circle-ir-ai 4.14.0 → 4.14.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +14 -0
- package/package.json +2 -2
package/CHANGELOG.md
CHANGED
|
@@ -7,6 +7,20 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
|
|
|
7
7
|
|
|
8
8
|
## [Unreleased]
|
|
9
9
|
|
|
10
|
+
## [4.14.1] - 2026-09-18
|
|
11
|
+
|
|
12
|
+
### Changed
|
|
13
|
+
- **circle-ir 4.9.14 → 4.9.16.** Picks up the SAST-team precision/detection fixes
|
|
14
|
+
(JDBC CWE-89 retype, ProcessBuilder CWE-78, juice-shop XSS FP removals, plugin_param,
|
|
15
|
+
C# LDAP, JS/TS sink shapes, C# `using var`, Python trust_boundary). Finding counts move
|
|
16
|
+
in both directions on a rescan — expected movement, not regression.
|
|
17
|
+
- **skills-419 `SKILL_SINK_FLOW_GUARD=0` rollback test skipped** — obsolete against
|
|
18
|
+
circle-ir >=4.9.16: the legacy per-sink emission relied on the pre-4.9.16 IR sink-inventory
|
|
19
|
+
shape (#358 removed the setTimeout sink; the inventory structure changed), so the rollback
|
|
20
|
+
to pre-#419 behavior is now inert. The #419 fix itself (4 default-behavior tests) is
|
|
21
|
+
unaffected and green.
|
|
22
|
+
|
|
23
|
+
|
|
10
24
|
## [4.14.0] - 2026-09-15
|
|
11
25
|
|
|
12
26
|
### Fixed
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "circle-ir-ai",
|
|
3
|
-
"version": "4.14.
|
|
3
|
+
"version": "4.14.1",
|
|
4
4
|
"description": "LLM-enhanced SAST analysis built on circle-ir",
|
|
5
5
|
"main": "dist/index.js",
|
|
6
6
|
"module": "dist/index.js",
|
|
@@ -102,7 +102,7 @@
|
|
|
102
102
|
"@ax-llm/ax": "^20.0.0",
|
|
103
103
|
"@cognium/project-profile-detect": "^1.1.0",
|
|
104
104
|
"@mastra/core": "^1.18.0",
|
|
105
|
-
"circle-ir": "4.9.
|
|
105
|
+
"circle-ir": "4.9.16",
|
|
106
106
|
"minimatch": "^10.2.5",
|
|
107
107
|
"p-queue": "^9.1.0"
|
|
108
108
|
},
|