v0.4.7

konvajs/konvav0.4.7Jul 27, 2026by cdoern

AI Summary

Focuses on security vulnerability mitigation for the v0.4.x branch, involving updates to litellm, Pillow, and various other dependencies, along with fixes to the unit test environment.

Key Highlights

Security: Updated litellm and Pillow to address CVEs
Dependencies: Bumped langchain-core and nltk
Testing: Fixed unit test environment for CVE dependencies
Security: Restored specific pyasn1 version constraints

Full Release Notes

## What's Changed
* fix: bump litellm to >=1.83.0 for CVEs by @mfleader in https://github.com/ogx-ai/ogx/pull/6055
* fix: bump pillow to >=12.2.0 (CVE-2026-40192) by @mfleader in https://github.com/ogx-ai/ogx/pull/6073
* fix: bump 0.4.x cve dependencies and fix the unit test env by @skamenan7 in https://github.com/ogx-ai/ogx/pull/6303
* fix: bump pyasn1 for CVE-2026-59885 (backport #6330) by @mergify[bot] in https://github.com/ogx-ai/ogx/pull/6335
* fix(deps): bump pillow, nltk, and langchain-core for multiple CVEs (backport #6272) by @mergify[bot] in https://github.com/ogx-ai/ogx/pull/6361
* fix(deps): restore pyasn1>=0.6.4 for CVE-2026-59885 by @cdoern in https://github.com/ogx-ai/ogx/pull/6363


**Full Changelog**: https://github.com/ogx-ai/ogx/compare/v0.4.6...v0.4.7