Repository navigation
v3.22.5
What's new
Bug Fixes
The workflow guard can now recover when the worktree prevents a snapshot: it blocks the affected unit instead of disabling enforcement for the session. Completion reports the block reason, and stale receipts or worktree changes during completion can be retried after the underlying problem is resolved. (#1134)
Transient operation timeouts and rejected pushes are also confined to the affected call rather than making the guard permanently unavailable. A skipped or sealed call may already have run, so check local or remote state before retrying. Verification runs that overlap another local call no longer earn a receipt—even if the tree is restored before verification finishes. Rerun verification alone after all local calls return. (#1138, #1142)
Security fixes update remaining nested js-yaml v4 copies in docs and release tooling to 4.3.2, addressing YAML denial-of-service vulnerabilities. The release GitHub client's undici dependency moves to 7.30.1 to preserve custom connection/TLS checks and address that consumer's cache-disclosure and WebSocket denial-of-service advisories. (#1137, #1139)
Documentation
New solution records explain recoverable snapshot blocks, the async-commit version fence, defensive checks that cannot be proven, call-scoped timeout and push failures, and why overlapping verification is sealed. They preserve the reasoning behind these guard behaviors for future fixes. (#1136, #1140, #1143)
Also in this release
- dev: Update TypeBox to 1.3.37. (#1133)
- release: Version bookkeeping for v3.22.5.