v0.7.3
ogx-ai/ogxv0.7.3Jul 27, 2026by cdoern
AI Summary
A security-focused patch release updating multiple dependencies to address various CVEs and improve CI stability.
Key Highlights
- Updated Pillow, python-multipart, and pyasn1 for security vulnerabilities
- Updated urllib3 and python-dotenv for CVEs
- Updated aiohttp and pyjwt constraints for CVEs
- Fixed CI to pin client checkouts to matching release branches
Full Release Notes
## What's Changed * fix: bump pillow to >=12.2.0 (CVE-2026-40192) by @mfleader in https://github.com/ogx-ai/ogx/pull/6075 * fix: bump python-multipart>=0.0.27 for CVE-2026-42561 by @mfleader in https://github.com/ogx-ai/ogx/pull/6259 * fix(ci): pin client checkouts to the matching release branch on release-0.7.x by @cdoern in https://github.com/ogx-ai/ogx/pull/6289 * fix: bump pyasn1 for CVE-2026-59885 (backport #6330) by @mergify[bot] in https://github.com/ogx-ai/ogx/pull/6334 * fix(deps): bump urllib3 and python-dotenv for CVE-2026-44432, CVE-2026-44431, and CVE-2026-28684 by @cdoern in https://github.com/ogx-ai/ogx/pull/6360 * fix(deps): bump pillow, nltk, and langchain-core for multiple CVEs (backport #6272) by @mergify[bot] in https://github.com/ogx-ai/ogx/pull/6362 * fix(deps): bump aiohttp and pyjwt constraints for CVE-2026-34993 and CVE-2026-48526 (backport #6183) by @EleanorWho in https://github.com/ogx-ai/ogx/pull/6223 **Full Changelog**: https://github.com/ogx-ai/ogx/compare/v0.7.2...v0.7.3