v1.39.0

✨ Features

• Add the force_shared_policy server option to disable loading individual repository policies (#975, by @south-mer)

💡 Improvements

• Allow limiting the modified_lines predicate to specific files by setting include and exclude patterns (#1043)
• Build with Go 1.25 (#1019)
• Minor dependency and build tool updates

Full Changelog: v1.38.2...v1.39.0

v1.38.2

Re-release of 1.38.0

Add option to ignore edited comments on the server (#977)

Policy Bot now supports server side configuration to ignore edited commits and improve the overall security posture of a running instance.

Other Changes

• Use zero value by default for comments edited time when simulating PR status (#978)
• Minor dependency and build tool updates

Full Changelog: v1.37.0...v1.38.2

v1.38.1

Re-release of 1.38.0

Add option to ignore edited comments on the server (#977)

Policy Bot now supports server side configuration to ignore edited commits and improve the overall security posture of a running instance.

Other Changes

• Use zero value by default for comments edited time when simulating PR status (#978)
• Minor dependency and build tool updates

Full Changelog: v1.37.0...v1.38.1

v1.38.0

Add option to ignore edited comments on the server (#977)

Policy Bot now supports server side configuration to ignore edited commits and improve the overall security posture of a running instance.

Other Changes

• Use zero value by default for comments edited time when simulating PR status (#978)
• Minor dependency and build tool updates

Full Changelog: v1.37.0...v1.38.0

v1.37.0

Add file creation and deletion predicates (#935, #938)

The file_added, file_not_added, file_deleted, and file_not_deleted predicates allow writing policies that change when the PR introduces or removes specific files. Contributed by @dblinkhorn.

Add server option for strict review dismissals (#942)

By default, Policy Bot only dismisses a review if it no longer satisfies all rules. When rules have different invalidate_on_push settings, this means a review may remain because it still satisfies one rule while no longer satisfying another. If the new strict_review_dismissal option is enabled in the server configuration, Policy Bot will dismiss a review if it no longer satisfies any rule. This may be more intuitive for users, depending on how policies are constructed. Contributed by @devinburnette.

Other Changes

• Support marshaling Policy Bot configuration types to YAML (#796, by @iainlane)
  Note that these Go types are not part of Policy Bot's public API and may change in any version
• Add debug logging for check_run events (#966)
• Minor dependency and build tool updates

Full Changelog: v1.36.5...v1.37.0

v1.36.5

Fixes

• Respect the post_insecure_status_checks option when handling merge group events (#933 by @mglazer)

Other Changes

• Build with Go 1.24 (#932)
• Minor dependency and build tool updates

Full Changelog: v1.36.4...v1.36.5

v1.36.4

Fixes

• Fix error when rendering the details page for a disapproved pull request (#885)

Other Changes

• Retry loading configuration in certain error conditions (#887 by @nikola-jokic)
• Minor dependency and build tool updates

Full Changelog: v1.36.3...v1.36.4

v1.36.3

Fixes

• Correctly count changed files in pull requests that include renames (#875 by @dblinkhorn)

Other Changes

• Minor dependency and build tool updates

Full Changelog: v1.36.2...v1.36.3

v1.36.2

Fixes

• Fix issue where dismissed approvals do not trigger a rule evaluation (#866 )
• Ignore Workflow Run Events that are sent by a different repository than the source repository (#861 by @iainlane )

Other Changes

• Minor dependency updates

Full Changelog: v1.36.1...v1.36.2

v1.36.1

Fixes

• Fix GitHub API errors caused by submitting duplicate requested reviewers (#856 by @FraBle)

Other Changes

• Build with Go 1.23
• Update dependencies and build tools

Full Changelog: v1.36.0...v1.36.1