GlycemicGPT

v0.9.0 Security

This release includes 2 security fixes for security teams reviewing exposed deployments.

Published 1mo Developer Productivity

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 2 known CVEs

Topics

artificial-intelligence cgm-remote-monitor diabetes hba1c healthcare-ai insulin-pump

+6 more

medtronic nightscout omnipod tandem type-1-diabetes type-2-diabetes

Affected surfaces

deps

ReleasePort's take

Moderate signal

editorial:auto 1mo

Bump pyjwt to 2.13.0 and patch starlette to address PYSEC‑2026 advisories; these updates clear known security vulnerabilities.

Why it matters: PYSEC‑2026 advisories have a severity score of 90, indicating critical risk; updating pyjwt to 2.13.0 and applying the starlette patch eliminates these high‑severity issues for API runtime dependencies.

Summary

AI summary

Broad release touches https://github.com/jlengelbrecht, ✨ New Features, 📝 Other Changes, and medtronic.

Changes in this release

Type	Severity	Summary	CVE
Security	Critical	Bump pyjwt to 2.13.0 to clear PYSEC-2026 advisories. Bump pyjwt to 2.13.0 to clear PYSEC-2026 advisories. Source: llm_adapter@2026-06-10 Confidence: high	—
Security	Critical	Patch starlette PYSEC-2026-161 and harden the ecdsa OSV exception. Patch starlette PYSEC-2026-161 and harden the ecdsa OSV exception. Source: llm_adapter@2026-06-10 Confidence: high	—
Feature
Feature	Low	Add cross‑source CGM deduplication and primary‑source picker. Add cross‑source CGM deduplication and primary‑source picker. Source: llm_adapter@2026-06-10 Confidence: high	—
Feature	Low	Add Sentry error monitoring to the API (disabled by default). Add Sentry error monitoring to the API (disabled by default). Source: llm_adapter@2026-06-10 Confidence: high	—
Feature	Low	Add Sentry error monitoring to the sidecar (disabled by default). Add Sentry error monitoring to the sidecar (disabled by default). Source: llm_adapter@2026-06-10 Confidence: high	—
Feature	Low	Add server‑side Sentry error monitoring to the web app (disabled by default). Add server‑side Sentry error monitoring to the web app (disabled by default). Source: llm_adapter@2026-06-10 Confidence: high	—
Feature	Low	Add Nightscout cloud‑source plugin to the mobile app. Add Nightscout cloud‑source plugin to the mobile app. Source: llm_adapter@2026-06-10 Confidence: high	—
Bugfix
Bugfix	Medium	Resolve 500 error on caregiver invitation creation. Resolve 500 error on caregiver invitation creation. Source: llm_adapter@2026-06-10 Confidence: high	—
Bugfix	Medium	Stop glucose SSE proxy from leaking aborts into Sentry. Stop glucose SSE proxy from leaking aborts into Sentry. Source: llm_adapter@2026-06-10 Confidence: high	—
Bugfix	Medium	Refresh Glooko card status after a failed sync/import. Refresh Glooko card status after a failed sync/import. Source: llm_adapter@2026-06-10 Confidence: high	—

Full changelog

v0.9.0

📱 Mobile

✨ New Features

feat(mobile): Nightscout cloud-source plugin @jlengelbrecht (#712)
feat(medtronic): advertise-and-wait pairing UX + driver kill-switch @jlengelbrecht (#704)
feat(medtronic): render pump connection notes in settings card @jlengelbrecht (#703)
feat(medtronic): poll/persist/push pipeline integration with single-flight reads @jlengelbrecht (#702)
feat(medtronic): on-device BluetoothGatt-client read transport @jlengelbrecht (#701)
feat(medtronic): capability delegates + DevicePlugin + Hilt/:app wiring @jlengelbrecht (#700)
feat(medtronic): IDD status + history/RACP read-only readers @jlengelbrecht (#699)
feat(medtronic): session-read framework + CGM/SG, Device Info, and Battery readers @jlengelbrecht (#698)
feat(medtronic): peripheral-mode BLE connection manager with SAKE session and reconnect @jlengelbrecht (#697)
feat(medtronic): read-only BLE driver module with SAKE session and protocol constants @jlengelbrecht (#694)
feat(mobile): wire Sentry crash/error reporting into the Android app @jlengelbrecht (#693)

🐛 Bug Fixes

fix(tandem): remove cloud-upload feature @jlengelbrecht (#668)

📝 Other Changes

chore: sync release 0.8.2 from main to develop @glycemicgpt-merge (#666)

🌐 Web

✨ New Features

feat: cross-source CGM dedupe + primary-source picker (Story 43.10) @jlengelbrecht (#711)
feat(integrations): make Omnipod/Glooko EU region a first-class option @jlengelbrecht (#690)
feat(integrations): Omnipod cloud sync via Glooko @jlengelbrecht (#689)
feat(integrations): Medtronic CareLink Connect autonomous cloud sync @jlengelbrecht (#686)
feat(web): server-side-only Sentry error monitoring (disabled by default) @jlengelbrecht (#677)
feat: Medtronic CareLink manual historical import @jlengelbrecht (#671)
feat(tandem): Cloud Sync card with per-user sync, availability, and manual import @jlengelbrecht (#669)
feat(web): forecast picker + dotted-line overlay (43.12 PR 4) @jlengelbrecht (#636)

🐛 Bug Fixes

fix(integrations): refresh Glooko card status after a failed sync/import @jlengelbrecht (#691)
fix(web): stop the glucose SSE proxy from leaking aborts into Sentry @jlengelbrecht (#688)

📝 Other Changes

chore(deps): clear Dependabot dev/build advisories before release @jlengelbrecht (#714)
chore(deps): update dependency postcss to v8.5.15 @glycemicgpt-renovate (#607)
chore(deps): update dependency recharts to v3.8.1 @glycemicgpt-renovate (#559)

📡 API

✨ New Features

feat(api): cross-source pump-event dedupe via content hash (Story 43.11) @jlengelbrecht (#710)
feat(api): add Sentry error monitoring (disabled by default) @jlengelbrecht (#672)

🐛 Bug Fixes

fix(api): bump pyjwt to 2.13.0 to clear PYSEC-2026 advisories @jlengelbrecht (#705)
fix(caregiver): resolve 500 on invitation creation @jlengelbrecht (#685)
fix(deps): patch starlette PYSEC-2026-161 and harden the ecdsa OSV exception @jlengelbrecht (#674)

📝 Other Changes

chore(api): harden Sentry URL scrubbing and refresh privacy status @jlengelbrecht (#675)
Fix Tandem cloud upload silent-success + scheduler diagnostics @jlengelbrecht (#667)
chore(deps): lock file maintenance @glycemicgpt-renovate (#557)

🤖 Sidecar

✨ New Features

feat(sidecar): add Sentry error monitoring (disabled by default) @jlengelbrecht (#676)

📝 Other Changes

chore(deps): update dependency express to v4.22.2 @glycemicgpt-renovate (#653)

🏗️ Infrastructure

✨ New Features

feat(medtronic): offline peripheral-BLE + SAKE handshake de-risk spike @jlengelbrecht (#692)
feat(k8s): wire Sentry DSN env passthrough for api/sidecar/web @jlengelbrecht (#678)

🐛 Bug Fixes

fix(ci): green develop after Medtronic Connect merge (helper-src context + x/sys CVE) @jlengelbrecht (#687)

📝 Other Changes

chore: sync changelog update from main to develop @glycemicgpt-merge (#665)

📚 Documentation

docs(readme): add Medtronic 700-series + web dashboard demo + trim badges @jlengelbrecht (#709)
docs(medtronic): OpenMinimed attribution, GPL-3.0 licensing, and BLE pairing guide @jlengelbrecht (#706)
docs(roadmap): name the shared memory layer under AI Engine 2.0 @jlengelbrecht (#684)
docs: add Sentry for Good sponsor and privacy posture @jlengelbrecht (#670)