CybercentreCanada/assemblyline v4.7.2.stable0

4.7.2.0

on GitHub

What’s Changed

This release improves validation clarity, submission progress visibility, service switching behavior, and overall UI consistency:

• Performance/Optimizations
  With some help from @halfguru, we've updated and optimized some core functions used throughout Assemblyline.
  This includes fixes to file streaming within Assemblyline services. (#427)

• Filetype Override:
  Users can now override the system-detected root file before running analysis.

• Validation Feedback
  Errors now include a severity property to distinguish warnings from critical errors. Severities are displayed in the Error Viewer and in a dedicated section within File Details.

• Submission Progress Tracking
  The progress indicator is now interactive—clicking it displays the current outstanding services, allowing users to view submission progress instead of waiting on the interface to display it.
  Users can now click the progress loading component to display the outstanding services progress for easier monitoring the progress of their submission.

• Service Form State
  Switching between services now correctly resets all related data, preventing incorrect values from persisting between pages.

• User Interface Fixes

  • Prevented long links from overflowing their containers.
  • Corrected the SpeedDial button background to remain opaque when closed
  • Updated tooltips to display the correct reset value when reverting service selections
  • Submission Report now displays file sizes in a human-readable format.
  • Improvements to OAuth flows to prevent race conditions that prevent user login
  • Better display of errors vs warnings in the UI

• API Fixes:

  • If a user settings profile explicitly sets services.selected: [], defaults now correctly fall back to the selected submission profile configuration.
  • API Key caching to speed up interactions with the API in integration scripts (default: 5 minutes) (@halfguru)
  • Extracted files are properly cleaned up when deleting submissions (@halfguru) (#385)

• Helm changes:
  Internal Redis deployment can now be disabled with useInteralRedis: false.

• Tagging:
  Added new dynamic process tags: dynamic.process.(file_path|module_name|module_path).

Added

• Validation Severity Support
  Extended the Error model with a severity property to differentiate between error and warning states.

  • Added a severity column to the Error Viewer to filter by severity.
  • Introduced a dedicated Warnings section in File Details to clearly separate non-blocking issues from errors.

• Filetype Override (API, UI, Rust & Python)
  Added the ability to override root file detection used during analysis.

• Configurable internal Redis deployment
  Added useInteralRedis: false to disable deploying internal Redis instances.

• Additional dynamic process tags (Python & Rust)
  Added dynamic.process.(file_path|module_name|module_path) tags.

• Added API key caching (UI, Python) @halfguru
  Allows the API to cache the validation of API keys for a certain duration

Changed

• Submission Progress Handling
  Updated the progress indicator to function as a button that toggles the visibility of the outstanding services Snackbar.

• remove unnecessary list() conversions and use all()/any() generators @halfguru
  Optimize performance of collection usage within core Python functions

Fixed

• Link Overflow in UI Components
  Resolved an issue in the URL body component where link elements could overflow their container.

• Alert Page SpeedDial Background Color
  Fixed an issue where the SpeedDial component retained a background color when in a closed state.

• Service State Reset on Service Detail Page
  Ensured that both service and default state are fully reset when switching between services, preventing stale or leaked state.

• Selected Service Reset Tooltip Accuracy
  Corrected tooltip messaging on the Submit and Settings pages to accurately reflect the value that will be restored when using the reset action.

• Human-readable file sizes in Submission Report @jpl1337
  Updated the Submission Report to render file sizes in human-readable units.

• Defaults handling when services.selected: [] is set
  Ensured defaults are derived from the active submission profile configuration when services.selected: [] is present in a user settings profile.

• Remove NODE_NAME env from Beats' daemonsets
  Removed NODE_NAME from Beats DaemonSets to improve Metricbeat compatibility in Kubernetes clusters.

• Service catalogue installs use the correct alias
  Ensured the correct alias is used when installing services from the catalogue to support older Assemblyline deployments.

• extracted files not deleted with submission deletion @halfguru
  Ensure extracted files aren't orphaned unnecessarily when requesting to delete a submission

• tighten email and domain validation @halfguru
  Optimize validation of email and domains

Dependencies

• dompurify → v3.3.1 (from v3.2.5)