open/llm-security
1
0
Fork 0
Code Issues Releases 2 Activity

chore(llm-security): release v8.0.0 - version sync and changelog

Browse source 
Phase 6 of the approved v8.0.0 plan. HEAD was 45 commits past v7.8.3 with
every version-bearing file still reading 7.8.3 and no v8 tag anywhere.

Version sync: plugin.json, package.json, README badge, CLAUDE.md header.

CHANGELOG: [Unreleased] becomes [8.0.0] - 2026-09-18. It covered 3 of the
user-visible commits since v7.8.3; the other 18 fix/feat/refactor commits
are now recorded from their commit bodies - the commons extraction (five
tables, scanners/commons/ subtree, knowledge/signatures.json removed),
conformance spec 1.1, the golden-gate coverage relabel, and eight fixes
(script-tag recall, whole-table ReDoS gate and its own 8-of-45 blind spot,
Berry and nested lockfile-v1 misses, per-occurrence strip attribution,
legacy OpenAI keys, compileRules coercion, SIG self-flag, SARIF tags).
Counts verified against the loaded modules: 83 injection patterns, 19
secret shapes, 7 SIG rules.

SECURITY.md supported-versions table said 7.3.x Active; now 8.0.x Active,
7.0.x - 7.8.x best-effort. README gets the 8.0.0 row; CLAUDE.md gets the
v8.0.0 highlights and the test floor moves 2045+ to 2250+.

Tests: 2253 / 2247 pass / 0 fail / 6 skipped, exit 0, measured on HEAD
before the edits. The post-edit full run had 3 red, all timing ceilings,
under load average 60 from unrelated jobs on the machine; each passes
alone (460 ms of 1000, 370 ms of 2000, 2127 ms) and doc-consistency is
45/45 alone. The diff is docs and version strings only.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
This commit is contained in:
Kjell Tore Guttormsen 2026-09-18 00:16:19 +02:00
commit c14501e99c
6 changed files with 114 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

4
SECURITY.md
View file

@ -9,8 +9,8 @@ need stronger guarantees (see [`CONTRIBUTING.md`](CONTRIBUTING.md)).
| Version | Status |
|---------------|------------------------------------------------|
| 7.3.x | **Active.** Bug + security fixes. Stabilization line. |
| 7.0.x – 7.2.x | Best-effort security fixes only. Upgrade to 7.3.x recommended. |
| 8.0.x | **Active.** Bug + security fixes. Stabilization line. |
| 7.0.x – 7.8.x | Best-effort security fixes only. Upgrade to 8.0.x recommended. |
| < 7.0 | End of life. No fixes. |
The project is in **stabilization mode** as of 2026-05-01. New features are