Code-Graph-RAG Files

What's Changed

• feat(csharp): Roslyn hybrid frontend B1 — semantic base classification by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/756
• feat(flow): flow taint into Rust macro and C++ stream sinks by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/757
• feat(csharp): exact overloads, extension binding, partial identity, and LINQ query calls via Roslyn hybrid frontend by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/759
• ci(sonarcloud): raise job timeout to 30 minutes by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/760
• fix(csharp): discover .slnx solutions and surface Roslyn frontend failures by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/761
• fix(csharp): recover arity-sibling base types dropped by the self-loop guard by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/762
• fix(evals): classify C# interface bases as INHERITS in the structure oracle by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/763
• fix(csharp): bind local functions to their exact hosting overload via recorded node spans by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/767
• fix(evals): anchor top-level C# script functions to the module in the structure oracle by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/769
• feat(docs): generate language and MCP tool tables from code and fix stale guides by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/766
• feat(io): handle-aware I/O for the lean non-Python walk plus Python cursor derive by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/770
• feat(evals): C# call-retrieval eval measuring the Roslyn hybrid frontend win by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/771
• feat(flow): branch-merge loops, try, and Rust if/match in the lean flat walk by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/772
• fix(csharp): recover same-scope arity-pair and partial-sibling INHERITS edges by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/774
• fix(evals): suppress Roslyn error-recovery phantom members in the C# oracle by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/776
• fix(csharp): infer target-typed new() construction sites from the enclosing declaration by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/777
• chore(deps): bump mcp from 1.25.0 to 1.28.1 by @dependabot[bot] in https://github.com/vitali87/code-graph-rag/pull/775
• fix(providers): register the opus 4.8 1M context window by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/778
• refactor: improve exception logging for embedding utilities by @Shashank23123458867504 in https://github.com/vitali87/code-graph-rag/pull/765
• fix(parsers): compile JS highlights and add Dart highlights so modifiers and decorators populate by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/779
• chore(deps): bump torch from 2.12.1 to 2.13.0 in the uv group across 1 directory by @dependabot[bot] in https://github.com/vitali87/code-graph-rag/pull/781
• fix(csharp): dead-code dogfood round 1 on Polly, 190 false flags down to 23 by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/782
• fix(csharp): resolve bare-name calls to in-scope local functions and arity-matched overloads by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/784
• fix(csharp): reference property reads and type cast receivers so read-only members stay reachable by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/785
• fix(csharp): reference whole method-group overload families and dispatch generic calls to generic overloads by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/786
• fix(cpp): constructor-temporary chains and macro-attributed definition names by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/783
• fix(csharp): resolve fluent-chain receivers, generic member names, and type twins for call recall by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/787
• fix(cpp): drop macro-invocation phantom Function nodes, keep recovery-orphaned ctors by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/788
• fix(csharp): semantic calls oracle and precision gates for name-trie fabrications by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/789
• fix(cpp): reattach recovery-orphaned ctors as class methods and redirect construction CALLS to C++ ctors by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/791
• fix(csharp): recover conditional-directive parses and keep same-arity overload families reachable by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/790
• Add help command improvements to CLI by @TreavVasu in https://github.com/vitali87/code-graph-rag/pull/793
• fix(tests): strip ANSI from CLI help smoke asserts so rich-colorized CI logs pass by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/795
• fix(cpp): emit CALLS to base and delegated ctors from member initializer lists by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/792
• feat(csharp): Roslyn external-site facts eliminate untypeable-receiver phantom calls by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/794
• feat(csharp): AUTO frontend default resolves to hybrid when dotnet is available by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/798
• fix(cpp): resolve using-alias and typedef constructions to the aliased class by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/797
• fix(cpp): destructor reachability from construction sites by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/799
• fix(cpp): recover class and namespace heads swallowed by bare scope-marker macros by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/800
• chore: make pre-commit --all-files pass repo-wide by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/801
• feat(vector-store): add optional Milvus backend by @zc277584121 in https://github.com/vitali87/code-graph-rag/pull/780
• feat(parsers): initialize language grammars lazily (#68) by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/802
• feat(embedder): OpenAI-compatible embedding provider by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/803
• feat(dart): CALLS extraction from selector chains and named-constructor naming (#140 follow-up) by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/804
• feat(csharp): Roslyn facts for projects outside the solution by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/805
• feat(dart): receiver type inference for member calls by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/806
• feat(dart): recorded return types for class-qualified call locals plus inherited-lookup coverage by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/807
• fix(mcp): patch CVE-2026-52869 exposure with mcp>=1.28.1 and a loopback default bind by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/809
• fix(io): collapse JS default-export segment when matching sink registries by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/811
• fix(traversal): keep Cargo src bin binaries while ignoring build-output bin dirs by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/812
• fix(js): ingest mjs cjs mts cts module extension variants by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/810
• fix(go): type free-fn call bindings and honor receiver types in flow taint resolution by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/813
• fix(io): classify env member assignments as writes by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/814
• feat(mcp): bearer authentication for the HTTP endpoint by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/816
• feat(flow): switch-family path sensitivity for the lean flow walk by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/815
• feat(flow): union taint through ternaries and short-circuit value selection by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/818
• fix(flow): branch-and-merge Python match arms by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/817
• fix(dart): seed dead-code reachability roots from lexical visibility by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/819
• feat(dart): resolve method calls on construction-temporary and factory receivers by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/821
• feat(io): C language flow support with a shared libc catalog and Java system properties by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/820
• feat(io): model Java java.net/http NETWORK sinks and Socket streams by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/822
• fix(incremental): disambiguate cross-language module qn on incremental add by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/823
• test(evals): add polyglot cross-language ingestion eval and regression guard by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/824
• feat(io): add C# to the I/O subsystem with BCL direct sinks by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/825
• feat(csharp): model new-shaped I/O handles (streams, HttpClient, ADO.NET) by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/826
• feat(csharp): emit FLOWS_TO taint edges through argument-wrapped sinks by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/828
• feat(tools): ast-grep structural search and replace toolkit (#415) by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/827
• docs(readme): slim README to a product overview that links to docs/ by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/829
• feat(parsers): ast-grep pattern-driven language tier with Ruby support by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/830
• feat(readme): auto-generate Latest News from a curated NEWS.md by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/831
• docs(readme): remove Fork History section by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/832
• feat(graph): detect patterns/smells/security issues via opt-in ast-grep findings (#413) by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/833
• docs(news): add Ruby ast-grep tier to Latest News by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/834
• fix(findings): stop hardcoded_secret flagging empty strings, templates, env-var names and URLs by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/835
• docs: use British English across documentation and user-facing strings by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/836
• fix(findings): flag loose inequality (!=) and regression-lock every rule fires by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/837
• chore: drop (H) comment markers and the no-docs enforcement hook by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/838
• fix(findings): widen xss, sqli and factory rules to catch missed sinks by @vitali87 in https://github.com/vitali87/code-graph-rag/pull/839

New Contributors

• @Shashank23123458867504 made their first contribution in https://github.com/vitali87/code-graph-rag/pull/765
• @TreavVasu made their first contribution in https://github.com/vitali87/code-graph-rag/pull/793
• @zc277584121 made their first contribution in https://github.com/vitali87/code-graph-rag/pull/780

Full Changelog: https://github.com/vitali87/code-graph-rag/compare/v0.0.345...v0.0.421