CodeMender updates (v0.10.0)

CodeMender updates (v0.10.0)

This release introduces updates to CodeMender:

• Impact-aware PR delta scanning: Added --diff and --staged flags to cm find to audit modified pull request hunks and 1-hop neighbor files while suppressing pre-existing vulnerabilities.
• SARIF report export and CI gating: Added SARIF v2.1.0 export (--format sarif, --output) and severity-based CI gating (--fail-on) to cm report to integrate scan results into CI/CD pipelines and code scanning tools.
• Adaptive hybrid deep scanning: Added --deep and --deep-workers flags to cm find to combine deterministic file pruning, parallel package-batched analysis, and post-triage verification for higher vulnerability recall and precision.
• Custom workspace directory: Added support for the CM_HOME environment variable to override the default ~/.codemender directory for configuration, local state (state.db), backups, and artifacts.
• Bug fixes:
• Required build and test validation (build.command) to succeed during cm fix before marking a patch as applied and a finding as fixed.
• Stabilized vulnerability fingerprints across multiple scans and bound cm verify directly to the target finding ID to prevent duplicate findings.
• Restored the configured session model automatically when reconnecting to an active session with cm session resume.
• Updated cm verify to add .exploit to .gitignore before execution so cancelled verification sessions do not leave untracked proof-of-concept scripts.

For more information, see the CodeMender documentation.