Skip to content

Agent-fox

v4.1.2 Feature

This release adds 2 notable features for engineering teams evaluating rollout.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

agentic-ai agentic-workflow

Affected surfaces

auth rbac

Summary

AI summary

Post-merge validation runs quality checks and drift‑review findings now block merges with updated severity definitions.

Full changelog

What's Changed

Features

  • Post-merge validation — after all tasks complete, the engine now runs make check on the merged integration branch before marking the run as completed. If quality checks fail, the run is marked completed_dirty instead, surfacing cross-spec integration failures that individual worktree sessions miss. (b95b99e4)
  • JS/TS coverage detection — coverage regression gate now detects Jest and Vitest projects via package.json, parsing Istanbul-format coverage-final.json output. Vitest requires a coverage provider (@vitest/coverage-v8 or @vitest/coverage-istanbul) to be declared. (c7448c6b)

Bug Fixes

  • Review severity definitions — drift-review and pre-review profile templates now include detailed severity criteria with examples, replacing a bare list of level names. API signature mismatches, missing types, and incompatible contracts are explicitly classified as critical. Added "when in doubt, choose the higher severity" tie-breaker. (eeefe370)
  • Drift-review blocking made effective — drift-review findings now actually reach the blocking evaluator (queries drift_findings table instead of review_findings). Default threshold changed from None (advisory-only) to 1. Both critical and major findings count toward blocking for pre-review and drift-review. Drift-review now has retry_predecessor=True so blocking triggers a coder retry with findings as context. Audit-review is unchanged per issue #639. (eeefe370)
  • Coverage tool false-positive detectiondetect_coverage_tool no longer falsely identifies coverage tools based on project markers alone. Python projects require pytest-cov in dependencies, Rust projects require cargo-tarpaulin on PATH. Eliminates silent "Coverage result file not found" log spam on every session dispatch. (69ea1548)
  • Spec artifact references updated to v1.2 JSON format — CLAUDE.md template and agent profiles (coder, drift-review, pre-review, verifier) now reference the current spec format (requirements.json, test_spec.json, tasks.json, optional architecture.md) instead of the old v3 markdown format. Added a design information lookup table mapping architectural concerns to their locations across spec artifacts. (c81735d3)

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Agent-fox

Get notified when new releases ship.

Sign up free

About Agent-fox

All releases →

Related context

Earlier breaking changes

  • v3.6.4 Remove deprecated coding field from default config template.
  • v3.6.2 Removes fallback_model option from session pipeline

Beta — feedback welcome: [email protected]