What's Changed
- chore: bump the minor-and-patch group with 2 updates by @dependabot[bot] in #2533
- chore: bump cryptography from 45.0.7 to 46.0.6 by @dependabot[bot] in #2558
- feat(rules): add NIST AI RMF aligned AI governance checks by @kunaals in #2435
- fix(aws): handle SES list_email_identities without paginator by @kunaals in #2561
- chore: add dependabot cooldowns by @jychp in #2560
- fix(aws): use adaptive botocore retries by @kunaals in #2550
- refactor(ontology): convert device hostname rels to conditional matchlinks by @jychp in #2546
- chore: bump pygments from 2.19.2 to 2.20.0 by @dependabot[bot] in #2563
- chore: bump the minor-and-patch group across 1 directory with 19 updates by @dependabot[bot] in #2562
- refactor: cleanup redundant indexes and auto-index lastupdated on extra labels by @jychp in #2564
- fix(ontology): clean up stale derived relationships by @jychp in #2565
- fix(github): add retry logic to call_github_rest_api for transient errors by @jychp in #2566
- fix(core): update CALL subquery to use Neo4j 5 syntax. Update docs. (#1500) by @achantavy in #2547
- chore: bump sphinxcontrib-mermaid from 1.0.0 to 2.0.1 by @dependabot[bot] in #2556
- fix(github): raise ValueError when organization data is None in fetch_all by @jychp in #2568
- fix(gitlab): support additional dependency scanning job names by @kunaals in #2569
- chore: bump kubernetes from 33.1.0 to 35.0.0 by @dependabot[bot] in #2557
- feat(ontology): link Device to SentinelOne agents by @jychp in #2571
- chore: bump packaging from 25.0 to 26.0 by @dependabot[bot] in #2555
- chore: bump aiohttp from 3.13.2 to 3.13.4 by @dependabot[bot] in #2572
- feat(intune): Add Coverage for Microsoft Intune by @shyammukund in #2537
- fix(gcp): retry google api core server errors by @jychp in #2573
- feat: add new intel module for WorkOS by @jychp in #2219
- chore: add Python 3.13 support with deprecation warning for previous versions by @jychp in #2346
- chore: bump aiohttp from 3.13.3 to 3.13.4 by @dependabot[bot] in #2574
- docs(ci): align CNCF references and publish coverage evidence by @jychp in #2567
- fix: change log level from warning to debug for expected Composite Node Pattern cases by @achantavy in #2549
- fix(gcp): retry cleanup and graph job writes by @kunaals in #2540
- feat(kubernetes): link pods to service accounts by @jychp in #2575
- Pin azure-mgmt-resource below 25 by @kunaals in #2577
- chore: bump actions/upload-artifact from 4.3.3 to 7.0.0 by @dependabot[bot] in #2579
- chore: bump the minor-and-patch group with 23 updates by @dependabot[bot] in #2580
- fix(s1): reduce SentinelOne site-scope fallback log noise by @kunaals in #2585
- chore: bump cryptography from 45.0.7 to 46.0.5 by @dependabot[bot] in #2581
- chore: remove redundant load/sync log statements from intel modules by @jychp in #2588
- feat(tailscale): ingest and resolve device posture by @jychp in #2586
- test: align legacy integration tests with AGENTS.md standards by @jychp in #2589
- fix(test): resolve flaky test_sync_ecr caused by non-deterministic mock ordering by @jychp in #2592
- refactor: migrate 5 legacy intel modules to data model by @jychp in #2590
- chore: bump cryptography from 46.0.5 to 46.0.7 by @dependabot[bot] in #2593
- refactor(github): migrate remaining repo sync to data model by @jychp in #2591
- feat(ontology): add EncryptionKey semantic label for cross-cloud key queries by @jychp in #2594
- fix(aws): Skip 503 error for single region in Cloudtrail_mgmt_events module sync by @shyammukund in #2596
- refactor(microsoft): Move Entra and Intune modules under new Microsoft Module by @shyammukund in #2595
- docs(kubernetes): document EKS permission requirements by @kunaals in #2599
Full Changelog: 0.134.0...0.135.0