v0.5.1

ogx-ai/ogxv0.5.1Feb 19, 2026by cdoern

AI Summary

Patch release addressing security vulnerabilities and stability improvements. Includes fix for arbitrary file write vulnerability, improved error handling for VertexAI authentication, and OpenTelemetry integration.

Key Highlights

Security fix for arbitrary file write via non-default configuration
Added opentelemetry-distro to core dependencies
Fixed VertexAI auth failure to raise descriptive error instead of silent empty string
Resolved StorageConfig default env vars at construction time
Eliminated duplicate vector store registration calls

New Features

OpenTelemetry (opentelemetry-distro) added to core dependencies

Full Release Notes

## What's Changed
* fix: [release-0.5.x] Arbitrary file write via a non-default configuration (#4844) by @VaishnaviHire in https://github.com/llamastack/llama-stack/pull/4869
* fix(vertexai): raise descriptive error on auth failure instead of silent empty string (backport #4909) by @mergify[bot] in https://github.com/llamastack/llama-stack/pull/4923
* fix: resolve StorageConfig default env vars at construction time (backport #4897) by @mergify[bot] in https://github.com/llamastack/llama-stack/pull/4924
* feat: add opentelemetry-distro to core dependencies (backport #4935) by @mergify[bot] in https://github.com/llamastack/llama-stack/pull/4943
* fix(vector_io): eliminate duplicate call for vector store registration (backport #4925) by @mergify[bot] in https://github.com/llamastack/llama-stack/pull/4941
* chore: bump version to 0.5.1 for release by @cdoern in https://github.com/llamastack/llama-stack/pull/4955


**Full Changelog**: https://github.com/llamastack/llama-stack/compare/v0.5.0...v0.5.1