--- url: /changelog/v2026.1.x/patch-releases.md --- # Patch Releases for Teamscale 2026.1 ## Version 2026.1.14 ### Fixes * `teamscale-dev` performed redundant interactions with the operating system's certificate store *** ## Version 2026.1.13 ::: details Security Improvements This version contains security improvements. If possible, please update to at least this version. ::: ### Fixes * False positives for "Naming convention" and "Public class attribute" checks in C/C++ when using `constexpr` pointer variables * ABAP: *Code Compare* view broke with the error "Must insert in ascending order!" in some cases ### Improvements * Security: Updated selected ABAPLint dependencies to mitigate [CVE-2026-25547](https://nvd.nist.gov/vuln/detail/CVE-2026-25547) * Security: Updated Bouncy Castle dependencies to mitigate [CVE-2025-14813](https://nvd.nist.gov/vuln/detail/CVE-2025-14813), [CVE-2026-5598](https://nvd.nist.gov/vuln/detail/CVE-2026-5598), and others * Security: Updated selected Web UI dependencies to mitigate [CVE-2026-23736](https://nvd.nist.gov/vuln/detail/CVE-2026-23736), [CVE-2026-4800](https://nvd.nist.gov/vuln/detail/CVE-2026-4800), [CVE-2025-62718](https://nvd.nist.gov/vuln/detail/CVE-2025-62718), and [CVE-2026-40175](https://nvd.nist.gov/vuln/detail/CVE-2026-40175) *** ## Version 2026.1.12 ### Fixes * C/C++: A random compilation command was chosen per commit for files with multiple commands in different partitions * *Snippet Analysis* view: Macro expansion failed after code changes without refresh *** ## Version 2026.1.11 ::: details Security Improvements This version contains security improvements. If possible, please update to at least this version. ::: ### Fixes * Visual Studio Code plugin: Previously saved server configurations vanished upon IDE restart ### Improvements * Security: Updated dependencies to mitigate [CVE-2026-33228](https://nvd.nist.gov/vuln/detail/CVE-2026-33228) and [CVE-2026-32141](https://nvd.nist.gov/vuln/detail/CVE-2026-32141) *** ## Version 2026.1.10 ::: details Security Improvements This version contains security improvements. If possible, please update to at least this version. ::: ### Fixes * "Metrics Trend Chart" widget used the color of the first selected metric for all grid lines * Stale HTTP connections caused annotations and votes on merge requests in code collaboration platforms to fail * Merge requests deleted in Gitea were not deleted in Teamscale * Security: OpenID Connect configuration options were not validated sufficiently *** ## Version 2026.1.9 ### Fixes * External uploads were not sorted properly in the *External Upload* page * `NullPointerException` during coverage integration in rare cases * Timeout for importing a backup from another instance was too short * False positives for "New exception is created but not thrown" check in Java when using throw in a switch statement * ABAP: Field-symbols were incorrectly interpreted as HTML tags, causing them to be rendered as strikethrough * *Merge Request Details* view showed outdated information when processing squashed or rebased commits * Overlapping enablement of metric and critical change badges between projects was not detected * Simulink: Datatype propagation did not work correctly when a library was included multiple times ### Improvements * Cppcheck: Parsing issues are now logged with precise location information * Improved C/C++/Objective-C/++ scanner performance for some code patterns *** ## Version 2026.1.8 ### Fixes * *Dashboards*: Widgets were broken when creating dashboards from templates * Coverage sources were reset when changing the visibility of a path in a widget title * The "Coverage of Changes" section in the *Merge Request Detail* view considered coverage from previous commits if no coverage data had been uploaded for the head commit * False positives for "Classes should not depend on an excessive number of classes (aka Monster Class) (java:S6539)" check * *Instance Comparison*: File content differences were always shown for Simulink files, even when they were identical * C/C++: Comments after preprocessor directives were not parsed correctly in some cases *** ## Version 2026.1.7 ### Fixes * Webhooks were sent before Teamscale voted * *Dashboard*: Color pickers did not store new colors * False positives for "Null pointer dereference" check in C# when using the null conditional operator in `string.IsNullOrEmpty` * Navigating between the method history view and the code view resulted in a "Bad Request" error * Synchronization of ignore rules from Teamscale to JFrog failed with a "Bad Request" error * *Tasks*: Links to findings did not work in task edit mode * Code scope configuration was imported incorrectly if configuration lines ended with a comma ### Improvements * The "Upload Commit Details" dialog now explains that displayed data covers all partitions when multiple partitions are present *** ## Version 2026.1.6 ### Fixes * False negatives for "Catch of generic exception" check when exceptions were annotated * Cppcheck Premium 25.8.3 Windows binaries reported file paths with Unix-style forward-slash separator * Clang-Tidy findings were missing when Teamscale ran in a Docker environment * SwiftLint: `IllegalArgumentException` when parsing results * Duplicate entries and incorrect role assignments were shown in the *Global Role Assignments* view when users shared multiple groups * Merge request details were not shown in some cases * Simulink: `Datatypes` in `Bus Selector` blocks could not be resolved when `Alias` types were used * Objective-C: Instance method declaration lines were considered coverable in some cases * `NullPointerException` in `ContentIndexSynchronizer` while resolving includes ### Improvements * Improved error handling for backup imports from remote Teamscale instances * Reduced memory consumption when processing many uploads during a backup import *** ## Version 2026.1.5 ### Fixes * Visual Studio Code plugin: Opening a file that was excluded from the Teamscale analysis resulted in an error * `IssueSynchronizers` failed when encountering an invalid link * JavaScript: Clones with template literals were not detected correctly * Page state was lost after confirming the "Do you really want to leave the page?" dialog * Excluded findings were not shown in the *Activity* view for approval commits * During backup import, it was possible to log in with outdated credentials of local users * GitHub Enterprise could not be configured due to a `NullPointerException` * False positives for "Usage of Abs Block" check for Simulink when setting the block parameter "Saturate on integer overflow" ### Improvements * "Hard-coded password" check: Added support for detecting hard-coded secrets *** ## Version 2026.1.4 ### Fixes * Superfluous error logs were shown for Bandit when using code scopes * Stale project options were shown after updating them * *Instance Comparison*: `ClassCastException` when comparing ABAP projects * *Worker Log* did not show the number of errors and warnings * `IssueTrackerSynchronizer` could fail due to a missing scheduling commit * Uploading findings via the `/external-findings` endpoint failed when external storage was enabled * Cleaning up outdated GitHub check runs failed for repository names with uppercase letters * False positives for "Missing virtual destructor" check in C++ for stack-only classes with deleted `new` operators * False positives for "Check usage of unconditional transitions in flow charts Correctness" check for Simulink * False positives for "Check usage of Signal Routing blocks" check for Simulink *** ## Version 2026.1.3 ### Fixes * Kubernetes: Invalid YAML files sometimes led to a `ClassCastException` * Documented configuration for using the Windows trust store did not work for recent JVMs * Groups created by importing teams from GitHub were missing the organization name * Go: Tuple return types were not correctly parsed * External analysis data was not correctly deleted during history analysis * Bitbucket Data Center: Code Insight report status was always `PASSED` and did not match the Teamscale vote status * Post-poned votes were not cleared from the index after a merge request was merged * *Code Compare* view broke with error `Must insert in ascending order!` * AI resolution failed when fixing a finding required adding extra lines of code * Polarion: No specification items were imported when a custom field was defined multiple times * `golangci-lint`: Configured options were not passed correctly * False positives for "Don't use string in Matlab Function Blocks" Simulink check when function calls were used * False positives for "Unauthorized Access Control Object" ABAP check when `#MANDATORY` annotation was used ### Improvements * Improved GitHub connector validation speed for apps having access to a lot of repositories * Renamed "Test Coverage" section in the merge request detail view to "Coverage of Changes" * Improved Maven plugin documentation *** ## Version 2026.1.2 ### Fixes * Postponed rollbacks were not cleared correctly after execution * Selecting an item in a filtered checkbox list selected the wrong item * User selector search box was occluded in the *Role Assignment* view * Data in different external upload paths referencing the same commit were not merged * Archived reports had the wrong file name when downloaded * No findings were shown in the treemap when a code scope was selected * `ClassCastException` in metrics handling for ABAP projects * After external uploads, redundant revision lookups were performed in some cases * Comments in anonymized code were not anonymized correctly * Updates to existing cross-repository pull requests were not processed when no other branch changes occurred * `NullPointerException` in plausibility check during path matching when processing "Testwise Coverage" reports * `EOL` tokens were not fully cleared from the display when switching between token and AST representations * Teamscale comments in Azure DevOps pull requests could not be displayed in Visual Studio *** ## Version 2026.1.1 ### Fixes * *Reports* perspective: Slide previews did not automatically scroll into view when switching slides * *Reports* perspective: Banner on the left side of slides did not expand to the full slide height in Safari * Service to force S3 full scan did not work when feature toggle `com.teamscale.external-storage.disable-user-configuration` was enabled * ABAP code in check descriptions was not highlighted correctly * `DataFlowFindingsSynchronizer` failed for C# when detecting infinite loops inside a lambda * Errors during backup import due to missing check descriptions for "Cppcheck Report Uploads (External)" tool * `NullPointerException` in `InconsistentCloneChangeAlerter` * False negatives for "Annotation in JUnit test class missing" check for Java * "Metrics Trend Chart" widget parameter validation could fail even if at least one color was selected for each metric * Button to add a new dashboard on the *Dashboard* perspective was shown even if no projects existed * GitHub: Periodical sync of GitHub teams to Teamscale group assignments did not work * False positives for ESLint checks ("no-shadow", "no-redeclare", "no-unused-vars") for TypeScript code * Legend colors in trend charts on the *Start* perspective were swapped * Dashboards created from templates were created for the wrong project in some cases * False positives for "Use of enclosing braces, partial array initialization, multiple initialization of array elements" check for C/C++ when using partial array initialization with `{NULL}` or `{nullptr}` * False positives for "Methods should not be defined in a header file" check for C++/Objective-C/++ when using `__inline__` * Trend chart failed to render for the ABAP "Creation Date" metric * Extended code snippets in the *Finding Details* view did not use the available height in some cases * Treemap colors were inconsistent for metrics with a fixed set of values (e.g. languages) when some values were not present in the project * "No testwise coverage" was shown when coverage was actually present in some cases * Jira connector did not accept valid URLs in some cases * False positives for "Switch statements should not contain unexpected constructs" check for C/C++ when all conditional branches had exit statements ### Improvements * Reduced memory consumption in `FindingsTracker` * Improved slow initial trigger execution for huge projects * Polling interval for external storage backends can now be configured with the system flag `com.teamscale.external-storage.polling-interval` * Improved check description for "No call to external form routines" check *** ## Version 2026.1.0 ::: details Bug Fixes * 2026.1.0 contains all fixes from previous versions released on and before January 20th, 2026 * For brevity, only new features are included in the changelog :::