v2.24.2

Changelog

• 4acd31e feat: add linux/s390x build target to release distribution (#930)
• 1030045 fix(deps): bump go to 1.26.4 to address stdlib CVEs (#931)

v2.24.1

Changelog

• bbbb54a feat: display control identifier in assert artifact output for for_control policy failures (#926)

v2.24.0

The CLI now tries Bearer first (SonarQube Cloud and Server 10.0+) and transparently falls back to Basic for older self-hosted Servers, caching the resolved scheme for the run. SonarQube Cloud is always sent Bearer. Authentication failures now return a status-aware message (HTTP 401/403 token/permission, 5xx server-unavailable) instead of a single generic line.

• chore(deps): bump the Go dependencies group with 10 updates (#928)

Full changelog: v2.23.2...v2.24.0

v2.23.2

Changelog

• 0bf74d0 fix: deprecate --visibility flag instead of removing it (#923)

v2.23.1

Changelog

• 168dbc9 fix: keep hardcoded visibility for backwards compatibility (#922)

v2.23.0

• Added a deprecation warning when creating a flow without --template-file or --use-empty-template, indicating the legacy API endpoint will stop working in a future release.

NOTE : requires newest server to support dropping visibility. Please use newer CLI for backwards compatibility!

v2.22.1

Changelog

• 22f1449 chore(deps): bump the go-dependencies group with 10 updates (#914)
• 5d1e130 chore: bump OTel vulnerable dep (#916)
• 8040d80 fix: use url.JoinPath for list/diff command URLs (#915)

v2.22.0

• Added Tutorial field to command documentation metadata, enabling tutorial URLs to be surfaced in generated docs.

v2.21.0

• attest jira: fixed false-positive Jira issue key matches from multi-segment identifiers such as CVE numbers (e.g. CVE-2026-41284 no longer incorrectly matches as a Jira key).
• attest junit: improved JUnit XML ingestion to walk directories recursively, deduplicate file scanning, and provide a clearer error message when non-UTF-8 encoded XML files are encountered.

v2.20.1

Changelog

• 994f9b6 chore: wrap CLI flags in backticks in Mintlify doc output (#892)