Jargo

v0.0.3 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 14d AI Agents & Assistants

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 1 known CVE

Topics

ai-agents audio conversational-ai go llm pion

+10 more

realtime speech-recognition speech-to-text stt text-to-speech tts voice-agent voice-ai voice-assistant webrtc

Affected surfaces

deps

ReleasePort's take

Moderate signal

editorial:auto 11d

Update the Plumber dependency to v0.3.86 immediately because it contains a critical security fix.

Why it matters: The update addresses a severity‑90 security issue in Plumber; failure to upgrade leaves the system exposed.

Summary

AI summary

Updates @fallais, deps, and @thomasboni across a mixed release.

Changes in this release

Type	Severity	Summary	CVE
Security	Critical	Update Plumber to v0.3.86 (security fix) Update Plumber to v0.3.86 (security fix) Source: llm_adapter@2026-07-15 Confidence: high	—
Security	Medium	Clear fixable code‑scanning findings Clear fixable code‑scanning findings Source: llm_adapter@2026-07-15 Confidence: high	—
Feature
Feature	Medium	Add conversation‑flow framework (Phase 1) Add conversation‑flow framework (Phase 1) Source: llm_adapter@2026-07-15 Confidence: high	—
Feature	Medium	Default to pure‑Go SILK encoder; libopus behind build tag Default to pure‑Go SILK encoder; libopus behind build tag Source: llm_adapter@2026-07-15 Confidence: high	—
Feature	Medium	Default to pure‑Go resampler; libsoxr behind build tag Default to pure‑Go resampler; libsoxr behind build tag Source: llm_adapter@2026-07-15 Confidence: high	—
Feature	Medium	Add providers, audio input filters, LiveKit/WhatsApp transports, and MCP Add providers, audio input filters, LiveKit/WhatsApp transports, and MCP Source: llm_adapter@2026-07-15 Confidence: high	—
Feature	Low	Publish base Docker images to Docker Hub only in CI Publish base Docker images to Docker Hub only in CI Source: granite4.1:30b@2026-07-15-audit Confidence: low	—
Dependency
Dependency	Low	Bump github-actions dependencies across 11 updates Bump github-actions dependencies across 11 updates Source: llm_adapter@2026-07-15 Confidence: high	—
Dependency	Low	Bump github-actions dependencies across 5 updates Bump github-actions dependencies across 5 updates Source: llm_adapter@2026-07-15 Confidence: high	—
Dependency	Low	Bump go-modules dependencies across 3 updates Bump go-modules dependencies across 3 updates Source: llm_adapter@2026-07-15 Confidence: high	—
Dependency	Low	Bump go-modules dependencies across 6 updates Bump go-modules dependencies across 6 updates Source: llm_adapter@2026-07-15 Confidence: high	—
Bugfix	Low	Fix green CI by using atomic.Int64 in probe and wget for librnnoise build Fix green CI by using atomic.Int64 in probe and wget for librnnoise build Source: granite4.1:30b@2026-07-15-audit Confidence: high	—

Full changelog

Changelog

888957c25aca633027c0a068ad9a67f66e3bed42: Update Plumber to v0.3.86 (security fix) (#6) (@thomasboni)
788545f3cbabbe74df3aa38909feb577042c7ff1: build(deps): bump the github-actions group across 1 directory with 11 updates (#8) (@dependabot[bot])
48be8c68b9f004b632d759ad95f21d60de99da3f: build(deps): bump the github-actions group across 1 directory with 5 updates (#11) (@dependabot[bot])
259ea3af69a8dcabd855d19ba44ed04b3abb5b46: build(deps): bump the go-modules group across 1 directory with 3 updates (#12) (@dependabot[bot])
53927d486347d05c52d3391067e84c216becf31f: build(deps): bump the go-modules group across 1 directory with 6 updates (#5) (@dependabot[bot])
a59e22a13b7ed0e36f30278aff1b2859737f606c: chore(security): clear fixable code-scanning findings (#14) (@fallais)
0a49e6742fdb6f0c912e3d469eeaeed554a34f64: ci(docker): publish base images to Docker Hub only (@fallais)
e3136f312a79176dff823001ee2f0c1a2b69892a: feat(flows): add conversation-flow framework (Phase 1) (@fallais)
aecdc955e4894c6a3a8f69b6371917f639d96ccd: feat(opus): default to pure-Go SILK encoder; libopus behind build tag (#13) (@fallais)
92cfaf87b7bcb1a6a93ad8978b8e8f15a181f247: feat(resample): default to pure-Go resampler; libsoxr behind build tag (#10) (@fallais)
3299403650fb655c5339b30988b4b9c724b5fe77: feat: add providers, audio input filters, LiveKit/WhatsApp transports, and MCP (#9) (@fallais)
3824fc7897f32a1e96355f13de4277250906c433: feat: cgo-free ONNX and RNNoise backends via purego (#15) (@fallais)
d1bb1574973fa3785307a82f1f7739cef30a1508: fix: green CI — atomic.Int64 in probe, wget for librnnoise build (#16) (@fallais)

Security Fixes

Plumber v0.3.86 contains a security fix (commit 888957c)

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Jargo

Get notified when new releases ship.

About Jargo

All releases →