Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: ogx-ai/ogx
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v0.4.5
Choose a base ref
...
head repository: ogx-ai/ogx
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v0.4.6
Choose a head ref
  • 10 commits
  • 12 files changed
  • 7 contributors

Commits on Feb 20, 2026

  1. chore: bump llama-stack-client to 0.4.5 (#4958)

    Signed-off-by: Charlie Doern <[email protected]>
    cdoern authored Feb 20, 2026
    Configuration menu
    Copy the full SHA
    b26270f View commit details
    Browse the repository at this point in the history

Commits on Mar 18, 2026

  1. fix: bump pyjwt to 2.12.0 (CVE-2026-32597) (#5188)

    Backport of #5127 to release-0.4.x
    eoinfennessy authored Mar 18, 2026
    Configuration menu
    Copy the full SHA
    73aa5a4 View commit details
    Browse the repository at this point in the history

Commits on Mar 19, 2026

  1. Configuration menu
    Copy the full SHA
    b0b4bca View commit details
    Browse the repository at this point in the history

Commits on Mar 23, 2026

  1. fix: bump pypdf to 5.5.0 (CVE-2026-27628) (#5189)

    Backport of #5063 to release-0.4.x
    eoinfennessy authored Mar 23, 2026
    Configuration menu
    Copy the full SHA
    8d82d04 View commit details
    Browse the repository at this point in the history
  2. fix: NLTK Zip Slip Vulnerability (CVE-2025-14009) (#5190)

    ## Summary
    - Backport of #5062 to `release-0.4.x`
    
    Co-authored-by: Charlie Doern <[email protected]>
    eoinfennessy and cdoern authored Mar 23, 2026
    Configuration menu
    Copy the full SHA
    cf09053 View commit details
    Browse the repository at this point in the history

Commits on Mar 24, 2026

  1. Configuration menu
    Copy the full SHA
    d622fdc View commit details
    Browse the repository at this point in the history

Commits on Mar 25, 2026

  1. ci: add release automation workflows to 0.4.x (#5278)

    Backport release automation workflows to the 0.4.x branch to enable easy
    releases.
    
    ## What does this PR do?
    
    Backports the release automation infrastructure to 0.4.x:
    
    - **prepare-release.yml**: Workflow to prepare a release by updating
    version files
    - **post-release.yml**: Workflow to automate post-release tasks (dev
    tag, version bumps)
    - **pypi.yml updates**: Add compute-version job for consistent version
    computation + Docker polling fix
    
    ## Backported commits
    
    1. 8b37a85 - feat(ci): automate post-release and pre-release version
    management
    2. 9b6365c - chore: fix post-release workflow and remove broken docker
    image
    3. ab8fded - fix(ci): use RELEASE_PAT and PRs in post-release workflow
    4. 2157c09 - fix(ci): add uv lock to post-release workflow to update
    stale lockfile
    5. acec7ca - fix: poll test PyPI before building Docker images to
    avoid race condition
    
    ## Changes
    
    - ✅ Added `.github/workflows/prepare-release.yml`
    - ✅ Added `.github/workflows/post-release.yml`
    - ✅ Updated `.github/workflows/pypi.yml` with compute-version job and
    Docker polling
    - ✅ Updated `.github/workflows/README.md` to document new workflows
    
    ## Testing
    
    The workflows can be tested via workflow_dispatch:
    - `prepare-release.yml` can be manually triggered with a version and
    branch
    - `post-release.yml` can be manually triggered with a release tag
    
    ## Related
    
    This is part of the work to bring the 0.4.x branch up to date for easy
    releases, along with #5277 which adds 0.4.x to scheduled CI.
    
    ---------
    
    Signed-off-by: Charlie Doern <[email protected]>
    Co-authored-by: Francisco Javier Arceo <[email protected]>
    Co-authored-by: Sébastien Han <[email protected]>
    3 people authored Mar 25, 2026
    Configuration menu
    Copy the full SHA
    416a7cb View commit details
    Browse the repository at this point in the history

Commits on May 29, 2026

  1. fix: constrain starlette to >=1.0.1 (CVE-2026-48710) (backport #5977) (

    …#5988)
    
    GHSA-86qp-5c8j-p5mr
    
    
    ---
    
    <a href="https://app.devin.ai/review/ogx-ai/ogx/pull/5977"
    target="_blank">
      <picture>
    <source media="(prefers-color-scheme: dark)"
    srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
    <img
    src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
    alt="Open in Devin Review">
      </picture>
    </a>
    <hr>This is an automatic backport of pull request #5977 done by
    [Mergify](https://mergify.com).
    <!-- devin-review-badge-begin -->
    
    ---
    
    <a href="https://app.devin.ai/review/ogx-ai/ogx/pull/5988"
    target="_blank">
      <picture>
    <source media="(prefers-color-scheme: dark)"
    srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
    <img
    src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
    alt="Open in Devin Review">
      </picture>
    </a>
    <!-- devin-review-badge-end -->
    
    Signed-off-by: Eoin Fennessy <[email protected]>
    Signed-off-by: Charlie Doern <[email protected]>
    Co-authored-by: Eoin Fennessy <[email protected]>
    Co-authored-by: Matthew Farrellee <[email protected]>
    3 people authored May 29, 2026
    Configuration menu
    Copy the full SHA
    f6e639d View commit details
    Browse the repository at this point in the history
  2. ci: update repository_owner gate to ogx-ai in pypi workflow

    Publish and Docker jobs were gated on github.repository_owner == 'llamastack'
    and skip after the repo move to ogx-ai. Update both gates so releases
    publish from the new org.
    
    Signed-off-by: Charlie Doern <[email protected]>
    cdoern committed May 29, 2026
    Configuration menu
    Copy the full SHA
    46517d2 View commit details
    Browse the repository at this point in the history
  3. chore: prepare release v0.4.6

    Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
    github-actions[bot] committed May 29, 2026
    Configuration menu
    Copy the full SHA
    19c07be View commit details
    Browse the repository at this point in the history
Loading