Starstruk Logo MarkStarstruk

v0.4.7

DavidHDev/react-bitsv0.4.7Jul 27, 2026by cdoern

AI Summary

A version 0.4.x security patch release focusing on updating litellm and pillow for CVEs, alongside fixes to the unit test environment.

Key Highlights

  • Security updates: bumped litellm to >=1.83.0 and pillow to >=12.2.0 for CVEs
  • CI/Testing: fixed unit test environment and restored pyasn1>=0.6.4

Full Release Notes

## What's Changed
* fix: bump litellm to >=1.83.0 for CVEs by @mfleader in https://github.com/ogx-ai/ogx/pull/6055
* fix: bump pillow to >=12.2.0 (CVE-2026-40192) by @mfleader in https://github.com/ogx-ai/ogx/pull/6073
* fix: bump 0.4.x cve dependencies and fix the unit test env by @skamenan7 in https://github.com/ogx-ai/ogx/pull/6303
* fix: bump pyasn1 for CVE-2026-59885 (backport #6330) by @mergify[bot] in https://github.com/ogx-ai/ogx/pull/6335
* fix(deps): bump pillow, nltk, and langchain-core for multiple CVEs (backport #6272) by @mergify[bot] in https://github.com/ogx-ai/ogx/pull/6361
* fix(deps): restore pyasn1>=0.6.4 for CVE-2026-59885 by @cdoern in https://github.com/ogx-ai/ogx/pull/6363


**Full Changelog**: https://github.com/ogx-ai/ogx/compare/v0.4.6...v0.4.7