circle-ir-ai 4.15.0 → 4.15.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +10 -0
- package/package.json +2 -2
package/CHANGELOG.md
CHANGED
|
@@ -7,6 +7,16 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
|
|
|
7
7
|
|
|
8
8
|
## [Unreleased]
|
|
9
9
|
|
|
10
|
+
## [4.15.1] - 2026-09-22
|
|
11
|
+
|
|
12
|
+
### Changed
|
|
13
|
+
- **circle-ir 4.9.22 → 4.9.23.** Go recall + precision batch: gRPC request messages are `http_body`
|
|
14
|
+
sources (#447 — cross-file only, visible through `analyzeProject`), HTTP request body is a source
|
|
15
|
+
(#343), builtins / error construction / formatters / loggers / stdlib helpers no longer
|
|
16
|
+
`external_taint_escape` (#455, ≈43 % of Go CWE-668 rows removed, 0 modelled-sink flows lost),
|
|
17
|
+
`fmt.Fprint*(w, …)` to an `http.ResponseWriter` is xss on the varargs (#456). Go scans change;
|
|
18
|
+
no other language affected. Lockfile refreshed; single copy verified.
|
|
19
|
+
|
|
10
20
|
## [4.15.0] - 2026-09-21
|
|
11
21
|
|
|
12
22
|
Cisco vulnerability-localization precision gates (SAST-team handoff, cognium-dev#387 review).
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "circle-ir-ai",
|
|
3
|
-
"version": "4.15.
|
|
3
|
+
"version": "4.15.1",
|
|
4
4
|
"description": "LLM-enhanced SAST analysis built on circle-ir",
|
|
5
5
|
"main": "dist/index.js",
|
|
6
6
|
"module": "dist/index.js",
|
|
@@ -103,7 +103,7 @@
|
|
|
103
103
|
"@ax-llm/ax": "^20.0.0",
|
|
104
104
|
"@cognium/project-profile-detect": "^1.1.0",
|
|
105
105
|
"@mastra/core": "^1.18.0",
|
|
106
|
-
"circle-ir": "4.9.
|
|
106
|
+
"circle-ir": "4.9.23",
|
|
107
107
|
"minimatch": "^10.2.5",
|
|
108
108
|
"p-queue": "^9.1.0"
|
|
109
109
|
},
|