qltysh/qlty v0.653.0

Release v0.653.0

on GitHub

Improved

• Bump the semgrep and trufflehog plugins to semgrep 1.179.0 and trufflehog 3.97.4. This fixes fresh semgrep installs that began failing on 2026-10-08 with ImportError: cannot import name 'eval_type_backport' after pydantic 2.14.0 removed that function (#2910, #2907)

Fixed

• Pin qlty plugins upgrade <name> (run without a version) to the plugin's validated known_good_version instead of the unvalidated latest_version, matching qlty init. When a plugin has no known_good_version, the command now fails with "No known good version for plugin" instead of reporting success without changing anything (#2909)