security-packages-2026-07-28 rvf-v0.3.4
medium risk
cheaper-inference/OmniRouteJul 28, 2026 → Jul 28, 20260 days between releases
What's New
Adds queryable durable COW branches and fixes sparse-ID handling in the RVF runtime.
New Features
- Queryable, durable RVF copy-on-write (COW) branches.
- Membership capacity derived from highest vector ID with overflow checks.
- Durable COW branches with checked overflow.
- Closure against allocation abuse via memory caps.
- Improved sparse-ID handling for immediate read-through.
Improvements
- Dense membership allocation capped at 64 MiB to prevent abuse.
- Branch lineage and edits survive reopen and relocation.
Bug Fixes
- Corrects immediate read-through for one-based and sparse vector IDs.
Upgrade Notes
Affected npm releases are deprecated; check the upgrade guidance for the new COW branch implementation.
The Two Releases
security-packages-2026-07-28
Security package refresh — 2026-07-28
Jul 28, 2026· 3 months ago
Security maintenance release clearing critical, high, and moderate Dependabot alerts across multiple packages.
Full release notesrvf-v0.3.4
RVF durable COW v0.3.4
Jul 28, 2026· 3 months ago
Completes queryable, durable RVF copy-on-write branches and fixes sparse-ID correctness issues.
Full release notes