[Release] langchain-ai/langchain langchain-text-splitters==1.1.2: langchain-text-splitters==1.1.2

langchain-text-splitters version 1.1.2 is released with critical security and stability improvements. Key changes include deprecating unsafe URL transport in favor of SSRF-safe alternatives, fixing silent data loss in RecursiveJsonSplitter for empty dict values, and addressing CVE-2026-4539 through pygments version constraints. The release also includes dependency updates (langsmith, pytest, nltk, requests) and performance optimizations for CI/CD pipelines.

Key Points

• •Implement SSRF-safe transport for split_text_from_url to prevent server-side request forgery vulnerabilities
• •Fix RecursiveJsonSplitter to prevent silent data loss when processing empty dictionary values
• •Update pygments to >=2.20.0 across all packages to address CVE-2026-4539 security vulnerability
• •Upgrade langsmith from 0.6.3 to 0.7.31 for improved compatibility and features
• •Bump pytest to 9.0.3 and update other critical dependencies (requests 2.33.0, nltk 3.9.4, tornado 6.5.5)
• •Add Python 3.14 support for spacy-based text splitting tests
• •Optimize CI/CD performance by suppressing pytest streaming output and avoiding unnecessary dependency installations
• •Set HTTP timeout on minimum version checks to improve CI reliability and speed
• •Ensure langchain-core minimum version is 1.2.21 for partner packages

Workflow Diagram

Concepts