release(text-splitters): 1.1.2 (#36822)
fix(text-splitters): deprecate and use SSRF-safe transport in split_text_from_url (#36821)
chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/text-splitters (#36797)
chore(deps): bump pytest to 9.0.3 (#36801)
chore: bump pytest from 9.0.2 to 9.0.3 in /libs/text-splitters (#36714)
chore: add comment explaining pygments>=2.20.0 (#36570)
release(core): 1.2.26 (#36511)
chore: pygments>=2.20.0 across all packages (CVE-2026-4539) (#36385)
fix(text-splitters): prevent silent data loss for empty dict values in RecursiveJsonSplitter (#35079)
feat(text-splitters): support spacy tests with Python 3.14 (#36198)
fix(infra): correct lint_diff relative paths in package makefiles (#36333)
chore: bump requests from 2.32.5 to 2.33.0 in /libs/text-splitters (#36238)
chore: bump nltk from 3.9.3 to 3.9.4 in /libs/text-splitters (#36237)
chore(partners): bump langchain-core min to 1.2.21 (#36183)
chore(text-splitters): bump nltk in lock file (#36112)
ci: suppress pytest streaming output in CI (#36092)
chore(text-splitters): speed up ci (#36050)
ci: avoid unnecessary dep installs in lint targets (#36046)
chore: bump orjson from 3.11.5 to 3.11.6 in /libs/text-splitters (#35856)
chore: bump locks, lint (#35985)
perf(.github): set a timeout on get min versions HTTP calls (#35851)
chore: bump tornado from 6.5.2 to 6.5.5 in /libs/text-splitters (#35774)
chore: bump the minor-and-patch group across 3 directories with 3 updates (#35589)
chore: bump the other-deps group across 3 directories with 2 updates (#35512)
chore: bump nltk from 3.9.2 to 3.9.3 in /libs/text-splitters (#35449)
chore: bump the other-deps group across 3 directories with 2 updates (#35407)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.
## 📋 Pull Request Information
**Original PR:** https://github.com/open-webui/open-webui/pull/24276
**Author:** [@dependabot[bot]](https://github.com/apps/dependabot)
**Created:** 5/1/2026
**Status:** ❌ Closed
**Base:** `dev` ← **Head:** `dependabot/pip/backend/dev/langchain-text-splitters-1.1.2`
---
### 📝 Commits (1)
- [`d6a5710`](https://github.com/open-webui/open-webui/commit/d6a571066b9ea44beb39b3221cb2d2d3ab06eb9a) Bump langchain-text-splitters from 1.1.1 to 1.1.2 in /backend
### 📊 Changes
**2 files changed** (+2 additions, -2 deletions)
<details>
<summary>View changed files</summary>
📝 `backend/requirements-min.txt` (+1 -1)
📝 `backend/requirements.txt` (+1 -1)
</details>
### 📄 Description
Bumps [langchain-text-splitters](https://github.com/langchain-ai/langchain) from 1.1.1 to 1.1.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/langchain-ai/langchain/releases">langchain-text-splitters's releases</a>.</em></p>
<blockquote>
<h2>langchain-text-splitters==1.1.2</h2>
<p>Changes since langchain-text-splitters==1.1.1</p>
<p>release(text-splitters): 1.1.2 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36822">#36822</a>)
fix(text-splitters): deprecate and use SSRF-safe transport in split_text_from_url (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36821">#36821</a>)
chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/text-splitters (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36797">#36797</a>)
chore(deps): bump pytest to <code>9.0.3</code> (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36801">#36801</a>)
chore: bump pytest from 9.0.2 to 9.0.3 in /libs/text-splitters (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36714">#36714</a>)
chore: add comment explaining <code>pygments>=2.20.0</code> (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36570">#36570</a>)
release(core): 1.2.26 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36511">#36511</a>)
chore: pygments>=2.20.0 across all packages (CVE-2026-4539) (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36385">#36385</a>)
fix(text-splitters): prevent silent data loss for empty dict values in RecursiveJsonSplitter (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35079">#35079</a>)
feat(text-splitters): support spacy tests with Python 3.14 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36198">#36198</a>)
fix(infra): correct lint_diff relative paths in package makefiles (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36333">#36333</a>)
chore: bump requests from 2.32.5 to 2.33.0 in /libs/text-splitters (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36238">#36238</a>)
chore: bump nltk from 3.9.3 to 3.9.4 in /libs/text-splitters (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36237">#36237</a>)
chore(partners): bump <code>langchain-core</code> min to <code>1.2.21</code> (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36183">#36183</a>)
chore(text-splitters): bump nltk in lock file (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36112">#36112</a>)
ci: suppress pytest streaming output in CI (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36092">#36092</a>)
chore(text-splitters): speed up ci (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36050">#36050</a>)
ci: avoid unnecessary dep installs in lint targets (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36046">#36046</a>)
chore: bump orjson from 3.11.5 to 3.11.6 in /libs/text-splitters (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35856">#35856</a>)
chore: bump locks, lint (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35985">#35985</a>)
perf(.github): set a timeout on get min versions HTTP calls (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35851">#35851</a>)
chore: bump tornado from 6.5.2 to 6.5.5 in /libs/text-splitters (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35774">#35774</a>)
chore: bump the minor-and-patch group across 3 directories with 3 updates (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35589">#35589</a>)
chore: bump the other-deps group across 3 directories with 2 updates (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35512">#35512</a>)
chore: bump nltk from 3.9.2 to 3.9.3 in /libs/text-splitters (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35449">#35449</a>)
chore: bump the other-deps group across 3 directories with 2 updates (<a href="https://redirect.github.com/langchain-ai/langchain/issues/35407">#35407</a>)</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/langchain-ai/langchain/commit/58c4e5bbdd9d18d7fe7ec83b5a05477d06fe2a8e"><code>58c4e5b</code></a> release(text-splitters): 1.1.2 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36822">#36822</a>)</li>
<li><a href="https://github.com/langchain-ai/langchain/commit/c289bf10e940e960a132d7403482283114063063"><code>c289bf1</code></a> fix(text-splitters): deprecate and use SSRF-safe transport in split_text_from...</li>
<li><a href="https://github.com/langchain-ai/langchain/commit/b7447c6969fc928ec3f29c200e2e56c0a46c4c77"><code>b7447c6</code></a> fix(infra): skip serdes tests in min-version release step (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36818">#36818</a>)</li>
<li><a href="https://github.com/langchain-ai/langchain/commit/41c0cc58b0dac82000d24715f7a4b44dc8b01fd3"><code>41c0cc5</code></a> release(openai): 1.1.14 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36820">#36820</a>)</li>
<li><a href="https://github.com/langchain-ai/langchain/commit/0516156ef98f5001129f6d47bc8682d6536d58fb"><code>0516156</code></a> fix(openai): use SSRF-safe transport for image token counting (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36819">#36819</a>)</li>
<li><a href="https://github.com/langchain-ai/langchain/commit/338aa8131a8124e7aa1e042616ccd2366ff9f699"><code>338aa81</code></a> fix(core): restore cloud metadata IPs and link-local range in SSRF policy (<a href="https://redirect.github.com/langchain-ai/langchain/issues/3">#3</a>...</li>
<li><a href="https://github.com/langchain-ai/langchain/commit/51e954877efd2d2c3c5bf09364dcfec8794eadb0"><code>51e9548</code></a> chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/text-splitters (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36797">#36797</a>)</li>
<li><a href="https://github.com/langchain-ai/langchain/commit/e85c418cfa559d4a794ddc6db92c6febab44651c"><code>e85c418</code></a> chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/model-profiles (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36798">#36798</a>)</li>
<li><a href="https://github.com/langchain-ai/langchain/commit/789126e6c78ad74664bea26228dda6e72e135dce"><code>789126e</code></a> chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/standard-tests (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36799">#36799</a>)</li>
<li><a href="https://github.com/langchain-ai/langchain/commit/937b3eb3827551d17ee4736f9acc4aa57e88c716"><code>937b3eb</code></a> chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/langchain_v1 (<a href="https://redirect.github.com/langchain-ai/langchain/issues/36800">#36800</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/langchain-ai/langchain/compare/langchain-text-splitters==1.1.1...langchain-text-splitters==1.1.2">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
---
<sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
📋 Pull Request Information
Original PR: https://github.com/open-webui/open-webui/pull/24276
Author: @dependabot[bot]
Created: 5/1/2026
Status: ❌ Closed
Base:
dev← Head:dependabot/pip/backend/dev/langchain-text-splitters-1.1.2📝 Commits (1)
d6a5710Bump langchain-text-splitters from 1.1.1 to 1.1.2 in /backend📊 Changes
2 files changed (+2 additions, -2 deletions)
View changed files
📝
backend/requirements-min.txt(+1 -1)📝
backend/requirements.txt(+1 -1)📄 Description
Bumps langchain-text-splitters from 1.1.1 to 1.1.2.
Release notes
Sourced from langchain-text-splitters's releases.
Commits
58c4e5brelease(text-splitters): 1.1.2 (#36822)c289bf1fix(text-splitters): deprecate and use SSRF-safe transport in split_text_from...b7447c6fix(infra): skip serdes tests in min-version release step (#36818)41c0cc5release(openai): 1.1.14 (#36820)0516156fix(openai): use SSRF-safe transport for image token counting (#36819)338aa81fix(core): restore cloud metadata IPs and link-local range in SSRF policy (#3...51e9548chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/text-splitters (#36797)e85c418chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/model-profiles (#36798)789126echore: bump langsmith from 0.6.3 to 0.7.31 in /libs/standard-tests (#36799)937b3ebchore: bump langsmith from 0.6.3 to 0.7.31 in /libs/langchain_v1 (#36800)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.