This release includes 2 security fixes for security teams reviewing exposed deployments.
Published 1mo
Monitoring & Metrics
✓ No known CVEs patched
This release patches 2 known CVEs
Topics
anomaly-detection
battery
bms
can-bus
dbc
electric-vehicle
+9 more
ev
grafana
j1939
lstm
machine-learning
prometheus
python
quality-assurance
soh-prediction
Summary
AI summaryUpdates NEW: LOW Priority, HIGH Priority, and MEDIUM Priority across a mixed release.
Full changelog
Changes
All Roast Findings Fixed (HIGH + MEDIUM + LOW)
HIGH Priority (fixed earlier)
- README thermal runaway threshold: 85C -> 130C
- Moved pytest to dev dependencies
- Unified version to 2.1.5
- Fixed Dockerfile healthcheck
- Removed cosmetic async from run_test_suite
MEDIUM Priority (fixed earlier)
- Removed redundant check_percentage_range validator
- Translated simple_demo.py to English
- Fixed settings.yaml phantom reference in docs
- Secured Grafana credentials (env var)
NEW: LOW Priority (this release)
- Optional extras: web, can, monitoring, all (pip install ev-qa-framework[web])
- Resource limits: docker-compose with 4G RAM/2CPU for tests, 1G/1CPU for grafana
- SIGTERM handling: Graceful shutdown on container stop
- joblib replaced: JSON + NumPy serialization (no arbitrary code execution)
- StreamingAnomalyDetector: Real-time sliding-window anomaly detection
- Uncertainty quantification: Bootstrap confidence intervals in thermal runaway predictor
- GradientBoosting AutoML: Added as second candidate alongside RandomForest
Test Results
977 tests passing, 0 failures
Security Fixes
- joblib replaced with JSON + NumPy serialization to prevent arbitrary code execution
- Secured Grafana credentials by storing them in an environment variable
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About EV-QA-Framework
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]