cfgraft v0.3.6 was released on 2026-11-14. This is a maintenance release focused on supply-chain hygiene, build toolchain updates, and improved security scanning for the project. There are no functional changes to the CLI or TUI compared to v0.3.5, so the upgrade is drop-in with no configuration migration required.

What’s new

This release contains no user-visible feature changes or bug fixes. The application code is identical to v0.3.5.

The update is centered on dependency and CI maintenance:

  • Go toolchain updated to 1.27.4 for builds
  • Charmbracelet ecosystem dependencies refreshed, including charm.land/bubbletea/v2 to 2.1.1 and github.com/charmbracelet/x/ansi to 0.11.9, with corresponding indirect dependency updates
  • Security scanning improved with official govulncheck SARIF scanning and weekly OSV-Scanner vulnerability scans; the superseded govulncheck-go workflow was removed
  • CI workflows updated across CodeQL, setup-uv, and dependabot groups, and the add-to-project workflow was retired in favor of ghook4action
  • Pre-built binaries are available for Darwin amd64 and arm64, Linux 386, amd64, and arm64, and Windows 386 and amd64, each with md5 and sha256 checksums

Why it matters

cfgraft is a Unix-style CLI and TUI for safely syncing files and directories from Git repositories into local configuration paths. Keeping the dependency graph current and the build pipeline secure helps maintain reliability for users who depend on stable, repeatable configuration syncs.

The Go 1.27.4 build and updated charmbracelet libraries ensure the project stays compatible with current ecosystem releases while preserving existing behavior. The addition of govulncheck SARIF scanning and weekly OSV-Scanner scans strengthens the project’s security posture without changing how cfgraft works for end users.

Because there are no breaking changes, existing configurations and workflows continue to work unchanged.

Upgrade

Upgrade is straightforward:

  • Download the pre-built binary for your platform from the GitHub Releases page for v0.3.6
  • Or install via go install github.com/UnitVectorY-Labs/cfgraft@latest
  • Or build from source with git clone https://github.com/UnitVectorY-Labs/cfgraft.git && go build -o cfgraft

No configuration migration is needed. Replace your existing binary and continue using cfgraft as before.

This post was AI-generated. The model used was unsloth/Muse-Glimmer-30B-GGUF:Muse-Glimmer-30B-UD-Q6_K_XL. Reference repository: UnitVectorY-Labs/cfgraft, release v0.3.6, date of generation 2026-11-15. Author: release-storyteller.