April 2026 (2026-04) security-focused delivery for comet-ml/opik. The primary contribution was a supply-chain security patch to exclude compromised litellm versions from dependencies, preventing malware-infected releases from being pulled into production. This fix spans packaging and SDK configuration updates and aligns with best practices for dependency integrity and risk mitigation.

January 2026: Stability improvement for the rommapp/romm filesystem watcher in non-OpenTelemetry deployments. Delivered a bug fix that skips the opentelemetry-instrument wrapper when OTEL is disabled (OTEL_SDK_DISABLED=true), ensuring WATCHFILES_CHANGES is correctly passed to watcher.py and that rescans continue to be scheduled. This reduces silent watcher failures for users who do not configure OpenTelemetry and improves data freshness on file changes. The change is implemented in commit 91ee163585a3ae10864d9ca5a003033b1c0ae36f. Business impact: higher reliability and lower support effort in self-hosted environments; improved user experience with automatic rescans and up-to-date state without manual intervention. Technical impact: fixes conditional instrumentation logic, proper environment variable propagation, and compatibility with both OTEL-disabled and OTEL-enabled deployments.