Starstruk Logo MarkStarstruk

v0.7.3

stepfun-ai/Step-Audiov0.7.3Jul 27, 2026by cdoern

AI Summary

A patch release dedicated to resolving multiple security vulnerabilities (CVEs) across various dependencies including Pillow and Python-multipart.

Key Highlights

  • Security update: Bumped Pillow to >=12.2.0 for CVE-2026-40192.
  • Security update: Bumped Python-multipart>=0.0.27 for CVE-2026-42561.
  • Security update: Bumped urllib3 and python-dotenv for CVE-2026-44432 and CVE-2026-44431.
  • Security update: Bumped nltk and langchain-core for multiple CVEs.

Full Release Notes

## What's Changed
* fix: bump pillow to >=12.2.0 (CVE-2026-40192) by @mfleader in https://github.com/ogx-ai/ogx/pull/6075
* fix: bump python-multipart>=0.0.27 for CVE-2026-42561 by @mfleader in https://github.com/ogx-ai/ogx/pull/6259
* fix(ci): pin client checkouts to the matching release branch on release-0.7.x by @cdoern in https://github.com/ogx-ai/ogx/pull/6289
* fix: bump pyasn1 for CVE-2026-59885 (backport #6330) by @mergify[bot] in https://github.com/ogx-ai/ogx/pull/6334
* fix(deps): bump urllib3 and python-dotenv for CVE-2026-44432, CVE-2026-44431, and CVE-2026-28684 by @cdoern in https://github.com/ogx-ai/ogx/pull/6360
* fix(deps): bump pillow, nltk, and langchain-core for multiple CVEs (backport #6272) by @mergify[bot] in https://github.com/ogx-ai/ogx/pull/6362
* fix(deps): bump aiohttp and pyjwt constraints for CVE-2026-34993 and CVE-2026-48526 (backport #6183) by @EleanorWho in https://github.com/ogx-ai/ogx/pull/6223


**Full Changelog**: https://github.com/ogx-ai/ogx/compare/v0.7.2...v0.7.3