v1.3.1 Release Notes¶

Release Date: February 1, 2026

Highlights¶

• 🚀 Faster Pre-Commit Hooks - Switched to verify_local.sh for sub-minute feedback
• 📋 Documentation Validation - Steps 9–11 added to verify.sh for docs sync checks
• 🔒 Optional Security Checks - Bandit and pip-audit added as warning-only in local validation

Changes¶

Pre-Commit Hook Speed¶

The pre-commit hook now runs verify_local.sh instead of the full verify.sh. This brings pre-commit feedback from several minutes down to under 60 seconds while still catching formatting and lint issues via auto-fix.

Black / Ruff Path Alignment¶

verify_local.sh now checks only src/ and tests/, matching the paths used in CI. Previously it ran against the entire repository, causing false positives on generated and vendored files.

New Features¶

Documentation Validation Steps¶

verify.sh gained three new steps (9–11) that run before a push is allowed:

Optional Security Checks¶

verify_local.sh now runs Bandit (static security analysis) and pip-audit (dependency vulnerability scan) in warning-only mode. Findings are printed but do not block the commit, keeping the hook fast while surfacing issues early.

Breaking Changes¶

None. v1.3.1 is fully backward compatible with v1.3.0.

Upgrade Guide¶

From v1.3.0¶

pip install --upgrade codescalpel

No configuration changes required. The pre-commit hook update takes effect automatically on your next commit if you have the hook installed.

Known Issues¶

• Inherited from v1.3.0: path suggestions may be slow on very large workspaces (>10,000 files)

Full Changelog¶

See the detailed changelog for all changes.