From 6a36606bd582e66c49546855d4030dfca7191fb4 Mon Sep 17 00:00:00 2001
From: diegosouzapw <diegosouzapw@users.noreply.github.com>
Date: Thu, 2 Apr 2026 22:25:51 -0300
Subject: [PATCH] =?UTF-8?q?chore(release):=20v3.4.7=20=E2=80=94=20Finalize?=
 =?UTF-8?q?=20bug=20fixes=20and=20cryptography=20check?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 CHANGELOG.md          | 21 +++++++++++++++++++++
 docs/openapi.yaml     |  2 +-
 electron/package.json |  2 +-
 open-sse/package.json |  2 +-
 package-lock.json     |  6 +++---
 package.json          |  2 +-
 6 files changed, 28 insertions(+), 7 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index dbdb434295..acd62261ca 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,27 @@
 
 ---
 
+## [3.4.7] — 2026-04-03
+
+### Features
+
+- Added `Cryptography` node to Monitoring and MCP health checks (#798)
+- Hardened model-catalog route permissions mapping (`/models`) (#781)
+
+### Bug Fixes
+
+- Fixed NPM-installed CLI tools healthcheck failures on Windows (#935)
+- Fixed payload translation dropping valid content due to invalid API fields (#927)
+- Fixed runtime crash in Node 25 regarding API key execution (#867)
+- Fixed MCP standalone module-resolution (`ERR_MODULE_NOT_FOUND`) via `esbuild` (#936)
+- Fixed NVIDIA NIM routing credential resolution alias mismatch (#931)
+
+### Security
+
+- Added safe strict input boundary protection against raw `shell: true` remote-code execution injections.
+
+---
+
 ## [3.4.6] - 2026-04-02
 
 ### ✨ New Features
diff --git a/docs/openapi.yaml b/docs/openapi.yaml
index 045844f897..39fda43097 100644
--- a/docs/openapi.yaml
+++ b/docs/openapi.yaml
@@ -1,7 +1,7 @@
 openapi: 3.1.0
 info:
   title: OmniRoute API
-  version: 3.4.6
+  version: 3.4.7
   description: |
     OmniRoute is a local-first AI API proxy router. It provides an OpenAI-compatible
     endpoint that routes requests to multiple AI providers with load balancing,
diff --git a/electron/package.json b/electron/package.json
index 2a5d3823d8..7c1b2dbe64 100644
--- a/electron/package.json
+++ b/electron/package.json
@@ -1,6 +1,6 @@
 {
   "name": "omniroute-desktop",
-  "version": "3.4.6",
+  "version": "3.4.7",
   "description": "OmniRoute Desktop Application",
   "main": "main.js",
   "author": {
diff --git a/open-sse/package.json b/open-sse/package.json
index 71785da198..d9fb9107e0 100644
--- a/open-sse/package.json
+++ b/open-sse/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@omniroute/open-sse",
-  "version": "3.4.6",
+  "version": "3.4.7",
   "description": "Express SSE sidecar for OmniRoute — handles streaming, protocol translation, and provider orchestration",
   "type": "module",
   "main": "index.js",
diff --git a/package-lock.json b/package-lock.json
index 0d81cbc84c..b83e1a0c48 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "omniroute",
-  "version": "3.4.6",
+  "version": "3.4.7",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "omniroute",
-      "version": "3.4.6",
+      "version": "3.4.7",
       "hasInstallScript": true,
       "license": "MIT",
       "workspaces": [
@@ -21047,7 +21047,7 @@
     },
     "open-sse": {
       "name": "@omniroute/open-sse",
-      "version": "3.4.6"
+      "version": "3.4.7"
     }
   }
 }
diff --git a/package.json b/package.json
index a135cc3f80..ff57a96450 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "omniroute",
-  "version": "3.4.6",
+  "version": "3.4.7",
   "description": "Smart AI Router with auto fallback — route to FREE & cheap models, zero downtime. Works with Cursor, Cline, Claude Desktop, Codex, and any OpenAI-compatible tool.",
   "type": "module",
   "bin": {