chore(deps): bump langchain-core from 0.3.81 to 1.2.11 in /backend/requirements

[dependabot]

Bumps langchain-core from 0.3.81 to 1.2.11.

Release notes

Sourced from langchain-core's releases.

langchain-core==1.2.11

Changes since langchain-core==1.2.10

release(core): 1.2.11 (#35144) fix(openai): sanitize urls when counting tokens in images (#35143) chore(core): clean up docstring mismatch and redundant logic in langchain-core (#35064) fix(core): replace bare except with Exception in tracer (#35138)

langchain-core==1.2.10

Changes since langchain-core==1.2.9

release(core): 1.2.10 (#35136) chore(deps): bump the langchain-deps group across 3 directories with 40 updates (#35129) chore(deps): bump the langchain-deps group across 3 directories with 11 updates (#35121) feat(core): add ContextOverflowError, raise in anthropic and openai (#35099) feat(model-profiles): add text_inputs and text_outputs (#35084) feat(core): count tokens from tool schemas in count_tokens_approximately (#35098) docs(core): add missing name docstring for RunnableSerializable (#35088)

langchain-core==1.2.9

Changes since langchain-core==1.2.8

release(core): 1.2.9 (#35025) fix(core): adjust cap when scaling approximate token counts (#35017) revert: precompile hex color regex pattern at module level (#35016) chore: add make type target (#35015) revert: "chore: add typing target in Makefile" (#35013) chore: add typing target in Makefile (#35012) fix(core): apply cap when scaling approximate token counts (#35005) feat(core): allow scaling by reported usage when counting tokens approximately (#34996) test(core): increase delta_time for flaky test (#34982) chore: enrich pyproject.toml files (#34980)

langchain-core==1.2.8

Changes since langchain-core==1.2.7

release(core): 1.2.8 (#34975) docs(core): add examples for pretty_repr, pretty_print (#34968) docs(core): use proper admonition for get_buffer_string (#34967) docs: add usage examples to core classes (#34841) chore(core): fix docstring format (#34966) chore(deps): bump the uv group across 20 directories with 3 updates (#34941) docs: add example to create_message function docstring (#34851) docs(core): clarify @​tool decorator argument and return type requirements (#34860) fix(core): fix nested mustache variable extraction and update docs (#34872) fix(core): allow base model annotations for empty model (#34932) chore: upgrade urllib3 to 2.6.3 (#34940) fix(core): prevent crash in ParrotFakeChatModel when messages list is empty (#34943) fix(core): google docstring parsing with no arguments/reserved arguments (#34861) test(core): add tests for approximate token counting with multimodal messages (#34898)

... (truncated)

Commits

• 524e1da release(core): 1.2.11 (#35144)
• 2b4b1dc fix(openai): sanitize urls when counting tokens in images (#35143)
• 0493b27 fix(anthropic): support effort="max" and remove beta headers (#35141)
• a5f22e7 chore(core): clean up docstring mismatch and redundant logic in langchain-cor...
• 97ee14c fix(core): replace bare except with Exception in tracer (#35138)
• 990e807 release(standard-tests): release 1.1.5 (#35139)
• 74dffca release(langchain): 1.2.10 (#35137)
• f41e049 release(core): 1.2.10 (#35136)
• de05838 chore(deps): bump the langchain-deps group across 3 directories with 40 updat...
• d6e86aa chore(deps): bump the other-deps group across 3 directories with 12 updates (...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

---

Summary by cubic

Upgrade langchain-core to 1.2.11 and remove unused backend deps: langchain, langchain-text-splitters, and langchainhub. Brings upstream fixes for image token counting (URL sanitization) and safer tracer exception handling; uuid-utils is now pulled in transitively.

^{Written for commit afadb2d. Summary will update on new commits.}

[greptile-apps]

PR author is in the excluded authors list.

[cubic-dev-ai]

1 issue found across 1 file

Prompt for AI agents (all issues)

Check if these issues are valid — if so, understand the root cause of each and fix them.


<file name="backend/requirements/default.txt">

<violation number="1" location="backend/requirements/default.txt:500">
P0: **Breaking version incompatibility**: `langchain-core==1.2.11` is incompatible with the unchanged `langchain==0.3.23` and `langchain-text-splitters==0.3.9`. The `langchain` 0.3.x series requires `langchain-core>=0.3.72,<1.0.0`. This will cause installation failures or runtime import errors.

Per the project's `backend/requirements/README.md`, these `.txt` files should not be edited directly — update `pyproject.toml` and regenerate via `uv`. All langchain packages (`langchain`, `langchain-core`, `langchain-text-splitters`) need to be upgraded together to compatible versions (e.g., all to 1.x).</violation>
</file>

_{Reply with feedback, questions, or to request a fix. Tag @cubic-dev-ai to re-run a review.}