Update CHANGELOG for v1.2.0 release

[tomohiro-owada]

User description

Summary

Add v1.2.0 release notes to CHANGELOG.md

Changes in v1.2.0

• Filtered search (directory, file_pattern, top_k parameters)
• Multiple document paths with glob patterns
• --config CLI flag
• Security fix: info leak in stderr logs
• Contributors section in README

🤖 Generated with Claude Code

---

PR Type

Documentation

---

Description

• Add v1.2.0 release notes with new features and fixes

• Document filtered search parameters and multiple document paths

• Include security fix for info leak in stderr logs

• Acknowledge contributors in release notes

---

Diagram Walkthrough

flowchart LR
  A["v1.2.0 Release"] --> B["Added Features"]
  A --> C["Security Fix"]
  A --> D["Contributors"]
  B --> B1["Filtered Search"]
  B --> B2["Multiple Document Paths"]
  B --> B3["Config CLI Flag"]
  C --> C1["Info Leak Prevention"]

Loading

File Walkthrough

Relevant files

Documentation

CHANGELOG.md Add v1.2.0 release notes and changelog entry                          CHANGELOG.md Added v1.2.0 release section with date 2025-12-15 Documented new filtered search parameters (directory, file_pattern, top_k) Added multiple document paths support with glob patterns Included custom config file flag and CLAUDE.md guide Documented security fix for user input in stderr logs Added contributors section acknowledging community contributions +26/-0

---

[qodo-code-review]

PR Compliance Guide 🔍

Below is a summary of compliance checks for this PR:

Security Compliance
🟢	No security concerns identified No security vulnerabilities detected by AI analysis. Human verification advised for critical code.
Ticket Compliance
⚪	🎫 No ticket provided Create ticket/issue
Codebase Duplication Compliance
⚪	Codebase context is not defined Follow the guide to enable codebase context checks.
Custom Compliance
⚪	Generic: Comprehensive Audit Trails Objective: To create a detailed and reliable record of critical system actions for security analysis and compliance. Status: Documentation Only: The PR adds only changelog documentation lines and does not include executable code where audit logging could be implemented or verified. Referred Code ## [1.2.0] - 2025-12-15 ### Added - **Filtered search** - New parameters for the `search` tool - `directory`: Filter results to specific directory (e.g., "docs/api") - `file_pattern`: Filter by filename glob pattern (e.g., "api-*.md") - `top_k`: Control maximum number of results - **Multiple document paths** - Support for multiple document directories with glob patterns - Configure via `document_patterns` array in config.json - Supports recursive patterns like `./docs/**/*.md` - Backward compatible with old `documents_dir` field - **Custom config file** - `--config` CLI flag to specify configuration file path - **CLAUDE.md** - Comprehensive project guide for Claude Code - **Contributors section** - Added to README to acknowledge community contributions ### Fixed - **Security: Info leak** - Removed user input (query, directory, file_pattern) from stderr logs ### Changed - Improved README documentation with filtered search examples - Updated MCP tool descriptions ... (clipped 5 lines) Learn more about managing compliance generic rules or creating your own custom rules
	Generic: Meaningful Naming and Self-Documenting Code Objective: Ensure all identifiers clearly express their purpose and intent, making code self-documenting Status: No New Code: This PR updates a changelog and introduces no identifiers or code changes to assess for naming conventions. Referred Code ## [1.2.0] - 2025-12-15 ### Added - **Filtered search** - New parameters for the `search` tool - `directory`: Filter results to specific directory (e.g., "docs/api") - `file_pattern`: Filter by filename glob pattern (e.g., "api-*.md") - `top_k`: Control maximum number of results - **Multiple document paths** - Support for multiple document directories with glob patterns - Configure via `document_patterns` array in config.json - Supports recursive patterns like `./docs/**/*.md` - Backward compatible with old `documents_dir` field - **Custom config file** - `--config` CLI flag to specify configuration file path - **CLAUDE.md** - Comprehensive project guide for Claude Code - **Contributors section** - Added to README to acknowledge community contributions ### Fixed - **Security: Info leak** - Removed user input (query, directory, file_pattern) from stderr logs ### Changed - Improved README documentation with filtered search examples - Updated MCP tool descriptions ... (clipped 5 lines) Learn more about managing compliance generic rules or creating your own custom rules
	Generic: Robust Error Handling and Edge Case Management Objective: Ensure comprehensive error handling that provides meaningful context and graceful degradation Status: No Runtime Logic: Only documentation content was added, so error handling and edge case management cannot be evaluated from this diff. Referred Code ## [1.2.0] - 2025-12-15 ### Added - **Filtered search** - New parameters for the `search` tool - `directory`: Filter results to specific directory (e.g., "docs/api") - `file_pattern`: Filter by filename glob pattern (e.g., "api-*.md") - `top_k`: Control maximum number of results - **Multiple document paths** - Support for multiple document directories with glob patterns - Configure via `document_patterns` array in config.json - Supports recursive patterns like `./docs/**/*.md` - Backward compatible with old `documents_dir` field - **Custom config file** - `--config` CLI flag to specify configuration file path - **CLAUDE.md** - Comprehensive project guide for Claude Code - **Contributors section** - Added to README to acknowledge community contributions ### Fixed - **Security: Info leak** - Removed user input (query, directory, file_pattern) from stderr logs ### Changed - Improved README documentation with filtered search examples - Updated MCP tool descriptions ... (clipped 5 lines) Learn more about managing compliance generic rules or creating your own custom rules
	Generic: Secure Error Handling Objective: To prevent the leakage of sensitive system information through error messages while providing sufficient detail for internal debugging. Status: Doc Mentions Fix: The changelog notes a security fix but provides no code changes to validate that user-facing errors avoid leaking internal details. Referred Code - **Security: Info leak** - Removed user input (query, directory, file_pattern) from stderr logs Learn more about managing compliance generic rules or creating your own custom rules
	Generic: Secure Logging Practices Objective: To ensure logs are useful for debugging and auditing without exposing sensitive information like PII, PHI, or cardholder data. Status: Logging Not Verifiable: The changelog states sensitive inputs were removed from stderr logs, but no code diff is provided to verify logging practices. Referred Code - **Security: Info leak** - Removed user input (query, directory, file_pattern) from stderr logs Learn more about managing compliance generic rules or creating your own custom rules
	Generic: Security-First Input Validation and Data Handling Objective: Ensure all data inputs are validated, sanitized, and handled securely to prevent vulnerabilities Status: No Input Code: Added content is documentation only and does not include input handling or data processing changes to assess validation and sanitization. Referred Code ## [1.2.0] - 2025-12-15 ### Added - **Filtered search** - New parameters for the `search` tool - `directory`: Filter results to specific directory (e.g., "docs/api") - `file_pattern`: Filter by filename glob pattern (e.g., "api-*.md") - `top_k`: Control maximum number of results - **Multiple document paths** - Support for multiple document directories with glob patterns - Configure via `document_patterns` array in config.json - Supports recursive patterns like `./docs/**/*.md` - Backward compatible with old `documents_dir` field - **Custom config file** - `--config` CLI flag to specify configuration file path - **CLAUDE.md** - Comprehensive project guide for Claude Code - **Contributors section** - Added to README to acknowledge community contributions ### Fixed - **Security: Info leak** - Removed user input (query, directory, file_pattern) from stderr logs ### Changed - Improved README documentation with filtered search examples - Updated MCP tool descriptions ... (clipped 5 lines) Learn more about managing compliance generic rules or creating your own custom rules

Compliance status legend

🟢 - Fully Compliant
🟡 - Partial Compliant
🔴 - Not Compliant
⚪ - Requires Further Human Verification
🏷️ - Compliance label

[qodo-code-review]

PR Code Suggestions ✨

Explore these optional code suggestions:

Category	Suggestion	Impact
High-level	Changelog update lacks corresponding code The suggestion points out that the PR updates the changelog for the v1.2.0 release without including the actual code for the documented features and fixes. This would lead to an inaccurate changelog if merged independently. Examples: CHANGELOG.md [8-32] ## [1.2.0] - 2025-12-15 ### Added - **Filtered search** - New parameters for the `search` tool - `directory`: Filter results to specific directory (e.g., "docs/api") - `file_pattern`: Filter by filename glob pattern (e.g., "api-*.md") - `top_k`: Control maximum number of results - **Multiple document paths** - Support for multiple document directories with glob patterns - Configure via `document_patterns` array in config.json - Supports recursive patterns like `./docs/**/*.md` ... (clipped 15 lines) Solution Walkthrough: Before: # PR contains only a changelog update for features that are not in the codebase. File: CHANGELOG.md + ## [1.2.0] - 2025-12-15 + + ### Added + - **Filtered search** + - **Multiple document paths** + - **Custom config file** + + ### Fixed + - **Security: Info leak** ... After: # Suggestion: The changelog update should be included in the same PR as the code changes. # Example of a correct PR structure: File: src/search.py + def search(directory=None, file_pattern=None, top_k=5): + # implementation of filtered search ... File: CHANGELOG.md + ## [1.2.0] - 2025-12-15 + ### Added + - **Filtered search** ... Suggestion importance[1-10]: 9 __ Why: The suggestion correctly identifies a critical process flaw where the changelog is updated for features not present in the PR, which would make the project's documentation inaccurate if merged.	High
More