Skip to content

chore(deps): bump the langchain and claude-sdk families (slice 3 of 3 from #19) - #23

Merged
Robobc merged 1 commit into
mainfrom
deps/langchain-claude-family
Aug 19, 2026
Merged

chore(deps): bump the langchain and claude-sdk families (slice 3 of 3 from #19)#23
Robobc merged 1 commit into
mainfrom
deps/langchain-claude-family

Conversation

@Robobc

@Robobc Robobc commented Aug 18, 2026

Copy link
Copy Markdown
Contributor

What

Final slice from #19: langgraph-agent, agui-langgraph-agent, claude-sdk-agent, claude-sdk-multi-agent — the patterns with the tangled constraints.

Package From To
langchain 1.2.10 / 1.2.13 1.3.15
langgraph 1.0.10 / 1.1.10 1.2.11
langchain-aws 1.4.1 1.7.1
langchain-mcp-adapters 0.2.2 0.3.2
langgraph-checkpoint-aws 1.0.6 1.2.2
copilotkit 0.1.83 0.1.94
claude-agent-sdk 0.1.48 0.2.139
bedrock-agentcore 1.4.7 1.21.0
aws-opentelemetry-distro >=0.10.1 >=0.19.0
mcp 1.29.0 unchanged — not 2.0.0

claude-agent-sdk 0.2.139 and langchain-mcp-adapters 0.3.2 both still require mcp<2.0.0.

A constraint just disappeared

This repo carried a note that copilotkit caps the AG-UI langgraph pattern at Python 3.12 and langchain 1.2.x. copilotkit 0.1.94 lifts it: requires_python <3.15,>=3.10 (0.1.83 said <3.13), and it now only asks for langgraph<2 / langchain>=0.3.0. Moving that pattern's Dockerfile to Python 3.13 is now possible — left as its own change, not smuggled into a dependency bump.

Verified — the checks GitHub CI cannot run

  • arm64 build + import agent in-image, all four patterns (versions confirmed from inside the containers).
  • Live, hardest path first: deployed AGENT_PATTERN=agui-langgraph-agent → UPDATE_COMPLETE → runtime protocol AGUIinvoke.py --agui returned typed AG-UI events with a real gateway web-search answer and cited URL. One test covering copilotkit's AG-UI wrapper, the langgraph checkpointer against AgentCore Memory, the MCP adapters against the Gateway, and the M2M token vault — all on the new versions.
  • Rig restored to AGENT_PATTERN=orchestrator.

Merging

#21 (root toolchain) → #22 (strands family) → this one. Independent files, so order only matters for a clean CI signal. Once all three land, #19 can be closed — it's fully superseded and uninstallable as written.

… from #19)

langchain 1.2.x → 1.3.15, langgraph 1.0/1.1 → 1.2.11, langchain-aws 1.7.1,
langchain-mcp-adapters 0.3.2, langgraph-checkpoint-aws 1.2.2,
copilotkit 0.1.83 → 0.1.94, claude-agent-sdk 0.1.48 → 0.2.139,
bedrock-agentcore 1.21.0, ADOT >=0.19.0, plus pydantic/PyJWT/requests/
urllib3/python-multipart across langgraph-agent, agui-langgraph-agent,
claude-sdk-agent and claude-sdk-multi-agent.

mcp stays 1.29.0: claude-agent-sdk 0.2.139 and langchain-mcp-adapters 0.3.2
both still require mcp<2.0.0, so #19's mcp==2.0.0 is uninstallable.

The copilotkit ceiling recorded in this repo's notes is GONE — 0.1.94
declares requires_python <3.15,>=3.10 (0.1.83 capped it at <3.13) and only
langgraph<2 / langchain>=0.3.0, so the AG-UI langgraph pattern is no longer
pinned to langchain 1.2.x. Its Dockerfile still targets python 3.12; moving
it to 3.13 is now possible but is its own change, not a dependency bump.

Verified (the checks GitHub CI cannot run):
- arm64 build + 'import agent' in-image, all four: langgraph-agent (py3.13,
  langchain 1.3.15, langgraph 1.2.11, mcp 1.29.0), agui-langgraph-agent
  (py3.12, same versions), both claude-sdk patterns (claude-agent-sdk
  0.2.139, mcp 1.29.0).
- LIVE, hardest path first: deployed AGENT_PATTERN=agui-langgraph-agent,
  UPDATE_COMPLETE, runtime protocol confirmed AGUI, and
  'invoke.py --agui' returned typed AG-UI events with a real gateway
  web-search answer and cited URL. That covers copilotkit's AG-UI wrapper,
  the langgraph checkpointer against AgentCore Memory, the MCP adapters
  against the gateway, and the M2M token vault on the new versions.
- Rig restored to AGENT_PATTERN=orchestrator.
@github-actions

Copy link
Copy Markdown

Commit: 6ef0f5f | Updated: 2026-08-19 00:02:00 UTC

Security Scan Results

Scanner S C H M L I Time Action Result Thresh
bandit 0 0 0 0 0 0 863ms 0 PASSED MED (g)
cdk-nag 0 0 0 0 0 0 7.2s 0 PASSED MED (g)
cfn-nag 0 0 0 0 0 0 99ms 0 PASSED MED (g)
checkov 0 0 0 0 0 0 5.6s 0 PASSED MED (g)
detect-secrets 0 0 0 0 0 0 29ms 0 PASSED MED (g)
grype 0 0 0 0 0 0 1m 3s 0 PASSED MED (g)
npm-audit 0 0 0 0 0 0 226ms 0 PASSED MED (g)
opengrep 0 0 0 0 0 0 18.3s 0 PASSED MED (g)
semgrep 0 0 0 0 0 0 <1ms 0 MISSING MED (g)
syft 0 0 0 0 0 0 2.1s 0 PASSED MED (g)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant