Skip to content

v0.3.2

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 24 Oct 00:46
v0.3.2
2d68a85

馃敀 Security

virtualenv: Bash activator leaves the --prompt value unescaped in PS1 when promptvars is off, so prompt expansion later executes it (regression in 21.14.9) (high severity, CVSS 7.1), dependency advisory GHSA-cx6f-vjhg-g3cc / CVE-2026-115586.

Upgrading is strongly recommended.

Highlights

  • Vector Store: Now defaults to the SQLite vector store and avoids starting Docker without embeddings.
  • Dependencies: Virtualenv version locked to 21.14.13 to address GHSA-cx6f-vjhg-g3cc.
  • SBOM: CycloneDX SBOM and Docker image attestation published with each release.

What's Changed

  • feat(vectors)!: default to the sqlite vector store and never start Docker without embeddings by @vitali87 in #3407
  • fix(deps): lock virtualenv 21.14.13 to clear GHSA-cx6f-vjhg-g3cc by @vitali87 in #3428
  • ci(release): publish a CycloneDX SBOM with each binary and an SBOM attestation with the Docker image by @vitali87 in #3427

Full Changelog: v0.2.24...v0.3.2

Contributors

vitali87
Assets 27
Loading