v0.4.6

0.4.6 (2026-09-04)

🎁 Features

• core: Implement deep exclusions (#303) (a703d61)

🐞 Bug Fixes

• analyzer, model: Fix a bunch of FN (#393) (febeb86)
• analyzer: Change default get behaviour (#338) (83e784a)
• analyzer: Drop [any] from primitives (#362) (e4df39f)
• analyzer: Drop overridden rule's tags from tag index (#366) (3d163a2)
• analyzer: Enforce join metavar usage (#294) (deb825c)
• analyzer: Fix action handling in trace resolver (#316) (6adc217)
• analyzer: Fix cross controller analysis (#278) (2f9f32d)
• analyzer: Fix default getter handling (#351) (7864a54)
• analyzer: Fix ND -> F2F exclusion handling (#369) (ec99615)
• analyzer: Match Go generic calls with qualified type arguments (#371) (5dceb73)
• analyzer: Normalize Go method parameter aliases (#372) (471f6bc)
• analyzer: Refactor taint rule application utils (#285) (41d13ab)
• analyzer: Small fixes (#336) (908e924)
• analyzer: Staged analysis (#308) (401b297)
• analyzer: Use dedicated storage for abstract static edges (#364) (cbe3b3f)
• analyzer: Use rule-id in sink-only fingerprint (06c8d25)
• autobuilder: Add dependency option to project command for autobuilder (#274) (bd2ce96)
• autobuilder: Fix relative path handling (#292) (7a834a0)
• autobuilder: Resolve Kotlin class dirs from the main source set (#288) (31b581d)
• cli: Add hidden --entry-points flag to scan (#395) (1e70589)
• cli: Wire project dependency option (#284) (e37677b)
• core: Analyzer-side rule exclusion via --semgrep-rule-id-exclude (#325) (a8995a6)
• core: Apply rule exclusions to join operands and support tag-local joins (#374) (25e15d2)
• core: Fix lambda handling (#297) (a4b63ce)
• core: Handle lib locations in IR (#353) (c70bf10)
• core: Improve trace generation stability (#344) (d07fe2a)
• core: Keep whole-object taint at a primitive position (#376) (17eb0fe)
• core: Update Go version to 1.26.0 (#355) (9752bd2)
• rules: Fix join rule metavar usage (#296) (711b4b7)
• rules: Fix metavar names in join rules (#291) (0d10f7d)
• rules: Refactor rules to use per-source and per-sink tags for joins (#312) (33b29ef)