff4d feat(google): add gateway support for genai (#11405)
7df258c chore(langchain): update langgraph deps (#11412)
3ceef4b fix(anthropic): round-trip tool search server-tool result blocks (#11407)
fe8eec1 fix(openai): drop Gemini functionCall content blocks in Chat Completions mess...
0e7c765 fix(google-genai): throw ContentBlockedError when Gemini candidate has no con...
5c9fdf2 fix(openai): retain cache_write_tokens, update to v7 sdk (#11399)
5ff9179 fix(google-genai): guard streaming chunks when candidate has no content (#10742)
43e4396 fix(core): include tool_call blocks and skip empty text blocks in ChatVertexA...
Additional commits viewable in compare view

Updates @sap-ai-sdk/langchain from 2.14.0 to 2.15.0

Release notes

Sourced from @sap-ai-sdk/langchain's releases.

v2.15.0

Compatibility Notes

[orchestration] Deprecate OrchestrationConfigRef — use OrchestrationConfigRefById or OrchestrationConfigRefByName instead. (b61cb53)

New Features

[core, openai] Add experimental OpenAI Realtime API (speech-to-speech) support for gpt-realtime via the @sap-ai-sdk/openai/realtime sub-path export. (a5407c8)

[langchain] Add orchestrationPromptCachingMiddleware() middleware for the LangChain Orchestration client, exported from @sap-ai-sdk/langchain/orchestration/prompt-caching-middleware. It enables automatic cache control for orchestration requests. The middleware requires the optional langchain peer dependency to be installed. (070b309)

[orchestration] Split OrchestrationConfigRef into OrchestrationConfigRefById and OrchestrationConfigRefByName. (b61cb53)

Changelog

Sourced from @sap-ai-sdk/langchain's changelog.

2.15.0

Minor Changes

070b309: [feat] Add orchestrationPromptCachingMiddleware() middleware for the LangChain Orchestration client, exported from @sap-ai-sdk/langchain/orchestration/prompt-caching-middleware. It enables automatic cache control for orchestration requests. The middleware requires the optional langchain peer dependency to be installed.

Patch Changes

Updated dependencies [b61cb53]

Updated dependencies [b61cb53]

Updated dependencies [a5407c8]

@sap-ai-sdk/orchestration@2.15.0

@sap-ai-sdk/core@2.15.0

@sap-ai-sdk/ai-api@2.15.0

@sap-ai-sdk/foundation-models@2.15.0

Commits

cdc4dfe v2.15.0
454e31a chore(deps): update langchain (#2169)
070b309 feat(langchain): add orchestrationPromptCachingMiddleware (#2013)
2b46f30 chore: replace depcheck with knip (#2065)
637c083 chore: speed up orchestration timeout tests (#2104)
5e3ba1c chore(deps): update langchain (#2145)
26b4e57 chore(deps): update dependency @langchain/langgraph to v1.4.9 (#2136)
See full diff in compare view

Updates @sap-ai-sdk/orchestration from 2.14.0 to 2.15.0

Release notes

Sourced from @sap-ai-sdk/orchestration's releases.

v2.15.0

Compatibility Notes

[orchestration] Deprecate OrchestrationConfigRef — use OrchestrationConfigRefById or OrchestrationConfigRefByName instead. (b61cb53)

New Features

[core, openai] Add experimental OpenAI Realtime API (speech-to-speech) support for gpt-realtime via the @sap-ai-sdk/openai/realtime sub-path export. (a5407c8)

[langchain] Add orchestrationPromptCachingMiddleware() middleware for the LangChain Orchestration client, exported from @sap-ai-sdk/langchain/orchestration/prompt-caching-middleware. It enables automatic cache control for orchestration requests. The middleware requires the optional langchain peer dependency to be installed. (070b309)

[orchestration] Split OrchestrationConfigRef into OrchestrationConfigRefById and OrchestrationConfigRefByName. (b61cb53)

Changelog

Sourced from @sap-ai-sdk/orchestration's changelog.

2.15.0

Minor Changes

b61cb53: [compat] Deprecate OrchestrationConfigRef — use OrchestrationConfigRefById or OrchestrationConfigRefByName instead.

b61cb53: [feat] Split OrchestrationConfigRef into OrchestrationConfigRefById and OrchestrationConfigRefByName.

Patch Changes

Updated dependencies [a5407c8]

@sap-ai-sdk/core@2.15.0

@sap-ai-sdk/ai-api@2.15.0

@sap-ai-sdk/prompt-registry@2.15.0

Commits

cdc4dfe v2.15.0
b61cb53 feat: Overload Orchestration client constructor (#2097)
See full diff in compare view

Updates deepagents from 1.12.4 to 1.13.1

Release notes

Sourced from deepagents's releases.

deepagents@1.13.1

Patch Changes

#771 bcc2f5d Thanks @thushanth-bengre-langchain! - fix(deepagents): require mode: "fork" on ForkedSubAgent

ForkedSubAgent.mode was optional, defaulting to being omitted per its own documented example. Since SubAgent.systemPrompt is also optional, a ForkedSubAgent that omitted mode had the same shape as a plain SubAgent and silently misrouted between forking and non-forking behavior. mode: "fork" is now required on ForkedSubAgent, closing the ambiguity.

#776 95afe3e Thanks @baskaryan! - chore(deepagents): widen the langsmith peer range to >=0.7.1 <0.10.0

The upper bound stops below 0.10.0 rather than 1.0.0 because langsmith is pre-1.0 and ships breaking changes in minor bumps, so a new minor should be adopted deliberately instead of pre-authorized.

deepagents@1.13.0

Minor Changes

#675 ba8d4aa Thanks @hntrl! - feat(filesystem): add recursive delete tool

#752 b20d6ad Thanks @thushanth-bengre-langchain! - feat(deepagents): add ForkedSubAgent for subagent conversation forking

Lets a subagent inherit the parent's conversation history instead of only seeing the task description.

Patch Changes

#759 85a55e1 Thanks @christian-bromann! - fix(deepagents): cap sandbox glob find so root searches cannot OOM the host

Recursive glob listed every path under the search root (and with -L could loop through /proc/*/root). Prune virtual filesystems and soft-cap find output so a glob("**/x", "/") cannot exhaust the runtime heap.

#768 f124127 Thanks @casparb! - fix(deepagents): accept permission paths that exactly equal a composite route

A permission path equal to a single-file mount (e.g. /instructions.md) was rejected when the backend supported execution, forcing users to write /instructions.md/**. The route-scoping check now also accepts the route root itself. Sibling prefixes such as /workspace2/** for route /workspace remain rejected.

#769 d4045de Thanks @hntrl! - chore(deps): update langgraph deps to track serialization fix

Commits

c0bc769 chore: version packages (#773)
95afe3e chore(deepagents): widen langsmith peer range to >=0.7.1 <0.10.0 (#776)
bcc2f5d fix(deepagents): restore required systemPrompt and fix isForkedSubAgent check...
cb3dbec fix(deps): patch nanoid, js-yaml, and postcss advisories (#770)
43ef0e6 chore: version packages (#765)
b20d6ad feat(deepagents): introduce ForkedSubAgent type for subagent conversation for...
d4045de chore(deepagents): update langgraph deps (#769)
f124127 fix(deepagents): accept permission paths equal to a composite route root (#768)
85a55e1 fix(deepagents): cap sandbox glob find so root searches cannot OOM the host (...
ba8d4aa feat(deepagents): add recursive delete tool (#675)
Additional commits viewable in compare view

Updates langchain from 1.5.9 to 1.5.10

Release notes

Sourced from langchain's releases.

langchain@1.5.10

Patch Changes

#11412 7df258c Thanks @hntrl! - chore(langgraph): update langgraph deps to track serialization fix

Commits

e493ed6 chore: version packages (#11393)
8384848 fix(google-common): release endpoint routing fix as patch (#11413)
8cfff4d feat(google): add gateway support for genai (#11405)
7df258c chore(langchain): update langgraph deps (#11412)
3ceef4b fix(anthropic): round-trip tool search server-tool result blocks (#11407)
fe8eec1 fix(openai): drop Gemini functionCall content blocks in Chat Completions mess...
0e7c765 fix(google-genai): throw ContentBlockedError when Gemini candidate has no con...
5c9fdf2 fix(openai): retain cache_write_tokens, update to v7 sdk (#11399)
5ff9179 fix(google-genai): guard streaming chunks when candidate has no content (#10742)
43e4396 fix(core): include tool_call blocks and skip empty text blocks in ChatVertexA...
Additional commits viewable in compare view

Updates marked from 18.0.9 to 18.0.10

Release notes

Sourced from marked's releases.

v18.0.10

18.0.10 (2026-08-18)

Bug Fixes

keep the em/strong mask the same length as the source (#4044) (681373c)

parse EOF backtick fences after paragraphs (#4039) (81bd750)

place task checkboxes after list loose is finalized (#4046) (b8cf7dc), closes #4045

Commits

8698d35 chore(release): 18.0.10 [skip ci]
58367a5 chore(deps-dev): bump eslint from 10.8.0 to 10.8.1 (#4055)
a426c4d chore(deps-dev): bump esbuild from 0.28.1 to 0.28.2 (#4056)
a5cf277 chore(deps-dev): bump highlight.js from 11.11.1 to 11.12.0 (#4057)
ca00e95 docs: replace nonexistent test:all script with npm test (#4054)
b8cf7dc fix: place task checkboxes after list loose is finalized (#4046)
9552b6b chore(deps-dev): bump semantic-release from 25.0.8 to 25.0.9 (#4049)
681373c fix: keep the em/strong mask the same length as the source (#4044)
81bd750 fix: parse EOF backtick fences after paragraphs (#4039)
2e21cd3 docs: move theme button to menu (#4043)
Additional commits viewable in compare view

Updates @sap/cds from 10.0.5 to 10.0.6

Akatuoro · 2026-08-25T11:37:52Z

@dependabot rebase

… 10 updates Bumps the prod-dependencies group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@langchain/anthropic](https://github.com/langchain-ai/langchainjs) | `1.5.6` | `1.5.8` | | [@langchain/langgraph](https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/langgraph-core) | `1.4.10` | `1.4.12` | | [@langchain/mcp-adapters](https://github.com/langchain-ai/langchainjs) | `1.1.3` | `1.1.4` | | [@sap-ai-sdk/langchain](https://github.com/SAP/ai-sdk-js/tree/HEAD/packages/langchain) | `2.14.0` | `2.15.0` | | [deepagents](https://github.com/langchain-ai/deepagentsjs) | `1.12.4` | `1.13.1` | | [marked](https://github.com/markedjs/marked) | `18.0.9` | `18.0.10` | | [@sap/cds](https://cap.cloud.sap/) | `10.0.5` | `10.0.6` | Updates `@langchain/anthropic` from 1.5.6 to 1.5.8 - [Release notes](https://github.com/langchain-ai/langchainjs/releases) - [Commits](https://github.com/langchain-ai/langchainjs/compare/@langchain/anthropic@1.5.6...@langchain/anthropic@1.5.8) Updates `@langchain/core` from 1.2.8 to 1.2.9 - [Release notes](https://github.com/langchain-ai/langchainjs/releases) - [Commits](https://github.com/langchain-ai/langchainjs/compare/@langchain/core@1.2.8...@langchain/core@1.2.9) Updates `@langchain/langgraph` from 1.4.10 to 1.4.12 - [Release notes](https://github.com/langchain-ai/langgraphjs/releases) - [Changelog](https://github.com/langchain-ai/langgraphjs/blob/main/libs/langgraph-core/CHANGELOG.md) - [Commits](https://github.com/langchain-ai/langgraphjs/commits/@langchain/langgraph@1.4.12/libs/langgraph-core) Updates `@langchain/mcp-adapters` from 1.1.3 to 1.1.4 - [Release notes](https://github.com/langchain-ai/langchainjs/releases) - [Commits](https://github.com/langchain-ai/langchainjs/compare/langchain@1.1.3...@langchain/mcp-adapters@1.1.4) Updates `@sap-ai-sdk/langchain` from 2.14.0 to 2.15.0 - [Release notes](https://github.com/SAP/ai-sdk-js/releases) - [Changelog](https://github.com/SAP/ai-sdk-js/blob/main/packages/langchain/CHANGELOG.md) - [Commits](https://github.com/SAP/ai-sdk-js/commits/v2.15.0/packages/langchain) Updates `@sap-ai-sdk/orchestration` from 2.14.0 to 2.15.0 - [Release notes](https://github.com/SAP/ai-sdk-js/releases) - [Changelog](https://github.com/SAP/ai-sdk-js/blob/main/packages/orchestration/CHANGELOG.md) - [Commits](https://github.com/SAP/ai-sdk-js/commits/v2.15.0/packages/orchestration) Updates `deepagents` from 1.12.4 to 1.13.1 - [Release notes](https://github.com/langchain-ai/deepagentsjs/releases) - [Commits](https://github.com/langchain-ai/deepagentsjs/compare/deepagents@1.12.4...deepagents@1.13.1) Updates `langchain` from 1.5.9 to 1.5.10 - [Release notes](https://github.com/langchain-ai/langchainjs/releases) - [Commits](https://github.com/langchain-ai/langchainjs/compare/langchain@1.5.9...langchain@1.5.10) Updates `marked` from 18.0.9 to 18.0.10 - [Release notes](https://github.com/markedjs/marked/releases) - [Commits](markedjs/marked@v18.0.9...v18.0.10) Updates `@sap/cds` from 10.0.5 to 10.0.6 --- updated-dependencies: - dependency-name: "@langchain/anthropic" dependency-version: 1.5.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-dependencies - dependency-name: "@langchain/core" dependency-version: 1.2.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-dependencies - dependency-name: "@langchain/langgraph" dependency-version: 1.4.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-dependencies - dependency-name: "@langchain/mcp-adapters" dependency-version: 1.1.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-dependencies - dependency-name: "@sap-ai-sdk/langchain" dependency-version: 2.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-dependencies - dependency-name: "@sap-ai-sdk/orchestration" dependency-version: 2.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-dependencies - dependency-name: "@sap/cds" dependency-version: 10.0.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-dependencies - dependency-name: deepagents dependency-version: 1.13.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-dependencies - dependency-name: langchain dependency-version: 1.5.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-dependencies - dependency-name: marked dependency-version: 18.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 25, 2026

dependabot Bot requested a review from a team as a code owner August 25, 2026 04:14

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 25, 2026

Akatuoro added the no changelog label Aug 25, 2026

Akatuoro reviewed Aug 25, 2026

View reviewed changes

Comment thread tests/projects/bookshop/package.json

dependabot Bot changed the title ~~chore(deps): bump the prod-dependencies group with 10 updates~~ chore(deps): bump the prod-dependencies group across 1 directory with 10 updates Aug 25, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/prod-dependencies-342eb6a30d branch from 4e9bf9d to acaf9cb Compare August 25, 2026 11:39

Akatuoro previously approved these changes Aug 25, 2026

View reviewed changes

dependabot Bot dismissed Akatuoro’s stale review via bb40b40 August 25, 2026 15:49

dependabot Bot force-pushed the dependabot/npm_and_yarn/prod-dependencies-342eb6a30d branch from acaf9cb to bb40b40 Compare August 25, 2026 15:49

Navigation Menu

Uh oh!

chore(deps): bump the prod-dependencies group across 1 directory with 10 updates - #52

chore(deps): bump the prod-dependencies group across 1 directory with 10 updates#52
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/prod-dependencies-342eb6a30d

dependabot Bot commented on behalf of github Aug 25, 2026 •

edited

Loading

Uh oh!

Akatuoro commented Aug 25, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

@​langchain/anthropic@​1.5.8

Patch Changes

@​langchain/anthropic@​1.5.7

Patch Changes

@​langchain/core@​1.2.9

Patch Changes

@​langchain/langgraph@​1.4.12

Patch Changes

@​langchain/langgraph@​1.4.11

Patch Changes

1.4.12

Patch Changes

1.4.11

Patch Changes

@​langchain/mcp-adapters@​1.1.4

Patch Changes

v2.15.0

Compatibility Notes

New Features

2.15.0

Minor Changes

Patch Changes

v2.15.0

Compatibility Notes

New Features

2.15.0

Minor Changes

Patch Changes

deepagents@1.13.1

Patch Changes

deepagents@1.13.0

Minor Changes

Patch Changes

langchain@1.5.10

Patch Changes

v18.0.10

18.0.10 (2026-08-18)

Bug Fixes

Uh oh!

Akatuoro commented Aug 25, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

dependabot Bot commented on behalf of github Aug 25, 2026 •

edited

Loading

`@langchain/anthropic@1`.5.8

`@langchain/anthropic@1`.5.7

`@langchain/core@1`.2.9

`@langchain/langgraph@1`.4.12

`@langchain/langgraph@1`.4.11

`@langchain/mcp-adapters@1`.1.4