Update @langchain/textsplitters to fix a critical vulnerability

[JortegaCognigy]

https://cognigy.visualstudio.com/Carbon/_workitems/edit/120167/

Changelog Section

• Cognigy.AI

Changelog

• Fixed security vulnerabilities in @langchain/textsplitters dependency

Success criteria

• Knowledge ingestion through confluence extension should work as expected

How to test

1. Setup confluence connector in dev (install via marketplace) and local environments (run npm run build inside the extensions/confluence directory, then upload the zip file via UI)
2. Ingest knowledge from a confluence page (For example https://cognigy.atlassian.net/wiki/spaces/Engineering/pages/1413251084/IAM+Role+based+connections+for+AWS+Bedrock+models) and see that both environments generate the same amount of chunks and content

Security

• Possible injection vector
• Authentication/Access controls touched
• Sensitive Data could be exposed
• XSS
• Logging/Monitoring touched
• Exchanges data with external systems
• No security implications

Additional considerations

• This PR impacts NLU
• This PR might have performance implications
• This PR changes an existing data model (and might affect existing legacy data)
  • Examples: adding, renaming, removing a field or changing the format or constraints of a field
• This PR might affect indexing
  • Examples: adding a new param for model query from DB without creating a new index for this model

Documentation Considerations

No additional documentation required.

[Copilot]

Pull request overview

This PR updates the @langchain/textsplitters dependency from version ^0.0.3 to 0.1.0 in the Confluence extension to address a critical security vulnerability. The update removes the caret (^) version range operator to ensure an exact version is used, preventing automatic minor/patch updates that could reintroduce vulnerabilities.

Key Changes

• Updated @langchain/textsplitters from ^0.0.3 to 0.1.0 with exact version pinning

Files not reviewed (1)

• extensions/confluence/package-lock.json: Language not supported

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[graymalkin77]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scanner	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.