Skip to content

v1.1.6

Choose a tag to compare

@bencehezso bencehezso released this 27 Jul 12:20
· 131 commits to main since this release

🚨 If you encounter any bugs or have suggestions, please report them here.

Changes since v1.1.5

What's Changed

CLI / UX

  • Quieter by default, verbose on demand. Logs no longer print raw INFO/DEBUG lines over the assessment UI on a normal run. Add -v/--verbose to see the interaction narrative (INFO), or -vv for full DEBUG including third-party libraries. Available on both the aws and azure subcommands.
  • Secret input is now hidden. Manual entry of the AWS Secret Key and the Azure Client Secret uses getpass, so the value is no longer echoed to the terminal (or captured in scrollback). Access keys and IDs are unchanged.

Reliability / diagnostics

  • Every run writes a run.log. A full-detail DEBUG log is now saved to the report directory on every run, independent of console verbosity — so a bug report is self-contained without re-running under --verbose.
  • Unexpected errors leave a traceback behind. Instead of a single Unexpected error: ... line, the full traceback is written to error-<timestamp>.log in the report directory and its path is printed — the thing to attach to a bug report.
  • Online-sync failures now exit with the correct code. A failed assessment sync now exits RISK_ASSESSMENT (7) instead of the catch-all UNEXPECTED (1), matching every other stage.
  • Throttled/denied AWS services are no longer invisible. Per-service failures during the AWS inventory (access-denied, throttling, region-unavailable) are recorded in run.log so a failing service is distinguishable from an empty one — without flooding the console.

Internal

  • Log-level audit. Log levels across the codebase were re-leveled to mean something (expected/offline conditions → DEBUG, recoverable anomalies → WARNING, real failures → ERROR with tracebacks), and seven per-module loggers that were pinned to INFO — silently swallowing DEBUG — were unpinned so run.log captures everything.
  • Dropped unused plotly/kaleido dependencies, trimming the install footprint (removed from requirements.txt, pyproject.toml, and main.py).
  • Release workflow tag-push fix. The release job now creates an annotated tag and pushes it via an explicit refspec, so the tag reliably reaches the remote.