--- url: /changelog/v2026.5.x/patch-releases.md --- # Patch Releases for Teamscale 2026.5 ## Version 2026.5.16 ::: details Security Improvements This version contains security improvements. If possible, please update to at least this version. ::: ### Fixes * Security: Updated backend and frontend dependencies to remove [CVE-2026-8763](https://nvd.nist.gov/vuln/detail/CVE-2026-8763), [CVE-2026-13506](https://nvd.nist.gov/vuln/detail/CVE-2026-13506), [CVE-2026-104845](https://nvd.nist.gov/vuln/detail/CVE-2026-104845) and [CVE-2026-104846](https://nvd.nist.gov/vuln/detail/CVE-2026-104846) *** ## Version 2026.5.15 ::: details Security Improvements This version contains security improvements. If possible, please update to at least this version. ::: ### Fixes * IntelliJ plugin: "Show Findings in Problems Tab" button was not shown in newer IntelliJ versions ### Improvements * Security: Updated PHP to a version that is no longer affected by [CVE-2026-109618](https://nvd.nist.gov/vuln/detail/cve-2026-109618) and [CVE-2026-109619](https://nvd.nist.gov/vuln/detail/cve-2026-109619) (PHP2Shell). These vulnerabilites were not exploitable in Teamscale *** ## Version 2026.5.14 ::: details Security Improvements This version contains security improvements. If possible, please update to at least this version. ::: ### Fixes * ABAP connector: Newly generated code was not excluded from the analysis ### Improvements * Docker image no longer contains npm *** ## Version 2026.5.13 ### Fixes * S3 connector: Newly created connectors used `1209600` as the default value for the "Max Change Detection Age" option *** ## Version 2026.5.12 ### Fixes * ABAP connector: "Repository Connectivity Status" showed `Now` instead of the actual times of the last successful and last attempted SAP connection ### Improvements * Improved processing of raw testwise coverage reports containing Bullseye coverage *** ## Version 2026.5.11 ### Fixes * C/C++: Substring clone analysis did not work in intra-component mode when a component contained no string literals ### Improvements * Documentation: "Ant pattern" was replaced with "Glob pattern" *** ## Version 2026.5.10 ::: details Security Improvements This version contains security improvements. If possible, please update to at least this version. ::: ### Fixes * *Delta* > *Findings Churn* view: Switching pages did not work * teamscale-dev for Windows included the wrong shell script which was used by Git Bash and failed * Remote findings tracking was disabled too early * IntelliJ Plug-in: "Show Findings in Problem Tab" button was not shown inside the Problems view for newer IntelliJ versions * IntelliJ Plug-in: Findings could not be flagged as tolerations and false positives ### Improvements * Security: Updated selected backend dependencies to remove CVEs: CVE-2026-75595, CVE-2026-55831, CVE-2026-55833, CVE-2026-56745, CVE-2026-56819, CVE-2026-59901 *** ## Version 2026.5.9 ### Fixes * External analysis results uploaded to forked branches could be lost during backup import * `NullPointerException` when the Git webhook was called *** ## Version 2026.5.8 ::: details Security Improvements This version contains security improvements. If possible, please update to at least this version. ::: ### Fixes * Only the testwise coverage of the last upload was considered when uploading multiple reports covering the same test method to the same commit and partition * Rust: `%` and the `mod` keyword were not parsed correctly * Project configuration options were not always shown in the same order * Security: Extracting a manipulated ZIP archive could write files outside the target directory (Zip Slip) *** ## Version 2026.5.7 ### Fixes * Large repositories used a lot of disk space if the Git garbage collection repeatedly timed out * Git LFS files could not be downloaded from Azure DevOps * *Admin* > *Settings*: Saving the settings deleted the configured default storage backend for external analysis reports ### Improvements * C/C++: Repeated findings of the "Avoid using Double-Precision Math Functions" check on the same line are now aggregated into a single finding *** ## Version 2026.5.6 ### Fixes * IntelliJ, Eclipse, teamscale-dev and VS Code plugins: HTTP(S) redirects from the server were not followed * `OutOfMemoryError` during remote findings tracking * *Instance Comparison*: False positives for the language metric * *Report Editor*: Deleting a callout from a slide deleted the whole slide in some cases * Kubernetes: Helm charts from unrelated directories were mixed up * Cppcheck Premium: Analysis did not work when the license was configured as an environment variable *** ## Version 2026.5.5 ### Fixes * False positives for "Avoid unused private methods" check in Java for `@MethodSource` factory methods * Empty Python methods containing only `pass` or `...` statements were not considered trivial and were not excluded from Test Gap Analysis * False positives for "Authority Check for Business Objects" check in ABAP for abstract classes and interfaces * "Language Version" trend chart for ABAP had inconsistent coloring ### Improvements * Improved performance of `ExternalAnalysisUploadsChangeRetriever` * C#: More precise conditional nullability checks *** ## Version 2026.5.4 ### Fixes * *Changed Based Test Suggestions view*: Log entries in the time picker were sorted from oldest to newest * Ctrl/Cmd-clicking an entry in the project, branch, or dashboard chooser to open it in a new tab also navigated the current tab * *Test Gaps* prioritization yielded zero scores for all methods when using architecture paths * External Storage: Copying a project with the "Share external storage data" option enabled did not share the data on Teamscale Cloud instances * Excluded findings could not be removed from the exclusions in the *Merge Request Details* view * Adding a finding to a task from the *Merge Request Details* view used the wrong branch for the finding * `NullPointerException` when exporting an IDE configuration file (`.teamscale.toml`) for a repository with the *Prepend repository identifier* connector option enabled ### Improvements * Improved rate limiting for Git repository connections *** ## Version 2026.5.3 ### Fixes * *Test Gaps*: The "Churn" column was incorrectly affected by the "Hide unchanged methods from Test Gaps" toggle * Fatal errors in `TestHistorySynchronizer` in rare cases * False positives for "Unused variable or parameter" check in C++ for parenthesized `requires` clauses of templates * PowerShell: Files using Windows line endings were not parsed correctly * Merge request information was outdated after a major update when using a staging or shadow instance * Updating project properties via the REST API broke the project configuration *** ## Version 2026.5.2 ### Fixes * ABAP: Code Inspector findings detail view did not load when the SAP system responded too slowly * `StackOverflowError` during backup migration in some cases * Rust: `macro_rules!` invocations with a multi-parameter closure argument were not expanded * Flickering message "No activated SAP ABAP system connection found" in the analysis profile editor * Single metric trend chart showed a bent trend line instead of a stepped one in some cases * JavaScript errors occurred in Chrome due to the usage of `unload` * Eclipse, IntelliJ, and VS Code plugins and `teamscale-dev`: Pre-commit analysis transformed `+` signs in file names into spaces * Pre-commit analysis got stuck when a commit had a timestamp in the future, for example due to a misconfigured system clock * *Dashboards*: A metrics table became unusable when its selected threshold configuration was deleted * Backup import from a remote instance was retried even for non-retryable error codes * Importing incremental backups triggered rollbacks ### Improvements * Improved performance of `ArchitectureUploadService` for projects with many branches and architectures * Improved performance when moving widgets on large *Dashboards* *** ## Version 2026.5.1 ::: details Security Improvements This version contains security improvements. If possible, please update to at least this version. ::: ### Fixes * External uploads were not migrated correctly during backup import in rare cases * Links from the commit details view to *Custom Artifacts* were broken * IntelliJ plugin: Marking findings as false positives reported that the configured server was unreachable * *Dashboard*: "Pie Chart" widgets with legends did not scale well to small sizes * Administrators could not delete the pre-commit branches of other users * Bitbucket Cloud: Voting added a new Teamscale badge instead of updating the existing one * *Reports*: New slides did not render or save when the report's date range fell outside the project's available history * ABAP connection status was not reported in Prometheus metrics * Pre-commit analysis failed when a pre-commit branch was deleted during an ongoing analysis * *Change-Based Test Suggestions*: The frequency of terms in tests was not taken into account * Spec item connectors stopped retrieving changes after tolerating a spec item finding * C++: *Last Change Date* showed the date of a header change for unmodified files ### Improvements * New feature toggle (`com.teamscale.external-uploads.skip-commit-resolution`) to disable revision lookup when uploading to external storage backends * Improved performance of `TestExecutionMerger` * Security: Updated frontend dependencies to mitigate [CVE-2026-42044](https://nvd.nist.gov/vuln/detail/CVE-2026-42044) and [CVE-2026-42264](https://nvd.nist.gov/vuln/detail/CVE-2026-42264) *** ## Version 2026.5.0 ::: details Bug Fixes * 2026.5.0 contains all fixes from previous versions released on and before July 14th, 2026 * For brevity, only new features are included in the changelog :::