# Negative fixture for CVE-2026-101861 (#888): 1.12.0 was the first release without
# the eval() on Tool-Mode input options (GHSA-33p4-w7j3-33mw). Since 2026-10-30 IBM's
# CVE-2026-110186 batch runs through 1.12.8, so the first release the rule calls
# patched is 1.13.0.
langflow==1.13.0
