Changelog

Overhauled the custom rule YAML format with a cleaner schema, support for rule groups, severity levels (error/warning/info), and per-path rule scoping. Existing v1 rules continue to work via auto-migration.

Diff parsing on repos with 50k+ files reduced by 40%. PRCheck now uses incremental AST caching keyed on file hash, so unchanged files are not re-parsed on each scan.

Teams can now configure a Slack webhook to receive a summary when PRCheck completes a scan. The summary includes finding count by severity, review status, and a direct link to the PR.

Updated security pattern library to OWASP Top 10 2025 edition. Adds coverage for insecure deserialization, SSRF patterns, and path traversal in dynamic file operations. Existing HIGH findings may gain additional context notes.

GitLab integration exits beta and reaches general availability. Supports MR inline comments, approval rules, and CI/CD pipeline integration. Available to all Team and Business plan customers.

Core AST diff engine updated to handle TypeScript 5.x generics, Python 3.12 structural pattern matching, and Go 1.22 range-over-integer syntax. Edge cases in async generator analysis are resolved.

Business plan customers can now configure SAML 2.0 SSO and role-based access control. Roles: Admin, Manager, Developer. Audit log export (CSV and JSON) is also available from the dashboard.

Bitbucket Cloud integration enters public beta. Webhook-based PR decoration with inline comment support. Available to Team plan customers. Known limitation: Bitbucket Data Center not yet supported.

Reduced false positives in Go concurrent access detection by 30%. The engine now correctly understands channel-based synchronization patterns and mutex usage, reducing noise for teams with high goroutine usage.

Custom rule IDs must now be lowercase-kebab-case (e.g. no-console-log). Existing rules with uppercase or underscore IDs will emit a deprecation warning until v1.9.0 when they will stop loading. Migration: rename rule IDs in your .prccheck/rules.yml.