This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+5 more
Affected surfaces
Summary
AI summaryTerraform/HCL files now generate full infrastructure dependency graphs.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
Adds full infrastructure dependency graph for Terraform/HCL files via tree-sitter-hcl. Adds full infrastructure dependency graph for Terraform/HCL files via tree-sitter-hcl. Source: llm_adapter@2026-06-05 Confidence: high |
— |
| Feature | Low |
Enables fully offline operation for code-only extracts without requiring API keys. Enables fully offline operation for code-only extracts without requiring API keys. Source: llm_adapter@2026-06-05 Confidence: high |
— |
| Dependency | Low |
Enforces minimum versions: networkx>=3.4, datasketch>=1.6, rapidfuzz>=3.0 to avoid incompatible old version breakage. Enforces minimum versions: networkx>=3.4, datasketch>=1.6, rapidfuzz>=3.0 to avoid incompatible old version breakage. Source: llm_adapter@2026-06-05 Confidence: high |
— |
| Bugfix | Medium |
Fixes `graphify kiro install` to correctly write the references/ sidecar and .graphify_version stamp. Fixes `graphify kiro install` to correctly write the references/ sidecar and .graphify_version stamp. Source: llm_adapter@2026-06-05 Confidence: high |
— |
| Bugfix | Medium |
Applies GRAPHIFY_API_TIMEOUT and --api-timeout to claude-cli subprocess and Anthropic SDK backend. Applies GRAPHIFY_API_TIMEOUT and --api-timeout to claude-cli subprocess and Anthropic SDK backend. Source: llm_adapter@2026-06-05 Confidence: high |
— |
Full changelog
What's new
- Terraform/HCL support —
.tf,.tfvars,.hclfiles now produce a full infrastructure dependency graph viatree-sitter-hcl. Resources, data sources, modules, variables, outputs, providers, and locals become nodes; interpolation references anddepends_onbecome edges. Requiresuv tool install graphifyy[terraform](#1129). - Code-only extract needs no API key —
graphify extractnow defers backend resolution until after file detection. A corpus with only code files runs fully offline — noGEMINI_API_KEY,ANTHROPIC_API_KEY, or anything else needed. Key is only required when docs, PDFs, or images are present (#1122). - Kiro install fix —
graphify kiro installnow correctly writes thereferences/sidecar and.graphify_versionstamp. Re-rungraphify kiro installto pick up the fix (#1142). - API timeout fix —
GRAPHIFY_API_TIMEOUTand--api-timeoutnow apply to theclaude-clisubprocess and Anthropic SDK backend, not just the HTTP client (#1112). - Dependency floors —
networkx>=3.4,datasketch>=1.6,rapidfuzz>=3.0prevent silent breakage from incompatible old versions resolving via pip.
Install / upgrade
uv tool install graphifyy # fresh install
uv tool upgrade graphifyy # upgrade
uv tool install "graphifyy[terraform]" # with Terraform/HCL support
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About graphify
AI coding assistant skill (Claude Code, Codex, OpenCode, Cursor, Gemini CLI, OpenClaw, Factory Droid, Trae). Turn any folder of code, docs, papers, images, videos, or YouTube links into a queryable knowledge graph
Beta — feedback welcome: [email protected]