v0.9.65

aigc3d/LAMv0.9.65Sep 20, 2026by safishamsi

Upgrading?

AI Summary

This release addresses security vulnerabilities by updating dependencies, improves language-specific AST node handling for Go and Swift, and fixes various bugs related to incremental builds, graph visualization, and string rendering.

Key Highlights

  • Security update: Floors Pillow to version 12.3.0 to fix CVE-2026-54058.
  • Language Support: Method requirements for Go interfaces and Swift protocols now attach correctly to their respective nodes.
  • Bug Fixes: Resolves a deadlock in incremental rebuilds and fixes stack overflow issues in large graph visualizations.
  • UI/UX: Tooltips now display special characters like C++ templates and generics correctly.

New Features

  • Go interface method requirements now attach to the interface node.
  • Swift protocol method requirements now attach to the protocol node.
  • Repository links updated to point at Graphify-Labs/graphify.
  • GitHub issue/PR templates added to the repository.

Full Release Notes


- Security: the `svg`/`all` extras now floor Pillow at `>=12.3.0` for CVE-2026-54058 (Pillow was pulled in transitively via matplotlib). Note: Pillow 12.3.0 dropped its glibc<2.27 cp310 Linux wheel, so a very old-glibc Python 3.10 host with the `svg`/`all` extra builds Pillow from sdist (#3698, thanks @viral-antuit).
- Feature: a Go interface's method requirements (`type Foo interface { Bar() }`) now attach to the interface node, so calls resolve to them (#3672, thanks @rajatnagda45).
- Feature: a Swift protocol's method requirements (`protocol P { func f() }`) now attach to the protocol node (#3673, thanks @rajatnagda45).
- Fix: Java enum body members (methods/constructor/fields after the constants) now attach to the enum, not the file, and intra-enum calls resolve (#3674, thanks @rajatnagda45).
- Fix: a Verilog module instantiation now links to the module's local definition instead of a phantom duplicate; a genuinely external module stays a sourceless stub (#3675, thanks @rajatnagda45).
- Fix: JS/TS `let`/`const` bindings are now scoped to their own block rather than the whole function, so a block-local binding no longer suppresses a genuine `indirect_call` edge elsewhere in the function; `var` stays function-scoped (#3688, thanks @ayushcodes10).
- Fix: the incremental rebuild no longer purges AST nodes it just reported as fail-closed "kept" — the eviction pass re-checks the kept set, so a moved-file/symlink layout can't deadlock the shrink guard into refusing every update (#3697, #3695, thanks @hopstreax).
- Fix: `graph.html` no longer crashes vis-network with a stack overflow on large graphs — nodes are seeded on a spiral before physics runs so overlap-avoidance can't blow the layout recursion (#3699, thanks @sanjaiyan-dev).
- Fix: node and edge tooltips now show special characters literally (C++ templates like `vector<int>`, generics, `&`, quotes) instead of raw HTML entities, while the HTML sinks that need escaping keep it (#3686, #3664, thanks @hopstreax).
- Docs: repository links now point at `Graphify-Labs/graphify` instead of the old account (including in generated wiki output), translated READMEs use the current logo, GitHub issue/PR templates were added, and the Enterprise link was corrected (#3692, #3694, #3693, thanks @Abdul535).

Related Repositories