v4.24.0

4.24.0 (2026-06-07)

Features

• corpus: add pinned framework corpus runner (#559) (ad00c62)
• dead-code: add Kotlin grep verification support (#554) (4352ab6)
• dead-code: add Kotlin thin scanner layer (#553) (583a723)
• kotlin: wire workflow registries (#556) (b8ae490)
• llm: add critical AI security rules (#544) (dd6963a)
• llm: detect excessive agent tool privilege (#545) (1df383a)
• llm: detect unbounded LLM consumption (#546) (59e9d64)
• llm: detect unsafe LLM app flows (#543) (f953830)
• secrets: scan Kotlin source files (#555) (7624b6d)

Bug Fixes

• analyzer: reduce quality scan false positives (#536) (c414818)
• cloud: split sync setup helpers (#540) (7bbf4c4)
• dead-code: qualify Java static call graph refs (#552) (4e79aeb)
• dead-code: recognize stdlib callback hooks (#549) (0e69311)
• dead-code: reduce language false positives (#551) (55e9ced)
• dead-code: reduce Python framework false positives (#558) (40a94a4)
• dead-code: resolve Go receiver method refs (#550) (b4813dd)
• dead-code: track browser handler liveness (#547) (0961f30)
• llm: harden security finding explanations (#541) (6855f73)
• quality: reduce quality scan false positives (#538) (72172c5)
• security: reduce browser scanner noise (#548) (253f6ae)
• upload: require explicit scan uploads (#539) (6a00673)

Documentation

• kotlin: list Kotlin in public metadata (#557) (9634e34)