update Pro changelog 2.42.0

[paulOsinski]

Updating Pro release notes with new features.

[dryrunsecurity]

DryRun Security Summary

The pull request updates the DefectDojo Pro (Cloud Version) changelog, highlighting improvements to API endpoints, Beta UI features, and the Generic Findings Import parser, with a focus on enhancing usability and functionality.

Expand for full summary

Summary:

The changes in this pull request are focused on the changelog for the DefectDojo Pro (Cloud Version) application. The key changes include improvements to the API endpoints, such as the ability to order the results of the /test_reimport endpoint by various fields, and the removal of the requirement for the 'Force To Active / Verified' flag when calling the /import-scan and /reimport-scan endpoints. Additionally, the changelog includes updates to the Beta UI, such as the ability to regenerate or copy the user's API token, and the addition of fields for EPSS score and percentile to the Generic Findings Import parser.

From an application security perspective, these changes are noteworthy as they provide more flexibility and control over the import and reimport of scan results, which can help security teams better analyze and manage the imported findings. The removal of the requirement for the 'Force To Active / Verified' flag is also an improvement, as it allows the tool's default status to be used, reducing the potential for human error in setting the correct status. Overall, these changes appear to be focused on improving the usability and functionality of the DefectDojo Pro (Cloud Version) application, with a few security-relevant updates to the API endpoints.

Files Changed:

• docs/content/en/changelog/changelog.md: This file contains the changelog for the DefectDojo Pro (Cloud Version) application. The changes in this pull request include updates to the changelog for versions 2.42.0 and 2.41.4, with a focus on improvements to the API endpoints, the Beta UI, and the Generic Findings Import parser.

Code Analysis

We ran 9 analyzers against 1 file and 0 analyzers had findings. 9 analyzers had no findings.

View PR in the DryRun Dashboard.

[mtesauro]

Approved