v0.1.8 v2.12.0
huggingface/smolagentsSep 21, 2026 → Sep 23, 20262 days between releases
What's New
Major version jump introduces SkillSpector, OpenCode integration, and CI controls.
Breaking Changes
- Findings, risk scores, and recommendations may change after upgrading.
- JSON columns are zero-based while SARIF columns are one-based Unicode-codepoint positions.
- Default static-analysis allowance increased from 30 to 300 seconds per artifact.
New Features
- OpenCode CLI provider integration for semantic analysis.
- GitHub subdirectory scanning support.
- New `--fail-on-findings` CLI flag for strict CI/CD policy gates.
- Interactive progress reporting separated from standard output.
- Sanitized LLM configuration and execution provenance in reports.
Improvements
- Faster scanning performance and interactive progress reporting.
- Enhanced JSON and SARIF reports with sanitized LLM configuration.
- Security hardening and reliability improvements.
- Expanded provider and model configuration guidance.
Upgrade Notes
Expect changes in analysis results and risk scoring due to the introduction of OpenCode integration. Update CI/CD configurations to accommodate the increased default timeout (300s) and handle the shift in JSON column indexing (zero-based).
The Two Releases
Version 0.1.8
Sep 21, 2026· 1 month ago
This is a maintenance release focusing on bug fixes and a refactoring of the markitdown-ocr plugin. The release ensures outputs and behavior remain largely unchanged from the previous version.
Full release notesSkillSpector v2.12.0
Sep 23, 2026· 28 days ago
Improves skill analysis accuracy, reporting consistency, and performance by adding OpenCode integration, flexible repository inputs, and enhanced CI controls.
Full release notes