Codeep

v2.7.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1mo AI Agents & Assistants

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 1 known CVE

Topics

ai ai-agent ai-agents ai-tools cli-app

Affected surfaces

auth

Summary

AI summary

Compiled binaries report correct version and ACP editor sessions no longer mutate the global confirmation setting.

Changes in this release

Type	Severity	Summary	CVE
Feature
Feature	Low	Adds YAML review config support (.codeep/review.yml/.yaml). Adds YAML review config support (.codeep/review.yml/.yaml). Source: llm_adapter@2026-06-09 Confidence: high	—
Feature	Low	Adds `codeep hook install` for git pre‑commit/pre‑push enforcement. Adds `codeep hook install` for git pre‑commit/pre‑push enforcement. Source: llm_adapter@2026-06-09 Confidence: high	—
Feature	Low	Adds `codeep review --rules` to list built‑in rule IDs. Adds `codeep review --rules` to list built‑in rule IDs. Source: llm_adapter@2026-06-09 Confidence: high	—
Feature	Low	Adds `codeep review --ai` opt‑in second‑opinion advisory section. Adds `codeep review --ai` opt‑in second‑opinion advisory section. Source: llm_adapter@2026-06-09 Confidence: high	—
Bugfix
Bugfix	Medium	Fixes keychain fallback sweep to automatically store API keys once the OS keychain becomes available. Fixes keychain fallback sweep to automatically store API keys once the OS keychain becomes available. Source: llm_adapter@2026-06-09 Confidence: high	—
Bugfix	Medium	Fixes compiled binary version reporting to bake the correct version at build time. Fixes compiled binary version reporting to bake the correct version at build time. Source: llm_adapter@2026-06-09 Confidence: low	—
Bugfix	Medium	Fixes ACP confirmation setting to be scoped per‑run without mutating global config. Fixes ACP confirmation setting to be scoped per‑run without mutating global config. Source: llm_adapter@2026-06-09 Confidence: low	—
Bugfix	Low	Bakes the correct version string into compiled binaries so `--version` reports accurately. Bakes the correct version string into compiled binaries so `--version` reports accurately. Source: granite4.1:30b@2026-06-09-audit Confidence: low	—
Bugfix	Low	Scopes ACP editor session confirmation setting per‑run, preventing global config mutation and race conditions. Scopes ACP editor session confirmation setting per‑run, preventing global config mutation and race conditions. Source: granite4.1:30b@2026-06-09-audit Confidence: low	—

Full changelog

A batch of review tooling: YAML review config, a codeep hook install pre-commit reviewer, codeep review --rules to list rule ids, and an opt-in codeep review --ai second opinion. Plus fixes: compiled binaries report the real version (no more "vunknown"), ACP editor sessions no longer mutate the global confirmation setting, and keychain-fallback keys get swept into the keychain once it's available.

Added

YAML review config. .codeep/review.yml / .codeep/review.yaml are now
supported alongside .codeep/review.json (YAML preferred when present).
Single-quoted YAML keeps regex backslashes literal (pattern: '\bfoo\('),
avoiding JSON's double-escaping. Same schema; format is auto-detected.
codeep hook install — installs a git pre-commit (or --pre-push) hook
that runs codeep review --fail-on <level> on your changes, blocking the
commit when issues at/above the threshold are found (honors .codeep/review.*,
no API key). codeep hook uninstall removes it; Codeep never overwrites a hook
it didn't create.
codeep review --rules — lists the built-in rule ids (the values you can
put in disable in .codeep/review.*) and exits.
codeep review --ai — opt-in: after the offline pass, asks your configured
provider for a contextual second opinion, merged into the report as a clearly
tagged advisory section. Needs an API key (degrades to deterministic-only
without one) and never affects the exit code — the deterministic review stays
authoritative, so CI (the GitHub Action) is unchanged.

Fixed

Keychain fallback sweep. If the OS keychain was unavailable on a prior run,
API keys fell back to plaintext config. They're now swept into the keychain
automatically once it becomes available (completes the 2.5.2 key-storage work).
Compiled binary version. The standalone binaries printed "Codeep
vunknown" because they read the version from package.json, which isn't on
disk in a compiled binary. The version is now baked in at build time, so
--version is correct everywhere (npm, Homebrew, and the standalone binaries).
ACP confirmation setting no longer leaks/races. Manual-mode editor
sessions used to flip the global agentConfirmWriteFile config and restore it
non-atomically around each prompt — which could leak the session's mode into
the terminal app and race when prompts overlapped. Write/edit confirmation is
now scoped to the run via a per-call option, with no global config mutation.

Security Fixes

Keychain fallback sweep: API keys stored in plaintext are automatically migrated to the OS keychain when it becomes available

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Codeep

Get notified when new releases ship.

About Codeep

All releases →

Related context

Related tools

Earlier breaking changes

v2.8.0 `codeep account push` and `account sync` no longer transfer API keys unless `/keysync on` is enabled
v2.4.1 MiniMax M3 replaces MiniMax-M2.7 as default model across all providers.
v2.0.0 McpServer protocol now optional fields `command`, `args`, plus new `url` and `headers`; version bumped to 2.0.0.