v3.56.4

Name: ruflo
Author: ruvnet

ruvnet/ruflov3.56.4Oct 11, 2026by ruvnet

Upgrading?

What changed from v3.56.3 → v3.56.4?What's new in v3.56.5 after v3.56.4?

AI Summary

This is a patch release focused on security hardening for plugin-trust and helper components, alongside fixes for MCP interactions and Node 24 compatibility.

Key Highlights

Enhanced security for plugins and helpers, including trust anchor validation and path hardening.
Helper CLI behavior updated to run from the helper root without shell interpolation.
Performance improvement with graph path search becoming ~94x faster.
Fixed compatibility issues with Node 24 and better-sqlite3.

Breaking Changes

placeholder (all-zero) registry trust anchor no longer vouches

Full Release Notes

Patch release: plugin-trust and helper security fixes, MCP/task fixes, Node 24 sqlite fix.

Published: @claude-flow/cli, claude-flow, ruflo 3.56.4 (latest, alpha, v3alpha); leaves memory 3.0.4, integration 3.0.1, plugins 3.0.2, mcp 3.1.1, security 3.0.4.

Security: placeholder (all-zero) registry trust anchor no longer vouches (#3948); plugins upgrade no longer bypasses the install gate (#3951); plugin/helper locators stop at node_modules (#3986); session helper path and module-root hardening (#3949); helper CLI runs from the helper root, no shell interpolation of HELPER_ROOT (#3990); user-level settings pin home helpers (#3952); task_assign rejects __proto__ ids (#3967).
Fixes: Node 24 better-sqlite3 abort (#3955); agentic-flow root import runs its CLI (#3958); MCP resource cache stale writes fenced (#4019); security scan code-pattern false positives (#3999); MCP/task/CLI fixes #3975 #3974 #3970 #3969 #3968 #3980 #3947; graph path search ~94x faster (#3977).

Full list: CHANGELOG.md.

Related Repositories

openclaw/openclaw★ 392,695

The AI that really does things. Any OS. Any Platform. The lobster way. 🦞

nilbuild/developer-roadmap★ 370,068

Interactive roadmaps, guides and other educational content to help developers grow in their careers.

morluto/rea★ 357,612

Reverse engineer anything with agents, from app behavior down to native binaries.

anomalyco/opencode★ 219,662

The open source coding agent.

n8n-io/n8n★ 208,252

Fair-code workflow automation platform with native AI capabilities. Combine visual building with custom code, self-host or cloud, 400+ integrations.