Skip to content

NoteBrain CLI v2.14.0

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 27 Oct 15:33
v2.14.0
5c9a8d1

Highlights

  • Recover missing ONNX model files with notebrain doctor --fix. Recovery verifies the pinned archive checksum, preserves healthy files, refuses existing download locks, and does not reset the database.
  • Harden model archive extraction against path traversal. Output filenames now come only from a fixed allowlist. CodeQL alert #2 is fixed.
  • Update Go dependencies and fix CI lint and offline regression tests.

Runtime setup change

Breaking behavior change: Store commands no longer download a missing Chroma runtime automatically. They fail immediately with setup instructions instead of waiting on download locks.

To install the runtime explicitly:

NOTEBRAIN_ALLOW_RUNTIME_DOWNLOAD=1 notebrain stats --format=json

Alternatively, set CHROMA_LIB_PATH to an existing Chroma runtime library. This is separate from ONNX model recovery with notebrain doctor --fix.

Downloads

The binary archive targets Linux x86_64. Release assets also include checksums, a Cosign signature bundle, and an SBOM.

Full changelog: v2.13.1...v2.14.0

Assets 6
Loading