Posts
-
ghscanscope v0.4.0 Adds CISA Known Exploited Vulnerabilities Integration
ghscanscope v0.4.0 was released on 2026-11-12. This release adds first-class support for CISA Known Exploited Vulnerabilities and modernizes JSON handling for more reliable findings output. ghscanscope remains a local-first workbench for syncing, triaging, and finding patterns in GitHub code-scanning alerts. With v0.4.0 the tool now connects your code-scanning findings to the official CISA KEV catalog, making it easier to surface alerts for vulnerabilities that are actively exploited in the wild. What’s new CISA KEV catalog integration A new ghscanscope kev...
Read article -
frontmatterkit v0.2.3 released
On 2026-11-08, frontmatterkit v0.2.3 shipped as a maintenance release for the Unix-style CLI that validates, queries, and minimally updates front matter in Markdown files. There are no new commands or behavioral changes for users in this version; the update focuses on build hygiene, dependency freshness, and improved security scanning in the project’s CI pipeline. If you rely on frontmatterkit in CI or pipelines, this release is a safe, drop-in refresh. What’s new v0.2.3 does not add features or change how...
Read article -
ghrepocfg v0.4.0 Adds First-Class Encrypted Secrets Management
ghrepocfg v0.4.0 was released on 2026-11-03. This release adds first-class support for deploying locally encrypted repository secrets for GitHub Actions, Agents, Codespaces, and Dependabot, while keeping existing repository settings management fully compatible. It’s a practical step toward fully declarative GitHub repository configuration without storing plaintext secrets. What’s new v0.4.0 introduces ghrepocfg secrets apply, a new subcommand dedicated to uploading encrypted secrets. The configuration schema now includes actions.secrets, agents.secrets, codespaces.secrets, and dependabot.secrets sections. Each entry requires repository, key_id, and encrypted_value, the...
Read article -
chromadb-repo-indexer v1.2.1 Released
On October 24, 2026, chromadb-repo-indexer v1.2.1 was released. This is a maintenance update focused on keeping the project healthy and up to date. There are no functional changes to the indexer or CLI, and no breaking changes or new user-facing options. The release brings fresh dependencies, updated CI tooling, and improved internal security monitoring that supports long-term stability for users syncing repository content to ChromaDB. What’s new Version 1.2.1 updates core runtime dependencies including tree-sitter-language-pack, llama-index-core, and charset-normalizer, along with...
Read article -
repver v0.6.4: Visible Git Actions
repver v0.6.4 was released on 2026-10-24. This release improves observability of the Git workflow without changing how replacements work. When repver runs with Git actions enabled, successful steps are now confirmed in normal output, making it easy to verify that branches, commits, pushes and pull requests completed as expected. What’s new The primary change is reporting completed Git actions in normal command output. Previously, successful Git steps were only visible with --debug, leaving users unsure whether a run finished correctly...
Read article -
ghprmerge v0.9.2 Released
ghprmerge v0.9.2 was released on 2026-10-23. This release is a focused bug-fix update for the CLI that automatically evaluates and merges GitHub pull requests across an organization. The change corrects how ghprmerge interprets GitHub check runs. Previously, only check runs with a success conclusion were treated as passing, which caused PRs with intentionally skipped or neutral checks to be reported as failing. v0.9.2 aligns readiness evaluation with GitHub’s semantics so those PRs can be correctly assessed and merged. What’s new...
Read article -
mcp-chromadb-repo-search v1.2.3 — Security Rebuild for Trusted Binaries
On October 22, 2026, mcp-chromadb-repo-search v1.2.3 was released. This is a security-focused rebuild with no functional changes to the server itself. The binaries for this release were rebuilt using Go 1.27.3 to distrust the compromised eMudhra intermediate certificate authorities referenced as GO-2026-6809 / CVE-2026-111943. For users, this means you can continue using the same MCP server for semantic repository search with the same configuration and behavior, now from a toolchain that reflects current security guidance. What’s new v1.2.3 does not...
Read article -
ghrepocfg v0.3.1 — Security Rebuild for Compromised CAs
On 2026-10-22, ghrepocfg v0.3.1 was released. This version is a security-focused rebuild with no functional changes to the tool itself. The binaries have been rebuilt with Go 1.27.3 to distrust the compromised eMudhra intermediate CAs referenced in GO-2026-6809 / CVE-2026-111943. For users, v0.3.1 is a drop-in replacement for v0.3.0 that ensures the toolchain used to build the binaries is no longer vulnerable. What’s new v0.3.1 introduces no new features, improvements, or bug fixes for end users. The application source code...
Read article -
gologhttpbinary v0.3.3 Released: Security Rebuild
gologhttpbinary v0.3.3 was released on 2026-10-22. This release is a security-focused rebuild with no functional changes to the HTTP logging server. The Docker image is rebuilt with Go 1.27.3 to incorporate distrust of compromised eMudhra intermediate CAs, addressing GO-2026-6809 / CVE-2026-111943. Users get the same logging behavior with an updated build toolchain and no migration steps required. What’s new v0.3.3 contains no new features, bug fixes, or API changes. The application code in main.go is unchanged, so request handling, log...
Read article -
prompt2json v0.7.1 — Security Rebuild Release
prompt2json v0.7.1 was released on 2026-10-22. This release is a security-focused rebuild with no functional changes from v0.7.0. The binaries are rebuilt with Go 1.27.3 to distrust compromised eMudhra intermediate CAs referenced in GO-2026-6809 / CVE-2026-111943, ensuring the toolchain trust store used during builds is up to date. What’s new Security rebuild: v0.7.1 artifacts are built with Go 1.27.3 to apply the CA distrust fix for eMudhra intermediate certificates. No functional code changes: CLI behavior, providers, JSON Schema enforcement, decisions...
Read article
subscribe via RSS