This release includes 2 breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+14 more
Summary
AI summaryParser now correctly scopes non‑boolean flags to subcommands and restores hooks route --parallel as the primary MoA fanout flag.
Full changelog
Follow-up to v3.32.13 that closes the last thing I left as a documented workaround.
Fixed
Parser: subcommand's non-boolean flag now overrides the global boolean set. The prior getBooleanFlags() walked every registered command + subcommand and merged all boolean options into one flat set that governed value-consumption everywhere. Any command anywhere declaring a name as boolean poisoned that name on every other command. That forced the --moa-parallel rename in v3.32.13. Fix: getScopedBooleanFlags now REMOVES flags from the boolean set when the resolved subcommand declares them as non-boolean. Narrowest scope wins.
hooks route --parallel restored as the canonical MoA fanout flag (with short -p). --moa-parallel kept as a deprecated compat alias for anyone who upgraded to v3.32.13 in the ~15-minute window before this patch.
Test plan run
- Parser tests: 55/55 → 56/56 (new regression test guarding the scoping fix)
hooks route --mode moaE2E matrix, all pass:--parallel 5→ 5,--moa-parallel 6→ 6,-p 4→ 4, default → 3, both-passed → canonical wins.
Upgrade
npx ruflo@latest --version # → 3.32.14
Breaking Changes
- Removed global merging of all boolean flags; subcommand non‑boolean declarations now override and remove those names from the global set.
- Deprecated alias `--moa-parallel` for `hooks route --parallel`; future versions will drop it.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Beta — feedback welcome: [email protected]