v0.4.6

blackboardsh/electrobunv0.4.6May 29, 2026by cdoern

AI Summary

This release focuses on security updates, bumping dependencies to address multiple CVEs (including Zip Slip, JWT, ASN.1, PDF, and Starlette) and updating the llama-stack-client.

Key Highlights

Security fixes for CVE-2026-32597 (pyjwt), CVE-2026-30922 (pyasn1), CVE-2026-27628 (pypdf), CVE-2025-14009 (NLTK Zip Slip), CVE-2026-33236 (nltk), and CVE-2026-48710 (starlette)
Updated llama-stack-client to version 0.4.5
Added release automation workflows to the 0.4.x branch

Full Release Notes

## What's Changed
* chore: bump llama-stack-client to 0.4.5 by @cdoern in https://github.com/ogx-ai/ogx/pull/4958
* fix: bump pyjwt to 2.12.0 (CVE-2026-32597) by @eoinfennessy in https://github.com/ogx-ai/ogx/pull/5188
* fix: bump pyasn1 to 0.6.3 (CVE-2026-30922) by @eoinfennessy in https://github.com/ogx-ai/ogx/pull/5208
* fix: bump pypdf to 5.5.0 (CVE-2026-27628) by @eoinfennessy in https://github.com/ogx-ai/ogx/pull/5189
* fix: NLTK Zip Slip Vulnerability (CVE-2025-14009) by @eoinfennessy in https://github.com/ogx-ai/ogx/pull/5190
* fix: bump nltk to 3.9.4 (CVE-2026-33236) by @eoinfennessy in https://github.com/ogx-ai/ogx/pull/5260
* ci: add release automation workflows to 0.4.x by @cdoern in https://github.com/ogx-ai/ogx/pull/5278
* fix: constrain starlette to >=1.0.1 (CVE-2026-48710) (backport #5977) by @mergify[bot] in https://github.com/ogx-ai/ogx/pull/5988


**Full Changelog**: https://github.com/ogx-ai/ogx/compare/v0.4.5...v0.4.6