Devzy v2.16.0 Release Notes

This release brings a refreshed dashboard to help you see repository coverage, review activity, and findings in one place. It also compares findings across scans, improves GitLab reviews and scans, and adds broader workflow security checks.

New Features

Refreshed dashboard

• See what needs attention: grouped actions highlight critical findings, failed scans, and gaps in repository coverage.
• Explore repository coverage: filter and sort repositories by scan status, risk, severity, or last scan.
• Review activity and findings: dedicated views bring together code review activity, security findings, and compliance results.

Compare findings across scans

Security and compliance reports can now compare findings with a previous completed scan of the same repository and branch, helping you understand what changed between scans. Security scans are compared with security scans, and compliance scans with compliance scans.

When fix verification is available, Devzy checks the changed code before marking a finding that no longer appears as fixed. If a previous scan cannot be used for comparison, the scan still completes and the report indicates that no comparison is available.

GitLab repository settings checks

Compliance scans can now assess repository settings on GitLab, including branch protection and review requirements. This works with GitLab.com and self-managed GitLab; settings that cannot be read because of permissions or plan limits are marked as not assessed.

Broader workflow security checks

Security scans now include additional checks for risks in repository automation and build workflows. Updated analysis tools also improve coverage for code, dependencies, and exposed secrets.

Improvements

More reliable GitLab reviews and scans

GitLab reviews can use full repository context and more reliably identify the changes being reviewed. Reviews now respect the configured limit on review rounds and avoid unnecessary reruns when only approvals or existing comments change.

Connecting a GitLab project also sets up eligible trial access and sends the trial welcome email, helping new teams start reviews and scans.

Clearer scan results

Dashboard finding counts and severity breakdowns more closely match the report, and findings ruled out during analysis are excluded. Compliance charts group results by category, while scan durations reflect the full time taken to complete the scan.

More complete Bitbucket activity

Bitbucket pull request reviews now contribute to dashboard activity totals. Notifications and activity show the author's name instead of an account identifier.

Bug Fixes

• Fixed: Opening a fix in Codex from security and compliance reports could fail.
• Fixed: Review notification links could open the wrong changed-files page for GitLab or Bitbucket.
• Fixed: Special characters in author names could display incorrectly in review notifications.
• Fixed: Bitbucket review and test commands could run on pull requests that were already merged or declined.
• Fixed: Bitbucket merge and close handling could fail after a source branch was deleted.

Infrastructure

• Security and maintenance updates to bundled dependencies.