This release includes breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+14 more
ReleasePort's take
Light signalv1.42.0 introduces preflight checks and doctor hints for first‑run initialization, improves daemon opt‑out handling, refines quality analysis exclusions, async‑ifies topology scans, and adds registry integrity reporting.
Why it matters: Addresses five bug fixes (severity 30‑40) across init, daemon, quality, topology, and registry components; operators should review the changes before upgrade to ensure compatibility.
Summary
AI summaryUpdates Bug Fixes, 1.42.0, and 2026-06-08 across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
Adds preflight checks and doctor hints for first-run initialization. Adds preflight checks and doctor hints for first-run initialization. Source: llm_adapter@2026-06-11 Confidence: high |
— |
| Bugfix | Medium |
Fixes daemon to respect explicit opt‑out, keeping removed daemon gone. Fixes daemon to respect explicit opt‑out, keeping removed daemon gone. Source: llm_adapter@2026-06-11 Confidence: high |
— |
| Bugfix | Medium |
Makes topology subproject client‑call scan asynchronous to unblock the event loop. Makes topology subproject client‑call scan asynchronous to unblock the event loop. Source: llm_adapter@2026-06-11 Confidence: high |
— |
| Bugfix | Medium |
Adds registry doctor report for DB integrity and prune to remove stale rows. Adds registry doctor report for DB integrity and prune to remove stale rows. Source: llm_adapter@2026-06-11 Confidence: high |
— |
| Bugfix | Low |
Excludes .env* files from code‑smell scanning in quality checks. Excludes .env* files from code‑smell scanning in quality checks. Source: llm_adapter@2026-06-11 Confidence: high |
— |
Full changelog
1.42.0 (2026-06-08)
Features
Bug Fixes
- daemon: respect explicit opt-out so removed daemon stays gone (#202) (1aca174)
- quality: exclude .env* files from code-smell scanning (3be2c25)
- registry: doctor reports registry/DB integrity, prune removes stale rows (#168) (b6550ce)
- topology: make subproject client-call scan async to unblock the event loop (e9316ab), closes #198
Documentation
- config: add stdio vs HTTP setup guide for per-repo and team use (ba80138)
- project-model: document one-project-per-session model + serve-http log (#199) (14bb2ca)
Upgrade
npm install -g trace-mcp@latest
trace-mcp init
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About nikolai-vysotskyi/trace-mcp
Framework-aware code intelligence that indexes source code into a cross-language dependency graph. Understands framework semantics — routes, ORM relations, component rendering, DI trees — for navigation, impact analysis, call graphs, refactoring, security scanning, and cross-session memory.
Related context
Related tools
Earlier breaking changes
- v1.41.1 Removes desktop app from core repository (phase E).
Beta — feedback welcome: [email protected]