Skip to content

Scaffold v3.29.0

Choose a tag to compare

View all tags
@zigrivers zigrivers released this 30 May 17:58
· 106 commits to main since this release
v3.29.0
8aee3de
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Minor release. All changes additive; only compatibility note is a Node engine floor bump (>=18.17.0). The MMR CLI ships separately as @zigrivers/mmr 1.4.0.

Added

  • Reference guides — scaffold guides. Markdown-source → checked-in-HTML reference guides (scaffold guides, <topic>, --list --format json, --markdown/--print-path, --build), with a make guides-check drift+sanitize gate.
  • Knowledge-freshness audit subsystem — scaffold knowledge-freshness …. Daily cron that audits knowledge entries against authoritative sources and opens refresh PRs; new frontmatter fields (volatility, last-reviewed, version-pin, sources) + content/knowledge/VERSION + three workflows.
  • scaffold validate-knowledge and audit Lens I (knowledge gaps).
  • DeepSeek provider for the knowledge-freshness cron (Anthropic remains local default).

Changed

  • make check-all now also runs validate-knowledge, check-reference-citations, and guides-check.
  • engines.node raised from >=18 to >=18.17.0.

Security

  • Generated guide HTML is sanitized (rehype-sanitize + mermaid sanitizer + gate scan); knowledge-freshness source fetching is SSRF-guarded (private/loopback ranges, DNS-rebinding) independent of the advisory authoritative-sources allowlist.

Full notes: see CHANGELOG.md.

Assets 2
Loading