Skip to content

RepoMind 2.0.0b11

Pre-release
Pre-release

Choose a tag to compare

View all tags
@raazlehra raazlehra released this 10 Oct 12:02
· 2 commits to main since this release
v2.0.0b11
b6dd660

RepoMind 2.0.0b11 is a hardening beta focused on repository trust boundaries and release validation.

Highlights

  • Hardened RepoMind index/cache containment against symlink, Windows reparse-point, and hardlink redirection.
  • Parser recursion and resource failures are isolated per file so incomplete results are discarded without aborting the full index.
  • Passive Git inspection is hardened against configured executable behavior such as fsmonitor, hooks, external diff, and textconv.
  • Ordinary Git semantics are preserved, including Windows CRLF and core.autocrlf behavior.
  • Added Linux and Windows CI plus installed-wheel release gates.
  • Verified the v2.0.0b10 to v2.0.0b11 index and manual-memory lifecycle.

Installation and compatibility

  • The wheel attached to this GitHub Release is the authoritative distribution. Do not use plain pip install repomind; that name may resolve to another project on PyPI.
  • Python 3.11-3.13 are explicitly release-tested for b11. Other Python versions are not claimed as release-tested.
  • Windows and Linux installed-wheel checks passed. macOS is not claimed as release-tested for this beta.
  • The b10 index and manual-memory upgrade path was tested against the b11 candidate.
  • Package uninstall preserves repository index, configuration, and manual memory.
  • repomind init --force rebuilds the database and removes database-only manual memory; export or preserve needed data first.

Security / reliability notes

  • RepoMind performs static analysis and does not execute recommended repository test commands; those commands remain recommendations/data only.
  • Passive Git execution paths were narrowed to prevent configured helper programs from running during inspection.
  • Parser resource failures are isolated, but RepoMind is not an operating-system sandbox.
  • Filesystem preflight validation reduces redirection risk but does not eliminate time-of-check/time-of-use (TOCTOU) races.
  • Downstream MCP clients or agents may send requested metadata or snippets to their configured provider.
  • This beta is not a security certification, does not claim every vulnerability is fixed, and does not claim exhaustive test-impact coverage.

Artifact SHA-256

  • repomind-2.0.0b11-py3-none-any.whl: 3202f593084a5f13cbe68c21bc7a2bc3c6207671a28e10303267bf0b0594ba9f
  • repomind-2.0.0b11.tar.gz: 8814e9ab9ca134fc7b34ae8b1f91030490411a29c39c8af5c660bb8dacb24938
Assets 4
Loading