Kodiqa Agent

v3.7.4 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1mo AI Agents & Assistants

✓ No known CVEs patched

This release patches 1 known CVE

Topics

ai-coding-agent claude cli coding-assistant developer-tools ollama

+2 more

openai python

Summary

AI summary

All audit items from the 2026-06-06 security review have been closed.

Type	Severity	Summary	CVE
Feature	Low	Adds `--debug` flag (and KODIQA_DEBUG=1) to lower log level to DEBUG, showing swallowed-error traces in ~/.kodiqa/error.log. Adds `--debug` flag (and KODIQA_DEBUG=1) to lower log level to DEBUG, showing swallowed-error traces in ~/.kodiqa/error.log. Source: llm_adapter@2026-06-07 Confidence: high	—
Bugfix	Medium	Broad `except Exception: pass` catch-alls now log via kodiqa logger at DEBUG with traceback and function name. Broad `except Exception: pass` catch-alls now log via kodiqa logger at DEBUG with traceback and function name. Source: llm_adapter@2026-06-07 Confidence: high	—
Bugfix	Low	Adds a NullHandler on the package logger to prevent pre-startup log calls from leaking to stderr. Adds a NullHandler on the package logger to prevent pre-startup log calls from leaking to stderr. Source: llm_adapter@2026-06-07 Confidence: high	—

Full changelog

Observability — closes the final item from the 2026-06-06 audit. No user-facing behavior change.

No more truly-silent error swallowing. The 44 broad except Exception: pass catch-alls across the codebase now log via the kodiqa logger at DEBUG with a traceback and the enclosing function name. Errors are still swallowed and the default level stays WARNING, so nothing new is written during normal use. (Narrow, intentional handlers like except FileNotFoundError stay quiet.)

--debug flag (and KODIQA_DEBUG=1) — lowers the log level to DEBUG so swallowed-error traces appear in ~/.kodiqa/error.log when debugging.
A NullHandler on the package logger so pre-startup log calls never leak to stderr.

test_logging.py — DEBUG + exc_info on swallow, silent at WARNING, behavior unchanged, idempotent handler setup. 366 total; ruff + CI green.

This completes the audit — Critical, High, and Medium tiers are all cleared.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Kodiqa Agent

Get notified when new releases ship.

About Kodiqa Agent