v3.42.3
tobychui/zoraxyv3.42.3Sep 16, 2026by ruvnet
Upgrading?
AI Summary
Addresses quoting issues in the test-only CLI-override parser for `RUFLO_HOOK_CLI_OVERRIDE` and fixes Windows publish pipeline errors where `npm.cmd` was being spawned without `shell:true`.
Key Highlights
- Fixed quote-aware split for `RUFLO_HOOK_CLI_OVERRIDE` to handle paths with spaces (e.g., `C:\Program Files`).
- Fixed Windows publish pipeline by spawning `npm.cmd` with `shell:true`.
- Verified end-to-end Windows publish pipeline and updated test counts.
Full Release Notes
## Fixes
- **hooks**: quote-aware split for `RUFLO_HOOK_CLI_OVERRIDE` (#3344) — the test-only CLI-override parser in `plugins/ruflo-core/scripts/ruflo-hook.cjs` did a naive `.split(' ')`, which broke `process.execPath` into `C:\Program` plus stray tokens on a standard Windows Node install (`C:\Program Files\nodejs\node.exe`). Found while verifying #3332's Windows argv fix on a real Windows machine rather than `windows-latest` CI (whose hosted Node path has no space). No production impact — `RUFLO_HOOK_CLI_OVERRIDE` is never set outside the test harness.
- **release**: spawn `npm.cmd` with `shell:true` on Windows (#3346, #3348) — `scripts/stage-internal-runtime-bundles.mjs` and `scripts/prepare-root-publish.mjs` both spawned `npm.cmd` directly without `shell:true`, which throws `EINVAL` on any current Node/Windows combo (CreateProcess can't launch a `.cmd`, and Node has refused to shell out to one implicitly since CVE-2024-27980). This blocked every Windows publish of `@claude-flow/cli` and the `claude-flow` umbrella package. Found live while publishing this release from a Windows machine.
## Verification
- `plugins/ruflo-core/scripts/test-hooks.mjs`: 32/32 (was 29/32 before #3344)
- `v3/@claude-flow/cli/__tests__/ruflo-hook-windows-argv.test.ts`, `escape-cmd-arg.test.cjs`, `mcp-launch.test.cjs`, `scripts/smoke-ruflo-hook-cjs.mjs`, cross-platform/env-var audits: all clean
- Full Windows publish pipeline (`@claude-flow/cli` → `claude-flow` → `ruflo`) exercised end-to-end on a real Windows machine after the fixes landed
- `latest` / `alpha` / `v3alpha` dist-tags verified aligned at 3.42.3 across all three packages
🤖 Generated with [RuFlo](https://github.com/ruvnet/ruflo)
Related Repositories
f.k.a. Awesome ChatGPT Prompts. Share, discover, and collect prompts from the community. Free and open source — self-host for your organization with complete privacy.
Open-source foundation of ToolJet AI - the enterprise app generation platform for internal tools, dashboards, business applications, workflows and AI agents. Build visually, from a prompt, or from Claude Code, Codex and Cursor over MCP 🚀
1,324-exercise fitness dataset — animation GIFs, 180×180 thumbnails, muscle-group & equipment data, and step-by-step instructions in 6 languages. The exercise data layer behind the LogPress app.
A complete web-based remote monitoring and management web site. Once setup you can install agents and perform remote desktop session to devices on the local network or over the Internet.
Human: AI-powered 3D Face Detection & Rotation Tracking, Face Description & Recognition, Body Pose Tracking, 3D Hand & Finger Tracking, Iris Analysis, Age & Gender & Emotion Prediction, Gaze Tracking, Gesture Recognition