Changelog
New Features
- bbee10c: feat(parser): add Groovy and Jenkinsfile support (#1387) (@salman-frs)
- 314b873: feat: add --github-hide-passed to skip passing files in GitHub output (#1355) (@somaz94)
- c149d81: feat: name stdin input in test output (#1386) (@rylena)
Bug Fixes
- 64da8a2: fix(output): escape ':' and ',' in GitHub workflow command file names (#1399) (@VXNCXNX)
- fa119bc: fix(sarif): percent-encode artifact paths (#1419) (@Hanabi9248)
- 944ef69: fix: accept underscores in textproto message names (#1421) (@Hanabi9248)
- 82ba002: fix: allow --update to clone into a pre-existing --policy directory (#1383) (@pujitha24)
- 49f36aa: fix: apply ignore regex to explicit files (#1413) (@SetraTheXX)
- c30bc1a: fix: make test policy updates repeatable (#1379) (@Eljees)
- de66600: fix: preserve non-finite INI values as strings (#1420) (@Hanabi9248)
- 3a575a7: fix: propagate plugin exit code to conftest process (#1345) (@arpitjain099)
- 2f28498: fix: return CycloneDX parser errors (#1335) (@immanuwell)
OPA Changes
- 1b97ec7: build(deps): bump github.com/open-policy-agent/opa from 1.19.0 to 1.20.2 (#1418) (@dependabot[bot])
Other Changes
- b0d6b6a: build(deps): bump actions/checkout from 7.0.0 to 7.0.1 (#1389) (@dependabot[bot])
- ba00b80: build(deps): bump actions/setup-go from 6.3.0 to 7.0.0 (#1375) (@dependabot[bot])
- 1860682: build(deps): bump actions/setup-python from 6.1.0 to 7.0.0 (#1376) (@dependabot[bot])
- e2ee7c0: build(deps): bump cachix/install-nix-action from 31.10.6 to 31.11.1 (#1402) (@dependabot[bot])
- 5eb803b: build(deps): bump docker/build-push-action from 7.2.0 to 7.3.0 (#1381) (@dependabot[bot])
- 6b36133: build(deps): bump docker/login-action from 4.4.0 to 4.6.0 (#1390) (@dependabot[bot])
- b476e49: build(deps): bump github.com/CycloneDX/cyclonedx-go (#1412) (@dependabot[bot])
- 6f3b7dc: build(deps): bump github.com/hashicorp/go-getter from 1.8.6 to 1.8.8 (#1401) (@dependabot[bot])
- da2b32a: build(deps): bump github.com/hashicorp/go-getter from 1.8.8 to 1.8.9 (#1416) (@dependabot[bot])
- 74d8677: build(deps): bump github.com/magiconair/properties (#1378) (@dependabot[bot])
- 6a3fd60: build(deps): bump github.com/moby/buildkit from 0.30.0 to 0.32.2 (#1392) (@dependabot[bot])
- 6274003: build(deps): bump github.com/moby/buildkit from 0.32.2 to 0.33.0 (#1415) (@dependabot[bot])
- 85485c0: build(deps): bump golang from 1.26.5-alpine to 1.26.6-alpine (#1400) (@dependabot[bot])
- c0ac6cd: build(deps): bump golang from 1.26.6-alpine to 1.27.1-alpine (#1417) (@dependabot[bot])
- c93d486: build(deps): bump js-yaml from 4.2.0 to 4.3.0 in /examples/ts (#1377) (@dependabot[bot])
- 9c54228: build(deps): bump js-yaml from 4.3.0 to 4.3.1 in /examples/ts (#1391) (@dependabot[bot])
- 04eb67e: chore: Update flake.lock (#1407) (@jalseth)
- 87f727c: chore: disable goconst in Go test files (#1406) (@jalseth)
- fc7d7d7: refactor(parser): Add Remarshal() helper (#1411) (@jalseth)