This release adds 2 notable features for engineering teams evaluating rollout.
Published 23d
AI Agents & Assistants
✓ No known CVEs patched
✓ No known CVEs patched in this version
Topics
agentic-ai
agentic-workflow
Affected surfaces
auth
rbac
Summary
AI summaryPost-merge validation runs quality checks and drift‑review findings now block merges with updated severity definitions.
Full changelog
What's Changed
Features
- Post-merge validation — after all tasks complete, the engine now runs
make checkon the merged integration branch before marking the run ascompleted. If quality checks fail, the run is markedcompleted_dirtyinstead, surfacing cross-spec integration failures that individual worktree sessions miss. (b95b99e4) - JS/TS coverage detection — coverage regression gate now detects Jest and Vitest projects via
package.json, parsing Istanbul-formatcoverage-final.jsonoutput. Vitest requires a coverage provider (@vitest/coverage-v8or@vitest/coverage-istanbul) to be declared. (c7448c6b)
Bug Fixes
- Review severity definitions — drift-review and pre-review profile templates now include detailed severity criteria with examples, replacing a bare list of level names. API signature mismatches, missing types, and incompatible contracts are explicitly classified as
critical. Added "when in doubt, choose the higher severity" tie-breaker. (eeefe370) - Drift-review blocking made effective — drift-review findings now actually reach the blocking evaluator (queries
drift_findingstable instead ofreview_findings). Default threshold changed fromNone(advisory-only) to1. Both critical and major findings count toward blocking for pre-review and drift-review. Drift-review now hasretry_predecessor=Trueso blocking triggers a coder retry with findings as context. Audit-review is unchanged per issue #639. (eeefe370) - Coverage tool false-positive detection —
detect_coverage_toolno longer falsely identifies coverage tools based on project markers alone. Python projects requirepytest-covin dependencies, Rust projects requirecargo-tarpaulinon PATH. Eliminates silent "Coverage result file not found" log spam on every session dispatch. (69ea1548) - Spec artifact references updated to v1.2 JSON format — CLAUDE.md template and agent profiles (coder, drift-review, pre-review, verifier) now reference the current spec format (
requirements.json,test_spec.json,tasks.json, optionalarchitecture.md) instead of the old v3 markdown format. Added a design information lookup table mapping architectural concerns to their locations across spec artifacts. (c81735d3)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Agent-fox
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]