Skip to content

release: v1.1.18 - #1216

Merged
Fmarzochi merged 2 commits into
mainfrom
release/v1.1.18
Aug 6, 2026
Merged

release: v1.1.18#1216
Fmarzochi merged 2 commits into
mainfrom
release/v1.1.18

Conversation

@Fmarzochi

@Fmarzochi Fmarzochi commented Aug 6, 2026

Copy link
Copy Markdown
Owner

What ships

Everything merged since v1.1.17 (2026-07-27), headlined by the production-hardening batch: the fork-bomb root cause in the Token Crusher PATH shim (#1191), honest installers end to end (#1193-#1197, #1206), Guardian read/write separation approved by two audits (#1205), nested-JSON compression measured at 637 KB to 31 KB (#1204), self-contained cross-platform MCP builds (#1211), Windows reliability fixes (#1203, #1209, #1212), egc repair that repairs (#1210), and no more auto-bundled third-party MCP servers for repo clones or Codex plugin installs (#1215).

Version surface

Same 12 files as the v1.1.17 release commit: package.json + lock, .opencode package + lock + plugin version strings, both Gemini plugin manifests, the Codex plugin manifest, the Codex marketplace file, agent.yaml, CHANGELOG.md and docs/ROADMAP.md.

Verification

  • tests/plugin-manifest.test.js 39/39 (locks version parity across every manifest), tests/scripts/npm-publish-surface.test.js 2/2, tests/scripts/codex-hooks.test.js 13/13.
  • Real end-to-end install of the packed tarball (npm pack of this tree) in isolated HOMEs on Linux and macOS physical machines: global install, egc install, MCP registration into the sandbox's own .claude.json, state DB bootstrap (6 migrations), Token Crusher shim, honest headless dashboard message, egc doctor honest bare-install report. Zero traces left on either machine afterwards.
  • Windows covered by the full CI matrix, including the full-install subprocess suites.

Tag v1.1.18 after merge triggers the OIDC trusted publish with provenance.


Summary by cubic

Release v1.1.18 bumps versions to 1.1.18 across @egchq/egc, .opencode, manifests, and env hooks, and updates CHANGELOG.md/docs/ROADMAP.md to enumerate the shipped features. It hardens Guardian and Token Crusher, fixes installers and MCP builds, and improves Windows reliability.

  • New Features

    • Guardian command validation expanded to more hosts via adapters.
    • PATH-level Crusher shim for transparent CLI compression with TTY passthrough.
    • NLI bus/memory coverage extended across more tools; egc gain adds scoped savings windows.
    • Project context re-injection after compaction; doctor, repair, auto-update support --repo-root.
  • Bug Fixes

    • Guardian read/write separation approved by two audits; protected paths stay write-blocked while operational dirs are readable.
    • Token Crusher PATH shim fork-bomb root cause fixed with realpath checks and a circuit breaker.
    • Installers made honest end to end; egc repair/egc doctor report accurately; MCP builds are self-contained and cross-platform.
    • Windows stability improved for session bridge and subprocess tests; third-party MCP servers are no longer auto-bundled.

Written for commit faba07b. Summary will update on new commits.

Review in cubic

Bump every version surface to 1.1.18, move the accumulated Unreleased
entries into the v1.1.18 sections of CHANGELOG.md and docs/ROADMAP.md,
and complete the roadmap log for #1193-#1215.

Verified before tagging: real end-to-end installs of the packed tarball
in isolated HOMEs on Linux and macOS (registration, state bootstrap,
shim, honest headless dashboard message), plus the full CI matrix on
Windows.

Signed-off-by: Felipe Marzochi <fmarzochi@gmail.com>

@cubic-dev-ai cubic-dev-ai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

All reported issues were addressed across 12 files

Reply with feedback, questions, or to request a fix.

Re-trigger cubic

Comment thread docs/ROADMAP.md
…ents agree

The roadmap's v1.1.18 section spans everything merged since v1.1.17,
but the changelog entry only highlighted the hardening batch. The
Added section now lists the feature groups that ship too: Guardian
host expansion, the Crusher PATH shim, NLI coverage, scoped gain,
compaction re-injection, and repo-root support.

Signed-off-by: Felipe Marzochi <fmarzochi@gmail.com>
@sonarqubecloud

sonarqubecloud Bot commented Aug 6, 2026

Copy link
Copy Markdown

@Fmarzochi
Fmarzochi merged commit f6a7931 into main Aug 6, 2026
65 checks passed
@Fmarzochi
Fmarzochi deleted the release/v1.1.18 branch August 6, 2026 04:25
@Fmarzochi Fmarzochi moved this to Done in EGC Roadmap Aug 6, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

1 participant