Changes
- docker: remove CROWDSEC_CONTAINER_ENV (#4085) @mmetc
- refact cscli: define csconfig.Getter once (#4091) @mmetc
- refact load/save apic token: dependencies and sentinel errors (#4081) @mmetc
- pkg/csplugin: use backoff package to retry notifications (#3944) @mmetc
- refact pkg/database batching (#3906) @mmetc
- refact pkg/acquisition: split appsec.go (#4043) @mmetc
- refact pkg/acquisition: journalctl configuration (#4057) @mmetc
- lint revive: lower complexity threshold (#4056) @mmetc
- lint: unused parameters / 2 (#4055) @mmetc
- lint: unused parameters (#4049) @mmetc
- refact pkg/acquisition: split loki.go (#4034) @mmetc
- refact pkg/acquisition: split victorialogs.go (#4037) @mmetc
- refact pkg/acquisition: split wineventlog.go (#4036) @mmetc
- refact pkg/acquisition: split s3.go (#4035) @mmetc
- refact pkg/acquisition: split k8s_audit.go (#4033) @mmetc
- refact pkg/acquisition: split kinesis.go (#4032) @mmetc
- refact pkg/acquisition: split kafka.go (#4031) @mmetc
- refact pkg/acquisition: split cloudwatch.go (#4029) @mmetc
- refact pkg/acquisition: split http.go (#4030) @mmetc
- refactg pkg/acquisition: split file.go (#4038) @mmetc
- refact pkg/acquisition: split syslog.go (#4028) @mmetc
- papi: explicit context (#3973) @mmetc
- pkg/csplugin: remove unused function (#4019) @mmetc
- pkg/types -> new imports pt 4 (#4012) @mmetc
- pkg/types -> new imports pt 3 (#4014) @mmetc
- pkg/types -> new imports pt 2 (#4013) @mmetc
- pkg/types -> new imports pt 1 (#4011) @mmetc
- pkg/types -> pkg/{pipeline,fsutil,enrichment,logging...} (#4006) @mmetc
- CI: enable linter "protogetter" (#3995) @mmetc
- enable linters: unnecessary-format, unused-receiver (#4001) @mmetc
- refact: remove unused struct fields and params / 3; enable linter "unused" (#3334) @mmetc
New Features
Improvements
- pkg/acquisition: update syslog to RestartableStreamer (#4040) @mmetc
- refact logging configuration; add log_media="syslog" (#4045) @mmetc
- cscli hubtest: better report docker/nuclei errors (#4052) @mmetc
- build: check make version before running Makefile (#4054) @mmetc
- pkg/acquisition: refact journalctl datasource and unified retry loop (#4023) @mmetc
- option api.server.disable_usage_metrics_export (#4021) @mmetc
- build: optional pure-go sqlite driver (#3908) @mmetc
Bug Fixes
- docker acquisition: prevent data races (#3956) @mmetc
- Fix avoidable prometheus metrics cardinality (#4080) @g00g1
- loki acquisition: remove forgotten debug print (#4062) @mmetc
- fix 2808: show certificate path in "lapi status" (#4053) @mmetc
- decisionStream: only select required fields from the DB (#4024) @blotus
Documentation
Chore / Deps
- Update go-re2 to 1.10.0 (#4020) @blotus
- waf: remove custom raw body processor and use the upstream one (#4092) @blotus
- build(deps): bump actions/setup-python from 6.0.0 to 6.1.0 (#4089) @dependabot[bot]
- update go-cs-lib (#4084) @mmetc
- update coraza (#4047) @blotus
- build(deps): bump actions/checkout from 5.0.1 to 6.0.0 (#4077) @dependabot[bot]
- build(deps): bump astral-sh/setup-uv from 7.1.3 to 7.1.4 (#4078) @dependabot[bot]
- replace prom2json with native Prometheus parser and context-aware scraping in CLI metrics (#3932) @mmetc
- build(deps): bump actions/setup-go from 6.0.0 to 6.1.0 (#4073) @dependabot[bot]
- build(deps): bump github/codeql-action from 4.31.3 to 4.31.4 (#4069) @dependabot[bot]
- build(deps): bump actions/checkout from 5.0.0 to 5.0.1 (#4064) @dependabot[bot]
- update docker/docker to moby/moby (version docker-v29.0.0) (#4048) @mmetc
- build(deps): bump github/codeql-action from 4.31.0 to 4.31.3 (#4051) @dependabot[bot]
- build(deps): bump astral-sh/setup-uv from 7.1.2 to 7.1.3 (#4042) @dependabot[bot]
- build(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.0.0 (#4041) @dependabot[bot]
- build(deps): bump docker/setup-qemu-action from 3.6.0 to 3.7.0 (#4025) @dependabot[bot]
- CI: update golangci-lint to 2.6.1 (#4026) @mmetc
- waf: extract temp state from AppsecRuntimeConfig (#3952) @blotus
- build(deps): bump astral-sh/setup-uv from 7.1.1 to 7.1.2 (#4009) @dependabot[bot]
- build(deps): bump github/codeql-action from 4.30.9 to 4.31.0 (#4008) @dependabot[bot]
- build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 (#4010) @dependabot[bot]
Geolite2 notice
This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.
Installation
Take a look at the installation instructions.