What's Changed
Table Changes
- Add secretscan table plugin to osquery table registration. (POC) by @cesarfda in #2543
- [Filewalker] Add filewalk tables by @RebeccaMahany in #2583
- Return a row with last_walk_timestamp 0 when filewalk hasn't run yet by @RebeccaMahany in #2585
- Provide SHA-256 hashed password from secret scan by @a-maas in #2592
- Update macos software auto update settings by @Micah-Kolide in #2593
- Add argon hashes to secret scanning by @directionless in #2594
Features and Improvements
- Make the control http client a FlagsChangeObserver by @RebeccaMahany in #2561
- Handle device server URL updates by @RebeccaMahany in #2562
- Handle region URL updates in response from RequestEnrollment by @RebeccaMahany in #2567
- Secretless enrollment via localserver callback handles regional URL updates by @RebeccaMahany in #2570
- james/store localization data by @James-Pickett in #2558
- [Filewalker] Set up filewalk subsystem, stores, and manager by @RebeccaMahany in #2578
- Generate Spec Files by @directionless in #2575
- [Filewalker] Perform filewalks and store results by @RebeccaMahany in #2579
- [Filewalker] Switch to filepath.WalkDir by @RebeccaMahany in #2586
- Perform filewalk after filewalk config changes by @RebeccaMahany in #2590
Bug Fixes
- If enroll secret path is set but file doesn't exist, fall back to token store by @RebeccaMahany in #2565
- Catch panics in table generate by @directionless in #2564
- fix potential panic from jwt table by @zackattack01 in #2571
- reopen standard leveldbs with default comparer by @zackattack01 in #2596
Observability
- Metrics for dedupe middleware by @cesarfda in #2576
- [Filewalker] Add logging and traces by @RebeccaMahany in #2588
- Remove some trace attributes by @RebeccaMahany in #2589
- Add back munemo and org_id to otel data by @RebeccaMahany in #2595
Build and Package
- Attempt to address intermittent linux build failures by @RebeccaMahany in #2556
- Attempt to address intermittent linux build failures, again by @RebeccaMahany in #2557
Tests, Docs, and Other No-op Changes
- Migrate to mockery v3 by @RebeccaMahany in #2551
- update namespaced queries for wmi tests by @zackattack01 in #2554
- Fixing benchmark issue on windows by @cesarfda in #2563
- Add test for GO-2026-4348 by @RebeccaMahany in #2569
- fix race condition in secretless enrollment test by @zackattack01 in #2572
- Don't run benchmarks on tags by @RebeccaMahany in #2587
Dependency Updates
- Upgrade to go 1.25.7 by @RebeccaMahany in #2574
- Upgrade otel/sdk per GO-2026-4394 by @RebeccaMahany in #2591
General
- Rename Registration to Enrollment by @RebeccaMahany in #2553
- Adds preprod and prod EU hostnames by @RebeccaMahany in #2555
- james/vulns 20260128 by @James-Pickett in #2559
- Deprecate Transport flag by @RebeccaMahany in #2560
- Exclude govulns that only apply to go-tuf/v2 by @RebeccaMahany in #2568
- cleaning up code to be more consistent by @cesarfda in #2566
- Add LocalizationStore everywhere by @RebeccaMahany in #2577
- Rename RegionURLs and RegionInvalid for clarity and futureproofing by @RebeccaMahany in #2582
- Start filling in specs by @directionless in #2580
New Contributors
Full Changelog: v1.30.2...v1.31.6