Bump axios and langchain

[dependabot]

Removes axios. It's no longer used after updating ancestor dependency langchain. These dependencies need to be updated together.

Removes axios

Updates langchain from 0.0.112 to 1.5.3

Release notes

Sourced from langchain's releases.

langchain@1.5.3

Patch Changes

• #11167 4c7a06e Thanks @​colifran! - fix(langchain): malformed tool input schemas are unrecoverable

langchain@1.5.2

Patch Changes

• #11100 3205b35 Thanks @​colifran! - fix(langchain, openai): decouple strict tools from strict structured output response

langchain@1.5.1

Patch Changes

• #11087 534b43a Thanks @​christian-bromann! - fix(langchain): keep tool call streams pending across any tool interrupt

  A raw interrupt() raised from inside a tool surfaced as a tool-error and rejected the call's un-awaited output promise, producing an unhandled rejection that crashed HITL runs. The tool-call stream transformer now treats any serialized graph interrupt as control flow (the call stays pending and resumes), not just humanInTheLoopMiddleware interrupts.

langchain@1.5.0

Minor Changes

• #11062 3ebd10a Thanks @​christian-bromann! - feat(langchain): surface tool-dispatched subagents on run.subagents

  Add a native subagent stream transformer to createAgent so v3 runs expose named nested agents (createAgent({ name }) invoked from tools) as typed SubagentRunStream handles with name, cause, scoped messages / toolCalls, and output. Refactors agent stream transformers into agents/transformers/ and exports only the public stream types from the package entry.

langchain@1.4.6

Patch Changes

• #11012 4aeaa76 Thanks @​christian-bromann! - feat(langchain): add when predicate to human-in-the-loop middleware

  Add an optional when callback on InterruptOnConfig so callers can dynamically skip interrupts for specific tool calls. The predicate receives a ToolCallRequest (batch afterModel context) and returns whether to interrupt or auto-approve, matching Python HumanInTheLoopMiddleware.

• #11080 e51478a Thanks @​aolsenjazz! - feat(aws): bedrock prompt caching middleware

  Adds bedrockPromptCachingMiddleware. The interface largely matches what was previous implemented with anthropicPromptCachingMiddleware, making a best-effort attempt at utilizing prompt caching features for supported models.

langchain@1.4.2

Patch Changes

... (truncated)

Commits

• e233f41 chore: version packages (#11168)
• 4c7a06e fix(langchain): malformed tool input schemas are unrecoverable (#11167)
• 1a1fe3c chore(deps): bump the aws group across 1 directory with 7 updates (#11134)
• 553155b chore(deps): bump js-yaml from 5.0.0 to 5.1.0 (#11142)
• 24bde73 chore(deps): bump prettier from 3.8.3 to 3.9.4 in the typescript-eslint group...
• 8db7263 fix: remove duplicate pnpm lockfile entries (#11141)
• 99449de chore(deps): bump the langchain group with 5 updates (#11131)
• 39c17d7 chore(deps): bump google-auth-library from 10.6.2 to 10.9.0 in the google gro...
• 32613be chore(deps): bump the build-and-test group with 2 updates (#11133)
• 2ecacad chore(deps): bump the gh-actions-minor-and-patch group with 2 updates (#11129)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for langchain since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.