osquery/osquery 5.19.0

on GitHub

What's Changed

Features

• Add table deb_package_files by @zwass in #8657
• Add system_profiler table for macOS by @zwass in #8645
• Add version collate to os_version table's version column by @Micah-Kolide in #8659
• Add entitlements column to macOS signature table by @zwass in #8666
• Add support for VSCode forks in vscode_extensions by @zwass in #8664

Bugfixes

• Fix NSInvalidArgumentException when querying connected_displays by @Synse in #8628
• Fix inconsistent counter resets due to Config::purge() by @skurpad7 in #8635
• Update linux block_device and disk_encryption source data to simple sysfs implementation by @Micah-Kolide in #8182
• Fix ATC for open Firefox databases by @zwass in #8631

Other

• libs: yara: 4.2.3 -> 4.5.4 by @LeSuisse in #8643
• Upgrading zlib to 1.3.1 by @ksykulev in #8625
• Fix build for XCode SDK 16.4 by @lucasmrod in #8640
• Update build instructions for workaround for XCode SDK > 16.3 by @lucasmrod in #8650
• Add Cursor AI editor configurations by @zwass in #8656
• Further improvement to Cursor rules by @zwass in #8662
• Update Windows build instructions by @zwass in #8661

New Contributors

• @Synse made their first contribution in #8628
• @skurpad7 made their first contribution in #8635

Full Changelog: 5.18.0...5.19.0