Skip to content

merlinhu1/truthmark

vrelease/2.2.3 Breaking

This release includes 2 breaking changes for platform teams planning a safe upgrade.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

agentic-coding ai-agents ai-coding ai-tools ai-workflow code-review
+5 more
developer-tools devtools documentation opencode typescript

Summary

AI summary

Removes generated helper manifests/policy files and enforces host‑neutral configs with optional validator opt‑in.

Full changelog
  • Removes generated helper manifests/helper-policy files and keeps optional validators inline in workflow/report validation paths.
  • Makes fresh Truthmark configs host-neutral: no Codex/OpenCode/etc. surfaces are generated unless platforms explicitly opts in.
  • Keeps Preview lightweight/read-only while preserving configured host-native workflow packages.
  • Restores bounded Truth Sync topology repair for safe, scoped route-owner fixes.
  • Follow-up: limits Truth Preview advertising to supported Copilot/Gemini adapter surfaces and removes unsupported Codex/OpenCode/Claude/global Preview invocation text.
  • Follow-up: truthmark init now prunes retired generated artifacts during upgrades, and truthmark check reports obsolete generated surfaces instead of ignoring extras.

Breaking Changes

  • Removes generated helper manifests/helper-policy files; validators must now be defined inline in workflow/report validation paths.
  • Truthmark configs are host‑neutral by default; no Codex/OpenCode/etc. surfaces are generated unless platforms explicitly opt in.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track merlinhu1/truthmark

Get notified when new releases ship.

Sign up free

About merlinhu1/truthmark

All releases →

Related context

Beta — feedback welcome: [email protected]