v0.5.8 2026-04-27

What's Changed

• chore: bump pillow and python-multipart for CVEs, add SECURITY.md by @johnnygreco in #564
• fix(ci): grant permissions to reusable workflow calls by @andreatgretel in #561
• ci: bump the all-actions group across 1 directory with 5 updates by @dependabot[bot] in #558
• refactor: unify duplicate DAG construction (dag.py + ExecutionGraph) by @przemekboruta in #511
• fix: prevent sticky progress bar ghost lines from terminal wrapping by @andreatgretel in #565
• fix: Updated default reasoning model for nvidia by @kirit93 in #568
• chore: async engine readiness - blockers and polish before default by @andreatgretel in #553
• chore: remove obsolete Cerebro ignore entries by @johnnygreco in #570
• chore: add ko_KR locale to nemotron personas datasets by @johnnygreco in #572
• chore: bump lxml and nbconvert to address security advisories by @johnnygreco in #574

Full Changelog: v0.5.7...v0.5.8