Devzy v2.2.0 Release Notes

This release introduces a Repositories Dashboard for managing all your connected repos, auto-resolve for addressed review threads, AI quality feedback loops for higher quality reviews, and comprehensive security enhancements including webhook verification and rate limiting.

New Features

Repositories Dashboard

A new dedicated screen to view and manage all repositories where Devzy is installed.

Key Capabilities:

• Search repositories by name with instant filtering
• Filter by visibility (public/private)
• Sort by recent activity, name, PRs reviewed, or repository size
• View stats at a glance: PRs reviewed, comments generated, last activity
• Admin controls to sync repositories and add new repositories via source control app integration

Auto-Resolve Addressed Review Threads

Devzy now automatically resolves review threads when you address the feedback.

• When you push a commit that fixes an issue Devzy flagged, the thread is automatically resolved
• Reduces noise and keeps PR conversations focused on unresolved issues
• Works with the iterative review system to track resolution status

Early Review Indicator

Get immediate feedback that Devzy is reviewing your PR.

• 👀 reaction added to the PR immediately when review starts
• Status comment posted showing review is in progress
• Reduces uncertainty while waiting for the full review to complete

AI Quality Feedback Loop

AI-powered validation to improve review quality and reduce false positives.

How It Works:

• Comments are validated against quality criteria before posting
• False positives are automatically dropped
• Severity levels are adjusted when the initial assessment was too harsh/lenient
• Comments can be refined for clarity and actionability

Architect Feedback Loop:

• Specialized validation for architecture-level reviews
• Judge evaluates whether architectural concerns are valid
• Refiner improves the wording and recommendations
• Ensures architectural feedback is actionable and accurate

Test/Mock File Filtering for Security Analysis

Security issues found in test files and mocks are now filtered out.

• Avoids false positives from test fixtures containing mock credentials
• Production security analysis focuses on actual application code
• Reduces noise in security reports

Improvements

Enhanced Webhook Security

• Signature Verification: All GitHub webhooks are now cryptographically verified
• Idempotency Protection: Duplicate webhook deliveries are automatically detected and ignored
• Lease-Based Processing: Prevents race conditions when processing concurrent webhooks

Rate Limiting

• Protection against API abuse with intelligent rate limiting
• Different limits for different endpoint types
• Clear error messages when limits are exceeded

Go Language Support Improvements

• Added symbol extraction support for Go in the grep-based context system
• Better handling of Go structs, interfaces, and method receivers
• Improved code pattern detection for Go projects

Compliance Framework Auto-Toggle

• When you enable/disable a compliance framework, related rules are automatically enabled/disabled
• No more manual toggling of rules after changing framework settings

Notification Settings Improvements

• Redesigned email and chat notification configuration
• Streamlined chat integration connection flow
• Granular event controls and quiet hours settings

Session & Authentication

• Migrated to a stronger session handling framework
• Immediate logout when user account is disabled
• Centralized error handling for disabled accounts across all routes

Dashboard Improvements

• Repository names are now clickable links to GitHub
• Better loading states and error handling
• Improved responsive design

Bug Fixes

• Fixed: Compliance rules not auto-enabling when framework is toggled on
• Fixed: Disabled users could briefly access protected pages due to stale session tokens
• Fixed: Inconsistent redirect behavior when APIs return account disabled errors
• Fixed: Go language test cases not correctly mapping imports and types
• Fixed: Repository sync timeouts for installations with many repos
• Fixed: IP-address mapping edge cases causing confusing log entries

Infrastructure

Graceful Shutdown

• Clean shutdown handling for long-running processes
• Active requests complete before server stops
• Proper cleanup of data connections and background jobs

Error Handling System

• Centralized error handling with consistent response format
• Request ID tracking for debugging
• Sensitive data redaction in error responses

Row Level Security

• Comprehensive row-level access policies for multi-tenant data isolation
• All data queries automatically scoped to the correct installation context
• Enhanced security for shared infrastructure