From 868c3ba8fca05b2d52ddf068e57ab29d6ae1a5b0 Mon Sep 17 00:00:00 2001 From: DMarinhoCodacy Date: Wed, 2 Sep 2026 12:05:38 +0100 Subject: [PATCH 1/4] Release Notes August 2026 --- docs/release-notes/cloud/cloud-2026-08.md | 134 ++++++++++++++++++++++ docs/release-notes/index.md | 1 + mkdocs.yml | 1 + 3 files changed, 136 insertions(+) create mode 100644 docs/release-notes/cloud/cloud-2026-08.md diff --git a/docs/release-notes/cloud/cloud-2026-08.md b/docs/release-notes/cloud/cloud-2026-08.md new file mode 100644 index 0000000000..ddd2a0854d --- /dev/null +++ b/docs/release-notes/cloud/cloud-2026-08.md @@ -0,0 +1,134 @@ +--- +rss_title: Codacy release notes RSS feed +rss_href: /feed_rss_created.xml +description: Release notes for Codacy Cloud August 2026. +Codacy_tools_version_old: https://github.com/Codacy/tools/releases/tag/9.3.61 +Codacy_tools_version_new: https://github.com/Codacy/tools/releases/tag/9.3.104 +--- + +# Cloud August 2026 + +These release notes are for the Codacy Cloud updates during August 2026. + +📢 [Visit the Codacy roadmap](https://roadmap.codacy.com) and let us know your feedback on both new and planned product updates! + +### Features +- **Repository (Project) Tokens for API v3:** Full rollout of scoped repository tokens — creation, listing, deletion (single & bulk), and expiration — now supported end-to-end across the website SPA, Analysis CLI, and Cloud CLI. (OD-345, OD-497, OD-384, OD-408, OD-411, OD-489, OD-410, OD-400, OD-409, OD-390, OD-407, OD-389, OD-499) + +- **Mandatory token expiration & auditability:** Repository tokens now enforce a maximum lifetime, surfaced in both the API and the SPA. (OD-431, OD-432) + +- **Pull Requests page filters:** New search + branch-scope filter bar on the Pull Requests page, backed by API support and a new `pull-requests list` command in the Cloud CLI. (OD-377, OD-378) + +- **Review button for autoconfig:** The SPA now shows a "Review" button whenever a previous auto-config run is available. (OD-580) + +- **Stronger warning on onboarding sliders:** A stronger warning now appears when reviewer sliders are set to maximum during onboarding. (OD-404) + +- **End analysis date on commits:** Commit list, header, and summary now show the end-of-analysis date beside the commit date. (OD-465) + +- **Dart support in the Analysis CLI:** Added a `dartanalyzer` adapter, closing a cli-v2 parity gap for Dart projects. (OD-428) + +### Improvements + +- **Autoconfig scheduling fix:** Fixed a head-of-line blocking bug where a single-org burst could delay autoconfig runs for every other org. (OD-559) + +- **Autoconfig failure handling:** Fixed permits/counters not being released on autoconfig failure, and fixed silent failed runs not being tracked correctly. (OD-272, OD-421) + +- **Autoconfig reliability fix:** Fixed Gemini tools failing when they attempted a web search. (OD-519) + +- **API fix:** `triggerPullRequestAiReview` now correctly returns 404 instead of 204 for invalid PR numbers. (OD-187) + +- **Token fixes:** Fixed duplicate repository token names returning a 500 instead of a 400, and fixed the badge generator picking the wrong token type for public README badges. (OD-498, OD-406) + +- **Coverage fixes:** Fixed coverage resync not firing on plain-commit reanalysis, fixed coverage status getting stuck out of date after a commit mismatch, and improved handling of final coverage report processing to prevent slowdowns. (OD-414, OD-462, OD-463, OD-456, OD-455) + +- **Pull Requests fix:** Fixed pull requests with unresolvable commits being silently dropped from the PR list. (OD-464) + +- **Fixed the OAuth callback URL for Windsurf login.** (OD-368) + +- **Security dashboard (SRM) fixes:** Fixed missing metrics reporting during clean-up, and fixed empty analysis results not triggering an update, both of which could leave stale or missing findings on the Security Dashboard. (OD-484, OD-469) + +- **Analysis CLI:** Trivy issue parity fixes (sourceId, line-number resolution, fix version) for more accurate CLI-reported results. (OD-425) + +- **UI polish:** Adjusted the Pull Requests page filters drawer alignment and copy, and enabled word wrap for the affected-functions prompt text. (OD-481, OD-451) + +- **GitLab fix:** Full repo path now shown on the add-repo dialog, fixing ambiguity for GitLab repos with duplicate names. (OD-422) + +- **Docs updates:** Updated Guardrails install instructions and account/repository token documentation. (OD-423, OD-382, OD-395, OD-379) + +- **Fixed PHP CS Fixer rule miscategorization.** (TCE-1578) + +- **Improved the Scalameta `LowerCasePatternMatching` rule.** (TCE-1383) + +- **Disabled customer-specific custom rules by default** in Opengrep for new guided coding standards, preventing false positives on first setup. (TCE-1577) + +- **Updated coverage docs** to reference the `/setup-coverage` skill. (TCE-1579) + +## Tool versions + +## Updated tools + +- **Biome** has a new version: 2.5.6 (updated from 2.4.10) +- **Cppcheck** has a new version: 2.21.1 (updated from 2.21.0) +- **Credo** has a new version: 1.7.19 (updated from 1.7.12) +- **Dart Analyzer** has a new version: 3.12.2 (updated from 3.9.3) +- **Flawfinder** has a new version: 2.0.20 (updated from 2.0.19) +- **golangci-lint** has a new version: 2.11.0 (updated from 2.7.2) +- **Revive** has a new version: 1.15.0 (updated from 1.12.0) +- **Gosec** has a new version: 2.28.0 (updated from 2.22.7) +- **Hadolint** has a new version: 2.14.0 (updated from 2.12.0) +- **Jackson Linter** has a new version: 2.22.1 (updated from 2.19.2) +- **markdownlint** has a new version: 0.41.1 (updated from 0.40.0) +- **PHP CS Fixer** has a new version: 3.95.17 (updated from 3.95.15) +- **PMD 7** has a new version: 7.26.0 (updated from 7.16.0) +- **Prospector** has a new version: 1.19.1 (updated from 1.18.0) +- **PSScriptAnalyzer** has a new version: 1.25.0 (updated from 1.24.0) +- **Roslyn** has a new version: 1.26.0 (updated from 1.23.0) +- **Ruff** has a new version: 0.16.0 (updated from 0.12.7) +- **Spectral** has a new version: 1.22.6 (updated from 1.22.0) +- **SpotBugs** has a new version: 4.10.3 (updated from 4.8.4) +- **SQLFluff** has a new version: 4.2.2 (updated from 4.1.0) +- **SQLint** has a new version: 0.3.0 (updated from 0.2.1) +- **Staticcheck** has a new version: 2026.1 (updated from 2025.1.1) +- **Stylelint** has a new version: 16.26.1 (updated from 17.13.0) +- **Trivy** has a new version: 0.72.0 (updated from 0.70.0) + +## Unchanged tools + +- **AgentLinter**: 0.3.3 +- **aligncheck**: 1.0.0 +- **Ameba**: 1.6.4 +- **Bandit**: 1.9.4 +- **Brakeman**: 4.3.1 +- **Bundler Audit**: 0.9.1 +- **Checkov**: 3.3.8 +- **Checkstyle**: 13.9.0 +- **clang-tidy**: 10.0.1 +- **CodeNarc**: 3.6.0 +- **PHP CodeSniffer**: 4.0.1 +- **CoffeeLint**: 5.2.11 +- **CSSLint**: 1.0.5 +- **deadcode**: 1.0.0 +- **Detekt**: 1.23.8 +- **ESLint v7**: 7.32.0 +- **ESLint v8**: 8.57.0 +- **ESLint v9**: 9.39.5 +- **Faux Pas**: 1.7.2 +- **JSHint**: 2.13.6 +- **Lizard**: 1.23.0 +- **Opengrep**: 1.26.0 +- **PHP Mess Detector**: 2.14.1 +- **PMD 6**: 6.55.0 +- **Pylint**: 1.9.5 +- **Pylint (Python 3)**: 4.0.5 +- **Reek**: 6.5.0 +- **remark-lint**: 10.0.1 +- **RuboCop**: 1.88.2 +- **Scalameta Pro**: 4.0.0 +- **ScalaStyle**: 1.5.1 +- **ShellCheck**: 0.10.0 +- **SonarC#**: 9.32 +- **SonarVB**: 8.13 +- **SwiftLint**: 0.63.2 +- **Tailor**: 0.12.0 +- **TSLint**: 6.1.3 +- **TSQLLint**: 1.16.0 \ No newline at end of file diff --git a/docs/release-notes/index.md b/docs/release-notes/index.md index aba676dcd3..94b6fe81d2 100644 --- a/docs/release-notes/index.md +++ b/docs/release-notes/index.md @@ -21,6 +21,7 @@ For product updates that are in progress or planned [visit the Codacy public roa ### 2026 {.release-series} +- [Cloud August 2026](cloud/cloud-2026-08.md) - [Cloud July 2026](cloud/cloud-2026-07.md) - [Support for Shellcheck configuration file - July, 2026](cloud/cloud-2026-07-adding-shellcheck-config-file.md) - [Adding PHP CS Fixer and support to Checkov configuration files July, 2026](cloud/cloud-2026-07-adding-phpcsfixer-checkov-config-files.md) diff --git a/mkdocs.yml b/mkdocs.yml index 4a0432c012..57c45285e5 100644 --- a/mkdocs.yml +++ b/mkdocs.yml @@ -775,6 +775,7 @@ nav: - release-notes/index.md - Cloud: - 2026: + - release-notes/cloud/cloud-2026-08.md - release-notes/cloud/cloud-2026-07.md - release-notes/cloud/cloud-2026-07-adding-shellcheck-config-file.md - release-notes/cloud/cloud-2026-07-adding-phpcsfixer-checkov-config-files.md From bf5c0b47b16738293b50a98e3a1dddfb63fd4e58 Mon Sep 17 00:00:00 2001 From: DMarinhoCodacy Date: Wed, 2 Sep 2026 12:12:55 +0100 Subject: [PATCH 2/4] fix vale errors --- .github/styles/config/vocabularies/Codacy/accept.txt | 3 +++ docs/release-notes/cloud/cloud-2026-08.md | 6 +++--- 2 files changed, 6 insertions(+), 3 deletions(-) diff --git a/.github/styles/config/vocabularies/Codacy/accept.txt b/.github/styles/config/vocabularies/Codacy/accept.txt index 88707b3868..eeb943702a 100644 --- a/.github/styles/config/vocabularies/Codacy/accept.txt +++ b/.github/styles/config/vocabularies/Codacy/accept.txt @@ -116,3 +116,6 @@ Visualforce VSCode webserver Xcode +sourceId +resync +autoconfig diff --git a/docs/release-notes/cloud/cloud-2026-08.md b/docs/release-notes/cloud/cloud-2026-08.md index ddd2a0854d..80439a0d51 100644 --- a/docs/release-notes/cloud/cloud-2026-08.md +++ b/docs/release-notes/cloud/cloud-2026-08.md @@ -13,7 +13,7 @@ These release notes are for the Codacy Cloud updates during August 2026. 📢 [Visit the Codacy roadmap](https://roadmap.codacy.com) and let us know your feedback on both new and planned product updates! ### Features -- **Repository (Project) Tokens for API v3:** Full rollout of scoped repository tokens — creation, listing, deletion (single & bulk), and expiration — now supported end-to-end across the website SPA, Analysis CLI, and Cloud CLI. (OD-345, OD-497, OD-384, OD-408, OD-411, OD-489, OD-410, OD-400, OD-409, OD-390, OD-407, OD-389, OD-499) +- **Repository (Project) Tokens for API v3:** Full rollout of scoped repository tokens — creation, listing, deletion (single & bulk), and expiration-now supported end-to-end across the website SPA, Analysis CLI, and Cloud CLI. (OD-345, OD-497, OD-384, OD-408, OD-411, OD-489, OD-410, OD-400, OD-409, OD-390, OD-407, OD-389, OD-499) - **Mandatory token expiration & auditability:** Repository tokens now enforce a maximum lifetime, surfaced in both the API and the SPA. (OD-431, OD-432) @@ -41,7 +41,7 @@ These release notes are for the Codacy Cloud updates during August 2026. - **Coverage fixes:** Fixed coverage resync not firing on plain-commit reanalysis, fixed coverage status getting stuck out of date after a commit mismatch, and improved handling of final coverage report processing to prevent slowdowns. (OD-414, OD-462, OD-463, OD-456, OD-455) -- **Pull Requests fix:** Fixed pull requests with unresolvable commits being silently dropped from the PR list. (OD-464) +- **Pull Requests fix:** Fixed pull requests with unresolvable commits being dropped from the PR list. (OD-464) - **Fixed the OAuth callback URL for Windsurf login.** (OD-368) @@ -51,7 +51,7 @@ These release notes are for the Codacy Cloud updates during August 2026. - **UI polish:** Adjusted the Pull Requests page filters drawer alignment and copy, and enabled word wrap for the affected-functions prompt text. (OD-481, OD-451) -- **GitLab fix:** Full repo path now shown on the add-repo dialog, fixing ambiguity for GitLab repos with duplicate names. (OD-422) +- **GitLab fix:** Full repository path now shown on the add-repo dialog, fixing ambiguity for GitLab repositories with duplicate names. (OD-422) - **Docs updates:** Updated Guardrails install instructions and account/repository token documentation. (OD-423, OD-382, OD-395, OD-379) From 6ff530fe44eb4a42fae4880181de56357d296302 Mon Sep 17 00:00:00 2001 From: DMarinhoCodacy Date: Wed, 2 Sep 2026 12:18:37 +0100 Subject: [PATCH 3/4] remove ticket ids and refine the list --- docs/release-notes/cloud/cloud-2026-08.md | 48 ++++++++++------------- 1 file changed, 20 insertions(+), 28 deletions(-) diff --git a/docs/release-notes/cloud/cloud-2026-08.md b/docs/release-notes/cloud/cloud-2026-08.md index 80439a0d51..18340b44dd 100644 --- a/docs/release-notes/cloud/cloud-2026-08.md +++ b/docs/release-notes/cloud/cloud-2026-08.md @@ -13,55 +13,47 @@ These release notes are for the Codacy Cloud updates during August 2026. 📢 [Visit the Codacy roadmap](https://roadmap.codacy.com) and let us know your feedback on both new and planned product updates! ### Features -- **Repository (Project) Tokens for API v3:** Full rollout of scoped repository tokens — creation, listing, deletion (single & bulk), and expiration-now supported end-to-end across the website SPA, Analysis CLI, and Cloud CLI. (OD-345, OD-497, OD-384, OD-408, OD-411, OD-489, OD-410, OD-400, OD-409, OD-390, OD-407, OD-389, OD-499) +- **Repository (Project) Tokens for API v3:** Full rollout of scoped repository tokens — creation, listing, deletion (single & bulk), and expiration-now supported end-to-end across the website SPA, Analysis CLI, and Cloud CLI. -- **Mandatory token expiration & auditability:** Repository tokens now enforce a maximum lifetime, surfaced in both the API and the SPA. (OD-431, OD-432) +- **Mandatory token expiration & auditability:** Repository tokens now enforce a maximum lifetime, surfaced in both the API and the SPA. -- **Pull Requests page filters:** New search + branch-scope filter bar on the Pull Requests page, backed by API support and a new `pull-requests list` command in the Cloud CLI. (OD-377, OD-378) +- **Pull Requests page filters:** New search + branch-scope filter bar on the Pull Requests page, backed by API support and a new `pull-requests list` command in the Cloud CLI. -- **Review button for autoconfig:** The SPA now shows a "Review" button whenever a previous auto-config run is available. (OD-580) - -- **Stronger warning on onboarding sliders:** A stronger warning now appears when reviewer sliders are set to maximum during onboarding. (OD-404) - -- **End analysis date on commits:** Commit list, header, and summary now show the end-of-analysis date beside the commit date. (OD-465) - -- **Dart support in the Analysis CLI:** Added a `dartanalyzer` adapter, closing a cli-v2 parity gap for Dart projects. (OD-428) +- **Dart support in the Analysis CLI:** Added a `dartanalyzer` adapter, closing a cli-v2 parity gap for Dart projects. ### Improvements -- **Autoconfig scheduling fix:** Fixed a head-of-line blocking bug where a single-org burst could delay autoconfig runs for every other org. (OD-559) - -- **Autoconfig failure handling:** Fixed permits/counters not being released on autoconfig failure, and fixed silent failed runs not being tracked correctly. (OD-272, OD-421) +- **End analysis date on commits:** Commit list, header, and summary now show the end-of-analysis date beside the commit date. -- **Autoconfig reliability fix:** Fixed Gemini tools failing when they attempted a web search. (OD-519) +- **Stronger warning on onboarding sliders:** A stronger warning now appears when reviewer sliders are set to maximum during onboarding. -- **API fix:** `triggerPullRequestAiReview` now correctly returns 404 instead of 204 for invalid PR numbers. (OD-187) +- **API fix:** `triggerPullRequestAiReview` now correctly returns 404 instead of 204 for invalid PR numbers. -- **Token fixes:** Fixed duplicate repository token names returning a 500 instead of a 400, and fixed the badge generator picking the wrong token type for public README badges. (OD-498, OD-406) +- **Token fixes:** Fixed duplicate repository token names returning a 500 instead of a 400, and fixed the badge generator picking the wrong token type for public README badges. -- **Coverage fixes:** Fixed coverage resync not firing on plain-commit reanalysis, fixed coverage status getting stuck out of date after a commit mismatch, and improved handling of final coverage report processing to prevent slowdowns. (OD-414, OD-462, OD-463, OD-456, OD-455) +- **Coverage fixes:** Fixed coverage resync not firing on plain-commit reanalysis, fixed coverage status getting stuck out of date after a commit mismatch, and improved handling of final coverage report processing to prevent slowdowns. -- **Pull Requests fix:** Fixed pull requests with unresolvable commits being dropped from the PR list. (OD-464) +- **Pull Requests fix:** Fixed pull requests with unresolvable commits being dropped from the PR list. -- **Fixed the OAuth callback URL for Windsurf login.** (OD-368) +- **Fixed the OAuth callback URL for Windsurf login.** -- **Security dashboard (SRM) fixes:** Fixed missing metrics reporting during clean-up, and fixed empty analysis results not triggering an update, both of which could leave stale or missing findings on the Security Dashboard. (OD-484, OD-469) +- **Security dashboard (SRM) fixes:** Fixed missing metrics reporting during clean-up, and fixed empty analysis results not triggering an update, both of which could leave stale or missing findings on the Security Dashboard. -- **Analysis CLI:** Trivy issue parity fixes (sourceId, line-number resolution, fix version) for more accurate CLI-reported results. (OD-425) +- **Analysis CLI:** Trivy issue parity fixes (sourceId, line-number resolution, fix version) for more accurate CLI-reported results. -- **UI polish:** Adjusted the Pull Requests page filters drawer alignment and copy, and enabled word wrap for the affected-functions prompt text. (OD-481, OD-451) +- **UI polish:** Adjusted the Pull Requests page filters drawer alignment and copy, and enabled word wrap for the affected-functions prompt text. -- **GitLab fix:** Full repository path now shown on the add-repo dialog, fixing ambiguity for GitLab repositories with duplicate names. (OD-422) +- **GitLab fix:** Full repository path now shown on the add-repo dialog, fixing ambiguity for GitLab repositories with duplicate names. -- **Docs updates:** Updated Guardrails install instructions and account/repository token documentation. (OD-423, OD-382, OD-395, OD-379) +- **Docs updates:** Updated Guardrails install instructions and account/repository token documentation. -- **Fixed PHP CS Fixer rule miscategorization.** (TCE-1578) +- **Fixed PHP CS Fixer rule miscategorization.** -- **Improved the Scalameta `LowerCasePatternMatching` rule.** (TCE-1383) +- **Improved the Scalameta `LowerCasePatternMatching` rule.** -- **Disabled customer-specific custom rules by default** in Opengrep for new guided coding standards, preventing false positives on first setup. (TCE-1577) +- **Disabled customer-specific custom rules by default** in Opengrep for new guided coding standards, preventing false positives on first setup. -- **Updated coverage docs** to reference the `/setup-coverage` skill. (TCE-1579) +- **Updated coverage docs** to reference the `/setup-coverage` skill. ## Tool versions From ce341ac83168b357ee6be5afff5a8da633e1201d Mon Sep 17 00:00:00 2001 From: DMarinhoCodacy Date: Wed, 2 Sep 2026 12:25:58 +0100 Subject: [PATCH 4/4] fix codacy suggestion --- docs/release-notes/cloud/cloud-2026-08.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/release-notes/cloud/cloud-2026-08.md b/docs/release-notes/cloud/cloud-2026-08.md index 18340b44dd..5691f28fc6 100644 --- a/docs/release-notes/cloud/cloud-2026-08.md +++ b/docs/release-notes/cloud/cloud-2026-08.md @@ -13,7 +13,7 @@ These release notes are for the Codacy Cloud updates during August 2026. 📢 [Visit the Codacy roadmap](https://roadmap.codacy.com) and let us know your feedback on both new and planned product updates! ### Features -- **Repository (Project) Tokens for API v3:** Full rollout of scoped repository tokens — creation, listing, deletion (single & bulk), and expiration-now supported end-to-end across the website SPA, Analysis CLI, and Cloud CLI. +- **Repository (Project) Tokens for API v3:** Full rollout of scoped repository tokens — creation, listing, deletion (single & bulk), and expiration is now supported end-to-end across all features of our product. - **Mandatory token expiration & auditability:** Repository tokens now enforce a maximum lifetime, surfaced in both the API and the SPA.