v0.4.6

LadybirdBrowser/ladybirdv0.4.6May 29, 2026by cdoern

AI Summary

This release focuses on security patches and dependency updates to address specific CVEs. It also adds release automation workflows to the 0.4.x branch.

Key Highlights

Security fixes for NLTK Zip Slip vulnerability and dependency updates for pyjwt, pyasn1, and pypdf.
Bump of llama-stack-client to version 0.4.5.
Addition of release automation workflows for the 0.4.x branch.
Backport of a Starlette constraint to address CVE-2026-48710.

Full Release Notes

## What's Changed
* chore: bump llama-stack-client to 0.4.5 by @cdoern in https://github.com/ogx-ai/ogx/pull/4958
* fix: bump pyjwt to 2.12.0 (CVE-2026-32597) by @eoinfennessy in https://github.com/ogx-ai/ogx/pull/5188
* fix: bump pyasn1 to 0.6.3 (CVE-2026-30922) by @eoinfennessy in https://github.com/ogx-ai/ogx/pull/5208
* fix: bump pypdf to 5.5.0 (CVE-2026-27628) by @eoinfennessy in https://github.com/ogx-ai/ogx/pull/5189
* fix: NLTK Zip Slip Vulnerability (CVE-2025-14009) by @eoinfennessy in https://github.com/ogx-ai/ogx/pull/5190
* fix: bump nltk to 3.9.4 (CVE-2026-33236) by @eoinfennessy in https://github.com/ogx-ai/ogx/pull/5260
* ci: add release automation workflows to 0.4.x by @cdoern in https://github.com/ogx-ai/ogx/pull/5278
* fix: constrain starlette to >=1.0.1 (CVE-2026-48710) (backport #5977) by @mergify[bot] in https://github.com/ogx-ai/ogx/pull/5988


**Full Changelog**: https://github.com/ogx-ai/ogx/compare/v0.4.5...v0.4.6