Codacy

No entries match these filters. Clear filters

1. Stylelint accessibility patterns renamed – November 2026 Nov 1, 2026 · issue 130
   • Updated vulnerability check Stylelint accessibility (a11y) patterns renamed with `a11y_` prefix
   └──▷ BREAKING ON UPGRADE

   • !The 12 Stylelint accessibility pattern IDs are renamed with the a11y_ prefix (e.g. content-property-no-static-value becomes a11y_content-property-no-static-value); any coding standard, repository code-pattern config, or Codacy Analysis CLI setup that references the old IDs must be updated, and the renamed patterns start disabled so previously enabled checks will no longer run until re-enabled.
2. 3.1.0 Oct 23, 2026 · issue 117

   API surface changed: +2 endpoints, 4 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   API change

   API surface changed: +2 endpoints, 4 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   • + POST /organizations/{provider}/{remoteOrganizationName}/security/dashboard/remediation/history/search
   • + POST /organizations/{provider}/{remoteOrganizationName}/security/dashboard/remediation/search
   • ~ GET /analysis/organizations/{provider}/{remoteOrganizationName}/repositories/{repositoryName}/commits/{commitUuid}/clones: response schema changed
   • ~ GET /analysis/organizations/{provider}/{remoteOrganizationName}/repositories/{repositoryName}/pull-requests/{pullRequestNumber}/clones: response schema changed
   • ~ GET /organizations/{provider}/{remoteOrganizationName}/repositories/{repositoryName}/files/{fileId}/duplication: response schema changed
   • ~ POST /organizations/{provider}/{remoteOrganizationName}/security/items/{srmItemId}/ignore: response schema changed
   • New endpoint POST /organizations/{provider}/{remoteOrganizationName}/security/dashboard/remediation/history/search⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • New endpoint POST /organizations/{provider}/{remoteOrganizationName}/security/dashboard/remediation/search

   2 details in Everything

3. 3.1.0 Oct 20, 2026 · issue 114

   API surface changed: 1 deprecated⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   API change

   API surface changed: 1 deprecated⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   • ⚠ POST /organizations/{provider}/{remoteOrganizationName}/billing/sync
   └──▷ BREAKING ON UPGRADE

   • !Deprecated endpoint POST /organizations/{provider}/{remoteOrganizationName}/billing/sync (still works)
4. 3.1.0 Sep 25, 2026 · issue 085

   API surface changed: +3 endpoints, 12 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   API change

   API surface changed: +3 endpoints, 12 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   • + DELETE /organizations/{provider}/{remoteOrganizationName}/integrations/webhooks/{webhookId}
   • + GET /organizations/{provider}/{remoteOrganizationName}/integrations/webhooks
   • + POST /organizations/{provider}/{remoteOrganizationName}/integrations/webhooks
   • ~ GET /analysis/organizations/{provider}/{remoteOrganizationName}/repositories/{repositoryName}/commits/{srcCommitUuid}/deltaIssues: response schema changed
   • ~ GET /analysis/organizations/{provider}/{remoteOrganizationName}/repositories/{repositoryName}/issues/{issueId}: response schema changed
   • ~ GET /analysis/organizations/{provider}/{remoteOrganizationName}/repositories/{repositoryName}/pull-requests/{pullRequestNumber}/issues: response schema changed
   • ~ GET /organizations/{provider}/installation/{installationId}: response schema changed
   • ~ GET /organizations/{provider}/{remoteOrganizationName}: response schema changed
   • ~ GET /organizations/{provider}/{remoteOrganizationName}/images: response schema changed
   • ~ GET /organizations/{provider}/{remoteOrganizationName}/repositories/{repositoryName}/files/{fileId}/issues: response schema changed
   • ~ GET /user/organizations: response schema changed
   • ~ GET /user/organizations/{provider}: response schema changed
   • ~ GET /user/organizations/{provider}/{remoteOrganizationName}: response schema changed
   • ~ POST /analysis/organizations/{provider}/{remoteOrganizationName}/repositories/{repositoryName}/issues/search: response schema changed
   • ~ POST /organizations: response schema changed
   • New endpoint DELETE /organizations/{provider}/{remoteOrganizationName}/integrations/webhooks/{webhookId}⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • New endpoint GET /organizations/{provider}/{remoteOrganizationName}/integrations/webhooks
   • New endpoint POST /organizations/{provider}/{remoteOrganizationName}/integrations/webhooks

   3 details in Everything

5. announced Sep 14, 2026 · issue 074

   Codacy Skills adds Analysis CLI and Code Review Skills for pre-commit scanning and PR review via Claude Code and other agents⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ TRY IT
   Install the Analysis CLI and Codacy Skills plugin into Claude Code to enable pre-commit scanning with no account needed.
   copy

   $ npm i -g @codacy/analysis-cli
   claude plugin marketplace add codacy/codacy-skills
   claude plugin install codacy-skills@codacy

   Install the Cloud CLI and authenticate to enable the Code Review Skill, which reviews an open PR against quality gates, coverage, and cloud analysis.
   copy

   $ npm install -g @codacy/codacy-cloud-cli
   codacy login

   • Adds the Analysis CLI Skill, installable via npm i -g @codacy/analysis-cli and claude plugin install codacy-skills@codacy, enabling AI agents (Claude Code, OpenAI Codex, GitHub Copilot) to run Codacy static analysis locally before commit — with no Codacy account required.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Supports scoping analysis to specific files, staged changes, a branch, or an open pull request via the @codacy/analysis-cli.
   • Enables local ruleset sync so the @codacy/analysis-cli checks code against the same standards enforced at the merge gate, when connected to a Codacy account.
   • Installs Codacy Skills into Claude Code via claude plugin marketplace add codacy/codacy-skills and claude plugin install codacy-skills@codacy, with support for the Agent Skills standard across multiple coding agents.

   4 details in Everything

6. 3.1.0 Sep 4, 2026 · issue 064

   API surface changed: 4 modified

   API change

   API surface changed: 4 modified

   • ~ GET /analysis/organizations/{provider}/{remoteOrganizationName}/repositories: response schema changed
   • ~ GET /analysis/organizations/{provider}/{remoteOrganizationName}/repositories/{repositoryName}: response schema changed
   • ~ POST /analysis/organizations/{provider}/{remoteOrganizationName}/repositories/{repositoryName}/autoconfig: response schema changed
   • ~ POST /search/analysis/organizations/{provider}/{remoteOrganizationName}/repositories: response schema changed
   • GET /analysis/organizations/{provider}/{remoteOrganizationName}/repositories: response schema changed
   • GET /analysis/organizations/{provider}/{remoteOrganizationName}/repositories/{repositoryName}: response schema changed
   • POST /analysis/organizations/{provider}/{remoteOrganizationName}/repositories/{repositoryName}/autoconfig: response schema changed
   • POST /search/analysis/organizations/{provider}/{remoteOrganizationName}/repositories: response schema changed

   4 details in Everything

7. Adding Oxlint as new supported tool September, 2026 seen Sep 3, 2026 · issue 063

   Codacy adds Oxlint, a Rust-based JS/TS linter, as a fully integrated analysis engine with broad ESLint-compatible rule coverage.

   • Adds Oxlint as a supported Codacy engine for JavaScript and TypeScript, covering correctness, style, and best-practice rule categories including ESLint core rules, typescript-eslint, React ecosystem (react, react-hooks, react-refresh, react-perf), @next/eslint-plugin-next, eslint-plugin-unicorn, testing frameworks (jest, vitest), eslint-plugin-vue, import, jsdoc, jsx-a11y, n (Node), and promise.
   • Supports repository-level configuration via .oxlintrc.json, .oxlintrc.jsonc, oxlint.config.json, or oxlint.config.jsonc files, which Codacy will detect and apply automatically during analysis.

   2 details in Everything

8. Adding Oxlint as new supported tool – September 2026 Sep 2026 · release notes

   Codacy adds Oxlint analysis engine for JavaScript and TypeScript projects

   └──▷ HOW TO FIND IT
   Enable Oxlint analysis in repository settings to start scanning JS/TS code immediately.
   📍Go to your repository settings in Codacy. Enable Oxlint under the list of supported tools.
9. 3.1.0 Aug 28, 2026 · issue 058

   API surface changed: 6 modified

   API change

   API surface changed: 6 modified

   • ~ GET /analysis/organizations/{provider}/{remoteOrganizationName}/pull-requests: response schema changed
   • ~ GET /analysis/organizations/{provider}/{remoteOrganizationName}/repositories/{repositoryName}/commits/{commitUuid}/logs: response schema changed
   • ~ GET /analysis/organizations/{provider}/{remoteOrganizationName}/repositories/{repositoryName}/pull-requests: response schema changed
   • ~ GET /analysis/organizations/{provider}/{remoteOrganizationName}/repositories/{repositoryName}/pull-requests/{pullRequestNumber}: response schema changed
   • ~ GET /analysis/organizations/{provider}/{remoteOrganizationName}/repositories/{repositoryName}/pull-requests/{pullRequestNumber}/logs: response schema changed
   • ~ GET /coverage/organizations/{provider}/{remoteOrganizationName}/repositories/{repositoryName}/pull-requests/{pullRequestNumber}: response schema changed
   • GET /analysis/organizations/{provider}/{remoteOrganizationName}/pull-requests: response schema changed
   • GET /analysis/organizations/{provider}/{remoteOrganizationName}/repositories/{repositoryName}/commits/{commitUuid}/logs: response schema changed
   • GET /analysis/organizations/{provider}/{remoteOrganizationName}/repositories/{repositoryName}/pull-requests: response schema changed
   • GET /analysis/organizations/{provider}/{remoteOrganizationName}/repositories/{repositoryName}/pull-requests/{pullRequestNumber}: response schema changed
   • GET /analysis/organizations/{provider}/{remoteOrganizationName}/repositories/{repositoryName}/pull-requests/{pullRequestNumber}/logs: response schema changed

   +1 more show less

   • GET /coverage/organizations/{provider}/{remoteOrganizationName}/repositories/{repositoryName}/pull-requests/{pullRequestNumber}: response schema changed

   6 details in Everything

10. 3.1.0 Aug 16, 2026 · issue 047

    API surface changed: 4 modified

    API change

    API surface changed: 4 modified

    • ~ GET /organizations/{provider}/{remoteOrganizationName}/repositories/{repositoryName}/tokens: response schema changed
    • ~ GET /user/tokens: response schema changed
    • ~ POST /organizations/{provider}/{remoteOrganizationName}/repositories/{repositoryName}/tokens: response schema changed
    • ~ POST /user/tokens: response schema changed
    • GET /organizations/{provider}/{remoteOrganizationName}/repositories/{repositoryName}/tokens: response schema changed
    • GET /user/tokens: response schema changed
    • POST /organizations/{provider}/{remoteOrganizationName}/repositories/{repositoryName}/tokens: response schema changed
    • POST /user/tokens: response schema changed

    4 details in Everything

11. Adding GolangCI-Lint as new supported tool January, 2026 seen Aug 8, 2026 · issue 039

    Codacy adds GolangCI-Lint as a client-side Go analysis tool, uploadable to the Codacy dashboard.

    • Adds GolangCI-Lint as a supported client-side tool for Go projects: run it locally or in CI, then upload results to Codacy for analysis and reporting.
    • GolangCI-Lint is not enabled by default on existing repositories — must be enabled manually in repository settings to avoid a large volume of new issues appearing unexpectedly.

    2 details in Everything

12. Adding PHP CS Fixer and support to Checkov configuration files July, 2026 seen Aug 8, 2026 · issue 039

    Codacy adds PHP CS Fixer as a new analysis engine and gains support for Checkov configuration files.

    ⤢
    └──▷ HOW TO FIND IT
    Let Codacy pick up your existing Checkov config instead of managing every check through the UI.
    📍Repository › Code Patterns › Checkov › enable "Use Checkov configuration file found in the repository"
    • Adds PHP CS Fixer as a new supported Codacy engine for PHP code-style analysis, configurable via the Codacy UI or your repository's own .php-cs-fixer.dist.php or .php-cs-fixer.php file (Codacy-selected patterns take precedence over the repo config file).
    • Adds support for Checkov configuration files (.checkov.yaml or .checkov.yml) in the repository, enabled via Repository > Code Patterns > Checkov > "Use Checkov configuration file found in the repository".

    2 details in Everything

13. Support for Shellcheck configuration file - July, 2026 seen Aug 8, 2026 · issue 039

    Codacy now reads a .shellcheckrc file from your repository so ShellCheck settings no longer have to be managed through the UI.

    ⤢
    └──▷ HOW TO FIND IT
    Commit a .shellcheckrc to your repo and enable file-based analysis so ShellCheck rules are version-controlled alongside your code.
    📍Repository › Code Patterns › Shellcheck › enable "Use Shellcheck configuration file found in the repository"
    • Adds support for a .shellcheckrc configuration file in the repository root to drive ShellCheck analysis, replacing UI-only configuration.
    • Adds a new toggle — "Use Shellcheck configuration file found in the repository" — under Repository > Code Patterns > Shellcheck to activate file-based config.

    2 details in Everything

14. 3.1.0 seen Aug 5, 2026 · issue 036

    API surface changed: +1 endpoint, 4 modified

    API change

    API surface changed: +1 endpoint, 4 modified

    • + POST /organizations/{provider}/{remoteOrganizationName}/repositories/{repositoryName}/tokens/delete
    • ~ GET /organizations/{provider}/{remoteOrganizationName}/repositories/{repositoryName}/tokens: response schema changed
    • ~ GET /user/tokens: response schema changed
    • ~ POST /organizations/{provider}/{remoteOrganizationName}/repositories/{repositoryName}/tokens: request body changed; response schema changed
    • ~ POST /user/tokens: response schema changed
    • New endpoint POST /organizations/{provider}/{remoteOrganizationName}/repositories/{repositoryName}/tokens/delete
    • GET /organizations/{provider}/{remoteOrganizationName}/repositories/{repositoryName}/tokens: response schema changed
    • GET /user/tokens: response schema changed
    • POST /organizations/{provider}/{remoteOrganizationName}/repositories/{repositoryName}/tokens: request body changed; response schema changed
    • POST /user/tokens: response schema changed

    5 details in Everything

15. 3.1.0 seen Aug 2, 2026 · issue 033

    Codacy now publishes an API — 287 endpoints across 29 areas: Analysis, Repository, Organization, …

    • Analysis (49 endpoints) — create, read, update
    • Repository (47 endpoints) — create, read, update, delete
    • Organization (32 endpoints) — create, read, update, delete
    • Security (20 endpoints) — create, read, update, delete
    • Account (17 endpoints) — create, read, update, delete

    +4 more show less

    • Coding Standards (17 endpoints) — create, read, update, delete
    • Metrics (13 endpoints) — create, read
    • Gate Policies (9 endpoints) — create, read, update, delete
    • 21 more areas: Sbom, Admin, Aiinventory, Enterprise, Jira, People, Segments, Tools, Coverage, Dast, Reports, File, Billing, Integrations, Language Settings, App, Configuration, Health, Languages, Session, Version

    9 details in Everything

16. Cloud August 2026 Aug 2026 · release notes

    Codacy Cloud adds scoped repository tokens with expiration, PR filters in CLI/UI, and Dart analysis support.

    • Full rollout of scoped repository tokens for API v3 including creation, listing, deletion (single & bulk), and mandatory token expiration enforcement.
    • New pull-requests list subcommand in the Codacy Cloud CLI to retrieve pull requests backed by new search and branch-scope filter bar on the web UI.

    2 details in Everything

17. Support for Shellcheck configuration file - July, 2026 seen Jul 30, 2026 · issue 030

    Codacy now respects ShellCheck configuration files in your repository.

    • Supports ShellCheck configuration files, allowing per-repository ShellCheck rule customization without modifying Codacy settings.

    1 detail in Everything

18. Adding PHP CS Fixer and support to Checkov configuration files July, 2026 seen Jul 27, 2026 · issue 027

    Codacy adds PHP CS Fixer as a new tool and gains support for Checkov configuration files.

    • Adds PHP CS Fixer as a supported static analysis tool for PHP code style enforcement.
    • Adds support for Checkov configuration files, enabling repository-level Checkov settings to be recognized by Codacy.

    2 details in Everything

19. Adding GolangCI-Lint as new supported tool January, 2026 seen Jul 23, 2026 · issue 023

    Codacy adds GolangCI-Lint as a supported static analysis tool for Go repositories.

20. Cloud July 2026 Jul 2026 · release notes

    Codacy Cloud July 2026 adds folder-level metrics, affected functions in security findings, and new PHP CS Fixer integration.

    └──▷ HOW TO FIND IT
    Drill down into specific directories to analyze coverage and complexity without noise from other parts of the repo.
    📍In the Codacy web UI, navigate to your repository and click on a specific folder in the left-hand navigation panel to view its scoped quality metrics.
    Use the new filter bar on the Pull Requests page to quickly find PRs affecting only the current feature branch.
    📍In the Codacy web UI, go to the Pull Requests tab and use the new filter bar to toggle the view to Current Branch and search by title.
    • Folder-Level Metrics now visible by browsing repositories by folder, showing issues, complexity, coverage, and duplication scoped to each directory.
    • Security dependency findings now surface affected entrypoint functions reachable from a vulnerable dependency, visible in the Findings card, CLI command output, and public API response fields.
    • Pull Requests page filter bar lets users search PRs by title and toggle between viewing all target branches or only the current branch.

    3 details in Everything

21. Cloud June 2026 Jun 2026 · release notes

    Codacy Cloud June 2026 adds proxy support for Guardrails and dependency chain visibility

    • Adds proxy configuration support to Guardrails for restricted network environments
    • Improves dependency chain visibility in the UI to clarify how vulnerable dependencies are introduced
    • Makes the CI/CD setup option more prominent in container scanning

    3 details in Everything

22. Cloud May 2026 May 2026 · release notes

    Codacy Cloud May 2026 adds YAML scanning for .env files and manual AI PR review trigger

    • Supports .env, .env.production, .env.prod, and .env.staging files as YAML language so all YAML tools can scan them.
    • Allows manual triggering of the Draft PR AI Review via a button on the summary, as it no longer runs automatically for draft PRs.

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !AI suggestions in GitHub are deprecated and will stop working; users must switch to the PR reviewer.
23. Cloud April 2026 Apr 2026 · release notes

    Codacy Cloud April 2026 introduces Context-Aware AI Feedback Loops and a new Pull Request Summary experience.

    └──▷ HOW TO FIND IT
    Observe how AI feedback adapts to conversation history on GitHub PRs.
    📍View comments from the Codacy AI Reviewer bot in a GitHub Pull Request.
    • Adds context-aware feedback loops for the AI Reviewer on GitHub PRs
    • Introduces the Pull Request Summary UI to replace legacy coverage summary settings

    2 details in Everything

24. Cloud March 2026 Mar 2026 · release notes

    Codacy Cloud March 2026 adds customizable AI instructions via review.md and manual AI triggers.

    • review.md file support to customize AI reviewer output and coding conventions
    • New Run review button on the Pull Request Summary page for manual AI review triggers
    • AI-generated test coverage suggestions with ready-to-use prompts for coding agents

    3 details in Everything

25. Changes to GitHub integration settings – March 2026 Mar 2026 · release notes

    Codacy Cloud March 2026 deprecates AI-enhanced comments (Beta) in favor of AI Reviewer and consolidates coverage summary.

    • Deprecates AI-enhanced comments (Beta) and migrates enabled repos to the AI Reviewer on March 17, 2026
    • Moves coverage data into the Pull request review comment, removing the standalone Coverage summary setting

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The AI-enhanced comments (Beta) setting is removed on March 17, 2026
    • !The Coverage summary setting is removed as coverage data moves to the Pull request review comment
26. Cloud February 2026 Feb 2026 · release notes

    Codacy adds Organization Overview Dashboard and SRM text search; migrates engine to Opengrep.

    • Launched an Organization Overview Dashboard with metrics for code health, security grade, complexity, duplication, and coverage.
    • Added text search filter capability within the SRM (Security Risk Management) tab findings view.

    2 details in Everything

27. Cloud January 2026 Jan 2026 · release notes

    Codacy Cloud Jan 2026 adds GolangCI-Lint integration and VS Code setup enhancements

    └──▷ HOW TO FIND IT
    Use the new dedicated section to configure the Codacy VS Code extension quickly during onboarding.
    📍In the VS Code extension, navigate to the VS Code Setup Section to begin initial configuration.
    • Adds a new GolangCI-Lint wrapper that integrates over 100 linters to improve Go code quality checks
    • Introduces a dedicated VS Code Setup Section in the extension for streamlined onboarding
    • Adds a guided walkthrough step-by-step guide within the VS Code extension setup process

    3 details in Everything

28. Adding GolangCI-Lint as new supported tool – January 2026 Jan 2026 · release notes

    Codacy now supports GolangCI-Lint results upload. The tool is client-side and disabled by default on existing repos.

29. Cloud December 2025 Dec 2025 · release notes

    Codacy Cloud Dec 2025 adds PR Reviewer, SBOMSBOMA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue. export, AI Risk Hub, ignore reasons, and API endpoint update

    • Adds PR Reviewer for contextual GitHub Pull Request reviews using security, duplication, complexity, and coverage metrics
    • Adds Ignore Reason field for ignored issues in repositories and the Security Dashboard (Accepted use, False positive, Not exploitable, Test code, External code)
    • Adds Export SBOM feature on the SRM Dependencies tab
    • Adds AI Risk Hub interface to evaluate risk of AI tool adoption
    • Updates dependencies list filters to support search by name, repositories, segments, severities, and license risk levels

    +2 more show less

    • Replaces the deprecated getCodeBlock API endpoint with getFileContent (TAROT-3580)
    • Adds GolangCI-Lint 2.7.2 as a new supported tool

    7 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The getCodeBlock API endpoint was deleted; use getFileContent instead (different path parameters)
30. Cloud November 2025 Nov 2025 · release notes

    Codacy Cloud November 2025 adds malicious package detection and False Positive PR comments

    • Adds Malicious Package Detection to automatically flag packages identified by OSSF in Pull Requests and nightly scans for clients with SCASCASoftware composition analysis, identifying third-party dependencies and checking them for known vulnerabilities and license issues. It covers software a team uses rather than writes itself. enabled.
    • Adds a new workflow where False Positive detection leaves a comment directly on the Pull Request for immediate review.

    2 details in Everything

31. Cloud October 2025 Oct 2025 · release notes

    Codacy Cloud October 2025 adds false positive detection and tooling updates

    • Adds False Positive Detection capability to flag potentially false positive issues on the Business tier.
    • Enhances performance on the Open Issues dashboard for faster loading and navigation.
    • Improves responsiveness when adding repositories on the Manage Repositories page.
    • Adds support for additional Markdownlint configuration files.

    4 details in Everything

32. Cloud September 2025 Sep 2025 · release notes

    Codacy Cloud adds OpenSSF Scorecard integration and trims deprecated patterns

    • Adds OpenSSF Scorecard report view directly from dependency details to assess open-source component security posture.
    • Removes the Trivy_vulnerability pattern, replacing it with Trivy_vulnerability_critical and Trivy_vulnerability_high for precise vulnerability tracking.
    • Enhances issue uniqueness detection to ensure all unique issues reported on the same line by tools like Trivy and Prospector are visible.

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The Trivy_vulnerability pattern is removed; users must update queries or filters referencing it to use Trivy_vulnerability_critical or Trivy_vulnerability_high.
33. Cloud August 2025 Aug 2025 · release notes

    Codacy Cloud August 2025 adds Dark Mode and dependency license insights in the Security & Risk Management dashboard.

    • Adds Dark Mode to the Codacy app UI for a visually appealing experience
    • Shows license information for every dependency and repository directly in the Security & Risk Management dashboard’s Dependencies tab

    2 details in Everything

34. Cloud July 2025 Jul 2025 · release notes

    Codacy Cloud July 2025 adds severity gates for security, API token expiration, and Lizard as default complexity tool

    • Add severity gate policy to enforce minimum severity thresholds for security issues in Codacy Gate Policies
    • Filter segments within Coding Standards and Gate Policies by repository using Codacy Segments integration with GitHub custom properties
    • Scan DASTDASTDynamic application security testing, probing a running application from the outside for vulnerabilities. It checks behavior exposed through the application's interfaces. API targets without authentication headers for Business tier customers using the Static API authentication for DAST targets capability
    • Use Lizard as the default complexity tool supporting C, C++, Objective-C, Rust, C#, Go, Java, JavaScript, TypeScript, PHP, Python, Ruby, Scala, and Swift

    4 details in Everything

35. Cloud May 2025 May 2025 · release notes

    Codacy Guardrails MCP ServerMCP ServerA process that exposes tools, resources, and prompts over Anthropic's Model Context Protocol, letting an AI agent call external APIs or local services through a standardised interface. now supports Windows via WSLWSLWindows Subsystem for Linux, a Microsoft-built compatibility layer that lets a Linux environment run directly on Windows without a virtual machine, giving cyber tools access to Linux binaries, filesystems, and syscalls on a Windows host. and auto-updates rules on Git load.

    • Codacy Guardrails documentation is launched for reference.
    • Codacy Guardrails MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. Server now runs on Windows environments via Windows Subsystem for Linux (WSL).
    • Automatic Rule File Updates on Git Load: When the MCP Server is installed, loading a Git repository will now automatically update the rules file.

    3 details in Everything

36. v15.0.0 Apr 10, 2025 · release notes

    Codacy Self-hosted v15.0.0 adds Kubernetes 1.30 support

    • Added support for Kubernetes 1.30

    1 detail in Everything

37. Cloud April 2025 Apr 2025 · release notes

    CLIv2 adds SARIFSARIFStatic Analysis Results Interchange Format, a standard for sharing code-analysis findings, including locations and rule details. It lets scanners report results to a common review interface. output and multi-tool merging; Guardrails integrates with VS Code Agent and Windsurf.

    • sarif is now supported as the standard output format for cli v2
    • cli v2 can run multiple tools and merge their results into a single SARIF file
    • CLIv2 configuration files are placed under .codacy/ instead of the repository root
    • init command uses api-token flag instead of the deprecated project-token
    • Codacy Guardrails is available in the VS Code Copilot Agent extension

    +4 more show less

    • Codacy Guardrails is integrated into the Windsurf IDE
    • Fork and Pull workflows are supported in the Codacy VS Code extension
    • Ignore reasons on Security findings can be categorized as Accepted use or False positive
    • Admins can configure resolution deadlines for findings based on severity

    9 details in Everything

38. Cloud February 2025 Feb 2025 · release notes

    Codacy Cloud February 2025 introduces Organization Issues dashboard, Enterprise access, and new Prevented Issues metric.

    • Adds the new Organization Issues dashboard for high-level visibility across all repositories
    • Opens the existing Issues dashboard to Enterprise users who previously lacked access
    • Adds a Prevented Issues metric to the Issues dashboard activity chart

    3 details in Everything

39. Cloud January 2025 Jan 2025 · release notes

    Codacy adds visual goal indicators in repository metrics and revamps SRM findings UI.

    • goals color indicators display on the organization’s repositories list to highlight when metrics exceed or fall short of set targets (ALA-1416).
    • Repository table now visually differentiates metrics with colors based on whether they meet defined goals (ALA-1402).

    2 details in Everything

40. Cloud December 2024 Dec 2024 · release notes

    Codacy Cloud adds SRM dependencies tab and GitHub Enterprise Cloud views for all users

    • Adds the SRM dependencies tab to view dependency lists, distribution across repositories, versions, and associated security findings.
    • Enables GitHub Enterprise Cloud views for all users (no longer restricted to enterprise-only section).

    2 details in Everything

41. Cloud November 2024 Nov 2024 · release notes

    Codacy Cloud Nov 2024 adds SRM findings count visibility and custom capital-letter file extension support.

    • SRM Findings Count: see total SRM findings without filters
    • Support for Custom Extensions: support file extensions with capital letters

    2 details in Everything

42. Cloud October 2024 Oct 2024 · release notes

    Codacy Cloud adds cross-search for coding standards, pattern status filtering, security finding management, and duplicate standards.

    • The Status filter in Code Patterns now displays a count for each option to show match quantities.
    • Expanded filtering options in Coding Standards support search term, recommended status, and other criteria.
    • Coding standards can be duplicated directly from the interface for quicker setup.

    3 details in Everything

43. Adding ESLint 9 and PMD 7 as new supported tools September, 2024 Sep 2024 · release notes

    Codacy adds ESLint 9 and PMD 7 as supported analysis tools

    • Adds support for ESLint 9 code analysis engine
    • Adds support for PMD 7 static analysis engine

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !ESLint 8 and PMD 6 are deprecated; updates will stop
    • !ESLint 7 is deleted and no longer available
    • !ESLint 9 requires eslint.config.js, eslint.config.mjs, or eslint.config.cjs configuration files instead of .eslintrc.* formats
44. Cloud September 2024 Sep 2024 · release notes

    Codacy Cloud September 2024 adds Rust, CoffeeScript and more to Jscpd; new SRM widgets and coverage UI overhaul.

    • Jscpd supports new languages: Rust, CoffeeScript, Objective C, Elixir, Groovy, and VisualBasic
    • Revamped coverage with a new repository page for coverage and new insights
    • Issue card now shows the source of configuration requiring a pattern next to the code pattern
    • Warning displayed when conflicts between parameters in the same enforced pattern are found across multiple coding standards
    • Tooltip on enforced tools and patterns showing names of Coding Standards that require them

    +2 more show less

    • SRM findings list now sorted by first detected
    • Open findings of the current week added to the first widget of SRM overview page

    7 details in Everything

45. Cloud August 2024 Aug 2024 · release notes

    Codacy Cloud August 2024 adds PL/SQL rule support, multi-standard repos, pattern grouping, and more.

    • Adds Semgrep support for PL/SQL rules from Checkmarx.
    • Radon now calculates the average complexity of each file in reports.
    • Status checks protection rule values are now visible everywhere in the UI.
    • Supports applying multiple coding standards to a single repository.
    • Issues on the Issues page are now grouped by patterns.

    +1 more show less

    • Supports poetry.lock files for dependency checks via Trivy.

    6 details in Everything

46. Cloud July 2024 Jul 2024 · release notes

    Codacy Cloud July 2024 adds DASTDASTDynamic application security testing, probing a running application from the outside for vulnerabilities. It checks behavior exposed through the application's interfaces. finding upload and Quality Issues grouping.

    • Adds the ability to upload Dynamic Application Security Testing (DAST) findings which appear in the Security and Risk Management dashboard
    • Groups Quality Issues detected in a repository by code pattern on the Quality Issues page for quick filtering

    2 details in Everything

47. v14.0.0 Jun 26, 2024 · release notes

    Codacy Self-hosted v14 adds Kubernetes 1.27 support and ESLint file extension coverage.

48. Cloud June 2024 Jun 2024 · release notes

    Codacy Cloud June 2024 adds findings filtering by scan type and include_paths config field.

    • Adds filtering Security and Risk Management findings by scan type to see results based on the detection method
    • Adds automatic expiration timeouts for every session for increased security
    • Adds the include_paths field to .codacy.yml to explicitly specify files or directories to include in the analysis
    • Adds duplicated code detection support for CoffeeScript, Elixir, Groovy, Objective C, Rust, and Visual Basic

    4 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Codacy stopped sending status checks from the old Coverage engine on June 5th.
49. Cloud May 2024 May 2024 · release notes

    Codacy Cloud May 2024 adds Dart duplication analysis, Trivy Java scanning, and .rubocop-codacy.yml support.

    • Added dependency vulnerability scanning support for Java via Trivy
    • Added support for an alternative RuboCop configuration file for Codacy analysis, .rubocop-codacy.yml

    2 details in Everything

50. Cloud April 2024 Apr 2024 · release notes

    Codacy Cloud April 2024 adds reanalyzeCoverage API endpoint and allows repo admins to bypass PR status checks.

    • Adds reanalyzeCoverage API endpoint to manually trigger pull request coverage reanalysis
    • Repository admins can now bypass the Codacy status check to unblock a pull request merge

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Removed ability to create GitHub or Bitbucket issues and PR comments from the Issues tab
    • !All references to security items are now security findings
51. Cloud March 2024 Mar 2024 · release notes

    Codacy Cloud March 2024 adds pen testing results display, repo unfollow, streamlined org setup, and billing changes.

    • Display penetration testing results directly in the Codacy app UI
    • Unfollow repositories via a new option in the Codacy app interface
    • Streamlined organization setup with guided path and Organization overview checklist
    • Billing calculation change: seats now based only on code analysis activity for auto-managed Enterprise orgs

    4 details in Everything

52. Cloud February 2024 Feb 2024 · release notes

    Codacy Cloud Feb 2024 adds Checkstyle filters, stabilizes new Coverage engine, and opens Organization overview to all plans.

    • Adds support for the SuppressionCommentFilter, SuppressWarningsHolder, and SuppressWarningsFilter Checkstyle filters.
    • Stabilizes the new Coverage engine, moving coverage data from beta to stable while marking the old engine deprecated.
    • Updates the Coverage Pull Requests page to pull data exclusively from the new Coverage engine.
    • Makes the Organization overview feature available on all plans.

    4 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The option to manually refresh the list of organizations when adding new organizations to Codacy is removed.
53. Cloud January 2024 Jan 2024 · release notes

    Codacy Cloud Jan 2024 adds security category filtering and switches to installation access tokensaccess tokensA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions..

    • Adds ability to filter security and risk items by security category in the UI
    • Switches repository integration method from deprecated SSH keys to installation access tokens

    2 details in Everything

54. Cloud December 2023 Dec 2023 · release notes

    Codacy Cloud Dec 2023 opens Security and risk management to all members and rolls out a new Coverage engine.

    • The Security and risk management feature is now available to all organization members, showing repository information for repos they follow.
    • GitHub coverage summaries and the Codacy app UI diff tabs now pull data from the new Coverage engine.

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The Codacy GitHub App requires updated permissions; organization owners must approve these for the feature to work correctly.
55. Rollout of new Coverage engine November 23, 2023 Nov 23, 2023 · release notes

    Codacy rolls out new Coverage engine with Codacy Diff Coverage and Codacy Coverage Variation status checks for GitHub, GitLab, and Bitbucket.

    • Enables GitHub coverage summaries posted directly to pull requests by the new engine.

    1 detail in Everything

    └──▷ BREAKING ON UPGRADE

    • !The old Codacy Coverage Report status check is removed on June 5th, 2024; branches requiring it to block merges will fail.
56. v13.0.0 Nov 23, 2023 · release notes

    Codacy Self-hosted v13.0.0 adds PostgreSQL 12, Kubernetes 1.26, and ESLint plugins for Vue/JS/YAML/Markdown.

    └──▷ USE IT
    Upgrade the NGINX Ingress Controller to version 4.8.3 with annotation validations enabled
    shell copy

    kubectl create namespace codacy
    helm repo add ingress-nginx https://kubernetes.github.io/ingress-nginx
    helm repo update
    helm upgrade --install --namespace codacy --version 4.8.3 nginx-ingress ingress-nginx/ingress-nginx -f values-nginx.yaml

    • Adds ingress-nginx chart 4.8.3 support with enableAnnotationValidations in values-nginx.yaml
    • Adds support for Kubernetes version 1.26
    • Adds support for PostgreSQL server 12
    • Adds ESLint plugin support for vue-scoped-css
    • Adds ESLint plugin support for eslint-plugin-rxjs

    +2 more show less

    • Adds ESLint plugin support for eslint-plugin-markdown and eslint-plugin-yml
    • Pylint now supports Python 3.11 syntax

    7 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Deprecates CSSLint, Faux Pas, JSHint, Tailor, and TSLint tools; users must enable replacement tools (Stylelint, Clang-Tidy, ESLint, SwiftLint) via code patterns or organization coding standard
57. Cloud November 2023 Nov 2023 · release notes

    Codacy Cloud November 2023 adds Semgrep SASTSASTStatic application security testing, analyzing source code or compiled code for vulnerabilities without running the application. It helps developers find problems before deployment. engine support and new Coverage diff status reports.

    • Adds support for Semgrep’s open-source engine to perform static application security testingstatic application security testingStatic application security testing, analyzing source code or compiled code for vulnerabilities without running the application. It helps developers find problems before deployment. (SAST), with the option to upgrade to Semgrep Pro
    • You now get two additional coverage status reports from the new, faster Coverage engine on your Git provider, showing whether your diff coverage and coverage variation are up to standard or not as configured on the quality gate rules for your repository

    2 details in Everything

58. Cloud October 2023 Oct 2023 · release notes

    Codacy Cloud adds faster Coverage engine with diff/variation status reports and extends org-level permission scope.

    • Adds two new coverage status reports on GitHub (diff coverage and coverage variation) using the new faster Coverage engine
    • Extends the Analysis configuration permission level from organization Settings > Member privileges to cover pull request reanalysis and last commit reanalysis

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Removed options Create pull request comments and GitHub issues for GitHub, Create pull requests comments and Bitbucket issues for Bitbucket, and Create Jira issues for Jira from the Issues page menu
    • !Deprecated tools bundler-audit, CSSLint, Faux Pas, JSHint, Tailor, and TSLint are no longer active in the platform
59. Cloud September 2023 Sep 2023 · release notes

    Codacy adds Slack notifications for security issues, VS Code extension for PR review, and a faster coverage engine.

    • Adds Slack channel notification capability for new critical Security issues detected in the default branch of any repository
    • Adds Codacy Visual Studio Code extension to review and manage pull request issues directly within the editor
    • Enables GitHub coverage status report generation using a new, faster Coverage engine

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Codacy no longer automatically re-triggers repository analysis when switching to a different plan or canceling the plan; users must manually re-analyze repositories or push new commits to update the UI
60. Cloud August 2023 Aug 2023 · release notes

    Codacy Cloud August 2023 adds Trivy integration, CSV export columns, and API coverage data

    • Adds support for Trivy to detect committed secrets, IaCIaCInfrastructure as Code: the practice of defining and provisioning compute infrastructure through machine-readable config files rather than manual processes, giving cyber tools repeatable, version-controlled environment setup. misconfigurations, and other security risks
    • The getRepositoryWithAnalysis API endpoint now includes data about coverable and covered lines for a given repository
    • Security and risk management CSV export now includes new columns: file path, line number, and detected pattern

    3 details in Everything

61. v12.0.0 Jul 20, 2023 · release notes

    Codacy v12.0 adds stylelint-no-px plugin support and Kubernetes 1.25 compatibility for self-hosted instances.

    • Adds support for the stylelint-no-px linting plugin to detect pixel-based CSS values.
    • Adds platform support for Kubernetes versions 1.24.* and 1.25.* in the self-hosted deployment.

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The scheduler.enable config key is removed from values-production.yaml (or values-microk8s.yaml); you must explicitly set CONFIG_FORCE_codacy_kubernetes_scheduler_enable to false in the codacy-worker-manager ConfigMap via kubectl patch.
62. Cloud July 2023 Jul 2023 · release notes

    Codacy adds AI fix suggestions in Git, Security Manager role, org-wide gate policies, and tighter GitHub seat management

    • Adds AI-generated context-aware comments and fix suggestions posted directly into the Git provider for Codacy issues.
    • Adds a new Security Manager organization role with a Security and risk management dashboard to detect vulnerabilities across repositories and Jira issues.

    2 details in Everything

63. Cloud June 2023 Jun 2023 · release notes

    Codacy adds Stylelint and ESLint plugins and an onboarding tutorial to help configure your first repository.

    • Adds support for the stylelint-no-px plugin
    • Adds support for several new ESLint plugins (eslint-plugin-perfectionist, @ngrx/eslint-plugin, @nx/react, @tanstack/eslint-plugin-query, eslint-plugin-deprecation, eslint-plugin-ember, eslint-plugin-eslint-plugin, eslint-plugin-fp, eslint-plugin-header, eslint-plugin-import-alias, eslint-plugin-import-newlines, eslint-plugin-jest-extended, eslint-plugin-jira-ticket-todo-comment, eslint-plugin-lit, eslint-plugin-prefer-object-spread, eslint-plugin-rxjs-angular, eslint-plugin-tailwindcss, eslint-plugin-test-selectors, eslint-plugin-you-dont-need-lodash-underscore, eslint-plugin-filenames, eslint-plugin-diff, eslint-config-airbnb-typescript-prettier, eslint-plugin-jest-dom, eslint-plugin-testing-library, and eslint-plugin-sort-destructure-keys)
    • Adds an onboarding tutorial to guide you through the steps of adding and setting up your first repository

    3 details in Everything

64. Cloud May 2023 May 2023 · release notes

    Codacy Cloud May 2023 adds ESLint plugin coverage, quality gate scoping to commits, and configurable default repository integration settings.

    • Adds eslint-plugin-rxjs, eslint-plugin-markdown, and eslint-plugin-yml to supported ESLint plugins.
    • Quality gates now apply to commits in addition to pull requests.
    • Splits Quality settings into Gates and Goals tabs in the repository settings UI.
    • Adds organization-level default settings configuration for new repository Git provider integrations.

    4 details in Everything

65. v11.0.0 Apr 20, 2023 · release notes

    Codacy Self-hosted v11.0.0 adds Kubernetes 1.23 support and updates CLI tools

    • Adds Kubernetes 1.23.* platform support for the self-hosted deployment.
    • Updates Codacy Analysis CLI to version 7.8.3.
    • Updates Codacy Coverage Reporter to version 13.13.1.

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Drops support for Kubernetes versions 1.19, 1.20, and 1.21.
66. Cloud April 2023 Apr 2023 · release notes

    Codacy Cloud April 2023 adds repository selection for dashboard control.

    • Allows users to select which repositories to follow on Codacy for a cleaner, personalized dashboard view.

    1 detail in Everything

67. Cloud March 2023 Mar 2023 · release notes

    New plugins, CSV org member download, and 10 coding standards per org in Codacy Cloud March 2023

    • Adds @tailwindcss/line-clamp plugin for ESLint to detect issues with line clamping styles
    • Adds pylint-beam plugin for Pylint (Python 3) to support new linting checks
    • Adds PHPCompatibilityWP plugin for PHP_CodeSniffer to check WordPress compatibility standards
    • Allows downloading a CSV list of all organization members from the People page for some Enterprise plans
    • Exposes listPeopleFromOrganizationCsv API endpoint to download organization member lists as CSV, available on all plans

    +1 more show less

    • Supports up to 10 coding standards per organization to optimize and apply quality settings to multiple repositories

    6 details in Everything

68. v10.0.0 Feb 3, 2023 · release notes

    Codacy Self-hosted v10.0.0 adds Kubernetes 1.22 support, Unity Roslyn Analyzers for C#, expiring GitHub tokens, and bulk pattern toggling in the UI.

    • Added support for Kubernetes 1.22.*
    • You can now configure your Codacy GitHub App to use expiring user access tokensaccess tokensA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions.
    • Codacy now supports the client-side tool Unity Roslyn Analyzers for reporting error-prone and performance issues on C# projects that use the Unity framework.
    • Added support for the following ESLint plugins: prettier-plugin-tailwindcss, eslint-plugin-typescript-sort-keys
    • Added support for the remark-lint plugin remarkjs/remark-gfm

    +2 more show less

    • While configuring a coding standard , you can now toggle all code patterns using the new checkbox on the header.
    • Codacy now displays the coverage variation metric with a precision of two decimal places on the Repository Dashboard and Organization Overview, and you can define quality gates with a coverage variation threshold using the same precision.

    7 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Upgrading requires PostgreSQL version 11.18 or later, as the previous major version recently reached end-of-life (EOL)
    • !If you're using GitHub Enterprise Server this Codacy Self-hosted version requires GitHub Enterprise Server version 3.6.2 or later
69. Cloud February 2023 Feb 2023 · release notes

    Codacy Cloud February 2023 adds auto-org invite for private repos and new ESLint plugin support.

    • Automatically adds organization members who commit to private repositories in Enterprise plans

    1 detail in Everything

70. Cloud January 2023 Jan 2023 · release notes

    Codacy Cloud January 2023 adds Argo CD commit SHA detection and PR coverage summary reports.

    • Adds automatic commit SHA-1SHA-1A cryptographic hash function standardized by NIST that produces a 160-bit digest; tools use it for file integrity checks, though it is now considered cryptographically broken and unsuitable for collision-resistant applications. detection on Argo CD for the Coverage Reporter
    • Supports reporting a summary of coverage metrics directly on pull requests (GitHub Cloud only)
    • Displays commits missing coverage data on the pull request detail page and in analysis logs

    3 details in Everything

71. 2022# Dec 1, 2022 · release notes

    Codacy adds ESLint 8 support and removes legacy PMD integration.

    • Adds ESLint 8 as a supported analysis tool for JavaScript/TypeScript projects.
    • Removes the legacy PMD analyzer from the platform.

    2 details in Everything

72. Cloud December 2022 Dec 2022 · release notes

    Codacy Cloud December 2022 adds pull request metric failure messaging and corrects API status codes for authorization.

    • Adds a message on the pull request detail page when Codacy cannot calculate metrics, linking to the Coverage tab in repository settings
    • Changes coding standards API endpoints to return 403 Forbidden instead of 401 Forbidden when authorization is required

    2 details in Everything

73. Cloud November 2022 Nov 2022 · release notes

    Codacy Cloud adds support for Unity Roslyn Analyzers and remark-lint remarkjs/remark-gfm.

    • Adds support for the Unity Roslyn Analyzers tool to detect error-prone and performance issues on C# projects using the Unity framework
    • Adds support for the remarkjs/remark-gfm plugin to enable GitHub Flavored Markdown linting via remark-lint

    2 details in Everything

74. v9.0.0 Sep 23, 2022 · release notes

    Codacy v9.0 adds searchOrganizationRepositoriesWithAnalysis API, Bitbucket Server custom context path support, and @shopify/eslint-plugin detection

    • Adds the searchOrganizationRepositoriesWithAnalysis API endpoint to allow searching for repositories filtered by a list of names in more advanced use cases.
    • Adds support for integrating with Bitbucket Server instances configured with custom context paths.

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !PostgreSQL version must be upgraded to 10.20 or later as previous versions reach end-of-life.
    • !Updating PostgreSQL requires running vacuumdb on the Codacy databases after upgrade to prevent autovacuum performance issues.
75. Cloud September 2022 Sep 2022 · release notes

    Codacy Cloud Sep 2022: improved coverage variation precision, bulk code pattern toggle, PR/Commit file filtering, and tool updates.

    • Increases the coverage variation metric display precision to two decimal places on the Repository Dashboard and Organization Overview
    • Allows defining quality gates using a coverage variation threshold with two-decimal precision
    • Adds a bulk toggle checkbox in the header of the Configure coding standards screen to enable/disable all visible code patterns at once
    • Adds Show files without code quality changes toggle on Pull request and Commit Pages Files tabs to list all updated files regardless of metric change

    4 details in Everything

76. Cloud August 2022 Aug 2022 · release notes

    Codacy Cloud adds searchOrganizationRepositoriesWithAnalysis API and GitHub App integration switch.

    • Adds the searchOrganizationRepositoriesWithAnalysis API endpoint to search repositories filtered by a list of names
    • Switches the GitHub integration to use a GitHub Apps token instead of a personal one so features continue working if the creator leaves the organization
    • Adds repository filtering capability in the Organization Overview page

    3 details in Everything

77. v8.1.0 Jun 17, 2022 · release notes

    Codacy Self-hosted v8.1.0 adds GitLab expiring token support and UI/API changes

    • Adds support for expiring access tokensaccess tokensA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions. to integrate with GitLab
    • Pull request notification emails now display the diff coverage metric
    • Removes the username field from the Codacy UI and relevant API endpoints

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The username field is removed from the Codacy UI and relevant API endpoints since it is no longer used
78. Cloud June 2022 Jun 2022 · release notes

    Codacy Cloud June 2022 adds GitLab expiring access tokensaccess tokensA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions. and diff coverage in PR emails

    • expiring_access_tokens is now supported for GitLab integrations to address connectivity issues

    1 detail in Everything

    └──▷ BREAKING ON UPGRADE

    • !The username field has been removed from the Codacy UI and relevant API endpoints; requests using it may fail or return unexpected results.
79. v8.0.0 May 12, 2022 · release notes

    Codacy Self-hosted v8.0.0 adds eslint-plugin-es support, reorganizes UI coverage setup, and updates ESLint to v8 by default.

    • Adds support for the eslint-plugin-es plugin to disallow specific ECMAScript syntax
    • Enables ESLint 8 as the default engine for new repositories

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !ESLint 8 is enabled by default on new repositories; users must migrate their configuration files to use ESLint 8.
80. Cloud May 2022 May 2022 · release notes

    Codacy Cloud May 2022 adds diff coverage ∅ display and reanalysis severity updates

    • Adds ∅ (not applicable) symbol for diff coverage when a pull request has no coverable lines
    • Now, reanalyzing a commit correctly updates the severity level of existing issues if reported severity differs in the latest tool version

    2 details in Everything

81. v7.0.0 Apr 4, 2022 · release notes

    Codacy v7.0.0 adds Maintainer role support in GitLab, ESLint 8, UI improvements and new permissions.

    • GitLab project members with the Maintainer role can now add or configure projects and manage analysis settings (ignoring issues/files, code patterns, file extensions, branches) in Codacy
    • Included ESLint 8 as a new supported tool alongside deprecated ESLint 7
    • Repositories list page displays a warning icon for repositories with warnings or errors
    • Organization Overview and Repositories list pages use a short-lived browser cache to improve loading times
    • Repositories list page allows sorting by available columns for organizations with fewer than 100 repositories

    +2 more show less

    • Overall quality chart now supports drilling down to identify specific repositories requiring attention
    • Access management page under account settings allows adding new Git providers

    7 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !New permissions for GitLab Maintainer roles require reviewing team roles as they gain project configuration and analysis management capabilities
82. Cloud April 2022 Apr 2022 · release notes

    Codacy Cloud April 2022 adds RuboCop and ESLint plugin support.

    • Adds support for the rubocop-thread_safety RuboCop extension to detect thread-safety issues in Ruby code.
    • Adds support for the eslint-plugin-es ESLint plugin to disallow syntax of specific ECMAScript versions.

    2 details in Everything

83. Adding ESLint 8 as a supported tool March 31, 2022 Mar 31, 2022 · release notes

    Adds ESLint 8 engine support to Codacy cloud analysis and deprecates ESLint 7.

    • Enables ESLint 8 as the default linter for new repositories on Codacy
    • Deprecates ESLint 7 support, with complete removal scheduled for April 4, 2023

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Repositories using the babel-eslint parser must update their configuration to use @babel/eslint_parser and add parserOptions.requireConfigFile: false before April 4, 2023 when ESLint 7 is removed
    • !Repositories with .jsx files must explicitly configure the Babel React preset in parserOptions.babelOptions.presets to avoid analysis failures with ESLint 8
84. v6.0.0 Mar 2, 2022 · release notes

    Codacy Self-hosted v6.0.0 adds diff coverage metrics, Dart/Flutter analysis, and PMD configuration flexibility.

    • Adds support for static code analysis of Dart/Flutter projects via dartanalyzer
    • Introduces diff coverage metric for pull requests and allows quality gate rules for it
    • Enables configuring PMD CPD duplication detection to reduce false positives using the Codacy config file
    • Updates Repository Dashboard Issues breakdown to display all issue categories including Code complexity

    4 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Dropped support for Kubernetes 1.14 and MicroK8s 1.14
    • !Removed the tool PMD (Legacy); users must switch to the new PMD tool before upgrading
85. Cloud March 2022 Mar 2022 · release notes

    Codacy Cloud March 2022 adds --tool and --upload-batch-size CLI flags and GitLab Maintainer operations

    • Adds --tool and --upload-batch-size options to the Codacy Analysis CLI for batched uploads and tool-specific analysis.
    • Allows GitLab projects with Maintainers to configure code patterns, file extensions, and branches directly in Codacy.

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !ESLint 7 is deprecated and will be removed on April 4, 2023; new repositories use ESLint 8 by default.
86. Cloud February 2022 Feb 2022 · release notes

    Codacy Cloud Feb 2022 adds diff coverage metric, quality gate rules, and UI drilling for Overall quality chart.

    • Adds the diff coverage metric for pull requests in the Codacy UI
    • Adds a quality gate rule option for diff coverage to enforce thresholds
    • Enables drilling down on repository-level data within the Overall quality chart (Beta)

    3 details in Everything

87. v5.1.0 Jan 6, 2022 · release notes

    Codacy Self-hosted v5.1.0 adds automatic coding standard assignment, project API token management via API, and TLSv1.2 preference for SMTPS.

    • Adds the ability to assign a coding standard automatically to new repositories
    • Adds Codacy API endpoints to create and manage project API tokens programmatically
    • Sets default recommended values for all configurable Stylelint code patterns

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Legacy manual organizations are no longer supported
88. Cloud January 2022 Jan 2022 · release notes

    Codacy Cloud January 2022 adds programmatic API tokens, Dart/Flutter analysis via dartanalyzer, and eslint-plugin-storybook support

    • Adds the ability to create and manage project API tokens programmatically via new Codacy API endpoints.
    • Adds static code analysis support for Dart/Flutter projects using dartanalyzer.
    • Sets default values for all configurable Stylelint code patterns to recommended settings.

    3 details in Everything

89. v5.0.0 Dec 17, 2021 · release notes

    Codacy Self-hosted v5.0.0 adds OpenAPIOpenAPIA vendor-neutral specification for describing REST APIs in a machine-readable format, maintained by the OpenAPI Initiative. Cyber tools use it to auto-generate clients, documentation, and validation from a single source of truth./AsyncAPI linting and organization coding standards

    • Adds support for linting OpenAPI and AsyncAPI descriptions in YAML or JSON using Spectral.
    • Enables applying an organization-wide coding standard to a group of repositories via the new Organization Coding Standard feature.

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Dropped support for legacy manual organizations; upgrade requires migration assistance from support@codacy.com.
    • !Removed codacy-activities, hotspots-api, and hotspots-worker components and their associated database config keys: activities.*, hotspots-api.*, hotspots-worker.*, global.activitiesdb.*, global.hotspotsdb.*.
90. Cloud December 2021 Dec 2021 · release notes

    Codacy Cloud December 2021 adds automatic coding standard assignment for new repositories and UI improvements.

    • Assigns a coding standard automatically to new repositories
    • Improves the visual feedback for the Jira integration status

    2 details in Everything

91. Cloud November 2021 Nov 2021 · release notes

    Codacy Cloud November 2021 adds OpenAPIOpenAPIA vendor-neutral specification for describing REST APIs in a machine-readable format, maintained by the OpenAPI Initiative. Cyber tools use it to auto-generate clients, documentation, and validation from a single source of truth./AsyncAPI linting and organization coding standards with API support

    • Spectral is now supported for linting OpenAPI and AsyncAPI descriptions in YAML or JSON files
    • New UI feature to use an organization coding standard to apply rules across a group of repositories
    • New Codacy API endpoints added for creating, managing, and applying organization coding standards

    3 details in Everything

92. v4.3.0 Sep 16, 2021 · release notes

    Codacy v4.3.0 introduces new language support and enables bulk config copying by default.

    • Adds Objective-C support using Clang-Tidy as a client-side tool for code analysis

    1 detail in Everything

93. Cloud September 2021 Sep 2021 · release notes

    Codacy Cloud Sept 2021 adds macOS binary for codacy-clang-tidy and new eslint plugins

    • Added eslint-plugin-i18n-json, eslint-plugin-suitescript, eslint-config-xo-typescript, @vue/cli-plugin-babel, eslint-plugin-sort-keys-fix, and eslint-plugin-playwright to codacy-eslint

    1 detail in Everything

94. v4.2.0 Aug 31, 2021 · release notes

    Codacy Self-hosted v4.2.0 adds bulk pattern copying and granular PR blocking settings via values.yml

    • Configurable minimum severity level for new issues to control which pull requests are blocked from merging.
    • Configurable maximum number of new security issues threshold for pull request blocking.

    2 details in Everything

95. Cloud August 2021 Aug 2021 · release notes

    Codacy Cloud August 2021 adds configuration for new issue severity thresholds and updates bundled static analysis tool versions.

96. v4.1.0 Jul 6, 2021 · release notes

    Codacy v4.1.0 adds GitLab merge request summaries and markdownlint integration

    • The GitLab integration now supports merge request summaries for both GitLab Cloud and GitLab Enterprise.
    • Adds markdownlint to provide suggested fixes for Markdown issues.

    2 details in Everything

97. v4.0.0 May 18, 2021 · release notes

    Codacy Self-hosted v4.0.0 adds configuration for file extensions and branches management.

    • Now allows configuring who is allowed to manage file extensions and branches.

    1 detail in Everything

    └──▷ BREAKING ON UPGRADE

    • !PostgreSQL version 10.15 is now required as previous versions reach end-of-life.
98. v3.5.0 Mar 31, 2021 · release notes

    Adds Checkov infrastructure-as-code analysis and two new commit delta API endpoints in Codacy Self-hosted v3.5.0

    • Checkov integration extends analysis support for infrastructure-as-code including Terraform, AWS CloudFormationAWS CloudFormationAn AWS service for declaring cloud infrastructure as code in JSON or YAML templates, letting cyber tools provision and tear down entire environments reproducibly without manual console steps., Kubernetes, Serverless framework, and ARMARMA family of RISC processor architectures designed by Arm Holdings and licensed to chip makers worldwide; tools target it to run natively on mobile, embedded, and increasingly server and desktop hardware. Templates.
    • New getCommitDeltaStatistics API endpoint returns quality metric deltas introduced by a commit.
    • New listCommitDeltaIssues API endpoint returns the list of issues introduced or fixed by a commit.
    • Cy-3883 allows configuring who manages patterns and ignore files on all supported Git providers.

    4 details in Everything

99. v3.4.0 Mar 12, 2021 · release notes

    Codacy v3.4.0 adds version display, ignore configs, bulk pattern toggle, API endpoints, and GitHub fix suggestions.

    • Adds listFiles, searchRepositoryIssues, and searchRepositoryIgnoredIssues API endpoints to retrieve file analysis and repository issue data.
    • Enables automatic GitHub fix suggestions for ESLint-identified issues via a new activation setting.
    • Adds UI ability to ignore issues on all supported Git providers through a new configuration option.
    • Adds bulk enable/disable of code patterns in a category with a single click on the Code patterns page.

    4 details in Everything

100. v3.3.0 Feb 12, 2021 · release notes

     Codacy v3.3.0 adds config import across repos and Kubernetes 1.20 support

     • Adds the ability to import tool and pattern configurations from another repository to simplify setup for new repositories.
     • Adds kubernetes version 1.20.* to the list of supported platforms for Codacy Self-hosted.

     2 details in Everything

101. v3.2.0 Dec 17, 2020 · release notes

     Add codacy-spa.config.codacy.pagination.repositoriesLimit config to control repository list loading.

     • Adds codacy-spa.config.codacy.pagination.repositoriesLimit to values-production.yml to configure the number of repositories loaded at a time, overriding the default of 100.

     1 detail in Everything

102. v3.1.0 Dec 10, 2020 · release notes

     Codacy v3.1.0 adds Objective-C (Faux Pas), Go tools (aligncheck, deadcode, Staticcheck) and Kotlin support (jscpd, detekt).

     • Adds static analysis support for Objective-C with the tool Faux Pas
     • Expands static analysis support for Go with aligncheck, deadcode, and Staticcheck
     • Adds duplication and complexity support for Kotlin with jscpd and detekt

     3 details in Everything

103. v3.0.0 Nov 2, 2020 · release notes

     Self-hosted Codacy v3.0.0 updates underlying analysis engines (e.g., Pylint, Brakeman) and introduces GitHub Checks support for PR annotations.

     └──▷ BREAKING ON UPGRADE

     • !GitHub PR status checks that previously passed automatically now require manual re-enabling in GitHub branch protection rules after upgrade
104. v2.2.0 Oct 8, 2020 · release notes

     Adds Codacy Analysis CLI GitHub Action and personal organizations

     • Adds the Codacy Analysis CLI GitHub Action for analyzing commits and pull requests
     • Adds support for personal organizations to manage personal repositories

     2 details in Everything

105. v2.0.0 Aug 18, 2020 · release notes

     Codacy Self-hosted v2.0.0 updates Helm charts and restructures configuration values.

     • The chart for Codacy Self-hosted now supports Helm 3.3.
     • Updated the RabbitMQ chart to version 7.5.7 from the Bitnami Helm chart repository.
     • Updated the MinIO chart to version 5.0.33 from the stable Helm chart repository.
     • The structure of the file values-production.yaml changed, moving worker-manager configuration under global.workerManager and database configuration under global.hotspotsdb/activitiesdb/crowdb.
     • Erlang cookie configuration was added to the RabbitMQ configuration values under rabbitmq-ha.rabbitmqErlangCookie.

     5 details in Everything

106. v1.5.0 Jul 20, 2020 · release notes

     Self-hosted v1.5.0 adds Gosec scanning, addRepository API v3 endpoint, and GitLab Enterprise org sync.

     • addRepository API v3 endpoint now allows programmatic repository addition
     • Gosec GoLang Security Checker supported as a new client-side tool
     • GitLab Enterprise synced organizations support added

     3 details in Everything

107. v1.1.0 May 26, 2020 · release notes

     Codacy Self-hosted v1.1.0 adds configurable timeouts and max file size limits

     • Adds support for setting custom analysis inactivity timeout values
     • Adds support for setting custom analysis task timeout values
     • Adds support for setting custom maximum analysis file size limits

     3 details in Everything

108. v1.0.0 May 18, 2020 · release notes

     Codacy Self-hosted v1.0.0 adds streamlined Git provider configuration and improved onboarding flow.

     • Streamlines the configuration of Git providers during initial setup
     • Improves the onboarding flow to guide users through initial Codacy self-hosted installation

     2 details in Everything

109. Codacy now supports GitHub Apps February 2020 Feb 2020 · release notes

     Codacy adds GitHub Apps support, enabling granular repository access and GitHub Checks integration.

     • Supports authentication via GitHub Apps, allowing users to select specific accounts, organizations, and repositories for Codacy access

     1 detail in Everything

110. Cloud November 15, 2019 Nov 15, 2019 · release notes

     Codacy Cloud now supports live synchronization of GitHub organizations, streamlining integration and user management.

111. Cloud October 30, 2019 Oct 30, 2019 · release notes

     Codacy Cloud adds LCOVLCOVAn open-source front end to GCC's gcov coverage tool that collects line and branch hit counts from instrumented C/C++ code and renders them as HTML reports, giving cyber tools a standard way to measure test coverage. coverage upload support and new default PMD patterns

     • Adds LCOV format support to Codacy Coverage Reporter for uploading coverage data from JavaScript, TypeScript, and C projects
     • Adds RuboCop-rails, eslint-plugin-wdio, and vue-eslint-parser plugin support

     2 details in Everything

112. Cloud September 5, 2019 Sep 5, 2019 · release notes

     Codacy adds SemaphoreCI and ScrutinizerCI coverage reporting support and integrates Stylelint plugins.

     • Adds semaphoreci and scrutinizer-ci to Codacy's Coverage Reporter supported platforms
     • Enables stylelint-config-css-modules, stylelint-prettier, stylelint-config-standard-scss, and stylelint-config-recommended-scss plugins in Stylelint analysis

     2 details in Everything

113. Cloud August 7, 2019 Aug 7, 2019 · release notes

     Adds People list view for team members under organizations and updates ESLint/RuboCop versions.

     • Adds support for new ESLint plugins: eslint-config-standard-jsx, eslint-plugin-compat, and eslint-plugin-chai-friendly
     • Updates embedded ESLint to v5.16.0 and RuboCop to v0.71.0
     • Updates bundler-audit to v0.6.1
     • Ignores branches with names longer than 254 characters

     4 details in Everything

114. Cloud June 18, 2019 Jun 18, 2019 · release notes

     Codacy adds eslint-config-kentcdodds plugin for code analysis.

115. Cloud May 5, 2019 May 5, 2019 · release notes

     Adds typescript-eslint/eslint-plugin and eslint-plugin-relay to ESLint integration

     • typescript-eslint/eslint-plugin added as a new plugin for the ESLint integration.
     • eslint-plugin-relay added as a new plugin for the ESLint integration.

     2 details in Everything

116. Cloud March 29, 2019 Mar 29, 2019 · release notes

     Codacy adds Bitbucket OAuth2OAuth2An open authorization framework (RFC 6749) that lets a service grant limited access to a user's resources on another service without exposing credentials, giving cyber tools a standard way to authenticate against third-party APIs. integration and a 150 KB file size limit for analysis.

     • Bitbucket using OAuth2 integration now available, reducing required permissions for your Bitbucket account
     • Global 150 KB upper limit on file sizes considered for analysis to improve performance

     2 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !Projects added after February 12, 2019 can no longer be added using a Git URL
117. Bitbucket changes February 18, 2019 Feb 18, 2019 · release notes

     Codacy migrates Bitbucket integration from OAuth 1 to OAuth 2OAuth 2An open authorization framework (RFC 6749) that lets a service grant limited access to a user's resources on another service without exposing credentials, giving cyber tools a standard way to authenticate against third-party APIs., reducing required permissions and requiring re-authentication.

     └──▷ HOW TO FIND IT
     Re-authorize the Bitbucket integration after the OAuth 2 migration by logging in via the specific endpoint.
     📍https://www.codacy.com/login-with/bitbucket
     └──▷ BREAKING ON UPGRADE

     • !Existing Bitbucket integrations stop working immediately on February 18, 2019 due to permission changes.
118. Cloud January 2, 2019 Jan 2, 2019 · release notes

     Adds eslint-plugin-ember-suave and tslint-angular to ESLint/TS linting; improves ignored-file UI message.

     • Adds eslint-plugin-ember-suave v1.0.0 support for Ember.js code analysis
     • Adds tslint-angular v1.1.2 support for Angular TypeScript linting
     • Improves the file ignored UI message to clarify that changes apply in the next analysis

     3 details in Everything

119. Cloud November 16, 2018 Nov 16, 2018 · release notes

     Codacy adds PowerShell support via PSScriptAnalyzer and enables Flawfinder by default for new projects.

     • Adds PowerShell language support using the PSScriptAnalyzer engine for new and existing repositories
     • Enables Flawfinder analysis by default on all newly added projects via automatic creation of default patterns
     • Updates RuboCop to v0.60.0, ESLint to v5.8.0, and multiple ESLint plugins (e.g., airbnb-eslint-config v17.1.0, babel-eslint v10.0.1) for improved Ruby and JavaScript analysis

     3 details in Everything

120. Cloud November 2, 2018 Nov 2, 2018 · release notes

     Codacy adds SwiftLint and TSLint 5 support; updates RuboCop and ESLint versions

     • Added SwiftLint to Codacy for Swift code analysis.
     • Added support to TSLint 5 (previous versions no longer supported).
     • Updated RuboCop to version v0.59.2.
     • Updated ESLint to version v5.7.0.
     • Improved Issues Breakdown UI on the dashboard by removing project’s number of lines of code

     5 details in Everything

121. Cloud October 19, 2018 Oct 19, 2018 · release notes

     Codacy Cloud improves coverage UI with color schemes, tooltips, and breakdown display.

     • coverage graph value now displayed in the coverage issues breakdown below the chart
     • Color scheme on project dashboard now depends on project quality settings (red to green, blue if ignored)
     • Tooltips added for coverage-related issues on the project dashboard

     3 details in Everything

122. Cloud July 23, 2018 Jul 23, 2018 · release notes

     Added ability to copy project badge from the project dashboard