Merito Product Release Updates

Black Duck Detect 12.0.0 improves software composition analysis governance by adding controls for UV dependency groups, npm workspaces, Bazel dependencies, and empty scan results. Java 8 support is removed, Java versions below 17 are deprecated ahead of Detect 13.0.0, and Docker Inspector is scheduled for removal in 13.0.0. Enterprises should update CI runner standards, firewall allow lists, and scan policies before upgrading.

• Black Duck
• Detect
• CI/CD

TestRail 10.7.0 improves performance for large test suites by updating run statistics asynchronously after bulk case and suite changes. The release adds save-or-discard warnings in Administration and My Settings, supports filtering get_cases and get_bdds by multiple reference IDs, and resolves issues involving attachments, search, API reliability, and large-run reporting. Teams should account for a short period in which run statistics can show pre-change values while background updates complete.

• Test Management
• Enterprise Testing
• QA

Semgrep’s August 2026 update introduces structured, searchable Agentic Workflows logs and improves source-file links when SCM connectivity fails. Organizations using current Policies should plan for unified policies migration beginning August 24, 2026; the existing Policies experience sunsets November 1, 2026. The release also adds breaking_change and full_scan vocabulary to the public beta policies API and updates project finding counts to include Reviewing and To fix statuses.

• AppSec
• DevSecOps

SpiraPlan 9.4 introduces generally available portfolio-level planning and backlog management for enterprise software delivery. The capabilities extend SpiraPlan’s program-level planning model, helping leaders connect strategic objectives to programs, backlogs, and delivery execution. Merito can help organizations define the operating model, governance practices, and adoption approach for portfolio planning in SpiraPlan.

• Inflectra
• SpiraPlan
• GenAi

Microsoft Azure DevOps July 2026 introduces the GradleAuthenticate@0 pipeline task for authenticating Gradle builds to Azure Artifacts feeds. The update also adds guidance for pull request status checks, repository and pull request security, commit-message search, permission-performance tuning, personal access tokens, branch policies, and Azure Boards administration. Enterprise teams should use these changes to standardize release gates, reduce credential exposure, and improve auditability across delivery workflows.

• DevSecOps
• CI/CD
• QE

Sonatype Nexus Repository 95 adds hosted and group repositories for Composer, plus Chocolatey registry and Microsoft Symbol Server support through NuGet repositories. The release also extends cleanup policies across major package formats, improves private PyPI and Hugging Face client compatibility, supports temporary AWS credentials for ECR proxies, and introduces Firewall Success Metrics reporting. Enterprise teams should assess documented upgrade changes affecting Ansible Galaxy responses, content selectors, search indexes, and Preview UI customizations before deployment.

• Sonatype
• Nexus
• SDLC

Tricentis Tosca Cloud August 2026 introduces the Tricentis Product Expert in product documentation, providing AI summaries and answers grounded across Tricentis manuals. The release also allows contributor-role users to delete assets and folders in Organize your inventory. Enterprise teams should define deletion authority, review role assignments, and validate the staged rollout in each environment.

• Tricentis
• Test Automation
• QA

Semgrep’s July 2026 update adds Agentic Workflows in public beta, combining program analysis, deterministic tools, and constrained AI reasoning to generate reviewable security findings. Supply Chain customers can block dependencies only when all associated licenses are prohibited and receive default incident-policy support with Slack notifications based on recent SBOM exposure. The update also strengthens operational governance through policy-tag warnings, clearer webhook failures, and fixes to manual triage and integration behavior.

• AppSec
• DevSecOps

TestRail 10.6.2 fixes an issue in TestRail 10.6.1.1001 affecting custom fields when their configuration is edited. The Cloud hotfix helps QA and release teams make controlled changes to test metadata with greater confidence. It is a targeted maintenance release rather than a broad feature expansion.

• Test Management
• Enterprise Testing
• QA