Skip to content

v3.15.15: init stops pre-approving a foreign package

Choose a tag to compare

View all tags
@proffesor-for-testing proffesor-for-testing released this 26 Oct 17:26
· 56 commits to main since this release
v3.15.15
1d0cc76
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's New

  • Security: aqe init no longer gives Claude Code standing permission to run @anthropics/agentic-qe, a package name AQE does not own. Interactive aqe init no longer registers it as the MCP server either. Run aqe init again in existing projects to remove those entries; your other settings are kept. If you use --no-mcp, delete any leftover @anthropics/agentic-qe server from .mcp.json yourself. See advisory GHSA-chjc-8q37-52fg.
  • Agent Booster WASM ships in the package, so code transforms run as WASM again instead of falling back to pattern matching (#1241).
  • A dream no longer freezes the MCP server while another process holds the database lock (#1253).

Getting Started

npx agentic-qe init --auto

See CHANGELOG for full details.

Assets 2
Loading