CHANGELOG.md

layne

1.3.0

Minor Changes

• #46 995fbc9 Thanks @julio-rocketchat! - Ensures that Pi Agent can support different providers and adds docs

• #40 ff4acb6 Thanks @julio-rocketchat! - Adds Pi Agent as an adapter

• #45 2ee9fae Thanks @julio-rocketchat! - Add line range prefix (e.g., [R49-R60]) to GitHub annotation messages for all security scanners

Patch Changes

• #50 6701cd6 Thanks @julio-rocketchat! - Fix duplicate notifications being sent on every scan when exception approvals are active

• #54 3d78f29 Thanks @julio-rocketchat! - Checks if the PR has already been merged and doesn't run Layne

1.2.1

Patch Changes

• #38 eb7d3f6 Thanks @julio-rocketchat! - Cache GitHub team member lookups for 30 minutes to avoid redundant API calls on every exception-approve command.

1.2.0

Minor Changes

• #27 25248cc Thanks @julio-rocketchat! - Adds a new diff_only mode and allows mode to be configured

• #35 23f1b32 Thanks @julio-rocketchat! - Rewrites the codebase from JavaScript to TypeScript for improved type safety and developer experience. No behavioral changes; deployment, configuration schema, and all external interfaces are identical.

• #22 294d984 Thanks @julio-rocketchat! - Adds a new feature that allows exceptions to be approved by specific teams or people

• #29 2427573 Thanks @julio-rocketchat! - Makes timeouts configurable on global and per repo levels

• #34 8a4126f Thanks @julio-rocketchat! - Adds support for warnings for commenter as well as rule names

1.2.0

Minor Changes

• Exception Approvals: Configure specific users or teams who can approve PRs that would otherwise fail the security scan. When an authorized approver approves a PR, Layne automatically re-runs the scan and passes it with a clear audit trail. Features include:
  • Automatic re-run on pull_request_review webhook when authorized approver approves
  • Team membership resolution via GitHub API
  • Approval validation against current commit SHA (new commits invalidate approvals)
  • Configurable exception labels (onException)
  • Always-on notifications for exception usage
  • Full audit trail in check run summary and chat notifications
  • See Exception Approvals documentation

1.1.1

Patch Changes

• #18 3c06f0b Thanks @julio-rocketchat! - Fixes an issue in the Claude adapter that makes it hallucinate code lines when reporting it

1.1.0

Minor Changes

• #15 e000196 Thanks @julio-rocketchat! - Adds support for creating comments in the PRs

• #13 4c19ba0 Thanks @julio-rocketchat! - Adds a new suppressor feature to ignore findings with a "// SECURITY: XYZ" comment

1.0.0

Major Changes

• #6 a11a412 Thanks @julio-rocketchat! - Adds support for workflow jobs alongside workflow runs

• #8 62af89e Thanks @julio-rocketchat! - Fixes a bug in which Layne ends up scanning files that are unrelated to the PR

• #10 cafaf75 Thanks @julio-rocketchat! - Fixes an issue that wouldn't reschedule a Layne scan if there's an existing failed scan

• a88504d Thanks @julio-rocketchat! - Changes the documentation to add security architecture and PR guidelines

• #4 f2de34f Thanks @julio-rocketchat! - Adds a new trigger for Layne: workflow_run

• #2 e0b5410 Thanks @julio-rocketchat! - Adds the Slack notifier and support to Slack notifications via webhooks