Repository navigation
v2.9.10
Dependency security + maintenance release.
Changed
claude-agent-sdk0.2.87 -> 0.2.93 (latest published;[otel]extra retained).starlettefloor>=0.49.1->>=1.0.1(resolves to 1.3.1) to close GHSA-86qp-5c8j-p5mr (medium): missing Host-header validation poisonsrequest.url.path, bypassing path-based security checks. Dependabot alert #13.fastapifloor>=0.119.0->>=0.133.1(resolves to 0.137.0). fastapi<=0.132.xcapsstarlette <1.0.0; 0.133.1 is the first release to drop that cap, required to reach the patched starlette.
Verification
- Full test suite: 673 passed, 31 skipped.
- App boots under starlette 1.3.1;
/health,/version,/v1/modelsrespond. - Image
ttlequals0/claude-code-openai-wrapper:2.9.10(digest sha256:8f7bd101) pushed and deployed to production;/versionconfirms 2.9.10. - Zero fixable HIGH/CRITICAL CVEs (remaining HIGH/CRITICAL are unfixed Debian base-image packages).
Docker: `docker pull ttlequals0/claude-code-openai-wrapper:2.9.10`