Changelog
What's shipped
Every release, documented. From public beta to SBOM GA. To receive release notifications, email [email protected] with subject "changelog".
AI triage now surfaces reachability path in PR description, pinpointing which call chain imports the vulnerable function.
SBOM export GA: CycloneDX 1.5 and SPDX 2.3 for any repo or organization.
Fixed false positives in Cargo workspace scanning when virtual manifests are present.
Policy-as-code engine v2: OPA/Rego rules now supported alongside YAML policy files.
GitLab integration: support for group-level app installation across all sub-groups.
License risk detection GA: GPL/LGPL/AGPL/SSPL flagging with configurable allowlists.
Resolved duplicate PR creation on simultaneous push events to default branch.
Public beta launch: GitHub App live, npm, PyPI, and Maven ecosystems supported.