v0.4.6

ogx-ai/ogxv0.4.6May 29, 2026by cdoern

AI Summary

A security-focused release addressing multiple CVE vulnerabilities in dependencies like pyjwt, pyasn1, pypdf, and nltk, alongside a backport of a Starlette security fix.

Key Highlights

Patched security vulnerabilities in pyjwt, pyasn1, pypdf, and nltk
Fixed NLTK Zip Slip Vulnerability (CVE-2025-14009)
Backported Starlette security constraint (CVE-2026-48710)

Full Release Notes

## What's Changed
* chore: bump llama-stack-client to 0.4.5 by @cdoern in https://github.com/ogx-ai/ogx/pull/4958
* fix: bump pyjwt to 2.12.0 (CVE-2026-32597) by @eoinfennessy in https://github.com/ogx-ai/ogx/pull/5188
* fix: bump pyasn1 to 0.6.3 (CVE-2026-30922) by @eoinfennessy in https://github.com/ogx-ai/ogx/pull/5208
* fix: bump pypdf to 5.5.0 (CVE-2026-27628) by @eoinfennessy in https://github.com/ogx-ai/ogx/pull/5189
* fix: NLTK Zip Slip Vulnerability (CVE-2025-14009) by @eoinfennessy in https://github.com/ogx-ai/ogx/pull/5190
* fix: bump nltk to 3.9.4 (CVE-2026-33236) by @eoinfennessy in https://github.com/ogx-ai/ogx/pull/5260
* ci: add release automation workflows to 0.4.x by @cdoern in https://github.com/ogx-ai/ogx/pull/5278
* fix: constrain starlette to >=1.0.1 (CVE-2026-48710) (backport #5977) by @mergify[bot] in https://github.com/ogx-ai/ogx/pull/5988


**Full Changelog**: https://github.com/ogx-ai/ogx/compare/v0.4.5...v0.4.6