From f43498b5275e5fe676ff2348a04450aa2293752a Mon Sep 17 00:00:00 2001 From: Avi Fenesh Date: Wed, 19 Aug 2026 00:04:48 +0300 Subject: [PATCH 1/3] chore: refresh Claude Code and Amp baselines --- .github/tool-release-baselines.json | 6 +++--- CHANGELOG.md | 5 +++-- knowledge-base/RESEARCH-TRACKING.md | 6 +++--- 3 files changed, 9 insertions(+), 8 deletions(-) diff --git a/.github/tool-release-baselines.json b/.github/tool-release-baselines.json index 017a4249..4850f3f4 100644 --- a/.github/tool-release-baselines.json +++ b/.github/tool-release-baselines.json @@ -1,6 +1,6 @@ { "version": "1.1", - "last_updated": "2026-08-16", + "last_updated": "2026-08-19", "description": "Tracks the latest release of every tool agnix validates (one entry per tool with a validator in crates/agnix-core/src/rules/). Used by .github/workflows/tool-release-watch.yml to open per-tool issues when a new release is published. Untracked tools include the precise publication URL in untracked_reason so a maintainer can monitor manually.\n\nOptional `changes_of_interest` per tool describes what agnix cares about: `config_surfaces` (files agnix validates), `relevant` (change-types that likely affect a validator), `irrelevant` (safe to skip). When set and GLM_API_KEY is available, the watcher runs scripts/glm-extract.js --mode=agnix-triage to produce a pre-filtered summary at the top of the issue body. Falls back gracefully to the full changelog on any LLM failure.", "tools": { "claude-code": { @@ -17,7 +17,7 @@ "mcp" ], "github_repo": "anthropics/claude-code", - "last_known_version": "v2.1.233", + "last_known_version": "v2.1.235", "tracked": true, "changes_of_interest": { "config_surfaces": [ @@ -320,7 +320,7 @@ "html_url": "https://ampcode.com/news.rss", "version_regex": "https://ampcode\\.com/news/[a-zA-Z0-9._-]+", "notes_extractor": "rss_cdata", - "last_known_version": "global-plugins-and-skills", + "last_known_version": "edu-discount", "tracked": true, "notes": "Tracked via the amp news RSS feed; the 'version' is the slug of the latest /news/ post (e.g., amp-free-is-ad-free). Source is not on GitHub; npm @sourcegraph/amp publishes per-commit (no semver gates) so npm version-bump tracking would be noise. Issue body uses the first CDATA from the RSS feed (already structured HTML - no LLM needed).", "changes_of_interest": { diff --git a/CHANGELOG.md b/CHANGELOG.md index 385e28ec..b4849e6e 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -18,8 +18,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ### Changed - **Tool release baselines**. Advanced Claude Code from `v2.1.232` to - `v2.1.233` and Cline from `v4.1.9` to `v4.1.10`. Neither release changes an - agnix-validated configuration surface, so no validator or rule update is + `v2.1.235`, Cline from `v4.1.9` to `v4.1.10`, and Amp's release marker from + `size-the-orbs-of-production` to `edu-discount`. These releases do not change + an agnix-validated configuration surface, so no validator or rule update is required. ## [0.49.0] - 2026-08-15 diff --git a/knowledge-base/RESEARCH-TRACKING.md b/knowledge-base/RESEARCH-TRACKING.md index 7b698b29..cf99c7cd 100644 --- a/knowledge-base/RESEARCH-TRACKING.md +++ b/knowledge-base/RESEARCH-TRACKING.md @@ -2,7 +2,7 @@ > Master document for tracking AI tool ecosystem changes, research updates, and community feedback. -**Last Updated**: 2026-08-16 +**Last Updated**: 2026-08-19 **Review Cadence**: Monthly (1st week of each month) **Related**: [MONTHLY-REVIEW.md](./MONTHLY-REVIEW.md) | [VALIDATION-RULES.md](./VALIDATION-RULES.md) | [INDEX.md](./INDEX.md) @@ -16,7 +16,7 @@ Tools are organized by support tier (see [../CONTRIBUTING.md#tool-tier-system](. | Tool | Config Format | Documentation URL | Monitoring | Frequency | Last Reviewed | Rule Prefix | |------|---------------|-------------------|------------|-----------|---------------|-------------| -| Claude Code | `CLAUDE.md`, `.claude/settings.json`, `.claude/settings.local.json`, `.claude/managed-settings.json`, `.claude/agents/*.md`, `.claude/skills/*/SKILL.md`, `.claude/hooks configuration`, `.mcp.json`, `.claude-plugin/plugin.json`, `.claude/rules/**/*.md`, `.claude/output-styles/*.md` | https://code.claude.com/docs/en | Automated (spec-drift.yml + tool-release-watch.yml) | Weekly | 2026-08-16 | CC-SK, CC-HK, CC-MEM, CC-AG, CC-PL, CC-SET, CC-OS, MCP | +| Claude Code | `CLAUDE.md`, `.claude/settings.json`, `.claude/settings.local.json`, `.claude/managed-settings.json`, `.claude/agents/*.md`, `.claude/skills/*/SKILL.md`, `.claude/hooks configuration`, `.mcp.json`, `.claude-plugin/plugin.json`, `.claude/rules/**/*.md`, `.claude/output-styles/*.md` | https://code.claude.com/docs/en | Automated (spec-drift.yml + tool-release-watch.yml) | Weekly | 2026-08-19 | CC-SK, CC-HK, CC-MEM, CC-AG, CC-PL, CC-SET, CC-OS, MCP | | Codex CLI | `AGENTS.md`, `.codex/config.toml` (also `.codex/config.json`/`.yaml`), `.codex-plugin/plugin.json`, Agent Plugins root `plugin.json` | https://developers.openai.com/codex/ | Automated (spec-drift.yml + tool-release-watch.yml) | Weekly | 2026-08-08 | AGM, XP, CDX-AG, CDX-APP, CDX-CFG, CDX-PL, CDX-REQ | | OpenCode | `AGENTS.md`, `opencode.json`, `opencode.jsonc`, `.opencode/config.json`, `.opencode/skills/*/SKILL.md` | https://opencode.ai/docs/ | Automated (spec-drift.yml + tool-release-watch.yml) | Weekly | 2026-08-15 | AGM, XP, OC, OC-SK | | Kiro CLI | `.kiro/steering/*.md`, `.kiro/agents/**/*.{json,md}`, `.kiro/hooks/*.kiro.hook`, `.kiro/settings/mcp.json`, `.kiro/settings.json`, `.kiro/powers/*/POWER.md`, `.kiro/skills/*/SKILL.md`, `AGENTS.md` (nested, loaded as steering since 2.18.0) | https://kiro.dev/changelog/cli/ | Automated (tool-release-watch.yml via HTML scrape) | Quarterly | 2026-08-15 | AGM, KIRO, KR-AG, KR-HK, KR-MCP, KR-PW, KR-SK, KR-SET | @@ -34,7 +34,7 @@ Tools are organized by support tier (see [../CONTRIBUTING.md#tool-tier-system](. | Tool | Config Format | Documentation URL | Monitoring | Frequency | Last Reviewed | Rule Prefix | |------|---------------|-------------------|------------|-----------|---------------|-------------| | Roo Code | `.roomodes`, `.rooignore`, `.roorules`, `.roo/rules/*.md`, `.roo/rules-{slug}/*.md`, `.roo/mcp.json` | https://github.com/RooCodeInc/Roo-Code | Automated (tool-release-watch.yml) | Quarterly | 2026-07-26 | ROO | -| amp | `.amp/settings.json`, `.agents/checks/*.md`, `AGENTS.md` | https://ampcode.com/news | Automated (tool-release-watch.yml via ampcode.com/news.rss; tracks latest news-post slug as the release marker) | Quarterly | 2026-08-13 | AMP, AMP-SK | +| amp | `.amp/settings.json`, `.agents/checks/*.md`, `AGENTS.md` | https://ampcode.com/news | Automated (tool-release-watch.yml via ampcode.com/news.rss; tracks latest news-post slug as the release marker) | Quarterly | 2026-08-19 | AMP, AMP-SK | ### C Tier (community reports fixes only) From be938e1ec60a333b79de77421efbbd7460c829db Mon Sep 17 00:00:00 2001 From: Avi Fenesh Date: Wed, 19 Aug 2026 00:09:12 +0300 Subject: [PATCH 2/3] docs: correct prior Amp release marker --- CHANGELOG.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index b4849e6e..0a977bc0 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -19,7 +19,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ### Changed - **Tool release baselines**. Advanced Claude Code from `v2.1.232` to `v2.1.235`, Cline from `v4.1.9` to `v4.1.10`, and Amp's release marker from - `size-the-orbs-of-production` to `edu-discount`. These releases do not change + `global-plugins-and-skills` to `edu-discount`. These releases do not change an agnix-validated configuration surface, so no validator or rule update is required. From dbe2dc8bd5bbad674b9dcaf4b8c1b8b686bca9f0 Mon Sep 17 00:00:00 2001 From: Avi Fenesh Date: Wed, 19 Aug 2026 00:12:31 +0300 Subject: [PATCH 3/3] fix: update h2 for RUSTSEC-2026-0258 --- CHANGELOG.md | 2 ++ Cargo.lock | 28 ++++++++++++++-------------- 2 files changed, 16 insertions(+), 14 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 0a977bc0..a2802ee3 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -15,6 +15,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 - **Spec drift baseline hashing**. Recalculate the five reviewed Claude Code hashes with the sentinel's trailing-newline normalization so those sources do not immediately re-report drift. +- **RustSec dependency audit**. Update `h2` from 0.4.13 to 0.4.16 to address + RUSTSEC-2026-0258 (unbounded empty DATA frames). ### Changed - **Tool release baselines**. Advanced Claude Code from `v2.1.232` to diff --git a/Cargo.lock b/Cargo.lock index 4c9730b7..13473c31 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -227,7 +227,7 @@ version = "1.1.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc" dependencies = [ - "windows-sys 0.61.2", + "windows-sys 0.60.2", ] [[package]] @@ -238,7 +238,7 @@ checksum = "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d" dependencies = [ "anstyle", "once_cell_polyfill", - "windows-sys 0.61.2", + "windows-sys 0.60.2", ] [[package]] @@ -555,7 +555,7 @@ version = "3.1.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "faf9468729b8cbcea668e36183cb69d317348c2e08e994829fb56ebfdfbaac34" dependencies = [ - "windows-sys 0.52.0", + "windows-sys 0.60.2", ] [[package]] @@ -773,7 +773,7 @@ dependencies = [ "libc", "option-ext", "redox_users", - "windows-sys 0.61.2", + "windows-sys 0.60.2", ] [[package]] @@ -848,7 +848,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb" dependencies = [ "libc", - "windows-sys 0.52.0", + "windows-sys 0.60.2", ] [[package]] @@ -1084,9 +1084,9 @@ dependencies = [ [[package]] name = "h2" -version = "0.4.13" +version = "0.4.16" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "2f44da3a8150a6703ed5d34e164b875fd14c2cdab9af1252a9a1020bde2bdc54" +checksum = "a9f37a958b41b3b19ee2707c06439c0e9e547e847223eb791ecb0cb821c65e27" dependencies = [ "atomic-waker", "bytes", @@ -1823,7 +1823,7 @@ version = "0.50.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "7957b9740744892f114936ab4a57b3f487491bbeafaf8083688b16841a4240e5" dependencies = [ - "windows-sys 0.61.2", + "windows-sys 0.60.2", ] [[package]] @@ -2147,7 +2147,7 @@ dependencies = [ "once_cell", "socket2", "tracing", - "windows-sys 0.52.0", + "windows-sys 0.60.2", ] [[package]] @@ -2471,7 +2471,7 @@ dependencies = [ "errno", "libc", "linux-raw-sys", - "windows-sys 0.52.0", + "windows-sys 0.60.2", ] [[package]] @@ -2528,7 +2528,7 @@ dependencies = [ "security-framework", "security-framework-sys", "webpki-root-certs", - "windows-sys 0.52.0", + "windows-sys 0.60.2", ] [[package]] @@ -2837,7 +2837,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "3a766e1110788c36f4fa1c2b71b387a7815aa65f88ce0229841826633d93723e" dependencies = [ "libc", - "windows-sys 0.61.2", + "windows-sys 0.60.2", ] [[package]] @@ -2940,7 +2940,7 @@ dependencies = [ "getrandom 0.4.2", "once_cell", "rustix", - "windows-sys 0.52.0", + "windows-sys 0.60.2", ] [[package]] @@ -3660,7 +3660,7 @@ version = "0.1.11" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22" dependencies = [ - "windows-sys 0.52.0", + "windows-sys 0.60.2", ] [[package]]