Skip to main content

​
SLSA provenance for installers and upgrades

January 29, 2026 Qlty CLI installer scripts are now published with SLSA attestations, and the qlty upgrade command verifies SLSA provenance for new releases using the gh CLI. This adds an extra layer of supply-chain integrity to installations and upgrades.

​
Improved SAML re-authentication

January 26, 2026 When a user accessing a Workspace with SAML enabled needs to re-authenticate, Qlty Cloud now surfaces a clearer re-authentication page with explicit instructions, rather than a generic error.

​
Always-available PR Coverage tab

January 24, 2026 The Pull Request Coverage tab now renders even when a base coverage report is missing, so reviewers always have a coverage view to work from. When there is no base report, diff coverage is displayed as “N/A” rather than blocking the page.

​
Better missing coverage data messaging

January 20, 2026 When a Project is missing expected coverage data, the Coverage page now displays a clearer message explaining what’s missing and how to resolve it.

​
HTTPS required for all outgoing requests

January 8, 2026 The Qlty CLI now requires HTTPS for all outgoing HTTP requests, including source fetching and tool downloads. All network activity from the CLI is encrypted in transit.