This release fixes issues for SREs watching stability and regressions.
✓ No known CVEs patched in this version
Topics
+5 more
Summary
AI summaryFixed three bugs: Grep tool nudge support, Windows path normalization for Git Bash, and semantic-cache anchoring with --out.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Bugfix | Medium |
Graphify-first search nudge now triggers for Grep tool in addition to Bash. Graphify-first search nudge now triggers for Grep tool in addition to Bash. Source: llm_adapter@2026-07-18 Confidence: high |
— |
| Bugfix | Medium |
Graphify exe path uses forward slashes on Windows to avoid Git Bash escape stripping. Graphify exe path uses forward slashes on Windows to avoid Git Bash escape stripping. Source: llm_adapter@2026-07-18 Confidence: high |
— |
| Bugfix | Medium |
Semantic-cache writes with `--out` now anchor correctly for round‑trip cache operations. Semantic-cache writes with `--out` now anchor correctly for round‑trip cache operations. Source: llm_adapter@2026-07-18 Confidence: high |
— |
| Bugfix | Medium |
Alias‑based named re‑exports no longer emit dangling absolute‑path symbol targets. Alias‑based named re‑exports no longer emit dangling absolute‑path symbol targets. Source: llm_adapter@2026-07-18 Confidence: high |
— |
Full changelog
- Fix: the graphify-first search nudge now fires on Claude Code's dedicated Grep tool, not just Bash (#1986, thanks @mdshzb04). The installed PreToolUse hook only matched
Bash, so aGreptool call (whosetool_inputis{pattern, path, glob, ...}, not{command}) slipped through and never got nudged towardgraphify query. The matcher is nowBash|Grepand the search guard recognizes the Grep shape; it stays nudge-only (never the strict deny), and the uninstall filters + #1840 gating are unchanged. - Fix: installed hook commands now use forward slashes in the graphify exe path so Git Bash doesn't strip them (#1987, thanks @varuntej07). On Windows the resolved exe path had backslashes, which Git Bash (how Claude Code shells hooks) treats as escapes and drops, breaking the hook with "command not found".
_resolve_graphify_exenow normalizes\to/at the single choke point, covering every emitter (Claude/CodeBuddy PreToolUse, Gemini BeforeTool, Codex); quoting and the--strictsuffix are preserved and POSIX is unaffected. - Fix: with
--out, semantic-cache writes now anchor correctly so the cache round-trips (#1990, #1991, thanks @mdshzb04). The final semantic-cache save resolved a relativesource_fileagainst the output dir and wrote 0 entries, and per-chunk recovery checkpoints landed in the wrong directory (under the corpus instead of--out). Cache entries now key on the scan root (portable, matching #1989) while the cache directory sits at the output root, socheck/save/checkpoint/prune all agree; composes with the #1989 salt-keying and #1939 prompt-fingerprint namespacing. - Fix: alias-based named re-exports no longer emit dangling absolute-path symbol targets (#1983, thanks @oleksii-tumanov).
export { X as Y } from './mod'produced are_exportsedge whose symbol target was an absolute-path-prefixed id with no matching node — the symbol-level residual left by #1967 (imports-only) and #1976 (file-level). The aliased re-export target is now rewritten to the canonical symbol node when unambiguous; external re-exports and owned ids are left untouched, so no real edge is dropped.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About graphify
AI coding assistant skill (Claude Code, Codex, OpenCode, Cursor, Gemini CLI, OpenClaw, Factory Droid, Trae). Turn any folder of code, docs, papers, images, videos, or YouTube links into a queryable knowledge graph
Beta — feedback welcome: [email protected]