trelix 3.4.3

trelix 3.4.2

v3.4.1 -- security patch

CRITICAL: fixed ImageConnector following filesystem symlinks with no
containment check, letting a symlink under an indexed repo have its
target's raw bytes forwarded to the configured vision API.

Also fixed: a decompression-bomb bypass, BedrockBackend's thinking/
temperature-rejection interaction, fallback/temperature-rejection
composability, and an empty/whitespace-only vision_model bypass -- plus
5 follow-on gaps found by a second adversarial-verification pass on
these fixes themselves.

See CHANGELOG.md for full details.

v3.4.0

Raster-image (.png/.jpg/.jpeg) indexing: multimodal ChatMessage/Anthropic
vision plumbing (#397), ImageConnector + config + registry/CLI wiring incl.
trelix connector list (#398), SADU eval-corpus fixtures + docs (#399).

Bedrock as a second, explicit vision provider (#400), plus a real fix for
Bedrock's Converse API rejecting temperature on claude-sonnet-5.

See CHANGELOG.md for full details.

trelix v3.3.8

Fixed:
- MCP/adapter Retriever caching (live-measured 24.5x-52.7x speedup)
- scipy/pagerank ImportError fallback (crash on scipy-less environments, e.g. the PyInstaller binary)
- GitHub App now posts a Check run instead of silence when trelix review itself fails

Removed:
- diff_embedder.py dead code (built and tested, never integrated)

v3.3.7

CLI error-handling, REST API error/validation/auth fixes, DiagramConnector
fallback content preservation, VS Code .vsix packaging leak fix, and
docs-accuracy corrections. See CHANGELOG.md for details.

v3.3.6

Fixed: litellm security-CVE floor bump, QueryPlanner/EmbedderConfig LLM-provider decoupling, real trelix audit prune.
Added: abstractive compression provider, .drawio diagram connector pilot.

See CHANGELOG.md for full details.

Merge pull request #335 from sairam0424/develop

chore(release): promote 3.3.5 to main

Merge pull request #332 from sairam0424/develop

chore(release): promote 3.3.4 to main