Skip to content

Releases

v5.25.4

Choose a tag to compare

@gorrabot gorrabot released this 29 Oct 20:33
  • [MOD] Added Markdown support on the description of the What's New items. #3152

v5.25.3

Choose a tag to compare

@gorrabot gorrabot released this 28 Oct 18:12
  • [MOD] Improved performance of the workspaces list and other API endpoints by reducing database queries. #8595

v5.25.2

Choose a tag to compare

@gorrabot gorrabot released this 26 Oct 22:10
  • [FIX] Reduced database connection usage so shared databases do not run out of connections: the connection pool is now configurable in server.ini with a lower default, Celery beat and workers close the connections they kept open from startup, faraday-worker without --concurrency now starts at most celery_max_worker_concurrency processes (default 2, previously one per CPU core), and each process is identified by application_name in PostgreSQL. #8547

v5.25.1

Choose a tag to compare

@gorrabot gorrabot released this 21 Oct 20:22
  • [ADD] Schedules can now run once at a fixed date (schedule_type: once) or start from a given date (start_date), crons accept the nth weekday of the month (e.g. 0 4 * * 3#2), and agent executions expose when they ended (end_date). Corporate only: Security Scanners can be blocked, so they can't be run manually and their schedules are skipped until they're unblocked. Also fixes schedules firing in the server timezone instead of the schedule's own timezone. #8556

v5.25.0

Choose a tag to compare

@gorrabot gorrabot released this 06 Oct 19:43
  • [FIX] Re-importing an open or re-opened vulnerability now refreshes last_detected and update_date. #8518
  • [ADD] Added What's New section. #8492
  • [FIX] Exporting vulnerabilities to CSV with the Last Detected column no longer returns a 400. #8460
  • [FIX] Fixed pipeline conditions never matching when a choice custom attribute has no valid choices. #8577
  • [ADD] New GET /vulns/<id>/tools_history endpoint and a "Web UI" fallback for asset creator tool; also fixes command creator not being set on bulk vulnerability updates. #8470
  • [FIX] Fix custom attribute values persisting after deletion when recreated with the same name. #6369
  • [FIX] Vulnerability templates created via file import (CSV or Status Report) now set the creator field. #8245

v5.24.2

Choose a tag to compare

@gorrabot gorrabot released this 17 Sep 23:02
  • [FIX] /vulns/count//vulns/filter support multiple statuses (Not Closed); Pro/Corp also excludes grouped vulns from stats. #8517

v5.24.0

Choose a tag to compare

@gorrabot gorrabot released this 03 Sep 19:26
  • [FIX] Fixed TypeError during docker-compose up -- @BekTim. #8369

v5.23.2

Choose a tag to compare

@gorrabot gorrabot released this 20 Aug 14:09
  • [FIX] Periodic maintenance tasks now run via Celery Beat instead of a self-rescheduling ETA chain, preventing task-storm redelivery. #8399
  • [FIX] Fixed faraday-manage failing on a clean installation after the SQLAlchemy 2 upgrade, which left initdb unable to create the database. #8465

v5.23.0

Choose a tag to compare

@gorrabot gorrabot released this 23 Jul 22:59
  • [ADD] Runners table now supports filtering by Status, Tools, Last Execution Date, Last Execution Tool, and Category. #8279
  • [MOD] Upgrade SQLAlchemy to 2.0 and Flask-SQLAlchemy to 3.x. #8308
  • [MOD] Invalidate the current session after a successful password change so users must re-authenticate. #8379
  • [FIX] Fix 500 error when filtering user tokens by the expired column. #8395
  • [FIX] Reject out-of-range cron expressions on agent schedules so an invalid crontab can no longer break the schedule list or the scheduler. #8355

v5.22.0

Choose a tag to compare

@gorrabot gorrabot released this 19 Jun 16:41
  • [ADD] Added workspace_name to the supported columns for vulnerabilities CSV export. #8272
  • [ADD] Expose creator command, parameters and per-service status on assets' API response. #8253
  • [ADD] Added float type support for custom attributes. #8079
  • [ADD] Added Last Detected as a filterable attribute in pipeline job rules. #8202
  • [MOD] Truncate large vulnerability fields to 100 chars in the table view; CSV export preserves full content. #8270
  • [MOD] Modify celery log handler to support log rotation with 5 historical files. #7649
  • [FIX] Include cloud agent executions in workspace last_run_agent_date. #8233
  • [FIX] Improved handling and validation of sorting parameters in the Filter API. #8327
  • [FIX] Fixed Activity Feed returning nonvisible items. #8003
  • [FIX] Fixed workflow conditions failing on asset date/numeric fields with </>/<=/>=. #8296
  • [FIX] Fixed duplicate notifications and premature command close on multi-batch report imports. #8313
  • [FIX] Fixed random CI test failures. #8187
  • [FIX] Fixed assets filter dropping items with no creator when ordering, filtering or grouping by creator username. #7268
  • [FIX] Fixed several OpenAPI/Swagger generation bugs and document enum constraints on schema fields. #8181