Bump langchain from 1.0.3 to 1.2.8

[dependabot]

Bumps langchain from 1.0.3 to 1.2.8.

Release notes

Sourced from langchain's releases.

langchain-core==1.2.8

Changes since langchain-core==1.2.7

release(core): 1.2.8 (#34975) docs(core): add examples for pretty_repr, pretty_print (#34968) docs(core): use proper admonition for get_buffer_string (#34967) docs: add usage examples to core classes (#34841) chore(core): fix docstring format (#34966) chore(deps): bump the uv group across 20 directories with 3 updates (#34941) docs: add example to create_message function docstring (#34851) docs(core): clarify @​tool decorator argument and return type requirements (#34860) fix(core): fix nested mustache variable extraction and update docs (#34872) fix(core): allow base model annotations for empty model (#34932) chore: upgrade urllib3 to 2.6.3 (#34940) fix(core): prevent crash in ParrotFakeChatModel when messages list is empty (#34943) fix(core): google docstring parsing with no arguments/reserved arguments (#34861) test(core): add tests for approximate token counting with multimodal messages (#34898) fix(core): replace Iterable with Iterator for block iteration (#34934) fix(core): yield_blobs returns Iterator (#34935) docs: Fix typo in Runnable description of async variants (#34905) fix(core): raise outputparserexception for unknown tools (#34923) docs(core): nit (#34914) chore(core): nits (#34897) feat(core): add multimodal support to count_tokens_approximately (#34883) fix(core): fix typo 'use a a' -> 'use as a' in check_version.py (#34878) style(core): lint (#34862) feat(core): add XML format option for get_buffer_string (#34802) chore(core): relax packaging constraints (#34832) chore(deps-dev): bump setuptools from 67.8.0 to 78.1.1 in /libs/core in the uv group across 1 directory (#34825) chore(core, langchain): add version consistency check pre-commit hooks (#34782) docs(core): enhance docstring for RunnableConfig for clarity on total=False (#34756) docs(core): clean up callbacks param descriptions (#34738) fix(core): correctly guard against non-text-block types (#34729) chore: update twitter URLs (#34736) refactor(core): generalize comma_list utility to support any Iterable (#34714) fix(core): add explicit tags parameter to sync LLMManagerMixin methods (#34722) docs(core): enhance docstrings for ToolCall and ToolCallChunk (#34719) fix(core): add tool_call_id to on_tool_error event data (#33731) fix(core): improve error message for missing title in JSON schema functions (#34683) fix(core): make yield_keys prefix keyword-only to match BaseStore (#34659) chore(core): bump lock (#34695) chore(core): improve types for RunnableLambda (#34539) chore(core): improve types for StreamingRunnable (#34540) style(core): fix some noqa escapes (#34675) style: bump ruff version to 0.14.11 (#34674) fix: remove relative imports (#34680)

langchain==1.2.8

Changes since langchain==1.2.7

... (truncated)

Commits

• a2bed8f release(groq): 1.1.2 (#34977)
• 9b4813f release(langchain): 1.2.8 (#34976)
• 3f2f311 release(core): 1.2.8 (#34975)
• 3aca3fb docs(core): add examples for pretty_repr, pretty_print (#34968)
• 12c34a4 docs(core): use proper admonition for get_buffer_string (#34967)
• f3aaab1 feat(groq): support lc image types (#34845)
• 6e307be docs: add usage examples to core classes (#34841)
• 7c288f1 chore(core): fix docstring format (#34966)
• 328bf24 chore(deps): bump the uv group across 20 directories with 3 updates (#34941)
• 9525206 chore(openai): update model profiles (#34960)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.