For the tests-passed branch, but if you’re tracking stable then I think 3.4.6 is right (3.4.6: Security fix release)
There should be a compatibility file that ensures it doesn’t pull in anything from the plugin the main site isn’t ready for, but maybe that’s gone a little awry for this last one. Hopefully someone can identify what the issue is and smooth it out. 