Skip to content

getplumber/plumber

v0.4.15 Maintenance

This release keeps dependencies and maintenance posture current for teams operating this tool.

Published 2d Pipelines
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ci-cd compliance pipeline security

Summary

AI summary

Updates 🐛 Bug Fixes, 📚 Documentation, and 👷 CI/CD across a mixed release.

Full changelog

0.4.15 (2026-07-24)

🐛 Bug Fixes

  • controls: don't score GitHub-only controls on GitLab runs — gate findings by provider applicability so plumberScore.counts matches the rendered controls (#349) (6cc38ec)

📚 Documentation

  • template: Update comment in template and add version reference section in contributing (5a6ec4e)

👷 CI/CD

  • release: pin v0.4.14 refs [skip ci] (f85f762)

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track getplumber/plumber

Get notified when new releases ship.

Sign up free

About getplumber/plumber

All releases →

Related context

Earlier breaking changes

  • v0.4.0 Runs with nothing scoreable now fail closed (exit 1)
  • v0.4.0 Default artifact name changed to plumber-report
  • v0.4.0 gate no longer exposes 'compliance'; redefines 'passed' as 'score gate met'

Beta — feedback welcome: [email protected]