Starstruk Logo MarkStarstruk

v0.4.6

cloudflare/pingorav0.4.6May 29, 2026by cdoern

AI Summary

This release focuses on security by addressing multiple CVEs through dependency bumps and fixes, including updates to `llama-stack-client`, `pyjwt`, `pyasn1`, and `pypdf`.

Key Highlights

  • Security Patches: Fixes CVE-2026-32597 (pyjwt), CVE-2026-30922 (pyasn1), CVE-2026-27628 (pypdf), and CVE-2025-14009 (NLTK).
  • Dependency Updates: Bumped `llama-stack-client` to 0.4.5 and `nltk` to 3.9.4.
  • Starlette Constraint: Constrained `starlette` to >=1.0.1 to address CVE-2026-48710.
  • Release Automation: Added CI/CD workflows for the 0.4.x branch.

New Features

  • Security Dependency Updates
  • CI/CD Workflow Addition
  • Starlette Version Constraint

Full Release Notes

## What's Changed
* chore: bump llama-stack-client to 0.4.5 by @cdoern in https://github.com/ogx-ai/ogx/pull/4958
* fix: bump pyjwt to 2.12.0 (CVE-2026-32597) by @eoinfennessy in https://github.com/ogx-ai/ogx/pull/5188
* fix: bump pyasn1 to 0.6.3 (CVE-2026-30922) by @eoinfennessy in https://github.com/ogx-ai/ogx/pull/5208
* fix: bump pypdf to 5.5.0 (CVE-2026-27628) by @eoinfennessy in https://github.com/ogx-ai/ogx/pull/5189
* fix: NLTK Zip Slip Vulnerability (CVE-2025-14009) by @eoinfennessy in https://github.com/ogx-ai/ogx/pull/5190
* fix: bump nltk to 3.9.4 (CVE-2026-33236) by @eoinfennessy in https://github.com/ogx-ai/ogx/pull/5260
* ci: add release automation workflows to 0.4.x by @cdoern in https://github.com/ogx-ai/ogx/pull/5278
* fix: constrain starlette to >=1.0.1 (CVE-2026-48710) (backport #5977) by @mergify[bot] in https://github.com/ogx-ai/ogx/pull/5988


**Full Changelog**: https://github.com/ogx-ai/ogx/compare/v0.4.5...v0.4.6