Skip to content

Cloud August 2026#

These release notes are for the Codacy Cloud updates during August 2026.

📢 Visit the Codacy roadmap and let us know your feedback on both new and planned product updates!

Features#

  • Repository (Project) Tokens for API v3: Full rollout of scoped repository tokens — creation, listing, deletion (single & bulk), and expiration is now supported end-to-end across all features of our product.

  • Mandatory token expiration & auditability: Repository tokens now enforce a maximum lifetime, surfaced in both the API and the SPA.

  • Pull Requests page filters: New search + branch-scope filter bar on the Pull Requests page, backed by API support and a new pull-requests list command in the Cloud CLI.

  • Dart support in the Analysis CLI: Added a dartanalyzer adapter, closing a cli-v2 parity gap for Dart projects.

Improvements#

  • End analysis date on commits: Commit list, header, and summary now show the end-of-analysis date beside the commit date.

  • Stronger warning on onboarding sliders: A stronger warning now appears when reviewer sliders are set to maximum during onboarding.

  • API fix: triggerPullRequestAiReview now correctly returns 404 instead of 204 for invalid PR numbers.

  • Token fixes: Fixed duplicate repository token names returning a 500 instead of a 400, and fixed the badge generator picking the wrong token type for public README badges.

  • Coverage fixes: Fixed coverage resync not firing on plain-commit reanalysis, fixed coverage status getting stuck out of date after a commit mismatch, and improved handling of final coverage report processing to prevent slowdowns.

  • Pull Requests fix: Fixed pull requests with unresolvable commits being dropped from the PR list.

  • Fixed the OAuth callback URL for Windsurf login.

  • Security dashboard (SRM) fixes: Fixed missing metrics reporting during clean-up, and fixed empty analysis results not triggering an update, both of which could leave stale or missing findings on the Security Dashboard.

  • Analysis CLI: Trivy issue parity fixes (sourceId, line-number resolution, fix version) for more accurate CLI-reported results.

  • UI polish: Adjusted the Pull Requests page filters drawer alignment and copy, and enabled word wrap for the affected-functions prompt text.

  • GitLab fix: Full repository path now shown on the add-repo dialog, fixing ambiguity for GitLab repositories with duplicate names.

  • Docs updates: Updated Guardrails install instructions and account/repository token documentation.

  • Fixed PHP CS Fixer rule miscategorization.

  • Improved the Scalameta LowerCasePatternMatching rule.

  • Disabled customer-specific custom rules by default in Opengrep for new guided coding standards, preventing false positives on first setup.

  • Updated coverage docs to reference the /setup-coverage skill.

Tool versions#

Updated tools#

  • Biome has a new version: 2.5.6 (updated from 2.4.10)
  • Cppcheck has a new version: 2.21.1 (updated from 2.21.0)
  • Credo has a new version: 1.7.19 (updated from 1.7.12)
  • Dart Analyzer has a new version: 3.12.2 (updated from 3.9.3)
  • Flawfinder has a new version: 2.0.20 (updated from 2.0.19)
  • golangci-lint has a new version: 2.11.0 (updated from 2.7.2)
  • Revive has a new version: 1.15.0 (updated from 1.12.0)
  • Gosec has a new version: 2.28.0 (updated from 2.22.7)
  • Hadolint has a new version: 2.14.0 (updated from 2.12.0)
  • Jackson Linter has a new version: 2.22.1 (updated from 2.19.2)
  • markdownlint has a new version: 0.41.1 (updated from 0.40.0)
  • PHP CS Fixer has a new version: 3.95.17 (updated from 3.95.15)
  • PMD 7 has a new version: 7.26.0 (updated from 7.16.0)
  • Prospector has a new version: 1.19.1 (updated from 1.18.0)
  • PSScriptAnalyzer has a new version: 1.25.0 (updated from 1.24.0)
  • Roslyn has a new version: 1.26.0 (updated from 1.23.0)
  • Ruff has a new version: 0.16.0 (updated from 0.12.7)
  • Spectral has a new version: 1.22.6 (updated from 1.22.0)
  • SpotBugs has a new version: 4.10.3 (updated from 4.8.4)
  • SQLFluff has a new version: 4.2.2 (updated from 4.1.0)
  • SQLint has a new version: 0.3.0 (updated from 0.2.1)
  • Staticcheck has a new version: 2026.1 (updated from 2025.1.1)
  • Stylelint has a new version: 16.26.1 (updated from 17.13.0)
  • Trivy has a new version: 0.72.0 (updated from 0.70.0)

Unchanged tools#

  • AgentLinter: 0.3.3
  • aligncheck: 1.0.0
  • Ameba: 1.6.4
  • Bandit: 1.9.4
  • Brakeman: 4.3.1
  • Bundler Audit: 0.9.1
  • Checkov: 3.3.8
  • Checkstyle: 13.9.0
  • clang-tidy: 10.0.1
  • CodeNarc: 3.6.0
  • PHP CodeSniffer: 4.0.1
  • CoffeeLint: 5.2.11
  • CSSLint: 1.0.5
  • deadcode: 1.0.0
  • Detekt: 1.23.8
  • ESLint v7: 7.32.0
  • ESLint v8: 8.57.0
  • ESLint v9: 9.39.5
  • Faux Pas: 1.7.2
  • JSHint: 2.13.6
  • Lizard: 1.23.0
  • Opengrep: 1.26.0
  • PHP Mess Detector: 2.14.1
  • PMD 6: 6.55.0
  • Pylint: 1.9.5
  • Pylint (Python 3): 4.0.5
  • Reek: 6.5.0
  • remark-lint: 10.0.1
  • RuboCop: 1.88.2
  • Scalameta Pro: 4.0.0
  • ScalaStyle: 1.5.1
  • ShellCheck: 0.10.0
  • SonarC#: 9.32
  • SonarVB: 8.13
  • SwiftLint: 0.63.2
  • Tailor: 0.12.0
  • TSLint: 6.1.3
  • TSQLLint: 1.16.0

Was this page helpful?

Your feedback helps us improve the documentation.

Edit this page on GitHub Contact support