This release includes breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+9 more
Affected surfaces
ReleasePort's take
Light signalv1.1.1 fixes several setup.sh bugs and improves documentation.
Why it matters: Bugfixes stop silent overwrite of `memory/topics/role-and-priorities.md`, prevent OS account name leakage, remove placeholder remnants, preserve final newlines in piped mode, avoid empty `.mcp.json` creation, clarify no‑op exit messages, and correct README path guidance; all changes land in v1.1.1 released 2026-05-24.
Summary
AI summaryUpdates What's fixed, P3 — polish, and https://github.com/chacosoldier/compabob/compare/v1.1.0...v1.1.1 across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
'update.sh' displays pulled commit list and a clearer "your data lives here" banner. 'update.sh' displays pulled commit list and a clearer "your data lives here" banner. Source: llm_adapter@2026-05-24 Confidence: low |
— |
| Feature | Medium |
README updated to clarify owned vs. tracked paths, correct walkthrough prompt count, and add YAML‑escape note for apostrophes. README updated to clarify owned vs. tracked paths, correct walkthrough prompt count, and add YAML‑escape note for apostrophes. Source: llm_adapter@2026-05-24 Confidence: low |
— |
| Bugfix | Medium |
`setup.sh` re-run no longer silently overwrites `memory/topics/role-and-priorities.md` for the generalist persona. `setup.sh` re-run no longer silently overwrites `memory/topics/role-and-priorities.md` for the generalist persona. Source: llm_adapter@2026-05-24 Confidence: high |
— |
| Bugfix | Medium |
`init.sh` now fails when integrations are enabled but `.mcp.json` is missing, instead of only warning. `init.sh` now fails when integrations are enabled but `.mcp.json` is missing, instead of only warning. Source: llm_adapter@2026-05-24 Confidence: high |
— |
| Bugfix | Medium |
'whoami' default no longer leaks OS account name into `memory/MEMORY.md` when Enter is pressed. 'whoami' default no longer leaks OS account name into `memory/MEMORY.md` when Enter is pressed. Source: llm_adapter@2026-05-24 Confidence: low |
— |
| Bugfix | Medium |
Persona seeding now occurs after placeholder replacement, preventing `{{USER_NAME}}` remnants in seeded personas. Persona seeding now occurs after placeholder replacement, preventing `{{USER_NAME}}` remnants in seeded personas. Source: llm_adapter@2026-05-24 Confidence: low |
— |
| Bugfix | Medium |
Piped‑mode `setup.sh` now preserves the final newline, avoiding EOF collision with integrations prompt. Piped‑mode `setup.sh` now preserves the final newline, avoiding EOF collision with integrations prompt. Source: llm_adapter@2026-05-24 Confidence: low |
— |
| Bugfix | Medium |
`install-integrations.sh` exits non‑zero with a clear "nothing installed" message on no‑op runs instead of printing "Done." `install-integrations.sh` exits non‑zero with a clear "nothing installed" message on no‑op runs instead of printing "Done." Source: llm_adapter@2026-05-24 Confidence: low |
— |
| Bugfix | Medium |
`.mcp.json` creation is deferred until at least one integration writes to it, eliminating empty file generation. `.mcp.json` creation is deferred until at least one integration writes to it, eliminating empty file generation. Source: llm_adapter@2026-05-24 Confidence: low |
— |
| Bugfix | Low |
'whoami' prompt now requires explicit input instead of leaking OS username when Enter is pressed. 'whoami' prompt now requires explicit input instead of leaking OS username when Enter is pressed. Source: granite4.1:30b@2026-05-24-audit Confidence: low |
— |
Full changelog
Same-day follow-up to v1.1.0. Ran a full QA pass across 5 personas × 10 input edge cases × idempotency × update.sh × integrations × init.sh × a pristine Docker Ubuntu run × a headless claude -p smoke. 11 findings, all fixed in this release.
Full QA report: docs/qa-findings-2026-05-24.md.
What's fixed
P1 — silent data loss on re-run
setup.shre-run silently overwrotememory/topics/role-and-priorities.mdif the user started with thegeneralistpersona and edited the file. The "untouched template" guard treated[the most important thing]as a marker, but that string also lived inconfig/personas/generalist.md, so user edits were wrongly classified as untouched and overwritten. Marker tightened to[fill in], which only appears in the shipped template. The other four personas (consultant,engineer,sales,founder) were never affected.
P2 — confusing or imprecise behavior
whoamidefault for "Your name" leaked the OS account name (e.g.rootinside Docker) intomemory/MEMORY.mdif the user hit Enter. Default removed; setup re-prompts.- Persona seeding ran before placeholder replacement, so seeded personas could ship with
{{USER_NAME}}still on disk. Order flipped. - Piped-mode setup (
printf ... | ./setup.sh) swallowed the final newline and the integrations prompt collided with EOF. Newline guard added. install-integrations.shprinted "Done." on no-op runs (unknown category, empty selection). Now exits non-zero with a clear "nothing installed" message..mcp.jsonwas created eagerly even when no integrations were selected, leaving an empty file. Creation deferred until at least one integration writes to it.init.shwarned instead of failing when integrations were enabled but.mcp.jsonwas missing.
P3 — polish
update.shnow shows the list of pulled commits and a clearer "your data lives here" banner.- README — clarified which paths are "yours" vs. tracked kit content, corrected the walkthrough prompt count, added a YAML-escape note for names with apostrophes.
Upgrade
cd /path/to/your/compabob
./update.sh
Your vault/, memory/, config/user.config.yaml, .mcp.json, and .env are untouched. If you started with the generalist persona and edited memory/topics/role-and-priorities.md before this release, please check that file once after upgrading.
Full diff
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About chacosoldier/compabob
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]