Release v2026.7.5

Full Changelog: v2026.7.4...v2026.7.5

Release v2026.7.4

What's Changed

• Fix: HTML report drops all AI findings by @advaitpatel in #139
• docs: document report formats and CSV header behavior by @ShrijalDubey in #136
• fix(cli): add verbose log flag by @ahfoysal in #151
• feat(cli): add --log-file flag by @khldLabs in #152
• Privacy redaction, waiver file, cache correctness, and slim core install by @advaitpatel in #156

New Contributors

• @ShrijalDubey made their first contribution in #136
• @ahfoysal made their first contribution in #151
• @khldLabs made their first contribution in #152

Full Changelog: v2026.7.3...v2026.7.4

Release v2026.7.3

What's Changed

• Fix: AI-only analysis now writes a report instead of pointing to nonexistent files by @advaitpatel in #134
• Fix LLM-init crash, modernize HTML report, and expand comparison table by @advaitpatel in #137
• Add SBOM export, offline mode, install-skill, and fix-command output by @advaitpatel in #138

Full Changelog: v2026.7.2...v2026.7.3

Release v2026.7.2

What's Changed

• Add contributor-focused GitHub workflows by @advaitpatel in #127
• Fix cache severity bug, AI exit code, HTML crash, and score weighting gaps (2026.7.2) by @advaitpatel in #128

Full Changelog: v2026.7.1...v2026.7.2

Release v2026.7.1

What's Changed

• Pin GitHub workflow dependencies by @arkid15r in #115
• Phase 0 cleanup: quieter terminal output, PDF encoding fix, and dead-code removal by @advaitpatel in #117
• Phase 1: terminal output overhaul - result summary, severity table, --quiet/--no-color by @advaitpatel in #118
• Phase 2a: add --severity flag for image vulnerability scan scope by @advaitpatel in #119
• Phase 2b: add --fail-on gate and CI-friendly 0/1/2/3 exit codes by @advaitpatel in #120
• Phase 2c: add --format and --output-dir flags for report selection by @advaitpatel in #121
• Phase 2d: add --json flag for machine-readable stdout output by @advaitpatel in #122
• Phase 2e: add --sarif output and fix broken GitHub Action -o flag by @advaitpatel in #123
• Phase 3: add --baseline/--update-baseline ratchet mode by @advaitpatel in #124
• Route docker_scanner error/troubleshooting output through docksec.output by @advaitpatel in #125
• Bump version to 2026.7.1 by @advaitpatel in #126

Full Changelog: v2026.6.24...v2026.7.1

Release v2026.6.24

What's Changed

• Bump project level from Incubator to Lab by @arkid15r in #108
• fix: prevent PDF generation crash on non-latin-1 characters in AI output by @advaitpatel in #114

New Contributors

• @arkid15r made their first contribution in #108

Full Changelog: v2026.6.12...v2026.6.24

Release v2026.6.12

What's Changed

• feat: expose docker compose support in github action by @advaitpatel in #100

Full Changelog: v2026.6.11...v2026.6.12

Release v2026.6.11

What's Changed

• Potential fixes for 2 code quality findings by @advaitpatel in #88
• Potential fix for 1 code quality finding by @advaitpatel in #89
• feat: automate release workflow with github environments by @advaitpatel in #96
• docs: add competitive comparison table to README by @advaitpatel in #97
• feat: add docker compose security scanning and multi-service orchestr… by @advaitpatel in #98
• creating a new release for docker compose by @advaitpatel in #99

Full Changelog: v2026.5.22.3...v2026.6.11

v2026.5.22_01: Multi-LLM Compatibility Fix

[2026.5.22_01] - 2026-05-22

Fixed

• Multi-LLM Compatibility: Resolved json_mode errors when using Anthropic, Google, or Ollama providers by using provider-appropriate structured output methods.
• Smart Provider Defaults: The tool now automatically selects the best-suited model when you switch providers (e.g., switching to claude-3-5-sonnet-20241022 when LLM_PROVIDER=anthropic is set).
• Bug Fixes: Eliminated UserWarning regarding unrecognized structured output methods.

Version 2026.5.22.3

AI findings now included in PDF/JSON reports. Suppressed internal INFO logs from user output.

Full Changelog: v2026.5.22.1...v2026.5.22.3