Open Code Review: baixar versions anteriors

🐛 Bug Fixes
- fix(tool): report an empty code_comment batch instead of success (#1773)
- fix(mcp): follow tools/list pagination when caching server tools (#1770)
- fix(ci): prevent PR policy checkout state pollution (#1783)
Other Changes
- include pkgs/ as a provider directory for NixPkgs (#1642)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.13.2...v1.13.3

🚀 Features
- feat(allowlist): add Shader Languages support (#975)
- feat(language): support for Nushell language (#956)
- feat(rules): add PowerShell review support (#970)
🐛 Bug Fixes
- fix(scan): resolve --path like the filesystem and reject nonexistent paths (#1709)
📖 Documentation
- docs(contributing): update directory structure and descriptions across multiple languages (#1729)
- docs(contributing): refresh Project Structure and add chatgptauth (#1721)
Other Changes
- ci: enforce PR commit policy (#1775)
- terraform: adding .tofu extension used by opentofu (#1464)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.13.1...v1.13.2

🐛 Bug Fixes
- fix(config): fix bad config for providers or keys that cotains dots (self-defined) (#1661)
- fix(scan): surface llmloop token-budget stop on the run-level state (#1745)
- fix(frontend): update vulnerable development dependencies (#1751)
- fix(llmloop): count a grace-round task_done as completion (#1678)
- fix(vscode): update vulnerable development dependencies (#1746)
Other Changes
- chore(deps): bump google.golang.org/grpc to v1.83.2 (#1205)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.13.0...v1.13.1

🚀 Features
- feat(auth): enable ChatGPT plan reviews through public Responses (#1622)
- feat(acp): support ACP service for OpenCodeReview (#1218)
🐛 Bug Fixes
- fix: follow up ChatGPT auth recovery and provider credentials (#1622) (#1718)
- fix(scan): record rendered prompt overflow as a failed review (#1652)
- fix(agent): make deleted files readable through file_read_diff (#1698)
- fix(agent): list deleted files under their own path in the change list (#1680)
- fix(opencode): preserve OCR output on Windows (#1606)
📖 Documentation
- docs(delegate): prevent pager hangs; ci: upgrade Go and x/net (#1062)
Other Changes
- ci(release): publish to npm via trusted publishing (#1732)
- test(allowlist): catch an extension disappearing from the allowlist (#1626)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.12.13...v1.13.0

🐛 Bug Fixes
- fix(scan): treat "." as the repository root and convert separators first (#1598)
- fix(readme): use a proxy-friendly DeepWiki badge (#1673)
- fix(llm): clarify independent timeouts and deadline diagnostics (#1159)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.12.12...v1.12.13

🐛 Bug Fixes
- fix(llm): allow unlisted OpenRouter model overrides (#1610)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.12.11...v1.12.12

🚀 Features
- feat(allowlist): add Jinja template support (#1056)
🐛 Bug Fixes
- fix(idea): list merge commit files against the first parent (#1544)
- fix(make): append .exe to the dev binary on Windows (#1573)
- fix(extensions): generate provider catalogs from Go registry (#1212)
- fix(viewer): restore Files Reviewed pagination by guarding hidden rows (#1576)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.12.10...v1.12.11

🚀 Features
- feat(llm): exercise a tool-call round trip in ocr llm test (#1394)
- feat(llm): add OpenRouter to list of providers (#1522)
- feat(session): add 'ocr session rm' to delete a saved session (#1490)
🐛 Bug Fixes
- fix(llmloop): account for tool_calls and arguments in messageTokens (#1413)
- fix(llm): trim environment-sourced endpoint values (#1414)
- fix(tool): keep non-ASCII paths literal in file_find results (#1530)
- fix(opencode): handle long background context (#1010)
- fix(action): allow checkpoints after out-of-diff findings (#1524)
- fix(config): remove OCR_CONFIG_PATH (#1537)
- fix(llm): replay tool_call extra_content and surface provider error bodies (#1393)
📖 Documentation
- docs(cli-reference): list the manifest status values in the status field (#1587)
- docs(readme): replace Go weekly badge with all-language weekly badge (#1559)
- docs(review-rules): document merge_system_rule in all five locales (#1555)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.12.9...v1.12.10

🐛 Bug Fixes
- fix(session): preserve findings across file renames (#1529)
- fix(config): preserve unknown JSON fields during config updates (#1508)
- fix(review): keep git stderr out of --commit background (#1467)
- fix(ci): pin workflow action references to full commit SHAs (#856)
- fix(viewer): wrap long session metadata on mobile (#1458)
📖 Documentation
- docs(agents): add guideline to comment sparingly and explain why (#1534)
Other Changes
- security: validate credential commands and expand .gitattributes binary markers (#1291)
- Fix/gitlab multiline comments and suggestions (#1000)
- test: stabilize token boundary fixtures (#1015)
- test(diff): guard quoted-path parsing through a real git subprocess (#1516)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.12.8...v1.12.9

🚀 Features
- feat(rules): add F# review support (#1448)
🐛 Bug Fixes
- fix(config): exclude dependency and build-output directories by default (#1499)
- fix(viewer): keep vertical mouse-wheel working over scroll regions (#1515)
- fix(action): honor an explicit llm_protocol instead of forcing openai or anthropic (#1192)
- fix(diff): parse git's quoted pathnames instead of dropping the file (#1498)
- fix(scan): keep NUL-delimited pathnames from git ls-files intact (#1497)
- fix(viewer): shorten the session id cell on the session list (#1488)
- fix(viewer): responsive, accessibility and contrast polish across the four screens (#1426)
- fix(tool): keep non-ASCII paths literal in code_search results (#1425)
📖 Documentation
- docs(assurance): correct API key storage claims (#1449)
- docs(extensions): new translations for vscode ext (#1381)
- docs(review): synchronize exclude & secret patterns (#1491)
Other Changes
- perf(viewer): paginate large review result lists (#1460)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.12.7...v1.12.8

🚀 Features
- feat(viewer): export a session to a self-contained HTML file (#1167) (#1174)
🐛 Bug Fixes
- fix(allowlist): exclude pytest-style test_*.py from review (#1439)
Other Changes
- chore: drop the last TEMPORARY english-only exemption (#1445)
- chore(idea): translate the Chinese comments in services/ (#1436)
- chore(idea): translate tests and narrow language exemptions (#1429)
- chore(vscode): translate comments and test names to English (#1427)
- chore(idea): translate provider and host string comments (#1428)
- chore: translations (#1437)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.12.6...v1.12.7

🚀 Features
- feat(viewer): restyle the review comments section (#1387)
- feat(viewer): restyle session detail header and meta bar (#1384)
- feat(viewer): restyle the sessions list page (#1377)
- feat(viewer): restyle the repositories page (#1382)
🐛 Bug Fixes
- fix(test): add TestMain to isolate session writes from real HOME (#1416)
- fix(npm): hide the updater's console window on Windows (#1406)
- fix(viewer): make --surface white to match the mockup backgrounds (#1404)
🔧 Refactoring
- refactor(viewer): dedupe shared viewer chrome (pager + back-link) (#1400)
Other Changes
- chore(idea): rename the Marketplace listing and set version 0.1.0 (#1438)
- chore: clear non-code blockers ahead of the english-only cleanup (#1417)
- Feat/idea plugin (#1031)
- chore: extend license and english-only gates to kt, py and css (#1407)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.12.5...v1.12.6

🚀 Features
- feat(viewer): restyle session detail sections (#1358)
- feat(action): opt-in resolution of the bot's own outdated review threads (#567) (#944)
- feat(viewer): integrate a shared SVG icon set (#1367)
- feat(viewer): align design-token values to the mockup palette (#1365)
- feat(plugin): add kimi code plugin (#1355)
- feat(pages): standardize web crawler policy (#939)
- feat(viewer): restyle the session compare page (#1328) (#1331)
- feat(viewer): restyle Coverage and Token Usage cards (#1346)
- feat(viewer): add shared design foundation (#1338)
- feat(viewer): align suggested change indentation with existing code gutter (#1313) (#1315)
🐛 Bug Fixes
- fix(agent): enforce --max-tokens-budget inside a running group (#1248)
- fix: dedupe overlapping incremental review comments (#1359)
- fix(install): add download timeout to asset fetch in install.sh (#1292)
- fix(tool): enforce the global code search result limit (#1306)
- fix(session): tolerate truncated resume tail (#1312)
- fix(diff): strip trailing CR from CRLF diff text (#1302)
📖 Documentation
- docs(skill): skip ocr install pre-check on the common path (#1356)
- docs(telemetry): document existing LLM and tool spans (#1348)
Other Changes
- chore(pages): remove MacPorts install channel (#1334)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.12.4...v1.12.5

🚀 Features
- feat(action): add optional pr_number input and workflow_run fallback (#1156)
🐛 Bug Fixes
- fix(diff): flag untracked binary files as binary in workspace mode (#1288)
Other Changes
- perf(diff): skip oversized untracked files before reading (#1310)
- test(action): satisfy resolved_head contract in workflow_run pr_number test (#1309)
- test(diff): cover gitignore-drop interleaved with provider-exclude (#1300)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.12.3...v1.12.4

🚀 Features
- feat(allowlist): protect per-environment .env files (#1279)
- feat(allowlist): exclude secret paths from review (#1262)
🐛 Bug Fixes
- fix: recover tool-call JSON with trailing content and back off repeated failures (#1278)
- fix(tool): prevent path traversal bypass and normalize paths in code_search and code_comment (#1089)
- fix(preview): collapse provider-directory rows and keep changeset order (#1242)
📖 Documentation
- docs: use subtask instead of file/file-group in user-facing docs (#1277)
- docs(readme): add monthly Trendshift badge and improve layout (#1267)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.12.2...v1.12.3

🚀 Features
- feat(viewer): add back navigation to improve page traversal UX (#1217)
- feat(opencode): add backgroundFile input and report termination signals (#1234)
🐛 Bug Fixes
- fix(suggestdiff): preserve case and indentation changes (#1256)
- fix(preview): scope preview totals to the tracked changeset (#1241)
- fix(template): remove unused scan settings (#1261)
- fix(cli): flush telemetry before error exit (#1259)
📖 Documentation
- docs: tidy repo root and refresh screenshots; fix highlights label alignment (#1260)
- docs(architecture): remove incorrect provider_directory entry from whyExcluded list (#1238)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.12.1...v1.12.2

🚀 Features
- feat(git): validate if PATH git version is safe git (#865)
🐛 Bug Fixes
- fix(rules): route Python stub files to the Python review rules (#1232)
- fix(preview): show provider-excluded diffs (#1223)
- fix(opencode): support OpenCode 2.x via native tools and commands (#1213)
- fix(skill): align review skill with current CLI semantics (#1225)
- fix(llm): install the embedded BPE loader from package init (#1228)
- fix(actions): post findings against the reviewed commit (#1230)
Other Changes
- chore: remove stale alias pointing to deepseek-flash (#1219)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.12.0...v1.12.1

Other Changes
- perf(grouping): return file indices instead of paths (#1209)
- chore: synchronize glm-5.3 to from z-ai coding plan to z ai api (#923)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.11.9...v1.12.0

🚀 Features
- feat(viewer): add session compare page (#1175)
🐛 Bug Fixes
- fix(llm): add deepseek-flash model (#1210)
- fix(agent): make --preview apply the same selection the review applies (#801)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.11.8...v1.11.9

🚀 Features
- feat(rules): add Rego policy review support (#1199)
🐛 Bug Fixes
- fix(llm): request stream usage by default with extra_body override (#822)
- fix(scan): align preview selection with execution (#1041)
📖 Documentation
- docs: enforce responsible AI usage (#1037)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.11.7...v1.11.8

🐛 Bug Fixes
- fix(output): write reports atomically (#1160)
- fix(mcp): bound the MCP shutdown phase (#1183)
- fix(review): exit immediately on the second signal (#1185)
- fix(config): support timeout_sec in config set (#1179)
📖 Documentation
- docs(skill): prefer --output flag over shell redirection (#1097)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.11.6...v1.11.7

🚀 Features
- feat(allowlist): add OCaml/ReasonML language support (#942) (#951)
- feat(action): first-class review controls (effort, max_tokens_budget, llm_reasoning_effort) and live progress (#1154)
- feat(viewer): number the lines inside the Existing Code block (#1172) (#1180)
🐛 Bug Fixes
- fix(launcher): forward SIGINT/SIGTERM signals to child process (#1145)
- fix(rules): route Kotlin script files to Kotlin review rules (#1091)
📖 Documentation
- docs(pages): correct FAQ JSON output shape and plan-threshold cost lever (#1190)
- docs(pages): correct the developer guide to match the actual project (#1182)
Other Changes
- Honor timeout_sec for openai-go's ResponseHeaderTimeout (#1161) (#1162)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.11.5...v1.11.6

🚀 Features
- feat(viewer): mark comments as fixed/ignored and hide them (#1101)
🐛 Bug Fixes
- fix(deps): bump grpc, fast-uri and browserslist to patch high-severity advisories (#1169)
🔧 Refactoring
- refactor: retire per-file naming left over from grouped review (#1168)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.11.4...v1.11.5

🚀 Features
- feat(tool): include arguments in failure details (#1152)
🐛 Bug Fixes
- fix(rules): route Objective-C++ files to Objective-C rules (#1166)
- fix(tool): repair serialized code_comment arguments instead of losing the batch (#1153)
Other Changes
- Keep repeated documentation headings independently addressable (#1151)
- ci: add plugin distribution contract guardrails (#1117)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.11.3...v1.11.4

🚀 Features
- feat(raw): capture raw LLM traffic via SDK middleware (opt-in) (#1109)
🐛 Bug Fixes
- fix(tool): report tool call failures (#1144)
- fix(diff): propagate untracked file listing errors (#1140)
- fix(review): handle SIGTERM for graceful shutdown (#1111)
Other Changes
- chore(deps-dev): bump the vscode-dependencies group (#1129)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.11.2...v1.11.3

🚀 Features
- feat(cmd, viewer): open viewer URL in default browser (#1108)
🐛 Bug Fixes
- fix(rules): route .cxx and .hxx files to C++ rules (#1123)
- fix(rules): route JavaScript module files to JS rules (#1122)
📖 Documentation
- docs(mcp): document remote setup with Parallel Search example (#1107)
- docs(zh-CN): improve branch range wording (#1124)
Other Changes
- build: keep node_modules out of the Go package list via a module boundary (#1125)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.11.1...v1.11.2

🚀 Features
- feat(allowlist): add Pug template support (#1114)
- feat(grouping): skip the grouping LLM call for small change sets (#1103)
- feat(allowlist): add Verilog, SystemVerilog, and VHDL support (#1050)
🐛 Bug Fixes
- fix(security): prevent rule.json from reading arbitrary files on the review host (#1100)
- fix(viewer): report selected files from run manifest (#1096)
📖 Documentation
- docs(site): replace concurrency feature card with effort (#1116)
- docs(skill): correct timeout description to reflect effort-scaled group timeout (#1110)
Other Changes
- chore(skill): remove Prerequisites section from delegate SKILL.md (#1098)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.11.0...v1.11.1

🚀 Features
- feat(allowlist): add Handlebars and Mustache support (#1086)
- feat(config): validate provider existence before auxiliary fields (#1093)
- feat(agent): include churn stats (+N/-M) in the other-changed-files list (#1078) (#1082)
🐛 Bug Fixes
- fix(llm): preserve provider reasoning/thinking across assistant turns (#1070)
- fix(agent): scale subtask timeout linearly with effort review rounds (#1085)
- fix(filter): omit forced tool choice (#1065)
- fix(tool): support subpath and cross-platform queries in file_find (#1075)
📖 Documentation
- docs(ko): polish the six new Korean pages (#1087)
- docs(ko): complete the Korean docs locale (#1084)
- docs(ko): add Korean translation for the core user guide (#1080)
- docs(cli): align --max-tools help text with min 50 clamp (#1077)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.10.2...v1.11.0

🚀 Features
- feat(session): register GroupingTask as a tracked TaskType (#1067)
- feat(rules): add Solidity and Vyper review rules (#961)
- feat(action): opt-in completeness-gated checkpoint ranges (#476) (#945)
- feat(session): compare findings across two review sessions (#922) (#946)
🐛 Bug Fixes
- fix: record grace round requests (#1066)
📖 Documentation
- docs(ko): add Korean translation for integration guides (#1072)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.10.1...v1.10.2

🚀 Features
- feat(rules): add Objective-C-specific review rules (#1061)
- feat(allowlist): add matlab support (#574)
- feat(rules): add project review rule for providers.go (#1057)
🐛 Bug Fixes
- fix(llm): bound session task key length (#1009)
- fix(skill): handle delegate CLI version skew and background limits (#1047)
- fix(action): forward review timeout and complete LLM config (#1051)
- fix(llm): serve GPT-5.6 models via the OpenAI Responses API (#559) (#938)
- fix(cli): exit 128+signo when the native binary is killed by a signal (#1054)
📖 Documentation
- docs(ko): add Korean translation for getting-started pages (#993)
Other Changes
- ci(workflows): run the contract suite in a dedicated workflow (#1058)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.10.0...v1.10.1

🚀 Features
- feat(agent): group semantically related files for multi-file review (#808)
- feat(cli): add --output flag to write review/scan results to a file (#852)
🐛 Bug Fixes
- fix(diff): surface git's own message when a diff command fails (#1039)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.9.10...v1.10.0

🚀 Features
- feat(cli): clarify LLM request failures by review stage (#1022)
🐛 Bug Fixes
- fix(scan): join background memory compression before session finalization (#1026)
- fix(scan): persist safe dedup checkpoints on resume (#1035)
- fix(vscode): list merge commit files (#1029)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.9.9...v1.9.10

🐛 Bug Fixes
- fix(agent): name the main-loop stop trigger in item failure reasons (#855)
🔧 Refactoring
- refactor(background): treat --background and --background-file as mutually exclusive with file precedence (#1016)
Other Changes
- test(llm): cover tool_choice mapping for all three provider protocols (#1011)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.9.8...v1.9.9

🚀 Features
- feat(providers): add AWS Bedrock as a built-in provider with native SigV4 auth (#705)
🐛 Bug Fixes
- fix(cmd): suppress ANSI color when stdout is not a TTY (#927)
- fix(cmd): stream review progress to stderr for json and sarif (#929)
🔧 Refactoring
- refactor(skill): simplify review flow, use native severity (#1002)
Other Changes
- chore(examples): add explicit --audience agent to codeup_ci and action.yml (#1004)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.9.7...v1.9.8

🚀 Features
- feat(installation): support asset download via OCR_GITHUB_MIRROR (#893)
- feat(providers): add gemini to built-in providers (#930)
Other Changes
- chore(deps): bump the go-dependencies group across 1 directory with 18 updates (#880)
- chore(ci): change dependabot schedule from weekly to monthly (#998)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.9.6...v1.9.7

🚀 Features
- feat(language): add support for .ipynb files (#980)
- feat(allowlist): add Thrift and Cap'n Proto support (#960)
- feat(lang): review support for R (#988)
- feat(allowlist): add Zig support (#937)
- feat(rules): add Jsonnet review rules (#470) (#962)
- feat(config): resolve api_key/auth_token from a command (#236) (#605)
- feat(allowlist): add Elm language support (#940) (#953)
🐛 Bug Fixes
- fix(updater): discard stale version hints (#720)
- fix(ci): line endings check fails on symbolic links (#952)
- fix(pages): make install-channel command box scrollable (#912)
- fix(scripts): stop license checks failing on valid headers (#971)
- fix(pages): serve 404 pages on non-existent GET requests but render no React Route (#955)
- fix(allowlist): allow .properties, .po and .pot so their rules can run (#958)
📖 Documentation
- docs(site): update for elm (#978)
- docs: fix code of conduct reporting links (#968)
Other Changes
- i18n(pages): add Korean (ko) locale (#857)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.9.5...v1.9.6

🚀 Features
- feat(scan): report token budget stop in JSON summary.budget_exceeded (#791)
- feat(providers): add kimi-global (Moonshot international API) to built-in providers (#914)
- feat(rules): add Swift review rules (#918)
🐛 Bug Fixes
- fix(plugin): separate client marketplace registrations (#908)
- fix(diff): re-file comments whose code lives in another file (#921)
- fix(review-filter): add submit_filter_result func for review filter stage (#295)
📖 Documentation
- docs(cli-reference): add missing ocr review flags examples (#920)
- docs(cli-reference): document missing review flags (#900)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.9.4...v1.9.5

🚀 Features
- feat(providers): add xAI (Grok) to built-in providers (#899)
- feat(providers): add glm-5.3 to the Z.AI Coding Plan provider (#915)
- feat(pages): add MacOS, Linux, and Windows install channels to hero section (#904)
- feat(telemetry): display session ID in terminal summary output (#870)
- feat(pages): serve install scripts from custom domain (#797)
- feat(pages): add macports to pages homepage (#873)
- feat(provider): support custom Base URL for LiteLLM/built-in providers (#729)
🐛 Bug Fixes
- fix(resume): preserve checkpoints after Ctrl-C (#902)
- fix(opencode): separate per-file and overall timeouts (#717)
🔧 Refactoring
- refactor(telemetry): replace PrintTraceSummary positional params with TraceSummary struct (#909)
📖 Documentation
- docs(cli): document review no-filter option (#871)
- docs(pages): update CLI reference and i18n for --format sarif (#874)
Other Changes
- ci: skip CI runs for documentation-only changes (#907)
- Link AACR-Bench dataset from README (#901)
- test(agent): add end-to-end regression test for review item fingerprint stability (#898)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.9.3...v1.9.4

🚀 Features
- feat(resume): add trusted resume validation and transition lineage (#786) (#845)
- feat(llm): task-scoped session affinity for prompt caching (#332)
- feat(action): render category/severity badge as a shields.io image (#882) (#885)
- feat(llmloop): add grace round after tool-request budget exhausted (#872)
- feat(cmd): add SARIF output format (#820)
- feat(cmd): add no-review cmd (#835)
🐛 Bug Fixes
- fix(agent): stabilize review item fingerprints (#732)
- fix(cmd): report expected arguments when positional count is wrong (#892)
- fix: make FileFilter patterns case-insensitive (#859)
- fix(LE): normalize line endings via .gitattributes (#858)
Other Changes
- ci: bump Go image to 1.26.6 to clear stdlib vulnerabilities (#896)
- chore: remove Chinese doc references from retry test comments (#886)
- chore(ci): fail CI when unapproved non-English text appears in source files (#876)
- Feat/llm retry report:SDK retry-attempt observability for review (#785) (#790)
- chore: remove leftover Chinese from the Go core, CI examples and pages comments (#861)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.9.2...v1.9.3

🚀 Features
- feat(pages): redesign hero with two-column layout and three install channels (#408)
- feat(providers): add siliconflow (GLOBAL) to built-in providers (#772)
- feat(providers): add siliconflow-cn as a built-in model provider (#775)
- feat(llm): add novita api as a default provider (#829)
- feat(viewer): add review comment tag filters (#779)
- feat(llm): add dynamic cache breakpoint on last message for Anthropic (#828)
🐛 Bug Fixes
- fix(diff): match gitignore directory patterns (#853)
- fix(action): pin nested action references to full commit SHAs (#836)
- fix(codeql): Workflow does not contain permissions (#814)
- fix(viewer): stack suggested code panels (#739)
📖 Documentation
- docs(skill): avoid output truncation in agent skill instructions (#809)
- docs: add retry_codes configuration documentation (#827)
- docs: add AGENTS.md and track CLAUDE.md for shared agent guidelines (#826)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.9.0...v1.9.2

🚀 Features
- feat(viewer): add review comment tag filters (#779)
- feat(llm): add dynamic cache breakpoint on last message for Anthropic (#828)
🐛 Bug Fixes
- fix(codeql): Workflow does not contain permissions (#814)
- fix(viewer): stack suggested code panels (#739)
📖 Documentation
- docs: 补充 retry_codes 配置文档 (#827)
- docs: add AGENTS.md and track CLAUDE.md for shared agent guidelines (#826)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.9.0...v1.9.1

🚀 Features
- feat(llm): support custom retry status codes via retry_codes config (#818)
- feat(llmloop): backfill comment thinking from turn output (#773)
- feat(pages): show live npm downloads in highlights stats (#794)
- feat(allowlist): add Nim support (#798) (#799)
- feat(llm): add built-in Mistral AI provider preset (#781)
- feat(examples/gitlab): align GitLab CI review posting with the GitHub Action (#767)
- feat: add QCA delegation integration (#762)
- feat(config): make per-file token limit configurable (#716)
🐛 Bug Fixes
- fix: no pages deployment on forks (#793)
- fix(cli): stop preview from creating a review session (#784)
- fix(pages): keep previous page visible during lazy route transitions (#792)
- fix(cli): honor --format json for review and scan preview (#783)
- fix(llm): add MiniMax global provider (#760)
- fix(viewer): externalize repos page inline script to comply with CSP (#758)
📖 Documentation
- docs: fix invalid subject (#795)
- docs: remove stale ocr session comments from README and migrate to site docs (#774)
- docs(blog): add trilingual OSS two-month retrospective post (#777)
- docs(cli-reference): document ocr scan flags (#770)
- docs: add instructions for macports (#769)
- docs: clarify --from/--to merge-base semantics (#579) (#613)
- docs(i18n): sync max_tokens configuration docs to ja, ru, zh (#766)
- docs(installation): add Homebrew install method (#768)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.8.10...v1.9.0

🚀 Features
- feat(viewer): collapse secondary session sections (#738)
🐛 Bug Fixes
- fix: remove timeout fields and more (#756)
- fix(cli): reject unexpected positional arguments (#749)
- fix(viewer): restore session response formatting (#754)
- fix(agent): render tool parameters deterministically (#721)
📖 Documentation
- docs(readme): update OpenSSF badge from Silver to Gold (#748)
Other Changes
- ci(pages): add smoke test step to verify build output is servable (#741)
- test: raise statement coverage to 90% and enforce it in CI (#747)
- chore(deps): bump preact (#743)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.8.9...v1.8.10

🚀 Features
- feat(viewer): add defense-in-depth security headers (#735)
- feat(benchmark): add Qwen3.8-Max results and show version inline per row (#726)
🐛 Bug Fixes
- fix(opencode): harden opencode plugin against abort, orphan, and arg edge cases (#728)
- fix(pages): inline critical CSS to remove the initial white flash (#601) (#610)
- fix(tool/code_search): guard option-like refs in buildGrepArgs (#727)
📖 Documentation
- docs(contributing): add tips for faster PR reviews section (#723)
Other Changes
- Fix translation docs (#652)
- chore: add SPDX license headers and automated verification (#740)
- ci(pages): run tests in Pages workflow (#731)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.8.8...v1.8.9

🚀 Features
- feat(viewer): add repository search filter (#642)
- feat(allowlist): add Nix support (#615)
- feat(allowlist): add Haskell support (#672)
🐛 Bug Fixes
- fix(vscode): upgrade transitive deps to resolve security alerts (#713)
🔧 Refactoring
- refactor(session): use strings.Contains in resume_test.go (#708)
Other Changes
- Create codeql.yml (#714)
- ci: limit container CPU to 2 cores for stable multi-runner concurrency (#711)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.8.7...v1.8.8

🚀 Features
- feat(cli): support per-run LLM provider and model overrides (#687)
- feat(examples/gitlab): add fail-open category/severity publication controls (#685)
- feat(scan): add resumable full-file scans (#677)
- feat(llm): add Claude Opus 5, Sonnet 5, Kimi K3, and Qwen 3.8 models (#693)
- feat(llm): add GPT-5.6 models to OpenAI provider (#666)
🐛 Bug Fixes
- fix(cli): return error on unknown subcommands for parent commands (#660)
🔧 Refactoring
- refactor(cli): use Cobra validation for parent commands (#694)
📖 Documentation
- docs(ru): add Russian translation for contributing, FAQ, telemetry, and viewer pages (#701)
- docs(ru): add Russian translation for integration guides (#698)
- docs(ru): add Russian translation for core documentation pages (#696)
Other Changes
- ci: pin govulncheck, narrow release permissions (#436)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.8.6...v1.8.7

🚀 Features
- feat(cli): add 'ocr session comments' to display saved review comments (#505) (#646)
- feat(allowlist): exclude snapshots, testdata, fixtures, and generated code from review (#683)
🐛 Bug Fixes
- fix(llm): retry once when a chat completion is truncated (#670)
🔧 Refactoring
- refactor(test): replace custom string helpers with strings.Contains in resume_test.go (#681)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.8.5...v1.8.6

🚀 Features
- feat(manifest): run manifest coverage contract for review (#367) (#520)
🐛 Bug Fixes
- fix(telemetry): honour a base path in the OTLP HTTP endpoint (#667)
- fix(vscode): use shell mode for spawn on Windows to detect npm correctly (#653)
- fix(cli): refocus previous input on esc in manual provider form (#630)
🔧 Refactoring
- refactor(test): remove config migration comments (#665)
- refactor(config): extract supported config keys into a single source of truth (#655)
- refactor(test): unify config compat helpers to use cobra subcommand tree (#656)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.8.4...v1.8.5

🐛 Bug Fixes
- fix(llm): drop extra_body.stream from non-streaming requests (#647) (#657)
- fix(diff): honor .gitignore negation patterns (#651)
- fix(action): group 422 fallback inline comments into a single review (#661)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.8.3...v1.8.4

🚀 Features
- feat(viewer): add review comments display to session detail page (#627)
🐛 Bug Fixes
- fix: honor per-file review terminal states (#582)
- fix(vscode): force-kill unresponsive reviews (#489)
🔧 Refactoring
- refactor(cli): migrate to Cobra framework for shell completion support (#625)
📖 Documentation
- docs(configuration): note url accepts base URL or full /responses endpoint (#623)
- docs: fix po catalog descriptions (#619)
- docs: remove stale Java-implementation references from code comments (#621)
Other Changes
- test(rules): add integrity checks for system_rules ↔ rule_docs (#620) (#629)
- chore(gitignore): ignore local claude command files
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.8.2...v1.8.3

🚀 Features
- feat(viewer): modernize web UI design (#616)
- feat(allowlist): add Protocol Buffers (.proto) support (#473)
- feat(rules): add PHP and Composer rules (#603)
🐛 Bug Fixes
- fix(config): warn when active provider shadows llm settings (#588)
🔧 Refactoring
- refactor(diff): strip index headers from review prompts (#609)
📖 Documentation
- docs(pages): sync review-rules table with system_rules.json and add ru locale (#612)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.8.1...v1.8.2

🚀 Features
- feat(agent): add token-cost budget guardrails to the review path (#508)
- feat(action): add fail-open category/severity publication controls (#478) (#529)
- feat(allowlist): add Prisma schema review support (#572)
- feat(rules): add comprehensive built-in Go review guidance (#569)
🐛 Bug Fixes
- fix(vscode): patch brace-expansion DoS via minimatch 10.2.6 (CVE-2026-14257) (#561)
- fix(pages): add dedicated /features route with correct active-tab highlighting (#548)
- fix(cli): align help text and aliases with actual behavior (#557)
- fix(pages): keep code block copy button anchored during horizontal scroll (#547)
- fix(vscode): pin linkify-it below v6 to fix vsce package failure (#545)
- fix(vscode): select Git roots with platform-aware paths (#543)
- fix: ensureMessagesSuffix double-paths URLs ending with /v1 (#533)
- fix(pages): handle stale lazy-loaded chunks gracefully (#542)
📖 Documentation
- docs(agent): correct MaxConcurrency doc comment to match actual default (#577)
- docs(configuration): document openai-responses protocol (#562)
- docs(license): update copyright holder to project contributors (#560)
- docs(README.ja-JP): fix Contributing link to point to Japanese version (#549)
Other Changes
- ci: upgrade low-risk GitHub Actions dependencies (#468)
- test(session): (#590)
- chore(deps-dev): bump the vscode-dependencies group (#592)
- i18n(pages): add Russian (ru) locale (#596)
- Add CodeUp CI integration (#570)
- ci(test): add binary smoke test (#566)
- improve(pages): simplify ErrorBoundary reload UX and add unit tests (#565)
- ci(pages): add ESLint and bundle size check to CI pipeline (#558)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.8.0...v1.8.1

🚀 Features
- feat(allowlist): add Bicep (.bicep) support (#525)
- feat(allowlist): add HCL/Terraform (.hcl, .tfvars) support (#524)
- feat(mcp): support remote MCP servers via Streamable HTTP (#360)
- feat(actions): chunk inline comments into bounded batches (#507)
🐛 Bug Fixes
- fix: align Go module path with actual GitHub repository (#526)
- fix(actions): clarify ambiguous batch review log (#519)
- fix(vscode): support workspace review before first commit (#515)
- fix(vscode): upgrade js-yaml resolution to >=5.2.2 for GHSA DoS (#511)
🔧 Refactoring
- refactor(examples): extract GitLab CI heredoc into testable post_review.py with unit tests (#539)
- refactor(search): extract shared SearchTrigger button (#514)
- refactor: extract duplicated command palette, heading parser, and copy-toast into shared hooks (#510)
📖 Documentation
- docs(readme): reorganize coding agent integrations (#512)
Other Changes
- perf(pages): enable code splitting and lazy-load heavy dependencies (#487)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.7.17...v1.8.0

🚀 Features
- feat(opencode): add native OpenCode integration (#498)
- feat(allowlist): add Julia (.jl) support (#501)
- feat(rules): add macro correctness checks to Rust review (#475)
🐛 Bug Fixes
- fix(tool): normalize code comment metadata enums (#481)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.7.16...v1.7.17

🚀 Features
- feat(llm): add iFlytek Spark as a built-in provider (#485)
- feat(allowlist): add GraphQL (.graphql/.gql) support (#491)
- feat(viewer): fix top breadcrumb to get more comfortable experience (#298)
🐛 Bug Fixes
- fix(ci): use npm install instead of npm ci in Pages CI
- fix: remove hardcoded 180s timeout from REVIEW_FILTER_TASK (#474)
- fix(ci): pin Pages CI container to node:24.18.0 (#492)
- fix(examples): preserve Bitbucket OCR diagnostics (#486)
- fix(agent): count only dispatchable files reviewed (#482)
- fix(vscode): bound brace-expansion resolution to avoid poisoned 5.x (#467)
- fix(deps): upgrade grpc-go to v1.82.1 for GHSA-hrxh-6v49-42gf (#456)
📖 Documentation
- docs(readme): add overall Trendshift badge alongside weekly badge
- docs(examples): add Bitbucket Pipelines CI integration example (#483)
Other Changes
- chore(deps-dev): bump style-loader in /extensions/vscode (#466)
- chore(deps-dev): bump jest and @types/jest in /extensions/vscode (#465)
- chore(deps-dev): bump webpack-cli in /extensions/vscode (#464)
- chore(deps-dev): bump css-loader in /extensions/vscode (#463)
- chore(deps): bump the vscode-dependencies group across 1 directory with 3 updates (#462)
- chore(deps): let dependabot cover the VS Code extension (#437)
- ci(translation-sync): remove redundant push trigger (#460)
- ci: add translation-sync guardrails for READMEs and docs (#455)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.7.15...v1.7.16

🚀 Features
- feat(pages): add social preview meta tags and og-image (#414)
🐛 Bug Fixes
- fix(llmloop): drain per-file comment work without racing pool submissions (#449)
- fix(diff): review merge commits against their first parent (#450)
- fix(diff): anchor binary marker and count +/- lines by hunk state (#451)
- fix(config): preserve hand-edited timeout_sec across config round-trips (#452)
- fix(pages): remove incorrect publicPath prefix from absolute image paths (#428) (#438)
- fix(vscode): resolve 5 high-severity npm dependency vulnerabilities (#445)
- fix(viewer): use [ocr] log prefix for consistency (#420)
- fix(llmloop): scope async memory compression to each RunPerFile conversation (#395)
- fix(pages): scroll docs deep links on load (#413)
🔧 Refactoring
- refactor(agent,scan): share one 80% token threshold (#421)
📖 Documentation
- docs: fix integration links (#448)
- docs(ci): pass untrusted PR fields via env to prevent script injection (#430)
- docs(examples): OCR_LLM_MODEL is required, not optional (#431)
- docs(pages): add CC-Switch proxy setup to Configuration (#429)
- docs(readme): slim README by removing sections duplicated on docs site (#426)
- docs(readme): link to docs site and collapse duplicated sections (#424)
- docs(telemetry): explain why checkMetricErr intentionally ignores errors (#418)
Other Changes
- ci: add CI job for VS Code extension (#444)
- ci(pages): add Pages CI workflow for typecheck and build (#442)
- chore: route security reports to private advisories (#435)
- ci: add timeout-minutes to the release and pages jobs (#434)
- ci: unify gofmt -s across Makefile and CI, reduce cross-compile timeout (#439)
- ci: catch cross-platform build breaks, gofmt drift and untidy go.mod (#433)
- ci(release): skip meta-package publish when the version already exists (#432)
- ci: cancel superseded CI runs on the same PR or branch (#425)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.7.14...v1.7.15

🚀 Features
- feat(examples): add Gerrit CI integration example (Jenkins + Gerrit Trigger) (#401)
- feat(pages): serve landing site at custom-domain root with clean URLs (#407)
- feat: add pot code review rules (#406)
🐛 Bug Fixes
- fix(llmloop): guard nil tool-call arguments map to prevent panic (#393)
- fix(codex): add native marketplace manifest (#402)
📖 Documentation
- docs(pages): document local-model setup, tool-calling requirement, and LLM timeouts (#400)
- docs(readme): update official website URL to open-codereview.ai (#410)
- docs(pages): simplify page title to "Open Code Review"
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.7.13...v1.7.14

🚀 Features
- feat: add po code review rules (#404)
- feat: add install.ps1 for Windows one-line install (#397)
- feat(pages): expand Integrations sidebar group by default (#394)
🐛 Bug Fixes
- fix(diff): add --end-of-options guard and no-commit regression test for workspace diff (#376)
- fix(scan): check user include patterns before the extension allowlist (#378)
📖 Documentation
- docs(pages): document PowerShell install.ps1 on installation pages (#399)
- docs(pages): note that LLM API key is optional in delegation mode (#392)
- docs(pages): simplify claude-code prerequisites, recommend delegation mode (#391)
- docs: remove direct subprocess page (#390)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.7.12...v1.7.13

🚀 Features
- feat: add LiteLLM AI gateway provider preset (#385)
📖 Documentation
- docs(pages): remove integrations parent page, keep as sidebar group (#387)
- docs(pages): add Delegation Mode documentation to website (#386)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.7.11...v1.7.12

🚀 Features
- feat(delegate): add delegation mode for host-agent driven code review (#383)
- feat(rules): add FreeMarker (.ftl/.ftlh/.ftlx) review support (#377)
- feat(llm): add built-in Ollama Cloud provider preset (#375)
🐛 Bug Fixes
- fix(diff): preserve non-ASCII paths (#365)
🔧 Refactoring
- refactor(diff): normalize workspace git argument ordering (#381)
📖 Documentation
- docs(pages): add OpenAI Responses API to website i18n strings (#373)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.7.10...v1.7.11

🚀 Features
- feat: Add OpenAI Responses API support and refactor protocol handling (#363)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.7.9...v1.7.10

🚀 Features
- feat(telemetry): propagate W3C traceparent from parent process (#352)
🐛 Bug Fixes
- fix: remove redundant font-family from .response-text .inline-code (#339)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.7.8...v1.7.9

🚀 Features
- feat(pages): add blog section with i18n support (#355)
🐛 Bug Fixes
- fix(llm): support opt-in OpenAI streaming (#359)
- fix(background-file) Manage path at git repository root directory Refs:#324 (#327)
- fix(plugin): isolate Claude Code package (#350)
- fix(pages): widen blog detail content area with percentage-based max-width (#356)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.7.7...v1.7.8

🚀 Features
- feat(llm): add built-in Eden AI provider preset (#346)
🐛 Bug Fixes
- fix(llm): make OCR_LLM_EXTRA_HEADERS apply to all resolver strategies (#353)
- fix(vscode): add PNG icon for marketplace display and bump to v0.1.1
- fix(vscode): improve git review modes, diff preview, and comment mounting (#334)
Other Changes
- chore(vscode): prepare extension for marketplace publishing (#349)
- chore(vscode): replace activity bar icon with new design (#348)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.7.6...v1.7.7

🚀 Features
- feat: add Python code review rules (#343)
- feat(action): extract reusable composite PR-review GitHub Action (#337)
- feat: enhance token usage resolution for OpenAI and Anthropic compati… (#223)
- feat(review): add resumable sessions and session inspection (#306)
- feat(background-file) Add the background-file CLI option to read a local business context file (#206)
🐛 Bug Fixes
- fix(vscode): prevent config panel render loop and refine step status styles (#341)
- fix(viewer): fix monospace font rendering in pre/code blocks on Windows (#328)
- fix(tool): reject traversal pathspecs in code_search (#303)
📖 Documentation
- docs(pages): split install and version commands into separate code blocks (#345)
- docs(roadmap): mark MCP as shipped and add delegate mode
- docs(README): add upgrade instructions (#321)
- docs: remove broken Star History section from all READMEs (#329)
- docs: add contributors image to Contributing section (#326)
- docs: remove retired Go Report Card badge (#319)
Other Changes
- chore(action): set author to alibaba (#344)
- ci: bump Go image to 1.26.5 to fix GO-2026-5856 govulncheck failure (#330)
- test: fix golangci-lint errcheck/staticcheck issues in test code (#323)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.7.5...v1.7.6

🚀 Features
- feat(viewer): dark mode + system monospace font (#304) (#312)
Other Changes
- Feat/telemetry http exporter (#314)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.7.4...v1.7.5

🐛 Bug Fixes
- fix(tool): resolve file_read paths against git top-level in monorepos (#309)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.7.3...v1.7.4

🚀 Features
- feat(review): add structured category and severity to findings (#311)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.7.2...v1.7.3

🚀 Features
- feat(pages): add per-chapter routes for docs (#294)
🐛 Bug Fixes
- fix(tui): persist official-tab models and refine saved secret hint (#260)
- fix(pages): adjust HeroSection terminal section height and bottom padding (#296)
- fix(pages): address CodeQL XSS alerts in markdown rendering (#300)
Other Changes
- chore(deps): bump github.com/anthropics/anthropic-sdk-go (#272)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.7.1...v1.7.2

🚀 Features
- feat: add Astro-specific review rules (#289)
- feat(viewer): make human readable token usage for session (#278)
- feat(pages): add Docs page with search, markdown rendering, and i18n support (#273)
- feat(llm): add z-ai-coding provider for GLM Coding Plan endpoint (#258)
🐛 Bug Fixes
- fix: support Astro files in review filters (#286)
- fix(telemetry): support http:// scheme in otlp_endpoint for insecure gRPC (#280)
- fix(agent): recover from panics in per-file review and comment-pool goroutines (#171) (#182)
- fix(ci): prevent duplicate review posts on retry in ocr-review workflow (#250)
📖 Documentation
- docs(pages): sync restructured MCP guide to en and ja (#293)
- docs(pages): add MCP servers guide to the user guide (#292)
- docs(pages): remove overview page across all languages and clean up references
- docs(pages): update CLI docs for install, auto-update, config and quickstart (#290)
- docs(README): bump Git prerequisite to >= 2.41 and sync localized READMEs
- docs(README): add new “Prerequisites” section under the existing “How to Use” heading and before the CLI subsection. (#261)
- docs(pages): remove pipeline and project layout sections from overview (#284)
- docs(pages): add Japanese (ja) translation for docs content (#282)
- docs(pages): add landing page development guide (#270)
- docs(pages): update page title to "AI Code Review"
- docs(pages): move MCP setup timeout info into field table
- docs(pages): add MCP Server docs section (#262)
- docs(examples): add GitFlic CI auto-review example (#201)
- docs(pages): update i18n docs for unified Provider system
Other Changes
- ci: upgrade node version to 24 (#240)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.7.0...v1.7.1

🚀 Features
- feat: add standard MCP tool support (#212)
- feat: update brand assets (#257)
- feat(pages): add install badge with shimmer effect and copy functionality (#254)
🐛 Bug Fixes
- fix(pages): restore doc-download icon color for Docs page (#256)
- fix(i18n): improve Chinese hero title wording
📖 Documentation
- docs(pages): deduplicate scan preview section and add review preview card (#255)
- docs(pages): add ocr scan documentation page (#251)
Other Changes
- test(diff): add tests for gitignore pattern matching and mode getters
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.6.6...v1.7.0

🚀 Features
- feat(i18n): auto-detect browser language for default locale selection
- feat(pages): consolidate icons, add scroll-to-top, responsive titles (#241)
🐛 Bug Fixes
- fix(session): isolate test sessions to test-sessions subdirectory
- fix: add configurable HTTP timeout for LLM API calls (#238)
- fix(i18n): correct ocr viewer description from "review results" to "session logs"
- fix(i18n): correct inaccurate translations in zh and ja locales
- fix(ci): use --replace-all for git safe.directory to prevent self-hosted runner failure
🔧 Refactoring
- refactor(pages): improve hero terminal display with semantic colors, reorder lines, and add cursor blink
- refactor: cleanup design drafts, rename Chinese assets, UI improvements (#239)
📖 Documentation
- docs: add timeout_sec and OCR_LLM_TIMEOUT to configuration reference
- docs(llm): clarify timeout override semantics and resolution-path coverage
- docs: add official website link to READMEs and update screenshots
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.6.5...v1.6.6

🚀 Features
- feat(ci): add Sigstore attestation for release artifacts
🐛 Bug Fixes
- fix: skip permission-based tests when running as root in CI
- fix: stabilize TestDiscoverRepos_FindsRepos with explicit mtime ordering
📖 Documentation
- docs: update OpenSSF badge to Silver level
- docs: add security assurance case and use signed tags
Other Changes
- chore(deps): bump the go-dependencies group with 12 updates (#232)
- ci: add 80% statement coverage threshold check
- Feature/rule link to files (#226)
- test: improve coverage for tool package from 79.5% to 93.6%
- test: improve coverage for telemetry package and exclude extensions from build targets
- test: improve coverage for cmd/opencodereview package from 42% to 70%
- test: improve coverage for viewer package from 35% to 92%
- test: improve coverage for template and pathutil packages
- test: add coverage tests for agent, llm, llmloop, and scan packages
- test: add unit tests for output_helpers, config, model, stdout, and telemetry packages
- chore: remove unused cmd/testdiff debug helper
- test: expand unit test coverage for agent, llm, llmloop, and tool packages
- test: add unit tests for pure logic functions across 6 packages
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.6.4...v1.6.5

📖 Documentation
- docs(examples): update node.js to 24 in the github action yml (#228)
- docs: add ROADMAP.md with project direction for the next year
- docs: add GOVERNANCE.md, CODE_OF_CONDUCT.md and clean up SECURITY.md
Other Changes
- ci: add govulncheck, job timeout, dependabot and preserve debug symbols in dev builds
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.6.3...v1.6.4

🚀 Features
- feat: improve config provider TUI interaction (#213)
- feat: support HTTP extra headers (#169)
- feat: add Cursor plugin support (#221)
🐛 Bug Fixes
- fix(vscode): retain sidebar webview context when hidden (#227)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.6.2...v1.6.3

🐛 Bug Fixes
- fix: enable code_search to find content in untracked files
- fix(vscode): upgrade minimatch to >=9.0.7 for CVE-2026-27903 (#220)
📖 Documentation
- docs: rewrite LLM config section to use provider-based setup
Other Changes
- Feature/vscode i18n (#219)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.6.1...v1.6.2

🚀 Features
- feat: add tool_calls field to JSON output (#216)
- feat(vscode): add full-width BYOK provider config panel (#204)
🐛 Bug Fixes
- fix: increase REVIEW_FILTER_TASK and RE_LOCATION_TASK timeout from 60s to 180s (#208) (#218)
- fix: ensure current file path is always injected for code_comment and… (#193)
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.6.0...v1.6.1

🚀 Features
- feat: add ocr scan for full-file code review (#93)
- feat(llm): update provider model lists (#202)
🐛 Bug Fixes
- fix: make option-like ref test locale-independent
📖 Documentation
- docs: sync ocr scan documentation to localized READMEs
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.5.1...v1.6.0

🐛 Bug Fixes
- fix: skip empty rule entries in resolver to restore fallback behavior
Other Changes
- Add option to merge system and user review rules (#161)
- bench: add GLM-5.2 (Zhipu AI) benchmark results and update screenshots
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.5.0...v1.5.1

🚀 Features
- feat: add ability to delete custom providers from configuration (#189)
📖 Documentation
- docs: sync config unset command to localized READMEs
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.4.6...v1.5.0

🐛 Bug Fixes
- fix: normalize repository.url with git+ prefix to suppress npm publish warnings
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.4.4...v1.4.5

What's Changed
- fix(session): restrict session dir and file permissions to owner-only by @PreethamNoelP in https://github.com/alibaba/open-code-review/pull/168
New Contributors
- @PreethamNoelP made their first contribution in https://github.com/alibaba/open-code-review/pull/168
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.3.18...v1.4.1

Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.3.18...v1.3.19

Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.3.17...v1.3.18

What's Changed
- feat(llm): add Tencent TokenHub and Hunyuan Token Plan providers by @5wxwxwxw5 in https://github.com/alibaba/open-code-review/pull/142
- fix(cli): reject --to without --from in review flags by @zhuichen in https://github.com/alibaba/open-code-review/pull/151
- fix: sort provider picker by display name by @MuoDoo in https://github.com/alibaba/open-code-review/pull/154
- feat：add --model flag to override LLM model per review by @1parado in https://github.com/alibaba/open-code-review/pull/122
New Contributors
- @zhuichen made their first contribution in https://github.com/alibaba/open-code-review/pull/151
- @1parado made their first contribution in https://github.com/alibaba/open-code-review/pull/122
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.3.13...v1.3.14

Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.3.12...v1.3.13

What's Changed
- fix: use text/tabwriter for dynamic column alignment in ocr llm provi… by @stay-foolish-forever in https://github.com/alibaba/open-code-review/pull/146
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.3.11...v1.3.12

What's Changed
- fix: remove non-existent Claude Sonnet 4.7 & 4.8 models by @hetaoBackend in https://github.com/alibaba/open-code-review/pull/133
- refactor: sort provider selection list by @MuoDoo in https://github.com/alibaba/open-code-review/pull/135
- feat(llm): add volcengine and kimi providers by @5wxwxwxw5 in https://github.com/alibaba/open-code-review/pull/134
New Contributors
- @hetaoBackend made their first contribution in https://github.com/alibaba/open-code-review/pull/133
- @5wxwxwxw5 made their first contribution in https://github.com/alibaba/open-code-review/pull/134
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.3.10...v1.3.11

What's Changed
- docs: add Japanese document by @eltociear in https://github.com/alibaba/open-code-review/pull/64
New Contributors
- @eltociear made their first contribution in https://github.com/alibaba/open-code-review/pull/64
Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.2.2...v1.2.4

Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.1.21...v1.1.22