This release adds 6 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+14 more
Summary
AI summaryAdded LLM-driven extraction and semantic deduplication to memory module.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
auto-rebuild embedding index on provider/model mismatch auto-rebuild embedding index on provider/model mismatch Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Feature | Medium |
wire P0.1 auto-rebuild into embed_repo, pipeline, verify_index wire P0.1 auto-rebuild into embed_repo, pipeline, verify_index Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Feature | Medium |
add LLM-driven extraction strategy to mine_sessions add LLM-driven extraction strategy to mine_sessions Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Feature | Medium |
hard recall timeout for wake_up / query_decisions / feature_context hard recall timeout for wake_up / query_decisions / feature_context Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Feature | Medium |
incremental cursor for session mining incremental cursor for session mining Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Feature | Medium |
LLM-driven semantic dedup via consolidate_decisions tool LLM-driven semantic dedup via consolidate_decisions tool Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Feature | Medium |
project memo (L3 orientation digest) — synthesis + tools + wake-up integration project memo (L3 orientation digest) — synthesis + tools + wake-up integration Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Feature | Medium |
wire decision clusters MCP tools + wake-up topics wire decision clusters MCP tools + wake-up topics Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Feature | Medium |
split response into stable+dynamic regions for prompt-cache friendliness split response into stable+dynamic regions for prompt-cache friendliness Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Bugfix | Medium |
Electron auto-update also refreshes the npm CLI Electron auto-update also refreshes the npm CLI Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Bugfix | Medium |
apply-pending-update strips inherited NO_POSTINSTALL + README count apply-pending-update strips inherited NO_POSTINSTALL + README count Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Bugfix | Medium |
allow “warnings” in tools.meta_fields enum allow “warnings” in tools.meta_fields enum Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Bugfix | Medium |
P3 meta cleanup — coach allowlist, verdict split, visible clamps P3 meta cleanup — coach allowlist, verdict split, visible clamps Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Bugfix | Medium |
postinstall enables + bootstraps plist on first install postinstall enables + bootstraps plist on first install Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Bugfix | Medium |
defensive access to memory.recall config in tool handlers defensive access to memory.recall config in tool handlers Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Bugfix | Medium |
P2 UX/correctness pass on intel surface P2 UX/correctness pass on intel surface Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Bugfix | Medium |
P1 false-positive + silent-empty pass P1 false-positive + silent-empty pass Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Bugfix | Medium |
P0 safety + correctness pass on apply/plan tools P0 safety + correctness pass on apply/plan tools Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Bugfix | Medium |
embed-repo fake VectorStore must mirror to symbol_embeddings + re-enable in CI embed-repo fake VectorStore must mirror to symbol_embeddings + re-enable in CI Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
Full changelog
1.39.0 (2026-05-18)
Features
- ai: auto-rebuild embedding index on provider/model mismatch (427ec4e)
- ai: wire P0.1 auto-rebuild into embed_repo, pipeline, verify_index (30f516b)
- memory: add LLM-driven extraction strategy to mine_sessions (3a44a47)
- memory: hard recall timeout for wake_up / query_decisions / feature_context (d6115b8)
- memory: incremental cursor for session mining (28c9d3c)
- memory: LLM-driven semantic dedup via consolidate_decisions tool (fd50305)
- memory: project memo (L3 orientation digest) — synthesis + tools + wake-up integration (1ac7e5e)
- memory: wire decision clusters MCP tools + wake-up topics (bad337b)
- wake_up: split response into stable+dynamic regions for prompt-cache friendliness (926aaa0)
Bug Fixes
- app: Electron auto-update also refreshes the npm CLI (f73055b)
- ci: apply-pending-update strips inherited NO_POSTINSTALL + README count (1607a03)
- config: allow "_warnings" in tools.meta_fields enum (b9990e4)
- hooks,evidence,gate: P3 meta cleanup — coach allowlist, verdict split, visible clamps (9ed8a2a)
- install: postinstall enables + bootstraps plist on first install (b2b2113)
- memory: defensive access to memory.recall config in tool handlers (c38b9e4)
- navigation,memory,analysis: P2 UX/correctness pass on intel surface (475c285)
- quality,refactoring,analysis: P1 false-positive + silent-empty pass (53e55b7)
- refactoring: P0 safety + correctness pass on apply/plan tools (005fd64)
- test: embed-repo fake VectorStore must mirror to symbol_embeddings + re-enable in CI (5cb9ffb)
Chores
- gitignore: ignore .claw/, daemon*.log, run-benchmark.ts (developer-local debris) (2fc9779)
Upgrade
npm install -g trace-mcp@latest
trace-mcp init
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About nikolai-vysotskyi/trace-mcp
Framework-aware code intelligence that indexes source code into a cross-language dependency graph. Understands framework semantics — routes, ORM relations, component rendering, DI trees — for navigation, impact analysis, call graphs, refactoring, security scanning, and cross-session memory.
Related context
Related tools
Earlier breaking changes
- v1.41.1 Removes desktop app from core repository (phase E).
Beta — feedback welcome: [email protected]