Enhancements:
- #18485 feat(xtm-one): verify the Filigran-signed XTM license returned by XTM One registration
- #18399 feat(datamodel): add number_seen and max_distinct_count counters to Observed Data
- #18233 docs(news-feed): update XTM Hub docs with new page
- #17938 feat(accessibility): Update use of MenuList to List to resolve keyboard navigation issues
- #17407 feat(accessibility): Resolve high accessibility issues
- #17350 feat(logs): Add ingestion logs on all ingestion type
- #17045 feat(vulnerability): SSVC risk-based prioritization metrics (CISA BOD 26-04)
- #11940 feat(datamodel): support "sighting" between an Indicator and a "Security Platform"
Bug Fixes:
- #18492 fix(ai): route Ask AI container report generation through XTM One
- #18476 fix(merge-users): the dry/real divergence refusal never says what diverged
- #18462 fix(ip-accesslist): admin config token is not excluded from access list check
- #18432 fix(perf): improve buildChanges time complexity
- #18405 fix(connector): prevent connector managed deployment
- #18318 fix(frontend): Pagination returns no results on page 2 when combining filters
- #18230 fix(playbooks): Update Knowledge reports successful patch but does not persist the change
- #18144 fix(User): improve userEdit
- #17913 [Merge] Merged entity does not set the acting user as creator
- #17742 fix(user): improve org admin
- #17740 fix(user): improve service account edition
- #17694 fix(scope): Redis cluster mode: fixed TLS servername prevents using per-node certificates
- #16148 fix(notifications): notifications are still sent to expired or inactive accounts
- #13752 fix(decay-rules): decay exclusions should set valid_until much later and not get revoked
Community Contributions Highlight:
- feat(accessibility): update components to use List and ListItemButton instead of MenuList and MenuItem (#17938) by @scarletmerlin123 in #17941
Pull Requests:
- fix(deps): update dependency lru-cache to v11.5.3 by @renovate[bot] in #18409
- fix(deps): update dependency canonicalize to v5.1.0 by @renovate[bot] in #18411
- fix(deps): update dependency react-intl to v12.1.1 by @renovate[bot] in #18410
- chore(deps): update rabbitmq docker tag to v4.3.6 by @renovate[bot] in #18408
- fix(deps): update dependency openai to v7.19.0 by @renovate[bot] in #18412
- feat(observed-data): add number_seen and max_distinct_count counters (#18399) by @SamuelHassine in #18400
- fix(deps): update dependency js-base64 to v3.9.4 by @renovate[bot] in #18420
- fix(deps): update dependency react-intl to v12.1.2 by @renovate[bot] in #18421
- fix(deps): update dependency openai to v7.20.0 by @renovate[bot] in #18422
- fix(notifications): filter out inactive users in notifications (#16148) by @JeremyCloarec in #17826
- feat(vulnerability): SSVC risk-based prioritization metrics (#17045) by @marieflorescontact in #18367
- fix(connector): prevent deploy connector without EE license (#18405) by @esrevi in #18406
- fix(ingestion): remove ingestion logs feature flag and fix JSON log status (#17350) by @marieflorescontact in #18369
- feat(accessibility): Resolve high accessibility issues (#17407) by @scarletmerlin123 in #17505
- docs(news-feed): update XTM Hub docs with new page (#18233) by @Kroustille in #18234
- fix(redis): always default to redis__hostname for tls servername if no tls__servername set (#17694) by @JeremyCloarec in #18416
- chore(migration): introduce opencti_api_migration_duration metric (#16263) by @fellowseb in #16379
- fix(case): fix typing issue in TaskPopover (#18431) by @fellowseb in #18433
- fix(deps): update dependency eventsource to v5.1.2 by @renovate[bot] in #18443
- fix(deps): update dependency @lezer/javascript to v1.5.5 by @renovate[bot] in #18442
- perf(notification): build the update event context once per event (#18444) by @xfournet in #18445
- perf(markdown): collect embedded image paths in a single pass per node (#18454) by @xfournet in #18455
- feat(catalog): introduce new delivery mechanism for the catalog (#16059) by @fellowseb in #17769
- refactor(frontend): replace Axios with the Fetch API (#18376) by @xfournet in #18375
- fix(user): improve org admin (#17742) by @JeremyCloarec in #17745
- fix(perf): improve buildChanges from quadratic to linear time complexity (#18432) by @JeremyCloarec in #18434
- fix(deps): update dependency marked to v18.0.14 by @renovate[bot] in #18471
- fix(deps): update dependency @pyroscope/nodejs to v0.6.4 by @renovate[bot] in #18470
- fix(deps): update dependency openai to v7.22.0 by @renovate[bot] in #18472
- fix(deps): update dependency maplibre-gl to v6.11.0 by @renovate[bot] in #18479
- fix(deps): update dependency undici to v8.11.0 by @renovate[bot] in #18473
- fix(deps): update dependency @langchain/core to v1.2.12 by @renovate[bot] in #18441
- fix(deps): update dependency openai to v7.23.0 by @renovate[bot] in #18480
- chore(deps): update dependency jsdom to v30 by @renovate[bot] in #17436
- fix(ci): read pull request labels from the API in the linked issue check (#18474) by @xfournet in #18475
- fix(merge-users): say what diverged when the two passes disagree (#18476) by @xfournet in #18477
- fix(deps): update dependency maplibre-gl to v6.11.1 by @renovate[bot] in #18481
- test(e2e): drive the restricted user from a second browser context (#18482) by @xfournet in #18484
- chore(deps): bump @filigran/chatbot to 3.10.0 (#18487) by @SamuelHassine in #18488
- feat(xtm-one): grant the Enterprise Edition from the verified XTM license returned by XTM One (#18485) by @SamuelHassine in #18486
- fix(deps): update dependency dompurify to v3.4.16 by @renovate[bot] in #18489
- chore(deps): update maildev/maildev docker tag to v3 by @renovate[bot] in #18491
- chore(deps): update elasticsearch docker tag to v8.19.22 by @renovate[bot] in #18490
- chore(deps): update kibana docker tag to v8.19.22 by @renovate[bot] in #18494
- fix(ai): route Ask AI container report generation through XTM One (#18492) by @SamuelHassine in #18493
- fix(deps): update aws-sdk-js-v3 monorepo by @renovate[bot] in #18497
- chore(deps): update devdependencies (non-major) by @renovate[bot] in #18496
- chore(deps): update node.js to v22.23.3 by @renovate[bot] in #18495
- fix(deps): update dependency graphql-ws to v6.3.0 by @renovate[bot] in #18505
- fix(deps): update dependency undici to v8.11.2 by @renovate[bot] in #18504
- fix(deps): update dependency react-intl to v12.1.3 by @renovate[bot] in #18503
- fix(deps): update dependency maplibre-gl to v6.11.2 by @renovate[bot] in #18502
- chore(deps): update devdependencies (non-major) by @renovate[bot] in #18501
- fix(deps): update aws-sdk-js-v3 monorepo to v3.1140.0 by @renovate[bot] in #18507
- chore(deps): lock file maintenance by @renovate[bot] in #18506
- fix(user): improve userEdit (#18144) by @marieflorescontact in #18158
- fix(decay-rules): change decay excluded indicator creation (#13752) by @JeremyCloarec in #17028
- feat(investigations): support duplicating an investigation (#18076) by @nino-filigran in #18121
- feat(security-platform): support "sighting" between an Indicator and a "Security Platform" (#11940) by @CelineSebe in #17963
- feat(accessibility): update components to use List and ListItemButton instead of MenuList and MenuItem (#17938) by @scarletmerlin123 in #17941
- fix(backend): add merging user as creator of the merged entity (#17913) by @gabrielebonadiman in #18287
- fix(ip-whitelist): fix incorrect exclusion of bypass tokens (#18462) by @lndrtrbn in #18523
Full Changelog: 7.260921.0...7.260928.0