v0.4.6

biomejs/biomev0.4.6May 29, 2026by cdoern

AI Summary

This patch release focuses on security vulnerability fixes across multiple dependencies and adds release automation workflows to the CI pipeline.

Key Highlights

Bumped pyjwt, pyasn1, pypdf, and nltk to address specific CVEs.
Added release automation workflows to the 0.4.x branch.
Constrained starlette to >=1.0.1 to fix CVE-2026-48710.

New Features

CI release automation workflows

Full Release Notes

## What's Changed
* chore: bump llama-stack-client to 0.4.5 by @cdoern in https://github.com/ogx-ai/ogx/pull/4958
* fix: bump pyjwt to 2.12.0 (CVE-2026-32597) by @eoinfennessy in https://github.com/ogx-ai/ogx/pull/5188
* fix: bump pyasn1 to 0.6.3 (CVE-2026-30922) by @eoinfennessy in https://github.com/ogx-ai/ogx/pull/5208
* fix: bump pypdf to 5.5.0 (CVE-2026-27628) by @eoinfennessy in https://github.com/ogx-ai/ogx/pull/5189
* fix: NLTK Zip Slip Vulnerability (CVE-2025-14009) by @eoinfennessy in https://github.com/ogx-ai/ogx/pull/5190
* fix: bump nltk to 3.9.4 (CVE-2026-33236) by @eoinfennessy in https://github.com/ogx-ai/ogx/pull/5260
* ci: add release automation workflows to 0.4.x by @cdoern in https://github.com/ogx-ai/ogx/pull/5278
* fix: constrain starlette to >=1.0.1 (CVE-2026-48710) (backport #5977) by @mergify[bot] in https://github.com/ogx-ai/ogx/pull/5988


**Full Changelog**: https://github.com/ogx-ai/ogx/compare/v0.4.5...v0.4.6