https://cybertoolchain.io/tools/deepsource New releases and features in DeepSource, tracked by The Cyber Toolchain. en Thu, 23 Jul 2026 15:49:55 GMT https://deepsource.com/changelog/2026-05-20 https://deepsource.com/changelog/2026-05-20 Thu, 23 Jul 2026 15:49:55 GMT DeepSource adds MCP Server, BYOK inference, Kubernetes Gateway API, monorepo SCA, and expanded AI Review language support. • Adds DeepSource MCP Server exposing 30 tools across 8 categories so AI coding agents can access code review results, vulnerability data, and repository metrics via the Model Context Protocol. • Supports Bring Your Own Key (BYOK) model provider credentials for Enterprise Server AI Review, routing inference directly to Azure OpenAI or GCP Vertex AI without passing through DeepSource Cloud. • Expands AI Review to ten additional programming languages that lack a DeepSource static analyzer. • Introduces two AI Review tiers (Standard and Advanced), with Team plan users defaulted to Standard. • Enables AI Review to run on-demand only when @deepsourcebot is mentioned in PR comments. • Simplifies AI Review billing to a single blended metric: processed lines of code (LOC). • Supports Kubernetes Gateway API on Enterprise Server, creating HTTPRoutes attached to an existing Gateway instead of an Ingress. • Runs SCA on monorepos with per-sub-repository Dependencies tabs, scoped to each sub-project's packages and lock files. • Adds configurable preferences for new open-source dependency vulnerability alerts, including notification recipients and severity thresholds, via Policies → OSS Vulnerabilities → New Vulnerability Alerts. • Continuously monitors multiple vulnerability databases every hour and automatically re-scans affected repositories when newly published CVEs match dependencies, sending digest emails to org admins. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/deepsource https://deepsource.com/changelog/2026-05-20 https://deepsource.com/changelog/2026-05-20 Thu, 21 May 2026 00:00:00 GMT DeepSource adds per-subrepo OSS vulnerability scanning, AI Review for 10 new languages, and Kubernetes Gateway API support for Enterprise Server. • Adds per-subrepository vulnerability scanning for monorepos with a dedicated Dependencies tab scoped to each sub-project's manifest or lock file. • Expands AI Review coverage to Dart, Elixir, Apex, Groovy, Objective-C, VB.NET, PowerShell, Lua, Erlang, and Perl. • Enables Kubernetes Gateway API support in Enterprise Server via Admin Console configuration. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/deepsource https://deepsource.com/changelog/2026-04-13 https://deepsource.com/changelog/2026-04-13 Tue, 14 Apr 2026 00:00:00 GMT DeepSource adds AI Review run-on-mention mode and standard/advanced tiers • Switches Team plan users to the Standard tier by default, with migration path from AI & Agents policy page Full history on Cyber Toolchain: https://cybertoolchain.io/tools/deepsource https://deepsource.com/changelog/2026-04-10 https://deepsource.com/changelog/2026-04-10 Sat, 11 Apr 2026 00:00:00 GMT DeepSource adds configurable OSS vulnerability alert preferences via UI • Adds UI path `Policies -> OSS Vulnerabilities -> New Vulnerability Alerts` to control OSS dependency alert notifications • Adds option to set notification severity threshold (critical, high, medium, low) for new open-source vulnerabilities • Adds toggle to include all organization admins in vulnerability alert notifications Full history on Cyber Toolchain: https://cybertoolchain.io/tools/deepsource https://deepsource.com/changelog/2026-04-06 https://deepsource.com/changelog/2026-04-06 Tue, 07 Apr 2026 00:00:00 GMT DeepSource MCP Server release enables AI agents to access code review, vulnerability, and compliance data via Model Context Protocol • Adds `add-mcp` utility from NPM for installing the DeepSource MCP Server integration with AI coding agents. • Exposes 30 tools across 8 categories for accessing pull request findings, PR report card grades, dependency vulnerability reachability, code coverage metrics, compliance reports (OWASP Top 10, SANS Top 25), and issue suppression rules. • Enables authentication via OAuth without manual token configuration. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/deepsource https://deepsource.com/changelog/2026-03-31 https://deepsource.com/changelog/2026-03-31 Wed, 01 Apr 2026 00:00:00 GMT DeepSource v5.0.0 adds BYOK AI Review, allowing Enterprise Server users to direct inference to their own model providers. • Adds Bring Your Own Key (BYOK) capability to DeepSource Enterprise Server for AI Review, enabling inference calls to go directly to user-chosen providers. • Supports Anthropic Claude via Amazon Bedrock or direct API as a BYOK provider. • Supports OpenAI GPT Codex via Azure OpenAI or direct API as a BYOK provider. • Supports Google Gemini via GCP Vertex AI or direct API as a BYOK provider. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/deepsource https://deepsource.com/changelog/2026-03-20 https://deepsource.com/changelog/2026-03-20 Sat, 21 Mar 2026 00:00:00 GMT DeepSource adds .NET 10 analyzer support, Windows CLI with --skip-tls-verify, and PR Report Card insights • `--skip-tls-verify` flag in the DeepSource CLI for on-prem installations with self-signed certificates. • Windows installation via PowerShell script for the DeepSource CLI. • Analysis support for `.NET 10` runtime. • PR Report Card insights included in pull request comments and Copy as Markdown exports. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/deepsource https://deepsource.com/changelog/2026-03-06 https://deepsource.com/changelog/2026-03-06 Sat, 07 Mar 2026 00:00:00 GMT New CLI v2 releases with JSON output and AI agent skill integration for automated code review workflows. • New CLI v2 releases with JSON output and AI agent skill integration for automated code review workflows. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/deepsource https://deepsource.com/changelog/2026-02-23 https://deepsource.com/changelog/2026-02-23 Tue, 24 Feb 2026 00:00:00 GMT DeepSource adds AI Review engine, inline PR comments, and PR Report Card via new GraphQL types and UI toggles • Adds the `Enable AI Agents` flag in Policies > AI on the dashboard to activate the new AI code review engine alongside static analysis • Enables inline review comments on pull request diffs for GitHub, GitLab, Bitbucket (Cloud and Data Center), and Azure DevOps Services via the Settings > Quality Gates toggle • Generates a PR Report Card with grades A-D across Security, Reliability, Complexity, Hygiene, and Coverage dimensions for every reviewed pull request • Exposes new GraphQL types for retrieving AI issues, OSS vulnerabilities, and PR report card data Full history on Cyber Toolchain: https://cybertoolchain.io/tools/deepsource https://deepsource.com/changelog/2026-01-22 https://deepsource.com/changelog/2026-01-22 Fri, 23 Jan 2026 00:00:00 GMT DeepSource introduces SSO multi-IDP support with provider selection screen for users accessing multiple identity providers. • Introduces a provider selection screen during login for users who have access to multiple IDPs Full history on Cyber Toolchain: https://cybertoolchain.io/tools/deepsource https://deepsource.com/changelog/2025-12-15 https://deepsource.com/changelog/2025-12-15 Tue, 16 Dec 2025 00:00:00 GMT DeepSource renames Transformers to Code Formatters and adds Past Invoice view for free plan. • Adds `code_formatters` type to the Public API, replacing the deprecated `transformers` type. • Enables free plan users to view past invoices from the billing page. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/deepsource https://deepsource.com/changelog/2025-06-25 https://deepsource.com/changelog/2025-06-25 Thu, 26 Jun 2025 00:00:00 GMT DeepSource SCA adds native support for Bun and uv package managers via new discovery triggers. • Adds `Bun` package manager support in DeepSource SCA for JavaScript projects. • Adds `uv` package manager support in DeepSource SCA for Python projects. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/deepsource https://deepsource.com/changelog/2025-05-27 https://deepsource.com/changelog/2025-05-27 Wed, 28 May 2025 00:00:00 GMT DeepSource introduces autonomous Agents (Autofix, CVE prioritization, False Positive Triage), Autofix AI, Vanta SCA integration, and OIDC auth. • Adds DeepSource Agents for autonomous code analysis including Autofix™ Autopilot, CVE Prioritization Agent, and False Positive Triage Agent • Enables Autofix™ AI mode via Team Settings to generate context-aware remediations using LLMs • Integrates Software Composition Analysis (SCA) with Vanta to surface vulnerable dependencies in the Vanta dashboard • Supports OpenID Connect (OIDC) authentication for GitHub Actions workflows Full history on Cyber Toolchain: https://cybertoolchain.io/tools/deepsource https://deepsource.com/changelog/2025-04-07 https://deepsource.com/changelog/2025-04-07 Tue, 08 Apr 2025 00:00:00 GMT DeepSource announces general availability of its Software Composition Analysis feature for Cloud workspaces and introduces a paid subscription tier. • DeepSource announces general availability of its Software Composition Analysis feature for Cloud workspaces and introduces a paid subscription tier. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/deepsource https://deepsource.com/changelog/2025-02-21 https://deepsource.com/changelog/2025-02-21 Sat, 22 Feb 2025 00:00:00 GMT New DeepSource Directory for checkers; Globstar supports Go-based checkers with tree-sitter API • Launches the `DeepSource Directory`, a central place to explore code quality and SAST checkers across 20+ Analyzers • Enables writing Globstar checkers in Go with an all-new API for tree-sitter scope resolution and multi-file analysis Full history on Cyber Toolchain: https://cybertoolchain.io/tools/deepsource https://deepsource.com/changelog/2025-01-29 https://deepsource.com/changelog/2025-01-29 Thu, 30 Jan 2025 00:00:00 GMT DeepSource improves Secrets Analyzer accuracy for Terraform and VueJS, adds API mutations and role mapping • `Favorites` section added to the sidebar in the main application navigation for quick access to repositories • API exposes `updateRepositoryIssuePrioritySetting` mutation for updating priority gates • API exposes `updateRepositoryMetricSetting` mutation for updating metric thresholds • GitHub `MAINTAIN` role mapped to `ADMIN` role on DeepSource for easier permission management Full history on Cyber Toolchain: https://cybertoolchain.io/tools/deepsource https://deepsource.com/changelog/jan-25-2025 https://deepsource.com/changelog/jan-25-2025 Sun, 26 Jan 2025 00:00:00 GMT DeepSource releases Globstar, an open-source static analysis toolkit for custom YAML checkers using tree-sitter. • Adds support for writing custom checkers in `.globstar/` directory using YAML format with tree-sitter S-expression syntax Full history on Cyber Toolchain: https://cybertoolchain.io/tools/deepsource https://deepsource.com/changelog/aug-5-2024 https://deepsource.com/changelog/aug-5-2024 Tue, 06 Aug 2024 00:00:00 GMT DeepSource adds Rust support to VS Code extension and new API endpoints for repository management. • Adds `Rust` language support in the DeepSource VS Code Extension for static analysis and Autofix AI • Adds `Repository Activation/Deactivation API` to activate or deactivate repositories programmatically Full history on Cyber Toolchain: https://cybertoolchain.io/tools/deepsource https://deepsource.com/changelog/may-13-2024 https://deepsource.com/changelog/may-13-2024 Tue, 14 May 2024 00:00:00 GMT DeepSource adds Java 21 analysis support and optional GitLab MR status checks. • Adds Java 21 support to the DeepSource Java Analyzer for new language features like record patterns and switch pattern matching • Enables disabling external status checks sent to GitLab with a new configuration option Full history on Cyber Toolchain: https://cybertoolchain.io/tools/deepsource https://deepsource.com/changelog/nov-14-2023 https://deepsource.com/changelog/nov-14-2023 Wed, 15 Nov 2023 00:00:00 GMT DeepSource adds stacked PR diffing, Ruff transformer, and GitLab subgroup support. • Correctly diffs stacked pull requests to show only new issues introduced in each layer. • Adds `Ruff` as a configurable Transformer for Python formatting in `.deepsource.toml`. • Supports syncing repositories nested within GitLab subgroups of any depth. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/deepsource https://deepsource.com/changelog/sep-26-2023 https://deepsource.com/changelog/sep-26-2023 Wed, 27 Sep 2023 00:00:00 GMT DeepSource vSep-26-2023 introduces monorepo support for GitLab, Bitbucket, and Azure DevOps; adds cyclomatic complexity configuration, Go 1.21, C/C++ standard config, and doc • Adds general availability of monorepo mode with support for GitLab, Bitbucket, and Azure DevOps Services VCS providers • Adds configurable cyclomatic complexity thresholds in the Analyzer configuration (default: medium) • Adds support for multiple Azure Directories (tenants) within the Azure DevOps Services integration • Adds Go v1.21.x runtime support to the Go analyzer • Adds documentation coverage metrics reporting capability in the Scala analyzer • Adds configurable C/C++ standard selection via Analyzer meta options Full history on Cyber Toolchain: https://cybertoolchain.io/tools/deepsource https://deepsource.com/changelog/jun-28-2023 https://deepsource.com/changelog/jun-28-2023 Thu, 29 Jun 2023 00:00:00 GMT DeepSource adds Vanta integration, commit skip support, and new analyzer rules • Adds official integration with Vanta to display source code security compliance issues directly in the Vanta dashboard • Enables skipping analysis by adding `skip ci`, `ci skip`, `no ci`, or `skipcq` to commit messages • Improves GitHub organization onboarding by auto-adding users to existing teams during signup • Adds 15 new static analysis and SAST checks across C#, Java, JavaScript, and Rust • Adds Autofix support for 12 existing checks in JavaScript and Java Full history on Cyber Toolchain: https://cybertoolchain.io/tools/deepsource https://deepsource.com/changelog/jun-1-2023 https://deepsource.com/changelog/jun-1-2023 Fri, 02 Jun 2023 00:00:00 GMT DeepSource adds manual check retry capability and GitHub auto-sync toggle plus Ruby analyzer config option • Adds ability to retry individual or all unsuccessful analysis checks via History tab buttons • Adds 'Automatically sync access settings from GitHub' toggle in Access Control tab for automatic user/org syncing on Enterprise Server • Adds `non_public` parameter to the `skip_doc_coverage` config key in .deepsource.toml to exclude non-public methods from documentation coverage calculations Full history on Cyber Toolchain: https://cybertoolchain.io/tools/deepsource https://deepsource.com/changelog/may-13-2023 https://deepsource.com/changelog/may-13-2023 Sun, 14 May 2023 00:00:00 GMT DeepSource adds Bitbucket Data Center support and new API types for subscriptions and rule ignoring • Adds `Community Analyzers` support for Kube Linter, Dart Analyze, Slither, and AWS CloudFormation Linter via SARIF ingestion. • Adds `Bitbucket Data Center` as a supported Version Control System (VCS) provider in the DeepSource cloud dashboard. • Adds `AccountSubscription`, `IgnoreRule`, and `IssueCategorySetting` types to the DeepSource API. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/deepsource https://deepsource.com/changelog/apr-27-2023 https://deepsource.com/changelog/apr-27-2023 Fri, 28 Apr 2023 00:00:00 GMT DeepSource VS Code Extension launches with monorepo support and 30+ new analyzers in private beta • VS Code Extension enters private beta, enabling issue detection, understanding, and resolution directly within the editor • Adds first-class support for monorepos by allowing repository mapping of subfolders as sub-repositories with independent quality gates • Adds 30+ new static analysis checks across C#, Java, JavaScript, Scala, and Ruby languages • Enables Autofix™ for 12 specific checks including JS-W1042, JAVA-W1086, and others Full history on Cyber Toolchain: https://cybertoolchain.io/tools/deepsource https://deepsource.com/changelog/apr-21-2023 https://deepsource.com/changelog/apr-21-2023 Sat, 22 Apr 2023 00:00:00 GMT DeepSource v.AuditLogImprovements adds team-level audit logs, SCIM, multi-report coverage, and new analyzer checks. • Adds Team-level Audit Log tracking activity such as team membership changes, billing info, and repository permissions in the Security tab of team settings • Adds Search, Filter by timeframe, and CSV Export capabilities to the audit log interface • Enables SCIM (System for Cross-domain Identity Management) provisioning for Enterprise Cloud users alongside SAML-based SSO • Supports implicit merging of multiple CI-generated test coverage reports sent under the same key name • Tracks documentation coverage in the Rust Analyzer with meta fields for configuration • Adds 50 new static analysis and SAST checks (CXX-W2030, CS-R1111, SC-A1005, JS-W1040, RS-E1034, JAVA-E1106) to existing analyzers • Adds Autofix support for 11 specific checks across C#, Java, and JavaScript (CS-R1032, CS-R1107, CS-R1113, CS-W1069, CS-W1084, JAVA-W0379, JAVA-W1010, JAVA-W1032, JAVA-W1075, JS-W1040) • Adds `Team` object to the public API for querying team member lists Full history on Cyber Toolchain: https://cybertoolchain.io/tools/deepsource https://deepsource.com/changelog/mar-30-2023 https://deepsource.com/changelog/mar-30-2023 Fri, 31 Mar 2023 00:00:00 GMT DeepSource v2023-03-30 adds Autofix for PHP, LCOV coverage support, report inference settings, and conventional commit formatting. • Adds `Enable report inference` toggle under `Settings → Code Coverage` to track code coverage metrics when tests are skipped on default branch merges • Adds Autofix capability for PHP analyzer with support for over 10 auto-fixable issues • Adds LCOV format support for Test Coverage reporting in analyzers • Adds 2 new PHP detections: `PHP-A1012` and `PHP-T1006` • Adds 15 new Rust detections: `RS-W1049`, `RS-W1066`, `RS-W1047`, `RS-W1065`, `RS-W1067`, `RS-E1013`, `RS-A1002`, `RS-A1003`, `RS-A1004`, `RS-W1038`, `RS-W1039`, `RS-P1005`, `RS-W1045`, and `RS-W1046` • Formats Autofix-generated commits to adhere to the Conventional Commits standard Full history on Cyber Toolchain: https://cybertoolchain.io/tools/deepsource https://deepsource.com/changelog/mar-16-2023 https://deepsource.com/changelog/mar-16-2023 Fri, 17 Mar 2023 00:00:00 GMT DeepSource adds Azure DevOps VCS support and SAML2.0 SSO • Adds Azure DevOps as a supported Version Control System (VCS) provider alongside GitHub, GitLab, and Bitbucket • Adds SAML2.0-based Single Sign-On (SSO) authentication with Okta, OneLogin, and Azure AD Identity Provider support Full history on Cyber Toolchain: https://cybertoolchain.io/tools/deepsource https://deepsource.com/changelog/feb-22-2023 https://deepsource.com/changelog/feb-22-2023 Thu, 23 Feb 2023 00:00:00 GMT DeepSource adds ClangFormat Transformer and 25 new static analysis checks for C#, Scala, C/C++, Ruby • Adds `ClangFormat` transformer to automate C/C++ code formatting via `.deepsource.toml` • Adds 25 new SAST checks including `CS-A1013`, `SC-R1059`, `CXX-P2008`, and `RB-LI1103` across C#, Scala, C/C++, and Ruby • Adds Autofix support for six Ruby Analyzer checks: `RB-LI1103`, `RB-LI1104`, `RB-LI1105`, `RB-E1001`, `RB-W1002`, `RB-W1004` • Adds BitBucket Cloud as a VCS provider for Enterprise Server installations • Adds in-built APM integration allowing direct metadata sending to Sentry on Enterprise Server Breaking changes: • Breaking schema changes to `Check` and `Repository` types in the GraphQL API and webhook payloads for events `analysis_run.started` and `analysis_run.updated`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/deepsource https://deepsource.com/changelog/feb-13-2023 https://deepsource.com/changelog/feb-13-2023 Tue, 14 Feb 2023 00:00:00 GMT DeepSource vFeb 13 adds manual repo sync, access settings override control, Electron checks, and Rust autofixes. • `Manual Sync` option for individual repositories added to the repository search interface during activation. • Access settings override control available when performing a `manual sync`, with an overview of changes that will be overridden. • Five new SAST checks in JavaScript Analyzer: JS-S1015, JS-S1016, JS-A1005, JS-A1006, and JS-A1007. • Autofix support added for Rust checks RS-W1001, RS-W1046, RS-W1062, RS-W1074, RS-W1080, and RS-W1095. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/deepsource https://deepsource.com/changelog/jan-25-2023 https://deepsource.com/changelog/jan-25-2023 Thu, 26 Jan 2023 00:00:00 GMT DeepSource improves GitHub role-based access sync and adds Enterprise Server log export; 41 new analyzer checks added across multiple languages. • Adds `No Permission` option to Member Base Permissions setting in team access control settings to allow members read-only access to public repositories by default • Automatically syncs the organization's base permission from GitHub to DeepSource when connecting a new GitHub organization, overriding previous "Maintain" default • Shows the source of a member's addition (organization or repository) in the Organization → Settings → My team and Repository → Settings → Repository members list • Adds ability to regenerate DSN for a repository from the dashboard and the API • Makes `enabled` attribute optional in `.deepsource.toml`, defaulting to `true` when disabled analyzers are not explicitly set • Adds RabbitMQ High Availability support for standalone DeepSource Enterprise Server installations • Enables exporting DeepSource Enterprise Server logs to SIEM tools • Adds 41 new checks across Java, JavaScript, Go, Terraform, C/C++, Rust, and Scala analyzers Full history on Cyber Toolchain: https://cybertoolchain.io/tools/deepsource https://deepsource.com/changelog/dec-16-2022 https://deepsource.com/changelog/dec-16-2022 Sat, 17 Dec 2022 00:00:00 GMT DeepSource vDec16 adds account switcher search and Autofix for JS-S1013 • Adds `search` functionality to the DeepSource dashboard account switcher to filter between team and personal accounts • Adds new checks JAVA-W1066, JAVA-S1065, JAVA-A1057, and JAVA-C1003 for Java analysis • Adds new checks JS-S1012, JS-S1013, and JS-S1014 for JavaScript/JS analysis • Enables Autofix for the JS-S1013 rule Full history on Cyber Toolchain: https://cybertoolchain.io/tools/deepsource https://deepsource.com/changelog/dec-9-2022 https://deepsource.com/changelog/dec-9-2022 Sat, 10 Dec 2022 00:00:00 GMT Adds pinned reports on dashboard and account/repository-level API queries for reports • Adds the ability to pin specific reports on the DeepSource dashboard at both team and repository levels via the ellipsis menu • Adds API capability to query reports associated with an Account or a Repository Full history on Cyber Toolchain: https://cybertoolchain.io/tools/deepsource https://deepsource.com/changelog/dec-2-2022 https://deepsource.com/changelog/dec-2-2022 Sat, 03 Dec 2022 00:00:00 GMT DeepSource adds 15 new analyzer checks and Autofix for Ruby, C#, and Java. • Adds Autofix support for RB-S1000 (Ruby), CS-W1067 and CS-R1101 (C#) Full history on Cyber Toolchain: https://cybertoolchain.io/tools/deepsource https://deepsource.com/changelog/nov-25-2022 https://deepsource.com/changelog/nov-25-2022 Sat, 26 Nov 2022 00:00:00 GMT DeepSource adds Composite Coverage metric, Public Reports sharing, and Jira/Slack integrations • Adds the `Composite Coverage` metric, aggregated from line and branch/condition coverage, viewable at `Metrics → Composite Coverage`. • Adds `Public Reports` feature to share external links for repository or team reports, with optional password protection. Breaking changes: • Requires running the new `kube-janitor` service to clean up old jobs in the `atlas-jobs` namespace before upgrading the Enterprise Server version. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/deepsource https://deepsource.com/changelog/nov-18-2022 https://deepsource.com/changelog/nov-18-2022 Sat, 19 Nov 2022 00:00:00 GMT DeepSource adds Code Health Trend and Issues Prevented reports plus 39 new analyzer checks • Adds the `Code Health Trend` report under `Reports → Code Health Trend` to visualize net new code health issues in the repository view and team overview. • Adds the `Issues Prevented` report available for individual repositories and teams to show the total number of code health issues prevented in pull requests. • Adds 39 new analyzer checks across Java, C#, Rust, Go, Terraform/Azure, Terraform/GCP, and Ruby (re-enabled). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/deepsource https://deepsource.com/changelog/may-24-2022 https://deepsource.com/changelog/may-24-2022 Wed, 25 May 2022 00:00:00 GMT Adds Slack integration, C# Autofix, GitLab Pipeline integration, and new analyzer detections. • Integrates with Slack to deliver issue updates via the 'Integrations' tab in organization settings • Enables Autofix for C# with 20 supported issues in the DeepSource C# Analyzer • Adds native integration with GitLab Pipelines and Commit Statuses for merge request workflows • Adds dotnet-format Transformer for C# in the Analyzers section • Expands Test Coverage Analyzer to support reporting for C# Full history on Cyber Toolchain: https://cybertoolchain.io/tools/deepsource https://deepsource.com/changelog/may-9-2024 https://deepsource.com/changelog/may-9-2024 Tue, 10 May 2022 00:00:00 GMT DeepSource Enterprise Server adds OneLogin SSO support and LCOV test coverage reporting • Adds SAML SSO integration with OneLogin for DeepSource Enterprise Server admins to configure custom connectors Full history on Cyber Toolchain: https://cybertoolchain.io/tools/deepsource https://deepsource.com/changelog/apr-11-2022 https://deepsource.com/changelog/apr-11-2022 Tue, 12 Apr 2022 00:00:00 GMT DeepSource adds detection of unexecuted code in test files via TCV-002. • Adds `TCV-002` to Test Coverage Analyzer to detect unexecuted 'dead' code in any test files. • Adds JAVA-A1027, JAVA-A1028, JAVA-A1029, JAVA-A1030, JAVA-S1031 for Java analysis. • Adds PHP-W1083, PHP-W1087, PHP-W1088 for PHP analysis. • Adds GO-E1003, GO-R1001, GO-R1002, GO-W1003, GO-E1004, GO-E1005, GO-W1004, GO-W1005, GO-E1006, GO-E1007, GO-S1029, GO-W1006 for Go analysis. • Adds CS-W1016, CS-W1017, CS-W1018, CS-W1019, CS-W1020, CS-W1021, CS-R1039, CS-R1040, CS-P1005, CS-P1006, CS-A1008, CS-A1009, CS-A1010, CS-S1000 for C# analysis. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/deepsource https://deepsource.com/changelog/apr-5-2022 https://deepsource.com/changelog/apr-5-2022 Wed, 06 Apr 2022 00:00:00 GMT DeepSource adds six new code analysis issues and fixes default JS module type to ESM • Adds three new PHP issue codes: `PHP-A1010`, `PHP-W1086`, and `PHP-T1005`. • Adds two new JavaScript issue codes: `JS-S1009` and `JS-S0011`. • Reports syntax errors as DeepSource issues using the new code `JS-0833`. • Changes the default module type for JavaScript to ESM, so ESModules are no longer ignored when `module_system` is unspecified in `.deepsource.toml`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/deepsource https://deepsource.com/changelog/mar-28-2022 https://deepsource.com/changelog/mar-28-2022 Tue, 29 Mar 2022 00:00:00 GMT DeepSource adds team_member webhook events and updates analyzers for Java 17 and more. • Adds `team_member.added`, `team_member.removed`, and `team_member.updated` webhook events to monitor team roster changes • Expands Go Autofix coverage to include RVV-A0001, RVV-A0009, SCC-S1007, SCC-SA4017, SCC-SA4018, and SCC-SA9003 • Adds Java 17 support in the Java Analyzer for projects using the latest LTS release Full history on Cyber Toolchain: https://cybertoolchain.io/tools/deepsource https://deepsource.com/changelog/jan-24-2022 https://deepsource.com/changelog/jan-24-2022 Tue, 25 Jan 2022 00:00:00 GMT DeepSource adds `analysis_run.updated` and `repository_issue.introduced` webhook events. • `analysis_run.updated` webhook event added: triggered each time an analyzer publishes its results on DeepSource. • `repository_issue.introduced` webhook event added: triggered when an issue is introduced to the main/default branch of your repository. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/deepsource https://deepsource.com/changelog/jan-10-2022 https://deepsource.com/changelog/jan-10-2022 Tue, 11 Jan 2022 00:00:00 GMT DeepSource adds a 'Sync repositories' button for GitLab and integrates its changelog into the dashboard. • Adds a "Sync repositories" button in the GitLab integration to manually trigger syncs. • Integrates the DeepSource changelog (hosted on Canny) directly into the application sidebar. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/deepsource