📢 Release Announcements
Note
⚠️ Base Image Upgraded to 26.04
Starting with this release, the Timesketch base Docker image has been upgraded to Ubuntu 26.04. If you are running custom container deployments, please plan your migration accordingly.
Note
🔍 Native Wildcard Field Search & OpenSearch Upgrade
Timesketch now supports mapping text fields as wildcard field types, improving the usage of substring searches on logs.
- Minimum OpenSearch Version: To properly support these new native wildcard field mappings, the minimum compatible OpenSearch version is now 2.19.5.
- For more details on configuring your index mappings, please refer to the Timesketch Index Mappings Guide.
Note
📊 OpenTelemetry Integration
We have introduced initial support for OpenTelemetry! You can now instrument and collect traces from your Timesketch web backend, SQLAlchemy, and OpenSearch interactions, allowing for deeper performance monitoring and health tracking of your Timesketch instances.
- For more details on configuring OpenTelemetry, please refer to the Admin Guide
What's Changed
✨ New Features & Major Enhancements
- Support Ubuntu 26.04 base image & major dependency updates by @jkppr in #3816
- Feature: Native Wildcard Field Search Support in Timesketch by @jkppr in #3825
- Feat: Initial contribution for OpenTelemetry by @jaegeral in #3795
- Feat(otel): Add SQLALchemy basic telemetry by @jaegeral in #3840
- Feat(otel): Add basic OpenSearch Telemetry by @jaegeral in #3839
- Feature: SearchDropdown Improvements by @jkppr in #3827
- Fix: Support ad-hoc analyzer arguments appending analyzer_kwargs by @jkppr in #3802
📈 Improvements & Refinements
- CI: Restrict default GITHUB_TOKEN permissions to read-only across all workflows by @jkppr in #3838
- Robust API client error handling: safely handle None responses and missing attributes by @jkppr in #3790
- Feat(otel): e2e otel tests by @jaegeral in #3826
- Feat(otel): Update docker-compose.yml release by @jaegeral in #3842
- Feat(otel): add status to analyzer otel by @jaegeral in #3806
- Fix(otel): Move otel config and docker config for otel by @jaegeral in #3805
- Fix: Ignore e2e CI workflows for frontend code changes by @jkppr in #3832
- Fix(unittests): events_test.py and sigma_test.py by @jaegeral in #3810
🐞 Bug Fixes
- Fix: Add missing ownership validation on cross-sketch API endpoints by @mohammadmseet-hue in #3777
- Fix:Enforce cross-sketch ownership on analyzer sessions, conclusions, and event relabeling by @adilburaksen in #3822
- Fix: Scope analyzer result and session lookups to the requested sketch by @evilgensec in #3823
- Fix: race condition in
StatusMixin.set_status-> "More than one status available" by @jaegeral in #3804 - Fix upload file permission by @jkppr in #3789
- Fix imported search template visibility by @kiwigitops in #3824
- Fix: Path and Redirect issues in the python API by @jkppr in #3837
- Fix: string vs list to prevent failing requests by @jaegeral in #3796
- Fix(cli-client): output_format usage in cli client by @jaegeral in #3828
⬆️ Dependency Updates
- Add dependency for feature extraction in domain analyzer by @jkppr in #3803
- Update npm dependencies for frontend-v3 by @jkppr in #3835
- Upgrade some frontend-ng dependencies by @jkppr in #3834
- Build(deps): bump the npm_and_yarn group across 1 directory with 11 updates by @dependabot[bot] in #3829
- Build(deps): bump the npm_and_yarn group across 1 directory with 2 updates by @dependabot[bot] in #3791
- Build(deps): bump cryptography from 46.0.6 to 46.0.7 in the pip group across 1 directory by @dependabot[bot] in #3836
- Build(deps): bump cryptography from 46.0.5 to 46.0.6 in the pip group across 1 directory by @dependabot[bot] in #3787
- Build(deps-dev): bump happy-dom from 20.8.3 to 20.8.8 in /timesketch/frontend-ng in the npm_and_yarn group across 1 directory by @dependabot[bot] in #3786
New Contributors
- @kiwigitops made their first contribution in #3824
- @mohammadmseet-hue made their first contribution in #3777
- @adilburaksen made their first contribution in #3822
- @evilgensec made their first contribution in #3823
Full Changelog: 2026032...2026061