From 9e4025c36211319fa0279aeaa3e02c1ca5473db6 Mon Sep 17 00:00:00 2001 From: etserend Date: Wed, 21 Oct 2026 09:50:26 -0500 Subject: [PATCH] fix(deps): upgrade langgraph-sdk to 0.4.8 (VULN-125286) Lock langgraph-sdk at 0.4.8 (CVE-2026-104873 is fixed in 0.4.4). Lock-only change within langgraph's existing "langgraph-sdk >=0.4.2,<0.5.0" constraint. Co-Authored-By: Claude Code --- poetry.lock | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/poetry.lock b/poetry.lock index 68a4dc3a..170c315f 100644 --- a/poetry.lock +++ b/poetry.lock @@ -2211,15 +2211,15 @@ langgraph-checkpoint = ">=2.1.0,<5.0.0" [[package]] name = "langgraph-sdk" -version = "0.4.2" +version = "0.4.8" description = "SDK for interacting with LangGraph API" optional = true python-versions = ">=3.10" groups = ["main"] markers = "extra == \"langchain\" or extra == \"all\"" files = [ - {file = "langgraph_sdk-0.4.2-py3-none-any.whl", hash = "sha256:75fa5096c1177ce39c847096a8fe3745ffd480ddb412995f836e9f5f884c43dd"}, - {file = "langgraph_sdk-0.4.2.tar.gz", hash = "sha256:b88f0f5f6328ac0680d6790614a905b2bcfa257f2276dba4e38f0e86db0aa738"}, + {file = "langgraph_sdk-0.4.8-py3-none-any.whl", hash = "sha256:bef8ac54bdfe3ac2f7eba5be2f322dde296701b39e1c1aa403302f08d273fab5"}, + {file = "langgraph_sdk-0.4.8.tar.gz", hash = "sha256:6dd0c55d0d9040686716581c9e302c21c31ad6e2eebda0defc944a8bb38ec011"}, ] [package.dependencies] @@ -2227,7 +2227,7 @@ httpx = ">=0.25.2" langchain-core = ">=1.4.0,<2" langchain-protocol = ">=0.0.15" orjson = ">=3.11.5" -websockets = ">=14,<16" +websockets = ">=14,<17" [[package]] name = "langsmith"