Skip to content

MEDUSA v2026.5.11

Choose a tag to compare

View all tags
@rosschurchill rosschurchill released this 28 May 07:32
· 28 commits to main since this release
v2026.5.11
024f10a

`medusa scan --git` hotfix + 54-test ship gate suite

Fixed

  • `medusa scan --git` crashed on every invocation — Every `medusa scan --git ` in v2026.5.10 failed immediately with `NameError: name 'include_user_mcp_configs' is not defined` before scanning a single file. `_scan_git_repo()` was missing the parameter in both its function signature and the call site. Two-line fix.

Tests added

  • `TestScanGitRepoRegression` (`tests/test_git_scan.py`) — locks in the `--git` fix with signature inspection + end-to-end tests with mocked clone so this parameter-forwarding class of bug can never ship silently again.

  • `tests/test_ship_gate.py` — 54 new tests covering every major user-facing feature: `--fail-on`, `--exclude`, `--workers`, `--no-report`, `--no-cache`, `--quick`, `--force`, `--include-user-mcp-configs`, all output formats (`json`/`markdown`/`all`), custom `--output` paths, `--no-ai-safe`, HMAC tamper detection, `full_hash` cache mode, rule fingerprint invalidation, `secrets scan`/`purge` safety gates, and `MedusaParallelScanner` direct constructor params. These are now part of the pre-release gate.

Upgrade

```bash
pip install --upgrade medusa-security
```

Full changelog: https://github.com/Pantheon-Security/medusa/blob/main/CHANGELOG.md

Assets 2
Loading