v1.10.1

1.10.1 (2026-10-30)

Bug Fixes

• config: separate the init starter config from the defaults baseline (49cbaf0)
• design: resolve the SDK facade per repository instead of hardcoding pkg/codeguard (e13daf6)
• quality: make clone and data-clump selection deterministic (394550b)
• quality: narrow three false-positive-dominated quality rules (ce16feb)
• rules: add fix templates for the five catalogued performance rules (6a0fd31)
• rules: add the five orphan performance rules to the catalog (47a4cd1)
• rules: stop an escaped newline rendering as a line break in explain (10bac0d)
• scan: serve over-budget corpus work uncached instead of skipping it (d1653bf)
• scan: widen default exclusions and guard every line scanner against binary content (e8f519c)
• security: grade hardcoded-credential findings in fixtures and docs (d889052)
• supply-chain: stop lockfile-drift false positives from mis-parsed lockfiles (114b30c)

Performance Improvements

• quality: stop recompiling regexes and re-splitting identifiers per call (7939211)
• security: gate the per-line security regexes behind literal pre-checks (5f15b5f)