Closed
Conversation
Bumps [h11](https://github.com/python-hyper/h11) from 0.14.0 to 0.16.0. - [Commits](python-hyper/h11@v0.14.0...v0.16.0) --- updated-dependencies: - dependency-name: h11 dependency-version: 0.16.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [protobuf](https://github.com/protocolbuffers/protobuf) from 5.29.4 to 5.29.5. - [Release notes](https://github.com/protocolbuffers/protobuf/releases) - [Commits](protocolbuffers/protobuf@v5.29.4...v5.29.5) --- updated-dependencies: - dependency-name: protobuf dependency-version: 5.29.5 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [langgraph-checkpoint](https://github.com/langchain-ai/langgraph) from 2.0.23 to 3.0.0. - [Release notes](https://github.com/langchain-ai/langgraph/releases) - [Commits](langchain-ai/langgraph@checkpoint==2.0.23...checkpoint==3.0.0) --- updated-dependencies: - dependency-name: langgraph-checkpoint dependency-version: 3.0.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [langgraph-checkpoint-sqlite](https://github.com/langchain-ai/langgraph) from 2.0.6 to 3.0.1. - [Release notes](https://github.com/langchain-ai/langgraph/releases) - [Commits](langchain-ai/langgraph@checkpoint==2.0.6...checkpoint==3.0.1) --- updated-dependencies: - dependency-name: langgraph-checkpoint-sqlite dependency-version: 3.0.1 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.3.0 to 2.6.3. - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.3.0...2.6.3) --- updated-dependencies: - dependency-name: urllib3 dependency-version: 2.6.3 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [tornado](https://github.com/tornadoweb/tornado) from 6.4.2 to 6.5. - [Changelog](https://github.com/tornadoweb/tornado/blob/master/docs/releases.rst) - [Commits](tornadoweb/tornado@v6.4.2...v6.5.0) --- updated-dependencies: - dependency-name: tornado dependency-version: '6.5' dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [starlette](https://github.com/Kludex/starlette) from 0.46.1 to 0.49.1. - [Release notes](https://github.com/Kludex/starlette/releases) - [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md) - [Commits](Kludex/starlette@0.46.1...0.49.1) --- updated-dependencies: - dependency-name: starlette dependency-version: 0.49.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [pyasn1](https://github.com/pyasn1/pyasn1) from 0.6.1 to 0.6.2. - [Release notes](https://github.com/pyasn1/pyasn1/releases) - [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst) - [Commits](pyasn1/pyasn1@v0.6.1...v0.6.2) --- updated-dependencies: - dependency-name: pyasn1 dependency-version: 0.6.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [langchain-core](https://github.com/langchain-ai/langchain) from 0.3.49 to 0.3.81. - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==0.3.49...langchain-core==0.3.81) --- updated-dependencies: - dependency-name: langchain-core dependency-version: 0.3.81 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [requests](https://github.com/psf/requests) from 2.32.3 to 2.32.4. - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v2.32.3...v2.32.4) --- updated-dependencies: - dependency-name: requests dependency-version: 2.32.4 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [langchain-core](https://github.com/langchain-ai/langchain) from 0.3.49 to 0.3.81. - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==0.3.49...langchain-core==0.3.81) --- updated-dependencies: - dependency-name: langchain-core dependency-version: 0.3.81 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [h11](https://github.com/python-hyper/h11) from 0.14.0 to 0.16.0. - [Commits](python-hyper/h11@v0.14.0...v0.16.0) --- updated-dependencies: - dependency-name: h11 dependency-version: 0.16.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
…s/genai-experience-concierge/langgraph-demo/frontend/h11-0.16.0 chore(deps): bump h11 from 0.14.0 to 0.16.0 in /gemini/agents/genai-experience-concierge/langgraph-demo/frontend
…-concierge/langgraph-demo/frontend/langchain-core-0.3.81 Signed-off-by: MILEHIGH-WORLD LLC. <236716966+PHNX3NT@users.noreply.github.com>
…s/genai-experience-concierge/langgraph-demo/frontend/langchain-core-0.3.81 chore(deps): bump langchain-core from 0.3.49 to 0.3.81 in /gemini/agents/genai-experience-concierge/langgraph-demo/frontend
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.0 to 4.1.1. - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@4.1.0...4.1.1) --- updated-dependencies: - dependency-name: js-yaml dependency-version: 4.1.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [jws](https://github.com/brianloveswords/node-jws) from 4.0.0 to 4.0.1. - [Release notes](https://github.com/brianloveswords/node-jws/releases) - [Changelog](https://github.com/auth0/node-jws/blob/master/CHANGELOG.md) - [Commits](auth0/node-jws@v4.0.0...v4.0.1) --- updated-dependencies: - dependency-name: jws dependency-version: 4.0.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.17.23. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.21...4.17.23) --- updated-dependencies: - dependency-name: lodash dependency-version: 4.17.23 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [qs](https://github.com/ljharb/qs) to 6.14.1 and updates ancestor dependencies [qs](https://github.com/ljharb/qs), [body-parser](https://github.com/expressjs/body-parser) and [express](https://github.com/expressjs/express). These dependencies need to be updated together. Updates `qs` from 6.13.0 to 6.14.1 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.13.0...v6.14.1) Updates `body-parser` from 1.20.3 to 1.20.4 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](expressjs/body-parser@1.20.3...1.20.4) Updates `express` from 4.21.2 to 4.22.1 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/v4.22.1/History.md) - [Commits](expressjs/express@4.21.2...v4.22.1) --- updated-dependencies: - dependency-name: qs dependency-version: 6.14.1 dependency-type: indirect - dependency-name: body-parser dependency-version: 1.20.4 dependency-type: indirect - dependency-name: express dependency-version: 4.22.1 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [next](https://github.com/vercel/next.js) from 14.2.26 to 14.2.35. - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v14.2.26...v14.2.35) --- updated-dependencies: - dependency-name: next dependency-version: 14.2.35 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
…nkit/postcard-generator/next-14.2.35 chore(deps): bump next from 14.2.26 to 14.2.35 in /genkit/postcard-generator
…rator/multi-6d05d0e569 Signed-off-by: MILEHIGH-WORLD LLC. <236716966+PHNX3NT@users.noreply.github.com>
Bumps [mdast-util-to-hast](https://github.com/syntax-tree/mdast-util-to-hast) from 13.2.0 to 13.2.1. - [Release notes](https://github.com/syntax-tree/mdast-util-to-hast/releases) - [Commits](syntax-tree/mdast-util-to-hast@13.2.0...13.2.1) --- updated-dependencies: - dependency-name: mdast-util-to-hast dependency-version: 13.2.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
…nkit/postcard-generator/multi-6d05d0e569 chore(deps): bump qs, body-parser and express in /genkit/postcard-generator
…rator/mdast-util-to-hast-13.2.1
…nkit/postcard-generator/mdast-util-to-hast-13.2.1 chore(deps): bump mdast-util-to-hast from 13.2.0 to 13.2.1 in /genkit/postcard-generator
…_llm/lodash-4.17.23
…sion/use-cases/hey_llm/lodash-4.17.23 chore(deps-dev): bump lodash from 4.17.21 to 4.17.23 in /vision/use-cases/hey_llm
…sion/sample-apps/V-Start/jws-4.0.1 chore(deps): bump jws from 4.0.0 to 4.0.1 in /vision/sample-apps/V-Start
…mini/sample-apps/quickbot/website-search-using-agent-builder/frontend/multi-8332e6ce66 chore(deps): bump @angular/common, @angular/cdk, @angular/fire, @angular/platform-browser, @angular/forms, @angular/material, @angular/platform-browser-dynamic, @angular/router and ngx-markdown in /gemini/sample-apps/quickbot/website-search-using-agent-builder/frontend
Bumps [qs](https://github.com/ljharb/qs) to 6.14.1 and updates ancestor dependency [express](https://github.com/expressjs/express). These dependencies need to be updated together. Updates `qs` from 6.13.0 to 6.14.1 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.13.0...v6.14.1) Updates `express` from 4.21.2 to 4.22.1 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/v4.22.1/History.md) - [Commits](expressjs/express@4.21.2...v4.22.1) --- updated-dependencies: - dependency-name: qs dependency-version: 6.14.1 dependency-type: indirect - dependency-name: express dependency-version: 4.22.1 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [jws](https://github.com/brianloveswords/node-jws) from 4.0.0 to 4.0.1. - [Release notes](https://github.com/brianloveswords/node-jws/releases) - [Changelog](https://github.com/auth0/node-jws/blob/master/CHANGELOG.md) - [Commits](auth0/node-jws@v4.0.0...v4.0.1) --- updated-dependencies: - dependency-name: jws dependency-version: 4.0.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
…sion/sample-apps/V-Start/multi-c8afcbbcd8 chore(deps): bump qs and express in /vision/sample-apps/V-Start
…sion/use-cases/hey_llm/jws-4.0.1 chore(deps-dev): bump jws from 4.0.0 to 4.0.1 in /vision/use-cases/hey_llm
…/genai-experience-concierge/langgraph-demo/backend/tornado-6.5 chore(deps): bump tornado from 6.4.2 to 6.5 in /gemini/agents/genai-experience-concierge/langgraph-demo/backend
…-concierge/langgraph-demo/backend/starlette-0.49.1 Signed-off-by: MILEHIGH-WORLD LLC. <236716966+PHNX3NT@users.noreply.github.com>
…/genai-experience-concierge/langgraph-demo/backend/starlette-0.49.1 chore(deps): bump starlette from 0.46.1 to 0.49.1 in /gemini/agents/genai-experience-concierge/langgraph-demo/backend
…-concierge/langgraph-demo/backend/urllib3-2.6.3 Signed-off-by: MILEHIGH-WORLD LLC. <236716966+PHNX3NT@users.noreply.github.com>
…/genai-experience-concierge/langgraph-demo/backend/urllib3-2.6.3 chore(deps): bump urllib3 from 2.3.0 to 2.6.3 in /gemini/agents/genai-experience-concierge/langgraph-demo/backend
Signed-off-by: MILEHIGH-WORLD LLC. <236716966+PHNX3NT@users.noreply.github.com>
Create codeql.yml
…-concierge/langgraph-demo/backend/langgraph-checkpoint-sqlite-3.0.1 Signed-off-by: MILEHIGH-WORLD LLC. <236716966+PHNX3NT@users.noreply.github.com>
…/genai-experience-concierge/langgraph-demo/backend/langgraph-checkpoint-sqlite-3.0.1 chore(deps): bump langgraph-checkpoint-sqlite from 2.0.6 to 3.0.1 in /gemini/agents/genai-experience-concierge/langgraph-demo/backend
…-concierge/langgraph-demo/backend/langgraph-checkpoint-3.0.0 Signed-off-by: MILEHIGH-WORLD LLC. <236716966+PHNX3NT@users.noreply.github.com>
…/genai-experience-concierge/langgraph-demo/backend/langgraph-checkpoint-3.0.0 chore(deps): bump langgraph-checkpoint from 2.0.23 to 3.0.0 in /gemini/agents/genai-experience-concierge/langgraph-demo/backend
…-concierge/langgraph-demo/backend/protobuf-5.29.5 Signed-off-by: MILEHIGH-WORLD LLC. <236716966+PHNX3NT@users.noreply.github.com>
…/genai-experience-concierge/langgraph-demo/backend/protobuf-5.29.5 chore(deps): bump protobuf from 5.29.4 to 5.29.5 in /gemini/agents/genai-experience-concierge/langgraph-demo/backend
…-concierge/langgraph-demo/backend/h11-0.16.0 Signed-off-by: MILEHIGH-WORLD LLC. <236716966+PHNX3NT@users.noreply.github.com>
…/genai-experience-concierge/langgraph-demo/backend/h11-0.16.0 chore(deps): bump h11 from 0.14.0 to 0.16.0 in /gemini/agents/genai-experience-concierge/langgraph-demo/backend
…/genai-experience-concierge/langgraph-demo/backend"
…ini/agents/genai-experience-concierge/langgraph-demo/backend/h11-0.16.0 Revert "chore(deps): bump h11 from 0.14.0 to 0.16.0 in /gemini/agents/genai-experience-concierge/langgraph-demo/backend"
|
Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA). View this failed invocation of the CLA check for more information. For the most up to date status, view the checks section at the bottom of the pull request. |
…uning/genai-mlops-tune-and-eval"
PHNX3NT
commented
Jan 25, 2026
…parameter tampering Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> Signed-off-by: MILEHIGH-WORLD LLC. <236716966+PHNX3NT@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
Thank you for opening a Pull Request!
Before submitting your PR, there are a few things you can do to make sure it goes smoothly:
CONTRIBUTINGGuide.nox -s formatfrom the repository root to format).READMEfile.CODEOWNERSfor the file(s).Fixes #<issue_number_goes_here> 🦕