ruflo updates — week of 2026-06-07 (14 new commits, tip d065b1592)

[github-actions]

ruvnet/ruflo — last 7 days

Window: since 2026-05-31 · Upstream tip: d065b1592

feat (1)

• 1c98cbee6 feat(security): P1 implementations for ADR-144, ADR-145, ADR-146 (ruv)

fix (8)

• facec4ccc fix(memory): auto-memory cluster — frontmatter parse, _ paths, plugin lookup, embed default (#2291) (rUv)
• 844f68dbe fix(memory): drop agentdb's stale "Falling back to mock embeddings" warning cluster (ruv)
• 9db902489 fix(memory): rescue agentdb's mock-embedder fallback when ruvector ONNX is live (ruv)
• d79f51b74 fix(ci): 3 last newly-visible failures — env-var audit, wizard cli path, root npm ci (ruv)
• 920ba4b04 fix(supply-chain): correct tracking issue ref in vitest accepted-finding (#2270 was a typo for #2268) (ruv)
• f08318f2c fix(ci): green up the 3 audit jobs newly visible after the YAML fix (ruv)
• 7d67d3246 fix(ci): regenerate v3/pnpm-lock.yaml — agentdb alpha.14→alpha.16 + ruvector@0.2.27 (ruv)
• 4c0144371 fix: #2267 #2257 #2256 #2253 — CI/router/ONNX bug cluster (ruv)

docs (1)

• 08bf1cf32 docs(adr): three Proposed security ADRs (144, 145, 146) covering the dream-cycle cluster (ruv)

chore (2)

• d065b1592 chore(release): 3.10.37 — auto-memory cluster fixes (#2281–#2285) (ruvnet)
• f5570eb70 chore(data): clone snapshot ruflo updates — week of 2026-05-24 (130 new commits, tip 619b263aa) #5 — 0 clones (14d) (ruflo-bot)

other (2)

• 07b4c8609 release: 3.10.33 + CI regression guards for #2267 / #2257 / #2256 (ruv)
• f57b69876 Update README.md (rUv)

---

Inspect a commit: git fetch upstream && git show <sha>
Diff a path: git diff upstream/main -- path/to/file
Port a commit: git cherry-pick <sha> (expect conflicts — no shared history)