This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+8 more
Summary
AI summaryFixed two set -e regressions in install.sh that prevented clean‑environment installs.
Full changelog
Highlights
This release adds a daily compatibility CI that catches upstream-Bun drift before users do, and fixes two set -e regressions in install.sh that the new CI surfaced on its very first clean-environment run.
Daily compatibility CI
.github/workflows/compat-daily.yml runs end-to-end every morning on ubuntu-latest: pulls the latest Anthropic native binary via the npm-registry fallback, runs install.sh, asserts patch.mjs reports 0 failed, and runs claude --version to make sure the launcher → wrapper → cli.original.cjs path boots without the Bun Expected CommonJS module to have a function wrapper panic that showed up when v2.1.121 pulled in a Bun 1.3.14 build.
When the run fails, an issue is auto-opened (or a comment is appended on the existing one) under the compat-broken label so we get a single deduped thread per breakage. A new Compat shields.io badge in all three READMEs links to the workflow.
A Linux failure is the strongest possible proxy for cross-platform breakage upstream, so we deliberately don't burn macOS / Windows runner minutes on the daily scout.
install.sh aborted under set -e when no Claude was preinstalled
Two distinct paths were tripping set -e on a clean machine — both shown only by the daily CI's truly empty runner; on local dev machines a leftover bun-global or ~/.local/share/claude/versions/ install kept them hidden.
scan_node_modules_rootreturns 1 on a clean miss. Both the npm-global call ([ -n "$NPM_GLOBAL" ] && scan_node_modules_root …, last command of a&&list) and the bun-global call (last command of a then-block) sat in positions where bash 5 propagates the trailing exit-1 toerrexit. The script silently bailed before reaching the npm-registry fallback — even though that fallback was the whole point of having a clean-environment install path. Both calls now|| trueand fall through.CLAUDE_BIN=$(which claude 2>/dev/null)had the same shape: under bash 5,X=$(failing-cmd)carries the command's exit code through the assignment and tripserrexit. Compounded by Ubuntu 25.04 minimal images no longer shippingwhichat all. Switched both the install-path and uninstall-path lookups to$(command -v claude 2>/dev/null || true)— POSIX builtin, robust on minimal images, and explicit about the miss being non-fatal.
CI runtime hardening
While wiring up compat-daily, the workflow itself was tightened:
FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=trueplusactions/setup-node@v4 (node-version: 24)pin everything — including JS-based actions likeactions/checkout— to Node 24, ahead of GitHub forcing the switch on 2026-06-02.oven-sh/setup-bun@v2withbun-version: canaryreplaces thecurl install + bun upgrade --canarydance. The action caches the canary binary by commit hash, so the same canary build is restored from cache on subsequent runs and only re-downloaded when oven-sh ships a new commit.actions/cache@v4against~/.npmletsnpm packreuse the ~80 MBclaude-code-<plat>tarball when@latesthasn't bumped, while still re-validating registry metadata on every run so we never serve a stale binary on an actual upgrade day.
Acknowledgements
Huge thanks to @shadow1ng for the suggestion that a daily CI run is the right shape for catching upstream-Bun-version drift before users have to file an issue. This release is the direct outcome of that idea — the daily scout, the two set -e regressions it surfaced on its very first clean-environment run, and the hardening that followed all trace back to it.
Verified
- Daily CI run
25039987442on a freshubuntu-latest:install.shreports 23 patches applied / 0 failed against Anthropic v2.1.121,claude --versionprints2.1.121 (Claude Code)exit 0, total job time 36s. - Local macOS arm64 with existing
~/.local/share/claude/versions/2.1.121:install.shpatches cleanly,claude --versionboots the patched cli.cjs without the CJS-wrapper panic (this exercised the local-Bun-canary upgrade path that motivated the daily CI in the first place).
Install
macOS / Linux:
curl -fsSL https://github.com/0Chencc/clawgod/releases/latest/download/install.sh | bash
Windows (PowerShell):
irm https://github.com/0Chencc/clawgod/releases/latest/download/install.ps1 | iex
Full changelog: https://github.com/0Chencc/clawgod/compare/v1.0.9...v1.1.0
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About clawgod
All releases →Related context
Beta — feedback welcome: [email protected]