Skip to content

Update llama-stack to v0.4.4 [SECURITY] - #10

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/pypi-llama-stack-vulnerability
Open

Update llama-stack to v0.4.4 [SECURITY]#10
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/pypi-llama-stack-vulnerability

Conversation

@renovate

@renovate renovate Bot commented Sep 8, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
llama-stack ==0.3.5 → ==0.4.4 age confidence
llama-stack 0.3.5 → 0.4.4 age confidence

Llama Stack exposes secret in initialization log

CVE-2026-25211 / GHSA-xmfj-7pp5-fxr6

More information

Details

Llama Stack (aka llama-stack) before 0.4.0rc3 does not censor the pgvector password in the initialization log.

Severity

  • CVSS Score: 3.2 / 10 (Low)
  • Vector String: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N

References

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

Release Notes

llamastack/llama-stack (llama-stack)

v0.4.4

Compare Source

What's Changed

Full Changelog: ogx-ai/ogx@v0.4.3...v0.4.4

v0.4.3

Compare Source

What's Changed

  • fix: enable vector store registration from config with OpenAI metadata (backport #​4616) by @​mergify[bot] in #​4631
  • fix: Fix redundant MCP tools/list calls (backport #​4634) by @​mergify[bot] in #​4663
  • fix: file_search_call results missing document attributes/metadata (backport #​4680) by @​mergify[bot] in #​4686
  • fix: Concurrent calls into SentenceTransformer() cause failures of client.vector_stores.file_batches.create() (backport #​4636) by @​mergify[bot] in #​4698
  • feat: Add shutdown functionality to LlamaStackAsLibraryClient and AsyncLlamaStackAsLibraryClient (backport #​4642) by @​mergify[bot] in #​4733
  • feat(PGVector): implement automatic creation of vector extension during initialization of PGVectorVectorIOAdapter (backport #​4660) by @​mergify[bot] in #​4740

Full Changelog: ogx-ai/ogx@v0.4.2...v0.4.3

v0.4.2

Compare Source

What's Changed

Full Changelog: ogx-ai/ogx@v0.4.1...v0.4.2

v0.4.1

Compare Source

What's Changed

Full Changelog: ogx-ai/ogx@v0.4.0...v0.4.1

v0.4.0

Compare Source

llama-stack v0.4.0

🎯 Notable Features in llama-stack v0.4.0

⚠️ Breaking Changes + Noteworthy Functional Changes to be Aware of
Configuration Files
  • StackRunConfig → StackConfig: Configuration class renamed
  • run.yaml → config.yaml: Runtime configuration file renamed
  • build.yaml removed: Build configuration consolidated into config.yaml
  • New required config sections: vector_stores, safety, and structured storage.stores configuration
Vector Store API
  • vector_db_id → vector_store_id: Renamed across all endpoints and data structures (#​3923)
  • ChunkMetadata now required: No longer optional in Chunk class (#​4413)
  • Embeddings refactored: Removed from base Chunk class, added new EmbeddedChunk class (#​4413)
  • Removed chunk_id property: Dropped from Chunk class (#​3954)
  • Search response structure changed: Updated return format (#​4080)
API Removals
  • Agents API removed: Sessions and turns endpoints deleted—use Responses + Conversations instead (#​4055)
  • SDG API Stubs removed: Synthetic data generation endpoints deleted (#​4035)
  • /v1/openai/v1/* routes removed: Use /v1/* routes instead (#​4054)
  • Deprecated v1 routes with v1alpha equivalents were removed (#​4054)
  • Register/unregister resources deprecated: Resource registration APIs deprecated (#​4099)
Provider Configuration
  • Bedrock env variable: Token variable renamed to match AWS/boto3 conventions—update your environment (#​4152)
  • Inference base_url standardized: Unified configuration format across providers (#​4177)
API Behavior Changes
  • Parallel tool calls: New parallel_tool_calls parameter affects execution flow (#​4124)
  • Logprobs parameter: Use include parameter instead of direct field (#​4261)
  • Telemetry architecture: Complete redesign around OpenTelemetry auto-instrumentation (#​4127)
🏗️ Architecture Improvements
  • API/Provider Separation: Split API and provider specs into separate llama-stack-api package for better modularity (#​3895)
  • FastAPI Migration: Converted multiple APIs to FastAPI router system (Files, Providers, Inspect, Datasets, Benchmarks) for improved performance and maintainability
  • Inspect API Update: /v1/inspect now only lists v1 APIs by default (#​3948)
🔍 Vector Store Enhancements
  • Query Rewrite Support: Added query rewrite capabilities in vector_store.search (#​4171)
  • Qdrant Improvements: Hybrid and keyword search support (#​4006)
  • ChromaDB Enhancements: Keyword search and delete_chunk implementation (#​3057)
  • Persistence: Vector stores now persist across server restarts (#​3977)
  • Metadata & Embeddings: Return embeddings and metadata from vector store methods (#​4046)
🤖 Model & Inference
  • Model Discovery: List available models via provider_data header (#​3968, #​3928)
  • New Providers:
    • OpenAI-compatible Bedrock provider (#​3748)
    • OCI GenAI service integration (#​3876)
    • OCI embeddings support (#​4300)
  • Standardized Configuration: Unified base_url for inference providers (#​4177)
📋 Responses API Improvements
🆕 New APIs
  • Read-only Connectors API (#​4258)
  • File Processor API skeleton (#​4113)
  • Admin API
    • Stack Administration: New /admin API (v1alpha) for administrative operations (#​4401)
    • Endpoints: Provider management, health checks, version info, and route listing
    • Deprecates: Standalone /providers and /inspect APIs (still functional for backward compatibility)
🗑️ Deprecations & Removals
  • Deprecated register/unregister resource APIs (#​4099)
  • Removed Agents (sessions/turns) API (#​4055)
  • Removed SDG Stub API (#​4035)
🔒 Security Fixes
  • Fixed RBAC bypass vulnerabilities in model access (#​4270)
  • Prevented ABAC bypass in vector store operations (#​4394)
  • JWT token redaction in logs (#​4325)
🛠️ Infrastructure & DX
  • Multi-architecture builds with ARM compatibility (#​4290)
  • OpenTelemetry auto-instrumentation support (#​4281)
  • SQLite WAL mode to prevent database locking (#​4048)
  • File deletion permission enforcement (#​4275)

What's Changed

❗ Important

✂ PR body was truncated to here.

Configuration

📅 Schedule: (in timezone America/Toronto)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the renovatebot label Sep 8, 2026
@renovate
renovate Bot requested review from a team, gabemontero, maysunfaisal and thepetk as code owners September 8, 2026 14:52
@renovate renovate Bot added the renovatebot label Sep 8, 2026
@renovate
Update llama-stack to v0.4.4 [SECURITY]
5c6c3a6 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
renovate Bot force-pushed the renovate/pypi-llama-stack-vulnerability branch from 57e5d2c to 5c6c3a6 Compare September 19, 2026 15:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@thepetk thepetk Awaiting requested review from thepetk
@gabemontero gabemontero Awaiting requested review from gabemontero gabemontero is a code owner
@maysunfaisal maysunfaisal Awaiting requested review from maysunfaisal maysunfaisal is a code owner

At least 0 approving reviews are required to merge this pull request.

Assignees

No one assigned

Labels

renovatebot

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants