This release includes 1 security fix for security teams reviewing exposed deployments.
Topics
+12 more
Affected surfaces
Summary
AI summaryImplement secure backend authentication and an append-only compliance database.
Full changelog
What's Changed in v3.6.0
- docs: Fix Level 1 install command to use [developer] extra (c251649)
- docs: Clarify integration status of v3.6.0 features (7cca2e1)
- refactor: Restructure install options for clarity (747761f)
- style: Apply isort and black formatting (8877d21)
- style: Apply black formatting and fix trailing whitespace (04ba86b)
- docs: Improve developer experience messaging in README (c953eb3)
- release: Version 3.6.0 - Security & Compliance Infrastructure (4b20ada)
- feat: Document integration TODOs with implementation references (2e1d636)
- feat: Improve error messages on abstract base classes (15da083)
- feat: Add multi-channel notification system for compliance alerts (d9f15f7)
- feat(compliance): Implement append-only compliance database (Phase 1.3) (fec5c43)
- feat(security): Implement secure backend authentication (Phase 1.1) (9be2db0)
- fix: Major security, quality, and UX improvements for v3.6.0 release (074715e)
- style: Apply black formatting and ruff fixes across codebase (2e148fd)
- security: Update LangChain to 1.x to fix critical vulnerabilities (fffc397)
- chore: Update LLM provider dependency lower bounds (e0d5619)
- feat(vscode): Restore working dashboard with keyboard shortcuts & organized workflows (945f748)
- debug: Add visual debugging markers - discovered script completely blocked (bd51476)
- feat: Remove quick mode from secure-release & reorganize dashboard workflows (5e302d0)
- docs: Add comprehensive manual testing script (d8f75f7)
- refactor: Improve service layer reliability and maintainability (6b711de)
- feat: Add VSCode Socratic Refinement Services & Documentation (9fcdf4b)
- feat: Add LLM finding extraction & VSCode Socratic refinement (3c94da6)
- feat(vscode): Add ship command options and hide beta Memory features (fd379ab)
- fix: Add type annotation to scan_summary in test_gen.py (e53e94a)
- feat(vscode): Add report export and workflow chaining (b2fba79)
- chore: Increase coverage threshold from 40% to 53% (5bbfcf0)
- feat(vscode): Add interactive action buttons to report webviews (fb70626)
- feat(vscode): Update Health tab actions to use webview reports (f4a902a)
- feat(vscode): Enhanced sync-claude webview with rich formatting (bfcc30b)
- feat(vscode): Open sync-claude output in webview report panel (e075f2d)
- fix(vscode): Show notification feedback for sync-claude command (3af62fa)
- style: Auto-fix formatting with ruff/black (19 files) (a5d697e)
- style(vscode): Add subtle (Beta) label to Workflows card in Power tab (3a0026f)
- docs(website): Update version to v3.5.6 and tests to 5,675 (280db7c)
Full Changelog: https://github.com/Smart-AI-Memory/empathy-framework/compare/v3.5.6...v3.6.0
Security Fixes
- Update LangChain to 1.x to fix critical vulnerabilities
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Smart-AI-Memory/empathy-framework
Five-level AI collaboration system with persistent memory and anticipatory capabilities. MCP-native integration for Claude and other LLMs with local-first architecture via MemDocs.
Related context
Beta — feedback welcome: [email protected]