ContextLattice v3.7.1 - Mongo Driver Security Patch
ContextLattice v3.7.1
Release date: 2026-07-01
v3.7.1 is a security patch for the v3.7 Token Impact Engine train. It upgrades the Go MongoDB driver past the patched advisory floor while preserving the tokenizer-exact prompt economics and bounded token-impact ledger behavior shipped in v3.7.0.
Highlights
- Upgrades
go.mongodb.org/mongo-drivertov1.17.9. - Resolves GitHub advisory
GHSA-cp6g-7hqx-qxhpfor the Go MongoDB driver. - Keeps v3.7.0 prompt-economics behavior unchanged: tokenizer-exact accounting, bounded token-impact ledger persistence, and exact/sampled/heuristic dashboard labels.
- Keeps release-note hygiene in place for public release publishing.
Verification
- Gateway Go tests passed.
- Release-note hygiene passed for these notes.
- Public release body hygiene was verified after publishing.
Upgrade Guidance
Use v3.7.1 wherever v3.7.0 is currently installed. This is a dependency-only security patch; no migration is required.