-
Notifications
You must be signed in to change notification settings - Fork 1.3k
Comparing changes
Open a pull request
base repository: ogx-ai/ogx
base: v0.4.5
head repository: ogx-ai/ogx
compare: v0.4.6
- 10 commits
- 12 files changed
- 7 contributors
Commits on Feb 20, 2026
-
chore: bump llama-stack-client to 0.4.5 (#4958)
Signed-off-by: Charlie Doern <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for b26270f - Browse repository at this point
Copy the full SHA b26270fView commit details
Commits on Mar 18, 2026
-
fix: bump pyjwt to 2.12.0 (CVE-2026-32597) (#5188)
Backport of #5127 to release-0.4.x
Configuration menu - View commit details
-
Copy full SHA for 73aa5a4 - Browse repository at this point
Copy the full SHA 73aa5a4View commit details
Commits on Mar 19, 2026
-
Configuration menu - View commit details
-
Copy full SHA for b0b4bca - Browse repository at this point
Copy the full SHA b0b4bcaView commit details
Commits on Mar 23, 2026
-
fix: bump pypdf to 5.5.0 (CVE-2026-27628) (#5189)
Backport of #5063 to release-0.4.x
Configuration menu - View commit details
-
Copy full SHA for 8d82d04 - Browse repository at this point
Copy the full SHA 8d82d04View commit details -
fix: NLTK Zip Slip Vulnerability (CVE-2025-14009) (#5190)
## Summary - Backport of #5062 to `release-0.4.x` Co-authored-by: Charlie Doern <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for cf09053 - Browse repository at this point
Copy the full SHA cf09053View commit details
Commits on Mar 24, 2026
-
Configuration menu - View commit details
-
Copy full SHA for d622fdc - Browse repository at this point
Copy the full SHA d622fdcView commit details
Commits on Mar 25, 2026
-
ci: add release automation workflows to 0.4.x (#5278)
Backport release automation workflows to the 0.4.x branch to enable easy releases. ## What does this PR do? Backports the release automation infrastructure to 0.4.x: - **prepare-release.yml**: Workflow to prepare a release by updating version files - **post-release.yml**: Workflow to automate post-release tasks (dev tag, version bumps) - **pypi.yml updates**: Add compute-version job for consistent version computation + Docker polling fix ## Backported commits 1. 8b37a85 - feat(ci): automate post-release and pre-release version management 2. 9b6365c - chore: fix post-release workflow and remove broken docker image 3. ab8fded - fix(ci): use RELEASE_PAT and PRs in post-release workflow 4. 2157c09 - fix(ci): add uv lock to post-release workflow to update stale lockfile 5. acec7ca - fix: poll test PyPI before building Docker images to avoid race condition ## Changes - ✅ Added `.github/workflows/prepare-release.yml` - ✅ Added `.github/workflows/post-release.yml` - ✅ Updated `.github/workflows/pypi.yml` with compute-version job and Docker polling - ✅ Updated `.github/workflows/README.md` to document new workflows ## Testing The workflows can be tested via workflow_dispatch: - `prepare-release.yml` can be manually triggered with a version and branch - `post-release.yml` can be manually triggered with a release tag ## Related This is part of the work to bring the 0.4.x branch up to date for easy releases, along with #5277 which adds 0.4.x to scheduled CI. --------- Signed-off-by: Charlie Doern <[email protected]> Co-authored-by: Francisco Javier Arceo <[email protected]> Co-authored-by: Sébastien Han <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for 416a7cb - Browse repository at this point
Copy the full SHA 416a7cbView commit details
Commits on May 29, 2026
-
fix: constrain starlette to >=1.0.1 (CVE-2026-48710) (backport #5977) (…
…#5988) GHSA-86qp-5c8j-p5mr --- <a href="https://app.devin.ai/review/ogx-ai/ogx/pull/5977" target="_blank"> <picture> <source media="(prefers-color-scheme: dark)" srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1"> <img src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1" alt="Open in Devin Review"> </picture> </a> <hr>This is an automatic backport of pull request #5977 done by [Mergify](https://mergify.com). <!-- devin-review-badge-begin --> --- <a href="https://app.devin.ai/review/ogx-ai/ogx/pull/5988" target="_blank"> <picture> <source media="(prefers-color-scheme: dark)" srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1"> <img src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1" alt="Open in Devin Review"> </picture> </a> <!-- devin-review-badge-end --> Signed-off-by: Eoin Fennessy <[email protected]> Signed-off-by: Charlie Doern <[email protected]> Co-authored-by: Eoin Fennessy <[email protected]> Co-authored-by: Matthew Farrellee <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for f6e639d - Browse repository at this point
Copy the full SHA f6e639dView commit details -
ci: update repository_owner gate to ogx-ai in pypi workflow
Publish and Docker jobs were gated on github.repository_owner == 'llamastack' and skip after the repo move to ogx-ai. Update both gates so releases publish from the new org. Signed-off-by: Charlie Doern <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for 46517d2 - Browse repository at this point
Copy the full SHA 46517d2View commit details -
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Configuration menu - View commit details
-
Copy full SHA for 19c07be - Browse repository at this point
Copy the full SHA 19c07beView commit details
This comparison is taking too long to generate.
Unfortunately it looks like we can’t render this comparison for you right now. It might be too big, or there might be something weird with your repository.
You can try running this command locally to see the comparison on your machine:
git diff v0.4.5...v0.4.6