Releases: DefectDojo/django-DefectDojo
2.37.2 🌈
Please consult the Upgrade notes in the documentation for specific instructions for this release, and general upgrade instructions. Below is an automatically generated list of all PRs merged since the previous release.
Changes since 2.37.1
- restore relative date filter for findings @hblankenship (#10760)
- feat(helm): Use
--wait
during tests @kiblik (#10744) - fix(helm): Break circular dependency @kiblik (#10740)
- if severity not enforced do not notify @hblankenship (#10776)
- OS Docs - Add accurate password for DefectDojo demo site @paulOsinski (#10759)
- No Docker build checks in GHA @cneill (#10747)
- 🐛 fix nmap parser, add script output #10456 @manuel-sommer (#10739)
🖌 Updates in UI
2.37.1 🌈
Please consult the Upgrade notes in the documentation for specific instructions for this release, and general upgrade instructions. Below is an automatically generated list of all PRs merged since the previous release.
Changes since 2.37.0
- fix(k8s): run k8s test on the latest version of k8s and minikube @kiblik (#10737)
- fix aqua parser #10585 @manuel-sommer (#10725)
- fix(helm): Remove leftover from debugging (db-migration-checker) @kiblik (#10683)
- fix(docs): Typo in "Release Notes" link @kiblik (#10682)
🚩 Changes to settings.dist.py
/ local_settings.py
🚩 Security
🐛 Bug Fixes
🖌 Updates in UI
🧰 Maintenance
2.37.0 🌈
Please consult the Upgrade notes in the documentation for specific instructions for this release, and general upgrade instructions. Below is an automatically generated list of all PRs merged since the previous release.
Changes since 2.36.0
- fix(multiselectfield): Use original repo @kiblik (#10420)
- Feature addition: Wizcli Parser @OsamaMahmood (#10603)
- Parser name matches module name test @cneill (#10656)
- remove coverage from requirements.txt @manuel-sommer (#10565)
- 🐛 fix Bearer CLI missing Scan Type #10652 @manuel-sommer (#10654)
- remove defusedxml in favor of lxml @manuel-sommer (#9840)
- 🐛 extend aqua format issue #10611 @manuel-sommer (#10616)
- feat(initContainer): Tune start-up process @kiblik (#10454)
- remove outdated skip_duplicates API reference from docs @paulOsinski (#10615)
- Aqua: Update parser deduplication criteria 🐛 @manuel-sommer (#10595)
- Aqua: Improve exception handling for reports without vulnerabilities 🐛 @manuel-sommer (#10594)
- Test Types: Return support for disabling test types via the
active
flag @Maffooch (#10562) - fix: Dockerfile warnings @fcecagno (#10505)
- Import: leverage the minimum severity flag @Maffooch (#10550)
- Bulk Edit: Add note when pushing finding to jira @Maffooch (#10545)
- Fix(django): Upgrade of 4.2.14 @kiblik (#10553)
- fix(deps): build psycopg3 instead of using pre-build binary @gietschess (#10491)
- Allow setting --max-fd argument to uwsgi to stop it from getting OOMKilled in Kubernetes @tmablunar (#10384)
- fix(flake8): remove leftover @kiblik (#10539)
- Ruff: add and fix G1 and G2 @kiblik (#10088)
- fix(doc): Breaking Change for HELM deployments with PostgreSQL @kiblik (#10524)
- Ruff: Address migrations, reduce redundancy, and remove Flake8 @Maffooch (#10494)
- Direct Renovate to ignore MySQL and RabbitMQ packages @cneill (#10512)
- fix(docker-compose): Remove 'version' from docker-compose @kiblik (#10519)
- fix(doc): Disable markup.highlight.guessSyntax + enable mermaid @kiblik (#10509)
- fix(helm-psql): Drop pinning of old version of postgresql @kiblik (#10507)
- extend AWS prowler v3 parser @kagahd (#10372)
- Feat(psql): Use psycopg3 @kiblik (#10348)
- fix(helm-celery): Drop unused variable logLevel @kiblik (#10468)
- Revert "Shuffle tests" @Maffooch (#10495)
- Ruff: add and fix TID @kiblik (#10113)
💣 Breaking Changes
🚩 Changes to settings.dist.py
/ local_settings.py
- Remove MySQL and RabbitMQ @Maffooch (#10661)
- Add new parser - Rapplex @AlperenY-cs (#10202)
- New Parser: Kiuwan SCA @mwager (#10522)
- Deprecate Python-jose and migrate okta to python_social_auth @manuel-sommer (#10117)
- 🐛 fix typo in settings.disty.py, #10529 @manuel-sommer (#10534)
- Ruff: Add and fix Q000 @kiblik (#10095)
- Ruff: add and fix COM @kiblik (#10086)
🚩 Database migration
🚀 General features and enhancements
🚀 API features and enhancements
- Remove MySQL and RabbitMQ @Maffooch (#10661)
- Uploaded File Management: Centralize file serving and bolster error handling @Maffooch (#10638)
- Ruff: add and fix T20 @kiblik (#10091)
- /import helptext correction: endpoint_to_add @paulOsinski (#10582)
- Ruff: Add and fix Q000 @kiblik (#10095)
- fix(api-notif): Fix order of validators @kiblik (#10533)
- API: Convert
get_filterset
calls toget_queryset
@Maffooch (#10543) - Rest Framework Tests: Improve speed and repeatability @Maffooch (#10503)
- Ruff: add and fix COM @kiblik (#10086)
- Mark Finding properties related_fields, jira_creation and jira_change as nullable @ccronca (#10371)
- Ruff: add and fix Q (except Q000) @kiblik (#10094)
🐛 Bug Fixes
- Report ToC: Expand on whitespace escaping @Maffooch (#10646)
- Importer: Correct logic bug for empty scan reports @Maffooch (#10645)
- Refresh Helm Chart Lock File: The removal @Maffooch (#10641)
- Benchmarks: Add additional permissions for AJAX calls @Maffooch (#10640)
- Finding notes cascading deletes @dogboat (#10636)
- Engagement: Add missing permission check to view an Engagement @Maffooch (#10639)
- Uploaded File Management: Centralize file serving and bolster error handling @Maffooch (#10638)
- Update Qualys WebApp parser to use DefusedXML @Maffooch (#10637)
- Option Compression: Accommodate unsaved objects a bit better @Maffooch (#10623)
- Finding Open/Close/Review: Enforce more status standardization @Maffooch (#10606)
- Option Compression: add some polish @Maffooch (#10583)
- Close Findings: Push notes if
push notes
is enabled @Maffooch (#10581) - Endpoint get or create: Do not raise warning when there is an existing endpoint @Maffooch (#10555)
🖌 Updates in UI
- Bugfix -> Dev for 2.37.0 @Maffooch (#10677)
- report-builder-sort-fixes Fix report builder finding and endpoints widgets @dogboat (#10650)
- Cosmetic UX change - clickable product metrics - redirect to findings with severity filter @KJana12 (#10613)
- Groups/users labels text @dogboat (#10663)
- Report ToC: Expand on whitespace escaping @Maffooch (#10646)
- creds-notes-fixes Some updates to creds/cred-related notes @dogboat (#10644)
- Listing Tables: Add toggle switch in system settings @Maffooch (#10617)
- Delete Preview: Expand on missed objects @Maffooch (#10564)
- Some Reporting Updates @dogboat (#10563)
- Ruff: Add and fix Q000 @kiblik (#10095)
- Ruff: add and fix COM @kiblik (#10086)
- Ruff: add and fix Q (except Q000) @kiblik (#10094)
- Ruff: add and fix PIE @kiblik (#10090)
🧰 Maintenance
- Remove MySQL and RabbitMQ @Maffooch (#10661)
- chore(deps): update dependency autoprefixer from 10.4.19 to v10.4.20 (docs/package.json) @renovate (#10672)
- Bump asteval from 1.0.1 to 1.0.2 @dependabot (#10671)
- Bump pyjwt from 2.8.0 to 2.9.0 @dependabot (#10670)
- Bump boto3 from 1.34.151 to 1.34.152 @dependabot (#10669)
- Bump redis from 5.0.7 to 5.0.8 @dependabot (#10659)
- Bump boto3 from 1.34.150 to 1.34.151 @dependabot (#10658)
- Bump boto3 from 1.34.149 to 1.34.150 @dependabot (#10653)
- Bump nginx from
a45ee5d
to208b70e
@dependabot (#10643) - Bump ruff from 0.5.4 to 0.5.5 @dependabot (#10635)
- Bump boto3 from 1.34.148 to 1.34.149 @dependabot (#10634)
- Bump boto3 from 1.34.147 to 1.34.148 @dependabot (#10632)
- Bump packageurl-python from 0.15.4 to 0.15.6 @dependabot (#10633)
- Update redis:7.2.5-alpine Docker digest from 7.2.5 to 7.2.5-alpine (docker-compose.yml) @renovate (#10609)
- Update dependency postcss from 8.4.39 to v8.4.40 (docs/package.json) @renovate (#10624)
- Update nginx/nginx-prometheus-exporter Docker tag from 1.2.0 to v1.3.0 (helm/defectdojo/values.yaml) @renovate (#10625)
- Update postgres:16.3-alpine Docker digest from 16.3 to 16.3-alpine (docker-compose.yml) @renovate (#10608)
- Bump boto3 from 1.34.145 to 1.34.147 @dependabot (#10621)
- Bump django-crispy-forms from 2.2 to 2.3 @dependabot (#10601)
- Bump cryptography from 42.0.8 to 43.0.0 @dependabot (#10599)
- Bump ruff from 0.5.3 to 0.5.4 @dependabot (#10600)
- Bump ruff from 0.5.2 to 0.5.3 @dependabot (#10588)
- Bump boto3 from 1.34.144 to 1.34.145 @dependabot (#10587)
- Bump vulners from 2.1.7 to 2.2.0 @dependabot (#10579)
- Bump python-gitlab from 4.7.0 to 4.8.0 @dependabot (#10580)
- Bump fontawesomefree from 6.5.1 to 6.6.0 @dependabot (#10578)
- Update gcr.io/cloudsql-docker/gce-proxy Docker tag from 1.35.4 to v1.36.0 (helm/defectdojo/values.yaml) @renovate (#10577)
- Bump justgage from 1.6.1 to 1.7.0 in /components @dependabot (#10574)
- Bump ruff from 0.5.1 to 0.5.2 @dependabot (#10567)
- Bump boto3 from 1.34.143 to 1.34.144 @dependabot (#10569)
- Bump packageurl-python from 0.15.3 to 0.15.4 @dependabot (#10570)
- Bump social-auth-app-django from 5.4.1 to 5.4.2 @dependabot (#10568)
- Bump coverage from 7.5.4 to 7.6.0 @dependabot (#10560)
- Bump asteval from 1.0.0 to 1.0.1 @dependabot (#10561)
- Bump djangorestframework from 3.14.0 to 3.15.2 @dependabot (#10431)
- Bump boto3 from 1.34.142 to 1.34.143 @dependabot (#10558)
- Bump django-debug-toolbar from 4.4.5 to 4.4.6 @dependabot (#10557)
- Bump boto3 from 1.34.141 to 1.34.142 @dependabot (#10551)
- Bump packageurl-python from 0.15.2 to 0.15.3 @dependabot (#10541)
- Bump boto3 from 1.34.140 to 1.34.141 @dependabot (#10542)
- Bump django-debug-toolbar from 4.4.4 to 4.4.5 @dependabot (#10527)
- Bump openapitools/openapi-generator-cli from v7.6.0 to v7.7.0 @dependabot (#10531)
- Bump boto3 from 1.34.139 to 1.34.140 @dependabot (#10528)
- Bump django-split-settings from 1.3.1 to 1.3.2 @dependabot (#10526)
- Bump humanize from 4.9.0 to 4.10.0 @dependabot (#10525)
- Update dependency ruff from 0.5.0 to v0.5.1 (requirements-lint.txt) @renovate (#10521)
- Bump django-debug-toolbar from 4.4.2 to 4.4.4 @dependabot (#10520)
- Bump boto3 from 1.34.138 to 1.34.139 @dependabot (#10518)
- Bump psycopg[binary] from 3.1.19 to 3.2.1 @dependabot (#10517)
- Bump packageurl-python from 0.15.1 to 0.15.2 @dependabot (#10516)
- Bump boto3 from 1.34.137 to 1.34.138 @dependabot (#10508)
- Bump boto3 from 1.34.136 to 1.34.137 @dependabot (#10489)
- Bump asteval from 0.9.33 to 1.0.0 @dependabot (#10488)
- Bump drf-spectacular-sidecar from 2024.6.1 to 2024.7.1 @dependabot (#10479)
- Bump pillow from 10.3.0 to 10.4.0 @dependabot (#10482)
- Update dependency postcss from 8.4.38 to v8.4.39 (docs/package.json) @renovate (#10476)
- Bump openpyxl from 3.1.4 to 3.1.5 @dependabot (#10478)
- Bump django-test-migrations from 1.3.0 to 1.4.0 @dependabot (#10481)
- Bump boto3 from 1.34.135 to 1.34.136 @dependabot (#10480)
- Update dependency ruff from 0.4.10 to v0.5.0 (requirements-lint.txt) @renovate (#10466)
- Bump python-gitlab from 4.6.0 to 4.7.0 @dependabot...
2.36.6 🌈
Please consult the Upgrade notes in the documentation for specific instructions for this release, and general upgrade instructions. Below is an automatically generated list of all PRs merged since the previous release.
🚩 Database migration
🚀 API features and enhancements
🐛 Bug Fixes
- Report ToC: Expand on whitespace escaping @Maffooch (#10646)
- Importer: Correct logic bug for empty scan reports @Maffooch (#10645)
- Refresh Helm Chart Lock File: The removal @Maffooch (#10641)
- Benchmarks: Add additional permissions for AJAX calls @Maffooch (#10640)
- Finding notes cascading deletes @dogboat (#10636)
- Engagement: Add missing permission check to view an Engagement @Maffooch (#10639)
- Uploaded File Management: Centralize file serving and bolster error handling @Maffooch (#10638)
- Update Qualys WebApp parser to use DefusedXML @Maffooch (#10637)
- 🐛 extend aqua format issue #10611 @manuel-sommer (#10616)
🖌 Updates in UI
2.36.5 🌈
Please consult the Upgrade notes in the documentation for specific instructions for this release, and general upgrade instructions. Below is an automatically generated list of all PRs merged since the previous release.
🐛 Bug Fixes
2.36.4 🌈
Please consult the Upgrade notes in the documentation for specific instructions for this release, and general upgrade instructions. Below is an automatically generated list of all PRs merged since the previous release.
🚀 API features and enhancements
- /import helptext correction: endpoint_to_add @paulOsinski (#10582)
🐛 Bug Fixes
- Option Compression: add some polish @Maffooch (#10583)
- Close Findings: Push notes if
push notes
is enabled @Maffooch (#10581) - Aqua: Update parser deduplication criteria 🐛 @manuel-sommer (#10595)
- Aqua: Improve exception handling for reports without vulnerabilities 🐛 @manuel-sommer (#10594)
2.36.3 🌈
Please consult the Upgrade notes in the documentation for specific instructions for this release, and general upgrade instructions. Below is an automatically generated list of all PRs merged since the previous release.
Changes since 2.36.2
- Test Types: Return support for disabling test types via the
active
flag @Maffooch (#10562) - Import: leverage the minimum severity flag @Maffooch (#10550)
- Bulk Edit: Add note when pushing finding to jira @Maffooch (#10545)
- Allow setting --max-fd argument to uwsgi to stop it from getting OOMKilled in Kubernetes @tmablunar (#10384)
- fix(flake8): remove leftover @kiblik (#10539)
🚩 Changes to settings.dist.py
/ local_settings.py
- 🐛 fix typo in settings.disty.py, #10529 @manuel-sommer (#10534)
🚀 API features and enhancements
🐛 Bug Fixes
🖌 Updates in UI
2.36.2 🌈
Please consult the Upgrade notes in the documentation for specific instructions for this release, and general upgrade instructions. Below is an automatically generated list of all PRs merged since the previous release.
🚀 API features and enhancements
2.36.1 🌈
Please consult the Upgrade notes in the documentation for specific instructions for this release, and general upgrade instructions. Below is an automatically generated list of all PRs merged since the previous release.
Changes since 2.36.0
- fix(doc): Breaking Change for HELM deployments with PostgreSQL @kiblik (#10524)
- Ruff: Address migrations, reduce redundancy, and remove Flake8 @Maffooch (#10494)
- Direct Renovate to ignore MySQL and RabbitMQ packages @cneill (#10512)
- fix(docker-compose): Remove 'version' from docker-compose @kiblik (#10519)
- fix(doc): Disable markup.highlight.guessSyntax + enable mermaid @kiblik (#10509)
- fix(helm-psql): Drop pinning of old version of postgresql @kiblik (#10507)
- fix(helm-celery): Drop unused variable logLevel @kiblik (#10468)
🚀 General features and enhancements
🚀 API features and enhancements
2.36.0 🌈
Please consult the Upgrade notes in the documentation for specific instructions for this release, and general upgrade instructions. Below is an automatically generated list of all PRs merged since the previous release.
Changes since 2.35.0
- The Jira environment is built using only existing endpoints @ccronca (#10428)
- Ruff: Add safe S* rules, fix order for EXE @kiblik (#10084)
- Ruff: add and fix INP @kiblik (#10089)
- fix(Risk_Acceptance): Remove redundancy in strings of Treatments @kiblik (#10361)
- 🐛 fix acunetix360 NoneType object #10435 @manuel-sommer (#10440)
- Shuffle tests @kiblik (#10335)
- Ruff: add T10 @kiblik (#10087)
- Ruff: add more safe TRY rules @kiblik (#10114)
- Fix create notification for group of findings @ccronca (#10433)
- 🐛 fix qualys webapp scan request body @manuel-sommer (#10422)
- fix(loc): Do not use _(...) in combination with format @kiblik (#10407)
- fix: slack address on issue template @fcecagno (#10411)
- 🐛 fix Nonetype in Acunetix, #10370 @manuel-sommer (#10381)
- Upgrade Django to 4.2.13 @kiblik (#9493)
- Rest Framework Tests: Isolate tests by request type @Maffooch (#10387)
- Entrypoint Scripts: Add container level breakouts to prevent doom loopings @Maffooch (#10374)
- fix(imp-options): Wrong type-checker in validate_api_scan_configuration @kiblik (#10345)
- Use Postgres in rest-framework-tests @kiblik (#9885)
- 🐛 fix netsparker issue #10311 @manuel-sommer (#10312)
🚩 Changes to settings.dist.py
/ local_settings.py
- ✨ add deepfence threatmapper @manuel-sommer (#9688)
- Enhance Kubescape parser @a-ruff (#10369)
- 🐛 fix trivy operator deduplication setting @manuel-sommer (#10389)
🚀 General features and enhancements
🚀 API features and enhancements
- Ruff: add and fix RSE @kiblik (#10093)
- feat(api - user contact): Add all user data @kiblik (#10416)
- Finding Reports: Support string based filtering @Maffooch (#10426)
- openapi fix: allow last_login to be null @cedricbu (#10360)
- Mark UserProfile properties user_contact_info and global_role as optional @sfowl (#10314)
🐛 Bug Fixes
- Jira Finding Group Templates: Correct object links @Maffooch (#10393)
- Async Importer: Correct typing bug with
DD_ASYNC_FINDING_IMPORT
enabled @Maffooch (#10373) - String Filtering: Correct Typo For Reviewers @Maffooch (#10353)
- Importer: Correct
add_findings_to_auto_group
args @Maffooch (#10351) - String Filtering: Support ID matching for links on listing pages @Maffooch (#10352)
🖌 Updates in UI
- Bugfix -> Dev: Release 2.36.0 @Maffooch (#10483)
- Metrics performance improvements @dogboat (#10446)
- fix(passwords): Merge clean location of login related templates @kiblik (#10340)
- feat(email notif): Scan_added - put findings to
<details>
@kiblik (#10253) - Finding Reports: Support string based filtering @Maffooch (#10426)
- Jira Finding Group Templates: Correct object links @Maffooch (#10393)
🧰 Maintenance
- Bump boto3 from 1.34.132 to 1.34.135 @dependabot (#10470)
- Bump redis from 5.0.6 to 5.0.7 @dependabot (#10465)
- Bump debugpy from 1.8.1 to 1.8.2 @dependabot (#10457)
- Bump boto3 from 1.34.131 to 1.34.132 @dependabot (#10452)
- Bump coverage from 7.5.3 to 7.5.4 @dependabot (#10447)
- Bump nginx from
69f8c2c
toa45ee5d
@dependabot (#10448) - chore(deps): update redis:7.2.5-alpine docker digest from 7.2.5 to 7.2.5-alpine (docker-compose.yml) @renovate (#10444)
- chore(deps): update postgres:16.3-alpine docker digest from 16.3 to 16.3-alpine (docker-compose.yml) @renovate (#10441)
- chore(deps): update redis:7.2.5-alpine docker digest from 7.2.5 to 7.2.5-alpine (docker-compose.yml) @renovate (#10442)
- Bump boto3 from 1.34.130 to 1.34.131 @dependabot (#10443)
- chore(deps): update postgres:16.3-alpine docker digest from 16.3 to 16.3-alpine (docker-compose.yml) @renovate (#10439)
- chore(deps): update dependency ruff from 0.4.9 to v0.4.10 (requirements-lint.txt) @renovate (#10438)
- chore(deps): update postgres:16.3-alpine docker digest from 16.3 to 16.3-alpine (docker-compose.yml) @renovate (#10427)
- Bump sqlalchemy from 2.0.30 to 2.0.31 @dependabot (#10432)
- Bump boto3 from 1.34.128 to 1.34.130 @dependabot (#10436)
- Bump boto3 from 1.34.127 to 1.34.128 @dependabot (#10425)
- Update docker/build-push-action action from v5 to v6 (.github/workflows/release-x-manual-docker-containers.yml) @renovate (#10413)
- Bump boto3 from 1.34.126 to 1.34.127 @dependabot (#10415)
- Bump django-crispy-forms from 2.0 to 2.2 @dependabot (#10414)
- Bump django-debug-toolbar from 4.3.0 to 4.4.2 @dependabot (#10274)
- Bump django-filter from 23.5 to 24.2 @dependabot (#9993)
- Update dependency ruff from 0.4.8 to v0.4.9 (requirements-lint.txt) @renovate (#10406)
- Bump packageurl-python from 0.15.0 to 0.15.1 @dependabot (#10403)
- Bump boto3 from 1.34.125 to 1.34.126 @dependabot (#10404)
- Bump redis from 5.0.5 to 5.0.6 @dependabot (#10405)
- Update gcr.io/cloudsql-docker/gce-proxy Docker tag from 1.35.3 to v1.35.4 (helm/defectdojo/values.yaml) @renovate (#10394)
- Bump openpyxl from 3.1.3 to 3.1.4 @dependabot (#10397)
- Bump boto3 from 1.34.123 to 1.34.125 @dependabot (#10398)
- Bump braces from 3.0.2 to 3.0.3 in /docs @dependabot (#10376)
- Bump boto3 from 1.34.120 to 1.34.123 @dependabot (#10380)
- Bump boto3 from 1.34.119 to 1.34.120 @dependabot (#10349)
- chore(deps): update helm release rabbitmq from 14.3.3 to ~14.4.0 (helm/defectdojo/chart.yaml) @renovate (#10347)
- Bump redis from 5.0.4 to 5.0.5 @dependabot (#10350)
- chore(deps): update postgres:16.3-alpine docker digest from 16.3 to 16.3-alpine (docker-compose.yml) @renovate (#10337)
- Bump cryptography from 42.0.7 to 42.0.8 @dependabot (#10341)
- chore(deps): update dependency ruff from 0.4.7 to v0.4.8 (requirements-lint.txt) @renovate (#10344)
- Bump boto3 from 1.34.118 to 1.34.119 @dependabot (#10342)
- chore(deps): update postgres:16.3-alpine docker digest from 16.3 to 16.3-alpine (docker-compose.yml) - autoclosed @renovate (#10327)
- Bump drf-spectacular-sidecar from 2024.5.1 to 2024.6.1 @dependabot (#10329)
- Bump uwsgi from 2.0.25.1 to 2.0.26 @dependabot (#10331)
- Bump boto3 from 1.34.117 to 1.34.118 @dependabot (#10330)