# Runtime — exact pins (checked 2026-10-14). Pins follow the two-week rule (a release is adopted once it is at least
# two weeks old), except documented security fixes.
langchain==1.4.5
langchain-core==1.6.10
langchain-google-genai==4.4.2
langchain-anthropic==1.7.6
langchain-openai==1.7.2
langchain-text-splitters==1.1.3
langgraph==1.2.15
langgraph-checkpoint==4.3.0
langgraph-checkpoint-sqlite==3.1.2
aiosqlite==0.22.1
google-cloud-storage==3.17.0
fastapi==0.143.1
uvicorn[standard]==0.54.0
sse-starlette==3.5.0
pydantic==2.14.1
pydantic-settings==2.16.0
firebase-admin==7.7.0
google-auth==2.62.0
httpx==0.28.1
markdown-it-py==4.2.0
nh3==0.3.7
pyyaml==6.0.3
python-docx==1.2.0
python-pptx==1.0.2
weasyprint==70.0
pygments==2.21.0
# Assessment: complexity hotspots (MIT; ARCHITECTURE V5-5).
lizard==1.24.1
pathspec==1.1.1
pillow==13.0.0

# V4 providers: AWS Bedrock (checked 2026-10-15)
langchain-aws==1.8.2
boto3==1.43.114
botocore==1.43.114

# v6.3 (ARCHITECTURE §31): MCP, A2A, OpenTelemetry. Release dates checked on PyPI 2026-10-21.
mcp==2.3.0
a2a-sdk==1.2.2
opentelemetry-api==1.45.1
opentelemetry-sdk==1.45.1
opentelemetry-exporter-otlp-proto-http==1.45.1

# Imported directly by RepoLantern's own code, so pinned here rather than left to other packages' ranges
# (versions installed and tested 2026-10-27).
starlette==1.8.0
anyio==4.15.1
httpcore==1.0.9
cryptography==50.0.2
