fix: resolve install.sh latest version without the GitHub API (#325) (#336)

The standalone installer resolved the latest release via the GitHub API, which
rate-limits unauthenticated requests to 60/hr per IP and returns 403 on shared
or cloud hosts (devboxes, CI) — leaving "could not resolve latest version". It
now reads the version from the releases/latest web redirect (no rate limit),
falling back to the API, and normalizes CODEGRAPH_VERSION so a bare "0.9.4"
works as well as "v0.9.4".

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
Colby Mchenry
2026-05-22 12:53:07 -05:00
committed by GitHub
co-authored by Claude Opus 4.7
parent 15072aa29f
commit 4e34ba8399
2 changed files with 22 additions and 1 deletions
+9
View File
@@ -31,6 +31,15 @@ and adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
`CODEGRAPH_DOWNLOAD_BASE=<url>` to point it at your own mirror of the release
archives; the standalone `install.sh` remains the no-Node alternative. Resolves
[#303](https://github.com/colbymchenry/codegraph/issues/303).
- **`install.sh` failing with `403` / "could not resolve latest version" on
shared or cloud hosts.** The standalone installer resolved the latest release
through the GitHub API, whose unauthenticated limit is 60 requests/hour per IP
— routinely exhausted on cloud devboxes and CI where many users share an
address, returning `403` (issue #325). It now resolves the version from the
`releases/latest` web redirect, which isn't rate-limited (and still falls back
to the API). `CODEGRAPH_VERSION` also accepts a bare `0.9.4` in addition to
`v0.9.4`. Resolves
[#325](https://github.com/colbymchenry/codegraph/issues/325).
## [0.9.3] - 2026-05-22