Update changelog for new SSH and OATH fixes; increment version to 1.2.2; enhance HTML report with organization extensions details and tests.

Author: jasonmoodie

CHANGELOG.md

@@ -7,8 +7,13 @@ and this project adheres to Semantic Versioning.
 
 ## [Unreleased]
 
+### Added
+- Executive summary now includes an Organization Extensions section that lists all extensions with Installed vs Default classification and installed-first ordering.
+- Top navigation now includes an Extensions anchor placed before Run Comparison for faster access to extension findings.
+
 ### Fixed
 - Pipeline Authorization Scope checks now evaluate effective scope using project/org pipeline settings (`enforceJobAuthScope` and `enforceJobAuthScopeForReleases`) before pipeline-level values, preventing false positives when scope is enforced at project level.
+- Organization policy checks now evaluate policy `value` (with safe casing/boolean normalization) and include the new helper functions in parallel runspace serialization, fixing false results for `OAUTH-02` (SSH Access Disabled) and aligning `OAUTH-01` with the actual policy state.
 
 ## [1.1.4] - 2026-05-19
 

VERSION

@@ -1 +1 @@
-1.1.5
+1.2.2