From d07904c24b019519f2bdb2181bb990f08a504500 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Cl=C3=A1udia?= Date: Fri, 25 Sep 2026 13:43:09 +0100 Subject: [PATCH 1/8] docs: add curated highlights to 2026 Cloud release notes Opens each 2026 monthly Cloud roundup with a short headline feature and "why it matters" framing, then bundles the rest of the month's changes in one sentence, inspired by the Claude Code "What's new" digest. Mirrors the same highlight as a one-line summary next to each 2026 entry in the release notes index. Co-Authored-By: Claude Sonnet 5 --- docs/release-notes/cloud/cloud-2026-01.md | 2 ++ docs/release-notes/cloud/cloud-2026-02.md | 2 ++ docs/release-notes/cloud/cloud-2026-03.md | 2 ++ docs/release-notes/cloud/cloud-2026-04.md | 2 ++ docs/release-notes/cloud/cloud-2026-05.md | 2 ++ docs/release-notes/cloud/cloud-2026-06.md | 2 ++ docs/release-notes/cloud/cloud-2026-07.md | 2 ++ docs/release-notes/cloud/cloud-2026-08.md | 2 ++ docs/release-notes/index.md | 16 ++++++++-------- 9 files changed, 24 insertions(+), 8 deletions(-) diff --git a/docs/release-notes/cloud/cloud-2026-01.md b/docs/release-notes/cloud/cloud-2026-01.md index b39ec7a8bf..7ea43b05f0 100644 --- a/docs/release-notes/cloud/cloud-2026-01.md +++ b/docs/release-notes/cloud/cloud-2026-01.md @@ -13,6 +13,8 @@ These release notes are for the Codacy Cloud updates during January 2026. 📢 [Visit the Codacy roadmap](https://roadmap.codacy.com) and let us know your feedback on both new and planned product updates! +**GolangCI-Lint integration:** We've built a new GolangCI-Lint wrapper that runs over 100 linters in a single pass, extending how much of your Go code Codacy can check in one analysis. Also this month: a dedicated VS Code setup section and a step-by-step walkthrough guide new users through configuring the extension. + ## Product enhancements **New Features** diff --git a/docs/release-notes/cloud/cloud-2026-02.md b/docs/release-notes/cloud/cloud-2026-02.md index f31c572773..5eb877b99a 100644 --- a/docs/release-notes/cloud/cloud-2026-02.md +++ b/docs/release-notes/cloud/cloud-2026-02.md @@ -13,6 +13,8 @@ These release notes are for the Codacy Cloud updates during February 2026. 📢 [Visit the Codacy roadmap](https://roadmap.codacy.com) and let us know your feedback on both new and planned product updates! +**Migration from Semgrep to Opengrep:** Following licensing changes to Semgrep, we've moved to Opengrep, an open-source fork of the same engine, so your existing code patterns and workflows keep working without interruption. Also this month: a new Organization Overview Dashboard surfaces health, security, grade, complexity, duplication, and coverage metrics across your organization, alongside a fix to pattern filtering and a new text search for SRM findings. + ## Product enhancements - **Migration from Semgrep to Opengrep**: In response to recent licensing changes affecting Semgrep, we have transitioned to Opengrep, an open-source fork of the Semgrep engine. This update ensures uninterrupted access to your existing code patterns and continued support for your workflows. (CF-2184) diff --git a/docs/release-notes/cloud/cloud-2026-03.md b/docs/release-notes/cloud/cloud-2026-03.md index 7191b9fff9..3473320c41 100644 --- a/docs/release-notes/cloud/cloud-2026-03.md +++ b/docs/release-notes/cloud/cloud-2026-03.md @@ -13,6 +13,8 @@ These release notes are for the Codacy Cloud updates during March 2026. 📢 [Visit the Codacy roadmap](https://roadmap.codacy.com) and let us know your feedback on both new and planned product updates! +**AI security and privacy safeguards:** The AI reviewer and false positive detection now automatically mask secrets or credentials accidentally pushed in code, before that code reaches AI models. Also this month: a `review.md` file lets you tune the AI Reviewer's output with your own conventions, a manual "Run review" button gives you control over when it runs, and the AI Reviewer now flags gaps in test coverage with a ready-to-use prompt for your coding agent. + ## Product enhancements - **AI Security & Privacy Safeguards:** The AI reviewer and false positive detection now automatically mask any secrets or credentials accidentally pushed in code. This ensures that sensitive data is protected before it is processed by AI models, adding an extra layer of security to your workflow. (CF-2337) diff --git a/docs/release-notes/cloud/cloud-2026-04.md b/docs/release-notes/cloud/cloud-2026-04.md index a87561c4d4..1b693a0b8d 100644 --- a/docs/release-notes/cloud/cloud-2026-04.md +++ b/docs/release-notes/cloud/cloud-2026-04.md @@ -13,6 +13,8 @@ These release notes are for the Codacy Cloud updates during April 2026. 📢 [Visit the Codacy roadmap](https://roadmap.codacy.com) and let us know your feedback on both new and planned product updates! +**Context-aware feedback loops:** The AI Reviewer (GitHub only) now factors in earlier comments across a pull request's lifetime, so later reviews build on the conversation instead of repeating themselves. Also this month: the new Pull Request Summary Experience replaces the legacy coverage summary settings, language filtering on the Issues page now isolates results correctly, and a fix restores Prospector's handling of custom configuration files. + ## Product enhancements - **Context-Aware Feedback Loops:** The AI Reviewer (GitHub only) now factors in previous comments throughout the life of a Pull Request. By learning from the conversation history, it delivers more relevant feedback and significantly reduces noise with every subsequent review. (CF-2377) diff --git a/docs/release-notes/cloud/cloud-2026-05.md b/docs/release-notes/cloud/cloud-2026-05.md index 438422f894..80d66e0eaa 100644 --- a/docs/release-notes/cloud/cloud-2026-05.md +++ b/docs/release-notes/cloud/cloud-2026-05.md @@ -13,6 +13,8 @@ These release notes are for the Codacy Cloud updates during May 2026. 📢 [Visit the Codacy roadmap](https://roadmap.codacy.com) and let us know your feedback on both new and planned product updates! +**Draft PR AI review control:** The PR reviewer no longer runs automatically on draft pull requests — trigger it manually from the summary page when you want a review. Also this month: AI suggestions in GitHub are deprecated in favor of the PR reviewer, AI Inventory access moves to Business Tier accounts, and YAML analysis now covers `.env`, `.env.production`, `.env.prod`, and `.env.staging` files. + ## Product enhancements - **Draft PR AI Review Control:** The PR reviewer no longer runs automatically for draft PRs. Please trigger it manually using the button on the summary if you want a review. (CF-2354) diff --git a/docs/release-notes/cloud/cloud-2026-06.md b/docs/release-notes/cloud/cloud-2026-06.md index d95d9ed56c..060533727c 100644 --- a/docs/release-notes/cloud/cloud-2026-06.md +++ b/docs/release-notes/cloud/cloud-2026-06.md @@ -13,6 +13,8 @@ These release notes are for the Codacy Cloud updates during June 2026. 📢 [Visit the Codacy roadmap](https://roadmap.codacy.com) and let us know your feedback on both new and planned product updates! +**Import chain visibility for vulnerable dependencies:** Codacy now shows the dependency chain behind a vulnerability, so you can see how it was introduced into your project rather than just that it exists. Also this month: the CI/CD setup option for container scanning is easier to find, and Guardrails now supports proxy configurations for restricted network environments. + ### Features - **Import chain visibility for vulnerable dependencies (OD-105):** We added clearer dependency chain visibility so users can better understand how vulnerable dependencies are introduced into their projects. - **Better visibility for CI/CD setup in container scanning (OD-124):** We made the CI/CD setup option more prominent in container scanning so teams can find and enable it more easily. diff --git a/docs/release-notes/cloud/cloud-2026-07.md b/docs/release-notes/cloud/cloud-2026-07.md index aa10363e8f..14b6b35766 100644 --- a/docs/release-notes/cloud/cloud-2026-07.md +++ b/docs/release-notes/cloud/cloud-2026-07.md @@ -12,6 +12,8 @@ These release notes are for the Codacy Cloud updates during July 2026. 📢 [Visit the Codacy roadmap](https://roadmap.codacy.com) and let us know your feedback on both new and planned product updates! +**Folder-level metrics:** You can now browse a repository by folder and see quality metrics — issues, complexity, coverage, and duplication — scoped to each directory, with folder navigation, search, and branch-keyed overviews. Also this month: security findings now surface the affected entrypoint functions for a vulnerable dependency, a new filter bar on the Pull Requests page lets you search by title and branch, and PHP CS Fixer joins the supported tools. + ### Features - **Folder-Level Metrics:** Users can now browse their repositories by folder and view quality metrics-issues, complexity, coverage, and duplication - scoped to each directory. Folder navigation, search, and branch-keyed overviews are all included. (OD-179, OD-180, OD-181, OD-183, OD-264) diff --git a/docs/release-notes/cloud/cloud-2026-08.md b/docs/release-notes/cloud/cloud-2026-08.md index 5691f28fc6..e169eadab9 100644 --- a/docs/release-notes/cloud/cloud-2026-08.md +++ b/docs/release-notes/cloud/cloud-2026-08.md @@ -12,6 +12,8 @@ These release notes are for the Codacy Cloud updates during August 2026. 📢 [Visit the Codacy roadmap](https://roadmap.codacy.com) and let us know your feedback on both new and planned product updates! +**Repository tokens for API v3:** Scoped repository tokens are now fully supported end-to-end — create, list, delete (single and bulk), and expiration — across all features of the product, with mandatory token lifetimes enforced in both the API and the SPA. Also this month: new search and branch-scope filters land on the Pull Requests page, and a Dart adapter closes a parity gap for Dart projects in the Analysis CLI. + ### Features - **Repository (Project) Tokens for API v3:** Full rollout of scoped repository tokens — creation, listing, deletion (single & bulk), and expiration is now supported end-to-end across all features of our product. diff --git a/docs/release-notes/index.md b/docs/release-notes/index.md index 559443fe46..50e6e24bcf 100644 --- a/docs/release-notes/index.md +++ b/docs/release-notes/index.md @@ -22,19 +22,19 @@ For product updates that are in progress or planned [visit the Codacy public roa - [Adding Oxlint as new supported tool September, 2026](cloud/cloud-2026-09-adding-oxlint.md) -- [Cloud August 2026](cloud/cloud-2026-08.md) -- [Cloud July 2026](cloud/cloud-2026-07.md) +- [Cloud August 2026](cloud/cloud-2026-08.md) — Repository tokens for API v3, now fully supported end-to-end +- [Cloud July 2026](cloud/cloud-2026-07.md) — Folder-level quality metrics for browsing a repository by directory - [Support for Shellcheck configuration file - July, 2026](cloud/cloud-2026-07-adding-shellcheck-config-file.md) - [Adding PHP CS Fixer and support to Checkov configuration files July, 2026](cloud/cloud-2026-07-adding-phpcsfixer-checkov-config-files.md) - [PHP_CodeSniffer Upgrade and Legacy Package Deprecations July, 2026](cloud/cloud-2026-07-remove-codesniffer-packages.md) -- [Cloud June 2026](cloud/cloud-2026-06.md) -- [Cloud May 2026](cloud/cloud-2026-05.md) -- [Cloud April 2026](cloud/cloud-2026-04.md) -- [Cloud March 2026](cloud/cloud-2026-03.md) +- [Cloud June 2026](cloud/cloud-2026-06.md) — Dependency chain visibility for vulnerable dependencies +- [Cloud May 2026](cloud/cloud-2026-05.md) — The PR reviewer no longer runs automatically on draft pull requests +- [Cloud April 2026](cloud/cloud-2026-04.md) — The AI Reviewer now factors in earlier PR comments +- [Cloud March 2026](cloud/cloud-2026-03.md) — The AI reviewer now masks secrets in code before it reaches AI models - [Changes to GitHub integration settings March, 2026](cloud/cloud-2026-03-github-integration-settings-changes.md) -- [Cloud February 2026](cloud/cloud-2026-02.md) +- [Cloud February 2026](cloud/cloud-2026-02.md) — Migration from Semgrep to Opengrep - [Semgrep to Opengrep migration February, 2026](cloud/cloud-2026-02-migrating-semgrep.md) -- [Cloud January 2026](cloud/cloud-2026-01.md) +- [Cloud January 2026](cloud/cloud-2026-01.md) — New GolangCI-Lint integration - [Adding GolangCI-Lint as new supported tool January, 2026](cloud/cloud-2026-01-adding-golangci-lint.md) ### 2025 {.release-series} From 4cb61fb1ca651907704b312c9299ed8fc7ca3f79 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Cl=C3=A1udia?= Date: Fri, 25 Sep 2026 13:52:29 +0100 Subject: [PATCH 2/8] docs: single-source the release notes highlight via include-markdown Replaces the hand-duplicated one-line summary in the index with a transcluded snippet from each monthly page's own opening paragraph, marked with / comments. Uses the include-markdown plugin already installed in this repo (previously only used for docs/assets/includes/ boilerplate, not page-to-page), so the highlight text lives in exactly one place and can't drift. Co-Authored-By: Claude Sonnet 5 --- docs/release-notes/cloud/cloud-2026-01.md | 2 +- docs/release-notes/cloud/cloud-2026-02.md | 2 +- docs/release-notes/cloud/cloud-2026-03.md | 2 +- docs/release-notes/cloud/cloud-2026-04.md | 2 +- docs/release-notes/cloud/cloud-2026-05.md | 2 +- docs/release-notes/cloud/cloud-2026-06.md | 2 +- docs/release-notes/cloud/cloud-2026-07.md | 2 +- docs/release-notes/cloud/cloud-2026-08.md | 2 +- docs/release-notes/index.md | 16 ++++++++-------- 9 files changed, 16 insertions(+), 16 deletions(-) diff --git a/docs/release-notes/cloud/cloud-2026-01.md b/docs/release-notes/cloud/cloud-2026-01.md index 7ea43b05f0..62cdf74541 100644 --- a/docs/release-notes/cloud/cloud-2026-01.md +++ b/docs/release-notes/cloud/cloud-2026-01.md @@ -13,7 +13,7 @@ These release notes are for the Codacy Cloud updates during January 2026. 📢 [Visit the Codacy roadmap](https://roadmap.codacy.com) and let us know your feedback on both new and planned product updates! -**GolangCI-Lint integration:** We've built a new GolangCI-Lint wrapper that runs over 100 linters in a single pass, extending how much of your Go code Codacy can check in one analysis. Also this month: a dedicated VS Code setup section and a step-by-step walkthrough guide new users through configuring the extension. +**GolangCI-Lint integration:** We've built a new GolangCI-Lint wrapper that runs over 100 linters in a single pass, extending how much of your Go code Codacy can check in one analysis. Also this month: a dedicated VS Code setup section and a step-by-step walkthrough guide new users through configuring the extension. ## Product enhancements diff --git a/docs/release-notes/cloud/cloud-2026-02.md b/docs/release-notes/cloud/cloud-2026-02.md index 5eb877b99a..f70489661c 100644 --- a/docs/release-notes/cloud/cloud-2026-02.md +++ b/docs/release-notes/cloud/cloud-2026-02.md @@ -13,7 +13,7 @@ These release notes are for the Codacy Cloud updates during February 2026. 📢 [Visit the Codacy roadmap](https://roadmap.codacy.com) and let us know your feedback on both new and planned product updates! -**Migration from Semgrep to Opengrep:** Following licensing changes to Semgrep, we've moved to Opengrep, an open-source fork of the same engine, so your existing code patterns and workflows keep working without interruption. Also this month: a new Organization Overview Dashboard surfaces health, security, grade, complexity, duplication, and coverage metrics across your organization, alongside a fix to pattern filtering and a new text search for SRM findings. +**Migration from Semgrep to Opengrep:** Following licensing changes to Semgrep, we've moved to Opengrep, an open-source fork of the same engine, so your existing code patterns and workflows keep working without interruption. Also this month: a new Organization Overview Dashboard surfaces health, security, grade, complexity, duplication, and coverage metrics across your organization, alongside a fix to pattern filtering and a new text search for SRM findings. ## Product enhancements diff --git a/docs/release-notes/cloud/cloud-2026-03.md b/docs/release-notes/cloud/cloud-2026-03.md index 3473320c41..cf064ca6f3 100644 --- a/docs/release-notes/cloud/cloud-2026-03.md +++ b/docs/release-notes/cloud/cloud-2026-03.md @@ -13,7 +13,7 @@ These release notes are for the Codacy Cloud updates during March 2026. 📢 [Visit the Codacy roadmap](https://roadmap.codacy.com) and let us know your feedback on both new and planned product updates! -**AI security and privacy safeguards:** The AI reviewer and false positive detection now automatically mask secrets or credentials accidentally pushed in code, before that code reaches AI models. Also this month: a `review.md` file lets you tune the AI Reviewer's output with your own conventions, a manual "Run review" button gives you control over when it runs, and the AI Reviewer now flags gaps in test coverage with a ready-to-use prompt for your coding agent. +**AI security and privacy safeguards:** The AI reviewer and false positive detection now automatically mask secrets or credentials accidentally pushed in code, before that code reaches AI models. Also this month: a `review.md` file lets you tune the AI Reviewer's output with your own conventions, a manual "Run review" button gives you control over when it runs, and the AI Reviewer now flags gaps in test coverage with a ready-to-use prompt for your coding agent. ## Product enhancements diff --git a/docs/release-notes/cloud/cloud-2026-04.md b/docs/release-notes/cloud/cloud-2026-04.md index 1b693a0b8d..66394e4075 100644 --- a/docs/release-notes/cloud/cloud-2026-04.md +++ b/docs/release-notes/cloud/cloud-2026-04.md @@ -13,7 +13,7 @@ These release notes are for the Codacy Cloud updates during April 2026. 📢 [Visit the Codacy roadmap](https://roadmap.codacy.com) and let us know your feedback on both new and planned product updates! -**Context-aware feedback loops:** The AI Reviewer (GitHub only) now factors in earlier comments across a pull request's lifetime, so later reviews build on the conversation instead of repeating themselves. Also this month: the new Pull Request Summary Experience replaces the legacy coverage summary settings, language filtering on the Issues page now isolates results correctly, and a fix restores Prospector's handling of custom configuration files. +**Context-aware feedback loops:** The AI Reviewer (GitHub only) now factors in earlier comments across a pull request's lifetime, so later reviews build on the conversation instead of repeating themselves. Also this month: the new Pull Request Summary Experience replaces the legacy coverage summary settings, language filtering on the Issues page now isolates results correctly, and a fix restores Prospector's handling of custom configuration files. ## Product enhancements diff --git a/docs/release-notes/cloud/cloud-2026-05.md b/docs/release-notes/cloud/cloud-2026-05.md index 80d66e0eaa..2fed6d9355 100644 --- a/docs/release-notes/cloud/cloud-2026-05.md +++ b/docs/release-notes/cloud/cloud-2026-05.md @@ -13,7 +13,7 @@ These release notes are for the Codacy Cloud updates during May 2026. 📢 [Visit the Codacy roadmap](https://roadmap.codacy.com) and let us know your feedback on both new and planned product updates! -**Draft PR AI review control:** The PR reviewer no longer runs automatically on draft pull requests — trigger it manually from the summary page when you want a review. Also this month: AI suggestions in GitHub are deprecated in favor of the PR reviewer, AI Inventory access moves to Business Tier accounts, and YAML analysis now covers `.env`, `.env.production`, `.env.prod`, and `.env.staging` files. +**Draft PR AI review control:** The PR reviewer no longer runs automatically on draft pull requests — trigger it manually from the summary page when you want a review. Also this month: AI suggestions in GitHub are deprecated in favor of the PR reviewer, AI Inventory access moves to Business Tier accounts, and YAML analysis now covers `.env`, `.env.production`, `.env.prod`, and `.env.staging` files. ## Product enhancements diff --git a/docs/release-notes/cloud/cloud-2026-06.md b/docs/release-notes/cloud/cloud-2026-06.md index 060533727c..1e847e4d78 100644 --- a/docs/release-notes/cloud/cloud-2026-06.md +++ b/docs/release-notes/cloud/cloud-2026-06.md @@ -13,7 +13,7 @@ These release notes are for the Codacy Cloud updates during June 2026. 📢 [Visit the Codacy roadmap](https://roadmap.codacy.com) and let us know your feedback on both new and planned product updates! -**Import chain visibility for vulnerable dependencies:** Codacy now shows the dependency chain behind a vulnerability, so you can see how it was introduced into your project rather than just that it exists. Also this month: the CI/CD setup option for container scanning is easier to find, and Guardrails now supports proxy configurations for restricted network environments. +**Import chain visibility for vulnerable dependencies:** Codacy now shows the dependency chain behind a vulnerability, so you can see how it was introduced into your project rather than just that it exists. Also this month: the CI/CD setup option for container scanning is easier to find, and Guardrails now supports proxy configurations for restricted network environments. ### Features - **Import chain visibility for vulnerable dependencies (OD-105):** We added clearer dependency chain visibility so users can better understand how vulnerable dependencies are introduced into their projects. diff --git a/docs/release-notes/cloud/cloud-2026-07.md b/docs/release-notes/cloud/cloud-2026-07.md index 14b6b35766..374a402654 100644 --- a/docs/release-notes/cloud/cloud-2026-07.md +++ b/docs/release-notes/cloud/cloud-2026-07.md @@ -12,7 +12,7 @@ These release notes are for the Codacy Cloud updates during July 2026. 📢 [Visit the Codacy roadmap](https://roadmap.codacy.com) and let us know your feedback on both new and planned product updates! -**Folder-level metrics:** You can now browse a repository by folder and see quality metrics — issues, complexity, coverage, and duplication — scoped to each directory, with folder navigation, search, and branch-keyed overviews. Also this month: security findings now surface the affected entrypoint functions for a vulnerable dependency, a new filter bar on the Pull Requests page lets you search by title and branch, and PHP CS Fixer joins the supported tools. +**Folder-level metrics:** You can now browse a repository by folder and see quality metrics — issues, complexity, coverage, and duplication — scoped to each directory, with folder navigation, search, and branch-keyed overviews. Also this month: security findings now surface the affected entrypoint functions for a vulnerable dependency, a new filter bar on the Pull Requests page lets you search by title and branch, and PHP CS Fixer joins the supported tools. ### Features - **Folder-Level Metrics:** Users can now browse their repositories by folder and view quality metrics-issues, complexity, coverage, and duplication - scoped to each directory. Folder navigation, search, and branch-keyed overviews are all included. (OD-179, OD-180, OD-181, OD-183, OD-264) diff --git a/docs/release-notes/cloud/cloud-2026-08.md b/docs/release-notes/cloud/cloud-2026-08.md index e169eadab9..1e126cc1f9 100644 --- a/docs/release-notes/cloud/cloud-2026-08.md +++ b/docs/release-notes/cloud/cloud-2026-08.md @@ -12,7 +12,7 @@ These release notes are for the Codacy Cloud updates during August 2026. 📢 [Visit the Codacy roadmap](https://roadmap.codacy.com) and let us know your feedback on both new and planned product updates! -**Repository tokens for API v3:** Scoped repository tokens are now fully supported end-to-end — create, list, delete (single and bulk), and expiration — across all features of the product, with mandatory token lifetimes enforced in both the API and the SPA. Also this month: new search and branch-scope filters land on the Pull Requests page, and a Dart adapter closes a parity gap for Dart projects in the Analysis CLI. +**Repository tokens for API v3:** Scoped repository tokens are now fully supported end-to-end — create, list, delete (single and bulk), and expiration — across all features of the product, with mandatory token lifetimes enforced in both the API and the SPA. Also this month: new search and branch-scope filters land on the Pull Requests page, and a Dart adapter closes a parity gap for Dart projects in the Analysis CLI. ### Features - **Repository (Project) Tokens for API v3:** Full rollout of scoped repository tokens — creation, listing, deletion (single & bulk), and expiration is now supported end-to-end across all features of our product. diff --git a/docs/release-notes/index.md b/docs/release-notes/index.md index 50e6e24bcf..cf0ed5da0f 100644 --- a/docs/release-notes/index.md +++ b/docs/release-notes/index.md @@ -22,19 +22,19 @@ For product updates that are in progress or planned [visit the Codacy public roa - [Adding Oxlint as new supported tool September, 2026](cloud/cloud-2026-09-adding-oxlint.md) -- [Cloud August 2026](cloud/cloud-2026-08.md) — Repository tokens for API v3, now fully supported end-to-end -- [Cloud July 2026](cloud/cloud-2026-07.md) — Folder-level quality metrics for browsing a repository by directory +- [Cloud August 2026](cloud/cloud-2026-08.md) — {% include-markdown "./cloud/cloud-2026-08.md" start="" end="" %} +- [Cloud July 2026](cloud/cloud-2026-07.md) — {% include-markdown "./cloud/cloud-2026-07.md" start="" end="" %} - [Support for Shellcheck configuration file - July, 2026](cloud/cloud-2026-07-adding-shellcheck-config-file.md) - [Adding PHP CS Fixer and support to Checkov configuration files July, 2026](cloud/cloud-2026-07-adding-phpcsfixer-checkov-config-files.md) - [PHP_CodeSniffer Upgrade and Legacy Package Deprecations July, 2026](cloud/cloud-2026-07-remove-codesniffer-packages.md) -- [Cloud June 2026](cloud/cloud-2026-06.md) — Dependency chain visibility for vulnerable dependencies -- [Cloud May 2026](cloud/cloud-2026-05.md) — The PR reviewer no longer runs automatically on draft pull requests -- [Cloud April 2026](cloud/cloud-2026-04.md) — The AI Reviewer now factors in earlier PR comments -- [Cloud March 2026](cloud/cloud-2026-03.md) — The AI reviewer now masks secrets in code before it reaches AI models +- [Cloud June 2026](cloud/cloud-2026-06.md) — {% include-markdown "./cloud/cloud-2026-06.md" start="" end="" %} +- [Cloud May 2026](cloud/cloud-2026-05.md) — {% include-markdown "./cloud/cloud-2026-05.md" start="" end="" %} +- [Cloud April 2026](cloud/cloud-2026-04.md) — {% include-markdown "./cloud/cloud-2026-04.md" start="" end="" %} +- [Cloud March 2026](cloud/cloud-2026-03.md) — {% include-markdown "./cloud/cloud-2026-03.md" start="" end="" %} - [Changes to GitHub integration settings March, 2026](cloud/cloud-2026-03-github-integration-settings-changes.md) -- [Cloud February 2026](cloud/cloud-2026-02.md) — Migration from Semgrep to Opengrep +- [Cloud February 2026](cloud/cloud-2026-02.md) — {% include-markdown "./cloud/cloud-2026-02.md" start="" end="" %} - [Semgrep to Opengrep migration February, 2026](cloud/cloud-2026-02-migrating-semgrep.md) -- [Cloud January 2026](cloud/cloud-2026-01.md) — New GolangCI-Lint integration +- [Cloud January 2026](cloud/cloud-2026-01.md) — {% include-markdown "./cloud/cloud-2026-01.md" start="" end="" %} - [Adding GolangCI-Lint as new supported tool January, 2026](cloud/cloud-2026-01-adding-golangci-lint.md) ### 2025 {.release-series} From dc4eafed2fdd0ce1ae9f0a77759380e5f0292f10 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Cl=C3=A1udia?= Date: Fri, 25 Sep 2026 14:10:25 +0100 Subject: [PATCH 3/8] docs: give release notes index a two-column digest layout Wraps each highlighted entry's body in a release-digest__body span and extends the existing #codacy-release-notes list styling in home.css with a two-column grid (period label, then digest content) for rows that carry a highlight, inspired by the Claude Code "What's new" page. Entries without a highlight (single-topic announcements, older years) are untouched and keep rendering as plain rows. Verified in the browser: light and dark color schemes at desktop width, and dark scheme at mobile width where the grid collapses to a single column via the new responsive.css rule. Co-Authored-By: Claude Sonnet 5 --- docs/release-notes/index.md | 16 ++++++++-------- theme/stylesheets/home.css | 7 +++++++ theme/stylesheets/responsive.css | 1 + 3 files changed, 16 insertions(+), 8 deletions(-) diff --git a/docs/release-notes/index.md b/docs/release-notes/index.md index cf0ed5da0f..9c99509aaa 100644 --- a/docs/release-notes/index.md +++ b/docs/release-notes/index.md @@ -22,19 +22,19 @@ For product updates that are in progress or planned [visit the Codacy public roa - [Adding Oxlint as new supported tool September, 2026](cloud/cloud-2026-09-adding-oxlint.md) -- [Cloud August 2026](cloud/cloud-2026-08.md) — {% include-markdown "./cloud/cloud-2026-08.md" start="" end="" %} -- [Cloud July 2026](cloud/cloud-2026-07.md) — {% include-markdown "./cloud/cloud-2026-07.md" start="" end="" %} +- [Cloud August 2026](cloud/cloud-2026-08.md) — {% include-markdown "./cloud/cloud-2026-08.md" start="" end="" %} +- [Cloud July 2026](cloud/cloud-2026-07.md) — {% include-markdown "./cloud/cloud-2026-07.md" start="" end="" %} - [Support for Shellcheck configuration file - July, 2026](cloud/cloud-2026-07-adding-shellcheck-config-file.md) - [Adding PHP CS Fixer and support to Checkov configuration files July, 2026](cloud/cloud-2026-07-adding-phpcsfixer-checkov-config-files.md) - [PHP_CodeSniffer Upgrade and Legacy Package Deprecations July, 2026](cloud/cloud-2026-07-remove-codesniffer-packages.md) -- [Cloud June 2026](cloud/cloud-2026-06.md) — {% include-markdown "./cloud/cloud-2026-06.md" start="" end="" %} -- [Cloud May 2026](cloud/cloud-2026-05.md) — {% include-markdown "./cloud/cloud-2026-05.md" start="" end="" %} -- [Cloud April 2026](cloud/cloud-2026-04.md) — {% include-markdown "./cloud/cloud-2026-04.md" start="" end="" %} -- [Cloud March 2026](cloud/cloud-2026-03.md) — {% include-markdown "./cloud/cloud-2026-03.md" start="" end="" %} +- [Cloud June 2026](cloud/cloud-2026-06.md) — {% include-markdown "./cloud/cloud-2026-06.md" start="" end="" %} +- [Cloud May 2026](cloud/cloud-2026-05.md) — {% include-markdown "./cloud/cloud-2026-05.md" start="" end="" %} +- [Cloud April 2026](cloud/cloud-2026-04.md) — {% include-markdown "./cloud/cloud-2026-04.md" start="" end="" %} +- [Cloud March 2026](cloud/cloud-2026-03.md) — {% include-markdown "./cloud/cloud-2026-03.md" start="" end="" %} - [Changes to GitHub integration settings March, 2026](cloud/cloud-2026-03-github-integration-settings-changes.md) -- [Cloud February 2026](cloud/cloud-2026-02.md) — {% include-markdown "./cloud/cloud-2026-02.md" start="" end="" %} +- [Cloud February 2026](cloud/cloud-2026-02.md) — {% include-markdown "./cloud/cloud-2026-02.md" start="" end="" %} - [Semgrep to Opengrep migration February, 2026](cloud/cloud-2026-02-migrating-semgrep.md) -- [Cloud January 2026](cloud/cloud-2026-01.md) — {% include-markdown "./cloud/cloud-2026-01.md" start="" end="" %} +- [Cloud January 2026](cloud/cloud-2026-01.md) — {% include-markdown "./cloud/cloud-2026-01.md" start="" end="" %} - [Adding GolangCI-Lint as new supported tool January, 2026](cloud/cloud-2026-01-adding-golangci-lint.md) ### 2025 {.release-series} diff --git a/theme/stylesheets/home.css b/theme/stylesheets/home.css index c7f7918ca3..2386b82cde 100644 --- a/theme/stylesheets/home.css +++ b/theme/stylesheets/home.css @@ -28,5 +28,12 @@ .md-content article.md-typeset:has(#codacy-release-notes) .release-series + ul > li:hover { background: var(--docs-bg-secondary); } .md-content article.md-typeset:has(#codacy-release-notes) .release-series + ul a { color: var(--docs-text-secondary); font-weight: 500; text-decoration: none; } .md-content article.md-typeset:has(#codacy-release-notes) .release-series + ul a:hover { color: var(--docs-link); } +/* Entries carrying a transcluded highlight (see docs/release-notes/index.md) get a + two-column layout, a period label beside its digest, so a reader can scan what + shipped without opening every page — the rest of the list stays a plain row. */ +.md-content article.md-typeset:has(#codacy-release-notes) .release-series + ul > li:has(.release-digest__body) { display: grid; grid-template-columns: minmax(8.5rem, 11rem) minmax(0, 1fr); column-gap: 1rem; padding: .85rem .65rem .85rem 1.35rem; } +.md-content article.md-typeset:has(#codacy-release-notes) .release-series + ul > li:has(.release-digest__body) > a { color: var(--docs-text); font-weight: 600; } +.release-digest__body { color: var(--docs-text-secondary); } +.release-digest__body strong { color: var(--docs-text); font-weight: 600; } .md-typeset #tool-versions + ul, .md-typeset #tool-versions + p + ul { display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); column-gap: 1.5rem; margin-top: 1rem; font-size: .875rem; line-height: 1.5; } .md-typeset #tool-versions + ul > li, .md-typeset #tool-versions + p + ul > li { margin: .18rem 0; break-inside: avoid; } diff --git a/theme/stylesheets/responsive.css b/theme/stylesheets/responsive.css index 998bfc9e3c..347827dae0 100644 --- a/theme/stylesheets/responsive.css +++ b/theme/stylesheets/responsive.css @@ -180,6 +180,7 @@ .topic-row .topic-card:last-child { grid-column: auto; } .md-typeset #tool-versions + ul, .md-typeset #tool-versions + p + ul { grid-template-columns: 1fr; } .md-typeset .nav-multistep ol { grid-template-columns: 1fr; } + .md-content article.md-typeset:has(#codacy-release-notes) .release-series + ul > li:has(.release-digest__body) { grid-template-columns: 1fr; row-gap: .25rem; } } @media screen and (max-width: 27rem) { .md-header__button.md-logo { width: 2rem; padding: .25rem; } From 7fe995bfc1a6553892d4950f062e16f4d7b4aa38 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Cl=C3=A1udia?= Date: Fri, 25 Sep 2026 14:17:04 +0100 Subject: [PATCH 4/8] docs: extend the release notes highlight to all 2026 entries Adds a snippet to the 7 remaining 2026 single-topic release notes (Oxlint, Shellcheck config, PHP CS Fixer/Checkov config, PHP_CodeSniffer upgrade, GitHub integration changes, Semgrep/Opengrep, GolangCI-Lint client-side) and wires them into index.md the same way as the monthly roundups, so every 2026 entry uses the same two-column digest treatment instead of only the 8 monthly ones. Verified in the browser: all 15 entries transclude and render correctly, the list transitions cleanly into the untouched 2025 section, and long titles (PHP CS Fixer/Checkov) wrap without breaking the grid. Co-Authored-By: Claude Sonnet 5 --- .../cloud/cloud-2026-01-adding-golangci-lint.md | 1 + .../cloud/cloud-2026-02-migrating-semgrep.md | 2 ++ ...-2026-03-github-integration-settings-changes.md | 2 ++ ...26-07-adding-phpcsfixer-checkov-config-files.md | 1 + .../cloud-2026-07-adding-shellcheck-config-file.md | 2 ++ .../cloud-2026-07-remove-codesniffer-packages.md | 2 ++ .../cloud/cloud-2026-09-adding-oxlint.md | 2 ++ docs/release-notes/index.md | 14 +++++++------- 8 files changed, 19 insertions(+), 7 deletions(-) diff --git a/docs/release-notes/cloud/cloud-2026-01-adding-golangci-lint.md b/docs/release-notes/cloud/cloud-2026-01-adding-golangci-lint.md index 3b01eddd6e..cfab2d17cd 100644 --- a/docs/release-notes/cloud/cloud-2026-01-adding-golangci-lint.md +++ b/docs/release-notes/cloud/cloud-2026-01-adding-golangci-lint.md @@ -6,6 +6,7 @@ rss_href: /feed_rss_created.xml # Adding GolangCI-Lint as new supported tool – January 2026 +**GolangCI-Lint (client-side):** Run GolangCI-Lint locally on your Go projects and upload the results to Codacy for analysis and reporting. ## GolangCI-Lint (Client-side Go tool) diff --git a/docs/release-notes/cloud/cloud-2026-02-migrating-semgrep.md b/docs/release-notes/cloud/cloud-2026-02-migrating-semgrep.md index cf1ca0376f..aecc18bc4b 100644 --- a/docs/release-notes/cloud/cloud-2026-02-migrating-semgrep.md +++ b/docs/release-notes/cloud/cloud-2026-02-migrating-semgrep.md @@ -6,6 +6,8 @@ rss_href: /feed_rss_created.xml # Semgrep to Opengrep migration – February 2026 +**Semgrep to Opengrep:** Following licensing changes to Semgrep, Codacy switched to Opengrep as a 1:1 replacement, preserving all existing patterns, issue history, and configuration. + As we previously discussed on our [blog](https://blog.codacy.com/opengrep-vs-semgrep), there have been licensing changes to Semgrep, and Opengrep has emerged as an open-source fork of the Semgrep engine. To ensure your continued access to the existing patterns we have switched to Opengrep. This change has been performed as a 1:1 replacement, preserving all existing patterns, issue history, and configuration. Going forward, we'll also be able to keep delivering custom Codacy rules to protect you against emerging threats, such as [hidden Unicode character vulnerabilities in rules files](https://blog.codacy.com/vulnerability-in-rules-files-with-hidden-unicode-characters). \ No newline at end of file diff --git a/docs/release-notes/cloud/cloud-2026-03-github-integration-settings-changes.md b/docs/release-notes/cloud/cloud-2026-03-github-integration-settings-changes.md index 917b84c0fa..49a0a82c35 100644 --- a/docs/release-notes/cloud/cloud-2026-03-github-integration-settings-changes.md +++ b/docs/release-notes/cloud/cloud-2026-03-github-integration-settings-changes.md @@ -9,6 +9,8 @@ rss_href: /feed_rss_created.xml We are making two changes to the GitHub integration settings over the coming weeks. Both are handled automatically - you don't need to take any action. +**GitHub integration changes:** AI-enhanced comments (Beta) are being replaced by the AI Reviewer on March 17, 2026, and the Coverage summary setting is being folded into the Pull request review comment — both migrations happen automatically. + - [**AI-enhanced comments (Beta) being deprecated for GitHub**](#ai-enhanced-comments) — AI-enhanced comments are being replaced by the [AI Reviewer](../../codacy-ai/codacy-ai.md#pr-reviewer) on March 17, 2026. - [**Coverage summary moving to Pull request review**](#coverage-summary) — the Coverage summary setting is being removed; coverage data will soon be included in the Pull request review comment. diff --git a/docs/release-notes/cloud/cloud-2026-07-adding-phpcsfixer-checkov-config-files.md b/docs/release-notes/cloud/cloud-2026-07-adding-phpcsfixer-checkov-config-files.md index bc74e274f9..ca6ffc381c 100644 --- a/docs/release-notes/cloud/cloud-2026-07-adding-phpcsfixer-checkov-config-files.md +++ b/docs/release-notes/cloud/cloud-2026-07-adding-phpcsfixer-checkov-config-files.md @@ -6,6 +6,7 @@ rss_href: /feed_rss_created.xml # Adding PHP CS Fixer as new supported tool – July 2026 +**PHP CS Fixer and Checkov configuration files:** PHP CS Fixer joins Codacy's supported tools for PHP style violations, and Checkov analysis can now be configured with a `.checkov.yaml` or `.checkov.yml` file in your repository. ## PHP CS Fixer diff --git a/docs/release-notes/cloud/cloud-2026-07-adding-shellcheck-config-file.md b/docs/release-notes/cloud/cloud-2026-07-adding-shellcheck-config-file.md index 983e454420..a9636842fd 100644 --- a/docs/release-notes/cloud/cloud-2026-07-adding-shellcheck-config-file.md +++ b/docs/release-notes/cloud/cloud-2026-07-adding-shellcheck-config-file.md @@ -7,6 +7,8 @@ rss_href: /feed_rss_created.xml We’ve upgraded how Shellcheck works on Codacy! While you previously had to configure Shellcheck analysis directly through the Codacy UI, you can now manage your settings using a configuration file. +**Shellcheck configuration files:** You can now manage Shellcheck settings with a `.shellcheckrc` file in your repository instead of configuring analysis directly through the Codacy UI. + Codacy will automatically apply your rules during analysis once you set it up. Here is how to get started: diff --git a/docs/release-notes/cloud/cloud-2026-07-remove-codesniffer-packages.md b/docs/release-notes/cloud/cloud-2026-07-remove-codesniffer-packages.md index 72d27e4976..117be4753d 100644 --- a/docs/release-notes/cloud/cloud-2026-07-remove-codesniffer-packages.md +++ b/docs/release-notes/cloud/cloud-2026-07-remove-codesniffer-packages.md @@ -9,6 +9,8 @@ We are preparing to upgrade our PHP CodeSniffer tool to the latest version. This We know how important your current workflows and rule configurations are. However, to successfully complete this upgrade, we have encountered hard compatibility constraints with several older, unmaintained coding standard packages. To move forward, we must officially remove support for these legacy packages and their associated rules. +**PHP_CodeSniffer upgrade:** PHP_CodeSniffer is upgrading to its latest version, which drops support for several unmaintained coding standard packages, including the WordPress-VIP, Magento, and PHPCS Security Audit rule sets. + ## Packages Being Removed The following packages are incompatible with the latest PHP_CodeSniffer version or are no longer maintained, and will be dropped in this release: diff --git a/docs/release-notes/cloud/cloud-2026-09-adding-oxlint.md b/docs/release-notes/cloud/cloud-2026-09-adding-oxlint.md index 392b85d2e9..f1bc05abf0 100644 --- a/docs/release-notes/cloud/cloud-2026-09-adding-oxlint.md +++ b/docs/release-notes/cloud/cloud-2026-09-adding-oxlint.md @@ -8,6 +8,8 @@ rss_href: /feed_rss_created.xml We're excited to announce support for [Oxlint](https://github.com/oxc-project/oxc), a fast Rust-based linter for JavaScript and TypeScript from the Oxc project. With this addition, Codacy can now automatically analyze your JavaScript and TypeScript projects for correctness, style, and best-practice issues (among other categories), reporting them directly in your dashboard. +**Oxlint support:** Codacy can now analyze your JavaScript and TypeScript projects with Oxlint, a fast Rust-based linter from the Oxc project, and report results directly in your dashboard. + **Why it matters:** * Oxlint is built for speed, running significantly faster than traditional JS/TS linters. diff --git a/docs/release-notes/index.md b/docs/release-notes/index.md index 9c99509aaa..74264101e9 100644 --- a/docs/release-notes/index.md +++ b/docs/release-notes/index.md @@ -21,21 +21,21 @@ For product updates that are in progress or planned [visit the Codacy public roa ### 2026 {.release-series} -- [Adding Oxlint as new supported tool September, 2026](cloud/cloud-2026-09-adding-oxlint.md) +- [Adding Oxlint as new supported tool September, 2026](cloud/cloud-2026-09-adding-oxlint.md) — {% include-markdown "./cloud/cloud-2026-09-adding-oxlint.md" start="" end="" %} - [Cloud August 2026](cloud/cloud-2026-08.md) — {% include-markdown "./cloud/cloud-2026-08.md" start="" end="" %} - [Cloud July 2026](cloud/cloud-2026-07.md) — {% include-markdown "./cloud/cloud-2026-07.md" start="" end="" %} -- [Support for Shellcheck configuration file - July, 2026](cloud/cloud-2026-07-adding-shellcheck-config-file.md) -- [Adding PHP CS Fixer and support to Checkov configuration files July, 2026](cloud/cloud-2026-07-adding-phpcsfixer-checkov-config-files.md) -- [PHP_CodeSniffer Upgrade and Legacy Package Deprecations July, 2026](cloud/cloud-2026-07-remove-codesniffer-packages.md) +- [Support for Shellcheck configuration file - July, 2026](cloud/cloud-2026-07-adding-shellcheck-config-file.md) — {% include-markdown "./cloud/cloud-2026-07-adding-shellcheck-config-file.md" start="" end="" %} +- [Adding PHP CS Fixer and support to Checkov configuration files July, 2026](cloud/cloud-2026-07-adding-phpcsfixer-checkov-config-files.md) — {% include-markdown "./cloud/cloud-2026-07-adding-phpcsfixer-checkov-config-files.md" start="" end="" %} +- [PHP_CodeSniffer Upgrade and Legacy Package Deprecations July, 2026](cloud/cloud-2026-07-remove-codesniffer-packages.md) — {% include-markdown "./cloud/cloud-2026-07-remove-codesniffer-packages.md" start="" end="" %} - [Cloud June 2026](cloud/cloud-2026-06.md) — {% include-markdown "./cloud/cloud-2026-06.md" start="" end="" %} - [Cloud May 2026](cloud/cloud-2026-05.md) — {% include-markdown "./cloud/cloud-2026-05.md" start="" end="" %} - [Cloud April 2026](cloud/cloud-2026-04.md) — {% include-markdown "./cloud/cloud-2026-04.md" start="" end="" %} - [Cloud March 2026](cloud/cloud-2026-03.md) — {% include-markdown "./cloud/cloud-2026-03.md" start="" end="" %} -- [Changes to GitHub integration settings March, 2026](cloud/cloud-2026-03-github-integration-settings-changes.md) +- [Changes to GitHub integration settings March, 2026](cloud/cloud-2026-03-github-integration-settings-changes.md) — {% include-markdown "./cloud/cloud-2026-03-github-integration-settings-changes.md" start="" end="" %} - [Cloud February 2026](cloud/cloud-2026-02.md) — {% include-markdown "./cloud/cloud-2026-02.md" start="" end="" %} -- [Semgrep to Opengrep migration February, 2026](cloud/cloud-2026-02-migrating-semgrep.md) +- [Semgrep to Opengrep migration February, 2026](cloud/cloud-2026-02-migrating-semgrep.md) — {% include-markdown "./cloud/cloud-2026-02-migrating-semgrep.md" start="" end="" %} - [Cloud January 2026](cloud/cloud-2026-01.md) — {% include-markdown "./cloud/cloud-2026-01.md" start="" end="" %} -- [Adding GolangCI-Lint as new supported tool January, 2026](cloud/cloud-2026-01-adding-golangci-lint.md) +- [Adding GolangCI-Lint as new supported tool January, 2026](cloud/cloud-2026-01-adding-golangci-lint.md) — {% include-markdown "./cloud/cloud-2026-01-adding-golangci-lint.md" start="" end="" %} ### 2025 {.release-series} From 554abd835e7957b6c3b7a937231e4f8eb7a5b2fc Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Cl=C3=A1udia?= Date: Fri, 25 Sep 2026 14:24:06 +0100 Subject: [PATCH 5/8] docs: use the date as the label in the release notes digest rows Replaces each 2026 entry's link text (previously the page's own title, ranging from a plain "Cloud August 2026" to a full sentence like "PHP_CodeSniffer Upgrade and Legacy Package Deprecations July, 2026") with just its "Month Year". The topic already lives in the transcluded highlight's bold lead-in, so the old title was duplicating it while also making the label column wildly inconsistent in length. Every row now has a uniform, single-line label, closer to how the Claude Code "What's new" page separates the period from the content. Verified in the browser: light and dark schemes, full list scroll including the four same-month July rows and the 2026/2025 boundary. Co-Authored-By: Claude Sonnet 5 --- docs/release-notes/index.md | 30 +++++++++++++++--------------- 1 file changed, 15 insertions(+), 15 deletions(-) diff --git a/docs/release-notes/index.md b/docs/release-notes/index.md index 74264101e9..4c361e6d80 100644 --- a/docs/release-notes/index.md +++ b/docs/release-notes/index.md @@ -21,21 +21,21 @@ For product updates that are in progress or planned [visit the Codacy public roa ### 2026 {.release-series} -- [Adding Oxlint as new supported tool September, 2026](cloud/cloud-2026-09-adding-oxlint.md) — {% include-markdown "./cloud/cloud-2026-09-adding-oxlint.md" start="" end="" %} -- [Cloud August 2026](cloud/cloud-2026-08.md) — {% include-markdown "./cloud/cloud-2026-08.md" start="" end="" %} -- [Cloud July 2026](cloud/cloud-2026-07.md) — {% include-markdown "./cloud/cloud-2026-07.md" start="" end="" %} -- [Support for Shellcheck configuration file - July, 2026](cloud/cloud-2026-07-adding-shellcheck-config-file.md) — {% include-markdown "./cloud/cloud-2026-07-adding-shellcheck-config-file.md" start="" end="" %} -- [Adding PHP CS Fixer and support to Checkov configuration files July, 2026](cloud/cloud-2026-07-adding-phpcsfixer-checkov-config-files.md) — {% include-markdown "./cloud/cloud-2026-07-adding-phpcsfixer-checkov-config-files.md" start="" end="" %} -- [PHP_CodeSniffer Upgrade and Legacy Package Deprecations July, 2026](cloud/cloud-2026-07-remove-codesniffer-packages.md) — {% include-markdown "./cloud/cloud-2026-07-remove-codesniffer-packages.md" start="" end="" %} -- [Cloud June 2026](cloud/cloud-2026-06.md) — {% include-markdown "./cloud/cloud-2026-06.md" start="" end="" %} -- [Cloud May 2026](cloud/cloud-2026-05.md) — {% include-markdown "./cloud/cloud-2026-05.md" start="" end="" %} -- [Cloud April 2026](cloud/cloud-2026-04.md) — {% include-markdown "./cloud/cloud-2026-04.md" start="" end="" %} -- [Cloud March 2026](cloud/cloud-2026-03.md) — {% include-markdown "./cloud/cloud-2026-03.md" start="" end="" %} -- [Changes to GitHub integration settings March, 2026](cloud/cloud-2026-03-github-integration-settings-changes.md) — {% include-markdown "./cloud/cloud-2026-03-github-integration-settings-changes.md" start="" end="" %} -- [Cloud February 2026](cloud/cloud-2026-02.md) — {% include-markdown "./cloud/cloud-2026-02.md" start="" end="" %} -- [Semgrep to Opengrep migration February, 2026](cloud/cloud-2026-02-migrating-semgrep.md) — {% include-markdown "./cloud/cloud-2026-02-migrating-semgrep.md" start="" end="" %} -- [Cloud January 2026](cloud/cloud-2026-01.md) — {% include-markdown "./cloud/cloud-2026-01.md" start="" end="" %} -- [Adding GolangCI-Lint as new supported tool January, 2026](cloud/cloud-2026-01-adding-golangci-lint.md) — {% include-markdown "./cloud/cloud-2026-01-adding-golangci-lint.md" start="" end="" %} +- [September 2026](cloud/cloud-2026-09-adding-oxlint.md) — {% include-markdown "./cloud/cloud-2026-09-adding-oxlint.md" start="" end="" %} +- [August 2026](cloud/cloud-2026-08.md) — {% include-markdown "./cloud/cloud-2026-08.md" start="" end="" %} +- [July 2026](cloud/cloud-2026-07.md) — {% include-markdown "./cloud/cloud-2026-07.md" start="" end="" %} +- [July 2026](cloud/cloud-2026-07-adding-shellcheck-config-file.md) — {% include-markdown "./cloud/cloud-2026-07-adding-shellcheck-config-file.md" start="" end="" %} +- [July 2026](cloud/cloud-2026-07-adding-phpcsfixer-checkov-config-files.md) — {% include-markdown "./cloud/cloud-2026-07-adding-phpcsfixer-checkov-config-files.md" start="" end="" %} +- [July 2026](cloud/cloud-2026-07-remove-codesniffer-packages.md) — {% include-markdown "./cloud/cloud-2026-07-remove-codesniffer-packages.md" start="" end="" %} +- [June 2026](cloud/cloud-2026-06.md) — {% include-markdown "./cloud/cloud-2026-06.md" start="" end="" %} +- [May 2026](cloud/cloud-2026-05.md) — {% include-markdown "./cloud/cloud-2026-05.md" start="" end="" %} +- [April 2026](cloud/cloud-2026-04.md) — {% include-markdown "./cloud/cloud-2026-04.md" start="" end="" %} +- [March 2026](cloud/cloud-2026-03.md) — {% include-markdown "./cloud/cloud-2026-03.md" start="" end="" %} +- [March 2026](cloud/cloud-2026-03-github-integration-settings-changes.md) — {% include-markdown "./cloud/cloud-2026-03-github-integration-settings-changes.md" start="" end="" %} +- [February 2026](cloud/cloud-2026-02.md) — {% include-markdown "./cloud/cloud-2026-02.md" start="" end="" %} +- [February 2026](cloud/cloud-2026-02-migrating-semgrep.md) — {% include-markdown "./cloud/cloud-2026-02-migrating-semgrep.md" start="" end="" %} +- [January 2026](cloud/cloud-2026-01.md) — {% include-markdown "./cloud/cloud-2026-01.md" start="" end="" %} +- [January 2026](cloud/cloud-2026-01-adding-golangci-lint.md) — {% include-markdown "./cloud/cloud-2026-01-adding-golangci-lint.md" start="" end="" %} ### 2025 {.release-series} From dd6b33574a8bd3412418eb2b8fcae9d980b11afc Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Cl=C3=A1udia?= Date: Fri, 25 Sep 2026 14:35:52 +0100 Subject: [PATCH 6/8] docs: drop the include-markdown transclusion, write the digest by hand MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Replaces the {% include-markdown %} calls in index.md with the same highlight text written directly in the list — simpler than keeping a build-time dependency between 15 source files and the index for a page that, once published, rarely changes. The / markers are removed from all 15 source pages; the sentence itself stays as a plain intro paragraph on each page. Also: - Drops the leading em dash before each digest body — the two-column grid already separates the date from the content, so it was redundant. - Fixes the bullet dot's vertical alignment on digest rows: it was centered for the old single-line row height and sat visibly above the label once rows grew to 2-4 lines. Verified in the browser: rebuilt getComputedStyle numbers show the dot is now centered on the label's first line (0.26px off, previously ~5px), and checked light/dark rendering of the full 2026 list. Co-Authored-By: Claude Sonnet 5 --- .../cloud-2026-01-adding-golangci-lint.md | 2 +- docs/release-notes/cloud/cloud-2026-01.md | 2 +- .../cloud/cloud-2026-02-migrating-semgrep.md | 2 +- docs/release-notes/cloud/cloud-2026-02.md | 2 +- ...-03-github-integration-settings-changes.md | 2 +- docs/release-notes/cloud/cloud-2026-03.md | 2 +- docs/release-notes/cloud/cloud-2026-04.md | 2 +- docs/release-notes/cloud/cloud-2026-05.md | 2 +- docs/release-notes/cloud/cloud-2026-06.md | 2 +- ...-adding-phpcsfixer-checkov-config-files.md | 2 +- ...d-2026-07-adding-shellcheck-config-file.md | 2 +- ...oud-2026-07-remove-codesniffer-packages.md | 2 +- docs/release-notes/cloud/cloud-2026-07.md | 2 +- docs/release-notes/cloud/cloud-2026-08.md | 2 +- .../cloud/cloud-2026-09-adding-oxlint.md | 2 +- docs/release-notes/index.md | 30 +++++++++---------- theme/stylesheets/home.css | 3 +- 17 files changed, 32 insertions(+), 31 deletions(-) diff --git a/docs/release-notes/cloud/cloud-2026-01-adding-golangci-lint.md b/docs/release-notes/cloud/cloud-2026-01-adding-golangci-lint.md index cfab2d17cd..4b209a59ae 100644 --- a/docs/release-notes/cloud/cloud-2026-01-adding-golangci-lint.md +++ b/docs/release-notes/cloud/cloud-2026-01-adding-golangci-lint.md @@ -6,7 +6,7 @@ rss_href: /feed_rss_created.xml # Adding GolangCI-Lint as new supported tool – January 2026 -**GolangCI-Lint (client-side):** Run GolangCI-Lint locally on your Go projects and upload the results to Codacy for analysis and reporting. +**GolangCI-Lint (client-side):** Run GolangCI-Lint locally on your Go projects and upload the results to Codacy for analysis and reporting. ## GolangCI-Lint (Client-side Go tool) diff --git a/docs/release-notes/cloud/cloud-2026-01.md b/docs/release-notes/cloud/cloud-2026-01.md index 62cdf74541..7ea43b05f0 100644 --- a/docs/release-notes/cloud/cloud-2026-01.md +++ b/docs/release-notes/cloud/cloud-2026-01.md @@ -13,7 +13,7 @@ These release notes are for the Codacy Cloud updates during January 2026. 📢 [Visit the Codacy roadmap](https://roadmap.codacy.com) and let us know your feedback on both new and planned product updates! -**GolangCI-Lint integration:** We've built a new GolangCI-Lint wrapper that runs over 100 linters in a single pass, extending how much of your Go code Codacy can check in one analysis. Also this month: a dedicated VS Code setup section and a step-by-step walkthrough guide new users through configuring the extension. +**GolangCI-Lint integration:** We've built a new GolangCI-Lint wrapper that runs over 100 linters in a single pass, extending how much of your Go code Codacy can check in one analysis. Also this month: a dedicated VS Code setup section and a step-by-step walkthrough guide new users through configuring the extension. ## Product enhancements diff --git a/docs/release-notes/cloud/cloud-2026-02-migrating-semgrep.md b/docs/release-notes/cloud/cloud-2026-02-migrating-semgrep.md index aecc18bc4b..243b4096ed 100644 --- a/docs/release-notes/cloud/cloud-2026-02-migrating-semgrep.md +++ b/docs/release-notes/cloud/cloud-2026-02-migrating-semgrep.md @@ -6,7 +6,7 @@ rss_href: /feed_rss_created.xml # Semgrep to Opengrep migration – February 2026 -**Semgrep to Opengrep:** Following licensing changes to Semgrep, Codacy switched to Opengrep as a 1:1 replacement, preserving all existing patterns, issue history, and configuration. +**Semgrep to Opengrep:** Following licensing changes to Semgrep, Codacy switched to Opengrep as a 1:1 replacement, preserving all existing patterns, issue history, and configuration. As we previously discussed on our [blog](https://blog.codacy.com/opengrep-vs-semgrep), there have been licensing changes to Semgrep, and Opengrep has emerged as an open-source fork of the Semgrep engine. To ensure your continued access to the existing patterns we have switched to Opengrep. diff --git a/docs/release-notes/cloud/cloud-2026-02.md b/docs/release-notes/cloud/cloud-2026-02.md index f70489661c..5eb877b99a 100644 --- a/docs/release-notes/cloud/cloud-2026-02.md +++ b/docs/release-notes/cloud/cloud-2026-02.md @@ -13,7 +13,7 @@ These release notes are for the Codacy Cloud updates during February 2026. 📢 [Visit the Codacy roadmap](https://roadmap.codacy.com) and let us know your feedback on both new and planned product updates! -**Migration from Semgrep to Opengrep:** Following licensing changes to Semgrep, we've moved to Opengrep, an open-source fork of the same engine, so your existing code patterns and workflows keep working without interruption. Also this month: a new Organization Overview Dashboard surfaces health, security, grade, complexity, duplication, and coverage metrics across your organization, alongside a fix to pattern filtering and a new text search for SRM findings. +**Migration from Semgrep to Opengrep:** Following licensing changes to Semgrep, we've moved to Opengrep, an open-source fork of the same engine, so your existing code patterns and workflows keep working without interruption. Also this month: a new Organization Overview Dashboard surfaces health, security, grade, complexity, duplication, and coverage metrics across your organization, alongside a fix to pattern filtering and a new text search for SRM findings. ## Product enhancements diff --git a/docs/release-notes/cloud/cloud-2026-03-github-integration-settings-changes.md b/docs/release-notes/cloud/cloud-2026-03-github-integration-settings-changes.md index 49a0a82c35..b1ecef2e12 100644 --- a/docs/release-notes/cloud/cloud-2026-03-github-integration-settings-changes.md +++ b/docs/release-notes/cloud/cloud-2026-03-github-integration-settings-changes.md @@ -9,7 +9,7 @@ rss_href: /feed_rss_created.xml We are making two changes to the GitHub integration settings over the coming weeks. Both are handled automatically - you don't need to take any action. -**GitHub integration changes:** AI-enhanced comments (Beta) are being replaced by the AI Reviewer on March 17, 2026, and the Coverage summary setting is being folded into the Pull request review comment — both migrations happen automatically. +**GitHub integration changes:** AI-enhanced comments (Beta) are being replaced by the AI Reviewer on March 17, 2026, and the Coverage summary setting is being folded into the Pull request review comment — both migrations happen automatically. - [**AI-enhanced comments (Beta) being deprecated for GitHub**](#ai-enhanced-comments) — AI-enhanced comments are being replaced by the [AI Reviewer](../../codacy-ai/codacy-ai.md#pr-reviewer) on March 17, 2026. - [**Coverage summary moving to Pull request review**](#coverage-summary) — the Coverage summary setting is being removed; coverage data will soon be included in the Pull request review comment. diff --git a/docs/release-notes/cloud/cloud-2026-03.md b/docs/release-notes/cloud/cloud-2026-03.md index cf064ca6f3..3473320c41 100644 --- a/docs/release-notes/cloud/cloud-2026-03.md +++ b/docs/release-notes/cloud/cloud-2026-03.md @@ -13,7 +13,7 @@ These release notes are for the Codacy Cloud updates during March 2026. 📢 [Visit the Codacy roadmap](https://roadmap.codacy.com) and let us know your feedback on both new and planned product updates! -**AI security and privacy safeguards:** The AI reviewer and false positive detection now automatically mask secrets or credentials accidentally pushed in code, before that code reaches AI models. Also this month: a `review.md` file lets you tune the AI Reviewer's output with your own conventions, a manual "Run review" button gives you control over when it runs, and the AI Reviewer now flags gaps in test coverage with a ready-to-use prompt for your coding agent. +**AI security and privacy safeguards:** The AI reviewer and false positive detection now automatically mask secrets or credentials accidentally pushed in code, before that code reaches AI models. Also this month: a `review.md` file lets you tune the AI Reviewer's output with your own conventions, a manual "Run review" button gives you control over when it runs, and the AI Reviewer now flags gaps in test coverage with a ready-to-use prompt for your coding agent. ## Product enhancements diff --git a/docs/release-notes/cloud/cloud-2026-04.md b/docs/release-notes/cloud/cloud-2026-04.md index 66394e4075..1b693a0b8d 100644 --- a/docs/release-notes/cloud/cloud-2026-04.md +++ b/docs/release-notes/cloud/cloud-2026-04.md @@ -13,7 +13,7 @@ These release notes are for the Codacy Cloud updates during April 2026. 📢 [Visit the Codacy roadmap](https://roadmap.codacy.com) and let us know your feedback on both new and planned product updates! -**Context-aware feedback loops:** The AI Reviewer (GitHub only) now factors in earlier comments across a pull request's lifetime, so later reviews build on the conversation instead of repeating themselves. Also this month: the new Pull Request Summary Experience replaces the legacy coverage summary settings, language filtering on the Issues page now isolates results correctly, and a fix restores Prospector's handling of custom configuration files. +**Context-aware feedback loops:** The AI Reviewer (GitHub only) now factors in earlier comments across a pull request's lifetime, so later reviews build on the conversation instead of repeating themselves. Also this month: the new Pull Request Summary Experience replaces the legacy coverage summary settings, language filtering on the Issues page now isolates results correctly, and a fix restores Prospector's handling of custom configuration files. ## Product enhancements diff --git a/docs/release-notes/cloud/cloud-2026-05.md b/docs/release-notes/cloud/cloud-2026-05.md index 2fed6d9355..80d66e0eaa 100644 --- a/docs/release-notes/cloud/cloud-2026-05.md +++ b/docs/release-notes/cloud/cloud-2026-05.md @@ -13,7 +13,7 @@ These release notes are for the Codacy Cloud updates during May 2026. 📢 [Visit the Codacy roadmap](https://roadmap.codacy.com) and let us know your feedback on both new and planned product updates! -**Draft PR AI review control:** The PR reviewer no longer runs automatically on draft pull requests — trigger it manually from the summary page when you want a review. Also this month: AI suggestions in GitHub are deprecated in favor of the PR reviewer, AI Inventory access moves to Business Tier accounts, and YAML analysis now covers `.env`, `.env.production`, `.env.prod`, and `.env.staging` files. +**Draft PR AI review control:** The PR reviewer no longer runs automatically on draft pull requests — trigger it manually from the summary page when you want a review. Also this month: AI suggestions in GitHub are deprecated in favor of the PR reviewer, AI Inventory access moves to Business Tier accounts, and YAML analysis now covers `.env`, `.env.production`, `.env.prod`, and `.env.staging` files. ## Product enhancements diff --git a/docs/release-notes/cloud/cloud-2026-06.md b/docs/release-notes/cloud/cloud-2026-06.md index 1e847e4d78..060533727c 100644 --- a/docs/release-notes/cloud/cloud-2026-06.md +++ b/docs/release-notes/cloud/cloud-2026-06.md @@ -13,7 +13,7 @@ These release notes are for the Codacy Cloud updates during June 2026. 📢 [Visit the Codacy roadmap](https://roadmap.codacy.com) and let us know your feedback on both new and planned product updates! -**Import chain visibility for vulnerable dependencies:** Codacy now shows the dependency chain behind a vulnerability, so you can see how it was introduced into your project rather than just that it exists. Also this month: the CI/CD setup option for container scanning is easier to find, and Guardrails now supports proxy configurations for restricted network environments. +**Import chain visibility for vulnerable dependencies:** Codacy now shows the dependency chain behind a vulnerability, so you can see how it was introduced into your project rather than just that it exists. Also this month: the CI/CD setup option for container scanning is easier to find, and Guardrails now supports proxy configurations for restricted network environments. ### Features - **Import chain visibility for vulnerable dependencies (OD-105):** We added clearer dependency chain visibility so users can better understand how vulnerable dependencies are introduced into their projects. diff --git a/docs/release-notes/cloud/cloud-2026-07-adding-phpcsfixer-checkov-config-files.md b/docs/release-notes/cloud/cloud-2026-07-adding-phpcsfixer-checkov-config-files.md index ca6ffc381c..761071b375 100644 --- a/docs/release-notes/cloud/cloud-2026-07-adding-phpcsfixer-checkov-config-files.md +++ b/docs/release-notes/cloud/cloud-2026-07-adding-phpcsfixer-checkov-config-files.md @@ -6,7 +6,7 @@ rss_href: /feed_rss_created.xml # Adding PHP CS Fixer as new supported tool – July 2026 -**PHP CS Fixer and Checkov configuration files:** PHP CS Fixer joins Codacy's supported tools for PHP style violations, and Checkov analysis can now be configured with a `.checkov.yaml` or `.checkov.yml` file in your repository. +**PHP CS Fixer and Checkov configuration files:** PHP CS Fixer joins Codacy's supported tools for PHP style violations, and Checkov analysis can now be configured with a `.checkov.yaml` or `.checkov.yml` file in your repository. ## PHP CS Fixer diff --git a/docs/release-notes/cloud/cloud-2026-07-adding-shellcheck-config-file.md b/docs/release-notes/cloud/cloud-2026-07-adding-shellcheck-config-file.md index a9636842fd..b07d4728a1 100644 --- a/docs/release-notes/cloud/cloud-2026-07-adding-shellcheck-config-file.md +++ b/docs/release-notes/cloud/cloud-2026-07-adding-shellcheck-config-file.md @@ -7,7 +7,7 @@ rss_href: /feed_rss_created.xml We’ve upgraded how Shellcheck works on Codacy! While you previously had to configure Shellcheck analysis directly through the Codacy UI, you can now manage your settings using a configuration file. -**Shellcheck configuration files:** You can now manage Shellcheck settings with a `.shellcheckrc` file in your repository instead of configuring analysis directly through the Codacy UI. +**Shellcheck configuration files:** You can now manage Shellcheck settings with a `.shellcheckrc` file in your repository instead of configuring analysis directly through the Codacy UI. Codacy will automatically apply your rules during analysis once you set it up. Here is how to get started: diff --git a/docs/release-notes/cloud/cloud-2026-07-remove-codesniffer-packages.md b/docs/release-notes/cloud/cloud-2026-07-remove-codesniffer-packages.md index 117be4753d..7e6912f581 100644 --- a/docs/release-notes/cloud/cloud-2026-07-remove-codesniffer-packages.md +++ b/docs/release-notes/cloud/cloud-2026-07-remove-codesniffer-packages.md @@ -9,7 +9,7 @@ We are preparing to upgrade our PHP CodeSniffer tool to the latest version. This We know how important your current workflows and rule configurations are. However, to successfully complete this upgrade, we have encountered hard compatibility constraints with several older, unmaintained coding standard packages. To move forward, we must officially remove support for these legacy packages and their associated rules. -**PHP_CodeSniffer upgrade:** PHP_CodeSniffer is upgrading to its latest version, which drops support for several unmaintained coding standard packages, including the WordPress-VIP, Magento, and PHPCS Security Audit rule sets. +**PHP_CodeSniffer upgrade:** PHP_CodeSniffer is upgrading to its latest version, which drops support for several unmaintained coding standard packages, including the WordPress-VIP, Magento, and PHPCS Security Audit rule sets. ## Packages Being Removed diff --git a/docs/release-notes/cloud/cloud-2026-07.md b/docs/release-notes/cloud/cloud-2026-07.md index 374a402654..14b6b35766 100644 --- a/docs/release-notes/cloud/cloud-2026-07.md +++ b/docs/release-notes/cloud/cloud-2026-07.md @@ -12,7 +12,7 @@ These release notes are for the Codacy Cloud updates during July 2026. 📢 [Visit the Codacy roadmap](https://roadmap.codacy.com) and let us know your feedback on both new and planned product updates! -**Folder-level metrics:** You can now browse a repository by folder and see quality metrics — issues, complexity, coverage, and duplication — scoped to each directory, with folder navigation, search, and branch-keyed overviews. Also this month: security findings now surface the affected entrypoint functions for a vulnerable dependency, a new filter bar on the Pull Requests page lets you search by title and branch, and PHP CS Fixer joins the supported tools. +**Folder-level metrics:** You can now browse a repository by folder and see quality metrics — issues, complexity, coverage, and duplication — scoped to each directory, with folder navigation, search, and branch-keyed overviews. Also this month: security findings now surface the affected entrypoint functions for a vulnerable dependency, a new filter bar on the Pull Requests page lets you search by title and branch, and PHP CS Fixer joins the supported tools. ### Features - **Folder-Level Metrics:** Users can now browse their repositories by folder and view quality metrics-issues, complexity, coverage, and duplication - scoped to each directory. Folder navigation, search, and branch-keyed overviews are all included. (OD-179, OD-180, OD-181, OD-183, OD-264) diff --git a/docs/release-notes/cloud/cloud-2026-08.md b/docs/release-notes/cloud/cloud-2026-08.md index 1e126cc1f9..e169eadab9 100644 --- a/docs/release-notes/cloud/cloud-2026-08.md +++ b/docs/release-notes/cloud/cloud-2026-08.md @@ -12,7 +12,7 @@ These release notes are for the Codacy Cloud updates during August 2026. 📢 [Visit the Codacy roadmap](https://roadmap.codacy.com) and let us know your feedback on both new and planned product updates! -**Repository tokens for API v3:** Scoped repository tokens are now fully supported end-to-end — create, list, delete (single and bulk), and expiration — across all features of the product, with mandatory token lifetimes enforced in both the API and the SPA. Also this month: new search and branch-scope filters land on the Pull Requests page, and a Dart adapter closes a parity gap for Dart projects in the Analysis CLI. +**Repository tokens for API v3:** Scoped repository tokens are now fully supported end-to-end — create, list, delete (single and bulk), and expiration — across all features of the product, with mandatory token lifetimes enforced in both the API and the SPA. Also this month: new search and branch-scope filters land on the Pull Requests page, and a Dart adapter closes a parity gap for Dart projects in the Analysis CLI. ### Features - **Repository (Project) Tokens for API v3:** Full rollout of scoped repository tokens — creation, listing, deletion (single & bulk), and expiration is now supported end-to-end across all features of our product. diff --git a/docs/release-notes/cloud/cloud-2026-09-adding-oxlint.md b/docs/release-notes/cloud/cloud-2026-09-adding-oxlint.md index f1bc05abf0..7341d156c9 100644 --- a/docs/release-notes/cloud/cloud-2026-09-adding-oxlint.md +++ b/docs/release-notes/cloud/cloud-2026-09-adding-oxlint.md @@ -8,7 +8,7 @@ rss_href: /feed_rss_created.xml We're excited to announce support for [Oxlint](https://github.com/oxc-project/oxc), a fast Rust-based linter for JavaScript and TypeScript from the Oxc project. With this addition, Codacy can now automatically analyze your JavaScript and TypeScript projects for correctness, style, and best-practice issues (among other categories), reporting them directly in your dashboard. -**Oxlint support:** Codacy can now analyze your JavaScript and TypeScript projects with Oxlint, a fast Rust-based linter from the Oxc project, and report results directly in your dashboard. +**Oxlint support:** Codacy can now analyze your JavaScript and TypeScript projects with Oxlint, a fast Rust-based linter from the Oxc project, and report results directly in your dashboard. **Why it matters:** diff --git a/docs/release-notes/index.md b/docs/release-notes/index.md index 4c361e6d80..badaabdb0e 100644 --- a/docs/release-notes/index.md +++ b/docs/release-notes/index.md @@ -21,21 +21,21 @@ For product updates that are in progress or planned [visit the Codacy public roa ### 2026 {.release-series} -- [September 2026](cloud/cloud-2026-09-adding-oxlint.md) — {% include-markdown "./cloud/cloud-2026-09-adding-oxlint.md" start="" end="" %} -- [August 2026](cloud/cloud-2026-08.md) — {% include-markdown "./cloud/cloud-2026-08.md" start="" end="" %} -- [July 2026](cloud/cloud-2026-07.md) — {% include-markdown "./cloud/cloud-2026-07.md" start="" end="" %} -- [July 2026](cloud/cloud-2026-07-adding-shellcheck-config-file.md) — {% include-markdown "./cloud/cloud-2026-07-adding-shellcheck-config-file.md" start="" end="" %} -- [July 2026](cloud/cloud-2026-07-adding-phpcsfixer-checkov-config-files.md) — {% include-markdown "./cloud/cloud-2026-07-adding-phpcsfixer-checkov-config-files.md" start="" end="" %} -- [July 2026](cloud/cloud-2026-07-remove-codesniffer-packages.md) — {% include-markdown "./cloud/cloud-2026-07-remove-codesniffer-packages.md" start="" end="" %} -- [June 2026](cloud/cloud-2026-06.md) — {% include-markdown "./cloud/cloud-2026-06.md" start="" end="" %} -- [May 2026](cloud/cloud-2026-05.md) — {% include-markdown "./cloud/cloud-2026-05.md" start="" end="" %} -- [April 2026](cloud/cloud-2026-04.md) — {% include-markdown "./cloud/cloud-2026-04.md" start="" end="" %} -- [March 2026](cloud/cloud-2026-03.md) — {% include-markdown "./cloud/cloud-2026-03.md" start="" end="" %} -- [March 2026](cloud/cloud-2026-03-github-integration-settings-changes.md) — {% include-markdown "./cloud/cloud-2026-03-github-integration-settings-changes.md" start="" end="" %} -- [February 2026](cloud/cloud-2026-02.md) — {% include-markdown "./cloud/cloud-2026-02.md" start="" end="" %} -- [February 2026](cloud/cloud-2026-02-migrating-semgrep.md) — {% include-markdown "./cloud/cloud-2026-02-migrating-semgrep.md" start="" end="" %} -- [January 2026](cloud/cloud-2026-01.md) — {% include-markdown "./cloud/cloud-2026-01.md" start="" end="" %} -- [January 2026](cloud/cloud-2026-01-adding-golangci-lint.md) — {% include-markdown "./cloud/cloud-2026-01-adding-golangci-lint.md" start="" end="" %} +- [September 2026](cloud/cloud-2026-09-adding-oxlint.md) **Oxlint support:** Codacy can now analyze your JavaScript and TypeScript projects with Oxlint, a fast Rust-based linter from the Oxc project, and report results directly in your dashboard. +- [August 2026](cloud/cloud-2026-08.md) **Repository tokens for API v3:** Scoped repository tokens are now fully supported end-to-end — create, list, delete (single and bulk), and expiration — across all features of the product, with mandatory token lifetimes enforced in both the API and the SPA. +- [July 2026](cloud/cloud-2026-07.md) **Folder-level metrics:** You can now browse a repository by folder and see quality metrics — issues, complexity, coverage, and duplication — scoped to each directory, with folder navigation, search, and branch-keyed overviews. +- [July 2026](cloud/cloud-2026-07-adding-shellcheck-config-file.md) **Shellcheck configuration files:** You can now manage Shellcheck settings with a `.shellcheckrc` file in your repository instead of configuring analysis directly through the Codacy UI. +- [July 2026](cloud/cloud-2026-07-adding-phpcsfixer-checkov-config-files.md) **PHP CS Fixer and Checkov configuration files:** PHP CS Fixer joins Codacy's supported tools for PHP style violations, and Checkov analysis can now be configured with a `.checkov.yaml` or `.checkov.yml` file in your repository. +- [July 2026](cloud/cloud-2026-07-remove-codesniffer-packages.md) **PHP_CodeSniffer upgrade:** PHP_CodeSniffer is upgrading to its latest version, which drops support for several unmaintained coding standard packages, including the WordPress-VIP, Magento, and PHPCS Security Audit rule sets. +- [June 2026](cloud/cloud-2026-06.md) **Import chain visibility for vulnerable dependencies:** Codacy now shows the dependency chain behind a vulnerability, so you can see how it was introduced into your project rather than just that it exists. +- [May 2026](cloud/cloud-2026-05.md) **Draft PR AI review control:** The PR reviewer no longer runs automatically on draft pull requests — trigger it manually from the summary page when you want a review. +- [April 2026](cloud/cloud-2026-04.md) **Context-aware feedback loops:** The AI Reviewer (GitHub only) now factors in earlier comments across a pull request's lifetime, so later reviews build on the conversation instead of repeating themselves. +- [March 2026](cloud/cloud-2026-03.md) **AI security and privacy safeguards:** The AI reviewer and false positive detection now automatically mask secrets or credentials accidentally pushed in code, before that code reaches AI models. +- [March 2026](cloud/cloud-2026-03-github-integration-settings-changes.md) **GitHub integration changes:** AI-enhanced comments (Beta) are being replaced by the AI Reviewer on March 17, 2026, and the Coverage summary setting is being folded into the Pull request review comment — both migrations happen automatically. +- [February 2026](cloud/cloud-2026-02.md) **Migration from Semgrep to Opengrep:** Following licensing changes to Semgrep, we've moved to Opengrep, an open-source fork of the same engine, so your existing code patterns and workflows keep working without interruption. +- [February 2026](cloud/cloud-2026-02-migrating-semgrep.md) **Semgrep to Opengrep:** Following licensing changes to Semgrep, Codacy switched to Opengrep as a 1:1 replacement, preserving all existing patterns, issue history, and configuration. +- [January 2026](cloud/cloud-2026-01.md) **GolangCI-Lint integration:** We've built a new GolangCI-Lint wrapper that runs over 100 linters in a single pass, extending how much of your Go code Codacy can check in one analysis. +- [January 2026](cloud/cloud-2026-01-adding-golangci-lint.md) **GolangCI-Lint (client-side):** Run GolangCI-Lint locally on your Go projects and upload the results to Codacy for analysis and reporting. ### 2025 {.release-series} diff --git a/theme/stylesheets/home.css b/theme/stylesheets/home.css index 2386b82cde..b635156368 100644 --- a/theme/stylesheets/home.css +++ b/theme/stylesheets/home.css @@ -28,10 +28,11 @@ .md-content article.md-typeset:has(#codacy-release-notes) .release-series + ul > li:hover { background: var(--docs-bg-secondary); } .md-content article.md-typeset:has(#codacy-release-notes) .release-series + ul a { color: var(--docs-text-secondary); font-weight: 500; text-decoration: none; } .md-content article.md-typeset:has(#codacy-release-notes) .release-series + ul a:hover { color: var(--docs-link); } -/* Entries carrying a transcluded highlight (see docs/release-notes/index.md) get a +/* Entries carrying a digest highlight (see docs/release-notes/index.md) get a two-column layout, a period label beside its digest, so a reader can scan what shipped without opening every page — the rest of the list stays a plain row. */ .md-content article.md-typeset:has(#codacy-release-notes) .release-series + ul > li:has(.release-digest__body) { display: grid; grid-template-columns: minmax(8.5rem, 11rem) minmax(0, 1fr); column-gap: 1rem; padding: .85rem .65rem .85rem 1.35rem; } +.md-content article.md-typeset:has(#codacy-release-notes) .release-series + ul > li:has(.release-digest__body)::before { top: 1.35rem; } .md-content article.md-typeset:has(#codacy-release-notes) .release-series + ul > li:has(.release-digest__body) > a { color: var(--docs-text); font-weight: 600; } .release-digest__body { color: var(--docs-text-secondary); } .release-digest__body strong { color: var(--docs-text); font-weight: 600; } From 6a8a606c4df5d8e412588b0d2a6922964cecd8d2 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Cl=C3=A1udia?= Date: Fri, 25 Sep 2026 14:49:51 +0100 Subject: [PATCH 7/8] docs: remove the bullet dot, add real dates, list all main features MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - Removes the ::before bullet dot from the release notes list entirely (both plain and digest rows) instead of re-tuning its position, and tightens the now-unneeded left padding that made room for it. - Replaces "Month Year" labels with the actual day, pulled from git history (the commit that first added each file) rather than invented. Flagging one anomaly in the handoff: the January roundup's git date falls inside the month it summarizes rather than after it, unlike every other monthly roundup. - For months with more than one main feature, names all of them instead of just the headline one, while leaving bug fixes and minor improvements out — matches the Features/Improvements split already used on the June/July/August pages, applied by judgment on the earlier months that only have a flat "Product enhancements" list. Co-Authored-By: Claude Sonnet 5 --- docs/release-notes/index.md | 30 +++++++++++++++--------------- theme/stylesheets/home.css | 6 ++---- 2 files changed, 17 insertions(+), 19 deletions(-) diff --git a/docs/release-notes/index.md b/docs/release-notes/index.md index badaabdb0e..5e2d045dd3 100644 --- a/docs/release-notes/index.md +++ b/docs/release-notes/index.md @@ -21,21 +21,21 @@ For product updates that are in progress or planned [visit the Codacy public roa ### 2026 {.release-series} -- [September 2026](cloud/cloud-2026-09-adding-oxlint.md) **Oxlint support:** Codacy can now analyze your JavaScript and TypeScript projects with Oxlint, a fast Rust-based linter from the Oxc project, and report results directly in your dashboard. -- [August 2026](cloud/cloud-2026-08.md) **Repository tokens for API v3:** Scoped repository tokens are now fully supported end-to-end — create, list, delete (single and bulk), and expiration — across all features of the product, with mandatory token lifetimes enforced in both the API and the SPA. -- [July 2026](cloud/cloud-2026-07.md) **Folder-level metrics:** You can now browse a repository by folder and see quality metrics — issues, complexity, coverage, and duplication — scoped to each directory, with folder navigation, search, and branch-keyed overviews. -- [July 2026](cloud/cloud-2026-07-adding-shellcheck-config-file.md) **Shellcheck configuration files:** You can now manage Shellcheck settings with a `.shellcheckrc` file in your repository instead of configuring analysis directly through the Codacy UI. -- [July 2026](cloud/cloud-2026-07-adding-phpcsfixer-checkov-config-files.md) **PHP CS Fixer and Checkov configuration files:** PHP CS Fixer joins Codacy's supported tools for PHP style violations, and Checkov analysis can now be configured with a `.checkov.yaml` or `.checkov.yml` file in your repository. -- [July 2026](cloud/cloud-2026-07-remove-codesniffer-packages.md) **PHP_CodeSniffer upgrade:** PHP_CodeSniffer is upgrading to its latest version, which drops support for several unmaintained coding standard packages, including the WordPress-VIP, Magento, and PHPCS Security Audit rule sets. -- [June 2026](cloud/cloud-2026-06.md) **Import chain visibility for vulnerable dependencies:** Codacy now shows the dependency chain behind a vulnerability, so you can see how it was introduced into your project rather than just that it exists. -- [May 2026](cloud/cloud-2026-05.md) **Draft PR AI review control:** The PR reviewer no longer runs automatically on draft pull requests — trigger it manually from the summary page when you want a review. -- [April 2026](cloud/cloud-2026-04.md) **Context-aware feedback loops:** The AI Reviewer (GitHub only) now factors in earlier comments across a pull request's lifetime, so later reviews build on the conversation instead of repeating themselves. -- [March 2026](cloud/cloud-2026-03.md) **AI security and privacy safeguards:** The AI reviewer and false positive detection now automatically mask secrets or credentials accidentally pushed in code, before that code reaches AI models. -- [March 2026](cloud/cloud-2026-03-github-integration-settings-changes.md) **GitHub integration changes:** AI-enhanced comments (Beta) are being replaced by the AI Reviewer on March 17, 2026, and the Coverage summary setting is being folded into the Pull request review comment — both migrations happen automatically. -- [February 2026](cloud/cloud-2026-02.md) **Migration from Semgrep to Opengrep:** Following licensing changes to Semgrep, we've moved to Opengrep, an open-source fork of the same engine, so your existing code patterns and workflows keep working without interruption. -- [February 2026](cloud/cloud-2026-02-migrating-semgrep.md) **Semgrep to Opengrep:** Following licensing changes to Semgrep, Codacy switched to Opengrep as a 1:1 replacement, preserving all existing patterns, issue history, and configuration. -- [January 2026](cloud/cloud-2026-01.md) **GolangCI-Lint integration:** We've built a new GolangCI-Lint wrapper that runs over 100 linters in a single pass, extending how much of your Go code Codacy can check in one analysis. -- [January 2026](cloud/cloud-2026-01-adding-golangci-lint.md) **GolangCI-Lint (client-side):** Run GolangCI-Lint locally on your Go projects and upload the results to Codacy for analysis and reporting. +- [September 2, 2026](cloud/cloud-2026-09-adding-oxlint.md) **Oxlint support:** Codacy can now analyze your JavaScript and TypeScript projects with Oxlint, a fast Rust-based linter from the Oxc project, and report results directly in your dashboard. +- [September 2, 2026](cloud/cloud-2026-08.md) **Repository tokens for API v3:** scoped repository tokens are now fully supported end-to-end, with mandatory token lifetimes enforced. Also new: search and branch-scope filters on the Pull Requests page, and a Dart adapter for the Analysis CLI. +- [August 11, 2026](cloud/cloud-2026-07.md) **Folder-level metrics:** browse a repository by folder with quality metrics scoped to each directory. Also new: affected entrypoint functions on vulnerable-dependency findings, a filter bar on the Pull Requests page, and PHP CS Fixer joining the supported tools. +- [July 29, 2026](cloud/cloud-2026-07-adding-shellcheck-config-file.md) **Shellcheck configuration files:** You can now manage Shellcheck settings with a `.shellcheckrc` file in your repository instead of configuring analysis directly through the Codacy UI. +- [July 27, 2026](cloud/cloud-2026-07-adding-phpcsfixer-checkov-config-files.md) **PHP CS Fixer:** joins Codacy's supported tools for PHP style violations. Also: Checkov analysis can now be configured with a `.checkov.yaml` or `.checkov.yml` file in your repository. +- [July 10, 2026](cloud/cloud-2026-07-remove-codesniffer-packages.md) **PHP_CodeSniffer upgrade:** PHP_CodeSniffer is upgrading to its latest version, which drops support for several unmaintained coding standard packages, including the WordPress-VIP, Magento, and PHPCS Security Audit rule sets. +- [July 10, 2026](cloud/cloud-2026-06.md) **Import chain visibility for vulnerable dependencies:** Codacy now shows the dependency chain behind a vulnerability. Also new: clearer CI/CD setup visibility in container scanning, and proxy support for Guardrails. +- [June 11, 2026](cloud/cloud-2026-05.md) **Draft PR AI review control:** the PR reviewer no longer runs automatically on draft pull requests. Also new: AI suggestions in GitHub are deprecated in favor of the PR reviewer, and YAML analysis now covers `.env`, `.env.production`, `.env.prod`, and `.env.staging` files. +- [May 8, 2026](cloud/cloud-2026-04.md) **Context-aware feedback loops:** the AI Reviewer (GitHub only) now factors in earlier comments across a pull request's lifetime. Also new: the Pull Request Summary Experience, replacing the legacy coverage summary settings. +- [April 15, 2026](cloud/cloud-2026-03.md) **AI security and privacy safeguards:** the AI reviewer now masks secrets or credentials in code before it reaches AI models. Also new: a `review.md` file to tune the AI Reviewer's output, a manual "Run review" trigger on pull requests, and AI-powered test coverage suggestions with a ready-to-use prompt for your coding agent. +- [March 2, 2026](cloud/cloud-2026-03-github-integration-settings-changes.md) **AI-enhanced comments deprecation:** AI-enhanced comments (Beta) are being replaced by the AI Reviewer on March 17, 2026. Also: the Coverage summary setting is being folded into the Pull request review comment — both migrations happen automatically. +- [March 6, 2026](cloud/cloud-2026-02.md) **Migration from Semgrep to Opengrep:** following licensing changes to Semgrep, Codacy moved to Opengrep, an open-source fork of the same engine. Also new: an Organization Overview Dashboard with health, security, and coverage metrics, and text search for SRM findings. +- [February 19, 2026](cloud/cloud-2026-02-migrating-semgrep.md) **Semgrep to Opengrep:** Following licensing changes to Semgrep, Codacy switched to Opengrep as a 1:1 replacement, preserving all existing patterns, issue history, and configuration. +- [January 5, 2026](cloud/cloud-2026-01.md) **GolangCI-Lint integration:** a new wrapper runs over 100 linters in a single pass, extending how much of your Go code Codacy checks in one analysis. Also new: a dedicated VS Code setup section for configuring the extension. +- [January 13, 2026](cloud/cloud-2026-01-adding-golangci-lint.md) **GolangCI-Lint (client-side):** Run GolangCI-Lint locally on your Go projects and upload the results to Codacy for analysis and reporting. ### 2025 {.release-series} diff --git a/theme/stylesheets/home.css b/theme/stylesheets/home.css index b635156368..9152ffd0de 100644 --- a/theme/stylesheets/home.css +++ b/theme/stylesheets/home.css @@ -23,16 +23,14 @@ .md-content article.md-typeset:has(#codacy-release-notes) .release-series { margin: 2rem 0 .45rem; padding: 0; color: var(--docs-text); font-size: .8rem; font-weight: 700; letter-spacing: .035em; line-height: 1.4; text-transform: uppercase; } .md-content article.md-typeset:has(#codacy-release-notes) .release-series + ul { margin: 0 0 1.75rem; padding: 0; border-top: 1px solid var(--docs-border); list-style: none; } -.md-content article.md-typeset:has(#codacy-release-notes) .release-series + ul > li { position: relative; margin: 0; padding: .58rem .65rem .58rem 1.35rem; border-bottom: 1px solid var(--docs-border); color: var(--docs-text-tertiary); font-size: .875rem; line-height: 1.5; transition: background-color .12s ease; } -.md-content article.md-typeset:has(#codacy-release-notes) .release-series + ul > li::before { position: absolute; top: 1.05rem; left: .55rem; width: .28rem; height: .28rem; border-radius: 50%; background: var(--docs-border-strong); content: ""; } +.md-content article.md-typeset:has(#codacy-release-notes) .release-series + ul > li { position: relative; margin: 0; padding: .58rem .65rem; border-bottom: 1px solid var(--docs-border); color: var(--docs-text-tertiary); font-size: .875rem; line-height: 1.5; transition: background-color .12s ease; } .md-content article.md-typeset:has(#codacy-release-notes) .release-series + ul > li:hover { background: var(--docs-bg-secondary); } .md-content article.md-typeset:has(#codacy-release-notes) .release-series + ul a { color: var(--docs-text-secondary); font-weight: 500; text-decoration: none; } .md-content article.md-typeset:has(#codacy-release-notes) .release-series + ul a:hover { color: var(--docs-link); } /* Entries carrying a digest highlight (see docs/release-notes/index.md) get a two-column layout, a period label beside its digest, so a reader can scan what shipped without opening every page — the rest of the list stays a plain row. */ -.md-content article.md-typeset:has(#codacy-release-notes) .release-series + ul > li:has(.release-digest__body) { display: grid; grid-template-columns: minmax(8.5rem, 11rem) minmax(0, 1fr); column-gap: 1rem; padding: .85rem .65rem .85rem 1.35rem; } -.md-content article.md-typeset:has(#codacy-release-notes) .release-series + ul > li:has(.release-digest__body)::before { top: 1.35rem; } +.md-content article.md-typeset:has(#codacy-release-notes) .release-series + ul > li:has(.release-digest__body) { display: grid; grid-template-columns: minmax(8.5rem, 11rem) minmax(0, 1fr); column-gap: 1rem; padding: .85rem .65rem; } .md-content article.md-typeset:has(#codacy-release-notes) .release-series + ul > li:has(.release-digest__body) > a { color: var(--docs-text); font-weight: 600; } .release-digest__body { color: var(--docs-text-secondary); } .release-digest__body strong { color: var(--docs-text); font-weight: 600; } From ed4b1c4bbead8abf2e286d199ee1e8f37f9a80e6 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Cl=C3=A1udia?= Date: Fri, 25 Sep 2026 15:04:47 +0100 Subject: [PATCH 8/8] docs: list each main feature as its own paragraph, unbold the date MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit For months with more than one main feature, each now gets its own bold-led paragraph (separated by a blank line) using the wording from that page's own Features/Product enhancements section, rather than being paraphrased into one run-on "Also new: ..." sentence. Dropped internal ticket references (OD-xxx, CF-xxx, TCE-xxx) since they're not meaningful to an external reader, and the one instance of "robust" (banned by voice.md) in the January entry. Also removes the bold weight from the date label — it now matches the rest of the list's link styling, just distinguished by color. Verified in the browser: all 15 entries render with clean paragraph spacing at the row heights this produces (August and July now run 4 paragraphs each), and confirmed via get_page_text/screenshots that content earlier screenshots seemed to cut off was a scroll-timing artifact, not a rendering bug — the full HTML output was always complete. Co-Authored-By: Claude Sonnet 5 --- docs/release-notes/index.md | 20 ++++++++++---------- theme/stylesheets/home.css | 2 +- 2 files changed, 11 insertions(+), 11 deletions(-) diff --git a/docs/release-notes/index.md b/docs/release-notes/index.md index 5e2d045dd3..6b95de4736 100644 --- a/docs/release-notes/index.md +++ b/docs/release-notes/index.md @@ -22,19 +22,19 @@ For product updates that are in progress or planned [visit the Codacy public roa - [September 2, 2026](cloud/cloud-2026-09-adding-oxlint.md) **Oxlint support:** Codacy can now analyze your JavaScript and TypeScript projects with Oxlint, a fast Rust-based linter from the Oxc project, and report results directly in your dashboard. -- [September 2, 2026](cloud/cloud-2026-08.md) **Repository tokens for API v3:** scoped repository tokens are now fully supported end-to-end, with mandatory token lifetimes enforced. Also new: search and branch-scope filters on the Pull Requests page, and a Dart adapter for the Analysis CLI. -- [August 11, 2026](cloud/cloud-2026-07.md) **Folder-level metrics:** browse a repository by folder with quality metrics scoped to each directory. Also new: affected entrypoint functions on vulnerable-dependency findings, a filter bar on the Pull Requests page, and PHP CS Fixer joining the supported tools. +- [September 2, 2026](cloud/cloud-2026-08.md) **Repository (Project) Tokens for API v3:** Full rollout of scoped repository tokens — creation, listing, deletion (single & bulk), and expiration is now supported end-to-end across all features of our product.

**Mandatory token expiration & auditability:** Repository tokens now enforce a maximum lifetime, surfaced in both the API and the SPA.

**Pull Requests page filters:** New search + branch-scope filter bar on the Pull Requests page, backed by API support and a new `pull-requests list` command in the Cloud CLI.

**Dart support in the Analysis CLI:** Added a `dartanalyzer` adapter, closing a cli-v2 parity gap for Dart projects. +- [August 11, 2026](cloud/cloud-2026-07.md) **Folder-Level Metrics:** Users can now browse their repositories by folder and view quality metrics — issues, complexity, coverage, and duplication — scoped to each directory. Folder navigation, search, and branch-keyed overviews are all included.

**Affected Functions in Security Findings:** Security dependency findings now surface the affected entrypoint functions, so teams can immediately see which code paths are reachable from a vulnerable dependency. The functions are visible in the Findings card, in the cloud CLI `findings` command, and in the public API.

**Pull Requests Page Filter Bar:** A new filter bar on the Pull Requests page lets users search pull requests by title and switch between all target branches or the current branch only.

**PHP CS Fixer is live:** Codacy added support for PHP CS Fixer, a popular tool that fixes PHP code to follow standard coding style rules. - [July 29, 2026](cloud/cloud-2026-07-adding-shellcheck-config-file.md) **Shellcheck configuration files:** You can now manage Shellcheck settings with a `.shellcheckrc` file in your repository instead of configuring analysis directly through the Codacy UI. -- [July 27, 2026](cloud/cloud-2026-07-adding-phpcsfixer-checkov-config-files.md) **PHP CS Fixer:** joins Codacy's supported tools for PHP style violations. Also: Checkov analysis can now be configured with a `.checkov.yaml` or `.checkov.yml` file in your repository. +- [July 27, 2026](cloud/cloud-2026-07-adding-phpcsfixer-checkov-config-files.md) **PHP CS Fixer:** Support for PHP-CS-Fixer, a tool that fixes PHP code to follow standard coding style rules; Codacy can now analyze PHP projects for style violations and report them in your dashboard.

**Now Checkov supports configuration files:** Checkov analysis can now be configured with a `.checkov.yaml` or `.checkov.yml` file in your repository. - [July 10, 2026](cloud/cloud-2026-07-remove-codesniffer-packages.md) **PHP_CodeSniffer upgrade:** PHP_CodeSniffer is upgrading to its latest version, which drops support for several unmaintained coding standard packages, including the WordPress-VIP, Magento, and PHPCS Security Audit rule sets. -- [July 10, 2026](cloud/cloud-2026-06.md) **Import chain visibility for vulnerable dependencies:** Codacy now shows the dependency chain behind a vulnerability. Also new: clearer CI/CD setup visibility in container scanning, and proxy support for Guardrails. -- [June 11, 2026](cloud/cloud-2026-05.md) **Draft PR AI review control:** the PR reviewer no longer runs automatically on draft pull requests. Also new: AI suggestions in GitHub are deprecated in favor of the PR reviewer, and YAML analysis now covers `.env`, `.env.production`, `.env.prod`, and `.env.staging` files. -- [May 8, 2026](cloud/cloud-2026-04.md) **Context-aware feedback loops:** the AI Reviewer (GitHub only) now factors in earlier comments across a pull request's lifetime. Also new: the Pull Request Summary Experience, replacing the legacy coverage summary settings. -- [April 15, 2026](cloud/cloud-2026-03.md) **AI security and privacy safeguards:** the AI reviewer now masks secrets or credentials in code before it reaches AI models. Also new: a `review.md` file to tune the AI Reviewer's output, a manual "Run review" trigger on pull requests, and AI-powered test coverage suggestions with a ready-to-use prompt for your coding agent. -- [March 2, 2026](cloud/cloud-2026-03-github-integration-settings-changes.md) **AI-enhanced comments deprecation:** AI-enhanced comments (Beta) are being replaced by the AI Reviewer on March 17, 2026. Also: the Coverage summary setting is being folded into the Pull request review comment — both migrations happen automatically. -- [March 6, 2026](cloud/cloud-2026-02.md) **Migration from Semgrep to Opengrep:** following licensing changes to Semgrep, Codacy moved to Opengrep, an open-source fork of the same engine. Also new: an Organization Overview Dashboard with health, security, and coverage metrics, and text search for SRM findings. +- [July 10, 2026](cloud/cloud-2026-06.md) **Import chain visibility for vulnerable dependencies:** We added clearer dependency chain visibility so users can better understand how vulnerable dependencies are introduced into their projects.

**Better visibility for CI/CD setup in container scanning:** We made the CI/CD setup option more prominent in container scanning so teams can find and enable it more easily.

**Proxy support for Guardrails:** Guardrails now supports proxy configurations, making it easier to use in restricted network environments. +- [June 11, 2026](cloud/cloud-2026-05.md) **Draft PR AI Review Control:** The PR reviewer no longer runs automatically for draft PRs. Please trigger it manually using the button on the summary if you want a review.

**Deprecation of AI Suggestions:** Deprecated AI suggestions in GitHub; please use our PR reviewer instead.

**YAML Support for Environment Files:** Codacy now supports `.env`, `.env.production`, `.env.prod`, and `.env.staging` files for the YAML language. All tools running for YAML will be able to scan these files as well. +- [May 8, 2026](cloud/cloud-2026-04.md) **Context-Aware Feedback Loops:** The AI Reviewer (GitHub only) now factors in previous comments throughout the life of a Pull Request. By learning from the conversation history, it delivers more relevant feedback and reduces noise with every subsequent review.

**New Pull Request Summary Experience:** We have introduced the Pull Request Summary to replace the legacy coverage summary settings (GitHub only). All repositories and organizations previously using the coverage summary have been migrated to this new, unified view. +- [April 15, 2026](cloud/cloud-2026-03.md) **AI Security & Privacy Safeguards:** The AI reviewer and false positive detection now automatically mask any secrets or credentials accidentally pushed in code, protecting sensitive data before it is processed by AI models.

**Customizable AI Instructions:** You can now tune the AI Reviewer's output by adding a `review.md` file to your repository, to define specific coding conventions and prioritize the types of feedback that matter most to your team.

**Manual AI Review Trigger:** The new "Run review" button on the Pull Request Summary page lets you trigger the AI Reviewer exactly when you need it, rather than relying solely on automated triggers.

**AI-Powered Test Coverage Suggestions:** The AI Reviewer now identifies gaps in test coverage and suggests missing tests for your changes, with a ready-to-use prompt you can give to your coding agent to generate them. +- [March 2, 2026](cloud/cloud-2026-03-github-integration-settings-changes.md) **AI-enhanced comments (Beta) being deprecated for GitHub:** AI-enhanced comments are being replaced by the AI Reviewer on March 17, 2026.

**Coverage summary moving to Pull request review:** The Coverage summary setting is being removed; coverage data will soon be included in the Pull request review comment. +- [March 6, 2026](cloud/cloud-2026-02.md) **Migration from Semgrep to Opengrep:** In response to recent licensing changes affecting Semgrep, we have transitioned to Opengrep, an open-source fork of the Semgrep engine, ensuring uninterrupted access to your existing code patterns and continued support for your workflows.

**Organization Overview Dashboard:** A comprehensive dashboard providing a holistic view of your organization's health, including new metrics for code health & security, grade, complexity, duplication, and coverage.

**SRM Findings Text Search:** Added the ability to filter findings in the SRM tab using text search, for more efficient navigation and management of results. - [February 19, 2026](cloud/cloud-2026-02-migrating-semgrep.md) **Semgrep to Opengrep:** Following licensing changes to Semgrep, Codacy switched to Opengrep as a 1:1 replacement, preserving all existing patterns, issue history, and configuration. -- [January 5, 2026](cloud/cloud-2026-01.md) **GolangCI-Lint integration:** a new wrapper runs over 100 linters in a single pass, extending how much of your Go code Codacy checks in one analysis. Also new: a dedicated VS Code setup section for configuring the extension. +- [January 5, 2026](cloud/cloud-2026-01.md) **GolangCI-Lint Integration:** We've built a new GolangCI-Lint wrapper. This client-side tool integrates over 100 linters, providing deeper insight into Go code quality.

**VS Code Setup Section:** Introduced a dedicated setup section within the VS Code extension to streamline the initial configuration process and improve the onboarding experience. - [January 13, 2026](cloud/cloud-2026-01-adding-golangci-lint.md) **GolangCI-Lint (client-side):** Run GolangCI-Lint locally on your Go projects and upload the results to Codacy for analysis and reporting. ### 2025 {.release-series} diff --git a/theme/stylesheets/home.css b/theme/stylesheets/home.css index 9152ffd0de..e8599c293b 100644 --- a/theme/stylesheets/home.css +++ b/theme/stylesheets/home.css @@ -31,7 +31,7 @@ two-column layout, a period label beside its digest, so a reader can scan what shipped without opening every page — the rest of the list stays a plain row. */ .md-content article.md-typeset:has(#codacy-release-notes) .release-series + ul > li:has(.release-digest__body) { display: grid; grid-template-columns: minmax(8.5rem, 11rem) minmax(0, 1fr); column-gap: 1rem; padding: .85rem .65rem; } -.md-content article.md-typeset:has(#codacy-release-notes) .release-series + ul > li:has(.release-digest__body) > a { color: var(--docs-text); font-weight: 600; } +.md-content article.md-typeset:has(#codacy-release-notes) .release-series + ul > li:has(.release-digest__body) > a { color: var(--docs-text); } .release-digest__body { color: var(--docs-text-secondary); } .release-digest__body strong { color: var(--docs-text); font-weight: 600; } .md-typeset #tool-versions + ul, .md-typeset #tool-versions + p + ul { display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); column-gap: 1.5rem; margin-top: 1rem; font-size: .875rem; line-height: 1.5; }