Changelog
New Features
- bbee10c2ac88c22d46195956de21aec264e55f56: feat(parser): add Groovy and Jenkinsfile support (#1387) (@salman-frs)
- 314b873ac804f833c087c5fe103593176d4e6723: feat: add --github-hide-passed to skip passing files in GitHub output (#1355) (@somaz94)
- c149d816bb161496cdb2402a720fa5e291236690: feat: name stdin input in test output (#1386) (@rylena)
Bug Fixes
- 64da8a2c30fe2b1b5c1a03abaf30ef739ad287dc: fix(output): escape ':' and ',' in GitHub workflow command file names (#1399) (@VXNCXNX)
- fa119bc7a7be36aa880764a73f2e4ce704a344e6: fix(sarif): percent-encode artifact paths (#1419) (@Hanabi9248)
- 944ef69f91e47fc38fb0bc309ba1dd4095c0c99b: fix: accept underscores in textproto message names (#1421) (@Hanabi9248)
- 82ba00224a4323f3fcd823c0dc820c6a3ca15f11: fix: allow --update to clone into a pre-existing --policy directory (#1383) (@pujitha24)
- 49f36aa793760155d11f8595981dc01582bea39a: fix: apply ignore regex to explicit files (#1413) (@SetraTheXX)
- c30bc1ad75500be8b45af4eb44e6fb41327322bb: fix: make test policy updates repeatable (#1379) (@Eljees)
- de666004b925e49599d0abfc6454e7ac29f04915: fix: preserve non-finite INI values as strings (#1420) (@Hanabi9248)
- 3a575a7d01ce75184dd048503901108a7319749f: fix: propagate plugin exit code to conftest process (#1345) (@arpitjain099)
- 2f2849899e1a92ee84ccf220127998ae4eba44cb: fix: return CycloneDX parser errors (#1335) (@immanuwell)
OPA Changes
- 1b97ec75db9c75d9b1692cb0d212a0d89c4aee42: build(deps): bump github.com/open-policy-agent/opa from 1.19.0 to 1.20.2 (#1418) (@dependabot[bot])
Other Changes
- b0d6b6aca8b9d4b5df71d5a4e4f6b455e0a59a7b: build(deps): bump actions/checkout from 7.0.0 to 7.0.1 (#1389) (@dependabot[bot])
- ba00b80094610c9f697bc95565152144afdf5599: build(deps): bump actions/setup-go from 6.3.0 to 7.0.0 (#1375) (@dependabot[bot])
- 186068286690a5419d0ec87bb947f055bfd6cf4b: build(deps): bump actions/setup-python from 6.1.0 to 7.0.0 (#1376) (@dependabot[bot])
- e2ee7c0c15ee37d6d8fe12b6b0f51b0526ebc452: build(deps): bump cachix/install-nix-action from 31.10.6 to 31.11.1 (#1402) (@dependabot[bot])
- 5eb803b6441dc873356df7b7431a7d9fa28b76da: build(deps): bump docker/build-push-action from 7.2.0 to 7.3.0 (#1381) (@dependabot[bot])
- 6b361331b456e21385a1882cf174d62d9e7bed10: build(deps): bump docker/login-action from 4.4.0 to 4.6.0 (#1390) (@dependabot[bot])
- b476e4997a0acf0420ecd6553cfe2919517947b8: build(deps): bump github.com/CycloneDX/cyclonedx-go (#1412) (@dependabot[bot])
- 6f3b7dc01edd82540b0833a858432b7e39816709: build(deps): bump github.com/hashicorp/go-getter from 1.8.6 to 1.8.8 (#1401) (@dependabot[bot])
- da2b32ace875277cce79cfecbcd51794389a83a2: build(deps): bump github.com/hashicorp/go-getter from 1.8.8 to 1.8.9 (#1416) (@dependabot[bot])
- 74d8677204ca1060995f7e0a720236b1a7dcc79c: build(deps): bump github.com/magiconair/properties (#1378) (@dependabot[bot])
- 6a3fd606993c1003de444a0ea93c7e916b845d4c: build(deps): bump github.com/moby/buildkit from 0.30.0 to 0.32.2 (#1392) (@dependabot[bot])
- 6274003426694dd32fc45729426529e5bb9b9c4e: build(deps): bump github.com/moby/buildkit from 0.32.2 to 0.33.0 (#1415) (@dependabot[bot])
- 85485c04b89f0559bc5a15c2ce800f3a607f953b: build(deps): bump golang from 1.26.5-alpine to 1.26.6-alpine (#1400) (@dependabot[bot])
- c0ac6cd9185669bb29bb3c20d46a0f917431a6d2: build(deps): bump golang from 1.26.6-alpine to 1.27.1-alpine (#1417) (@dependabot[bot])
- c93d486daba4746a1d14ea0887c8a9fb3698ac71: build(deps): bump js-yaml from 4.2.0 to 4.3.0 in /examples/ts (#1377) (@dependabot[bot])
- 9c5422852c3d41e3dbcd97035990dc8e8f49a3a3: build(deps): bump js-yaml from 4.3.0 to 4.3.1 in /examples/ts (#1391) (@dependabot[bot])
- 04eb67e655ef6e8921aaf322da1438ca578efac5: chore: Update flake.lock (#1407) (@jalseth)
- 87f727c61bb1b2d3717d4bb89165757970162037: chore: disable goconst in Go test files (#1406) (@jalseth)
- fc7d7d7df851eae01067ac9a7064774722a5fb4c: refactor(parser): Add Remarshal() helper (#1411) (@jalseth)