claude-flow

v3.25.3 Bugfix

This release fixes issues for SREs watching stability and regressions.

Published 19d AI Agents & Assistants

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

agentic-ai agentic-framework agentic-workflow agents ai-agents ai-assistant

+14 more

ai-coding ai-skills autonomous-agents claude-code codex harness mcp-server multi-agent multi-agent-systems npm skills swarm swarm-intelligence typescript

Summary

AI summary

Updates Packages, https://github.com/ruvnet/ruflo/issues/2596, and https://github.com/ruvnet/ruflo/issues/2561 across a mixed release.

Full changelog

Consolidated patch release. All 10 fixes investigated + implemented + validated + guarded in parallel via workflow orchestration in a single session.

Fixes

| # | Title | Guard |
|---|-------|-------|
| #2561 | npx cold-install timeout — pruned CLI optionalDependencies | .github/workflows/no-cli-optdep-bloat-2561.yml |
| #2566 | GAIA isAnswerCorrect reverse-substring collision | unit test |
| #2575 | neural status ReasoningBank Empty vs 7798 patterns display | (fix-only) |
| #2578 | ADR-104 phantom agentic-flow/transport/loader witness marker | .github/workflows/no-phantom-agentic-flow-subpath.yml |
| #2590 | CI Node24 memory smoke fails on onnxruntime-node postinstall | in-workflow guard |
| #2593 | helpers.manifest.json stale — verify + sign in prepublishOnly | .github/workflows/helpers-manifest-guard.yml |
| #2594 | memory store UNIQUE violation — flip --upsert default to true | unit test |
| #2596 | memory init Windows EPERM — drop sql.js writeback race | unit test |
| #2599 | doctor: @claude-flow/memory NOT resolvable — self-heal | unit test |
| #2600 | Windows shim @latest vs @alpha dist-tag parity | smoke test |

Also resolves #2583 (env-var-precedence audit) — already fixed on main by #2586.

Known limitation

The tarballs for this release ship with the pre-existing stale helpers.manifest.json (version 3.23.0) because the local publish environment did not have the GCP signing secret available. The #2593 fix guards future releases from regressing — 3.25.4 will properly re-sign the manifest to close the loop.

Install

npx [email protected]
npx ruflo@latest
npx claude-flow@v3alpha
npx @claude-flow/cli@alpha

All three legacy dist-tags (latest, alpha, v3alpha) point to 3.25.3 for backward compatibility.

Packages

🤖 Generated with RuFlo

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track claude-flow

Get notified when new releases ship.

About claude-flow

Deploy multi-agent swarms with coordinated workflows.

All releases →