# releases 31 Published articles for releases 31. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Datasette 1.0a39 and 0.65.4 security releases DevFeed: [Datasette 1.0a39 and 0.65.4 security releases]() Original publisher: [Read original article]() Author: Simon Willison Published: 2026-09-11T03:27:16Z Content type: release Language: en Sources: [Simon Willison's Weblog]() Topics: [releases](), [Security](), [audit](), [AI-assisted coding](), [ai security](), [agentic-engineering](), [Generative AI](), [Large Language Model](), [Claude](), [gpt-6-astra]() Tags: [agentic-engineering](), [agentic-engineering-63](), [ai](), [ai-2-236](), [ai-security-research](), [ai-security-research-42](), [coding-agents](), [datasette](), [datasette-1-542](), [generative-ai](), [generative-ai-1-982](), [llms](), [llms-1-948](), [releases](), [releases-31](), [security](), [security-634](), [tests]() ### AI overview Datasette 1.0a39 and 0.65.4 are security patch releases for the alpha and stable series. They address issues found during an extensive audit, including instances that mix public and private tables. The audit used Claude Fable 5.1, GPT-5.6, and GPT-6 Astra alongside human review and automated tests. ### Source excerpt Datasette 1.0a39 and 0.65.4 security releases Today we're releasing two new security patch versions of Datasette: 1.0a39 and 0.65.4 - one for the current alpha series and one for the stable 0.65.x family. These are security fixes which you should apply if you are running a Datasette instance on the public web - in particular if that instance mixes both public and private tables. Following issues reported by Sevban Dönmez, Alex Garcia and I ran an extensive audit of Datasette using Claude Fable 5.1, GPT-5.6, and GPT-6 Astra. We then spent almost a week collaborating on and reviewing the fixes. They helped find some very subtle bugs. We'll be incorporating security audits by frontier models into all of our development work going forward. Alex came up with a way of splitting the work which I found extremely productive: Alex Garcia and I worked together running and then responding to the audit, working in a shared private repository. For most of the issues we split the work: one of us would create the automated tests highlighting the issue, then the other would implement the fix. This ensured that two separate humans had eyes on each of the issues, in addition to our coding agents running different models. Tags: releases, security, ai, datasette, generative-ai, llms, agentic-engineering, ai-security-research ## New release of LLM adds support for reasoning traces, OpenAI Responses, server-side tools, and smarter logging DevFeed: [New release of LLM adds support for reasoning traces, OpenAI Responses, server-side tools, and smarter logging]() Original publisher: [Read original article]() Author: Simon Willison Published: 2026-08-04T23:58:24Z Content type: release Language: en Sources: [Simon Willison]() Topics: [Tool](), [Command-line interface](), [API](), [Large Language Model](), [SQLite](), [Logging](), [OpenAI](), [Claude](), [Model Context Protocol](), [gemma4]() Tags: [ai](), [ai-2-235](), [anthropic](), [anthropic-336](), [cli](), [gemma](), [generative-ai](), [generative-ai-1-981](), [llm](), [llm-631](), [llm-reasoning](), [llm-reasoning-103](), [llm-tool-use](), [llm-tool-use-75](), [llms](), [llms-1-947](), [logging](), [mcp](), [model-context-protocol](), [model-context-protocol-35](), [openai](), [openai-463](), [projects](), [projects-553](), [release](), [releases](), [releases-31](), [responses](), [server](), [sqlite]() ### AI overview LLM 0.32 adds visible reasoning traces, server-side provider tools, redesigned content-addressable SQLite logs, support for the GPT-5.6 model family, and features enabled by the OpenAI Responses API. The release also updates the llm-anthropic plugin and adds Python API changes. ### Source excerpt I released LLM 0.32 this morning, the most significant new version of LLM since the initial launch of the project. The new version includes support for visible reasoning traces, server-side provider tools, redesigned content-addressable SQLite logs, new models, and new features enabled by the OpenAI Responses API. I also released a new version of the llm-anthropic plugin with substantial updates of its own. Headline features for LLM CLI users Running LLM against reasoning models now displays their reasoning traces to standard error, so you can see what they are "thinking" without that information being included in the standard output that you might pipe to another tool. Add -R/--hide-reasoning to turn this off. LLM includes support out-of-the-box for the GPT-5.6 model family, and the new default model used with llm "prompt" is now the inexpensive but capable GPT-5.6 Luna. LLM calls can now use server-side tools from various providers. OpenAI provide a code execution environment as a server-side tool; LLM can now run prompts that benefit from that like so: llm --tool CodeInterpreter 'Show current python and SQLite versions' OpenAI also gets a WebSearch tool. The llm-anthropic plugin adds WebSearch, WebFetch, CodeExecution, and AnthropicMCP, which looks like this: llm -m claude-sonnet-5 -T 'AnthropicMCP("https://datasette.simonwillison.net/-/mcp")' \ 'how many rows in the blog_blogmark table?' That causes Anthropic to execute MCP calls against my new datasette-mcp plugin as part of a single request/response interaction with their API. The new llm openai endpoint command provides a tool for executing prompts against any OpenAI compatible endpoint as a one-liner. These aren't logged, which makes this a handy tool for running one-off prompts against anything that speaks the lingua franca of the LLM API world. Here's how I use that to run prompts against Gemma 4 12B running in my localhost LM Studio API, via uvx (no LLM installation required) and mixing in the llm-tools-q