Llama Stack Files

What's Changed

• fix(vertexai): use structured logging key-value style by @major in https://github.com/ogx-ai/ogx/pull/6081
• chore: bump fallback_version to 1.1.1.dev0 by @cdoern in https://github.com/ogx-ai/ogx/pull/6084
• chore: Limit payload-bearing logs to debug (vector search, rerank, guardrails) by @franciscojavierarceo in https://github.com/ogx-ai/ogx/pull/6086
• docs: add Skills API to README, ARCHITECTURE, and provider docs by @varshaprasad96 in https://github.com/ogx-ai/ogx/pull/6087
• fix(milvus): use explicit output_fields in query_vector for milvus-lite 3.0 compatibility by @derekhiggins in https://github.com/ogx-ai/ogx/pull/6091
• fix(file_processor): offload sync parsing to thread pool by @derekhiggins in https://github.com/ogx-ai/ogx/pull/6095
• chore: dummy gpu ec2 runner workflow by @skamenan7 in https://github.com/ogx-ai/ogx/pull/6102
• fix(vertexai): prevent RuntimeError from stale client after startup event loop by @goingforstudying-ctrl in https://github.com/ogx-ai/ogx/pull/6072
• docs: Adding OGX Paper by @franciscojavierarceo in https://github.com/ogx-ai/ogx/pull/6042
• fix(ci): make ci-status wait for flaky test re-runs by @leseb in https://github.com/ogx-ai/ogx/pull/6079
• fix(vector_io): propagate search errors instead of returning empty results by @derekhiggins in https://github.com/ogx-ai/ogx/pull/6093
• fix(containers): embed distribution configs as OCI labels on published images by @cdoern in https://github.com/ogx-ai/ogx/pull/6121
• chore(python-deps): bump pyjwt from 2.12.1 to 2.13.0 by @dependabot[bot] in https://github.com/ogx-ai/ogx/pull/6122
• chore: bump fallback_version to 1.1.2.dev0 by @cdoern in https://github.com/ogx-ai/ogx/pull/6119
• chore(python-deps): bump pytest-socket from 0.7.0 to 0.8.0 by @dependabot[bot] in https://github.com/ogx-ai/ogx/pull/6112
• chore(api-deps): bump openai from 2.41.0 to 2.41.1 in /src/ogx_api by @dependabot[bot] in https://github.com/ogx-ai/ogx/pull/6110
• feat(ci): add Trivy security scanning by @nathan-weinberg in https://github.com/ogx-ai/ogx/pull/6074
• chore(python-deps): bump pypdf from 6.11.0 to 6.12.0 by @dependabot[bot] in https://github.com/ogx-ai/ogx/pull/6106
• fix(conversations): cascade delete orphaned conversation items by @skamenan7 in https://github.com/ogx-ai/ogx/pull/6059
• feat(files): fix Files API gaps for OpenAI spec parity by @leseb in https://github.com/ogx-ai/ogx/pull/6127
• feat(multi-tenancy): add tenant isolation as a hard partition key independent of ABAC by @leseb in https://github.com/ogx-ai/ogx/pull/6126
• chore(python-deps): bump starlette from 1.1.0 to 1.3.1 by @dependabot[bot] in https://github.com/ogx-ai/ogx/pull/6125
• chore(github-deps): bump actions/cache from 4.2.3 to 5.0.5 by @dependabot[bot] in https://github.com/ogx-ai/ogx/pull/6108
• fix(file_processor): add ZIP decompression limits to MarkItDown processor by @derekhiggins in https://github.com/ogx-ai/ogx/pull/6100
• chore(github-deps): bump sigstore/gh-action-sigstore-python from 3.3.0 to 3.4.0 by @dependabot[bot] in https://github.com/ogx-ai/ogx/pull/6109
• chore(python-deps): bump cryptography from 48.0.0 to 48.0.1 by @dependabot[bot] in https://github.com/ogx-ai/ogx/pull/6124
• chore(deps): remove upper bound constraint on pydantic by @mattf in https://github.com/ogx-ai/ogx/pull/6131
• chore(python-deps): bump pypdf from 6.12.0 to 6.13.0 by @dependabot[bot] in https://github.com/ogx-ai/ogx/pull/6132
• fix(api-docs): Move vector stores docs to top-level tag by @franciscojavierarceo in https://github.com/ogx-ai/ogx/pull/6137
• chore(python-deps): bump python-multipart from 0.0.28 to 0.0.31 by @dependabot[bot] in https://github.com/ogx-ai/ogx/pull/6123
• chore: bump fallback_version to 1.1.3.dev0 by @cdoern in https://github.com/ogx-ai/ogx/pull/6138
• refactor(vector-io): Convert Qdrant, Milvus, Elasticsearch to eager collection initialization by @mattf in https://github.com/ogx-ai/ogx/pull/6144
• docs: document nimble web search provider in guides and starter distro by @wildcard in https://github.com/ogx-ai/ogx/pull/6082
• chore(ci): change CI to use ogx_open_client by @aegeiger in https://github.com/ogx-ai/ogx/pull/6016
• docs(blog): add guardrails Responses API post by @leseb in https://github.com/ogx-ai/ogx/pull/6029
• ci: record the bedrock inference suite in record workflow by @cdoern in https://github.com/ogx-ai/ogx/pull/6165
• fix(tests): add Bedrock replay recordings by @skamenan7 in https://github.com/ogx-ai/ogx/pull/6166
• fix(bedrock): preserve bearer token env compatibility by @skamenan7 in https://github.com/ogx-ai/ogx/pull/6167
• feat(ci): update pip_packages in registry specs during Dependabot PRs by @leseb in https://github.com/ogx-ai/ogx/pull/6156
• fix(vertexai): walk into routing tables to reset provider clients by @Artemon-line in https://github.com/ogx-ai/ogx/pull/6148
• refactor(core): replace bespoke DFS topological sort with graphlib.TopologicalSorter by @mattf in https://github.com/ogx-ai/ogx/pull/6157
• feat(containers): add Containers API surface under /v1alpha by @cdoern in https://github.com/ogx-ai/ogx/pull/5913
• refactor(server): decouple stack.initialize from authn and tenancy middleware by @mattf in https://github.com/ogx-ai/ogx/pull/6171
• fix(pgvector): ensure vector extension exists before creating connection pool by @Artemon-line in https://github.com/ogx-ai/ogx/pull/6168
• chore: bump fallback_version to 1.1.4.dev0 by @cdoern in https://github.com/ogx-ai/ogx/pull/6179
• fix(core)!: move rerank code to sentence_transformers by @zy1o in https://github.com/ogx-ai/ogx/pull/5882
• fix(tests): allow slower Bedrock chat completion recordings by @skamenan7 in https://github.com/ogx-ai/ogx/pull/6175
• ci: support refreshing integration recordings via dispatch on main by @cdoern in https://github.com/ogx-ai/ogx/pull/6185
• fix(vertexai): pin google-genai below 2 by @skamenan7 in https://github.com/ogx-ai/ogx/pull/6186
• fix(tests): re-key responses recordings broken by reranker provider rename (#5882) by @cdoern in https://github.com/ogx-ai/ogx/pull/6187
• feat: add GPU-enabled self-hosted runners for vLLM recording (#5793) by @skamenan7 in https://github.com/ogx-ai/ogx/pull/6101
• refactor(server): move route-to-API map construction to lazy first-request build by @mattf in https://github.com/ogx-ai/ogx/pull/6173
• refactor: extract ZstdDecompressionMiddleware out of create_app() by @mattf in https://github.com/ogx-ai/ogx/pull/6174
• feat: add inline::unstructured file processor by @sahana-sreeram in https://github.com/ogx-ai/ogx/pull/6159
• fix: temporarily pin nodejs image version to avoid Premature Close errors by @rhdedgar in https://github.com/ogx-ai/ogx/pull/6213
• fix(responses): normalize empty function tool parameters to valid JSON Schema by @derekhiggins in https://github.com/ogx-ai/ogx/pull/6021
• fix: support developer chat messages by @skamenan7 in https://github.com/ogx-ai/ogx/pull/6077
• feat(file_processors): add remote::unstructured-api provider by @sahana-sreeram in https://github.com/ogx-ai/ogx/pull/6076
• feat(file-processors): add async/fallback support to docling-serve by @sahana-sreeram in https://github.com/ogx-ai/ogx/pull/6014
• chore(github-deps): bump actions/cache from 5.0.5 to 6.1.0 by @dependabot[bot] in https://github.com/ogx-ai/ogx/pull/6201
• chore(python-deps): bump joserfc from 1.6.5 to 1.6.7 by @dependabot[bot] in https://github.com/ogx-ai/ogx/pull/6216
• fix(deps): bump urllib3 and python-dotenv constraints for multiple CVEs by @EleanorWho in https://github.com/ogx-ai/ogx/pull/6184
• chore(github-deps): bump actions/setup-python from 6.2.0 to 6.3.0 by @dependabot[bot] in https://github.com/ogx-ai/ogx/pull/6200
• chore(github-deps): bump actions/setup-java from 5.2.0 to 5.4.0 by @dependabot[bot] in https://github.com/ogx-ai/ogx/pull/6202
• fix: require replay checks in ci status gate by @skamenan7 in https://github.com/ogx-ai/ogx/pull/6188
• chore(api-deps): bump opentelemetry-exporter-otlp-proto-http from 1.42.1 to 1.43.0 in /src/ogx_api by @dependabot[bot] in https://github.com/ogx-ai/ogx/pull/6204
• chore(python-deps): bump python-socketio from 5.16.1 to 5.16.2 by @dependabot[bot] in https://github.com/ogx-ai/ogx/pull/6217
• fix(letsgo): use single asyncio.run() in run_letsgo_cmd for clean event loop lifecycle by @mattf in https://github.com/ogx-ai/ogx/pull/6206
• fix(file_processors): allow owner-encrypted PDFs in pypdf processor by @Artemon-line in https://github.com/ogx-ai/ogx/pull/6182
• fix: honor file_search ranking_options.weights by @Mykelxu in https://github.com/ogx-ai/ogx/pull/6198
• chore(api-deps): bump opentelemetry-sdk from 1.42.1 to 1.43.0 in /src/ogx_api by @dependabot[bot] in https://github.com/ogx-ai/ogx/pull/6203
• docs: add June 30 blog for ogx connect codex by @skamenan7 in https://github.com/ogx-ai/ogx/pull/6118
• chore(api-deps): bump openai from 2.41.1 to 2.43.0 in /src/ogx_api by @dependabot[bot] in https://github.com/ogx-ai/ogx/pull/6153
• chore(github-deps): bump github/codeql-action from 4.36.0 to 4.36.2 by @dependabot[bot] in https://github.com/ogx-ai/ogx/pull/6154
• chore(python-deps): bump pydantic-settings from 2.14.1 to 2.14.2 by @dependabot[bot] in https://github.com/ogx-ai/ogx/pull/6150
• chore(python-deps): bump msgpack from 1.1.2 to 1.2.1 by @dependabot[bot] in https://github.com/ogx-ai/ogx/pull/6151
• chore(python-deps): bump pypdf from 6.13.0 to 6.13.3 by @dependabot[bot] in https://github.com/ogx-ai/ogx/pull/6142
• chore: update ogx stack run references to ogx run by @nathan-weinberg in https://github.com/ogx-ai/ogx/pull/6115
• fix(deps): bump aiohttp and pyjwt constraints for CVE-2026-34993 and CVE-2026-48526 by @EleanorWho in https://github.com/ogx-ai/ogx/pull/6183
• chore(python-deps): bump langgraph-sdk from 0.3.14 to 0.3.15 by @dependabot[bot] in https://github.com/ogx-ai/ogx/pull/6190
• fix(cli): resolve env var templates before validation in list-deps by @nathan-weinberg in https://github.com/ogx-ai/ogx/pull/5914
• feat(cli): support OGX_WORKERS env var to override worker count by @derekhiggins in https://github.com/ogx-ai/ogx/pull/6221
• fix(ci): include ogx-open-client in unified release pipeline by @aegeiger in https://github.com/ogx-ai/ogx/pull/6205
• ci(bedrock): enable OIDC web identity recording by @skamenan7 in https://github.com/ogx-ai/ogx/pull/6169
• fix: pin vLLM metrics routing dependency by @skamenan7 in https://github.com/ogx-ai/ogx/pull/6220
• feat(security)!: strict TLS mode by @rhdedgar in https://github.com/ogx-ai/ogx/pull/5603
• feat(telemetry): expose OTel metrics via a Prometheus scrape endpoint by @cdoern in https://github.com/ogx-ai/ogx/pull/6034
• fix(docs): remove stale inline_transformers sidebar reference by @leseb in https://github.com/ogx-ai/ogx/pull/6229
• fix(docs): escape angle bracket in unstructured-api provider doc by @leseb in https://github.com/ogx-ai/ogx/pull/6230
• refactor(core): move async startup to lifespan and remove temp-loop workaround code by @mattf in https://github.com/ogx-ai/ogx/pull/6161
• feat: Add Responses memory read path by @franciscojavierarceo in https://github.com/ogx-ai/ogx/pull/6162
• fix(letsgo): add insecure to stack_args to avoid AttributeError by @mattf in https://github.com/ogx-ai/ogx/pull/6232
• feat: Add Responses memory write path by @franciscojavierarceo in https://github.com/ogx-ai/ogx/pull/6163
• fix(inference): lazily initialize asyncio locks in embedding mixin by @franciscojavierarceo in https://github.com/ogx-ai/ogx/pull/6244
• feat(skills): inject skill instructions into Responses API system prompt by @varshaprasad96 in https://github.com/ogx-ai/ogx/pull/6146
• chore(refactor, responses): pass CreateResponseRequest object directly through the call chain instead of unpacking individual fields by @mattf in https://github.com/ogx-ai/ogx/pull/6227
• feat(client-sdks): add env variable support and api_key to client SDK by @aegeiger in https://github.com/ogx-ai/ogx/pull/6228
• chore(github-deps): bump docker/login-action from 4.2.0 to 4.4.0 by @dependabot[bot] in https://github.com/ogx-ai/ogx/pull/6238
• chore(python-deps): bump joserfc from 1.6.7 to 1.6.8 by @dependabot[bot] in https://github.com/ogx-ai/ogx/pull/6250
• chore(github-deps): bump dorny/paths-filter from 4.0.1 to 4.0.2 by @dependabot[bot] in https://github.com/ogx-ai/ogx/pull/6234
• chore(github-deps): bump docker/build-push-action from 7.2.0 to 7.3.0 by @dependabot[bot] in https://github.com/ogx-ai/ogx/pull/6235
• chore(python-deps): bump aiohttp from 3.13.5 to 3.14.0 by @dependabot[bot] in https://github.com/ogx-ai/ogx/pull/6015
• fix(nvidia): log when dynamic model listing fails instead of silently returning empty by @yashanil98 in https://github.com/ogx-ai/ogx/pull/6249
• docs(client-sdks): add migration guide for ogx_client by @aegeiger in https://github.com/ogx-ai/ogx/pull/6207
• feat(file_processors): wire all providers into inline::auto dispatcher by @alinaryan in https://github.com/ogx-ai/ogx/pull/6218
• feat: Add --insecure flag to letsgo and auto-generate self-signed TLS certificate by @mattf in https://github.com/ogx-ai/ogx/pull/6243
• fix(watsonx): apply network config to IAM token and model spec requests by @yashanil98 in https://github.com/ogx-ai/ogx/pull/6254
• feat(benchmarks): add contextual chunking support to RAG benchmarks by @franciscojavierarceo in https://github.com/ogx-ai/ogx/pull/6253
• feat: add resource attributes to distinguish by namespace and cluster by @rhdedgar in https://github.com/ogx-ai/ogx/pull/6255
• chore(python-deps): bump tornado from 6.5.5 to 6.5.6 by @dependabot[bot] in https://github.com/ogx-ai/ogx/pull/6107
• chore(python-deps): bump langsmith from 0.8.3 to 0.8.18 by @dependabot[bot] in https://github.com/ogx-ai/ogx/pull/6149
• chore(python-deps): bump python-engineio from 4.13.1 to 4.13.2 by @dependabot[bot] in https://github.com/ogx-ai/ogx/pull/6215
• fix(responses): return error to model on hallucinated tool calls instead of silently exiting by @matteo-grimaldi in https://github.com/ogx-ai/ogx/pull/6231
• feat(telemetry): add agentic depth and RAG depth metrics by @EleanorWho in https://github.com/ogx-ai/ogx/pull/6252
• fix(vector_io): align Milvus, ChromaDB, and SQLite-vec to upsert semantics by @jakub-walaszczyk in https://github.com/ogx-ai/ogx/pull/6260
• fix(auth): recurse into sub-routers when building route auth table by @derekhiggins in https://github.com/ogx-ai/ogx/pull/6266
• refactor: route Anthropic messages through InferenceProvider instead of hardcoded provider paths by @mattf in https://github.com/ogx-ai/ogx/pull/6264
• docs: fix remote-hosted endpoint URLs broken by the rename by @yashanil98 in https://github.com/ogx-ai/ogx/pull/6248
• feat: Add default memory vector store by @franciscojavierarceo in https://github.com/ogx-ai/ogx/pull/6267
• feat(file_processors): route docling VLM processing through stack inference API by @alinaryan in https://github.com/ogx-ai/ogx/pull/6225
• chore(github-deps): bump github/codeql-action/init from 4.36.2 to 4.36.3 by @dependabot[bot] in https://github.com/ogx-ai/ogx/pull/6236
• chore(python-deps): bump langgraph-checkpoint from 4.1.0 to 4.1.1 by @dependabot[bot] in https://github.com/ogx-ai/ogx/pull/6191
• fix(vector_io): use pool factory in PGVectorIndex to survive server restarts by @r3v5 in https://github.com/ogx-ai/ogx/pull/6261
• fix(deps): bump pillow, nltk, and langchain-core for multiple CVEs by @EleanorWho in https://github.com/ogx-ai/ogx/pull/6272

New Contributors

• @goingforstudying-ctrl made their first contribution in https://github.com/ogx-ai/ogx/pull/6072
• @Mykelxu made their first contribution in https://github.com/ogx-ai/ogx/pull/6198
• @yashanil98 made their first contribution in https://github.com/ogx-ai/ogx/pull/6249
• @matteo-grimaldi made their first contribution in https://github.com/ogx-ai/ogx/pull/6231

Full Changelog: https://github.com/ogx-ai/ogx/compare/v1.1.3...v1.2.0