Please consult the Upgrade notes in the documentation for specific instructions for this release, and general upgrade instructions. Below is an automatically generated list of all PRs merged since the previous release.
Changes since 3.2.100
- fix(locations): report distinct locations and per-endpoint failures from the endpoints backfill @Maffooch (#15688)
- docs: features that became standard, and Feature Flags moving up the settings menu @devGregA (#15678)
- Harden user edit form authorization @svader0 (#15616)
- docs(assets): document exporting the Asset inventory @devGregA (#15683)
- docs(import): publish the DISA STIG checklist docs on the patch line @devGregA (#15674)
- Apply the note visibility rule in the note UI views @svader0 (#15660)
- Apply the tool-configuration permission check in the shared serializer guard @svader0 (#15650)
- Trivy Scan parser crash: Prevent resource_name from being appended to whilst uninitialised @richardj-bsquare (#15655)
- docs(sbom): document the Asset-page export and the version it produces @Jino-T (#15671)
- Keep Tool Configuration credentials out of the edit form @svader0 (#15624)
- docs: German translation of the core guides, plus multilingual plumbing @devGregA (#15627)
- docs: add 3.2.100 upgrade note for private note visibility @svader0 (#15618)
- docs(connectors): document the Qualys Host Tags filter @svader0 (#15668)
- docs: state what the credential encryption key actually covers @svader0 (#15609)
- docs: link the Trust Center and Status page from the footer @devGregA (#15613)
- change all docs references from Products to Assets @paulOsinski (#15661)
- docs: fix the dedupe management command in three upgrade notes @devGregA (#15662)
- fix(scout suite): reset parser state so a report parses to the same findings twice @devGregA (#15657)
- docs: publish the four docs changes stranded on dev @devGregA (#15649)
- docs: Risk Acceptances 2.0, and the risk-acceptance parts of Rules Engine 2.0 @devGregA (#15632)
- fix(importers): retry test tag write when a concurrent import races tag cleanup @Maffooch (#15626)
- fix(locations): scope /api/v2/location/ by RBAC instead of superuser only @svader0 (#15617)
- [docs] update Connectors list and setup instructions @paulOsinski (#15610)
- docs(findings): document Apply/Make Finding Template actions in the Pro UI @blakeaowens (#15612)
- update changelog @paulOsinski (#15625)
- docs: table column customization in the Pro UI @blakeaowens (#15598)
- docs: update integration count to 500+ @devGregA (#15615)
🚀 General features and enhancements
🚀 API features and enhancements
- feat(locations): resolve V3_FEATURE_LOCATIONS at call time via a hook @Maffooch (#15667)
- Scope Location count annotations to the requesting user @svader0 (#15605)
🐛 Bug Fixes
- fix(tags): order single-finding delete tag-count decrements so concurrent deletes cannot deadlock @Maffooch (#15664)
- fix(tags): order add-path tag-count updates so concurrent imports cannot deadlock @Maffooch (#15652)
- fix: retry async cascade delete on foreign-key violation race @Maffooch (#15665)
- fix(importers): auto-creating the same asset name concurrently no longer 500s @devGregA (#15669)
- fix(findings): retry bulk finding delete chunks on transient DB conflicts @Maffooch (#15623)
- fix(notes): keep note body on partial PATCH and avoid null NoteHistory @Maffooch (#15603)
🖌 Updates in UI
- feat(locations): resolve V3_FEATURE_LOCATIONS at call time via a hook @Maffooch (#15667)
- fix: correct severity bar chart position in open_findings chart @tejas0077 (#15601)
🧰 Maintenance
- chore(deps): bump gitpython from 3.1.57 to 3.1.58 @dependabot[bot] (#15589)