This release includes 2 breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+12 more
ReleasePort's take
Light signalThe pipeline stop command was relocated to chameleon_mcp/stop/, and several legacy idiom markdown writer functions were removed.
Why it matters: Moving the stop pipeline changes location handling; removing dead writers eliminates unused code paths. Operators should update scripts referencing the old directory or functions before deploying v3.3.0.
Summary
AI summaryRenamed pipeline directory and removed legacy idiom markdown writer functions.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Deprecation | Medium |
v3 teammate deprecation folded into idiom store; reactivation via view refused. v3 teammate deprecation folded into idiom store; reactivation via view refused. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Bugfix | Low |
Removed dead legacy idiom markdown writers: _transition_slug_to_deprecated, _write_new_deprecated_idiom, _find_all_slug_sections, _render_idiom_block. Removed dead legacy idiom markdown writers: _transition_slug_to_deprecated, _write_new_deprecated_idiom, _find_all_slug_sections, _render_idiom_block. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Refactor | Low |
Stop pipeline moved to chameleon_mcp/stop/ directory. Stop pipeline moved to chameleon_mcp/stop/ directory. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Refactor | Low |
Archetype renames now rewrite the idiom store, preserving scoping. Archetype renames now rewrite the idiom store, preserving scoping. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Refactor | Low |
Idiom store reads through hardened profile‑artifact path, refusing symlinks and capping size. Idiom store reads through hardened profile‑artifact path, refusing symlinks and capping size. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Refactor | Low |
Teach and trust envelopes report idioms_migrated / idioms_quarantined during one‑time store migration. Teach and trust envelopes report idioms_migrated / idioms_quarantined during one‑time store migration. Source: llm_adapter@2026-07-14 Confidence: high |
— |
Full changelog
Changed
- The Stop pipeline now lives in
chameleon_mcp/stop/(advisories, gates,
pipeline with per-root RootContext); hook_helper keeps the same entry point
and seams. Behavior-preserving: no output or decision changes. - Archetype renames now rewrite the idiom store, so renamed archetypes keep
scoping idioms and survive view regeneration. - A v3 teammate's deprecation made via idioms.md is folded into the store
(reactivation via the view stays refused; use /chameleon-teach). - Idiom store records are read through the hardened profile-artifact path
(symlink-refusing, size-capped). - Teach and trust envelopes report
idioms_migrated/idioms_quarantined
when their call triggered the one-time store migration.
Removed
- The dead legacy idiom markdown writers (
_transition_slug_to_deprecated,
_write_new_deprecated_idiom,_find_all_slug_sections,
_render_idiom_block); the store owns all idiom writes.
Breaking Changes
- The Stop pipeline moved from its original location to `chameleon_mcp/stop/`.
- Removed legacy idiom markdown writer functions: `_transition_slug_to_deprecated`, `_write_new_deprecated_idiom`, `_find_all_slug_sections`, `_render_idiom_block`.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Chameleon
All releases →Beta — feedback welcome: [email protected]