New Features
Improvements
- crowdsec: remove warning if prometheus port is taken during cold logs processing (#2857) @mmetc
- bin/crowdsec: avoid writing errors twice when log_media=stdout (#2876) @mmetc
- cron: spread server load when upgrading hub and data files (#2873) @mmetc
- lp metrics: collect datasources and console options (#2870) @mmetc
- refact pkg/apiserver (auth helpers) (#2856) @mmetc
- refact cscli (globals) (#2854) @mmetc
- [http] Add unix socket option (#2764) @LaurenceJJones
- refact pkg/apiclient (#2846) @mmetc
- refact "cscli config" (#2832) @mmetc
- Appsec unix socket (#2737) @LaurenceJJones
- cscli metrics: rename buckets -> scenarios (#2848) @mmetc
- add SetMeta and SetParsed helpers (#2845) @buixor
- implement highAvailability feature (#2506) @he2ss
- pkg/hubtest: extract methods + consistent error handling (#2756) @mmetc
- log processor: share apiclient in output goroutines (#2836) @mmetc
- bats: color formatter in CI (#2838) @mmetc
- refact "cscli console" (#2834) @mmetc
- refact "cscli notifications" (#2833) @mmetc
- refact "cscli explain" (#2835) @mmetc
- refact "cscli alerts" (#2827) @mmetc
- refact "cscli lapi" (#2825) @mmetc
- update calls to deprecated x509 methods (#2824) @mmetc
- refact cscli metric processing (#2816) @mmetc
- Dedicated whitelist metrics (#2813) @buixor
- refact "cscli" root cmd (#2811) @mmetc
- refact "cscli metrics" part 3 (#2807) @mmetc
- refact "cscli metrics" part 2 (#2806) @mmetc
- refact "cscli metrics" part 1 (#2805) @mmetc
- refact "cscli decisions"; lint (#2804) @mmetc
- refact "cscli dashboard" (#2803) @mmetc
- refact "cscli papi" (#2802) @mmetc
- refact "cscli simulation" (#2801) @mmetc
- refact "cscli " (#2782) @mmetc
- refact "cscli hub" (#2800) @mmetc
- refact "cscli alerts" (#2778) @mmetc
- refact "cscli machines" (#2777) @mmetc
- refact "cscli bouncers" (#2776) @mmetc
- CI: rename workflows, update docker build (#2798) @mmetc
- cscli: don't print use_wal warning (#2794) @mmetc
- option to override hub url template. for testers only. (#2785) @mmetc
- lint: disallow naked returns (#2771) @mmetc
- lint: enable linter "wastedassign" (#2772) @mmetc
Bug Fixes
- armhf fix for getfstype (#2884) @sabban
- Fix locking logic for HA + add list unsubscribe for PAPI (#2904) @buixor
- warn if user is using inotify to tail a symlink (#2881) @blotus
- file acquisition: don't bubble error when tailed file disappears (#2903) @mmetc
- Fix rpm build (#2894) @sabban
- fix unix socket error (#2897) @LaurenceJJones
- lapi: log error "can't sinchronize with console" only if papi is enabled (#2896) @mmetc
- add cron as a suggested package for debian package (#2799) @blotus
- [appsec] delete api key header before processing the request (#2890) @blotus
- fix #2889 (#2892) @buixor
- acquisition : take prometheus level into account (#2885) @buixor
- Fix armhf (#2886) @sabban
- cscli tests + fix bouncer/machine prune (#2883) @mmetc
- support both scope and scopes parameter in decisions filter (#2882) @blotus
- appsec: get the original UA from headers (#2809) @blotus
- file acquis: add mutex to protect access to the internal tail map (#2878) @blotus
- pkg/cwhub: download data assets to temporary files to avoid partial fetch (#2879) @mmetc
- Auto detect if reading logs or storing sqlite db on a network share (#2241) @blotus
- cscli: hide hashed api keys (#2874) @mmetc
- fix: log stack trace while computing metrics (#2865) @mmetc
- systemd: check configuration before attempting reload (#2861) @mmetc
- appsec: split return code for bouncer and user (#2821) @blotus
- [Loki] Set headers/basic auth if set for queryRange (#2815) @LaurenceJJones
- Decouple docker image from package release (#2791) @mmetc
- Update docker_start.sh (#2780) @LaurenceJJones
- fix some tests (#2775) @sabban
Chore / Deps
- CI: bump lint version and update configuration (#2901) @mmetc
- CI: use go 1.21.8 (#2906) @mmetc
- CI: bump github actions (#2895) @mmetc
- Bump google.golang.org/protobuf from 1.31.0 to 1.33.0 (#2893) @dependabot
- bump dependencies for geoip db / lookup (#2880) @mmetc
- CI: "make generate" target; use ent 0.12.5 (#2871) @mmetc
- pkg/csconfig: use yaml.v3; deprecate yaml.v2 for new code (#2867) @mmetc
- remove dependencies on enescakir/emoji, gotest.tools (#2837) @mmetc
- re-generate ent code (#2844) @mmetc
- use go 1.21.7 (#2830) @mmetc
- update codeql action to v3 (#2822) @blotus
- CI: workflow improvements (#2792) @mmetc
- disable docker flavor test (#2783) @mmetc
- disable docker flavor test (#2781) @mmetc
Geolite2 notice
This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.
Installation
Take a look at the installation instructions.