Skip to content

Cloud July 2026#

These release notes are for the Codacy Cloud updates during July 2026.

📢 Visit the Codacy roadmap and let us know your feedback on both new and planned product updates!

Features#

  • Folder-Level Metrics: Users can now browse their repositories by folder and view quality metrics-issues, complexity, coverage, and duplication - scoped to each directory. Folder navigation, search, and branch-keyed overviews are all included. (OD-179, OD-180, OD-181, OD-183, OD-264)

  • Affected Functions in Security Findings: Security dependency findings now surface the affected entrypoint functions, so teams can immediately see which code paths are reachable from a vulnerable dependency. The functions are visible in the Findings card, in the cloud CLI findings command, and in the public API. (OD-295, OD-296, OD-297, OD-403)

  • Pull Requests Page Filter Bar: A new filter bar on the Pull Requests page lets users search pull requests by title and switch between all target branches or the current branch only. (OD-374, OD-376)

  • PHP CS Fixer is live: We've added a new tool for our PHP users, called PHP CS Fixer, a popular tool that fixes your PHP code to follow standard coding style rules. Read more about this here

Improvements#

  • Complexity Metrics Restored: Fixed missing complexity metrics from the repository overview and repository list pages. (OD-155)

  • PR Notification Unsubscribe Links Fixed: Unsubscribe links in PR notification emails were returning 404 errors; this has been resolved. (OD-232)

  • Blank Screen in Advanced Coding Standard Setup: Fixed a blank screen that could appear during the Advanced Coding Standard setup flow. (OD-261)

  • Shellcheck Configuration File Support: Shellcheck now respects configuration files present in the repository. Read more about this here (TCE-1463)

  • CodeSniffer Updated to v4: CodeSniffer has been updated to support PHP CodeSniffer v4. Read more about this here (TCE-1540)

  • Trivy Ignore List Now Respected in CI/CD: Fixed an issue where the Trivy ignore list wasn't being applied during Codacy CI/CD pipeline runs. (TCE-1550)

  • Checkov Config File Option: Added support for passing a config file to Checkov. (TCE-397)

  • Prospector Conflicting Rules Resolved: Disabled the mutually exclusive Prospector rules D203 and D211 to prevent false-positive noise. (TCE-1568)

  • Cppcheck Spurious Include Warnings Suppressed: Suppressed irrelevant "include" warnings from Cppcheck that were generating noise in results. (TCE-1012)

Tool versions#

  • Codacy has a new tool called PHP CS Fixer with the version 3.95.15
  • Bandit has a new version: 1.9.4 (updated from 1.8.3)
  • Checkov has a new version: 3.3.8 (updated from 3.2.508)
  • Checkstyle has a new version: 13.9.0 (updated from 10.26.1)
  • PHP CodeSniffer has a new version: 4.0.1 (updated from 3.10.1)
  • Cppcheck has a new version: 2.21.0 (updated from 2.18.0)
  • ESLint v9 has a new version: 9.39.5 (updated from 9.39.4)
  • Lizard has a new version: 1.23.0 (updated from 1.22.2)
  • Opengrep has a new version: 1.26.0 (updated from 1.21.0)
  • RuboCop has a new version: 1.88.2 (updated from 1.80.2)
  • Stylelint has a new version: 17.13.0 (updated from 16.23.0)
  • AgentLinter: 0.3.3
  • aligncheck: 1.0.0
  • Ameba: 1.6.4
  • Biome: 2.4.10
  • Brakeman: 4.3.1
  • Bundler Audit: 0.9.1
  • clang-tidy: 10.0.1
  • CodeNarc: 3.6.0
  • CoffeeLint: 5.2.11
  • Credo: 1.7.12
  • CSSLint: 1.0.5
  • Dart Analyzer: 3.9.3
  • deadcode: 1.0.0
  • Detekt: 1.23.8
  • Faux Pas: 1.7.2
  • Flawfinder: 2.0.19
  • golangci-lint: 2.7.2
  • Gosec: 2.22.7
  • Hadolint: 2.12.0
  • Jackson Linter: 2.19.2
  • JSHint: 2.13.6
  • markdownlint: 0.40.0
  • PHP Mess Detector: 2.14.1
  • PMD v7: 7.16.0
  • Prospector: 1.18.0
  • PSScriptAnalyzer: 1.24.0
  • Pylint: 4.0.5
  • Reek: 6.5.0
  • remark-lint: 10.0.1
  • Revive: 1.12.0
  • Roslyn: 1.23.0
  • Ruff: 0.12.7
  • Scalameta: 4.0.0
  • ScalaStyle: 1.5.1
  • ShellCheck: 0.10.0
  • SonarC#: 9.32
  • SonarVB: 8.13
  • Spectral: 1.22.0
  • SpotBugs: 4.8.4
  • SQLFluff: 4.1.0
  • SQLint: 0.2.1
  • Staticcheck: 2025.1.1
  • SwiftLint: 0.63.2
  • Tailor: 0.12.0
  • Trivy: 0.70.0
  • TSLint: 6.1.3
  • TSQLLint: 1.16.0

Was this page helpful?

Your feedback helps us improve the documentation.

Edit this page on GitHub Contact support