v0.0.589

Highlights

• Security: Fixes a symlink-following arbitrary file read/write in the structural_search / structural_replace tools. Upgrade is strongly recommended for anyone running cgr (CLI, agent, or MCP) against untrusted repositories.
• Release automation: NEWS.md and the README "Latest News" section now refresh automatically on each release.
• Binary CI hardening: Prebuilt binaries are now built on build-input pull requests and on a weekly schedule, so packaging regressions and upstream drift are caught before a release.

🔒 Security

Fixes a symlink-following path-containment escape (High, CVSS 7.1) in AstGrepService, which backs the structural_search and structural_replace tools (both MCP and agent surfaces) — advisory GHSA-85gg-2gfq-q95m (CWE-22, CWE-59). A symlink planted inside an analyzed repository, pointing outside the configured project root, was followed because containment was checked lexically on the unresolved path: structural_search could read arbitrary files and structural_replace (with dry_run=False) could overwrite them. Upgrade to 0.0.589 if you run cgr against repositories you do not fully control.

Affected: <= 0.0.588 · Patched: 0.0.589. Credit: Dostxodjayev Abdullox (@squeeze440).

What's Changed

• feat: auto-refresh NEWS.md and README latest news on every release by @vitali87 in #1147
• ci: build binaries on build-input PRs and weekly schedule by @vitali87 in #1148

Full Changelog: v0.0.586...v0.0.589