This release includes 1 security fix for security teams reviewing exposed deployments.
Topics
Summary
AI summaryFixed job retry code leaking a process handle.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | High |
Encodes user-provided text in activity log descriptions to enhance security. Encodes user-provided text in activity log descriptions to enhance security. Source: llm_adapter@2026-06-13 Confidence: high |
— |
| Dependency | Low |
Bumps pixl-request to version 2.6.6. Bumps pixl-request to version 2.6.6. Source: granite4.1:30b@2026-06-13-audit Confidence: low |
— |
| Bugfix | Medium |
Fixes job retry code leaking an old process handle object. Fixes job retry code leaking an old process handle object. Source: llm_adapter@2026-06-13 Confidence: high |
— |
| Bugfix | Medium |
Fixes potential stream write leak in pixl-request dependency. Fixes potential stream write leak in pixl-request dependency. Source: llm_adapter@2026-06-13 Confidence: low |
— |
Full changelog
- Bump pixl-request to v2.6.6 for potential stream write leak fixes.
- Enhance security by encoding user-provided text in activity log descriptions
- Bug fix: Job retry code was leaking an old process handle object.
Security Fixes
- Encode user-provided text in activity log descriptions to enhance security
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Beta — feedback welcome: [email protected]