Skip to main content

Release Notes 7.5.16

Improvements

A usage data document describing the events and properties CodeScene can send, and which values are anonymized, is now published for each release at `https://downloads.codescene.io/enterprise/<version>/usage-data.html` (JSON Schema: `usage-data.json`).

Group SSH keys are now generated as 4096-bit RSA instead of 2048-bit, so a single key works with both GitHub (which now rejects shorter RSA keys) and Azure DevOps.

CLI CodeHealth review, check and delta commands support multiple files as input

The REST API `/files` endpoint is now much faster: the file list is precomputed during analysis, so it is available after the first analysis run with this version.

Fixed

Parallel code coverage uploads for the same repository no longer fail with Invalid upload id. Starting a new upload used to cancel one still in progress. Now only requests older than an hour are cleaned up.

Fixed issue with Code Coverage exclusion filters not resolving properly in the project view, and had different behavior than the PR Code Coverage Gate. They are now both aligned.

Fixed GitHub webhook timing issues for Code Coverage Gate

Correct coverage matching of components in monorepos. CLI based cs-coverage upload and check now attribute coverage to the correct file in monorepos where several components contain a file with the same relative path, for example src/lib/thing.ts. The directory of the coverage report now decides which component a path belongs to, so keep each coverage report inside its component's directory.

When using the wildcard **/ or */ prefixes in a exclusion pattern, which marks it as a filter for all repositories in the project, it will now resolve the full pattern on all repositories. Before, it stripped the prefix, as it does with repo-specific patterns, and resolved the rest.

Improved performance editing user access mapping

In the system maps (hotspots, individuals, etc.), the file search now supports glob patterns that can match complete paths, allowing more finely-tuned searches. The glob patterns reflect the patterns used in CodeScene's configuration UI. For example, a pattern like **/test/** could be used to narrow the system map view to all test directories across an entire project, even if they are in separate repositories.

Pull request checks could fail with "failed due to an internal error" when several pull requests in the same repository were analyzed at the same time. CodeScene now waits for the other repository update to finish and tries again, so the checks complete as normal.

Section header icons on the analysis dashboard were displayed at the wrong size in Safari.

Updated DOMPurity dependency (CVE-2026-109345)

Upgrade Jackson to 2.22.4, jsoup to 1.23.2 and asm to 9.11.1 (CVE-2026-110879, CVE-2026-106554, CVE-2026-104895, CVE-2026-71497, CVE-2026-75140, CVE-2026-110257 to CVE-2026-110263)

Downloads

Docker Container

JAR