This release includes 1 breaking change for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
ReleasePort's take
Light signalThe `--debug` flag has been removed from the `code` CLI command in version v3.7.1.
Why it matters: If you rely on the --debug flag, update your scripts before upgrading to v3.7.1; no alternative trigger is provided.
Summary
AI summaryRemoved the unused --debug flag from the code CLI command.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Performance | Medium |
Batched record_finding_injections to eliminate N+1 query pattern. Batched record_finding_injections to eliminate N+1 query pattern. Source: granite4.1:30b@2026-06-03-audit Confidence: low |
— |
| Refactor | Low |
Removed dead `--debug` flag from the `code` CLI command. Removed dead `--debug` flag from the `code` CLI command. Source: llm_adapter@2026-06-03 Confidence: high |
— |
| Refactor | Low |
Merged core/paths.py into core/node_id.py. Merged core/paths.py into core/node_id.py. Source: granite4.1:30b@2026-06-03-audit Confidence: low |
— |
| Refactor | Low |
Inlined 5 single-consumer engine modules (preflight, postmortem, issue_summary, coverage) into their consumers. Inlined 5 single-consumer engine modules (preflight, postmortem, issue_summary, coverage) into their consumers. Source: granite4.1:30b@2026-06-03-audit Confidence: low |
— |
| Refactor | Low |
Merged workspace/merge_agent.py into workspace/merge_lock.py. Merged workspace/merge_agent.py into workspace/merge_lock.py. Source: granite4.1:30b@2026-06-03-audit Confidence: low |
— |
| Refactor | Low |
Extracted knowledge/formatting.py from fox_provider.py, separating retrieval vs presentation logic. Extracted knowledge/formatting.py from fox_provider.py, separating retrieval vs presentation logic. Source: granite4.1:30b@2026-06-03-audit Confidence: low |
— |
| Refactor | Low |
Split _handle_failure() into mode-specific handlers for improved readability. Split _handle_failure() into mode-specific handlers for improved readability. Source: granite4.1:30b@2026-06-03-audit Confidence: low |
— |
| Refactor | Low |
Replaced hardcoded _BOUNDS_MAP and _DEFAULT_DESCRIPTIONS in config_gen.py with introspection from Clamped annotations and Field metadata. Replaced hardcoded _BOUNDS_MAP and _DEFAULT_DESCRIPTIONS in config_gen.py with introspection from Clamped annotations and Field metadata. Source: granite4.1:30b@2026-06-03-audit Confidence: low |
— |
| Refactor | Low |
Removed 7 unused backward-compatibility re-exports from engine.py. Removed 7 unused backward-compatibility re-exports from engine.py. Source: granite4.1:30b@2026-06-03-audit Confidence: low |
— |
| Refactor | Low |
Deduplicated override resolution in dispatch.py. Deduplicated override resolution in dispatch.py. Source: granite4.1:30b@2026-06-03-audit Confidence: low |
— |
| Refactor | Low |
Used Counter for severity/status counting across three files. Used Counter for severity/status counting across three files. Source: granite4.1:30b@2026-06-03-audit Confidence: low |
— |
| Refactor | Low |
Parameterized dismiss_finding_by_id to eliminate three copy-pasted table blocks. Parameterized dismiss_finding_by_id to eliminate three copy-pasted table blocks. Source: granite4.1:30b@2026-06-03-audit Confidence: low |
— |
| Refactor | Low |
Extracted _query_safe helper to deduplicate ten identical try/except blocks in fox_provider.py. Extracted _query_safe helper to deduplicate ten identical try/except blocks in fox_provider.py. Source: granite4.1:30b@2026-06-03-audit Confidence: low |
— |
Full changelog
What's Changed
Code Simplification
Two refactoring passes that reduce file count, eliminate duplication, and improve readability — with zero behavioral changes.
Module consolidation (pass 1):
- Merged
core/paths.pyintocore/node_id.py - Inlined 5 single-consumer engine modules (
preflight,postmortem,issue_summary,coverage) into their consumers - Merged
workspace/merge_agent.pyintoworkspace/merge_lock.py - Extracted
knowledge/formatting.pyfromfox_provider.py(separation of retrieval vs presentation) - Split
_handle_failure()into mode-specific handlers for readability - Replaced hardcoded
_BOUNDS_MAP(16 entries) and_DEFAULT_DESCRIPTIONS(52 entries) inconfig_gen.pywith introspection from Clamped annotations and Field metadata - Removed 7 unused backward-compat re-exports from
engine.py - Deduplicated override resolution in
dispatch.py
Code-level improvements (pass 2):
- Used
Counterfor severity/status counting across 3 files - Parameterized
dismiss_finding_by_idto eliminate 3 copy-pasted table blocks - Batched
record_finding_injectionsto eliminate N+1 query pattern - Extracted
_query_safehelper to deduplicate 10 identical try/except blocks infox_provider.py
Debug Flag Removal (spec 131)
- Removed dead
--debugflag from thecodeCLI command
Stats
- Source files: 148 → 143 (-5)
- Net lines removed: ~110
- All 4,624 tests pass
Breaking Changes
- Removed dead `--debug` flag from the `code` CLI command.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Agent-fox
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]