Release v3.5.1 into Main

[github-actions]

v5.3.1

Key Features

Session Encryption

LISA now supports optional session encryption. Administrators can activate encryption which applies to all sessions. When activated, chat sessions are encrypted prior to storage in DynamoDB and automatically decrypted when retrieving data, enhancing data security at rest.

Embedding Client Consolidation

• Unified Configuration: Consolidated embedding clients so both embedding and retrieval use the same configuration logic
• LiteLLM Integration: Removed OpenAIEmbedding in favor of LiteLLM provided embedding through RagEmbedding
• Authentication Streamlining: Merged LisaServe Auth to follow same flow for LiteLLM requests and passthrough

Security Improvements and Vulnerability Remediation

This release includes security related updates across the codebase.
Security Enhancements:

• Dependency Security: Updated vulnerable dependencies across Python and Node.js packages with Dependabot configuration for automated security updates
• Container Security: Updated Dockerfiles with security-focused base images and improved container build processes
• Infrastructure Security: Added CodeQL security scanning workflow and enhanced CI/CD pipeline with security checks
• API Security: Improved API key handling and cleanup mechanisms with enhanced LiteLLM integration

Bug Fixes

• Model ID Normalization: Force model-id to use lowercase per OpenSearch requirements
• Text Encoding: Encode text files using UTF-8 to remove special character double encoding
• Documentation Cleanup: Update cleanup docs function to correct signature
• Model Refresh: Fix refresh of models functionality
• UI Optimization: Remove duplicate similar_search queries from UI
• Threading Fix: Fix threading of async auth calls in RestAPI

Additional Features

• Expanded SDK: Enhanced SDK functionality with integration script for setting up models and vector stores
• Request Caching: Cache repeated requests for configs and keys

Acknowledgements

• @bedanley
• @estohlmann
• @jmharold
• @dustins

Full Changelog: v5.3.0...v5.3.1