RepoJournal
AI Agents

AI Agents

LangChain, OpenHands, Cline, and LlamaIndex - agent frameworks and coding agents

Keep up with AI Agents in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

Topics: AI Agents AI / ML Full archive →

The Wire · Showcase

LANGCHAIN SHIPS THREE CRITICAL RELEASES IN 12 HOURS, CLOSES SETUPTOOLS VULNERABILITY

By RepoJournal · Filed · About AI Agents

LangChain pushed langchain-core 1.5.4, langchain 1.3.15, and langchain-anthropic 1.5.5 overnight while patching a setuptools supply-chain risk that gated the Hugging Face integration.

Three production releases landed across the core stack [2][3][4]. Langchain-anthropic 1.5.5 adds reasoning token reporting to usage metadata and fixes a KeyError in Claude file-tool middleware [2]. Langchain-core 1.5.4 brings Pydantic 2.14 compatibility, closes a StructuredPrompt mutation bug that corrupted caller kwargs, and fixes internal event loop leaks in streaming tracers [4]. Langchain 1.3.15 exposes trace_policy on AgentMiddleware and patches history preservation in SummarizationMiddleware [3]. Separately, a critical setuptools bump from 81.0.0 to 84.0.0 resolved CVE-2026-59890 in the Hugging Face lockfile [1], keeping that integration shipping. In the agent space, OpenHands enforced typed TypeScript client calls across the agent-server API to eliminate auth bypass risks [5], Cline fixed a dashboard bug where recoverable agent errors were incorrectly terminating turns mid-run [6], and llama_index corrected CitationQueryEngine to assign unique IDs to citation chunks instead of reusing source node identifiers [7]. This 24-hour window saw 28 commits, 26 PRs, and 5 releases across the stack with zero critical security gaps remaining.

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] chore: bump setuptools in Hugging Face lockfile (#39603) langchain-ai/langchain
  2. [2] langchain-anthropic==1.5.5 ↗ langchain-ai/langchain
  3. [3] langchain==1.3.15 ↗ langchain-ai/langchain
  4. [4] langchain-core==1.5.4 ↗ langchain-ai/langchain
  5. [5] chore: enforce typed @openhands/typescript-client for agent-server API calls (no ad-hoc fetch) ↗ OpenHands/OpenHands
  6. [6] fix(hub): recoverable agent errors must not end the turn in the dashboard (#12962) cline/cline
  7. [7] fix(core): give each CitationQueryEngine citation node its own id and offsets ↗ run-llama/llama_index

Quick answers

What shipped in AI Agents on August 12, 2026?
LangChain pushed langchain-core 1.5.4, langchain 1.3.15, and langchain-anthropic 1.5.5 overnight while patching a setuptools supply-chain risk that gated the Hugging Face integration. In total, 28 commits, 26 pull requests, and 5 releases landed.
Who contributed to AI Agents on August 12, 2026?
13 developers shipped this update, including John Kennedy, github-actions[bot], langchain-oss-model-profiles[bot], neubig, opensource-joe, lufen, Mikołaj Kondratek, and Haley Park, and 5 more.
What were the notable AI Agents updates?
chore: bump setuptools in Hugging Face lockfile (#39603), langchain-anthropic==1.5.5, and langchain==1.3.15.

More from AI Agents

Daily updates, in your inbox

Follow AI Agents

Keep up with AI Agents in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

Want every project, not just this one?