This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+5 more
Summary
AI summaryCorrectness fixes (LLM call direction, default import edges, tsconfig alias resolution), Cache namespace/versioning changes, and Platform updates (Windows claude-cli spawning and JSON‑array handling).
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
Cargo workspace dependency extraction added. Cargo workspace dependency extraction added. Source: granite4.1:30b@2026-06-12-audit Confidence: low |
— |
| Performance | Medium |
'collect_files' is now a single pruned `os.walk`. 'collect_files' is now a single pruned `os.walk`. Source: llm_adapter@2026-06-12 Confidence: high |
— |
| Bugfix | Medium |
LLM `calls` edges now have correct direction. LLM `calls` edges now have correct direction. Source: llm_adapter@2026-06-12 Confidence: high |
— |
| Bugfix | Medium |
JS/TS default imports/exports produce symbol‑level edges. JS/TS default imports/exports produce symbol‑level edges. Source: llm_adapter@2026-06-12 Confidence: high |
— |
| Bugfix | Medium |
`tsconfig` `paths` aliases resolve relative to `baseUrl`. `tsconfig` `paths` aliases resolve relative to `baseUrl`. Source: llm_adapter@2026-06-12 Confidence: high |
— |
| Bugfix | Medium |
Dedup pass 2 picks winner only from the verified pair. Dedup pass 2 picks winner only from the verified pair. Source: llm_adapter@2026-06-12 Confidence: high |
— |
| Bugfix | Medium |
Global‑graph edges rewired to deduplicated external nodes. Global‑graph edges rewired to deduplicated external nodes. Source: llm_adapter@2026-06-12 Confidence: high |
— |
| Bugfix | Medium |
Ghost‑merge skips ambiguous `(basename, label)` keys. Ghost‑merge skips ambiguous `(basename, label)` keys. Source: llm_adapter@2026-06-12 Confidence: high |
— |
| Bugfix | Medium |
`resolve_seed` matches bare names against callable‑decorated labels. `resolve_seed` matches bare names against callable‑decorated labels. Source: llm_adapter@2026-06-12 Confidence: high |
— |
| Bugfix | Medium |
AST cache namespaced by graphify version. AST cache namespaced by graphify version. Source: llm_adapter@2026-06-12 Confidence: high |
— |
| Bugfix | Medium |
Extraction cache anchored at `--out` root. Extraction cache anchored at `--out` root. Source: llm_adapter@2026-06-12 Confidence: high |
— |
| Bugfix | Low |
Frontmatter delimiter requires whole `---` line. Frontmatter delimiter requires whole `---` line. Source: granite4.1:30b@2026-06-12-audit Confidence: low |
— |
| Bugfix | Low |
`claude-cli` spawns `claude.cmd` on Windows headless installs. `claude-cli` spawns `claude.cmd` on Windows headless installs. Source: granite4.1:30b@2026-06-12-audit Confidence: low |
— |
| Bugfix | Low |
`claude-cli` handles JSON‑array envelope from Claude Code CLI ≥ 2.1. `claude-cli` handles JSON‑array envelope from Claude Code CLI ≥ 2.1. Source: granite4.1:30b@2026-06-12-audit Confidence: low |
— |
| Bugfix | Low |
SystemVerilog class‑level extraction improved; Dart `with` emits `mixes_in`. SystemVerilog class‑level extraction improved; Dart `with` emits `mixes_in`. Source: granite4.1:30b@2026-06-12-audit Confidence: low |
— |
Full changelog
What's changed
13 fixes and improvements merged in this release.
Correctness
- Fix: LLM
callsedges now have correct direction. The extraction prompt never stated source = caller / target = callee — the LLM systematically emitted callee→caller. Explicit direction rule added to prompt. Ghost-node merge extended to collapse LLM bare-stem duplicates onto AST canonical nodes even when the LLM node has asource_location. Post-fix annotation:callsprecision 100% (n=6), overall INFERRED precision 94% (n=16). - Fix: JS/TS default imports/exports now produce symbol-level edges.
export default class Fooimported asimport Foo from './foo'previously got only a file→file edge. The class node now receives a properimportsedge and call resolution through renamed bindings works correctly. - Fix: tsconfig
pathsaliases resolved relative tobaseUrl. NestJS, monorepo, and similar layouts usingbaseUrl: "./src"now resolve@/*aliases correctly. - Fix: dedup pass 2 picks winner only from the verified pair. Unrelated same-named nodes from different files were being dragged into merges and supplanting the correct winner.
- Fix: global-graph edges rewired to deduplicated external nodes. Dangling edge references after external node dedup are now remapped before insertion.
- Fix: ghost-merge skips ambiguous
(basename, label)keys. Two same-named symbols in different files (e.g. tworenderfunctions) no longer get mis-merged. - Fix:
resolve_seedmatches bare names against callable-decorated labels. A query forrendernow finds nodes labelled.render().
Performance
- Fix:
collect_filesis now a single prunedos.walk. Replaces ~85 redundantrglobpasses; noise directories are pruned before descent.
Cache
- Fix: AST cache namespaced by graphify version. Stale cache from previous releases no longer silently produces wrong output after upgrade.
- Fix: extraction cache anchored at
--outroot.graphify extract ./src --out /tmp/outno longer leaksgraphify-out/into the scanned project. - Fix: frontmatter delimiter requires whole
---line. Thematic breaks (----) and YAML title lines (--- title: foo) no longer trigger false frontmatter parsing.
Platform
- Fix:
claude-clispawnsclaude.cmdon Windows headless installs. AddsCREATE_NO_WINDOWto both subprocess spawn sites. - Fix:
claude-clihandles JSON-array envelope from Claude Code CLI ≥ 2.1.
Features
- Feat: Cargo workspace dependency extraction.
graphify extract ./my-workspace --cargomaps Rust workspace crates and internalcrate_depends_onedges. - Fix: SystemVerilog class-level extraction improved. Dart
with MyMixinnow correctly emitsmixes_in(notimplements).
Docs
- README grammar count updated: 28 → 36 tree-sitter grammars.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About graphify
AI coding assistant skill (Claude Code, Codex, OpenCode, Cursor, Gemini CLI, OpenClaw, Factory Droid, Trae). Turn any folder of code, docs, papers, images, videos, or YouTube links into a queryable knowledge graph
Beta — feedback welcome: [email protected]