Argus
Release ledger

Release

v2.5.3

compact-trace

Hotfix: Argus generated POM comments now stay compact even when a remediation covers a long chain of vulnerability IDs.

Download binary
Linux · amd64Linux · arm64macOS · arm64
Diagnostic skillCI/CD componentHow to use the skill →

Highlights

  • 01

    Compact POM comments

    Generated PATCH comments now use a short stable remediation reference when a fix covers many advisories, keeping customer diffs readable while preserving Argus correlation.

    Read the guide →

Full notes

Changed

  • Compact generated-comment formatting now applies consistently across BUMP, OVERRIDE, EXCLUDE, ADD, family-BOM, and aggregate-generated comments.

Fixed

  • Generated POM comments no longer embed comma-separated CVE/GHSA chains. Argus writes a compact RM-<hash> reference when a patch reference would otherwise be too long, while full vulnerability IDs remain in report.json and merge-request metadata.