diff --git a/pyproject.toml b/pyproject.toml
index aa561ac..eaa13e6 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -43,13 +43,13 @@ Security = "https://github.com/SourceShift/InterLock/blob/main/SECURITY.md"
 
 [project.optional-dependencies]
 mcp = ["wrapt>=1.15"]
-langchain = ["langchain-core>=0.3,<0.4"]
+langchain = ["langchain-core>=0.3,<1.8"]
 # The control plane's server, driver and signing primitives. Nothing in the
 # core package imports these; `import interlock.cloud` stays dependency-free.
 cloud = ["uvicorn>=0.30", "psycopg[binary]>=3.1", "cryptography>=42", "webauthn>=2.0"]
 # ruff is pinned here too: CI pins it (an unpinned linter turns a green repo red
 # on a release schedule), and a contributor should run the same version as CI.
-dev = ["pytest>=7", "langchain-core>=0.3,<0.4", "ruff==0.16.9",
+dev = ["pytest>=7", "langchain-core>=0.3,<1.8", "ruff==0.17.2",
        # scripts/check_site.py reads the Zensical TOML; tomllib is 3.11+
        "tomli>=1.1; python_version < '3.11'"]