npm / @langchain/aws
@langchain/aws
What changed in @langchain/aws 1, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-19.
2 security4 new APIs and options1 behavior and defaults9 fixes and other
See which of these apply to your code, ranked, in your agent:
npx @unstale/cli init@langchain/aws 116 changes
Security 2
LangChain: MongoDBChatMessageHistory query injection can allow cross-session access
LangChain: RediSearch Filter Injection via Unescaped Tag/Text Values
New APIs and options 4
Accepts additionalModelResponseFieldPaths as a constructor and call option, forwarding it to Converse and ConverseStream.
Maps Anthropic's thinking-token count to this field for invoke(), .stream() and streamEvents() when the native usage field is present; output_tokens remains unchanged.
Add direct routing for Bedrock Converse and Vertex AI chat models through LANGSMITH_GATEWAY.
Bedrock Converse now supports native streamEvents events.
Behavior and default changes 1
File names are imputed for document content blocks.
Fixes and other changes 9
Adds claude-sonnet-5, claude-opus-5, and claude-haiku-5 to the model values supported for tool choice.
Stream-idle timeout errors now set lc_error_code directly on the error, so a plain error.lc_error_code check can detect them.
The streamIdleTimeout watchdog now covers the wait before the initial response, as well as gaps between stream chunks.
Standard reasoning blocks preserve signatures; replay omits incomplete signature-only reasoning while retaining compatibility with legacy and redacted Bedrock reasoning.
A default idle timeout prevents stalled Bedrock Converse response bodies from hanging forever.
Adds support for Bedrock bearer token authentication.
Adds claude-haiku-4 to the models supporting tool choice.
Preserves Bedrock tool call identity in callback-streamed chunks.
Bedrock Converse object errors are normalized for tracing.