v1.6.9

GitNexus v1.6.9

The multi-repo API-tracing release. group now resolves HTTP routes and consumers across files, frameworks, and repos — including a cross-repo call trace over the PDG — while the default workspace index quietly follows whatever branch you have checked out, and taint modeling rounds out Java and Python.

✨ Highlights

• 🌐 Cross-repo call trace over the PDG — group can trace the shortest call path across a ContractLink between two repositories, not just within one. (#2269)
• 🔗 HTTP handler resolution goes cross-file and inline for group — named handlers defined in another file, and inline provider handlers resolved by call-site line. (#2275, #2277, #2276, #2282)
• 🍃 HTTP route/consumer extraction rounded out — Java and Kotlin HTTP consumer extraction expanded with Kotlin Spring provider parity, Django route extraction for multi-repo group, and a Spring DI resolver for @Autowired List<T> injection. (#2268, #2254, #1836, #2200)
• 🌱 Taint source/sink models added for Java and Python, alongside the intra/inter-procedural taint engine shipped in 1.6.8. (#2267, #2253)
• 🌿 The default (non-multi-branch) workspace index now follows the checked-out branch instead of staying pinned to whichever branch it was created on. (#2364)
• 🔍 Search gets sharper — opt-in CJK bigram segmentation for FTS, a configurable FTS stemmer and vector distance threshold, and more compact, description-forward embedding text. (#2339, #2307, #2330, #2333, #2334)

---

🚀 Added

• Flat workspace index follows the checked-out branch — the default (non-multi-branch) index now tracks git checkout instead of staying pinned to the branch it was created on (#2364)
• Spring DI resolver for @Autowired List<T> injection — collection-typed constructor/field injection resolves to all matching bean implementations (#2200)
• Opt-in CJK bigram segmentation for FTS search — improves search relevance over Chinese/Japanese/Korean text (#2339)
• Compact, description-forward embedding text — shorter, more targeted embedding input for symbol search (#2333, #2334)
• Route nodes get a (method, url) identity — distinct HTTP verbs on the same URL are no longer merged into one node (#2289, #2302)
• Nuxt/Nitro auto-imports resolved in the TypeScript scope resolver (#2026)
• Doc comments searchable across all languages via FTS (#2286)
• Cross-file and inline HTTP handler resolution for group — named handlers across files (#2275, #2277) and inline provider handlers via call-site line (#2276, #2282)
• Cross-repo call trace using PDG for group (#2269)
• Java and Python conservative taint source/sink models (#2267, #2253)
• Java and Kotlin HTTP consumer extraction expanded, with Kotlin Spring provider parity (#2268, #2254, #1888)
• Django route extraction for multi-repo group (#1836)
• Kilo Code + GitNexus MCP setup guide (#2259)

🐛 Fixed

• Index metadata renamed to gitnexus.json with dual-write compatibility for existing indexes (#2363)
• Java call graph — cast-wrapped and this.method() receivers now resolve call edges (#2357)
• Icon imports consolidated — fixes stale refs and a package-name collision (#2343)
• Embeddings — CUDA 13 hosts now use a system-matched onnxruntime-node build for GPU acceleration (#2341)
• Ladybug single-writer transaction contention now retries instead of failing (#2342)
• --limit CLI flag — i18n-safe, guards 0/negative values, and truncates at the correct path (#2310)
• Ladybug pinned to 0.18.0, validating the multi-writer deadlock fix (#2340)
• Full text file content stays searchable in the FTS index (#2323)
• Vector distance threshold made configurable (#2330)
• LadybugDB-incompatible multi-label Cypher replaced in group queries (#2325, #2327)
• Windows @group reopen — read-only bridge handle is cached to fix repeated reopen failures (#2274, #2313)
• FTS stemmer made configurable (#2307)
• FastAPI APIRouter constructor prefixes applied to nested routes (#2312)
• MCP api_impact response shape stabilized for same-URL multi-verb routes (#2308, #2309)
• Generator function declarations indexed (#2305)
• FTS indexes the description field so doc comments are keyword-searchable (#2300)
• Spring interface-inherited routes resolved (#2288, #2290)
• Spring method-level array-form route mappings recognized (#2281)
• MCP impact callgraph mode tolerates adapter-materialized line:0 (#2279, #2283)
• Kotlin fun interface extraction via a tree-sitter-kotlin re-vendor (#2271)
• --pdg analyze double-free fixed — LadybugDB close-destructor crash avoided and connection serialization hardened (#2264)

🔧 Changed

• Root README restructured and all READMEs fact-checked (#2360)
• Bundled skill reference drift fixed in docs (#2362)

⚡ Performance

• group/HTTP route extraction skips source parsing for files already covered by the graph (#2138 Part 2, #2265)

📦 Chore / Dependencies — 20 dependency & CI-action bumps

• gitnexus runtime — node-addon-api 8.8.0 → 8.9.0 (#2366), commander 14.0.3 → 15.0.0 (#2322), onnxruntime-node (#2321), onnxruntime-common (#2320), uuid 14.0.0 → 14.0.1 (#2285)
• gitnexus dev — @types/node (#2273)
• gitnexus-web — lucide-react (#2349), @langchain/langgraph (#2344), @playwright/test (#2346), @langchain/openai (#2348, #2291), @langchain/google-genai (#2345), langchain 1.4.4 → 1.4.6 (#2294), @vitest/coverage-v8 (#2297), lru-cache 11.3.6 → 11.5.1 (#2298), @langchain/core (#2293)
• CI actions — softprops/action-gh-release 3.0.0 → 3.0.1 (#2352), actions/cache 5.0.5 → 6.1.0 (#2351), actions/setup-python 6.2.0 → 6.3.0 (#2350), actions/checkout 6.0.3 → 7.0.0 (#2292), release-drafter/release-drafter 7.3.1 → 7.4.0 (#2295)

---

📥 Upgrade

npm install -g gitnexus@1.6.9

Then re-index to pick up the workspace-index and Route-identity changes:

gitnexus analyze

Full changelog: v1.6.8...v1.6.9