Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion AGENTS.md
Original file line number Diff line number Diff line change
Expand Up @@ -189,7 +189,7 @@ Format: `[CATEGORY]-[NUMBER]` (AS-004, CC-HK-001, etc.)

## Current State

- v0.12.2 - Production-ready with full validation pipeline
- v0.12.4 - Production-ready with full validation pipeline
- 229 validation rules across 25 validators

- 3400+ passing tests
Expand Down
2 changes: 2 additions & 0 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0

## [Unreleased]

## [0.12.4] - 2026-02-21

### Security
- **Fix minimatch ReDoS vulnerability**: Added npm `overrides` in `website/package.json` to force `minimatch@^10.2.1`, resolving Dependabot alert #75 (ReDoS via repeated wildcards in `serve-handler`'s transitive `minimatch@3.1.2` dependency)
- **Update wasm-bindgen**: Bumped `wasm-bindgen` from 0.2.109 (yanked) to 0.2.110 along with related crates (`js-sys`, `web-sys`, `wasm-bindgen-test`, etc.)
Comment on lines 13 to 14

Copilot AI Feb 21, 2026

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The PR description mentions "Dependabot #75" for the minimatch ReDoS vulnerability fix, but the linked mentioned_issue #75 is about "Address empty fixtures" and has nothing to do with security vulnerabilities or minimatch. This appears to be a mismatch - either the PR description references the wrong issue number, or the wrong issue was linked in the metadata.

Copilot uses AI. Check for mistakes.

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The #75 refers to Dependabot alert #75 (visible under the Security tab > Dependabot alerts), not GitHub issue #75. Updated the changelog to say "Dependabot alert #75" for clarity.

Expand Down
2 changes: 1 addition & 1 deletion CLAUDE.md
Original file line number Diff line number Diff line change
Expand Up @@ -189,7 +189,7 @@ Format: `[CATEGORY]-[NUMBER]` (AS-004, CC-HK-001, etc.)

## Current State

- v0.12.2 - Production-ready with full validation pipeline
- v0.12.4 - Production-ready with full validation pipeline
- 229 validation rules across 25 validators

- 3400+ passing tests
Expand Down
6 changes: 3 additions & 3 deletions Cargo.toml
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,7 @@ exclude = [
]

[workspace.package]
version = "0.12.2"
version = "0.12.4"

Copilot AI Feb 21, 2026

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This release also requires updating version references in other files that aren't included in this PR: plugin/.claude-plugin/plugin.json (line 3), plugin/skills/agnix/SKILL.md (line 4), AGENTS.md (line 192), CLAUDE.md (line 192), and website/versions.json (line 2) all still reference version 0.12.2 and should be updated to 0.12.4. Consider adding these files to this PR or creating a follow-up commit to ensure version consistency across the entire codebase.

Copilot uses AI. Check for mistakes.

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good catch. Updated all version references to 0.12.4 in plugin.json, SKILL.md, CLAUDE.md, AGENTS.md, and website/versions.json in the latest commit.

edition = "2024"
rust-version = "1.91"
license = "MIT OR Apache-2.0"
Expand All @@ -31,8 +31,8 @@ categories = ["development-tools", "command-line-utilities"]

[workspace.dependencies]
# Internal crates - path for local dev, version for crates.io
agnix-rules = { path = "crates/agnix-rules", version = "0.12.2" }
agnix-core = { path = "crates/agnix-core", version = "0.12.2" }
agnix-rules = { path = "crates/agnix-rules", version = "0.12.4" }
agnix-core = { path = "crates/agnix-core", version = "0.12.4" }

# Core dependencies
serde = { version = "1", features = ["derive"] }
Expand Down
2 changes: 1 addition & 1 deletion plugin/.claude-plugin/plugin.json
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
{
"name": "agnix",
"version": "0.12.2",
"version": "0.12.4",
"description": "Lint agent configurations before they break your workflow. 229 rules for Skills, Hooks, MCP, Memory, Plugins.",
"author": {
"name": "Avi Fenesh",
Expand Down
2 changes: 1 addition & 1 deletion plugin/skills/agnix/SKILL.md
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
---
name: agnix
description: "Use when user asks to 'lint agent configs', 'validate skills', 'check CLAUDE.md', 'validate hooks', 'lint MCP'. Validates agent configuration files against 229 rules across 10+ AI tools."
version: 0.12.2
version: 0.12.4
argument-hint: "[path] [--fix] [--strict] [--target=claude-code|cursor|codex]"
---

Expand Down