From fbda00608e52eef6a0e7b01ce831b1e6c3666909 Mon Sep 17 00:00:00 2001
From: tanaka takashi <isazaka@gmail.com>
Date: Mon, 14 Sep 2026 18:59:19 +0900
Subject: release: prepare version 0.5.4
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Dependabotで報告された21件の脆弱性を解消した依存更新を、0.5.4のセキュリティパッチリリースとして確定する。

- pyproject.tomlとollama_web.__version__を0.5.4へ更新
- uv.lockのルートパッケージversionを正規のuvコマンドで同期
- CHANGELOGへ2026-09-14付けの0.5.4 Securityセクションを追加
- Pillow、pypdf、h2、hpack、cryptographyの更新内容を記録
- Unreleasedおよび0.5.4のGitHub比較リンクを更新

検証:
- GitHub Dependabot: open 0件、fixed 21件
- pytest: 150 passed
- Ruff: passed
- mypy: 30 source files passed
- JavaScript syntax check: passed
- uv lock --check --offline: passed
- source distribution and wheel build: passed
- installed wheel assets, application initialization, and /login endpoint verified
---
 CHANGELOG.md               | 9 ++++++++-
 pyproject.toml             | 2 +-
 src/ollama_web/__init__.py | 2 +-
 uv.lock                    | 2 +-
 4 files changed, 11 insertions(+), 4 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index a6a7118..a493ee4 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,12 @@
 
 ## [Unreleased]
 
+## [0.5.4] - 2026-09-14
+
+### Security
+
+- Pillow を 12.3.0、pypdf を 6.16.1、h2 を 4.4.1、cryptography を 50.0.0 へ更新し、Dependabot で報告された画像・PDF・HTTP/2・暗号処理に関する脆弱性 21 件を解消しました。h2 の依存条件に合わせて hpack も 4.2.0 へ更新しました。
+
 ## [0.5.3] - 2026-09-13
 
 ### Added
@@ -191,7 +197,8 @@
 
 - Web UIのセキュリティヘッダーと表示処理を強化しました。
 
-[Unreleased]: https://github.com/takashi000/ollama-web/compare/v0.5.3...HEAD
+[Unreleased]: https://github.com/takashi000/ollama-web/compare/v0.5.4...HEAD
+[0.5.4]: https://github.com/takashi000/ollama-web/compare/v0.5.3...v0.5.4
 [0.5.3]: https://github.com/takashi000/ollama-web/compare/v0.5.2...v0.5.3
 [0.5.2]: https://github.com/takashi000/ollama-web/compare/v0.5.1...v0.5.2
 [0.5.1]: https://github.com/takashi000/ollama-web/compare/v0.5.0...v0.5.1
diff --git a/pyproject.toml b/pyproject.toml
index d073bb2..e6fd0a6 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "ollama-web"
-version = "0.5.3"
+version = "0.5.4"
 description = "Ollama web project"
 readme = "README.md"
 license = "MIT"
diff --git a/src/ollama_web/__init__.py b/src/ollama_web/__init__.py
index 87fd662..e8504ee 100644
--- a/src/ollama_web/__init__.py
+++ b/src/ollama_web/__init__.py
@@ -1,3 +1,3 @@
 """Ollama web project."""
 
-__version__ = "0.5.3"
+__version__ = "0.5.4"
diff --git a/uv.lock b/uv.lock
index 4636bd2..7315a40 100644
--- a/uv.lock
+++ b/uv.lock
@@ -1031,7 +1031,7 @@ wheels = [
 
 [[package]]
 name = "ollama-web"
-version = "0.5.3"
+version = "0.5.4"
 source = { editable = "." }
 dependencies = [
     { name = "beautifulsoup4" },
-- 
cgit v1.2.3