circle-ir-ai 2.11.4 → 2.11.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/CHANGELOG.md +14 -0
  2. package/package.json +2 -2
package/CHANGELOG.md CHANGED
@@ -5,6 +5,20 @@ All notable changes to this project will be documented in this file.
5
5
  The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
6
6
  and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
7
7
 
8
+ ## [2.11.5] - 2026-06-18
9
+
10
+ ### Dependencies
11
+
12
+ - **circle-ir** `3.71.0` → `3.74.0` (skips 3.72.0 / 3.72.1 / 3.73.0 in
13
+ one step). Engine bump only — no circle-ir-ai source change. Tests:
14
+ 51 files / 771 pass / 3 skip (unchanged from 2.11.4). Typecheck
15
+ clean against the 3.74.0 type surface.
16
+
17
+ CWE-Bench-Java spot-check on 3.71.0 from earlier today: static
18
+ 68/120 (56.7%, +7 CVEs over the 3.21.0 CLAUDE.md baseline of 61);
19
+ +LLM gemma3-12b via OpenRouter 102/120 (85.0%). Full re-baseline
20
+ expected once the cascade reaches cognium-ai / circle-pack.
21
+
8
22
  ## [2.11.4] - 2026-06-18
9
23
 
10
24
  ### Changed — boundary-audit cleanup (cognium-dev#21)
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "circle-ir-ai",
3
- "version": "2.11.4",
3
+ "version": "2.11.5",
4
4
  "description": "LLM-enhanced SAST analysis built on circle-ir",
5
5
  "main": "dist/index.js",
6
6
  "module": "dist/index.js",
@@ -94,7 +94,7 @@
94
94
  "dependencies": {
95
95
  "@ax-llm/ax": "^20.0.0",
96
96
  "@mastra/core": "^1.18.0",
97
- "circle-ir": "3.71.0",
97
+ "circle-ir": "3.74.0",
98
98
  "minimatch": "^10.2.5",
99
99
  "p-queue": "^9.1.0"
100
100
  },