Release

v1.0.2

2026-06-01iris

Reviewer-focused merge requests: version transitions, collapsed dependency graphs, mythic scan completion, and reconciled GitLab labels.

Download binary

Highlights

01
Before and after in every MR
Security merge requests now show explicit version transitions for direct bumps, transitive overrides, exclude-and-add fixes, and grand-slam remediation sets.
Read the guide →
02
Dependency graphs without repetition
Vulnerability graphs render as collapsed Mermaid trees with a legend and colour-coded root, shared transitive, and remediated vulnerable dependency nodes.
Read the guide →
03
Labels match the brand
Argus now reconciles managed GitLab labels so security is yellow and argus uses the site iris accent colour.
Read the guide →
04
Component defaults updated
The GitLab CI/CD component defaults to Argus 1.0.2 and exposes grand_slam, enabled by default.
Read the guide →

Added explicit before-and-after version evidence to security merge requests, including direct bumps, transitive overrides, exclude-and-add remediations, and grand-slam/grouped remediation lists.
Added a collapsed Mermaid dependency tree for merge-request vulnerability graphs, with colour-coded root, transitive, and remediated vulnerable dependency nodes plus a legend.
Added an Argus Panoptes scan-completion vignette to console summaries after the scan report is written.
Added an explicit grand_slam input to the GitLab CI/CD component, defaulting to on.

Updated the GitLab CI/CD component and documentation examples to use Argus 1.0.2 by default.
Managed GitLab project labels are now reconciled to Argus defaults: security is yellow and argus uses the site iris accent.