This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+6 more
Affected surfaces
Summary
AI summaryrequired_checks.shell_path becomes the explicit override for Windows, fixing non‑standard Bash launches.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Required‑check evidence now records both resolved shell kind and executable path launched. Required‑check evidence now records both resolved shell kind and executable path launched. Source: llm_adapter@2026-05-25 Confidence: high |
— |
| Dependency | Medium |
Packaged Claude and Codex Galley plugins updated to version 0.1.12. Packaged Claude and Codex Galley plugins updated to version 0.1.12. Source: llm_adapter@2026-05-25 Confidence: low |
— |
| Bugfix | Medium |
`required_checks.shell_path` becomes explicit override for required checks on Windows and custom shells. `required_checks.shell_path` becomes explicit override for required checks on Windows and custom shells. Source: llm_adapter@2026-05-25 Confidence: high |
— |
| Bugfix | Medium |
Recognized shell names can be used with `shell_path` alone; `required_checks.shell` is fallback metadata only. Recognized shell names can be used with `shell_path` alone; `required_checks.shell` is fallback metadata only. Source: llm_adapter@2026-05-25 Confidence: high |
— |
| Bugfix | Medium |
On Windows, `required_checks.shell: bash` now prefers Git for Windows Bash and avoids non‑standard Bash entries. On Windows, `required_checks.shell: bash` now prefers Git for Windows Bash and avoids non‑standard Bash entries. Source: llm_adapter@2026-05-25 Confidence: high |
— |
Full changelog
This patch release tightens required-check shell selection for Windows and custom shell setups.
Highlights
required_checks.shell_pathis now the explicit executable override for Galley-owned required checks.- Recognized shell executable names can be used with
shell_pathalone;required_checks.shellis only fallback metadata for unrecognized executable names. - Windows
required_checks.shell: bashnow prefers Git for Windows Bash and avoids silently launching WSL, WindowsApps, MSYS2, Cygwin, Scoop, or other non-standard Bash entries. - Required-check evidence now records both the resolved shell kind and the executable path launched.
- Packaged Claude and Codex Galley plugins are updated to
0.1.12.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Galley
Local-first runtime for supervised AI coding tasks: isolated git worktrees, supervisor review against acceptance criteria, retry/escalate loops, on-disk run evidence, and PR handoff. Supports Codex CLI and Claude Code. Go, MIT.
Related context
Beta — feedback welcome: [email protected]