This release includes breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+9 more
Summary
AI summaryAdded three new RPCs and improved LIP health monitoring.
Full changelog
Highlights
LIP v2.1 integration — three new RPCs wired into the query engine:
stream_context→explainFilesurfaces semantically-related symbols (top 10, 2048-token budget)query_expansion→searchSymbolsexpands short queries (≤ 2 tokens) with up to 5 related terms for better recallexplain_match→ semantic search hits carry evidence chunks with line ranges and per-chunk scores
LIP index status UX — ckb review now warns when the LIP daemon is reachable but has no index, with an actionable lip index <repo> hint. Suppressed in --ci.
Push-driven LIP health — Engine opens a long-lived connection to the daemon instead of polling on 60s TTL. Worst-case staleness drops from 60s to ~3s.
Fixes
- Bug-pattern false positive on
sync.Mutex.Lock()— removedLockfrom error-returning heuristic errshadowing insubscribe.goeliminated (4 sites)
CI & Review improvements
ckb review --no-auto-fetchfor air-gapped pipelines- Auth-error detection on auto-fetch with clear remediation guidance
NoAutoFetchparity onsummarizePr/summarizeDiffendpoints- Shallow-clone auto-fetch for CI environments
Full changelog: https://github.com/SimplyLiz/CodeMCP/blob/main/CHANGELOG.md
Tested with LIP v2.1.1.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About SimplyLiz/CodeMCP
Code intelligence MCP server with 80+ tools for semantic code search, impact analysis, call graphs, ownership detection, and architectural understanding. Supports Go, TypeScript, Python, Rust, Java via SCIP indexing.
Related context
Beta — feedback welcome: [email protected]