Skip to content

v2026.1007.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 07 Oct 14:11
· 83 commits to main since this release
v2026.1007.1
93d583f
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Vibgrate CLI 2026.1007.1

Released 2026-10-07

This release of the Vibgrate CLI introduces new features for risk scoring and improved documentation for existing commands. Several fixes enhance error reporting and the handling of package components.

What changed

New

  • driftBudget now accepts maxRiskScore and maxRiskWorseningPercent, with local vg scan reporting those limits as not evaluated.
  • vg scan --summary-out writes a small JSON summary of the DriftScore for CI steps, with new outputs for drift-score, risk-level, and score-delta.

Improved

  • vg build --attest and vg build --verify are now documented, detailing the signing process and error messages.
  • Documentation for vg build now explains how GitHub Actions uses pins in the code map.
  • vg sbom export and vg scan --format json now document package digest fields and clarify project and solution identifiers.

Changed

  • The npm page for Vibgrate CLI now links to the CLI product page and describes how a scan scores drift and exposure separately.

Fixed

  • vg evidence and vg build --attest now exit with clear error messages when the output file cannot be serialized or written.
  • vg sbom export retains one component when multiple projects resolve the same package, providing a warning for dropped dependencies.

Benchmarks

Two-arm benchmark of this release against 2026.1006.2, interleaved on one runner against the pinned corpus (236 metrics compared).

Metric Previous This release
Languages with extraction 19 count 19 count
Definitions extracted (corpus total) 26626 count 26626 count
Call edges extracted (corpus total) 19057 count 19057 count
Locate accuracy (top-1) 0.94 ratio 0.94 ratio
Dependency detection (authored manifest truth) 0.96 ratio 0.96 ratio
CLI startup (--version, median) 828.90 ms 826.70 ms

2 regression(s) — published, not omitted:

  • Agent tokens with vg (comparable tasks, total): 578766 → 636808 (10.0%)
  • Tool calls per task with vg (median, comparable tasks): 6 → 7 (16.7%)

Full report and methodology: https://vibgrate.com/cli/benchmarks

Install or update

npm install -g @vibgrate/cli
vg

Full changelog: https://vibgrate.com/changelog/cli/2026.1007.1

Assets 2
Loading