Changelog¶
All notable releases of Precogly are documented here.
v0.2.0¶
Release date: May 26, 2026
35 merged PRs covering features, bug fixes, architecture improvements, and operational readiness.
Features¶
- Delete functionality for components and countermeasures in Threat Analysis view (#79)
- Actor and attacker impact fields added to threat records (#70)
- Show/hide password toggle on login and signup forms (#64)
- Threat model import/export — added ThreatPersona/ThreatSource models, fixed round-trip fidelity (#86)
- Cross-framework requirement mappings for compliance overlays (#50)
- Improved threat model completion status indicators (#84)
- Threat libraries can now be imported without compliance packs (#98)
- Schema version added to pack.yaml with validation (#95)
Bug Fixes¶
- Threat materialization on re-sync — generate threats for existing components/flows and recalculate risks on orphan deletion (#63)
- Compliance overlay instances not refreshed after pack update (#60)
- Library packs can be removed and re-added to threat models (#57)
- Data flow threats no longer auto-populated from unrelated library packs (#46)
- Filter threat picker by component's library (#55)
- Taxonomy pack slug mismatch fix (#65)
- String-list format in components-threats.yaml now rejected at validation time (#74)
- Pack version mismatch — sync_all_packs_from_source now correctly returns success=False (#73)
- Provider parsing, component matching, and UI fallback fix (#48)
- Form field overflow in modals (#35)
- Forgot password element positioning fix (#36)
- npm audit vulnerabilities resolved (#62)
- tsconfig baseUrl deprecation fix (#67)
- Validation improvements with messages bubbled up to frontend (#78)
- Component category enums unified, control_type values consistent across stack (#87)
Architecture / Performance¶
- Pack resolution simplified — use filesystem as source of truth with O(1) path-based lookup (#47, #54)
- Pack directory structure simplified and libraries UI improved (#89)
DevOps / Operational Readiness¶
- CI workflow added for PR checks — pytest (via docker compose) + tsc (#90, #91)
- Branch protection enabled on main (1 review required, status checks must pass)
- release-please workflow added for automated releases (#93)
- Version numbers reconciled across frontend, backend, and docs (#92)
- GitHub Milestones set up for roadmap visibility
Documentation¶
- Added recipes section with IEC 62443 and EU banking recipes (#44)
- CONTRIBUTING.md added and updated (#42, #49)
- Docs for threat model import/export (#68)
- Docs for multiple DFD creation (#76)
- README updated with OWASP affiliation (#71)
- Discord link added to README (#85)
v0.1.0 - First stable release¶
Release date: April 28, 2026
Initial public release of Precogly.
Highlights¶
- Core threat modeling workflow
- DFD editor with nested components, trust zones, and trust boundaries
- Library packs (AWS, Azure, GCP)
- Threat analysis and reporting
- Import and export TM-BOM style JSON files
- Collaborative workspaces with roles and permissions
- Compliance mapping (DORA, CRA, ASVS, NIST CSF, SOC 2)
- Reference image support
- REST API with OpenAPI documentation
Notes¶
- Early-stage release. APIs and data models may change.
- Recommended for evaluation and feedback, not production use.