release: v1.27.0

[sonukapoor]

v1.27.0

Bumps version to 1.27.0, updates CHANGELOG, and sets latestVersion in the Docusaurus config.

Added

• Light/dark mode toggle in HTML report: one-click switch between themes, persisted to localStorage (feat: add light/dark mode toggle to HTML report #832)
• SARIF 2.1.0 compliance: ruleIndex, kind: "open", partialFingerprints, shared sarifFingerprintHash utility (feat: SARIF 2.1.0 output format #417)
• OA009 stale floor detector (feat: OA009 stale floor detector #770)
• Empty container pruning after --fix removes last override entry (feat: OA009 stale floor detector #770)
• Path-first argument ordering for the overrides subcommand (feat: OA009 stale floor detector #770)
• reachesFailOn shared helper; fixes --fail-on unknown asymmetry (fix(severity): align overrides --fail-on with scan path severityOrder #796)
• PD001 and PD002 phantom dependency detectors (feat: detect phantom dependencies - packages imported but not declared (PD001/PD002) #731)
• OA009 safety guard for phantom-anchored overrides (feat: detect phantom dependencies - packages imported but not declared (PD001/PD002) #731)
• overrides --json timestamped output file (feat: detect phantom dependencies - packages imported but not declared (PD001/PD002) #731)
• examples/all-scenarios/ fixture (feat: detect phantom dependencies - packages imported but not declared (PD001/PD002) #731)
• Fix-all tip when 2+ rules are auto-fixable (feat: detect phantom dependencies - packages imported but not declared (PD001/PD002) #731)

Fixed

• overrides --fix table no longer shows just-fixed findings (feat: OA009 stale floor detector #770)
• Hint commands include scanned path when not . (feat: OA009 stale floor detector #770)
• Double blank line before Override Hygiene section removed (feat: detect phantom dependencies - packages imported but not declared (PD001/PD002) #731)
• handleMultiFolderScan returns ExitCode instead of process.exit() (refactor(multi-folder-scan): return ExitCode instead of calling process.exit() #822)

Changed

• DebugSession type gains close(): void method (feat(debug): add close() method to DebugSession for resource lifecycle #820)
• GitHub Action: fix mode suppresses exit 1, propagates exit 2/3, warns on fail-on + fix (fix: warn and suppress fail-on exit when fix mode is active in the Ac… #828)
• GitHub Action runners updated to Node 24 (fix: Update actions to Node 24 #825)

Docs

• README leaned down and reordered for developer flow (docs: lean down README and reorder sections for developer flow #810)
• Dependabot alternative section added to README and comparison page (docs: add Dependabot alternative section with Action fix mode to README #800, docs: expand Dependabot comparison section with v1.26.0 fix mode #801, chore: add scheduled self-fix workflow using Action fix mode #807)
• OA009 rule page, OA001-OA008 corrections (feat: OA009 stale floor detector #770)
• Override hygiene wired into CLI reference and sidebar (docs: add override hygiene to CLI reference and wire missing pages into sidebar #811)
• Comparison page split into per-tool pages (docs: split comparison page into per-tool pages with index #814, docs: comparison page cleanup after split #816)
• PD001 and PD002 rule pages; override-hygiene index updated to 11 rules (feat: detect phantom dependencies - packages imported but not declared (PD001/PD002) #731)
• Direct and transitive dependency version display documented (docs: document direct and transitive dependency versions #769)

Tests

• OA009 unit tests and e2e fixture (feat: OA009 stale floor detector #770)
• --fail-on unknown regression test (fix(severity): align overrides --fail-on with scan path severityOrder #796)
• PD001 and PD002 unit and e2e tests (feat: detect phantom dependencies - packages imported but not declared (PD001/PD002) #731)
• Seeded fixture DB e2e test suite (chore: seeded fixture DB for deterministic e2e tests and scenario library #734)
• Pre-release-fix and workspace-transitive regression fixtures (feat: add workspace-transitive regression fixture (#528) #793, feat: add pre-release-fix regression fixture (#528) #794)