This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+5 more
Affected surfaces
Summary
AI summaryAdds a streamable HTTP MCP transport, Salesforce Apex extractor, Azure OpenAI backend, live PostgreSQL introspection, and vision/PDF handling in headless extract.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Adds Streamable HTTP MCP transport with API key auth and Docker image support. Adds Streamable HTTP MCP transport with API key auth and Docker image support. Source: llm_adapter@2026-06-07 Confidence: high |
— |
| Feature | Medium |
Adds Salesforce Apex extractor for .cls and .trigger files producing full dependency graph. Adds Salesforce Apex extractor for .cls and .trigger files producing full dependency graph. Source: llm_adapter@2026-06-07 Confidence: high |
— |
| Feature | Medium |
Adds Azure OpenAI backend via --backend azure using AZURE_OPENAI_API_KEY and AZURE_OPENAI_ENDPOINT. Adds Azure OpenAI backend via --backend azure using AZURE_OPENAI_API_KEY and AZURE_OPENAI_ENDPOINT. Source: llm_adapter@2026-06-07 Confidence: high |
— |
| Feature | Medium |
Adds Live PostgreSQL introspection via graphify extract --postgres mapping schema directly. Adds Live PostgreSQL introspection via graphify extract --postgres mapping schema directly. Source: llm_adapter@2026-06-07 Confidence: high |
— |
| Feature | Medium |
Adds Vision and PDF processing in headless extract routing images through proper vision API per backend. Adds Vision and PDF processing in headless extract routing images through proper vision API per backend. Source: llm_adapter@2026-06-07 Confidence: high |
— |
| Bugfix | Medium |
Fixes stale symbols being pruned from surviving files on full rebuild. Fixes stale symbols being pruned from surviving files on full rebuild. Source: llm_adapter@2026-06-07 Confidence: high |
— |
| Bugfix | Medium |
Fixes multi-word path/query endpoints to fire exact‑match bonus. Fixes multi-word path/query endpoints to fire exact‑match bonus. Source: llm_adapter@2026-06-07 Confidence: high |
— |
| Bugfix | Medium |
Fixes _is_sensitive false positives on topic‑mentioning filenames. Fixes _is_sensitive false positives on topic‑mentioning filenames. Source: llm_adapter@2026-06-07 Confidence: high |
— |
| Bugfix | Medium |
Fixes Git hooks to use cross‑platform Python detach instead of nohup on Windows. Fixes Git hooks to use cross‑platform Python detach instead of nohup on Windows. Source: llm_adapter@2026-06-07 Confidence: high |
— |
| Bugfix | Medium |
Fixes `graphify affected` to be direction‑blind on undirected graphs. Fixes `graphify affected` to be direction‑blind on undirected graphs. Source: llm_adapter@2026-06-07 Confidence: high |
— |
| Bugfix | Low |
Makes post-commit hook respect `.graphify_root` scoped builds. Makes post-commit hook respect `.graphify_root` scoped builds. Source: granite4.1:30b@2026-06-07-audit Confidence: low |
— |
| Bugfix | Low |
Prevents step 9 cleanup from aborting under fish/zsh on pure‑code corpora. Prevents step 9 cleanup from aborting under fish/zsh on pure‑code corpora. Source: granite4.1:30b@2026-06-07-audit Confidence: low |
— |
| Bugfix | Low |
Handles schema‑drifted manifest files gracefully in `detect_incremental`. Handles schema‑drifted manifest files gracefully in `detect_incremental`. Source: granite4.1:30b@2026-06-07-audit Confidence: low |
— |
| Refactor | Low |
Pins numpy to ≥2.0 only for Python §3.13 and newer. Pins numpy to ≥2.0 only for Python §3.13 and newer. Source: granite4.1:30b@2026-06-07-audit Confidence: low |
— |
| Refactor | Low |
Installs Codex skill to .codex/ directory instead of .agents/. Installs Codex skill to .codex/ directory instead of .agents/. Source: granite4.1:30b@2026-06-07-audit Confidence: low |
— |
Full changelog
New features
- Streamable HTTP MCP transport —
graphify serve graph.json --transport httpserves the graph over HTTP so a whole team shares one server. Includes API key auth (--api-key) and Docker image (#1143). - Salesforce Apex extractor —
.clsand.triggerfiles now produce a full dependency graph (classes, methods, triggers, SOQL/DML edges) (#1159). - Azure OpenAI backend —
--backend azurewithAZURE_OPENAI_API_KEY+AZURE_OPENAI_ENDPOINT. Auto-detected, no new dependency (#1107). - Live PostgreSQL introspection —
graphify extract --postgres "postgresql://..."maps your schema directly. Newgraphify[postgres]extra (#1093 / #1103). - Vision and PDF in headless extract — images now go through the proper vision API per backend instead of producing garbage binary data (#1109 / #1110).
Bug fixes
- Stale symbols pruned from surviving files on full rebuild (#1116 / #1118)
- Multi-word path/query endpoints now fire exact-match bonus (#1165)
_is_sensitivefalse positives on topic-mentioning filenames fixed (#1169)- Git hooks use cross-platform Python detach instead of
nohup(Windows fix) (#1161 / #1170) - Post-commit hook now respects
.graphify_rootscoped builds (#1173) graphify affecteddirection-blind on undirected graphs fixed (#1174)- Step 9 cleanup no longer aborts under fish/zsh on pure-code corpora (#1172)
detect_incrementalgracefully handles schema-drifted manifest files (#1163)- numpy pinned to
>=2.0; python_version>='3.13'only (#1153 / #1154) - Codex skill now installs to
.codex/not.agents/(#1160)
Upgrade
uv tool upgrade graphifyy
uv tool install "graphifyy[postgres]" # for PostgreSQL introspection
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About graphify
AI coding assistant skill (Claude Code, Codex, OpenCode, Cursor, Gemini CLI, OpenClaw, Factory Droid, Trae). Turn any folder of code, docs, papers, images, videos, or YouTube links into a queryable knowledge graph
Beta — feedback welcome: [email protected]