Skip to content

Chameleon

v4.5.11 Bugfix

This release fixes issues for SREs watching stability and regressions.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ai-coding-assistant archetype ast-analysis claude-code claude-plugin code-conventions
+12 more
code-review code-style developer-tools javascript linter mcp mcp-server prompt-engineering python ruby rails typescript

Summary

AI summary

Fixed several false‑positive analysis findings including serializer archetype mispairing, DRF viewset convention flagging, enum inheritance exemption, and short dummy secrets.

Full changelog

Fixed

  • A single framework-role file forms its own archetype. Dense-at-two shipped in v4.5.0 and
    a graded Django run refuted it: a one-app repo's lone serializers.py formed no serializer
    archetype and mis-paired to the TEST archetype via path fallback — a wrong witness instead of
    its own. For a framework role, one file is the layer; role buckets are dense at one.
  • DRF viewsets no longer flagged against a CBV-dominant view convention — a camel-bounded
    interior role match recognizes ModelViewSet as the View family (mixed CBV+DRF view modules
    fired "should inherit ListView" on every viewset).
  • Enum subclasses exempt from the Python inheritance convention (StrEnum in a pydantic
    schema module cannot meaningfully inherit BaseModel).
  • One-to-three-character alphabetic dummy secrets ("pw") are placeholders — no credential that
    short exists, and they fired error-severity findings in Django test fixtures.

Changed

  • deep-work's review cap may extend one round at a time past 3 only while the latest round
    still applied a finding, disclosed in the convergence line — a graded run correctly kept
    reviewing under exactly these conditions and now the spec matches the right behavior.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Chameleon

Get notified when new releases ship.

Sign up free

About Chameleon

All releases →

Related context

Earlier breaking changes

  • v3.0.0 MCP surface folded from 48 tools to 19; remaining 32 operator tools become actions on three dispatchers.

Beta — feedback welcome: [email protected]