Enhancements:
- #7425 feat(misp): create UBI9 base image for MISP external import connector
- #7386 feat(connectors-sdk): add System model
- #7334 [AssetNote] Create UBI9 image of AssetNote connector
- #7260 feat(ci): add Renovate rule for grouped pycti version bumps
- #7224 feat(export-file-csv): migrate connector to the catalog
Bug Fixes:
- #7414 fix(proofpoint-et-intelligence): enrichment crashes on a country code pycountry cannot resolve
- #7392 fix(cpe): an API failure is swallowed at DEBUG level and the run is still reported as successful
- #7390 fix(virustotal): URL enrichment fails entirely when VirusTotal reports an empty
last_serving_ip_addressrelationship - #7360 fix(google-dtm): alerts lose their alert.md attachment when an optional field is absent
- #7357 fix(shodan): the whole enrichment fails when Shodan returns no geolocation for an IP
- #7265 fix(microsoft-sentinel-incidents): surface Azure AD OAuth errors instead of KeyError
- #7200 fix(Alienvault): default docker compose file missing "Z" timestamp
- #7003 fix(recorded-future): Report creator is incorrectly added to Report object_refs
- #6880 fix(email-intel-imap): plain text email body renders as a single unbroken block (newlines lost) in report content
- #6351 fix(misp): fails when Sighting.Organisation is a list instead of an object
Pull Requests:
- fix(misp): correct Sighting.Organisation list handling (#6351) by @SAY-5 in #6352
- chore(renovate): reconfigure pycti priority rule (#7260) by @jabesq in #7364
- chore(deps): update pre-commit hook psf/black-pre-commit-mirror to v26.5.1 by @renovate[bot] in #7384
- fix(deps): update dependency black to v26.5.1 by @renovate[bot] in #7375
- chore(deps): update dependency pillow to v12.3.0 [security] - abandoned by @renovate[bot] in #7329
- fix(deps): update dependency mypy to ~=1.20.2 by @renovate[bot] in #7376
- fix(deps): update dependency pre-commit to ~=4.6.2 by @renovate[bot] in #7377
- fix(deps): update dependency pytest-order to ~=1.5.0 by @renovate[bot] in #7379
- chore(deps): update astral-sh/setup-uv action to v10 by @renovate[bot] in #7371
- chore(deps): update actions/checkout action to v7.0.1 by @renovate[bot] in #7368
- feat(connectors-sdk): add System model (#7386) by @helene-nguyen in #7387
- chore(deps): update toshimaru/auto-author-assign action to v2.1.2 by @renovate[bot] in #7366
- chore(deps): update dependency pylint to v4 by @renovate[bot] in #7385
- chore(deps): update docker/setup-buildx-action action to v4.3.0 by @renovate[bot] in #7383
- chore(deps): update docker/metadata-action action to v6.2.0 by @renovate[bot] in #7382
- chore(deps): update docker/login-action action to v4.6.0 by @renovate[bot] in #7381
- fix(virustotal): handle empty last_serving_ip_address relationship (#7390) by @romain-filigran in #7391
- fix(google-dtm): guard optional fields when building the alert content (#7360) by @romain-filigran in #7361
- fix(cpe): report API failures instead of swallowing them (#7392) by @romain-filigran in #7394
- chore(deps): update dependency greynoise to v3.1.0 by @renovate[bot] in #7116
- chore(deps): update dependency censys-platform to ~=0.16.0 by @renovate[bot] in #7328
- chore(build): add assetnote-import to ubi9 image build support (#7334) by @ncarenton in #7396
- fix(deps): upgrade astroid to be compatible with pylint (#1153) by @jabesq in #7399
- fix(recordedfuture): report creator is no longer added to Report object_refs (#7003) by @romain-filigran in #7333
- fix(deps): update dependency pytest to v9.1.1 by @renovate[bot] in #7378
- chore(connectors-sdk): remove deprecated OCTI models module (#7196) by @Powlinett in #7197
- fix(shodan): build only the locations returned by the API (#7357) by @romain-filigran in #7358
- chore(deps): update dependency assemblyline-client to v4.10.1 by @renovate[bot] in #7418
- fix(deps): update dependency ruff to v0.16.4 by @renovate[bot] in #7380
- feat(export-file-csv): migrate connector to manager-supported mode (#7224) by @jabesq in #7338
- fix(microsoft-sentinel-incidents): check OAuth token response status (#7265) by @romain-filigran in #7266
- feat(misp): create UBI9 base image for MISP external import (#7425) by @ncarenton in #7428
- fix(proofpoint-et-intelligence): stop crashing on an unresolvable country code (#7414) by @romain-filigran in #7415
- fix(alienvault): default docker compose file missing "Z" timestamp (#7200) by @jabesq in #7411
- fix(email-intel-imap): preserve line breaks in plain text email content (#6880) by @yunono-filg in #7173
- feat(release): add force option to delete/recreate dangling tags and releases (#7119) by @jabesq in #7350
- fix(manifest-fragment): derive min_version from the pinned pycti version (#7119) by @jabesq in #7351
- fix(composer): allow null license_type and subscription_link in manifest schema (#7119) by @jabesq in #7388
Full Changelog: 7.260824.0...7.260828.0