v0.4.7

harry0703/MoneyPrinterTurbov0.4.7Jul 27, 2026by cdoern

AI Summary

A security-focused release designed to fix CVEs by updating dependencies such as litellm, pillow, and langchain-core, along with fixing unit test environments.

Key Highlights

Resolved security vulnerabilities in litellm and pillow
Updated langchain-core, nltk, and pyasn1 for security
Fixed unit test environment for the 0.4.x branch
Restored pyasn1 constraints for CVE-2026-59885

Full Release Notes

## What's Changed
* fix: bump litellm to >=1.83.0 for CVEs by @mfleader in https://github.com/ogx-ai/ogx/pull/6055
* fix: bump pillow to >=12.2.0 (CVE-2026-40192) by @mfleader in https://github.com/ogx-ai/ogx/pull/6073
* fix: bump 0.4.x cve dependencies and fix the unit test env by @skamenan7 in https://github.com/ogx-ai/ogx/pull/6303
* fix: bump pyasn1 for CVE-2026-59885 (backport #6330) by @mergify[bot] in https://github.com/ogx-ai/ogx/pull/6335
* fix(deps): bump pillow, nltk, and langchain-core for multiple CVEs (backport #6272) by @mergify[bot] in https://github.com/ogx-ai/ogx/pull/6361
* fix(deps): restore pyasn1>=0.6.4 for CVE-2026-59885 by @cdoern in https://github.com/ogx-ai/ogx/pull/6363


**Full Changelog**: https://github.com/ogx-ai/ogx/compare/v0.4.6...v0.4.7