github DefectDojo/django-DefectDojo 2.20.0
2.20.0 🌈

latest releases: 2.36.0, 2.35.4, 2.35.3...
16 months ago

Please consult the Upgrade notes in the documentation for specific instructions for this release, and general upgrade instructions. Below is an automatically generated list of all PRs merged since the previous release.

Changes since 2.19.0

  • Fix for empty alias @lme-nca (#7746)
  • Update JIRA when findings are added/removed to/from the finding group @coheigea (#7707)
  • Make sure that we search for finding groups for "group by" in the sam… @coheigea (#7718)
  • BlackDuck API read timout increased @barucijah (#7716)
  • Release: Merge back 2.19.4 into dev from: master-into-dev/2.19.4-2.20.0-dev @github-actions (#7703)
  • Release: Merge back 2.19.4 into dev from: master-into-bugfix/2.19.4-2.20.0-dev @github-actions (#7704)
  • Release: Merge release into master from: release/2.19.4 @github-actions (#7702)
  • Remove Github OAuth dependencies (Credit to @hackerhumble) @Maffooch (#7701)
  • Fix UnboundLocalError when user remove all options for password @YuToutCourt (#7688)
  • Release: Merge back 2.19.3 into dev from: master-into-bugfix/2.19.3-2.20.0-dev @github-actions (#7693)
  • Make sure old findings are added to finding groups in the reimporter @coheigea (#7687)
  • Added amd64 build config for Apple Silicon @corrupt (#7680)
  • Update unit test flow to build containers once and store in uniform location @Maffooch (#7660)
  • Update the release drafter to make releases less manual @Maffooch (#7661)
  • [cyclonedx-json] flatten components @bruegth (#7654)
  • BlackduckAPI: remove test_product_connection @kiblik (#7665)
  • Fix for mobsfscan parser 2 @hvechtomov (#7667)
  • A finding isn't added to an existing finding group in the re-importer… @coheigea (#7678)
  • Add default announcement banner @Maffooch (#7668)
  • Release: Merge back 2.19.2 into dev from: master-into-bugfix/2.19.2-2.20.0-dev @github-actions (#7658)
  • Risk accepted findings don't close old findings in the reimporter @coheigea (#7631)
  • read aliases from dependencytrack FPF format @lme-nca (#7583)
  • Docs: Removes API Push Section @devGregA (#7635)
  • Release: Merge back 2.19.1 into dev from: master-into-bugfix/2.19.1-2.20.0-dev @github-actions (#7619)
  • Old finding endpoints are not reactivated in the reimporter @coheigea (#7615)
  • Enable GitHub integration for existing products @coheigea (#7614)
  • Docs: Groups from Identity Providers @kiblik (#7604)
  • Fix #7568 do_not_reactivate notes on each (re)import @Gby56 (#7569)
  • Only mitigate endpoints that are not already mitigated @coheigea (#7567)
  • Bugfix: get_accessible_url should return access_file instead of access_url @HomeSen (#7585)
  • Improve Fortify parser to manage new versions @damiencarol (#7592)
  • Set download path to /app instead of media @Maffooch (#7586)
  • Release: Merge back 2.19.0 into dev from: master-into-bugfix/2.19.0-2.20.0-dev @github-actions (#7565)
  • Release: Merge back 2.19.0 into dev from: master-into-dev/2.19.0-2.20.0-dev @github-actions (#7564)

🚩 Changes to settings.dist.py / local_settings.py

  • Release: Merge release into master from: release/2.20.0 @github-actions (#7767)
  • Fix GitHub dedupe @Demaz93 (#7754)
  • Release: Merge back 2.19.3 into dev from: master-into-dev/2.19.3-2.20.0-dev @github-actions (#7694)
  • Release: Merge release into master from: release/2.19.3 @github-actions (#7692)
  • Remove GitHub OAuth integration @Maffooch (#7691)
  • Release: Merge back 2.19.2 into dev from: master-into-dev/2.19.2-2.20.0-dev @github-actions (#7657)
  • Release: Merge release into master from: release/2.19.2 @github-actions (#7656)
  • Fix missing GitLab scanners in settings file @jahrome (#7639)
  • Add parser for Codechecker @drJabber (#7603)

🚩 Database migration

  • Release: Merge release into master from: release/2.20.0 @github-actions (#7767)
  • Merge bugfix into dev 2.20.0 @Maffooch (#7766)
  • Allowing a max length of 255 for default JIRA issue types @coheigea (#7761)
  • Update JIRA when a finding is edited @coheigea (#7700)

πŸš€ API features and enhancements

πŸ› Bug Fixes

  • Eliminate possibility of adding single finding to multiple risk exceptions @Maffooch (#7685)

πŸ–Œ Updates in UI

  • Release: Merge release into master from: release/2.20.0 @github-actions (#7767)
  • Merge bugfix into dev 2.20.0 @Maffooch (#7766)
  • Add Credential Mapping and API Endpoint @Maffooch (#7759)
  • Add a link to the source code in the JIRA description for finding groups @coheigea (#7755)
  • fix(UI): wrong button name for deleting group @Gby56 (#7753)
  • Release: Merge back 2.19.3 into dev from: master-into-dev/2.19.3-2.20.0-dev @github-actions (#7694)
  • Release: Merge release into master from: release/2.19.3 @github-actions (#7692)
  • Remove GitHub OAuth integration @Maffooch (#7691)
  • Release: Merge back 2.19.2 into dev from: master-into-dev/2.19.2-2.20.0-dev @github-actions (#7657)
  • Release: Merge release into master from: release/2.19.2 @github-actions (#7656)
  • Fix slack notifications @coheigea (#7623)
  • Release: Merge back 2.19.1 into dev from: master-into-dev/2.19.1-2.20.0-dev @github-actions (#7620)
  • Release: Merge release into master from: release/2.19.1 @github-actions (#7617)
  • Add blocks to users view template, add product name filter to finding… @Maffooch (#7616)
  • Intsights fix for zero alerts @37b (#7601)
  • Fix missing information in notifications @coheigea (#7593)
  • Implementation of Finding Group View/Edit @blakeaowens (#7566)

🧰 Maintenance

Don't miss a new django-DefectDojo release

NewReleases is sending notifications on new releases.