Skip to content

v2026.1006.2

Choose a tag to compare

View all tags
@github-actions github-actions released this 07 Oct 09:13
· 86 commits to main since this release
v2026.1006.2
236e444
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Vibgrate CLI 2026.1006.2

Released 2026-10-06

This release of the Vibgrate CLI introduces several improvements and fixes, enhancing the usability and reliability of the vg command. Notable updates include better documentation for key commands and new features for risk assessment.

What changed

Improved

  • Documentation for vg build --attest and vg build --verify is now available, detailing the signing process and error messages.
  • vg sbom export and vg scan --format json now document package digest fields, clarifying project and solution identifiers.
  • Documentation now explains how vg build records a GitHub Actions uses: pin in the code map.

Changed

  • driftBudget now accepts maxRiskScore and maxRiskWorseningPercent, with local scans reporting limits as not evaluated.
  • vg scan --summary-out writes a JSON summary of the DriftScore for CI steps, with new outputs for drift-score, risk-level, and score-delta.

Fixed

  • vg evidence and vg build --attest now provide clear error messages when output files cannot be serialized or written.
  • vg sbom export correctly keeps one component for multiple projects resolving the same package, with warnings for dropped dependencies.

Benchmarks

Two-arm benchmark of this release against 2026.1006.1, interleaved on one runner against the pinned corpus (236 metrics compared).

Metric Previous This release
Languages with extraction 19 count 19 count
Definitions extracted (corpus total) 26624 count 26624 count
Call edges extracted (corpus total) 19055 count 19055 count
Locate accuracy (top-1) 0.95 ratio 0.95 ratio
Dependency detection (authored manifest truth) 0.96 ratio 0.96 ratio
CLI startup (--version, median) 531.20 ms 532.10 ms

2 regression(s) — published, not omitted:

  • Agent tokens with vg (comparable tasks, total): 578766 → 636808 (10.0%)
  • Tool calls per task with vg (median, comparable tasks): 6 → 7 (16.7%)

Full report and methodology: https://vibgrate.com/cli/benchmarks

Install or update

npm install -g @vibgrate/cli
vg

Full changelog: https://vibgrate.com/changelog/cli/2026.1006.2

Assets 2
Loading