What's Changed
- feat(syft): store cataloger evidence on DEPLOYED by @jychp in #3229
- fix(netlify): unwrap MongoDB extended JSON in membership payloads by @jychp in #3233
- fix(okta): guard application fields absent from the SDK base model by @jychp in #3234
- docs: clarify Socket.dev and Google Workspace authentication by @kunaals in #3236
- feat(slack): ingest accessible private channels by @kunaals in #3198
- fix(okta): skip missing trusted origin scopes during transform by @jychp in #3237
- chore: bump github/codeql-action/upload-sarif from 4.37.8 to 4.37.9 in the minor-and-patch group by @dependabot[bot] in #3239
- fix(aws): skip unsupported Bedrock Agent region by @kunaals in #3238
- chore: bump the minor-and-patch group with 13 updates by @dependabot[bot] in #3240
- fix(okta): accept undeclared user factor statuses by @jychp in #3244
- fix(aws): recover from expired STS credentials in ECR image layer sync by @jychp in #3246
- feat(rules): expose Fact anchor check as public API by @jychp in #3228
- fix(ci): cancel superseded pull request runs by @kunaals in #3254
- fix(salesforce): skip inaccessible connected apps by @kunaals in #3248
- fix(socketdev): scope fix queries to alert vulnerabilities by @kunaals in #3249
- fix(okta): accept uppercase TAC provider type by @kunaals in #3258
- fix(socketdev): link fixes to scoped dependencies by @kunaals in #3250
- fix(rules): exclude inactive delegated admins by @kunaals in #3247
- fix(azure): support azure-mgmt-eventhub 12 model shape by @jychp in #3261
- chore: bump docker/setup-qemu-action from 4.2.0 to 4.3.0 in the minor-and-patch group by @dependabot[bot] in #3262
- fix(scaleway): unbreak tests on SDK 2.12.0 and ingest its new security fields by @jychp in #3264
- chore: bump the minor-and-patch group across 1 directory with 9 updates by @dependabot[bot] in #3266
- fix(aws): skip Bedrock knowledge bases in Melbourne by @kunaals in #3265
- fix(socketdev): match repositories by provider identity by @kunaals in #3259
- fix(container-images): batch layer-cache reads by @kunaals in #3269
- feat(core): accept iterables in load() and load_matchlinks() by @jychp in #3273
- fix(spacelift): align user_type docs with the writer and keep CloudTrail error status by @jychp in #3274
- feat(github): map SAML identities to canonical users by @kunaals in #3267
- fix(rules): exclude Control Tower and QuickSetup from CIS 2.15 by @jychp in #3281
- fix(subimage): parse Neo4j users from items payload by @jychp in #3275
- chore: bump types-pyyaml from 6.0.12.20260815 to 6.0.12.20260906 by @dependabot[bot] in #3287
- chore: bump the minor-and-patch group across 1 directory with 5 updates by @dependabot[bot] in #3284
- chore: bump anyio from 4.12.1 to 4.14.2 by @dependabot[bot] in #3288
- fix(okta): skip applications deleted during sync when listing users/groups by @jychp in #3290
- fix(orca): handle supported vulnerability response values by @kunaals in #3280
- chore: bump types-requests from 2.33.0.20260712 to 2.33.0.20260906 by @dependabot[bot] in #3285
- Add CVSS vectors and scores to AWS Inspector Finding by @heryxpc in #3282
- fix(aws): preserve ECS inventory after transient regional failures by @kunaals in #3294
- fix(aws): prevent false ELBV2 exposure from overlapping private IPs by @kunaals in #3293
- chore: bump the minor-and-patch group with 2 updates by @dependabot[bot] in #3283
- chore: bump azure-mgmt-network from 31.0.1 to 32.0.0 by @dependabot[bot] in #3286
- fix(gcp): skip missing Secret Manager versions by @kunaals in #3300
- fix(snowflake): support inherited grants and correct collection setup by @kunaals in #3271
- fix(azure): skip disallowed Event Grid providers by @kunaals in #3302
- docs(aws): document Identity Center permissions by @kunaals in #3304
- fix(aws): skip regional Bedrock knowledge base failures by @kunaals in #3305
- fix(snowflake): tolerate unavailable network rule schemas by @kunaals in #3306
- fix(github): bound container image history query by @kunaals in #3301
- docs(aws): align permissions with SecurityAudit coverage by @kunaals in #3308
- fix(orca): tolerate drifting pagination counts by @kunaals in #3307
- feat(microsoft): add delegated Entra authentication by @kunaals in #3260
- fix(supply-chain): bound candidate aggregation and index layer lookups by @kunaals in #3309
- fix(scaleway): require scaleway SDK >= 2.12.0 by @kunaals in #3312
- fix(gcp): read BuildKit provenance embedded in Artifact Registry image indexes by @kunaals in #3324
- fix(gcp): read top-level platform fields from dockerImages imageManifests by @kunaals in #3325
- feat(zoom): inventory account users and assigned plan types by @kunaals in #3278
- chore(cubic): stop enforcing hand-written schema.md by @kunaals in #3329
- feat(jira): inventory Cloud project access and admin groups by @kunaals in #3277
- chore: bump the minor-and-patch group with 8 updates by @dependabot[bot] in #3322
- chore: bump pyjwt from 2.13.0 to 2.15.0 by @dependabot[bot] in #3335
- chore: bump the minor-and-patch group with 5 updates by @dependabot[bot] in #3320
- feat(zendesk): add Zendesk users and legacy API keys by @achantavy in #3296
- chore: bump virtualenv from 20.36.1 to 21.7.12 by @dependabot[bot] in #3337
- chore: bump oauthlib from 3.3.1 to 4.0.0 by @dependabot[bot] in #3339
- chore: bump virtualenv from 21.7.12 to 21.7.13 by @dependabot[bot] in #3338
- chore: bump the minor-and-patch group with 8 updates by @dependabot[bot] in #3341
- chore: bump the minor-and-patch group with 2 updates by @dependabot[bot] in #3340
- chore: bump google-cloud-aiplatform from 1.165.1 to 2.1.0 by @dependabot[bot] in #3342
- feat(okta): add device ingestion by @jychp in #3279
- fix(gitlab): don't crash on non-UTF-8 Dockerfile content + reuse HTTP session by @heryxpc in #3323
- fix(kubernetes): stream pods page by page to bound sync memory by @kunaals in #3349
- fix(entra): stream group members page by page to bound sync memory by @kunaals in #3351
- feat(notion): add identity and public page inventory by @kunaals in #3193
- feat(microsoft): add --microsoft-requested-syncs for selective sync by @kunaals in #3352
- fix(aws/iam): fetch each managed policy document once per sync by @kunaals in #3353
- fix(aws): skip a region when its endpoint fails TLS validation by @kunaals in #3354
- feat(microsoft): ingest Entra user sign-in activity by @kunaals in #3311
- feat(aws/iam): fetch IAM policies with GetAccountAuthorizationDetails by @kunaals in #3355
- fix(aws): support AWS GovCloud partitions by @sachafaust in #3350
Full Changelog: 0.141.0...0.142.0