v1.11.0
Fixes
- jira collector — the PR-metadata fetch built an invalid GitHub API URL for monorepo sub-path components (
github.com/<owner>/<repo>/<path>), soticketandticket-historycollected nothing for them. Component IDs are now parsed as<host>/<owner>/<repository>[/<subpath>...]and the API base URL is derived from the host, so GHES components work too (#269)
Improvements
- container policy (
stable-tags) — a base image tag now counts as stable when it contains a fullmajor.minor.patchsemver anywhere in the tag, so registry- or vendor-specific prefixes and suffixes are accepted (e.g.v4-bpl-3.24.0,9.6.1-jdk25-alpine). Partial versions like20or16.1still fail (#270) - jira collector — errors now fail the run with a non-zero exit code instead of silently exiting 0: missing
GH_TOKEN, failed PR-metadata fetch, missingpsql, and failed reuse-count queries all surface as failed runs. Normal-outcome skips still exit 0 (#269) - secrets policy (
no-hardcoded-secrets) — each Gitleaks finding is now reported individually with its file, line, and rule instead of a single aggregate count, so PR comments and dashboards show exactly where each secret is (#268)
Other
- CODEOWNERS: removed a reviewer (#267)
Pin this release in your lunar-config.yml with @v1.11.0.