This release adds 1 notable feature for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+10 more
Affected surfaces
Summary
AI summaryMinor fixes and improvements.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Adds service metadata, TTFA, observers, recording, audio mixer/DTMF/noise, extensions, and provider modalities. Adds service metadata, TTFA, observers, recording, audio mixer/DTMF/noise, extensions, and provider modalities. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Dependency | Low |
Pins cosign to 2.4.x for classic .sig/.pem signing in release process. Pins cosign to 2.4.x for classic .sig/.pem signing in release process. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Refactor | Low |
Refactors metrics and tracing code into telemetry/ directory grouping. Refactors metrics and tracing code into telemetry/ directory grouping. Source: llm_adapter@2026-07-15 Confidence: high |
— |
Full changelog
Changelog
- 7a76448a61ef9860c739c577eac9120609af2154: chore(ci): add TruffleHog secret scan to the security workflow (@fallais)
- 6f09ce43560d71de6f24387dba996b8f40a198f6: chore(release): sign release checksums with keyless cosign (@fallais)
- 82172334f6534e7346b68abd6d476e913006c911: feat: service metadata + TTFA, observers, recording, audio mixer/DTMF/noise, extensions, and provider modalities (@fallais)
- 1dd0ee1b5a13b12f5a7b85e3c5897cf1191b16b5: fix(release): pin cosign to 2.4.x for classic .sig/.pem signing (@fallais)
- 791ef74cd9cd766512a4593fff6d2b0777dbc490: refactor: group metrics and tracing under telemetry/ (@fallais)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Jargo
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]