New features
- Implement reinject command to send notifications of alerts (#1638) @sabban
- Print cscli usage in color, fix windows terminal detection (#1801) @mmetc
Bug Fixes
- fix #1746 (#1749) @sabban
- restrict permissions for plugin configurations (#1745) @mmetc
- simpler makefiles for static targets (#1744) @mmetc
- fix expr scope #1737 (#1738) @sabban
- acually postoverflow before reprocessing (#1739) @sabban
- fix logging for email plugin (#1670) @sabban
- fix decision delete #1724 (#1725) @sabban
- Fix
cscli notifications listcrash (#1697) @blotus - fix the ssltls by actually doing ssltls in email notification plugin (#1672) @sabban
- Fix one shot acq race (#1783) @sbs2001
- Bulk delete alert optimization (#1782) @mmetc
- Fix counter bucket (#1807) @sabban
Changes
- add WAL support for sqlite (#1752) @blotus
- Replace shodan with crowdsec cti in notification template (#1741) @sbs2001
- use ansible roles from crowdsecurity.testing collection (#1743) @mmetc
- add config option to enable or not local API and agent (#1730) @AlteredCoder
- allow plugins to load environment variable (#1727) @AlteredCoder
- fix #1733 : add support for exclusion regexps (#1735) @buixor
- golangci-lint 1.49 and related fixes (#1736) @mmetc
- ansible changed_when fix; ansible/vagrant lint (#1734) @mmetc
- Update sprig to v3 (#1722) @LaurenceJJones
- hardcode db password in CI to allow tests from third parties (#1729) @mmetc
- Datasource/kafka (#1698) @he2ss
- allow user to disable decision deduplication (#1687) @buixor
- switch to go 1.19 (#1709) @blotus
- fix typo in func tests (#1718) @sabban
- add
cscli support dump(#1634) @blotus - replace wizard patch for debian package with an envvar check (#1630) @mmetc
- func tests: enable capi only when needed (#1710) @mmetc
- golangci-lint v1.48 and fixes for "usestdlibvars" (#1711) @mmetc
- functional tests: json, stderr helpers (#1704) @mmetc
- ansible testing improvements (#1700) @mmetc
- add suggestion on cscli install items (#1686) @AlteredCoder
- ansible testing (#1691) @mmetc
- cscli machines delete: return an error if machines doesn't exist (#1689) @AlteredCoder
- add -a options in cscli alerts list (#1690) @AlteredCoder
- generic dateparse approach (#1669) @buixor
- don't run azure pipeline on freeBSD tags (#1684) @blotus
- functional tests instrumented by ansible/vagrant (#1682) @mmetc
- adjust test timing for slow boxes (#1681) @mmetc
- fix --column-statistics handling in mysql tests (#1680) @mmetc
- cronjob remove fails due to
[[(#1818) @LaurenceJJones - warn if no acquisition files are found, acquisition_test refactoring, func tests (#1816) @mmetc
- hub auto update cronjob (#1817) @LaurenceJJones
- refactor broker_test.go, extract cstest/filenotfound*.go (#1815) @mmetc
- rename pkg/cstest -> pkg/hubtest (#1811) @mmetc
- force postgres 14 for func tests (#1813) @mmetc
- enable all static checks + minor fixes and typos (#1806) @mmetc
- add test and fix for configuration reload (#1808) @mmetc
- fix missing metrics cscli (#1809) @blotus
- replace log.Fatal with t.Fatal (#1805) @mmetc
- don't install jq to build windows, docker (not required anymore) (#1800) @mmetc
- unit tests: always capture testcase variable -> allow parallel testing (#1797) @mmetc
- check is TLS == "true" before to enable in LAPI (#1795) @stephdl
- bats helper fixes (#1792) @mmetc
- Fast alert delete (#1791) @sbs2001
- new tables (#1763) @mmetc
- Update ent and grokky package (#1772) @AlteredCoder
- fork dlog to ease debian packaging on official repos (#1790) @sabban
- simplify one shot tests (#1786) @sbs2001
- remove a wrong warning when pulling list content from CAPI (#1789) @blotus
- tests/bin cleanup (#1760) @mmetc
- make: accept BUILD_VENDOR_FLAGS variable (#1771) @mmetc
- renamed security.MD -> SECURITY.md (#1774) @mmetc
- fix & cleanup cloudwatch_test.go (#1780) @mmetc
- cleanup + fix flaky tests in file_test.go, apic_test.go (#1773) @mmetc
- "make localstack": added zookeper+kafka services (#1770) @mmetc
- tighten windows sqlite database permissions (#1769) @blotus
- don't suggest an item which user already mentioned (#1702) @sbs2001
- fix misspelling of instantiate participles (#1759) @xconverge
- spf13/cobra v1.5.0; antonmedv/expr v1.9.0 (#1756) @mmetc
- improvement: Docker one shot error message (#1666) @LaurenceJJones
- tighten permissions for creds and notification configuration files on windows (#1757) @blotus
- rename ROOT var to CS_ROOT in Makefile (#1755) @blotus
Documentation
Geolite2 notice
This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.
Installation
Take a look at the installation instructions.