From 37ad4afafa3d62d5e7903f124859fe4acec1f49e Mon Sep 17 00:00:00 2001 From: ttlequals0 Date: Sun, 24 May 2026 21:39:19 -0400 Subject: [PATCH] release: v2.9.8 - idna 3.15 (CVE-2026-45409) + claude-agent-sdk 0.2.87 - Bump src/__init__.py and pyproject.toml to 2.9.8 - CHANGELOG: idna 3.10->3.15 security bump, SDK 0.2.82->0.2.87 (bundled Claude CLI 2.1.145->2.1.150, no API changes) --- CHANGELOG.md | 18 ++++++++++++++++++ pyproject.toml | 2 +- src/__init__.py | 2 +- 3 files changed, 20 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 0ceedb9..2821506 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -5,6 +5,24 @@ All notable changes to the Claude Code OpenAI Wrapper project will be documented The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). +## [2.9.8] - 2026-05-24 + +### Changed + +- Bumped `claude-agent-sdk` from `0.2.82` to `0.2.87`. All five + releases in this delta are bundled-Claude-CLI-only updates, + advancing the embedded CLI from `2.1.145` to `2.1.150`. No public + SDK API changes; the two breaking changes that shipped in `0.2.82` + (non-blocking MCP server startup, Task tools replacing TodoWrite) + were already absorbed in `v2.9.7`. + +### Security + +- Bumped `idna` from `3.10` to `3.15` to pick up + **CVE-2026-45409** (oversize-input quadratic-time bypass of the + prior CVE-2024-3651 mitigation, fixed in 3.14) plus the + `check_label` DNS-length cap added in 3.15. + ## [2.9.7] - 2026-05-12 ### Added diff --git a/pyproject.toml b/pyproject.toml index 5e3189b..d0affb0 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -1,6 +1,6 @@ [tool.poetry] name = "claude-code-openai-wrapper" -version = "2.9.7" +version = "2.9.8" description = "OpenAI API-compatible wrapper for Claude Code" authors = ["Richard Atkinson "] readme = "README.md" diff --git a/src/__init__.py b/src/__init__.py index 32465bc..1ff79e0 100644 --- a/src/__init__.py +++ b/src/__init__.py @@ -1,3 +1,3 @@ """Claude Code OpenAI Wrapper - A FastAPI-based OpenAI-compatible API for Claude Code.""" -__version__ = "2.9.7" +__version__ = "2.9.8"