v2.0.0
Release Date: July 20 2026
New Features
- Pre-processing & Chunking Status — On large repositories where files need guardrail scanning, per-file token-limit checks, and chunking before batch submission, files now appear in a new
Pre-processingstatus so you can see that work is in flight and not stalled. The Admin dashboard exposes a dedicated Pre-processing counter, and the file list / admin files view support filtering on this status. - Started Building Subscription Management Functionality — Initial implementation of subscription management features to enable flexible billing and plan management.
Bug Fixes
- Updated Vulnerable 3rd Party Packages — Updated vulnerable third-party packages to their patched versions to resolve security vulnerabilities.
- Batch Statuses Could Revert After Completion — Fixed a bug where stale Anthropic batch status responses could flip completed/failed/canceled batches back to processing.
- Duplicate Clerk Accounts on Concurrent Signup Retries — Fixed a race condition where concurrent signup retries could both recreate Clerk organizations/users for the same account; retries now atomically claim a lease.
- Orphaned Files Stuck During Batch Processing — Fixed a bug where files interrupted in preprocessing state were released from their batch but never returned to the queue.
- Fixed an Issue Where an Unexpected File Input Could Cause a Repo to Fail Processing — Improved file input validation to prevent repository scans from failing due to unexpected or malformed file inputs.
- Vendor Document PDF Viewer Toolbar Layout Broken — Fixed the PDF viewer navigation bar losing its flex layout when revealed.
- Approve/Reject Button Contrast Issues — Fixed low-contrast white text on warning-colored buttons inside cards and tables.
- Staging Smoke Tests Failing on Missing pydantic — Fixed unconditional module pre-load in the test suite that broke the minimal-dependency staging smoke-test CI job.
Improvements
- Rebranded to "Can I Run That?" — The application has been fully rebranded from RepoRisk to "Can I Run That?" (CIRT) to match the domain in use and reflect the expanded functionality that now includes vendor reviews. The platform is now fully rebrandable via environment variables (
APP_NAME_LONGandAPP_NAME_SHORT), enabling easy customization for different deployments without code changes. All user-facing surfaces—including API documentation, web frontend, and documentation site—reflect the configured branding. - Vendor Security Review Enhancements — Enhanced AI-powered vendor due diligence with comprehensive vendor review functionality, supporting document analysis, security questionnaires, compliance artifact review, and structured assessment workflows.
- Hardened CI Checks —
ci_run.pynow bootstraps Ruff/Black before running lint checks so it works on a fresh checkout, and no longer redundantly re-installs test dependencies. - JavaScript Cache-Busting for Auth Scripts — Added
?v=APP_VERSIONquery parameters to auth script URLs to force browsers to fetch fresh JS after deployments, preventing stale cached scripts from conflicting with updated HTML patterns. - Webpack Prototype Pollution Fix — Pinned
webpackto fixed version and addedwebpackbaroverride to restore build compatibility while fixing prototype pollution via crafted magic comments.