# RAG baseline benchmark dependencies
# Pin to known-compatible versions for reproducibility
langchain>=0.3.0,<0.4
langchain-community>=0.3.0,<0.4
langchain-huggingface>=0.1.0,<0.2
langchain-text-splitters>=0.3.0,<0.4
faiss-cpu>=1.7.0,<2.0
# >=5.6.0: GHSA-jhr6-gm9c-rqjv. The old pin (<4.0) REQUIRED a release inside the advisory range.
# The RAG baseline has not been re-run under this pin (LEDGER L-106); re-measure before quoting it.
sentence-transformers>=5.6.0,<7.0
tiktoken>=0.5.0,<1.0
