This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+10 more
Summary
AI summaryUpdates Code Refactoring, 1.2.0, and Bug Fixes across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
Adds approved native DMG traversal for artifacts. Adds approved native DMG traversal for artifacts. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Low |
Adds deterministic capture v3 to process module. Adds deterministic capture v3 to process module. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Low |
Introduces evidence‑safe capture v4 in process module. Introduces evidence‑safe capture v4 in process module. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | Medium |
Diagnoses unpacked ASAR integrity failures in artifacts. Diagnoses unpacked ASAR integrity failures in artifacts. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | Medium |
Hardens capture validation and cleanup in process module. Hardens capture validation and cleanup in process module. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | Low |
Removes redundant process exports from CI configuration. Removes redundant process exports from CI configuration. Source: llm_adapter@2026-07-15 Confidence: low |
— |
| Refactor | Low |
Simplifies inventory traversal in artifacts. Simplifies inventory traversal in artifacts. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
| Refactor | Low |
Splits setup and CLI registration in setup module. Splits setup and CLI registration in setup module. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
Full changelog
1.2.0 (2026-07-13)
Features
- artifacts: add approved native DMG traversal (24d000a)
- process: add deterministic capture v3 (d0e21f9)
- process: add deterministic capture v3 (5a361a6)
- process: introduce evidence-safe capture v4 (ee4d284)
Bug Fixes
- artifacts: diagnose unpacked ASAR integrity failures (a504342)
- ci: remove redundant process exports (19bb231)
- process: harden capture validation and cleanup (ac78de0)
Code Refactoring
Documentation
- document capture v4 and native mounts (aca518b)
- document process capture v3 (50f4a29)
- process: preserve capture invariants (841990b)
- skill: document capture v4 and DMG mounts (f0a9a3c)
Tests
- process: use deterministic hang fixture (ba15d16)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Rea
All releases →Related context
Related tools
Earlier breaking changes
- vrea-agents-2.0.0 mcp now requires Evidence for managed reconstruction.
- vrea-agents-1.0.0 contracts APIs now return structured discriminated output shapes
- vrea-agents-0.3.0 rename identity package and CLI to REA
- vrea-0.2.0 rename identity package and CLI to REA
Beta — feedback welcome: [email protected]