This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+4 more
ReleasePort's take
Moderate signalAgent Gate v0.3.1 scopes the npm package as @jinhyuk9714/agent-gate, breaking the previous unscoped identifier.
Why it matters: The unscoped `agent-gate` name no longer works; any build or install referencing it will fail after this release (severity 70).
Summary
AI summaryUpdates Highlights, migration-v0.3.0.md, and cli.md across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Breaking | High |
Breaks unscoped `agent-gate` package name; now scoped as `@jinhyuk9714/agent-gate`. Breaks unscoped `agent-gate` package name; now scoped as `@jinhyuk9714/agent-gate`. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Low |
Adds shared API-only PR collection for CLI and GitHub Action. Adds shared API-only PR collection for CLI and GitHub Action. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Low |
Adds fail-closed file-list and content integrity checks. Adds fail-closed file-list and content integrity checks. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Low |
Adds differential GitHub Actions privilege and supply‑chain findings detection. Adds differential GitHub Actions privilege and supply‑chain findings detection. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Low |
Adds exact expiring waivers and deterministic finding IDs. Adds exact expiring waivers and deterministic finding IDs. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Low |
Adds narrow, explainable agentic workflow injection detection. Adds narrow, explainable agentic workflow injection detection. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Low |
Adds bounded, sanitized human, Markdown, JSON, summary, and comment reports. Adds bounded, sanitized human, Markdown, JSON, summary, and comment reports. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Low |
Adds signed release tags and npm provenance for the exact tested tarball. Adds signed release tags and npm provenance for the exact tested tarball. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Refactor | Low |
Records scoped package identity in source before npm publication. Records scoped package identity in source before npm publication. Source: llm_adapter@2026-07-16 Confidence: high |
— |
Full changelog
Agent Gate v0.3.1 Release Notes
Agent Gate v0.3.1 is the first public CLI release of the v0.3 line. The npm
package is scoped as @jinhyuk9714/agent-gate; the executable and product name
remain agent-gate and Agent Gate.
Try It
npx --yes @jinhyuk9714/[email protected] scan owner/repo#123
The CLI analyzes public pull requests without cloning, checking out, installing,
or executing target-repository code. Private repositories and higher GitHub API
limits use GH_TOKEN, with GITHUB_TOKEN as the fallback.
Highlights
- Shared API-only PR collection for the CLI and GitHub Action.
- Fail-closed file-list and content integrity checks.
- Differential GitHub Actions privilege and supply-chain findings.
- Exact expiring waivers and deterministic finding IDs.
- Narrow, explainable agentic workflow injection detection.
- Bounded, sanitized human, Markdown, JSON, summary, and comment reports.
- Signed release tags and npm provenance for the exact tested tarball.
The v0.3.0 tag remains immutable. npm rejected its unscoped agent-gate
package name as too similar to the existing agentgate package, so v0.3.1
records the scoped package identity in source before publication.
See the v0.3 migration guidance, CLI reference,
and release checklist.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Agent Gate
All releases →Beta — feedback welcome: [email protected]