code-review-graph 2.3.7
Maintainer-reconciliation release containing the verified work merged since v2.3.6. The four client-validation drafts remain excluded. No breaking changes.
Highlights
- expanded CLI-first workflows, CommonJS parsing, quiet/JSON output, enrichment, and dead-code analysis
- broader Terraform, Ansible, VB.NET, SystemVerilog, Rust, PHP/Laravel, Julia, Python, C#, Java, Spring, and WebFlux graph coverage
- bounded transitive test coverage, churn risk, weighted impact ranking, graph provenance, documentation-aware embeddings, and safe JSON export
- safer uninstall and platform configuration, including CodeBuddy and official OpenCode contracts
- hardened MCP concurrency, daemon lifecycle, Windows process handling, Git path parsing, ignore rules, community detection, and visualization layout
- updated supported dependency and GitHub Action versions, plus secure fork-PR review handling
- closed all three open high-severity CodeQL alerts
Validation
- release PR: 15/15 checks passed
- merged main commit: 13/13 checks passed
- wheel and source distribution built successfully with version 2.3.7
See CHANGELOG.md for the detailed release notes and PR references.