Skip to main content
Vaelor

Changelog

Vaelor changelog

Latest v1.75.3 · 2026-10-14 · 188 releases

Every release of the Vaelor engine, newest first. The notes are generated from the commits that shipped in each version and published with the GitHub release. Subscribe with the release feed.

v1.75.3

Fixed

  • repo_search: pass last push, topics and archived to the summarizer (#959) (82e8468)

v1.75.2

Fixed

  • callgraph: resolve Go call sites under Go's scoping rules (#952) (5110efd)

v1.75.1

Fixed

  • autoindex: re-run the index pass periodically so head_sha follows main (#953) (d1b58f8)

v1.75.0

Added

  • http: bearer-token auth on /mcp and /api with off/report/enforce rollout (#945) (02f3fe8)

v1.74.3

Fixed

v1.74.2

Fixed

  • mcp: 6h session idle TTL + vaelor_mcp_session_expired_total (#925) (#938) (96a24fb)

v1.74.1

Fixed

  • security: harden repo file reads against symlinks and oversized files (#942) (97bbd07)

v1.74.0

Added

  • gocache: trim stale Go build-cache entries in the background (#937) (f8d8d0c)

v1.73.6

Fixed

  • goanalysis: allowlist env, no cgo, no direct fetch for untrusted Go roots (#932) (b5d2fd7)

v1.73.5

Fixed

  • security: harden SCIP indexing and PR webhook against untrusted repos (#928) (53ef5ab)

v1.73.4

Fixed

  • oxbrowser: authenticate every ox-browser call via go-kit svcauth (ox-browser#173) (#916) (2a8b645)

v1.73.3

Fixed

  • mcp: enable stateful sessions so the standalone GET SSE stream works (#912) (9c238a2)
  • review: review_delta/review_pr return building status on cold call graph (#911) (ed36033)

v1.73.2

Fixed

  • impact: keep the direct-caller page inline when the transitive list overflows (#907) (0aaa4ee)
  • impact: size snippet-shedding fixtures from themselves; gate direct-page on something to drop (#910) (a401bdb)

v1.73.1

Fixed

  • callgraph: say which wait a typed-load degrade is in (#894) (#903) (736e90c)

v1.73.0

Added

v1.72.9

Fixed

  • goanalysis: -trimpath in shared GOFLAGS — reuse compile cache across checkouts (fixes #893) (#899) (b075b59)

v1.72.8

Fixed

  • callgraph: bound the typed go/packages load (export-data deps, shared + budgeted) (#880) (f8d8bcc)

v1.72.7

Fixed

  • research: use jeff choice question — noul collapses on paths (#888) (d7ddd26)

v1.72.6

Fixed

  • research: size jeff batch to the measured latency budget (#885) (5f3fcf8)

v1.72.5

Fixed

  • research: jeff topicality arbitration against hub-file domination (#883) (e2752cf)

v1.72.4

Fixed

  • parser: populate Symbol.Receiver for Go methods (#881) (7d0b028)

v1.72.3

Fixed

  • callgraph: no edge over a wrong edge — bare-name ambiguity and builtin guard (#878) (fdebbbe)

v1.72.2

Fixed

  • callgraph: redesign go/types warm lifecycle around a per-root registry (#875) (4d1974a)

v1.72.1

Fixed

  • impact: resolve typed call edges by definition site; type-check test files (#868) (7eec162)

v1.72.0

Added

  • cli: stdio subcommand (canonical cobra MCP pattern) (#871) (30d69b6)

Earlier releases

The full notes for older versions are on GitHub.