Starstruk Logo MarkStarstruk

v3.48.0

ruvnet/ruflov3.48.0Sep 28, 2026by ruvnet

Upgrading?

What changed from v3.46.1 → v3.48.0?What's new in @claude-flow/plugins@3.0.1 after v3.48.0?

AI Summary

Marks the transition of internal `@claude-flow/*` packages from alpha to stable versions. Includes SQL-injection hardening and cleanup of local runtime state in tarballs.

Key Highlights

  • Internal packages (`cli-core`, `memory`, `neural`) are now stable (v3.0.0 / v3.7.0).
  • SQL-injection hardening in `@claude-flow/plugins` RuVector GNN builders.
  • Guarded public federation registration is now on `main`.
  • Cleaner tarballs by restricting local runtime state files.

Breaking Changes

  • Three affected alpha versions are deprecated.

New Features

  • Stable internal package versions.
  • SQL-injection hardening in RuVector GNN SQL builders.
  • Guarded public federation registration.
  • Restriction of local runtime state in package tarballs.

Full Release Notes

## Stable internal packages
The internal `@claude-flow/*` packages are off the alpha line. Everything `npx ruflo@3.48.0` installs now resolves to a single stable version:

| Package | Version |
|---|---|
| `@claude-flow/cli-core` | 3.7.0 |
| `@claude-flow/memory`, `neural`, `shared`, `security`, `mcp` (and the other internal leaves) | 3.0.0 |
| `@claude-flow/plugin-agent-federation`, `plugin-iot-cognitum` | 1.0.0 |

`@claude-flow/embeddings` stays on its alpha line for now.

## Also in this release
- **Guarded public federation registration** (first shipped in 3.47.0 from a release branch) is now on `main`, so this release keeps it.
- **SQL-injection hardening** in the `@claude-flow/plugins` ruvector attention SQL builders. Follow-up for `gnn.ts`: #3531.
- **Smaller, cleaner leaf tarballs.** A `files` allowlist on every leaf stops local runtime state (logs, pids, `settings.json`) from being packed. The three affected alpha versions are deprecated.

PR: #3530

Related Repositories

openclaw/openclaw★ 392,706

The AI that really does things. Any OS. Any Platform. The lobster way. 🦞

nilbuild/developer-roadmap★ 370,074

Interactive roadmaps, guides and other educational content to help developers grow in their careers.

morluto/rea★ 358,288

Reverse engineer anything with agents, from app behavior down to native binaries.

anomalyco/opencode★ 219,719

The open source coding agent.

n8n-io/n8n★ 208,261

Fair-code workflow automation platform with native AI capabilities. Combine visual building with custom code, self-host or cloud, 400+ integrations.