What's Changed
General
- Update comment by @directionless in #1650
- Enable secure enclave keys by @James-Pickett in #1651
- Add upgradeable packages and patches tables for Zypper package manager by @Micah-Kolide in #1654
- skip secure enclave signing tests when
SKIP_SECURE_ENCLAVE_TESTS
is set by @zackattack01 in #1656 - Use unique pid file for osquery per launcher run by @RebeccaMahany in #1657
- abstract bbolt from osquery extension code by @zackattack01 in #1652
- add new meddlesome processes to quarantine checkup by @zackattack01 in #1660
- Refactor runAsUser into tablehelper package by @Micah-Kolide in #1653
- Add
kolide_snap_upgradeable
table and newdata_table
exec parser by @Micah-Kolide in #1636 - add menu json checkup to flare and doctor by @James-Pickett in #1661
- add menu update change detection logs by @zackattack01 in #1664
- Ensure desktop runner shuts down within rungroup interrupt timeout, and log shutdown completion by @RebeccaMahany in #1668
- run osq runtime tests on windows by @James-Pickett in #1665
- Don't autoupdate in modern standby by @RebeccaMahany in #1669
- Include stderr in enrollment details failures so we can capture additional information on Windows by @RebeccaMahany in #1671
- set RecoveryActionsOnNonCrashFailures flag in svc_config_windows by @zackattack01 in #1670
- set up windows event logger first in main by @James-Pickett in #1672
- Upgrade golang.org/x/net to address GO-2024-2687 by @RebeccaMahany in #1673
- Small improvements to logging and flares by @directionless in #1667
- Pass system multislogger through to all launcher subcommands by @RebeccaMahany in #1674
Full Changelog: v1.6.2...v1.6.3