Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
103 changes: 103 additions & 0 deletions docs/release-notes/cloud/cloud-2026-07.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,103 @@
---
rss_title: Codacy release notes RSS feed
rss_href: /feed_rss_created.xml
description: Release notes for Codacy Cloud July 2026.
Codacy_tools_version_old: https://github.com/Codacy/tools/releases/tag/9.3.9

Check failure on line 5 in docs/release-notes/cloud/cloud-2026-07.md

View workflow job for this annotation

GitHub Actions / vale

[vale] reported by reviewdog 🐶 [Vale.Terms] Use 'GitHub' instead of 'github'. Raw Output: {"message": "[Vale.Terms] Use 'GitHub' instead of 'github'.", "location": {"path": "docs/release-notes/cloud/cloud-2026-07.md", "range": {"start": {"line": 5, "column": 35}}}, "severity": "ERROR"}
Codacy_tools_version_new: https://github.com/Codacy/tools/releases/tag/9.3.61
---

# Cloud July 2026

These release notes are for the Codacy Cloud updates during July 2026.

📢 [Visit the Codacy roadmap](https://roadmap.codacy.com) and <span class="skip-vale">let us know</span> your feedback on both new and planned product updates!

### Features
- **Folder-Level Metrics:** Users can now browse their repositories by folder and view quality metrics-issues, complexity, coverage, and duplication - scoped to each directory. Folder navigation, search, and branch-keyed overviews are all included. (OD-179, OD-180, OD-181, OD-183, OD-264)

- **Affected Functions in Security Findings:** Security dependency findings now surface the affected entrypoint functions, so teams can immediately see which code paths are reachable from a vulnerable dependency. The functions are visible in the Findings card, in the cloud CLI `findings` command, and in the public API. (OD-295, OD-296, OD-297, OD-403)

Check warning on line 18 in docs/release-notes/cloud/cloud-2026-07.md

View workflow job for this annotation

GitHub Actions / vale

[vale] reported by reviewdog 🐶 [Microsoft.Terms] Prefer 'cloud' over 'the cloud'. Raw Output: {"message": "[Microsoft.Terms] Prefer 'cloud' over 'the cloud'.", "location": {"path": "docs/release-notes/cloud/cloud-2026-07.md", "range": {"start": {"line": 18, "column": 265}}}, "severity": "WARNING"}

- **Pull Requests Page Filter Bar:** A new filter bar on the Pull Requests page lets users search pull requests by title and switch between all target branches or the current branch only. (OD-374, OD-376)

- **PHP CS Fixer is live:** We've added a new tool for our PHP users, called PHP CS Fixer, a popular tool that fixes your PHP code to follow standard coding style rules. Read more about this [here](cloud-2026-07-adding-phpcsfixer-checkov-config-files.md)

### Improvements

- **Complexity Metrics Restored:** Fixed missing complexity metrics from the repository overview and repository list pages. (OD-155)

- **PR Notification Unsubscribe Links Fixed:** Unsubscribe links in PR notification emails were returning 404 errors; this has been resolved. (OD-232)

- **Blank Screen in Advanced Coding Standard Setup:** Fixed a blank screen that could appear during the Advanced Coding Standard setup flow. (OD-261)

- **Shellcheck Configuration File Support:** Shellcheck now respects configuration files present in the repository. Read more about this [here](cloud-2026-07-adding-shellcheck-config-file.md) (TCE-1463)

Check failure on line 32 in docs/release-notes/cloud/cloud-2026-07.md

View workflow job for this annotation

GitHub Actions / vale

[vale] reported by reviewdog 🐶 [Vale.Terms] Use 'ShellCheck' instead of 'Shellcheck'. Raw Output: {"message": "[Vale.Terms] Use 'ShellCheck' instead of 'Shellcheck'.", "location": {"path": "docs/release-notes/cloud/cloud-2026-07.md", "range": {"start": {"line": 32, "column": 5}}}, "severity": "ERROR"}
Comment thread
DMarinhoCodacy marked this conversation as resolved.

- **CodeSniffer Updated to v4:** CodeSniffer has been updated to support PHP CodeSniffer v4. Read more about this [here](cloud-2026-07-remove-codesniffer-packages.md) (TCE-1540)

- **Trivy Ignore List Now Respected in CI/CD:** Fixed an issue where the Trivy ignore list wasn't being applied during Codacy CI/CD pipeline runs. (TCE-1550)

- **Checkov Config File Option:** Added support for passing a config file to Checkov. (TCE-397)

- **Prospector Conflicting Rules Resolved:** Disabled the mutually exclusive Prospector rules D203 and D211 to prevent false-positive noise. (TCE-1568)

- **Cppcheck Spurious Include Warnings Suppressed:** Suppressed irrelevant "include" warnings from Cppcheck that were generating noise in results. (TCE-1012)

## Tool versions

- **Codacy** has a new tool called **PHP CS Fixer** with the version 3.95.15
- **Bandit** has a new version: 1.9.4 (updated from 1.8.3)
- **Checkov** has a new version: 3.3.8 (updated from 3.2.508)
- **Checkstyle** has a new version: 13.9.0 (updated from 10.26.1)
- **PHP CodeSniffer** has a new version: 4.0.1 (updated from 3.10.1)
- **Cppcheck** has a new version: 2.21.0 (updated from 2.18.0)
- **ESLint v9** has a new version: 9.39.5 (updated from 9.39.4)
- **Lizard** has a new version: 1.23.0 (updated from 1.22.2)
- **Opengrep** has a new version: 1.26.0 (updated from 1.21.0)
- **RuboCop** has a new version: 1.88.2 (updated from 1.80.2)
- **Stylelint** has a new version: 17.13.0 (updated from 16.23.0)
- **AgentLinter**: 0.3.3
- **aligncheck**: 1.0.0
- **Ameba**: 1.6.4
- **Biome**: 2.4.10
- **Brakeman**: 4.3.1
- **Bundler Audit**: 0.9.1
- **clang-tidy**: 10.0.1
- **CodeNarc**: 3.6.0
- **CoffeeLint**: 5.2.11
- **Credo**: 1.7.12
- **CSSLint**: 1.0.5
- **Dart Analyzer**: 3.9.3
- **deadcode**: 1.0.0
- **Detekt**: 1.23.8
- **Faux Pas**: 1.7.2
- **Flawfinder**: 2.0.19
- **golangci-lint**: 2.7.2
- **Gosec**: 2.22.7
- **Hadolint**: 2.12.0
- **Jackson Linter**: 2.19.2
- **JSHint**: 2.13.6
- **markdownlint**: 0.40.0
- **PHP Mess Detector**: 2.14.1
- **PMD v7**: 7.16.0
- **Prospector**: 1.18.0
- **PSScriptAnalyzer**: 1.24.0
- **Pylint**: 4.0.5
- **Reek**: 6.5.0
- **remark-lint**: 10.0.1
- **Revive**: 1.12.0
- **Roslyn**: 1.23.0
- **Ruff**: 0.12.7
- **Scalameta**: 4.0.0
- **ScalaStyle**: 1.5.1
- **ShellCheck**: 0.10.0
- **SonarC#**: 9.32
- **SonarVB**: 8.13
- **Spectral**: 1.22.0
- **SpotBugs**: 4.8.4
- **SQLFluff**: 4.1.0
- **SQLint**: 0.2.1
- **Staticcheck**: 2025.1.1
- **SwiftLint**: 0.63.2
- **Tailor**: 0.12.0
- **Trivy**: 0.70.0
- **TSLint**: 6.1.3
- **TSQLLint**: 1.16.0
1 change: 1 addition & 0 deletions docs/release-notes/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -20,6 +20,7 @@ For product updates that are in progress or planned [visit the Codacy public roa
### 2026 {.release-series}


- [Cloud July 2026](cloud/cloud-2026-07.md)
- [Support for Shellcheck configuration file - July, 2026](cloud/cloud-2026-07-adding-shellcheck-config-file.md)
- [Adding PHP CS Fixer and support to Checkov configuration files July, 2026](cloud/cloud-2026-07-adding-phpcsfixer-checkov-config-files.md)
- [PHP_CodeSniffer Upgrade and Legacy Package Deprecations July, 2026](cloud/cloud-2026-07-remove-codesniffer-packages.md)
Expand Down
1 change: 1 addition & 0 deletions mkdocs.yml
Original file line number Diff line number Diff line change
Expand Up @@ -748,6 +748,7 @@ nav:
- release-notes/index.md
- Cloud:
- 2026:
- release-notes/cloud/cloud-2026-07.md
- release-notes/cloud/cloud-2026-07-adding-shellcheck-config-file.md
- release-notes/cloud/cloud-2026-07-adding-phpcsfixer-checkov-config-files.md
- release-notes/cloud/cloud-2026-07-remove-codesniffer-packages.md
Expand Down
Loading