[Release] langchain-ai/langchain langchain-core==0.3.85: langchain-core==0.3.85

LangChain Core version 0.3.85 was released with a critical security fix that hardens the `load()` function against untrusted manifests. This patch addresses potential vulnerabilities when loading manifests from untrusted sources. The release follows version 0.3.84 and includes security improvements to the core library.

Key Points

• •Security patch released for langchain-core version 0.3.85
• •Critical fix: `load()` function hardened against untrusted manifests
• •Prevents potential security vulnerabilities from loading malicious or untrusted manifest files
• •Incremental patch release (0.3.84 → 0.3.85) indicating a bug fix rather than new features
• •Affects both core and langchain packages
• •Recommended for users who load manifests from external or untrusted sources

Workflow Diagram

Concepts