{
  "id": 9965542,
  "title": "trelix v3.2.2 to v3.3.8: A GitHub App Already Hardened and Running in Production, and a Connector That Never Touches a Pixel",
  "url": "https://urgent.news/2026/09/26/trelix-v3-2-2-to-v3-3-8-a-github-app-already-hardened-and-running-in",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-09-26T11:08:08.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/sai_ram_0000/trelix-v322-to-v338-a-github-app-already-hardened-and-running-in-production-and-a-connector-3hng"
  },
  "original_language": "en",
  "account": "The article discusses the evolution of the GitHub app Trelix from version 3.2.2 to the current version 3.3.8. In version 3.2.2, two defects were discovered: one where the trelix-mcp command was not present in the 3.2.1 image and another where the MCP console script ignored all flags. These defects were found by running the actual published artifacts instead of the source code.\n\nVersion 3.2.3 introduced changes to address these defects by creating a CI pipeline that runs Trelix-MCP as an actual OS process talking real stdio JSON-RPC. Version 3.2.3 also fixed a bug related to LIKE -wildcard escaping in path_filter -scoped BM25/grep queries.\n\nThe bulk of the changes in this span involve a system that prevents the class of defects previously present from reaching a tag again. In version 3.3.8, the current release, the code is found to be correct, whereas previously the code had lied to the tests. The article also mentions other new features and fixes, such as a diagram connector, MCP protocol upgrade, retriever-caching fix, compression provider, audit-log pruning mechanism, and a renamed class with incorrect changelog entries.",
  "summary": "docker run --entrypoint trelix-mcp ghcr.io/sairam0424/trelix:3.2.1 --help returns exit code 127: command not found. Not a typo, not a stale tag — the published 3.2.1 image never contained trelix-mcp at all. The builder stage copied core trelix and nothing else, and .dockerignore 's blanket packages/ exclusion would have blocked the MCP package even if someone had remembered the COPY line. A…",
  "key_points": [
    "Trelix evolves from v3.2.2 to v3.3.8, addressing previous defects",
    "Version 3.2.3 introduces CI pipeline, fixes LIKE -wildcard bug",
    "Version 3.3.8 marks correct code, new features and fixes implemented"
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}