Skip to content

v2.4.1

Choose a tag to compare

@jonbaldie jonbaldie released this 17 May 06:00
· 243 commits to master since this release

Bug fixes, a new mutator, two new flags, and a security patch.

New

  • conditional/negated mutator is now active — it swaps &&/|| and ==/!=. It was implemented but not wired in; 98% of generated mutants are killed by existing tests.
  • --quiet flag: only prints escaped mutants and the final summary. Useful when running on large codebases where killed-mutant diffs are noise.
  • --fail-on-escaped flag: exits with code 4 if any mutant escapes, without needing to set --min-msi.

Security

  • Upgraded github.com/ulikunitz/xz from v0.5.11 to v0.5.15 (fixes CVE GO-2025-3922, memory leak on malformed LZMA archives).

Fixes

  • Self-mutation CI gates tightened to MSI ≥ 75% / covered-MSI ≥ 80% (was 40%/60%).
  • internal/importing tests no longer fail in module mode.
  • README: pkg.go.dev badge, corrected output format examples, fixed broken Markdown in annotation docs.