Preserve pull request context, full-scan SCM branch pipelines, and gate ignore commands - #302

Merged

lelia merged 30 commits into

mainfrom

lelia/patched-version-and-pr-context

Sep 15, 2026

Commits on Sep 11, 2026

feat(output): show patched versions in security findings
lelia
committed
950694b
feat(ci): preserve pull request context in scan metadata
lelia
committed
7c1ec81
chore(release): bump version to 2.9.0

lelia
and
Claude (claude)
committed
7cf8682
refactor: share one git remote parser between Buildkite consumers

lelia
and
Claude (claude)
committed
fa6ec9a
fix(ci): apply the pull request link to an already-compared scan pair

lelia
and
Claude (claude)
committed
0bdac6c
fix(comments): make per-alert ignores round trip
lelia
committed
54e4b2f
fix(comments): preserve dependency change types
lelia
committed
90462b7
fix(ci): use full scans outside pull requests
lelia
committed
004cae4
docs: update release notes for comment fixes
lelia
committed
167554f
fix(ci): restrict SCM diffs to pull requests
lelia
committed
95483f3
fix(scans): keep the package list on full scans

lelia
and
Claude (claude)
committed
8f9e402
fix(ci): keep branch pipelines out of pull request handling

lelia
and
Claude (claude)
committed
9e9bc58
fix(comments): stop reading an npm scope as an ecosystem

lelia
and
Claude (claude)
committed
39403c7
fix(comments): keep the diff badge where artwork exists

lelia
and
Claude (claude)
committed
78199e2
refactor(config): scope the config-file defaults dict to its block

lelia
and
Claude (claude)
committed
f869a52
docs: correct the release notes for branch pipeline scans

lelia
and
Claude (claude)
committed
fc36c76
fix(comments): stop legacy comment updates crashing on scoped names

lelia
and
Claude (claude)
committed
63e938d
fix(comments): require write access to ignore an alert

lelia
and
Claude (claude)
committed
977a8fb
fix(ci): validate CI-supplied server URLs before building a link

lelia
and
Claude (claude)
committed
f16525f
docs: correct the add_purl_capabilities docstring

lelia
and
Claude (claude)
committed
d7b01b0
docs: record the review fixes in the 2.9.0 release notes

lelia
and
Claude (claude)
committed
bd2a3c3
docs: rewrite branch comments for the reader, not the author

lelia
and
Claude (claude)
committed
239c85f
fix(comments): parse legacy alert rows defensively

lelia
and
Claude (claude)
committed
7a986c8

Navigation Menu

Preserve pull request context, full-scan SCM branch pipelines, and gate ignore commands - #302

Preserve pull request context, full-scan SCM branch pipelines, and gate ignore commands#302
lelia merged 30 commits into
mainfrom
lelia/patched-version-and-pr-context

Commits on Sep 11, 2026

feat(output): show patched versions in security findings

feat(ci): preserve pull request context in scan metadata

chore(release): bump version to 2.9.0

refactor: share one git remote parser between Buildkite consumers

fix(ci): apply the pull request link to an already-compared scan pair

fix(comments): make per-alert ignores round trip

fix(comments): preserve dependency change types

fix(ci): use full scans outside pull requests

docs: update release notes for comment fixes

fix(ci): restrict SCM diffs to pull requests

fix(scans): keep the package list on full scans

fix(ci): keep branch pipelines out of pull request handling

fix(comments): stop reading an npm scope as an ecosystem

fix(comments): keep the diff badge where artwork exists

refactor(config): scope the config-file defaults dict to its block

docs: correct the release notes for branch pipeline scans

fix(comments): stop legacy comment updates crashing on scoped names

fix(comments): require write access to ignore an alert

fix(ci): validate CI-supplied server URLs before building a link

docs: correct the add_purl_capabilities docstring

docs: record the review fixes in the 2.9.0 release notes

docs: rewrite branch comments for the reader, not the author

fix(comments): parse legacy alert rows defensively

Commits on Sep 12, 2026

feat(comments): add --ignore-authorization

fix(comments): escape repository-derived values when rendering comments

fix(gitlab): make the authentication fallback actually run

fix(review): address authorization and full-scan findings

Commits on Sep 15, 2026

Merge remote-tracking branch 'origin/main' into lelia/patched-version-and-pr-context

fix(comments): close ignore authorization gaps

Merge remote-tracking branch 'origin/main' into lelia/patched-version-and-pr-context