chore(deps): bump the compatible group with 2 updates

[dependabot]

Bumps the compatible group with 2 updates: @langchain/langgraph and react.

Updates @langchain/langgraph from 1.3.2 to 1.3.5

Release notes

Sourced from @​langchain/langgraph's releases.

@​langchain/langgraph@​1.3.5

Patch Changes

• #2489 e3a1933 Thanks @​christian-bromann! - fix(core): keep stream chunks as three-element tuples

  Emit lightweight checkpoint envelopes as separate [namespace, "checkpoints", envelope] chunks before paired values chunks. Public stream() always yields [namespace, mode, payload]; the v3 protocol path surfaces envelopes via convertToProtocolEvent.

• Updated dependencies [244c24e]:

  • @​langchain/langgraph-sdk@​1.9.16

@​langchain/langgraph@​1.3.4

Patch Changes

• #2035 7c3a98b Thanks @​JadenKim-dev! - fix(core): prevent Zod schema defaults from overwriting checkpoint state in Command.update

• Updated dependencies [0491534]:

  • @​langchain/langgraph-sdk@​1.9.12

@​langchain/langgraph@​1.3.3

Patch Changes

• #2037 9eb478f Thanks @​pawel-twardziak! - Decouple ContextType generic from configurable in PregelOptions so that providing a custom context type no longer incorrectly narrows the configurable parameter.

• #2457 91a5494 Thanks @​christian-bromann! - fix(langgraph): pass context with stateful RemoteGraph runs

  Pop thread_id from run config.configurable and forward context to the SDK so checkpointed remote runs accept user context without a 400 from ambiguous parameters. Closes #1922.

• #1988 6d4bf92 Thanks @​Axadali! - Fix race condition in IterableReadableWritableStream.push() that caused ERR_INVALID_STATE errors when streaming with multiple parallel nodes and aborting the stream.

• #2409 101b70a Thanks @​pragnyanramtha! - Preserve non-plain objects passed through Send and Command argument deserialization.

• #2344 0125920 Thanks @​dependabot! - chore(deps): bump uuid to 14.0.0 and keep checkpoint ID ordering stable

  Bump uuid from 10.x/13.x to 14.0.0 across packages. Starting with uuid 11, v6({ clockseq }) no longer advances the sub-millisecond time counter when an explicit clockseq is passed, so checkpoint IDs created within the same millisecond were ordered only by clockseq. Since checkpoint IDs are sorted lexicographically, this broke ordering — most visibly for the negative clockseq used by the first ("input") checkpoint, which sorted as the newest.

  uuid6() now maintains its own monotonic (msecs, nsecs) clock (mirroring uuid 10's internal v1 behavior) so the time component is always strictly increasing and checkpoint ordering no longer depends on the clockseq value. emptyCheckpoint() also uses a non-negative clockseq.

• Updated dependencies [863b555, 0125920]:

  • @​langchain/langgraph-sdk@​1.9.11
  • @​langchain/langgraph-checkpoint@​1.0.4

@​langchain/langgraph-checkpoint-mongodb@​1.3.3

Patch Changes

• #2260 4d03dcb Thanks @​venkat22022202! - fix(mongodb): include pendingWrites in list() results

Changelog

Sourced from @​langchain/langgraph's changelog.

1.3.5

Patch Changes

• #2489 e3a1933 Thanks @​christian-bromann! - fix(core): keep stream chunks as three-element tuples

  Emit lightweight checkpoint envelopes as separate [namespace, "checkpoints", envelope] chunks before paired values chunks. Public stream() always yields [namespace, mode, payload]; the v3 protocol path surfaces envelopes via convertToProtocolEvent.

• Updated dependencies [244c24e]:

  • @​langchain/langgraph-sdk@​1.9.16

1.3.4

Patch Changes

• #2035 7c3a98b Thanks @​JadenKim-dev! - fix(core): prevent Zod schema defaults from overwriting checkpoint state in Command.update

• Updated dependencies [0491534]:

  • @​langchain/langgraph-sdk@​1.9.12

1.3.3

Patch Changes

• #2037 9eb478f Thanks @​pawel-twardziak! - Decouple ContextType generic from configurable in PregelOptions so that providing a custom context type no longer incorrectly narrows the configurable parameter.

• #2457 91a5494 Thanks @​christian-bromann! - fix(langgraph): pass context with stateful RemoteGraph runs

  Pop thread_id from run config.configurable and forward context to the SDK so checkpointed remote runs accept user context without a 400 from ambiguous parameters. Closes #1922.

• #1988 6d4bf92 Thanks @​Axadali! - Fix race condition in IterableReadableWritableStream.push() that caused ERR_INVALID_STATE errors when streaming with multiple parallel nodes and aborting the stream.

• #2409 101b70a Thanks @​pragnyanramtha! - Preserve non-plain objects passed through Send and Command argument deserialization.

• #2344 0125920 Thanks @​dependabot! - chore(deps): bump uuid to 14.0.0 and keep checkpoint ID ordering stable

  Bump uuid from 10.x/13.x to 14.0.0 across packages. Starting with uuid 11, v6({ clockseq }) no longer advances the sub-millisecond time counter when an explicit clockseq is passed, so checkpoint IDs created within the same millisecond were ordered only by clockseq. Since checkpoint IDs are sorted lexicographically, this broke ordering — most visibly for the negative clockseq used by the first ("input") checkpoint, which sorted as the newest.

  uuid6() now maintains its own monotonic (msecs, nsecs) clock (mirroring uuid 10's internal v1 behavior) so the time component is always strictly increasing and checkpoint ordering no longer depends on the clockseq value. emptyCheckpoint() also uses a non-negative clockseq.

• Updated dependencies [863b555, 0125920]:

  • @​langchain/langgraph-sdk@​1.9.11
  • @​langchain/langgraph-checkpoint@​1.0.4

Commits

• 28fbf1d chore: version packages (#2490)
• c6528b2 chore(sdk): update vitest browser dependency (#2493)
• e3a1933 fix(core): keep stream() on 3-tuple shape (#2489)
• a4919b6 chore(deps): bump the langchain group across 1 directory with 8 updates (#2476)
• c6b29fb chore: version packages (#2465)
• 7c3a98b fix(core): prevent Zod schema defaults from overwriting checkpoint state in C...
• d2ca90f chore: version packages (#2453)
• 101b70a fix: preserve non-plain Send args (#2409)
• 0125920 chore(deps): bump uuid from 10.0.0 to 14.0.0 (#2344)
• 91a5494 fix(langgraph): pass context with stateful RemoteGraph runs (#2457)
• Additional commits viewable in compare view

Updates react from 19.2.6 to 19.2.7

Release notes

Sourced from react's releases.

19.2.7 (June 1st, 2026)

React Server Components

• Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (#36566 by @​unstubbable)

Commits

• 6117d7c Version 19.2.7 (#36591)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions