Skip to content

graphify

v0.9.14 Feature

This release adds 2 notable features for engineering teams evaluating rollout.

Published 13d RAG & Retrieval
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

antigravity claude-code codex gemini graphrag knowledge-graph
+5 more
leiden openclaw llm skills tree-sitter

Affected surfaces

auth rce_ssrf

Summary

AI summary

Updates All fixes, Fix, and Highlights across a mixed release.

Changes in this release

Bugfix Medium

Prevents massive graph bloat from git worktrees by honoring .git/info/exclude.

Prevents massive graph bloat from git worktrees by honoring .git/info/exclude.

Source: llm_adapter@2026-07-13

Confidence: high

 —
Bugfix Medium

Removes username leaks from committed graphs by using relative node IDs.

Removes username leaks from committed graphs by using relative node IDs.

Source: llm_adapter@2026-07-13

Confidence: high

 —
Bugfix Medium

Ensures CLI exits with status 0 when downstream reader closes pipe early.

Ensures CLI exits with status 0 when downstream reader closes pipe early.

Source: llm_adapter@2026-07-13

Confidence: high

 —
Bugfix Medium

Prevents `graphify export graphml` from crashing on dict/list attributes.

Prevents `graphify export graphml` from crashing on dict/list attributes.

Source: llm_adapter@2026-07-13

Confidence: low

 —
Bugfix Low

Deduplicates BFS seeds in `graphify query` to avoid result flooding.

Deduplicates BFS seeds in `graphify query` to avoid result flooding.

Source: llm_adapter@2026-07-13

Confidence: high

 —
Bugfix Low

Scopes semantic cache writes to each extraction batch's files.

Scopes semantic cache writes to each extraction batch's files.

Source: llm_adapter@2026-07-13

Confidence: high

 —
Bugfix Low

Skips `.nox/` virtualenvs during detection alongside `.tox/`.

Skips `.nox/` virtualenvs during detection alongside `.tox/`.

Source: llm_adapter@2026-07-13

Confidence: high

 —
Bugfix Low

Makes git hooks short‑circuit inside linked worktrees and respects `GRAPHIFY_SKIP_HOOK`.

Makes git hooks short‑circuit inside linked worktrees and respects `GRAPHIFY_SKIP_HOOK`.

Source: llm_adapter@2026-07-13

Confidence: high

 —
Bugfix Low

Writes AST cache to CWD instead of the source tree during extraction.

Writes AST cache to CWD instead of the source tree during extraction.

Source: llm_adapter@2026-07-13

Confidence: low

 —
Bugfix Low

Corrects CLI success reporting when output is piped to tools like `head`.

Corrects CLI success reporting when output is piped to tools like `head`.

Source: llm_adapter@2026-07-13

Confidence: low

 —
Bugfix Low

Serializes non‑scalar attributes and writes atomically, preventing `export graphml` crashes.

Serializes non‑scalar attributes and writes atomically, preventing `export graphml` crashes.

Source: granite4.1:30b@2026-07-14-audit

Confidence: low

 —
Bugfix Low

Writes AST cache and stat‑index to the current working directory, not the source tree.

Writes AST cache and stat‑index to the current working directory, not the source tree.

Source: granite4.1:30b@2026-07-14-audit

Confidence: low

 —
Full changelog

graphify turns any folder of code, docs, papers, images, or videos into a queryable knowledge graph. 0.9.14 is a correctness-focused release: eleven fixes across detection, the git hooks, extraction caching, query seeding, and export — most from community reports, several with their own PRs.

Highlights

  • Massive graph bloat from git worktrees is gone (#1810). Detection now honors .git/info/exclude — where git worktree add records nested worktree paths — so graphify no longer walks into worktree copies of the repo. One reporter's 5-worktree repo had ballooned from ~9,400 nodes / 10 MB to ~210,000 nodes / 311 MB, regenerated on every commit.
  • No more username leaks in committed graphs (#1789). Visual Studio solution-folder nodes were keyed off the absolute scan path, embedding the local username into graph.json. They're now relative.
  • graphify export graphml stopped crashing (#1831). Any dict/list-valued attribute (a node metadata dict, the graph-level hyperedges list) failed the entire export and left a 0-byte file; non-scalars are now JSON-serialized and the write is atomic.
  • The CLI no longer reports success as failure through a pipe (#1807). graphify query … | head used to exit 255 when the reader closed early, breaking CI wrappers and agent harnesses; an early-closing reader is now treated as success.

All fixes

  • Fix: Visual Studio solution-folder node ids no longer embed the absolute scan path / username (#1789, thanks @fremat79).
  • Fix: the CLI exits 0 (not 255) when a downstream reader closes the pipe early — head, Select-Object -First N, sed q (#1807 / #1811, thanks @varuntej07).
  • Fix: extract() writes its AST cache (and the stat-index) to CWD, never the analyzed source tree, with the cache location decoupled from the portable key/id anchor (#1774 / #1802, thanks @SimiSips).
  • Fix: graphify query deduplicates BFS seeds by label so homonymous generic symbols (many GET/POST handlers) no longer flood results (#1766 / #1832, thanks @devcool20).
  • Fix: semantic cache writes are scoped to each extraction batch's files, so a mis-attributed source_file can't clobber another file's cache — covering both the final write and the per-chunk checkpoint (#1757 / #1835, thanks @TPAteeq).
  • Fix: graphify export graphml coerces dict/list (and other non-scalar) attributes and writes atomically (#1831 / #1830, thanks @hofmockel).
  • Fix: .nox/ virtualenvs are skipped during detection alongside .tox/ (#1804, thanks @igorregoir-lgtm).
  • Fix: detection honors .git/info/exclude, ending git-worktree graph bloat (#1810, thanks @cdahl86-cyber).
  • Fix: the git hooks short-circuit inside linked worktrees, and GRAPHIFY_SKIP_HOOK now suppresses both post-commit and post-checkout (#1809, thanks @cdahl86-cyber; worktree guard co-developed with @Claude-Madera's #1806).

Install

pip install --upgrade graphifyy
# or
uv tool install [email protected]

Then graphify install to update the skill for your agent.

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track graphify

Get notified when new releases ship.

Sign up free

About graphify

AI coding assistant skill (Claude Code, Codex, OpenCode, Cursor, Gemini CLI, OpenClaw, Factory Droid, Trae). Turn any folder of code, docs, papers, images, videos, or YouTube links into a queryable knowledge graph

All releases →

Related context

Earlier breaking changes

  • v0.8.18 Breaks Java `extends` edges; they are renamed to `inherits`. Update queries filtering on `relation="extends"` for Java nodes.

Beta — feedback welcome: [email protected]