Skip to content

Chameleon

v4.4.55 Bugfix

This release fixes issues for SREs watching stability and regressions.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ai-coding-assistant archetype ast-analysis claude-code claude-plugin code-conventions
+12 more
code-review code-style developer-tools javascript linter mcp mcp-server prompt-engineering python ruby rails typescript

Summary

AI summary

Fixed ESLint flat-config parsing error message to explain array export limitation.

Changes in this release

Bugfix Medium

Reports why a flat ESLint config could not be read.

Reports why a flat ESLint config could not be read.

Source: llm_adapter@2026-07-20

Confidence: medium

Full changelog

Fixed

  • A flat ESLint config now reports why it could not be read. A flat config exports an ARRAY of
    blocks -- the canonical shape in ESLint's own documentation, usually built by defineConfig([...])
    or tseslint.config(...), and the default since ESLint 9 -- while the static parser reads only an
    object literal. Every flat config therefore fell to no top-level module.exports assignment found, which is wrong twice: the file has no module.exports precisely because it correctly uses
    export default, sending readers after a CommonJS export that was never meant to exist, and the
    message named no way forward. The warning now states that a flat config exports an array the
    static parser cannot read without executing it, and points at CHAMELEON_ALLOW_ESLINT_EVAL=1.
    Parse behaviour is deliberately unchanged -- resolving spreads, imports and helper calls means
    executing the config, which stays opt-in so an untrusted repo's code never runs during bootstrap.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Chameleon

Get notified when new releases ship.

Sign up free

About Chameleon

All releases →

Related context

Earlier breaking changes

  • v3.0.0 MCP surface folded from 48 tools to 19; remaining 32 operator tools become actions on three dispatchers.

Beta — feedback welcome: [email protected]