chore(deps): bump bc-detect-secrets from 1.5.50 to 1.5.52 Picks up an accuracy fix in AzureStorageKeyDetector: the existing Cosmos DB skip in integrity_regex was case-sensitive and missed Pascal-case identifiers (e.g. CosmosDbConnectionString) as well as bare documents.azure.com endpoints, causing Cosmos DB connection strings to be reported as Azure Storage Account access keys. Upstream fix: bridg…
Bug Fix terraform_json: handle HCL JSON array and single-dict block formats in parser - #7707
Bug Fix terraform_plan: skip resources being removed from state ('forget' action) - #7676
Feature terraform: add CKV_AWS_394 for unconstrained aws_availability_zones data source - #7658
feat(terraform): add CKV_AWS_394 for unconstrained aws_availability_z…
Bug Fix general: honour scope.provider for platform-downloaded custom po… - #7677
Bug Fix terraform: Added current Azure Terraform resources and taggable resources as of hashicorp/azurerm provider version 4.81 - #7652
Bug Fix sca: match CVE suppressions case-insensitively - #7659 sca: match CvesAccounts suppressions on unprefixed account ids - #7660
fix(sca): match CVE suppressions case-insensitively chore(ci): pin pipenv on all python versions chore(ci): pin pipenv and bump danger-check to node 20
Bug Fix kubernetes: Fix K8S suppressions annotations - #7651
Bug Fix sca: correct Windows path handling in image referencer - #7650
bump detect-secrets to 1.5.49
chore(deps): allow aiohttp 3.14.x
Bug Fix terraform: handle null container_properties in aws_batch_job_def… - #7636
Bug Fix kubernetes: CKV_K8S_40 should pass when hostUsers is false - #7580
Feature general: fix github only output for sca - #7598
Bug Fix terraform: prevent crash in S3AllowsAnyPrincipal with unparsed v… - #7581
Feature general: fix danger node version - #7589 Bug Fix general: retry kustomize/helm install to survive transient GitHub failures - #7591 terraform: CKV_AZURE_190 override singular get_expected_value - #7592
change comment to trigger pipeline attempt to fix node version Co-authored-by: Max Amelchenko mamelchenko@paloaltonetworks.com
change comment to trigger pipeline attempt to fix node version Co-authored-by: Max Amelchenko mamelchenko@paloaltonetworks.com
Bug Fix terraform_plan: handle computed log_bucket in CKV_GCP_62 and CKV_GCP_63 - #7582 terraform: pass CKV_GCP_123 when remove_default_node_pool is true - #7575
Feature serverless: disable vars opt out - #7574
no noteworthy changes
Feature general: fix regex to include hyphen - #7566
Bug Fix general: increase domain allow list as it blocks prisma release - #7567 sca: Kustomize and Helm improvements - #7568 terraform: pin security-group module to 5.3.1 in linked-module test - #7570
Feature general: verify ECDSA-P256 signatures on external custom checks before loading - #7556