chore(release): Update version to v1.4.358

Merge pull request #1901 from orbisai0security/fix-CVE-2025-63389-github.com-ollama-ollama
sexurity fix: Ollama update: CVE-2025-63389
2026-01-10 14:58:02 -05:00 · 2025-12-23 15:03:23 +00:00 · 2025-12-23 07:00:24 -08:00 · 2025-12-23 06:57:45 -08:00 · 2025-12-23 06:55:46 -08:00
7 changed files with 13 additions and 7 deletions
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,11 @@
 # Changelog

+## v1.4.358 (2025-12-23)
+
+### PR [#1901](https://github.com/danielmiessler/Fabric/pull/1901) by [orbisai0security](https://github.com/orbisai0security): sexurity fix: Ollama update: CVE-2025-63389
+
+- Fix: resolve critical vulnerability CVE-2025-63389 (update Ollama Go library)
+
 ## v1.4.357 (2025-12-22)

 ### PR [#1897](https://github.com/danielmiessler/Fabric/pull/1897) by [ksylvan](https://github.com/ksylvan): feat: add MiniMax provider support to OpenAI compatible plugin
--- a/cmd/fabric/version.go
+++ b/cmd/fabric/version.go
@@ -1,3 +1,3 @@
 package main

-var version = "v1.4.357"
+var version = "v1.4.358"
--- a/cmd/generate_changelog/changelog.db
+++ b/cmd/generate_changelog/changelog.db
--- a/go.mod
+++ b/go.mod
@@ -20,7 +20,7 @@ require (
 	github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51
 	github.com/mattn/go-sqlite3 v1.14.28
 	github.com/nicksnyder/go-i18n/v2 v2.6.0
-	github.com/ollama/ollama v0.11.7
+	github.com/ollama/ollama v0.12.4
 	github.com/openai/openai-go v1.12.0
 	github.com/otiai10/copy v1.14.1
 	github.com/pkg/errors v0.9.1
--- a/go.sum
+++ b/go.sum
@@ -228,8 +228,8 @@ github.com/modern-go/reflect2 v1.0.2 h1:xBagoLtFs94CBntxluKeaWgTMpvLxC4ur3nMaC9G
 github.com/modern-go/reflect2 v1.0.2/go.mod h1:yWuevngMOJpCy52FWWMvUC8ws7m/LJsjYzDa0/r8luk=
 github.com/nicksnyder/go-i18n/v2 v2.6.0 h1:C/m2NNWNiTB6SK4Ao8df5EWm3JETSTIGNXBpMJTxzxQ=
 github.com/nicksnyder/go-i18n/v2 v2.6.0/go.mod h1:88sRqr0C6OPyJn0/KRNaEz1uWorjxIKP7rUUcvycecE=
-github.com/ollama/ollama v0.11.7 h1:CuYjaJ/YEnvLDpJocJbbVdpdVFyGA/OP6lKFyzZD4dI=
-github.com/ollama/ollama v0.11.7/go.mod h1:9+1//yWPsDE2u+l1a5mpaKrYw4VdnSsRU3ioq5BvMms=
+github.com/ollama/ollama v0.12.4 h1:VfqVk8qSxREJar0z0EQAU2/h9qi/cqAMIKzo+nT+faI=
+github.com/ollama/ollama v0.12.4/go.mod h1:9+1//yWPsDE2u+l1a5mpaKrYw4VdnSsRU3ioq5BvMms=
 github.com/onsi/gomega v1.34.1 h1:EUMJIKUjM8sKjYbtxQI9A4z2o+rruxnzNvpknOXie6k=
 github.com/onsi/gomega v1.34.1/go.mod h1:kU1QgUvBDLXBJq618Xvm2LUX6rSAfRaFRTcdOeDLwwY=
 github.com/openai/openai-go v1.12.0 h1:NBQCnXzqOTv5wsgNC36PrFEiskGfO5wccfCWDo9S1U0=
--- a/nix/pkgs/fabric/gomod2nix.toml
+++ b/nix/pkgs/fabric/gomod2nix.toml
@@ -272,8 +272,8 @@ schema = 3
    version = "v2.6.0"
    hash = "sha256-UrSECFbpCIg5avJ+f3LkJy/ncZFHa4q8sDqDIQ3YZJM="
  [mod."github.com/ollama/ollama"]
-    version = "v0.11.7"
-    hash = "sha256-3Wn1JWmil0aQQ2I/r398HbnUsi8ADoroqNyPziuxn/c="
+    version = "v0.12.4"
+    hash = "sha256-5Ubp36Ywbt3TtIhqhHkrm+xo1/RT1EePexQzF84jeVo="
  [mod."github.com/openai/openai-go"]
    version = "v1.12.0"
    hash = "sha256-JHLlKvDwERPf728GUXBsKU58ODgCxcxEe9TKJTGAG1w="
--- a/nix/pkgs/fabric/version.nix
+++ b/nix/pkgs/fabric/version.nix
@@ -1 +1 @@
-"1.4.357"
+"1.4.358"
Author	SHA1	Message	Date
github-actions[bot]	a56b7f2edc	chore(release): Update version to v1.4.358	2025-12-23 15:03:23 +00:00
Kayvan Sylvan	16355210e4	Merge pull request #1901 from orbisai0security/fix-CVE-2025-63389-github.com-ollama-ollama sexurity fix: Ollama update: CVE-2025-63389	2025-12-23 07:00:24 -08:00
orbisai0security	c8da276926	fix: resolve critical vulnerability CVE-2025-63389 Automatically generated security fix	2025-12-23 06:57:45 -08:00
Changelog Bot	f966c0a516	chore: incoming 1901 changelog entry	2025-12-23 06:55:46 -08:00