Skip to content

v2.9.10

Choose a tag to compare

@ttlequals0 ttlequals0 released this 15 Jun 00:55
· 36 commits to main since this release
59525ff

Dependency security + maintenance release.

Changed

  • claude-agent-sdk 0.2.87 -> 0.2.93 (latest published; [otel] extra retained).
  • starlette floor >=0.49.1 -> >=1.0.1 (resolves to 1.3.1) to close GHSA-86qp-5c8j-p5mr (medium): missing Host-header validation poisons request.url.path, bypassing path-based security checks. Dependabot alert #13.
  • fastapi floor >=0.119.0 -> >=0.133.1 (resolves to 0.137.0). fastapi <=0.132.x caps starlette <1.0.0; 0.133.1 is the first release to drop that cap, required to reach the patched starlette.

Verification

  • Full test suite: 673 passed, 31 skipped.
  • App boots under starlette 1.3.1; /health, /version, /v1/models respond.
  • Image ttlequals0/claude-code-openai-wrapper:2.9.10 (digest sha256:8f7bd101) pushed and deployed to production; /version confirms 2.9.10.
  • Zero fixable HIGH/CRITICAL CVEs (remaining HIGH/CRITICAL are unfixed Debian base-image packages).

Docker: `docker pull ttlequals0/claude-code-openai-wrapper:2.9.10`