Please consult the Upgrade notes in the documentation for specific instructions for this release, and general upgrade instructions. Below is an automatically generated list of all PRs merged since the previous release.
Changes since 2.25.0
- Merge Bugfix -> Dev (2.26.0) @blakeaowens (#8613)
- Release: Merge back 2.25.4 into dev from: master-into-dev/2.25.4-2.26.0-dev @github-actions (#8577)
- Release: Merge back 2.25.4 into bugfix from: master-into-bugfix/2.25.4-2.26.0-dev @github-actions (#8578)
- Release: Merge release into master from: release/2.25.4 @github-actions (#8576)
- fix 500 error when attempting to order tags @FelixHernandez (#8574)
- Release: Merge back 2.25.3 into bugfix from: master-into-bugfix/2.25.3-2.26.0-dev @github-actions (#8570)
- updated helm chart to allow setting a different port for external redis @Crayeth (#8547)
- Set a default environment for tests in DefectDojo @FelixHernandez (#8550)
- addition of has_tags and product/finding sla filters @blakeaowens (#8549)
- Release: Merge back 2.25.2 into dev from: master-into-dev/2.25.2-2.26.0-dev @github-actions (#8539)
- Release: Merge back 2.25.2 into bugfix from: master-into-bugfix/2.25.2-2.26.0-dev @github-actions (#8540)
- Release: Merge release into master from: release/2.25.2 @github-actions (#8538)
- Release: Merge back 2.25.1 into bugfix from: master-into-bugfix/2.25.1-2.26.0-dev @github-actions (#8513)
- fix: uncheck verified box when toggle false positive to fix test_retr… @JoBaBe (#8499)
- Doc fix default postgres redis @testaccount90009 (#8497)
- added django service annotations option to helm values file to set an… @Crayeth (#8454)
- Release: Merge back 2.25.0 into dev from: master-into-dev/2.25.0-2.26.0-dev @github-actions (#8483)
- Release: Merge back 2.25.0 into bugfix from: master-into-bugfix/2.25.0-2.26.0-dev @github-actions (#8482)
🚩 Changes to settings.dist.py / local_settings.py
- Release: Merge back 2.25.1 into dev from: master-into-dev/2.25.1-2.26.0-dev @github-actions (#8514)
- Release: Merge release into master from: release/2.25.1 @github-actions (#8512)
- Add drf-spectacular preprocessing hooks to keep a rigid definition of rendered API endpoints @Maffooch (#8507)
- Semgrep parser unique id from tool @kiberdruzhinnik (#8346)
🐛 Bug Fixes
- Endpoint model/view corrections @Maffooch (#8545)
- Endpoint Meta Importer: Do not create meta if column is empty @Maffooch (#8532)
- Remove naive format warnings during import @Maffooch (#8527)
- Update ASW-SH Inspector to accommodate findings without vulnerabilities or remediation @Maffooch (#8519)
🖌 Updates in UI
- Release: Merge release into master from: release/2.26.0 @github-actions (#8614)
- added open findings burndown for product metrics @blakeaowens (#8558)
- Release: Merge back 2.25.3 into dev from: master-into-dev/2.25.3-2.26.0-dev @github-actions (#8571)
- Release: Merge release into master from: release/2.25.3 @github-actions (#8568)
- Fix checkbox disappear findings (windows resize) @FelixHernandez (#8557)
- Endpoint model/view corrections @Maffooch (#8545)
🧰 Maintenance
- Bump gitpython from 3.1.32 to 3.1.34 @dependabot (#8605)
- chore(deps): update actions/checkout action from v3 to v4 (.github/workflows/test-helm-chart.yml) @renovate (#8601)
- Bump boto3 from 1.28.39 to 1.28.40 @dependabot (#8604)
- Bump django-environ from 0.11.1 to 0.11.2 @dependabot (#8602)
- Bump nginx from
cac882bto16164a4@dependabot (#8600) - Bump celery from 5.3.3 to 5.3.4 @dependabot (#8603)
- Bump boto3 from 1.28.36 to 1.28.39 @dependabot (#8590)
- Bump django-environ from 0.10.0 to 0.11.1 @dependabot (#8585)
- Bump celery from 5.3.1 to 5.3.3 @dependabot (#8586)
- chore(deps): update dependency postcss from 8.4.28 to v8.4.29 (docs/package.json) @renovate (#8575)
- chore(deps): update rabbitmq docker tag from 3.12.3 to v3.12.4 (docker-compose.yml) @renovate (#8559)
- Bump openapitools/openapi-generator-cli from v6.6.0 to v7.0.0 @dependabot (#8566)
- Bump boto3 from 1.28.34 to 1.28.36 @dependabot (#8572)
- Bump boto3 from 1.28.33 to 1.28.34 @dependabot (#8555)
- Bump boto3 from 1.28.32 to 1.28.33 @dependabot (#8551)
- Bump python from
9efc6e1to9efc6e1@dependabot (#8536) - Bump nginx from 1.25.1-alpine to 1.25.2-alpine @dependabot (#8537)
- chore(deps): update rabbitmq docker tag from 3.12.2 to v3.12.3 (docker-compose.yml) @renovate (#8541)
- Bump boto3 from 1.28.27 to 1.28.32 @dependabot (#8548)
- Bump humanize from 4.7.0 to 4.8.0 @dependabot (#8530)
- chore(deps): update redis docker tag from 7.0.12 to v7.2.0 (docker-compose.yml) @renovate (#8528)
- chore(deps): update gcr.io/cloudsql-docker/gce-proxy docker tag from 1.33.9 to v1.33.10 (helm/defectdojo/values.yaml) @renovate (#8526)
- Bump boto3 from 1.28.26 to 1.28.27 @dependabot (#8524)
- chore(deps): update dependency postcss from 8.4.27 to v8.4.28 (docs/package.json) @renovate (#8520)
- Bump argon2-cffi from 21.3.0 to 23.1.0 @dependabot (#8522)
- Bump redis from 4.6.0 to 5.0.0 @dependabot (#8517)
- Bump boto3 from 1.28.25 to 1.28.26 @dependabot (#8518)
- chore(deps): update postgres docker tag from 15.3 to v15.4 (docker-compose.yml) @renovate (#8506)
- chore(deps): update dependency autoprefixer from 10.4.14 to v10.4.15 (docs/package.json) @renovate (#8508)
- Bump coverage from 7.2.7 to 7.3.0 @dependabot (#8510)
- Bump boto3 from 1.28.24 to 1.28.25 @dependabot (#8511)
- Bump nginx from
1713c88to647c5c8@dependabot (#8504) - Bump python from
9efc6e1to9efc6e1@dependabot (#8503) - Bump django-debug-toolbar from 4.1.0 to 4.2.0 @dependabot (#8501)
- Bump boto3 from 1.28.21 to 1.28.24 @dependabot (#8502)
- Update mysql Docker tag from 5.7.42 to v5.7.43 (docker-compose.yml) @renovate (#8464)
- Update rabbitmq:3.12.2-alpine Docker digest from 3.12.2 to 3.12.2-alpine (docker-compose.yml) @renovate (#8485)
- Bump nginx from
8ccc2ecto1713c88@dependabot (#8490) - Update postgres:15.3-alpine Docker digest from 15.3 to 15.3-alpine (docker-compose.yml) @renovate (#8493)
- Update redis:7.0.12-alpine Docker digest from 7.0.12 to 7.0.12-alpine (docker-compose.yml) @renovate (#8494)
- Update postgres:15.3-alpine Docker digest from 15.3 to 15.3-alpine (docker-compose.yml) @renovate (#8486)
- Bump boto3 from 1.28.20 to 1.28.21 @dependabot (#8488)
- Bump nginx from
07e64bfto8ccc2ec@dependabot (#8484) - Bump cryptography from 41.0.2 to 41.0.3 @dependabot (#8460)
- Bump openapitools/openapi-generator-cli from
5438122toea027f3@dependabot (#8475) - Bump boto3 from 1.28.18 to 1.28.20 @dependabot (#8476)
- Bump psycopg2-binary from 2.9.6 to 2.9.7 @dependabot (#8477)
- Bump nginx from
2d19418to07e64bf@dependabot (#8481) - Bump cryptography from 41.0.2 to 41.0.3 @dependabot (#8456)