vitali87/code-graph-rag v0.2.10 on GitHub

🔒 Security

This release contains a security fix; see advisory GHSA-84m7-p3x7-pcfv.

Upgrading is strongly recommended.

Documentation: READMEs now clarify the embedded graph as the backend.
Testing: Improved test infrastructure for comparing outputs.
Graph Indexing: Corrected handling of duplicate directory indexing to ensure accurate deletion counts.
CI: UV cache keying updated for improved reliability.
Migration: The #897 migration now preserves shared Folder/File nodes.
Engine Operations: delete-project and stats now run on the embedded engine.
GitHub Sponsors: Added support for GitHub Sponsors via the command line.

docs: describe the embedded graph, not Memgraph, as the READMEs' backend by @vitali87 in #3386
test(release): build the fake compare output in Python, not per commit in bash by @vitali87 in #3387
fix(graph): delete and count only what a project owns when a directory is indexed twice by @vitali87 in #2680
ci: key the uv cache on uv.lock minus the project version by @vitali87 in #3388
fix(graph): the #897 migration no longer purges Folder/File nodes projects share by @vitali87 in #3216
fix(graph): delete-project and stats run on the embedded engine again by @vitali87 in #3389
test(go): run the helper once per tree under a lock, not race to publish it by @vitali87 in #3390
fix(deps): bump mcp to 1.30.0 for GHSA-84m7-p3x7-pcfv by @vitali87 in #3392
feat(signature): read the header, bind call arguments, render the rewrite (#1533, 3/9) by @vitali87 in #2162
feat(cli): pledge GitHub Sponsors support under --version and after finished commands by @vitali87 in #3393
chore(deps): bump oss-fuzz-base/base-builder-python from 79cc75a to 21f6fab in /.clusterfuzzlite by @dependabot[bot] in #3369

Full Changelog: v0.2.0...v0.2.10