This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+14 more
Summary
AI summaryUpdates Build/CI, macOS, and https://github.com/m24927605/ait/blob/main/docs/self-update.md across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
Adds interactive, non‑interactive, and check modes to `ait self-update`. Adds interactive, non‑interactive, and check modes to `ait self-update`. Source: llm_adapter@2026-05-29 Confidence: high |
— |
| Feature | Low |
Adds new GitHub Actions workflow `release-binary.yml` for 4‑platform PyInstaller build matrix. Adds new GitHub Actions workflow `release-binary.yml` for 4‑platform PyInstaller build matrix. Source: llm_adapter@2026-05-29 Confidence: high |
— |
| Feature | Low |
Adds ad‑hoc codesign step for macOS binaries in CI. Adds ad‑hoc codesign step for macOS binaries in CI. Source: llm_adapter@2026-05-29 Confidence: high |
— |
| Feature | Low |
Adds `build/build_binary.sh` script for local reproducible binary builds. Adds `build/build_binary.sh` script for local reproducible binary builds. Source: llm_adapter@2026-05-29 Confidence: high |
— |
| Feature | Low |
Adds Homebrew tap (macOS) for future releases: `brew tap m24927605/ait && brew install ait`. Adds Homebrew tap (macOS) for future releases: `brew tap m24927605/ait && brew install ait`. Source: llm_adapter@2026-05-29 Confidence: high |
— |
| Feature | Low |
Adds curl‑based installer script for macOS and Linux: `curl -fsSL https://raw.githubusercontent.com/m24927605/ait/main/install.sh | sh`. Adds curl‑based installer script for macOS and Linux: `curl -fsSL https://raw.githubusercontent.com/m24927605/ait/main/install.sh | sh`. Source: llm_adapter@2026-05-29 Confidence: high |
— |
| Feature | Low |
Adds self-update command to standalone binary. Adds self-update command to standalone binary. Source: llm_adapter@2026-05-29 Confidence: low |
— |
| Feature | Low |
Adds detection of installation method and appropriate upgrade flow for pip, Homebrew, or standalone binary. Adds detection of installation method and appropriate upgrade flow for pip, Homebrew, or standalone binary. Source: llm_adapter@2026-05-29 Confidence: low |
— |
| Feature | Low |
Notes that v1.6.0 ships via PyPI only; other channels will appear in next release. Notes that v1.6.0 ships via PyPI only; other channels will appear in next release. Source: llm_adapter@2026-05-29 Confidence: low |
— |
| Feature | Low |
Detects installation method (pip, Homebrew, standalone) and routes upgrade flow accordingly in `ait self-update`. Detects installation method (pip, Homebrew, standalone) and routes upgrade flow accordingly in `ait self-update`. Source: granite4.1:30b@2026-05-29-audit Confidence: low |
— |
| Feature | Low |
Notes that v1.6.0 is distributed via PyPI only; additional channels (Homebrew, curl installer, direct binaries) will be available in the next release. Notes that v1.6.0 is distributed via PyPI only; additional channels (Homebrew, curl installer, direct binaries) will be available in the next release. Source: granite4.1:30b@2026-05-29-audit Confidence: low |
— |
| Feature | Low |
Specifies supported target architectures: macos-arm64, macos-x86_64, linux-x86_64, linux-arm64. Specifies supported target architectures: macos-arm64, macos-x86_64, linux-x86_64, linux-arm64. Source: granite4.1:30b@2026-05-29-audit Confidence: low |
— |
| Feature | Low |
Includes SHA256 verification file `ait-vX.Y.Z-checksums.txt` with released binaries for integrity checking. Includes SHA256 verification file `ait-vX.Y.Z-checksums.txt` with released binaries for integrity checking. Source: granite4.1:30b@2026-05-29-audit Confidence: low |
— |
| Feature | Low |
Updates Homebrew tap formula automatically on every release tag via CI. Updates Homebrew tap formula automatically on every release tag via CI. Source: granite4.1:30b@2026-05-29-audit Confidence: low |
— |
| Feature | Low |
Maintains unchanged pip installation method alongside new channels. Maintains unchanged pip installation method alongside new channels. Source: granite4.1:30b@2026-05-29-audit Confidence: low |
— |
| Feature | Low |
Provides documentation link for `ait self-update` usage (`docs/self-update.md`). Provides documentation link for `ait self-update` usage (`docs/self-update.md`). Source: granite4.1:30b@2026-05-29-audit Confidence: low |
— |
| Bugfix | Medium |
Fixes permissions bug in new binary CI pipeline's first run. Fixes permissions bug in new binary CI pipeline's first run. Source: llm_adapter@2026-05-29 Confidence: high |
— |
Full changelog
What's new
ait now ships through three new channels in addition to pip/npm. Note: v1.6.0 ships via PyPI only. The new binary CI pipeline had a permissions bug on its first run; native binaries will land starting with the next release tag. The code for the new channels is in this release if you want to inspect it.
Install (this release)
pip / pipx (any Python ≥ 3.11):
pip install --upgrade ait-vcs # or: pipx install ait-vcs
Pin to this tag:
pipx install "git+https://github.com/m24927605/[email protected]"
Binary install paths (will work on the next release)
The next release will produce these:
- Homebrew tap (macOS):
brew tap m24927605/ait && brew install ait - curl install script (macOS + Linux):
curl -fsSL https://raw.githubusercontent.com/m24927605/ait/main/install.sh | sh - Direct download: binaries attached to the release, with
ait-vX.Y.Z-checksums.txtfor SHA256 verification.
Supported targets: macos-arm64, macos-x86_64, linux-x86_64, linux-arm64.
ait self-update
The standalone binary will have a built-in updater:
ait self-update # interactive
ait self-update --yes # no prompt
ait self-update --check # check only
Detects how AIT was installed and dispatches the right upgrade flow:
- Standalone binary → atomic-replace update with SHA256 verification
- Homebrew → refuses with "run
brew upgrade ait" - pip → refuses with "run
pip install --upgrade ait-vcs"
See docs/self-update.md.
Build/CI
- New
release-binary.ymlworkflow: 4-platform PyInstaller build matrix, sha256 aggregation, automatic Homebrew tap formula update on every release tag. - Ad-hoc codesign on macOS targets so they run cleanly via Brew.
build/build_binary.shfor local reproducible builds.
Notes
- pip continues to work unchanged.
- The Homebrew tap is at https://github.com/m24927605/homebrew-ait (one-time maintainer setup; CI auto-updates the formula starting next release).
- 998 tests passing.
See CHANGELOG.md for the full entry.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Ait
All releases →Related context
Related tools
Earlier breaking changes
- v0.55.52 Keep the built-in claude-code reviewer pinned to the local claude -p CLI even when repository policy defines a conflicting command override.
Beta — feedback welcome: [email protected]