Skip to content

v0.3.1

Choose a tag to compare

View all tags
@tuirk tuirk released this 07 Jul 05:31
· 38 commits to main since this release
v0.3.1
865d320

Summary

  • Security and reliability release over v0.3.0.
  • Audit hardening (#143): SSRF guard, flush durability, XSS/path-traversal fixes, LLM caps.
  • Wiki lint v1.1 drill-down reporting; weekly Telegram digest removed.
  • kompl update now rebuilds app/nlp-service images from latest source (#142).
  • Dependency roll-forward: Next 16.2.10, checkout v7, json-repair floor, hono 4.12.27.

Upgrade

kompl update

git pull alone does not refresh Docker images — see README Updating.

Known limitations

  • Scorecard branch-protection #27 remains open by design.
  • Chroma/numpy migration still deferred (chromadb==0.4.24, numpy<2).
  • See docs/security/scorecard-deferred.md for pip hash-pinning disposition.
Assets 2
Loading