Please consult the Upgrade notes in the documentation for specific instructions for this release, and general upgrade instructions. Below is an automatically generated list of all PRs merged since the previous release.
Changes since 3.3.1
- docs(connectors): the Aqua Branch field takes a comma-separated list @svader0 (#15944)
- fix(tests): stop the notification-webhook 404 flake from ejecting PRs @Maffooch (#15943)
- fix(api): refuse a new contact assignment to an inactive user @svader0 (#15892)
- Make the finding API's SonarQube issue relation read-only @svader0 (#15918)
- docs(federal): add a Potential Agency Impact (PAIN) ratings guide @skywalke34 (#15929)
- docs(connectors): document the YesWeHack severity fallback and status mapping @paulOsinski (#15930)
- docs(connectors): add the Palo Alto Cortex connectors to the supported list @Maffooch (#15932)
- fix(jira): correct the exception class the webhook lookups catch @svader0 (#15931)
- feat(dedupe): injectable candidate scope and winner order, plus dedupe pools docs @blakeaowens (#15819)
- docs(reports, dashboards): moving a figure between a dashboard and a report @blakeaowens (#15935)
- docs(sensei): keyless + delegated cloud auth for CSPM (federation + Connect DefectDojo Cloud) @Maffooch (#15920)
- docs(dashboards): document the Top Root Causes widget @blakeaowens (#15926)
- docs(dashboards): document collaborative shared dashboards @blakeaowens (#15922)
- docs(dashboards): describe duplicating a tile in Custom Dashboards @blakeaowens (#15900)
- docs(editor): document the markdown editor and inline images across DefectDojo @blakeaowens (#15921)
- docs(rules_engine_2): document relative-date condition operators @Maffooch (#15923)
- docs(connectors): document sync/discovery frequency options @Maffooch (#15904)
- docs(sso): overhaul SSO provider guides, add Remote User + Login Settings, refresh screenshots @Maffooch (#15927)
- docs(sensei): document Google Vertex AI as an on-prem LLM provider @Maffooch (#15928)
- docs(fedramp): point VDR/PAIN/KEV SLA fields at the SLA configuration form @Maffooch (#15924)
- docs(sensei, correlation): drop the BETA callouts from Threat Modeling, Sensei Advisor and Root Cause Correlation @devGregA (#15919)
🐛 Bug Fixes
- fix(reports): prevent duplicate vulnerability_references prefetch in finding report @Maffooch (#15941)
- fix(tests): wait for form submits to land before navigating away @blakeaowens (#15934)