v0.4.7

stepfun-ai/Step-Audiov0.4.7Jul 27, 2026by cdoern

AI Summary

A patch release focusing on dependency security updates, specifically addressing CVEs and restoring specific versions of vulnerable libraries like pyasn1 and litellm.

Key Highlights

Security update: Bumped litellm to >=1.83.0 for CVEs.
Security update: Restored pyasn1>=0.6.4 for CVE-2026-59885.
Security update: Bumped pillow, nltk, and langchain-core for multiple CVEs.

Full Release Notes

## What's Changed
* fix: bump litellm to >=1.83.0 for CVEs by @mfleader in https://github.com/ogx-ai/ogx/pull/6055
* fix: bump pillow to >=12.2.0 (CVE-2026-40192) by @mfleader in https://github.com/ogx-ai/ogx/pull/6073
* fix: bump 0.4.x cve dependencies and fix the unit test env by @skamenan7 in https://github.com/ogx-ai/ogx/pull/6303
* fix: bump pyasn1 for CVE-2026-59885 (backport #6330) by @mergify[bot] in https://github.com/ogx-ai/ogx/pull/6335
* fix(deps): bump pillow, nltk, and langchain-core for multiple CVEs (backport #6272) by @mergify[bot] in https://github.com/ogx-ai/ogx/pull/6361
* fix(deps): restore pyasn1>=0.6.4 for CVE-2026-59885 by @cdoern in https://github.com/ogx-ai/ogx/pull/6363


**Full Changelog**: https://github.com/ogx-ai/ogx/compare/v0.4.6...v0.4.7