Please consult the Upgrade notes in the documentation for specific instructions for this release, and general upgrade instructions. Below is an automatically generated list of all PRs merged since the previous release.
Changes since 3.4.200
- docs(pro): the sidebar's What's New panel @blakeaowens (#16435)
- docs(pro): keyboard shortcuts page, with links from search and tables @blakeaowens (#16433)
- docs(pro): Keyboard Triage page, linked from editing and bulk editing @blakeaowens (#16441)
- docs(pro): CRA Article 14 reporting works without PSIRT @Maffooch (#16444)
- fix(docker): upgrade the trust store in its own layer and fail the build if the emSign root survives @devGregA (#16452)
- fix(deps): drop the compromised emSign root from certifi and the system trust store @devGregA (#16449)
- docs(psirt): the Linux kernel CVE feed now has its transport @Maffooch (#16447)
- docs(pro): name the Triage Engine feature flag by its new title @Maffooch (#16446)
- docs(pro): Triage Engine rule names, node reference labels and PAIN links @Maffooch (#16445)
- docs(pro): long list filters are sent in the request body @blakeaowens (#16443)
- docs(sensei): explain the Partial tag on a scan in Scan Activity @Maffooch (#16440)
- fix(risk-acceptance): default the expiration date on API-created risk acceptances @blakeaowens (#16437)
- docs(pro): add a user to groups from the user page @blakeaowens (#16434)
- docs(risk-acceptance): one risk acceptance per finding, and the default expiration date on requests @blakeaowens (#16438)
- docs(pro): connector Zero Results chip and the rules table's Expected Next Run @blakeaowens (#16436)
- docs(sensei): explain the too-large design failure in threat modeling @Maffooch (#16439)
- docs(pro): Asset Identity is a Feature Flags toggle, with how to turn it off @blakeaowens (#16431)
- docs(command-center): name the first flow ring Processed @devGregA (#16415)
- feat(locations): report the Qualys VMDR asset name as a host location @Maffooch (#16425)
- docs(sso): an OIDC endpoint change no longer needs a restart @Maffooch (#16424)
- docs(sso): cover Okta dashboard sign-in and new OIDC groups @Maffooch (#16430)
- docs(changelog): add DefectDojo Pro 3.4.200 release notes @Maffooch (#16426)
- docs(sso): explain OIDC group mapping with Okta @Maffooch (#16420)