Rebuild of v4.7.4.stable7 following pipelines fixes
What’s Changed
This release focuses on improving reliability, security, and day-to-day usability across Assemblyline components.
- Smoother user workflows: UI and submission flows were refined to reduce friction and visual instability.
- Improved data handling: URL/file matching and path-processing behaviors were enhanced for more accurate results.
- Security hardening: Access control and request-handling protections were strengthened.
- Platform modernization: Multiple libraries, SDKs, and runtime dependencies were updated to keep the stack current.
- Greater resilience: Service and backend safeguards were added to better handle edge cases and prevent analysis interruptions.
Added
- Support PE LoadConfiguration up to V11
Added support for newer PE LoadConfiguration versions to improve parser compatibility.
Changed
- Improve path inclusion stripping
- Validate updater source name as folder
- Refactor API route for file upload from the UI to cleanup code
- Update the TLD list
- Migrate Borealis to Clue
- Enable gzip compression for local development
- Replace Popper with Menu in result cards
- Kubernetes client updates (#453)
- Update Azure SDKs to 1.0.0 and related filestore code (Discord)
Fixed
- When a URL is provided as input, use the appropriate field in the File index for matching on existing URIs
- Stop page shift on file details drawer quick close
- Minor fixes
- Guard added on Submit By Hash button.
- Submissions page API dependency update behavior corrected.
- Hash-derived key handling sanitized.
- Narrow-screen alignment fix for Executed Services button.
- Add extra checks to avoid IndexErrors
- Create temporary archive for SHA256 calculation in temp directory (Discord)
- Improve tolerance of classification-related issues that can suspend analysis
Security
- Use safer archive extraction utility
- Access cleanup
- Harden proxy resolution against SSRF and open redirects
Dependencies
- dompurify → v3.4.13 (from v3.4.0)
- vite → v6.4.3 (from v6.4.2)
- vitest → v3.2.6 (from v3.2.4)
- axios → v1.16.1 (from v1.13.2)
- devalue → v5.8.1 (from v5.3.2)