Please consult the Upgrade notes in the documentation for specific instructions for this release, and general upgrade instructions. Below is an automatically generated list of all PRs merged since the previous release.
Changes since 2.32.0
- release notes for v2.33.0 @manuel-sommer (#9836)
- Update documentation to reflect multiple SLA Configurations @paulOsinski (#9844)
- Jira link class based views @dogboat (#9846)
- Flake8: Fix leftover of W504 and E402 @kiblik (#9823)
- fix doc breaking due to colon in front matter @hblankenship (#9845)
- Move PYTHONWARNINGS to EnvVar @kiblik (#9503)
- add cve values to openvas csv parser @manuel-sommer (#9791)
- sysdig_reports: migrate cve to unsaved_vulnerability_ids @manuel-sommer (#9825)
- bundleraudit: remove cves @manuel-sommer (#9827)
- redhatsatellite: migrate cve to unsaved_vulnerability_ids @manuel-sommer (#9828)
- Refactor awssecurityhub and add endpoint @manuel-sommer (#9814)
- 🐛 fix multiple netsparker issues @manuel-sommer (#9817)
- fix qualys parser: Finding object inconsistencies - use a copy of the issue_row object @MarianG (#9792)
- ✨ Advance Trivy Operator to parse Benchmark report @manuel-sommer (#9799)
- Tenable Parser: Support the new "workbench" format @FelixHernandez (#9804)
- Ruff: add some TRY @kiblik (#9756)
- Flake8: Remove useless ignores @kiblik (#9760)
- remove xlrd @manuel-sommer (#9810)
- [k8s] Remove pgha from actions @dsever (#9784)
- Flake8: Fix E201, E202 and E231 @kiblik (#9761)
- Ruff: add FLY @kiblik (#9757)
- Flake8: Solve E704 @kiblik (#9765)
- Fix: wrong parameters for k8s redis test @dsever (#9767)
- Flake8: Change F841 @kiblik (#9764)
- remove supervisor @manuel-sommer (#9811)
- 🔨 Refactor fortify to separate xml and fpr @manuel-sommer (#9667)
- 🔨 Refactor cyclonedx @manuel-sommer (#9668)
- 🔨 Refactor nikto to separate json and xml @manuel-sommer (#9680)
- 🐛 fix snyk, multiple cwes @manuel-sommer (#9682)
- 🐛 fix wazuh date @manuel-sommer (#9728)
- Ruff: Move F403 @kiblik (#9753)
- Fix items not found in scout suite findings @jbschooley (#9796)
- Fix finding filter in API `not_test__tags' @FelixHernandez (#9805)
- Fix typo of github username in DryRun Security config @mtesauro (#9815)
- Ruff: Solve F601 @kiblik (#9752)
- set Dynamic finding to false by default in add finding manually to test @FelixHernandez (#9794)
- List more Endpoints in a Finding's Excel / CSV report @FelixHernandez (#9738)
- Ruff: Solve E713 @kiblik (#9750)
- Ruff: better log output for GitHub Actions @kiblik (#9747)
- Updated DryRun Security config @mtesauro (#9769)
- Fix version mismatch @Maffooch (#9721)
- Helm: Remove PSQLHA Test @Maffooch (#9716)
- remove flotaxis, #9700 @manuel-sommer (#9709)
- Updating pip-audit parser to handle new JSON file format @grendel513 (#9696)
- Deprecate merge_sets_safe in dojo/utils.py @manuel-sommer (#9568)
- Bugfix: checkmarx parser - datetime is no longer put into the Finding.date field @reichertan (#9570)
🚩 Changes to settings.dist.py / local_settings.py
- Add legacy parsing method for qualys @Maffooch (#9861)
- Filter EPSS-related values on Findings listing @dogboat (#9847)
- 🎉 added parser for Bearer CLI @quirinziessler (#9672)
- ✨ merge acunetix and acunetix360 @manuel-sommer (#9522)
- Implement Nancy Parser @grendel513 (#9801)
- Ruff: Solve E402 @kiblik (#9748)
- ✨ implement wiz parser @manuel-sommer (#9671)
- remove Clair Klar Scan deduplication @manuel-sommer (#9686)
- 🐛 Fix Tenable deduplication setting @manuel-sommer (#9619)
- Added Checkmarx One Parser @FelixHernandez (#9715)
- Npm audit v7+ Parser @grendel513 (#9692)
- Added crunch42 parser @FelixHernandez (#9714)
🚩 Database migration
- ✨ merge acunetix and acunetix360 @manuel-sommer (#9522)
- 🐛 fix sonarqube api importer key length, issue 9611 @manuel-sommer (#9683)
- API responses more detailed (optional) @FelixHernandez (#9788)
- correcting cvss scoring behavior when updating/adding findings via ui and api [sc-4849] @grendel513 (#9744)
- Jira Epic Mapping: Add flexibility to epic issue type @Maffooch (#9666)
🚀 API features and enhancements
- Merge Bugfix -> Dev - Release/2.33.0 @Maffooch (#9866)
- CVSS Override: Revert #9744 @Maffooch (#9858)
- API Import/Reimport: Convert string tags to lists @Maffooch (#9830)
- Make tags optional for import and reimport API endpoints @FelixHernandez (#9819)
- Ruff: add preview + fix F841 and F823 @kiblik (#9759)
- API responses more detailed (optional) @FelixHernandez (#9788)
- Import/Reimport: Add toggle for applying tags to endpoints @Maffooch (#9740)
- correcting cvss scoring behavior when updating/adding findings via ui and api [sc-4849] @grendel513 (#9744)
🐛 Bug Fixes
- CVSS Override: Revert #9744 @Maffooch (#9858)
- API Import/Reimport: Convert string tags to lists @Maffooch (#9830)
- Endpoints: Redefine vulnerable definition @Maffooch (#9772)
- Ruff Linter: Resolve deprecation notice @Maffooch (#9729)
- Product Metrics: Correct week to week charts @Maffooch (#9695)
- Jira: Improve alerting on a per step basis @Maffooch (#9691)
🖌 Updates in UI
- Filter EPSS-related values on Findings listing @dogboat (#9847)
- Findings endpoint name truncated change @dogboat (#9789)
- Ruff: add preview + fix F841 and F823 @kiblik (#9759)
- improve risk acceptance UI (accept aditional findings) @FelixHernandez (#9737)
- Flake8: Fix W504 @kiblik (#9763)
- Ruff: Solve E731 @kiblik (#9749)
- Endpoints: Remove "verified" query on listing pages @Maffooch (#9717)
- Func views to class based views in finding exports @FelixHernandez (#9679)
🗣 Updates in localization
- fix
tag on django.po @paulOsinski (#9718)
🧰 Maintenance
- chore(deps): update dependency ruff from 0.3.4 to v0.3.5 (requirements-lint.txt) @renovate (#9857)
- Update softprops/action-gh-release action from v1 to v2 (.github/workflows/release-x-manual-helm-chart.yml) @renovate (#9703)
- Update dependency ruff from 0.3.1 to v0.3.4 (requirements-lint.txt) @renovate (#9705)
- Update Helm release postgresql from 11.9.13 to v15 (helm/defectdojo/Chart.yaml) @renovate (#9781)
- Update dependency autoprefixer from 10.4.18 to v10.4.19 (docs/package.json) @renovate (#9806)
- Bump nginx from
02d8d94to31bad00@dependabot (#9818) - Update rabbitmq:3.13.0-alpine Docker digest from 3.13.0 to 3.13.0-alpine (docker-compose.yml) @renovate (#9797)
- Update redis:7.2.4-alpine Docker digest from 7.2.4 to 7.2.4-alpine (docker-compose.yml) @renovate (#9798)
- Update postgres:16.2-alpine Docker digest from 16.2 to 16.2-alpine (docker-compose.yml) @renovate (#9800)
- Update dependency postcss from 8.4.36 to v8.4.38 (docs/package.json) @renovate (#9790)
- Update Helm release redis from 16.13.2 to v19 (helm/defectdojo/Chart.yaml) @renovate (#9786)
- Refresh minikube & k8s versions @dsever (#9684)
- Update redis:7.2.4-alpine Docker digest from 7.2.4 to 7.2.4-alpine (docker-compose.yml) @renovate (#9773)
- Update dependency postcss from 8.4.35 to v8.4.36 (docs/package.json) @renovate (#9774)
- Bump nginx from
6a2f8b2to02d8d94@dependabot (#9771) - Update postgres:16.2-alpine Docker digest from 16.2 to 16.2-alpine (docker-compose.yml) @renovate (#9768)
- Update gcr.io/cloudsql-docker/gce-proxy Docker tag from 1.34.0 to v1.34.1 (helm/defectdojo/values.yaml) @renovate (#9745)
- Update rabbitmq:3.13.0-alpine Docker digest from 3.13.0 to 3.13.0-alpine (docker-compose.yml) @renovate (#9746)
- Bump openapitools/openapi-generator-cli from v7.3.0 to v7.4.0 @dependabot (#9711)
- Update dependency ruff from 0.3.0 to v0.3.1 (requirements-lint.txt) @renovate (#9694)
- [HELM CT] Update component versions @dsever (#9665)