Please consult the Upgrade notes in the documentation for specific instructions for this release, and general upgrade instructions. Below is an automatically generated list of all PRs merged since the previous release.
Changes since 3.4.304
- docs(crowdstrike): document Identity Protection detections @svader0 (#16609)
- docs(saml): document Use Mapped Username and the attributes on SAML login attempts @Maffooch (#16661)
- docs(archive): describe viewing archived data in the regular lists and pages @Maffooch (#16653)
- docs: device identifiers and host observations on Pro Assets @devGregA (#16543)
- docs(walkthroughs): match the In-App Walkthroughs page and three task pages to the product @stevewallone (#16556)
- docs(dashboards): describe how an Embedded Table keeps a viewer's filters @Jino-T (#16643)
- docs(reporting): describe how Detail and Tabular blocks lay out screenshots and code @stevewallone (#16646)
- docs: direct open-source users to the DefectDojo Community Slack #2-help channel @skywalke34 (#16527)
- docs(compliance): CRA Annex I Part I requirements and the release assessed @devGregA (#16320)
- docs(triage-engine): scoping a rule to servers or subnets @paulOsinski (#16323)
- docs(hierarchy): hierarchy suggestions, and change plans generally available @devGregA (#16427)
- docs(hierarchy): imports that still use an Asset's old names @devGregA (#16428)
- docs(connectors): document the Wiz runtime reachability verdict @svader0 (#16432)
- fix(docs): readable un-framed code blocks, working copy button, Hugo pin @skywalke34 (#16559)
- docs(triage-engine): describe the new-findings alert template @blakeaowens (#16648)
- docs(triage-engine): say who may name a connection on a messaging or report node @blakeaowens (#16657)
- docs(assets): describe where the Asset page record cards sit @blakeaowens (#16654)
- docs(sso): describe Idle Timeout and Session Age from login @blakeaowens (#16650)
- docs: link the GitHub Actions page to the Marketplace listing @devGregA (#16578)
- docs(onprem): document the web-request statement_timeout settings @Maffooch (#16651)
- Docs: Security Hub ECR images in use only @svader0 (#16358)
- docs(archive): archived data is kept for 2 months by default @Maffooch (#16645)
- docs(connectors): document ServiceDesk Plus custom fields, ticket templates and the mandatory-field error @Jino-T (#16574)
- docs(permissions): API Importer cannot add or edit notes @Maffooch (#16647)
- fix(findings-api): honor ?engagement=, ?product= and ?prod_type= on /api/v2/findings/ @Maffooch (#16644)
- docs(connectors): document selecting Checkmarx One scans by Initiator @Jino-T (#16631)
- docs(asset-modelling): document Archive and retention rules @Maffooch (#16563)
- fix: skip Qualys XML findings whose QID has no glossary entry @Goldloli (#16638)
- perf(findings): resolve tag filter names to tag ids so the planner sees how common a tag is @Maffooch (#16634)
- docs(rbac): superusers are skipped when Configuration Permissions move onto roles @blakeaowens (#16628)
- docs(assets): describe the Finding Distribution status ring and source tiles @blakeaowens (#16640)
- docs(navigation): describe the default landing page on the User Profile page @blakeaowens (#16614)
- docs: fix the API sample code, do_not_reactivate, Location findings and records screenshots @blakeaowens (#16639)
- docs(changelog): add DefectDojo Pro 3.4.304 release notes @Maffooch (#16637)
- feat(locations): LocationData builders for domain, ip and cert @devGregA (#16547)