[v2.9.0]
- Fixed the validation-phase message to appear when credential validation begins.
- Reduced scan CPU use in Base64 and Unicode detection without changing scan results.
- Library behavior change: validation
timeout(Duration::ZERO)andmax_response_bytes(0)now disable their respective limits instead of returning a build error. - Added
--no-limitsfor unlimited scan budgets and timeouts. Behavior change:--extraction-depth 0disables the archive depth limit; use--no-extract-archivesto disable extraction. #524 - GitHub user/org and GitLab user/group scans now overlap discovery, cloning, and scanning; added
--user-filefor both providers. Behavior change: clone limits select the first unique repositories discovered per provider in API order; explicit Git URLs and added wiki URLs are not counted. #525 - Added
--since-hours Nfor recent Git history scans. Behavior change:--since-commitnow scans all refs by default; use--branch HEADto retain the previous scope.--branchrestricts either scan. #526