v2.2.2
Security maintenance release.
Security
- Resolved all 24 open Dependabot alerts (8 unique advisories, 21 high / 3 moderate) by bumping three transitive dependencies in the
dlt-dbt-motherduck-projectreference lockfile. Direct deps (dbt-duckdb,dlt,duckdb) unchanged. (#43)
| Package | Before → After | Advisories |
|---|---|---|
| GitPython | 3.1.46 → 3.1.50 | GHSA-rpm5-65cw-6hj4, GHSA-x2qx-6953-8485, GHSA-7545-fcxq-7j24, GHSA-v87r-6q3f-2j67, GHSA-mv93-w799-cj2w |
| urllib3 | 2.6.3 → 2.7.0 | GHSA-mf9v-mfxr-j63j, GHSA-qccp-gfcp-xxvc |
| idna | 3.11 → 3.18 | GHSA-65pc-fj4g-8rjx |
Release engineering
- Version bumped to 2.2.2 across all manifests,
INTEGRATION_VERSION, andagent-skills/<version>watermarks. (#44)
Full changelog: v2.2.1...v2.2.2