What's Changed
- feat: Move Zone node generation and feature-flag behavior into Enterprise - BED-9855 by @kpowderly in #3342
- chore: add stale work item automation BED-9793 by @elikmiller in #3339
- feat: Bulk PZ rule ingestion from bundle BED-9319 by @AD7ZJ in #3321
- feat: Refresh DoodleUI typography foundation BED-9082 by @justin-prime1 in #3067
- chore(params): add is_null and is_not_null params BED-9583 by @sirisjo in #3340
- feat: JSON validation messaging: BED-9858 by @jvacca-specterops in #3346
- fix: Broken Object Level Auth ETAC Bypass -relay-targets Bed-8843 by @Useinovski in #3212
- fix: Broken Object Level Authorization - ETAC Bypass - acl-inheritance BED-9120 by @Useinovski in #3216
- feat: Extension Upsert Logging Enrichment - BED-9497 by @LawsonWillard in #3345
- chore: add pull request size limit BED-9793 by @elikmiller in #3344
- feat: Display Associated Labels in Explore Entity Panel BED-9168 by @justin-prime1 in #3102
- feat: add Slider Input Component to Doodle UI BED-9891 by @catsiller in #3354
- chore: require admin approval for go.mod and go.work changes BED-9898 by @mvlipka in #3355
- feat: add icons to confirmation dialog: BED-9728 by @jvacca-specterops in #3356
- fix: BED-9752 saved queries caret reversed by @irshadaj in #3362
- chore: bump fast-uri vuln fix BED-9930 by @bsheth711 in #3365
- chore: update axios and brace-expansion by @elikmiller in #3367
- fix: move http-cache-semantics to non-vuln version - BED-9944 by @mykeelium in #3409
- fix: Delete golangci-lint before recreate - BED-9942 by @StephenHinck in #3370
- feat(job): Add secret store config BED-9852 by @mistahj67 in #3357
- chore: Icon/Icon Button refactor - BED-6062 by @KillahDillah in #3326
- fix(auth): remove unsafe SAMLResponse WARN logging - BED-9639 by @cami-specter in #3260
- feat: Add Doodle UI Drawer BED-9865 by @bfaulk96 in #3353
- feat: BED-9498 extension ID saved queries cannot be modified by @AlyaEru in #3359
- feat(jobs): add profiles create endpoint BED-9573 by @lrfalslev in #3363
- chore: bump collector version - BED-9859 by @mykeelium in #3407
- feat: Do not gate Optimize on analysis - BED-9971 by @StephenHinck in #3428
- chore(jobs): update outcome enum for partially-succeeded BED-9902 by @mistahj67 in #3414
- feat: explore graph directions and spacing controls BED-9130 by @catsiller in #3348
- chore: moved ListUsers to new architecture BED-9736 by @stephanieslamb in #3325
- chore(deps): bump DAWGs release version to v0.9.1 BED-9780 by @AlyaEru in #3435
- feat(GH Checks): update types in conventional commit check - BED-9975 by @TheNando in #3431
- chore(jobs): API - Schedules: Create BED-9578 by @ALCooper12 in #3333
- chore: update AzureHound to latest patch - BED-9984 by @mykeelium in #3439
- feat: job history table: BED-9864 by @jvacca-specterops in #3427
- feat: surface extension based saved queries in UI BED-9322 by @urangel in #3408
- fix: restore managed-service-account DNS compositions BED-9336 by @JonasBK in #3401
- fix: restore exact ADCS trust paths BED-9336 by @JonasBK in #3403
- fix: restore exact ADCS CA host validation BED-9336 by @JonasBK in #3405
- fix: restore ADCSESC3 creation and composition alignment BED-9336 by @JonasBK in #3406
- refactor: add CHOW ingest types and JSON schemas - BED-7790 by @wes-mil in #3416
- refactor: add streaming CHOW payload validation - BED-7790 by @wes-mil in #3417
- refactor: adopt CHOW validation for ingest - BED-7790 by @wes-mil in #3420
- refactor: remove the legacy ingest parser - BED-7790 by @wes-mil in #3421
- refactor: remove legacy ingest types and schemas - BED-7790 by @wes-mil in #3422
- feat: Add DoodleUI Stepper BED-9866 by @bfaulk96 in #3424
- chore: upgrade go 1.27.2 and related dependencies BED-10000 by @superlinkx in #3442
- chore: Icon Refactor pt 2 - BED-9929 by @KillahDillah in #3364
- feat: BED-9897 add "extension" to list queries scope values by @AlyaEru in #3441
- perf: Domain lookup taking too long BED-7066 by @Useinovski in #3434
- feat(jobs): add profiles update endpoint BED-9574 by @lrfalslev in #3358
- chore: add rate limiting middleware to slices missing the middleware - BED-9788 by @Flake85 in #3341
- feat(api): Implements BED-9337 by @slimi-so in #3351
- chore(docs): Update attack-paths/findings-types BED-9830 by @cweidenkeller in #3451
- feat: render non-traversable Explorer edges as dashed lines by @TheNando in #3448
- test: Add missing test coverage for offset/skip BED-10027 by @Useinovski in #3452
- feat: Added shadow shield Icon Bed 9137 by @LucasParraF in #3443
- chore: require OH >v0.3.0 when use_raw_object_id flag enabled - BED-9831 by @StranDutton in #3411
- feat: add collection resource list clients and Select loading state (BED-9956) by @bfaulk96 in #3449
- chore(jobs): remove 415 from API response docs BED-9589 by @sirisjo in #3459
- feat: Label synthetic zone node correctly on the graph - BED-9969 by @kpowderly in #3436
- fix(jobs): align secret creation OpenAPI schemas - BED-9570 by @definitelynotagoblin in #3454
- ci: update actions/upload-artifact to v7 to update nodejs runner to 24 BED-9946 by @mvlipka in #3455
- refactor: Remove/Update Docker Content Trust for Image Signing. BED-8974 by @RaymondLaubert in #3360
- chore: remove zone node feature flag BED-9993 by @bsheth711 in #3470
- fix: Apply search limit and ETAC filtering in database query BED-10036 by @StephenHinck in #3456
- fix: Restrict objectid search to exact BTree lookups with case-variant matching BED-10037 by @StephenHinck in #3457
- fix: correct audit log count when using date filters BED-10051 by @julian1j in #3471
- chore(permissions): Add CollectionReadJobs to Power User role BED-10061 by @mistahj67 in #3481
- feat: config for experiment storage by @zinic in #3288
- chore(dawgs-release): Upgrading DAWGS version from v0.9.1 to v0.9.2 by @ykaiboussiSO in #3484
- ci: update docker/build-push-action to NodeJS 24 BED-9948 by @mvlipka in #3485
- feat: CSV export from findings table BED-9138 by @maffkipp in #3447
- chore: remove unproduced GPOAppliesTo and CanApplyGPO from post-processed edges BED-9943 by @StephenHinck in #3371
- feat: migrate DCSync post-processing to DCA BED-9943 by @StephenHinck in #3372
- feat: migrate ProtectAdminGroups post-processing to DCA BED-9943 by @StephenHinck in #3373
- feat: migrate SyncLAPSPassword post-processing to DCA BED-9943 by @StephenHinck in #3374
- feat: migrate HasTrustKeys post-processing to DCA BED-9943 by @StephenHinck in #3375
- feat: migrate CanRDP post-processing to DCA BED-9943 by @StephenHinck in #3376
- feat: migrate AdminTo, CanPSRemote and ExecuteDCOM post-processing to DCA BED-9943 by @StephenHinck in #3377
- feat: migrate TrustedForNTAuth post-processing to DCA BED-9943 by @StephenHinck in #3378
- feat: migrate IssuedSignedBy post-processing to DCA BED-9943 by @StephenHinck in #3379
- feat: migrate EnterpriseCAFor post-processing to DCA BED-9943 by @StephenHinck in #3380
- feat: migrate ExtendedByPolicy post-processing to DCA BED-9943 by @StephenHinck in #3381
- feat: migrate EnrollOnBehalfOf post-processing to DCA BED-9943 by @StephenHinck in #3382
- feat: migrate GoldenCert post-processing to DCA BED-9943 by @StephenHinck in #3383
- feat: migrate ADCSESC1 post-processing to DCA BED-9943 by @StephenHinck in #3384
- feat: migrate ADCSESC3 post-processing to DCA BED-9943 by @StephenHinck in #3385
- feat: migrate ADCSESC4 post-processing to DCA BED-9943 by @StephenHinck in #3386
- feat: migrate ADCSESC6a post-processing to DCA BED-9943 by @StephenHinck in #3387
- feat: migrate ADCSESC6b post-processing to DCA BED-9943 by @StephenHinck in #3388
- feat: migrate ADCSESC9a post-processing to DCA BED-9943 by @StephenHinck in #3389
- feat: migrate ADCSESC9b post-processing to DCA BED-9943 by @StephenHinck in #3390
- feat: migrate ADCSESC10a post-processing to DCA BED-9943 by @StephenHinck in #3391
- feat: migrate ADCSESC10b post-processing to DCA BED-9943 by @StephenHinck in #3392
- feat: migrate ADCSESC13 post-processing to DCA and drop the legacy ADCS ESC operation BED-9943 by @StephenHinck in #3393
- feat: migrate CoerceAndRelayNTLMToADCS post-processing to DCA BED-9943 by @StephenHinck in #3394
- feat: migrate CoerceAndRelayNTLMToSMB post-processing to DCA BED-9943 by @StephenHinck in #3395
- feat: migrate CoerceAndRelayNTLMToLDAP and LDAPS post-processing to DCA BED-9943 by @StephenHinck in #3396
- feat: migrate ExecuteCommand post-processing to DCA BED-9943 by @StephenHinck in #3397
- feat: migrate AZRoleApprover post-processing to DCA BED-9943 by @StephenHinck in #3398
- feat: migrate SyncedToEntraUser and SyncedToADUser post-processing to DCA BED-9943 by @StephenHinck in #3399
- refactor: remove legacy delete-recreate post-processing helpers BED-9943 by @StephenHinck in #3400
- chore(jobs): add 409 response to
endendpoint BED-9588 by @sirisjo in #3490 - fix: Filters dropdown options text color and cell hover effect regression Bed-10023 by @LucasParraF in #3488
- chore: Upgrade aws-actions/configure-aws-credentials. BED-9947 by @RaymondLaubert in #3486
- chore(jobs): add cancelled to outcome enum BED-9588 by @sirisjo in #3496
- feat: job history drawer: BED-9899 by @jvacca-specterops in #3482
- feat: OG mgmt page enhancements BED-9833 by @urangel in #3432
- refactor: Separated Cosign Verify from the Sign Job. BED-8974 by @RaymondLaubert in #3500
- ci: updated docker/login-action to latest version BED-9949 by @mvlipka in #3495
- ci: updated docker/metadata-action to latest version BED-9950 by @mvlipka in #3497
- ci: updated docker/setup-buildx-action to latest version BED-9951 by @mvlipka in #3498
- chore: Fix ADCS slow test fixtures BED-10101 by @StephenHinck in #3504
- fix: Correct collection secret client fields (BED-10102) by @bfaulk96 in #3507
- chore: NPM cleanup BED-10059 by @maffkipp in #3487
- fix(etac): enforce ETAC permissions on the azure related entities endpoint - BED-9121 by @cami-specter in #3352
- fix: Update Error Handling and Tests for Zip Extension Bundles - BED-10068 by @LawsonWillard in #3491
- feat: Add Marketplace to BloodHound Community Edition BED-10067 by @justin-prime1 in #3227
- refactor(datapipe): Swap job id to string for uuid logging support BED-10022 by @mistahj67 in #3450
- chore: bump collector versions - BED-10084,BED-10085,BED-10086 by @mykeelium in #3508
- chore(jobs): swap api endpoints to collie-job prefix BED-10133 by @mistahj67 in #3514
- chore: dawgs bump - BED-10142 by @brandonshearin in #3517
- chore: cherrypickin CVEs - BED-10009 by @brandonshearin in #3545
- chore: stage/v9.9.0 CVE Cherry Pick BED-10219 by @mvlipka in #3551
- chore: update storybook to 8.6.19 BED-10228 (#3555) by @mvlipka in #3556
- fix: updated types to allow for null values BED-10215 by @stephanieslamb in #3558
- chore: update Dompurify (BED-3565) by @dcairnsspecterops in #3570
Full Changelog: v9.8.0...v9.9.0