Release
v2.12.1
every module a citizen (patch)Hotfix: an org-wide delegation entry for a library no longer freezes that library's own repository. The delegated coordinate is one of the repo's own modules, so Argus was delegating every vulnerability to itself and fixing nothing — precisely where the fixes must land.
Highlights
- 01
Self-delegation excluded from ownership
When the configured delegation owner is one of the repository's own artifacts, it is skipped with an explanatory log line. The library repo plans and publishes fixes normally; other repos consuming the library keep delegating its transitives to the owner as before.
Full notes
Fixed
- delegatedOwnersForRun drops coordinates that are reactor-internal artifacts of the current repository, so shared fleet configs (
delegation:blocks and suppress_transitive_remediation complications) cannot suppress a library's fixes inside its own repo.