[Release] langchain-ai/langchain langchain-core==1.3.3: langchain-core==1.3.3

langchain-core version 1.3.3 was released with security hardening, deprecation fixes, and stability improvements. Key changes include protecting the `load()` function against untrusted manifests, preserving structured inputs on tool runs in tracers, and validating batch_size to prevent infinite loops. The release also includes dependency updates and marks stream_v2/astream_v2 as beta features.

Key Points

• •Security fix: Hardened `load()` function to protect against untrusted manifest attacks (#37197)
• •Fixed deprecation messaging by setting `since` field to 1.3.3 to match actual release version (#37200)
• •Improved tracer functionality by preserving structured `inputs` on tool runs for better observability (#37108)
• •Made `removal` parameter optional in `warn_deprecated()` for more flexible deprecation warnings (#37056)
• •Added batch_size validation in `_batch()` and `_abatch()` to prevent infinite loop conditions (#36663)
• •Marked stream_v2 and astream_v2 as beta features to indicate ongoing development (#36992)
• •Updated dependencies: notebook (7.5.0 → 7.5.6) and types-pyyaml (6.0.12.20250915 → 6.0.12.20260408)
• •Updated documentation X (Twitter) handle references for consistency (#37081)

Workflow Diagram

Concepts