PatchFlow CLI v0.1.7

PatchFlow CLI v0.1.7

Capability and benchmark statements are governed by the
dated claim registry.
Historical benchmark results remain available in the
benchmark repository,
including their methodology and limitations.

Changelog

New Features

• 725435c: feat(cross-language): function boundary detection for all 7 languages + CWE-based safe-pattern suppression + regression corpus for all 6 taint frameworks (@malik111110)
• 35bd0b1: feat(doctor+ci): add config round-trip check to doctor and CI release gate (@malik111110)
• e3b1cc4: feat(init): generate a working .patchflow/rules.yaml with framework detection (@malik111110)
• 405f50d: feat(taint): add Go taint engine support + framework taint rules for Echo, Gin, Laravel, Symfony (@malik111110)
• 2224cd5: feat(taint): inline sanitizers, closure capture, expanded sources/sinks, taint-specific smoke test assertions (@malik111110)
• 9758555: feat: add five-minute onboarding launch gate (#21) (@malik111110)

Bug Fixes

• 097adc5: fix(config): resolve --config schema conflict between mode-override and custom-rules loaders (@malik111110)
• 6d6dcca: fix(install): resolve PATH issues and add containerized install test matrix (@malik111110)
• ea2cbe5: fix(pathutil): make output-path validation error actionable (@malik111110)
• 61e19e2: fix(taint): PHP member_call_expression/scoped_call_expression support + Go sanitizers + sinkMatches for -> (@malik111110)
• aecc89d: fix(taint): suppress -IP interprocedural findings with base-rule safe patterns + async def function boundaries (@malik111110)
• fda2aa2: fix(validator): reconcile supported languages and rule ID regex with docs (@malik111110)
• 427232e: fix: enforce machine-readable output contracts (@malik111110)
• dd248ae: fix: keep OCI image paths portable (@malik111110)
• e7ced25: fix: restore CLI release gates (@malik111110)

Other Changes

• 1d64ddf: Merge pull request #10 from Patchflow-security/agent/canonical-public-repository (@malik111110)
• b0cbd6c: Merge pull request #11 from Patchflow-security/agent/community-health-files (@malik111110)
• 6d2745e: Merge pull request #20 from Patchflow-security/agent/public-roadmap (@malik111110)
• 1675c28: Merge remote-tracking branch 'origin/main' into agent/community-health-files (@malik111110)
• 09d12e5: Merge remote-tracking branch 'origin/main' into agent/public-roadmap (@malik111110)
• 358e438: Merge remote-tracking branch 'origin/main' into agent/public-roadmap (@malik111110)
• 3fd6e36: PatchFlow CLI v0.1.2 — local-first security scanner with framework-aware SAST (@malik111110)
• 56d7909: Prepare five-minute onboarding and the reproducible public launch (#23) (@malik111110)
• 113a1ef: test(regression): add Safe-pip-backend regression corpus to release smoke matrix (@malik111110)
• 9286b6e: test(scan): add end-to-end integration tests for scan run --config (@malik111110)