v0.7.3

DavidHDev/react-bitsv0.7.3Jul 27, 2026by cdoern

AI Summary

A security patch release updating multiple dependencies to address several CVEs, along with a CI fix to ensure correct branch checkouts.

Key Highlights

Security updates: bumped pillow, python-multipart, urllib3, python-dotenv, aiohttp, pyjwt, nltk, and langchain-core for various CVEs
CI improvement: pinned client checkouts to the matching release branch on release-0.7.x

Full Release Notes

## What's Changed
* fix: bump pillow to >=12.2.0 (CVE-2026-40192) by @mfleader in https://github.com/ogx-ai/ogx/pull/6075
* fix: bump python-multipart>=0.0.27 for CVE-2026-42561 by @mfleader in https://github.com/ogx-ai/ogx/pull/6259
* fix(ci): pin client checkouts to the matching release branch on release-0.7.x by @cdoern in https://github.com/ogx-ai/ogx/pull/6289
* fix: bump pyasn1 for CVE-2026-59885 (backport #6330) by @mergify[bot] in https://github.com/ogx-ai/ogx/pull/6334
* fix(deps): bump urllib3 and python-dotenv for CVE-2026-44432, CVE-2026-44431, and CVE-2026-28684 by @cdoern in https://github.com/ogx-ai/ogx/pull/6360
* fix(deps): bump pillow, nltk, and langchain-core for multiple CVEs (backport #6272) by @mergify[bot] in https://github.com/ogx-ai/ogx/pull/6362
* fix(deps): bump aiohttp and pyjwt constraints for CVE-2026-34993 and CVE-2026-48526 (backport #6183) by @EleanorWho in https://github.com/ogx-ai/ogx/pull/6223


**Full Changelog**: https://github.com/ogx-ai/ogx/compare/v0.7.2...v0.7.3