Please consult the Upgrade notes in the documentation for specific instructions for this release, and general upgrade instructions. Below is an automatically generated list of all PRs merged since the previous release.
Changes since 3.1.0
- docs: Asset Connectors — concept + Azure DevOps / Bitbucket / GitLab / JSM Assets setup @devGregA (#15153)
- docs(jira): Jira integrator guide — custom fields, ticket templates, test render @Maffooch (#15226)
- docs(connectors): Microsoft Defender for Cloud connector reference @devGregA (#15197)
- docs(connectors): add GitHub Advanced Security, Qualys, Rapid7 InsightVM, Veracode references @devGregA (#15198)
- docs(connectors): Cloudflare, Contrast, GitGuardian, Google Cloud SCC, HackerOne, Shodan setup @devGregA (#15199)
- Docs: Docker Scout connector reference @devGregA (#15203)
- Group-IB ASM connector docs @Maffooch (#15208)
- docs: add Shortcut to the Pro Integrations tool reference @devGregA (#15209)
- docs: add upgrade guide for DefectDojo Pro on-premise (Helm) deployments @devGregA (#15189)
- docs: add Bitbucket to the Pro Integrations pages @devGregA (#15207)
- docs: add Freshservice Pro integration reference @devGregA (#15221)
- docs: add Backstage Pro connector reference @devGregA (#15223)
- Docs: Wazuh connector reference @devGregA (#15201)
- Docs: Censys connector reference @devGregA (#15202)
- docs(connectors): add CrowdStrike Falcon connector reference @Maffooch (#15206)
- Docs: Have I Been Pwned connector reference @devGregA (#15200)
- docs: Microsoft Defender connector setup guide @devGregA (#15156)
- docs: add copy-to-clipboard to Report Builder LLM prompt and API blocks @skywalke34 (#15216)
- docs: add Similar Findings pages for Open Source and Pro @Maffooch (#15190)
- fix(notifications): deliver @mention notifications and match full usernames @blakeaowens (#15196)
- fix(auditlog): make pghistory context JSON-safe before Celery dispatch @Maffooch (#15204)
- fix(risk_acceptance): reinstate findings when expiration date updated via API @Jino-T (#15147)
- refactor(locations): consistent object lookups in endpoint views @devGregA (#15173)
- Align questionnaire relink routes with questionnaire permissions @devGregA (#15192)
- Authorize the location foreign key on location reference writes @devGregA (#15193)
- Modify CODEOWNERS for code review assignments @Maffooch (#15205)
- fix(importers): stop doubling the (scan_type) suffix in dynamic Test Type names @Maffooch (#15149)
- fix(watson): only intermediate-flush the global search context singleton @valentijnscholten (#15187)
- fix(importers): dispatch post-processing with per-finding push_to_jira @valentijnscholten (#15186)
- perf(importers): fetch only needed columns in close_old_findings @valentijnscholten (#15185)
- Product updates and tests @dogboat (#15170)
- Expose effective dedupe matching policy on the Test API (2/3) @devGregA (#15151)
- fix(checkmarx_one): handle explicit null scanner sections in filtered reports @stevewallone (#15159)
- docs: add Pro changelog entries for 3.1.0 @Maffooch (#15166)
- docs: SSO user local-login fallback for open source @Maffooch (#15167)
🚩 Changes to settings.dist.py / local_settings.py
- feat(search): FTS + trigram GIN indexes for global search @blakeaowens (#15220)
🚩 Database migration
- Update migration dependency for global search FTS trigram indexes @Maffooch (#15227)
- feat(search): FTS + trigram GIN indexes for global search @blakeaowens (#15220)
- Jira: support fields on close/reopen transitions @devGregA (#15213)