What's Changed

🚀 New Features

• Keep parameterized test variants distinct across result directories by @baev in #3440

🔬 Improvements

• Harden local report previews against path-based security bypasses by @baev in #3451

🐞 Bug Fixes

• Render duration tooltip ranges correctly by @baev in #3444

⬆️ Dependency Updates

• Bump org.jsoup:jsoup from 1.22.2 to 1.23.1 by @dependabot[bot] in #3446
• chore: update Browserslist DB by @allure-ci[bot] in #3445
• Bump io.qameta.allure:allure-bom from 2.35.3 to 2.35.4 by @dependabot[bot] in #3429
• Bump actions/setup-node from 6 to 7 by @dependabot[bot] in #3423
• Bump brace-expansion and rimraf in /allure-generator by @dependabot[bot] in #3425
• Bump com.github.spotbugs:spotbugs from 4.10.2 to 4.10.3 by @dependabot[bot] in #3420
• Bump org.junit:junit-bom from 6.1.1 to 6.1.2 by @dependabot[bot] in #3419

Full Changelog: 2.44.1...2.45.0

What's Changed

🐞 Bug Fixes

• Prevent plain text report values from being rendered as links by @baev in #3435
• Prevent long test names from overlapping parameters by @baev in #3438

⬆️ Dependency Updates

• Bump com.fasterxml.jackson:jackson-bom from 2.22.0 to 2.22.1 by @dependabot[bot] in #3417
• Bump net.sourceforge.pmd:pmd-java from 7.25.0 to 7.26.0 by @dependabot[bot] in #3410
• Bump com.github.spotbugs from 6.5.8 to 6.5.9 by @dependabot[bot] in #3421
• Bump postcss from 8.5.15 to 8.5.23 in /allure-generator by @dependabot[bot] in #3434
• Bump immutable from 5.1.5 to 5.1.9 in /allure-generator by @dependabot[bot] in #3430
• Bump com.diffplug.spotless from 8.8.0 to 8.9.0 by @dependabot[bot] in #3436

👻 Internal changes

• fix labels by @formaceft-93 in #3418
• Delete labeler by @baev in #3433

New Contributors

• @formaceft-93 made their first contribution in #3418

Full Changelog: 2.44.0...2.44.1

What's Changed

🔬 Improvements

• Harden live HTML attachment previews (and add auto-sizing) by @baev in #3400
• Refine attachment previews by @baev in #3403
• Limit oversized attachment previews by @baev in #3405
• Open Playwright traces directly from any report mode by @baev in #3412
• Improve icons readability by @baev in #3413

🐞 Bug Fixes

• fix translations by @baev in #3402

⬆️ Dependency Updates

• Bump com.diffplug.spotless from 8.6.0 to 8.7.0 by @dependabot[bot] in #3392
• Bump actions/checkout from 6 to 7 by @dependabot[bot] in #3395
• Bump com.github.spotbugs from 6.5.6 to 6.5.8 by @dependabot[bot] in #3401
• Bump io.qameta.allure:allure-bom from 2.35.2 to 2.35.3 by @dependabot[bot] in #3404
• bump vite from 8.0.8 to 8.1.0 by @todti in #3407
• Bump org.junit:junit-bom from 6.1.0 to 6.1.1 by @dependabot[bot] in #3409
• Bump com.diffplug.spotless from 8.7.0 to 8.8.0 by @dependabot[bot] in #3411
• chore: update Browserslist DB by @allure-ci[bot] in #3414

⛔️ Security

• Harden local Allure report preview serving by @baev in #3393

Full Changelog: 2.43.0...2.44.0

What's Changed

🔬 Improvements

• Use default Browserslist targets for the report generator by @baev in #3380

⬆️ Dependency Updates

• chore: update Browserslist DB by @allure-ci[bot] in #3382
• Bump io.qameta.allure from 4.0.2 to 4.1.0 by @dependabot[bot] in #3378
• Bump com.squareup.okhttp3:okhttp-bom from 5.3.2 to 5.4.0 by @dependabot[bot] in #3377
• Bump com.gorylenko.gradle-git-properties from 2.5.7 to 4.0.1 by @dependabot[bot] in #3369
• Bump com.fasterxml.jackson:jackson-bom from 2.21.3 to 2.22.0 by @dependabot[bot] in #3370
• Bump net.sourceforge.pmd:pmd-java from 7.24.0 to 7.25.0 by @dependabot[bot] in #3366
• Bump com.github.spotbugs:spotbugs from 4.9.8 to 4.10.2 by @dependabot[bot] in #3386
• Bump com.github.spotbugs from 6.5.5 to 6.5.6 by @dependabot[bot] in #3385

⛔️ Security

• Harden XCTest plist parsing against external entities by @baev in #3389

👻 Internal changes

• Use Allure CI app for release automation by @baev in #3383
• Simplify Gradle dependency version management by @baev in #3388

New Contributors

• @allure-ci[bot] made their first contribution in #3382

Full Changelog: 2.42.1...2.43.0

What's Changed

🔬 Improvements

• fix new theme issues by @baev in #3360
• Show retries and instant tests on the Timeline by @baev in #3364

🐞 Bug Fixes

• Fix Windows launcher classpath by @baev in #3373

⬆️ Dependency Updates

• Bump com.diffplug.spotless from 8.5.1 to 8.6.0 by @dependabot[bot] in #3361
• Bump io.qameta.allure:allure-bom from 2.34.0 to 2.35.2 by @dependabot[bot] in #3367

Full Changelog: 2.42.0...2.42.1

What's Changed

🚀 New Features

• Add Allure 3 brand theme, dark mode, and accessibility smoke checks by @baev in #3341

🔬 Improvements

• Relax http exchange attachment type by @baev in #3340

🐞 Bug Fixes

• Fix missing Behaviors and Packages tabs by @baev in #3353
• Make single-file reports truly self-contained by @baev in #3354
• fix custom logo plugin by @baev in #3355
• fix playwright trace attachments by @baev in #3357

⬆️ Dependency Updates

• Bump org.junit:junit-bom from 6.0.3 to 6.1.0 by @dependabot[bot] in #3352
• Bump com.diffplug.spotless from 8.4.0 to 8.5.1 by @dependabot[bot] in #3350
• Bump gradle-wrapper from 9.5.0 to 9.5.1 by @dependabot[bot] in #3343
• Bump orgSlf4jVersion from 2.0.17 to 2.0.18 by @dependabot[bot] in #3342
• Bump postcss from 8.5.8 to 8.5.15 in /allure-generator by @dependabot[bot] in #3312
• Bump com.github.spotbugs from 6.5.4 to 6.5.5 by @dependabot[bot] in #3356

Full Changelog: 2.41.0...2.42.0

What's Changed

🚀 New Features

• Add support for HTTP Exchange attachments by @baev in #3331

🔬 Improvements

• Fix incomplete ALLURE_NO_ANALYTICS opt-out in report html template by @grootstebozewolf in #3332

🐞 Bug Fixes

• Fix duplicate category matches by using the first matching rule by @baev in #3330

⬆️ Dependency Updates

• Bump commons-io:commons-io from 2.21.0 to 2.22.0 by @dependabot[bot] in #3323
• Bump com.github.spotbugs from 6.5.0 to 6.5.4 by @dependabot[bot] in #3324
• Bump com.fasterxml.jackson:jackson-bom from 2.21.2 to 2.21.3 by @dependabot[bot] in #3326
• Bump org.jsoup:jsoup from 1.22.1 to 1.22.2 by @dependabot[bot] in #3329
• Bump io.qameta.allure from 4.0.0 to 4.0.2 by @dependabot[bot] in #3327

📖 Documentation improvements

• docs: align ALLURE_NO_ANALYTICS opt-out example with implementation by @grootstebozewolf in #3333

⛔️ Security

• Fix XSS in rendered report: HTML-escape user-controlled reportName by @grootstebozewolf in #3334
• Fix XSS in rendered report: HTML-escape user-controlled reportLanguage by @grootstebozewolf in #3337

👻 Internal changes

• Modernize Java quality checks and formatting ownership by @baev in #3328

New Contributors

• @grootstebozewolf made their first contribution in #3332

Full Changelog: 2.40.0...2.41.0

What's Changed

🚀 New Features

• new web by @baev in #3310

🐞 Bug Fixes

• Fix Windows start scripts classpath by @EmreeAltunn in #3309

⬆️ Dependency Updates

• Bump io.qameta.allure:allure-bom from 2.33.0 to 2.34.0 by @dependabot[bot] in #3304
• Bump com.github.spotbugs from 6.4.8 to 6.5.0 by @dependabot[bot] in #3306
• Bump org.projectlombok:lombok from 1.18.44 to 1.18.46 by @dependabot[bot] in #3317
• Bump gradle-wrapper from 9.4.1 to 9.5.0 by @dependabot[bot] in #3316
• Bump org.owasp.dependencycheck from 12.2.0 to 12.2.2 by @dependabot[bot] in #3305
• Bump net.sourceforge.pmd:pmd-java from 7.22.0 to 7.24.0 by @dependabot[bot] in #3318

👻 Internal changes

• add allure report by @baev in #3313
• Enrich tests by @baev in #3314
• enable screenshots and pw traces for e2e by @baev in #3322

New Contributors

• @EmreeAltunn made their first contribution in #3309

Full Changelog: 2.39.0...2.40.0

What's Changed

⬆️ Dependency Updates

• Bump com.diffplug.spotless from 8.3.0 to 8.4.0 by @dependabot[bot] in #3282
• Bump gradle-wrapper from 9.4.0 to 9.4.1 by @dependabot[bot] in #3284
• Bump com.fasterxml.jackson:jackson-bom from 2.21.1 to 2.21.2 by @dependabot[bot] in #3285
• Bump gradle/actions from 5 to 6 by @dependabot[bot] in #3286
• chore: update dependencies to fix vulnerabilities by @vdvukhzhilov in #3295
• Bump org.jsoup:jsoup from 1.21.2 to 1.22.1 by @dependabot[bot] in #3299

⛔️ Security

• fix serve & open path traversal by @baev in #3288
• fix: sanitize descriptionHtml, add ansi helper escaping by @vdvukhzhilov in #3296

👻 Internal changes

• Introduce Playwright e2e by @baev in #3297
• add test for bad characters in status details by @baev in #3298

Full Changelog: 2.38.1...2.39.0

What's Changed

🔬 Improvements

• Support utf8 env properties by @skuznetsov-al in #3266

🐞 Bug Fixes

• Fix attachments when results dir isn't normalized by @baev in #3280

⬆️ Dependency Updates

• Bump net.sourceforge.pmd:pmd-java from 7.20.0 to 7.22.0 by @dependabot[bot] in #3257

⛔️ Security

• replace logback with slf4j-jul by @baev in #3281

Full Changelog: 2.38.0...2.38.1