Skip to content

Chameleon

v4.4.8 Bugfix

This release fixes issues for SREs watching stability and regressions.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ai-coding-assistant archetype ast-analysis claude-code claude-plugin code-conventions
+12 more
code-review code-style developer-tools javascript linter mcp mcp-server prompt-engineering python ruby rails typescript

Summary

AI summary

Fixed false‑positive inheritance advisories for weak matches and baseless Ruby classes.

Changes in this release

Bugfix Medium

Drops inheritance advisory for weakly matched archetype files, reducing false positives.

Drops inheritance advisory for weakly matched archetype files, reducing false positives.

Source: llm_adapter@2026-07-18

Confidence: high

Bugfix Medium

No longer flags Ruby classes without a base as missing inheritance, aligning with Python behavior.

No longer flags Ruby classes without a base as missing inheritance, aligning with Python behavior.

Source: llm_adapter@2026-07-18

Confidence: high

Full changelog

Fixed

  • The inheritance-convention-violation rule was measured ~100% false-positive
    across four real repos (45 firings, 0 true positives). Two independent,
    false-positive-safe fixes cut the dominant drivers:
    • A file that resolves to an archetype only by a WEAK match (match_quality
      fallback/none, or a path_only basis) is not a confident member of that
      archetype, so applying its dominant-base convention is noise (a
      lib/exceptions.rb path-matched to a CLI archetype and told to "inherit
      Base"). The inheritance advisory is now dropped on such matches. Enforcement
      is unaffected and byte-identical: the block path already gates block-eligible
      inheritance on confidence=high + match_quality=ast, and the drop condition
      is provably disjoint from match_quality=ast, so a weak match never blocks on
      inheritance. This eliminated the archetype over-resolution false positives
      (Django exceptions.py/storage/notifications/provider mis-routed to a
      test archetype; the mastodon lib/** grab-bag) -- 14 to 2 on Django.
    • The Ruby inheritance check no longer flags a base-less class Foo (no
      < Base) as a missed inheritance, aligning it to the Python check, which
      already exempts a base-less class Foo:. Real base-less Ruby classes are
      legitimate standalone or mixin-composed classes (a service that includes its
      behavior, a middleware, a config module), not deviations. A class that extends
      the WRONG (non-known) base is still flagged.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Chameleon

Get notified when new releases ship.

Sign up free

About Chameleon

All releases →

Related context

Earlier breaking changes

  • v3.0.0 MCP surface folded from 48 tools to 19; remaining 32 operator tools become actions on three dispatchers.

Beta — feedback welcome: [email protected]