What's Changed
New Features
- Coding agent plugin with skills-first architecture (#838)
- Plugin manifests for Claude Code and Codex CLI
- Skills:
setup-guide,data-generation,flow-browser - Shell scripts for environment detection, flow discovery, and data generation
Security
- Bump litellm from
<=1.82.6to>=1.83.10,<1.85.0(#846)- Raises floor to first version with all known CVEs patched:
- CVE-2026-42208 (SQL injection, CVSS 9.8, CISA KEV)
- CVE-2026-42271 (command injection, CVSS 8.7, CISA KEV)
- CVE-2026-40217 (sandbox escape)
- Unblocks garak red-teaming integration (
litellm>=1.83.4) - Resolves to litellm 1.84.6
- Raises floor to first version with all known CVEs patched:
Full Changelog: v0.9.3...v0.9.4