[0.9.2] - 2026-05-21
Breaking Changes
- CodeGraph no longer has a config file:
.codegraph/config.jsonand the entire config surface are gone, and the library API for it (the config type, theconfigoption oninit(), and the get/update config exports) has been removed — existing config files are now ignored, and.gitignoreis the single source of truth for what gets indexed. The.codegraphignoremarker is also no longer supported; use.gitignoreinstead.
New Features
codegraph installnow supports Hermes Agent (Nous Research), wiring up the CodeGraph MCP server so Hermes can drive the knowledge graph like the other agents.- Drupal projects (8/9/10/11) are now detected and indexed with framework smarts: routes from
*.routing.ymllink to their controller, form, or entity-handler, and hook implementations across modules are connected to their canonical hook name, so asking for callers of a hook returns every implementation (#268). - Indexing is now zero-config and honors your
.gitignoreeverywhere — in git repos via git, and in non-git projects by reading.gitignorefiles directly — so to keep something out of the graph you just add it to.gitignore. Behavior change: committed files that aren't gitignored are now indexed even undervendor/,Pods/, or a committeddist/; add a.gitignorenegation to exclude them (#283).
Fixes
- Windows: installing globally and then running any
codegraphcommand no longer fails — the launcher now invokes the bundled runtime directly instead of a.cmdfile that modern Node refuses to spawn, socodegraphworks regardless of your Node version (#289).
Security
- The temp-dir marker written on each
codegraph_contextcall is now opened safely so it can't follow a symlink, closing a hole where another local user on a shared machine could redirect that write onto a file you can write (#280).