v0.7.3

Worklenz/worklenzv0.7.3Jul 27, 2026by cdoern

AI Summary

A bug fix release dedicated to updating multiple dependencies to patch specific security vulnerabilities (CVEs).

Key Highlights

  • Updated pillow to >=12.2.0 (CVE-2026-40192)
  • Updated python-multipart to >=0.0.27 (CVE-2026-42561)
  • Updated urllib3 and python-dotenv for CVEs
  • Updated aiohttp and pyjwt constraints for CVEs

Full Release Notes

## What's Changed
* fix: bump pillow to >=12.2.0 (CVE-2026-40192) by @mfleader in https://github.com/ogx-ai/ogx/pull/6075
* fix: bump python-multipart>=0.0.27 for CVE-2026-42561 by @mfleader in https://github.com/ogx-ai/ogx/pull/6259
* fix(ci): pin client checkouts to the matching release branch on release-0.7.x by @cdoern in https://github.com/ogx-ai/ogx/pull/6289
* fix: bump pyasn1 for CVE-2026-59885 (backport #6330) by @mergify[bot] in https://github.com/ogx-ai/ogx/pull/6334
* fix(deps): bump urllib3 and python-dotenv for CVE-2026-44432, CVE-2026-44431, and CVE-2026-28684 by @cdoern in https://github.com/ogx-ai/ogx/pull/6360
* fix(deps): bump pillow, nltk, and langchain-core for multiple CVEs (backport #6272) by @mergify[bot] in https://github.com/ogx-ai/ogx/pull/6362
* fix(deps): bump aiohttp and pyjwt constraints for CVE-2026-34993 and CVE-2026-48526 (backport #6183) by @EleanorWho in https://github.com/ogx-ai/ogx/pull/6223


**Full Changelog**: https://github.com/ogx-ai/ogx/compare/v0.7.2...v0.7.3