[DO NOT MERGE] Test: dependency review workflow

[mlakshmi-2-eightfold]

Testing if dependency-review-action catches langchain-core 0.1.5

[github-actions]

Dependency Review

The following issues were found:

• ❌ 1 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ✅ 0 package(s) with unknown licenses.

See the Details below.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA b0bd94d.

Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

Vulnerabilities

requirements.txt

Name	Version	Vulnerability	Severity	Patched Version
langchain-core	0.1.5	LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs	critical	0.3.81
		LangChain Vulnerable to Template Injection via Attribute Access in Prompt Templates	high	0.3.80
		LangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functions	high	1.2.22

Only included vulnerabilities with severity high or higher.

Scanned Files

• requirements.txt