CybercentreCanada/assemblyline v4.8.0.stable2

4.8.0.2

on GitHub

What's Changed

• More reliable navigation and search: Add codecs for parsing and serializing path, hash, and search parameters.
• Smoother file handling: Large uploads and file identification can be processed in smaller streams, reducing the need to hold entire files in memory at once.
• More dependable uploads and file drops: Corrected upload handling and updated drag-and-drop support help prevent failures when adding files, including in Chromium-based browsers.
• Improved safeguards: Configure pnpm to wait three days before resolving newly published dependency versions and update the pnpm version used in CI.
• Broader signature support: Added CAPE and SANDBOX signature types so the system can represent more kinds of analysis results.
• Stronger development checks: Enable TypeScript's strict mode while keeping explicit opt-outs for selected migration-sensitive checks.

Added

• Path Params Module
  Added typed codecs for parsing and serializing route path parameters, with blueprint-based defaults, encoding, tests, documentation, and a Development Library demo.

• Search Params Module
  Added a modular Search Params API with typed blueprints, structured object values, snapshots, and serialization to URL search strings, history state, and plain objects.

• Hash Params Module
  Added typed codecs for parsing and serializing values in URL hash fragments.

Changed

• Bump pillow from 12.3.0 to 13.0.0
• Stream PDFs for specialized identification (Python, Rust)
• Stream JSONs from disk when performing identification - Rust
• Switch from pystfp to sftpretty + cleanup base dependencies (#497)
• Upload chunks instead of saving at once
• Bump fastmcp from 3.4.7 to 3.4.10
• Added CAPE and SANDBOX as Signature types in Ontology models (Python base, Service base)

Fixed

• Reorder parameters when performing file uploads via the cachestore (Python, Rust)
• Bound tag safelist patterns that relied on prefix matching (Python, Rust) (#444, @jpl1337)
• pnpm Release-Age Configuration
  Moved the minimum release-age setting into pnpm-workspace.yaml, where pnpm reads it, and configured a 4,320-minute delay for new dependency versions.
• TypeScript Strict Configuration
  Enabled strict mode and selected additional compiler checks. Updated the Alerts date calculation and development API error handling to support the new configuration, while explicitly deferring selected checks for future migrations.

Security

• Fix datastore path building - Rust
• pnpm → v10.34.9 (from v10.8.1) (#2097)
  Updated the package manager version and aligned the Azure test pipeline with it.
• react-dropzone → v20.0.0 (from v14.2.3)
  Updated the drag-and-drop dependency to address file drop failures in Chromium-based browsers caused by a FileSystemFileHandle security error.