This release fixes issues for SREs watching stability and regressions.
Published 1mo
AI Agents & Assistants
✓ No known CVEs patched
✓ No known CVEs patched in this version
Topics
ai-agents
aider
anthropic
autonomous
ci-cd
claude
+13 more
cline
code-review
devops
gemini
github-action
github-issues
loki-mode
multi-agent
openai-codex
openapi
pull-request-review
sdlc
spec-driven-development
Affected surfaces
auth
Summary
AI summaryFixed false "codebase unchanged" disclosures for non‑git codebases by hashing file content when under the size budget.
Full changelog
Fixed
- Non-git codebase signature was blind to same-size content edits (path+size
pairs only), so a stale generated PRD could be silently reused with a false
"codebase unchanged" disclosure. The files: signature now also streams file
content through the hash (clone-stable, batched via xargs so cost scales
with bytes, measured ~0.2s per 10k files). Trees over
LOKI_PRD_SIG_CONTENT_BUDGETbytes (default 50MB, documented in
wiki/Environment-Variables.md) fall back to the previous fast listing
(files-shallow:), where the limitation is documented honestly. - The one-time signature-format upgrade is invisible and honest: a stored
old-format signature whose listing fields match decides reuse (no false
"Codebase changed" disclosure, no spurious update cycle) and the persisted
date is preserved. Corrupted or truncated stored signatures still fall to
update, as before. - Empty-tree signature no longer embeds a double-zero count.
- Git projects are unaffected (git status already detects all edits).
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Loki Mode
Multi-agent autonomous SDLC framework. Spec to deployed app. PRD, GitHub issue, OpenAPI/JSON/YAML, or one-line brief. 5 AI providers, 11 quality gates.
Related context
Related tools
Beta — feedback welcome: [email protected]