v5.3.0

5.3.0 (2026-10-31)

Features

• cicd: opt-in AI review on the default-branch upload (#1126) (ac308ed)

Bug Fixes

• ai-review: stop on a refused key and never record failed calls as unsure (#1128) (39d2049)
• analyzer: reduce noise with conservative provenance checks (#1130) (9c8ccc0)
• deadcode: prove Django command and provider reachability (#1138) (91356bf)
• defend: call it AI app safety in reports, help and CI steps (#1127) (e332af8)
• pricing: match Cloud prices and only charge remediate when the AI runs (#1141) (3300a81)
• security: avoid false XSS warnings from unrelated Namespace writes (#1142) (2b4ba5f)
• security: distinguish compound check descriptions from directives (#1140) (f4bff65)
• security: improve YAML and code execution checks (#1136) (e8fd22c)
• security: prevent unsafe route paths from being marked safe (#1137) (643276e)
• security: recognize normalized URL scheme guards (#1139) (a96d59c)
• security: scope import evidence and preserve prompt severity (#1131) (8a6d32c)