Skip to content

v1.12.1 — quality patch: false-RED fixes, ObjC coverage, --dir, CI hardening

Choose a tag to compare

View all tags
@berkayturk berkayturk released this 08 Jul 10:07
· 71 commits to main since this release
v1.12.1
cecd7b6

Quality patch from a full fresh-eyes review (three independent review passes). No new checks — every change removes a false-RED path, fixes a real bug, or hardens the release surface.

Scanner accuracy (false-RED cluster):

  • 3.1.2 Restore Purchases recognizes StoreKit 2 (AppStore.sync(), capitalized button labels)
  • 3.1.2 Terms/Privacy links match human-readable labels and nonstandard URL paths
  • RevenueCat/Adapty remote-configured paywalls: missing links WARN (verify in dashboard) instead of hard-FAIL
  • 5.1.1 FileTimestamp anchored to real filesystem APIs (no more creationDate property false-FAILs)

Coverage & correctness:

  • Objective-C blind spot closed: all code greps share one include-set (*.swift *.m *.mm *.h)
  • --dir is authoritative (new scan.sh flag; CLI + Action wired) — monorepo subdir scans and SARIF paths fixed
  • Rule 42 (screenshot-dimensions) is suppressible; verdict thresholds deduplicated; CLI exits 70 on a signal-killed scanner

Tests & CI: 3 new fixtures + monorepo/suppression/npm-pack regression tests (18 test files); least-privilege workflow permissions; SHA-pinned actions.

Full details: CHANGELOG.

Assets 2
Loading