Releases: gromhacks/bonsai-ninja
Release list
v0.3.1
Highlights
- More accurate compiler evidence for constructor/receiver state, Swift getters
and callbacks, Python argument expressions, and saved-file cache refresh. - Security-rule and sanitizer-context corrections across the 20 supported
languages, backed by independent unsafe/safe controls and near-miss tests. - Consistent severity colors, readable narrow-terminal layouts, leading
source/sink locations and call chains, and progress output that stays out of
streamed reports. - Exact export identities and storage/return relations, atomic report writes,
and explicit warnings for unsupported dependency-manifest coverage. - Consistent repeatable filters, complete security-evidence matching, exact
cursor ownership, and compiler-scoped flow/group drilldowns. Filtering a
known ID to an empty result no longer reports it as unknown. - Grammar-owned string/comment lengths across all 20 adapters, complete PHP
nowdocs, and removal of type keywords from literal inventories. File-scoped
entrypoints retain cross-module callers, and variable filters include nested
and compound RHS call facts. - A refreshed Python terminal walkthrough at the top of the README. Downloadable
archives now include its GIF alongside the documentation, skills, rule sources,
and export schemas. Shared crates.io documentation uses absolute links so its
demo and guides resolve correctly from every package. - Hosted compiler-command timing checks now have a measured runner allowance;
local performance limits and exact analysis work remain unchanged.
Compatibility
Native JSON exports use schema version 14. Consumers should check
schema_version and use the bundled
v14 schema.
The default compressed graph remains an exact representation; materializing
propagation rows does not enable additional analysis.
This pre-1.0 minor release changes public SDK error and ambiguity outcome
types and adds optional lexical body lengths. Upgrade the packages together
and follow the 0.2-to-0.3 migration guide.
Compiler-object ABI 206 refreshes older derived sidecars automatically.
All 45 public Cargo packages share version 0.3.1 with exact internal
dependency pins. The conformance and testkit crates remain repository-only.
cargo install bonsai-ninja --locked --version 0.3.1Native archives are available for Linux, macOS, and Windows, on x64 and arm64,
with SHA-256 checksums and signed build provenance.
Verification
Local validation passed 8,377 workspace tests, all 12 Elasticsearch
scale tests, 5,119 command/filter checks across 20 languages, all
11,919 enabled rule examples, and 72 release/validator script tests.
The local reference-host performance limits and 3 GiB scheduling budget were
unchanged.
Main-branch CI and all ten release jobs
passed. Post-publication readback verified all 45 crate source archives against
the tagged commit, plus checksums, signed provenance, and all 827 packaged
documentation, skill, schema, rule, and asset files in each of the six native
archives. The downloaded macOS arm64 binary also passed fresh-cache relocated
taint analysis.
See the
verification record
for scope, measurements, and the publication checklist.
Static analysis still has documented modeling and dependency-frontend limits;
inspect completion metadata and evidence before treating a report as a complete
negative result.
Full changelog: v0.2.15...v0.3.1