Enhancements:
- #19604 perf(engine): avoid wildcard field resolution and role wildcards in common Elasticsearch queries
- #19575 chore(deps): deduplicate yarn.lock after Renovate updates
- #19515 docs(ux): document the configurable date and time display in tables
- #19482 feat(merge-users): remove the MERGE_USERS feature flag
- #19342 feat: display blogpost items in OpenCTI
- #19330 fix(ingestion): Ingestion log history not deleted from Redis when feed/sync deleted
- #17870 feat(Ingestion): Ability to create with form intake even if user has View Only access
- #15629 feat(deduplication): custom de-duplication window for 'Sightings'
- #14580 feat(ux): add label, reduce amount of clicks
- #6177 feat(case-management): custom fields and templates in Cases and Incidents
Bug Fixes:
- #19658 fix(dates): Organization details page crash with new data in table setting to default
- #19617 fix(client-python): STIX import sends every x_* property as a custom field value, file contents included
- #19596 fix(client-python): empty container exports omit object_refs (non-report containers)
- #19567 fix(form-intake): the create button of a lookup restricted to Observed-Data crashes the form
- #19566 fix(form-intake): an entity created in a form with a date (e.g. a Report) is not created at all
- #19564 fix(test): taxii-filtering-test depends on the dataset report being visible, red on master
- #19561 fix(activity): Activity digests don't work
- #19526 fix(config-preset): import Apply sends the import while the selection save is still in flight
- #19524 fix(ux): Due Date column ignores the date and time display settings of tables
- #19520 fix(form-intake): improvement of form
- #19469 test(frontend): useKillChainNames.test.tsx "refreshes the names from the network" is flaky on master
- #19465 fix(frontend): config preset import Apply does not wait for a selection save already in flight
- #19428 fix(user): Service account creation form should not permit password input
- #19366 fix(csv-feed): improve CSV feed export
- #19211 fix(notifications): email "View" link uses the Standard STIX ID and breaks after an attribute edit changes it (e.g. rename)
- #19159 fix(opensearch): STS credentials renewed on every OpenSearch request when request_timeout ≥ credential lifetime
- #19146 fix(frontend): "add in container" autocomplete can make Elasticsearch run out of memory
- #19017 fix(ui): Information tooltip alignement in user creation form
- #18947 fix(playbook): a malformed inPirFilters configuration breaks the resolved filters cache
- #18873 fix(frontend): Place of birth and Ethnicity cannot be cleared on Threat Actor Individual
- #18201 fix(schema): Declare the user reference fields the schema cannot yield
- #17790 fix(auth): SAML private key/cert silently rejected by PEM validation when it contains whitespace
- #17711 fix(dashboards): prevent importing broken dashboards json files
- #17175 fix(client-python): empty report exports omit object_refs
- #17137 fix(export): PDF export crashes with "can't access property _minWidth" when a Fintel report contains a table with irregular column count
- #15998 fix(ui): "Linked Entities" drawer panel on relation view has outdated design, not compliant with new UI
- #12919 fix(ui): opening context menu causes UI glitch in entities content tab
- #8271 fix(filters): searching by alias doesn't show results for Author
Community Contributions Highlight:
- fix(client-python): preserve empty object_refs in report exports (#17175) by @steadytao in #17176
- fix(ui): align info icon tooltips in user creation form (#19017) by @FawwazLawal in #19108
Pull Requests:
- fix(auth): trim whitespace around SAML PEM keys and certificates (#17790) by @SamuelHassine in #19460
- fix(config-preset): wait for the save in flight before sending the import (#19526) by @SamuelHassine in #19527
- fix(threat-actors): allow clearing place of birth and ethnicity (#18873) by @SamuelHassine in #19513
- feat(form-intake): add the "Create knowledge via Form Intake" capability and let it import a form submission (#17870) by @OctaveLaventure in #19021
- fix(engine): reuse one AWS credential provider for OpenSearch SigV4 (#19159) by @SamuelHassine in #19461
- feat(config-preset): export import ee whitemark (#19331) by @esrevi in #19410
- fix(test): check taxii filtering against the measured baseline, not a dataset report (#19564) by @SamuelHassine in #19565
- feat(form-intake): open the form intake entry points to users who can submit forms (#19018) by @OctaveLaventure in #19022
- fix(deps): update dependency @filigran/chatbot to v3.18.0 by @renovate[bot] in #19547
- chore(deps): deduplicate yarn.lock after Renovate updates (#19575) by @xfournet in #19576
- chore(deps): update dependency unrs-resolver to v1.13.0 by @renovate[bot] in #19504
- fix(deps): update dependency node-forge to v1.4.2 by @renovate[bot] in #19435
- chore(deps): update dependency graphql to v17 by @renovate[bot] in #19307
- fix(deps): update aws-sdk-js-v3 monorepo by @renovate[bot] in #19453
- fix(deps): update dependency openai to v7.47.0 by @renovate[bot] in #19511
- chore(deps): update dependency types-pytz to ~=2026.6.0.20261031 by @renovate[bot] in #19546
- chore(codecov): update coverage requirements (#19365) by @aHenryJard in #19369
- fix(notification): send activity digests, and isolate failing digests (#19561) by @Archidoit in #19562
- fix(ui): New design for drawer of relationship creation from relationship (#15998) by @Archidoit in #18651
- fix(ui): align info icon tooltips in user creation form (#19017) by @FawwazLawal in #19108
- chore(deps): lock file maintenance by @renovate[bot] in #19582
- fix(form-intake): an entity created in a form with a date (e.g. a Report) is not created at all (#19566) by @OctaveLaventure in #19572
- fix(form-intake): improvement of form intake (#19520) by @CelineSebe in #19521
- fix(client-python): preserve empty object_refs in report exports (#17175) by @steadytao in #17176
- fix(form-intake): the create button of a lookup restricted to Observed-Data crashes the form (#19567) by @OctaveLaventure in #19573
- fix(test): make the useKillChainNames and ip-whitelist tests order and timing independent (#19580) by @SamuelHassine in #19581
- fix(ui): opening context menu causes UI glitch in entities content tab (#12919) by @delemaf in #19570
- fix(filters): searching by alias doesn't show results for Author (#8271) by @delemaf in #19590
- fix(ux): make the Due Date column follow the date display of tables (#19524) by @alice-debra in #19528
- fix(deps): update dependency amqplib to v2.2.1 by @renovate[bot] in #19608
- fix(deps): update dependency js-base64 to v3.9.6 by @renovate[bot] in #19609
- chore(deps): update redis docker tag to v8.6.8 by @renovate[bot] in #19443
- fix(deps): update graphiql monorepo (major) by @renovate[bot] in #19611
- feat(graphql): add global switches for GraphQL secure defaults (#19010) by @marieflorescontact in #19370
- fix(ingestion): delete ingestion log history from Redis when a feed or sync is deleted (#19330) by @JeremyCloarec in #19356
- fix(frontend): limit and debounce the "add in container" autocomplete (#19146) by @JeremyCloarec in #19147
- fix(playbook): ignore malformed inPirFilters when building the resolved filters cache (#18947) by @JeremyCloarec in #18948
- fix(client-python): only send custom field compatible values on STIX import (#19617) by @ludovic in #19621
- feat(xtm-hub): display blogpost items in the news feed (#19342) by @Kroustille in #19348
- fix(client-python): export object_refs: [] for every empty container (#19596) by @SamuelHassine in #19624
- ci(renovate): keep the Elasticsearch 9 client and CI image up to date (#10729) by @Amjed-Filigran in #19584
- feat(merge-users): remove the MERGE_USERS feature flag (#19482) by @ludovic in #19483
- feat(workspace): Add Status on DraftWorkspace (#17901) by @delemaf in #18836
- feat(enrichment): trigger enrichment from investigations (#6651) by @lndrtrbn in #18968
- feat(logs): add user agent in logs (#19289) by @aHenryJard in #19290
- feat(custom-fields): add the "Manage custom fields" capability (#19585) by @ludovic in #19589
- docs(deduplication): document ISO 8601 durations for the relations deduplication window (#15629) by @romain-filigran in #18758
- fix(notifications): build notification links from the internal id (#19211) by @SamuelHassine in #19463
- fix(dashboards): reject imported dashboard files without a name (#17711) by @SamuelHassine in #19462
- feat(domain-specific-platform): Export, Import Wizard & Partial Import - RBAC config (markings, roles, groups, policies) (#18568) by @SarahBocognano in #19424
- fix(front): prevent organization details page to crash when displaying date (#19658) by @mcartaud in #19659
- fix(deps): update dependency jose to v6.2.15 by @renovate[bot] in #19613
- fix(deps): update dependency express-rate-limit to v8.7.3 by @renovate[bot] in #19666
- fix(deps): update dependency marked to v18.1.3 by @renovate[bot] in #19667
- fix(deps): update dependency openid-client to v6.8.9 by @renovate[bot] in #19668
- fix(deps): update dependency semver to v7.8.6 by @renovate[bot] in #19669
- fix(deps): update dependency @elastic/elasticsearch-v9 to v9.5.1 by @renovate[bot] in #19671
- fix(notifications): deliver live triggers to a service account through a webhook notifier (#19664) by @SamuelHassine in #19665
- docs(ux): document the configurable date and time display in tables (#19515) by @alice-debra in #19518
- fix(user): hide password inputs when creating a service account (#19428) by @JeremyCloarec in #19628
- perf(engine): avoid wildcard field resolution and role wildcards in common Elasticsearch queries (#19604) by @xfournet in #19605
- fix(deps): update dependency @filigran/chatbot to v3.19.1 by @renovate[bot] in #19672
- perf(dashboards): build the time series axis once and check distribution access in one call (#19379) by @tpasquet in #19392
- perf(engine): drop redundant clauses from the access filters added to every search (#19610) by @xfournet in #19612
New Contributors:
- @steadytao made their first contribution in #17176
Full Changelog: 7.261103.0...7.261106.0