Skip to content

v1.11.0

Choose a tag to compare

@idelvall idelvall released this 30 Jul 10:25
· 27 commits to main since this release

Fixes

  • jira collector — the PR-metadata fetch built an invalid GitHub API URL for monorepo sub-path components (github.com/<owner>/<repo>/<path>), so ticket and ticket-history collected nothing for them. Component IDs are now parsed as <host>/<owner>/<repository>[/<subpath>...] and the API base URL is derived from the host, so GHES components work too (#269)

Improvements

  • container policy (stable-tags) — a base image tag now counts as stable when it contains a full major.minor.patch semver anywhere in the tag, so registry- or vendor-specific prefixes and suffixes are accepted (e.g. v4-bpl-3.24.0, 9.6.1-jdk25-alpine). Partial versions like 20 or 16.1 still fail (#270)
  • jira collector — errors now fail the run with a non-zero exit code instead of silently exiting 0: missing GH_TOKEN, failed PR-metadata fetch, missing psql, and failed reuse-count queries all surface as failed runs. Normal-outcome skips still exit 0 (#269)
  • secrets policy (no-hardcoded-secrets) — each Gitleaks finding is now reported individually with its file, line, and rule instead of a single aggregate count, so PR comments and dashboards show exactly where each secret is (#268)

Other

  • CODEOWNERS: removed a reviewer (#267)

Pin this release in your lunar-config.yml with @v1.11.0.