Skip to content

🎉🎉🎉 v13 🎉🎉🎉#2057

Merged
arlimus merged 22 commits intomainfrom
v13
Feb 19, 2026
Merged

🎉🎉🎉 v13 🎉🎉🎉#2057
arlimus merged 22 commits intomainfrom
v13

Conversation

@arlimus
Copy link
Copy Markdown
Member

@arlimus arlimus commented Jan 30, 2026

Welcome to cnquery v13 / cnspec v13

Note: I'm writing out the description as things evolve, please ask questions below.

Timeline

  • Feb 02, 2026 - Pre-release starts, all breaking changes happen here. We continue to release v12 and keep this branch open.
  • Feb 16, 2026 - Release candidates starts. v13 is rebased on the latest v12. Only non-breaking changes are introduced now. All features are now pushed to this v13 branch as well, so we can avoid rebases
  • Mar 02, 2026 - Release of v13 into main

Major features

  • dedupe migrated cnquery proto capabilities (inlined from explorer)
  • auto-update cnspec
  • make sure querypacks still work in cnspec, otherwise adjust/deprecate things as needed
    • ./content for packs
    • make test/lint/content
    • make sure the require field works
  • sbom subcommand (migrated from cnquery)
  • do not auto-download all providers on lint execution, stop and look for require

Stretch goals

  • policy lint to support multiple files as input
  • querypack output (show data) vs scan output (as we do now, focus on results)
  • MCP server added
  • Natural policy execution (tba)

Post v13 cleanup

  • docs to clarify all config flags
  • update the readme: AI-enabled policy enforcement
  • update all docs for cnspec scan/sbom (new and querypack stuff)
    • querypacks: highlight how filters is used, we noticed the examples in cnquery we using a now deprecated approach with v13
  • update docs for mock/recordings usage
  • update docs for shared props (see: 🎉🎉🎉 v13 🎉🎉🎉 mql#6511 (comment))

@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Jan 30, 2026

Test Results

  1 files   36 suites   56s ⏱️
640 tests 639 ✅ 1 💤 0 ❌
641 runs  640 ✅ 1 💤 0 ❌

Results for commit c663045.

♻️ This comment has been updated with latest results.

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
You can activate this via FEATURES=AutoUpdateEngine cnspec ...

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
We still did this for compatibility in v12, but are now stopping it, because it takes so much time and is just annoying. Instead we introduced the require option in v12 to be purposful on downloading providers

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
We only print data for querypacks by default, not for policies. The latter remain without data in the output unless users request it.

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
arlimus and others added 8 commits February 18, 2026 19:53
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
which is now in go.mondoo.com

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
- Add prerelease: true to goreleaser-unstable config

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
@arlimus arlimus force-pushed the v13 branch 2 times, most recently from 5e925fd to ea8ade9 Compare February 19, 2026 03:55
@arlimus arlimus changed the title 🏗️ v13 🚧🚧🚧 🎉🎉🎉 v13 🎉🎉🎉 Feb 19, 2026
@arlimus arlimus marked this pull request as ready for review February 19, 2026 03:56
Copy link
Copy Markdown

@github-advanced-security github-advanced-security bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

cnspec found more than 20 potential problems in the proposed changes. Check the Files changed tab for more details.

@github-actions

This comment has been minimized.

@github-actions

This comment has been minimized.

@github-actions

This comment has been minimized.

@github-actions

This comment has been minimized.

@github-actions

This comment has been minimized.

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
@arlimus
Copy link
Copy Markdown
Member Author

arlimus commented Feb 19, 2026

Given that everything is green, except for the policy linter that requires the dockerhub image for cnspec:13 to exist, I'm getting this merged now. We need to get all of main back to be green. I'll ask @philipbalinov to help with these last crucial steps.

@arlimus arlimus merged commit c663045 into main Feb 19, 2026
14 of 16 checks passed
@arlimus arlimus deleted the v13 branch February 19, 2026 07:01
@github-actions github-actions bot locked and limited conversation to collaborators Feb 19, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants