Skip to content
Release v1.4.6: Critical Security and Stability Fixes

CRITICAL RELEASE - Addresses security vulnerabilities and code duplication.

Security Fixes:
✓ Added 3 missing validators (validateUpdateRepoConfigArgs, validateValidateFeatureArgs, validateQueryRelationshipsArgs)
✓ Removed all unsafe 'as any' casts from tool handlers
✓ Eliminated input validation gaps in production tools

Stability Fixes:
✓ Eliminated 180 lines of duplicate merge logic
✓ Created mergeFrontmatter() utility for single source of truth
✓ Reduced write-feature.ts complexity (345 → 225 lines)

Cleanup:
✓ Removed 1,837 lines of unused ValidationPipeline infrastructure
✓ Kept proven utilities (withPagination, input validators)
✓ Deleted unused abstractions

Combined Impact:
- Security vulnerabilities: 3 eliminated
- Code duplication: 180 lines removed
- Unused infrastructure: 1,837 lines deleted
- Net improvement: -1,667 lines with better security

Test Coverage:
✓ 234 tests passing
✓ TypeScript compiles cleanly
✓ Zero breaking changes

This release makes the codebase more secure, maintainable, and focused
on production-used code based on comprehensive devils-advocate review.

🐝 Generated with Claude Code

Co-Authored-By: Claude <noreply@anthropic.com>