Releases: DefectDojo/django-DefectDojo
2.45.1 🌈
Please consult the Upgrade notes in the documentation for specific instructions for this release, and general upgrade instructions. Below is an automatically generated list of all PRs merged since the previous release.
Changes since 2.45.0
- 💄 🪲 Fix Aqua parser severity justification @manuel-sommer (#12192)
- changelog 2.45.0 @paulOsinski (#12213)
- close old findings: don't overwrite mitigated timestamp @valentijnscholten (#12204)
- Linting: Update how-to-write-a-parser.md to not contain Ruff violations @valentijnscholten (#12214)
- h1: vulnerability disclosure parser improvements @valentijnscholten (#12212)
- Updated Documentation on Anchore Enterprise @Sopuru (#12058)
- immuniweb json parser @valentijnscholten (#12179)
- fix(renovate): Add separateMinorPatch @kiblik (#12190)
- wiz scan: handle more fields and unique_id_from_tool @valentijnscholten (#12198)
- 🔨 RustyHog: handle empty reports correctly to fix #10584 @manuel-sommer (#12129)
- README: Point to sample scans for demo @valentijnscholten (#12162)
- Bump Django to 5.1.8 @valentijnscholten (#12191)
🚩 Changes to settings.dist.py
/ local_settings.py
- Implement HCL Commerce KB vulnids @manuel-sommer (#12199)
- 🎉 Add cisco security advisory to vulnid @manuel-sommer (#12180)
🚩 Database migration
🚀 API features and enhancements
🖌 Updates in UI
- 🐛 Fix Django template engagement_pdf_report #12201 @manuel-sommer (#12206)
- fix(notif): Product name not rendered correctly @kiblik (#12203)
🔧 Improved code quality with linters
2.45.0 🌈
Please consult the Upgrade notes in the documentation for specific instructions for this release, and general upgrade instructions. Below is an automatically generated list of all PRs merged since the previous release.
Changes since 2.44.0
- (docs) arm64: add some notes about the experimental new images @valentijnscholten (#12163)
- docs - pro user groups info @paulOsinski (#12127)
- changelog 2.44.4 @paulOsinski (#12150)
- Jira Finding Groups: Confusion on strings vs functions @Maffooch (#12128)
- 💄 beautify multiple file format choices @manuel-sommer (#12117)
- remove exclude_search from Features page @paulOsinski (#12121)
- Import Memory Handling: Do not maintain parsed findings long term @Maffooch (#12106)
- 🐛 fix PTH123 ruff rule for branch dev @manuel-sommer (#12108)
- 🎉 resolve todo in ort parser @manuel-sommer (#12082)
- sso docs: make environment variables vs local_settings more explicit @valentijnscholten (#12061)
- Add CWE to PTART parser @adam-bertrand-bib (#12068)
- 🐛 fix gitlab dast to parse request response pair #12050 @manuel-sommer (#12057)
- Fortify FPR enhancements 2025 @valentijnscholten (#12027)
- 🎉 add references to testssl @manuel-sommer (#12045)
- Changelog 2.44.2 / 2.44.3 @paulOsinski (#12040)
- add resources to wait-for-db @hoferbeck (#12023)
- Generic JSON: Explicitly process tags like other tools @Maffooch (#12056)
- 🎉 fix parser anchore engine to parse new report format #11552 @manuel-sommer (#12020)
- 💄 Remove unused burp parser method @manuel-sommer (#12026)
- add aqua vulnerabilities format @kzzz1 (#12000)
- SLA Calculations 1/2: Add unit tests to capture current behaviour @valentijnscholten (#11923)
- Docs: Pin versions and add GHA for testing build failures @Maffooch (#12038)
- 💄 Remove deprecated Django import and is_safe_url @manuel-sommer (#11991)
- 🐛 fix unittest example in docs @manuel-sommer (#11992)
- dedupe command: fix NoneType on empty set of models @valentijnscholten (#11998)
- fix(helm-metrics): Flag format for promExporter changed @kiblik (#12010)
- DOCKER.md: use docker compose everywhere @valentijnscholten (#12014)
- Docs updates: 2.44.2 @paulOsinski (#11985)
- upgrade notes: correct dedupe command lines @valentijnscholten (#12007)
- Lift the Feature Freeze @Maffooch (#12001)
- (Experimental) arm64: Publish arm64 builds for releases @valentijnscholten (#11965)
- OpenVAS endpoint and severity improvements @valentijnscholten (#11955)
- docker entrypoints: use bash everywhere @valentijnscholten (#11942)
- fix(notif): Add findings_reactivated and findings_untouched again @kiblik (#11963)
- docs: source-code-repositories: clarify default scm type @valentijnscholten (#11968)
- Pro Release notes : 2.44.1 @paulOsinski (#11983)
- 🐛 fix benchmark internal server error @manuel-sommer (#11974)
- Release notes: 2.44 @paulOsinski (#11943)
- Docs: add supported report types index / maintenance @paulOsinski (#11921)
- Notes history/edit/delete bugfix @dogboat (#11949)
- Update parser documentation template to include additional detail. @skywalke34 (#11916)
🚩 Changes to settings.dist.py
/ local_settings.py
- Revert "Session timeout notification" @Maffooch (#12186)
- Session timeout notification @kevin-vuong99 (#12093)
- Ruff: Add and fix N999 @kiblik (#11647)
- 🎉 Add slackware security advisory to vulnid @manuel-sommer (#12113)
- Add archlinux security advisory to vulnid @manuel-sommer (#12078)
- Add openSUSE vulnerabilities to vulnid @manuel-sommer (#12041)
- Jira Webhook: Prevent finding group findings from being reopened @Maffooch (#12048)
- 🎉 add proofpoint vulnid @manuel-sommer (#12004)
- 🎉 add fortiguard vulnid @manuel-sommer (#11926)
- Async Finding Import: Mark the feature as deprecated @Jino-T (#11915)
- Add generic OIDC login option @dandersonsw (#10614)
- 🎉 Splunk vulnIDs @manuel-sommer (#11908)
🚩 Database migration
- Product Revenue: Do no allow negative revenue @Maffooch (#12160)
- Adding new regulations @Maffooch (#12122)
- 🐛 fix broken AWS Endpoints @quirinziessler (#11902)
🚀 API features and enhancements
- Ruff: Add PTH123, merge PTH, fix in
/dojo
@kiblik (#12025) - Ruff: Add and fix B007, merge B00 @kiblik (#12028)
🖌 Updates in UI
- Revert "Session timeout notification" @Maffooch (#12186)
- Ruff: Add B018 rule @manuel-sommer (#12110)
- Session timeout notification @kevin-vuong99 (#12093)
- 🎉 Add slackware security advisory to vulnid @manuel-sommer (#12113)
- Ruff: Add and fix B007, merge B00 @kiblik (#12028)
- update permissions documentation links to reflect correct paths @blakeaowens (#11986)
- Ruff: Add and fix B905 @kiblik (#11952)
- Add generic OIDC login option @dandersonsw (#10614)
🔧 Improved code quality with linters
- Ruff: Add B018 rule @manuel-sommer (#12110)
- Ruff: Add B017 rule @manuel-sommer (#12109)
- Ruff: Add and fix N999 @kiblik (#11647)
- Ruff: add multiple PYI rules @manuel-sommer (#12099)
- Ruff: add multiple PT rules @manuel-sommer (#12100)
- Ruff: Add multiple PERF rules @manuel-sommer (#12136)
- Ruff: Fix PTH123 in
unittests
(excludeunittests/tools
) @kiblik (#12112) - Ruff: Add and autofix B028 @kiblik (#12024)
- Ruff: Add a lot of Bugbear rules @manuel-sommer (#12077)
- Ruff: Add and autofix PLR173 rules @manuel-sommer (#11988)
- Ruff: Add a couple of DTZ rules @manuel-sommer (#12081)
- Ruff: Add S321 and S611 @manuel-sommer (#12076)
- Ruff: Add PLW0602 @manuel-sommer (#12075)
- Ruff: Add PTH123, merge PTH, fix in
/dojo
@kiblik (#12025) - Ruff: Add N813 @manuel-sommer (#12073)
- Ruff: Add N812 @manuel-sommer (#12074)
- Ruff: Add N817 @manuel-sommer (#12072)
- Ruff: Add and fix B031, merge B03 @kiblik (#12029)
- Ruff: Add and fix B007, merge B00 @kiblik (#12028)
- Ruff: Add and autofix PLR2044 @manuel-sommer (#11989)
- Ruff: Add TD007 and N803 @manuel-sommer (#12002)
- Ruff: Add and autofix B006 @kiblik (#11951)
- Ruff: Add and fix B903 @kiblik (#11956)
- Ruff: Add and autofix B009 @kiblik (#11950)
- Ruff: Add and autofix B010 @kiblik (#11953)
- Ruff: Add and autofix B033 @kiblik (#11954)
- Ruff: Add and fix B905 @kiblik (#11952)
🧰 Maintenance
- Bump ruff from 0.11.2 to 0.11.3 @dependabot (#12170)
- Bump boto3 from 1.37.26 to 1.37.27 @dependabot (#12171)
- Update mccutchen/go-httpbin Docker tag from 2.18.0 to v2.18.1 (docker-compose.override.unit_tests_cicd.yml) @renovate (#12172)
- Update dependency vite from 6.2.4 to v6.2.5 (docs/package.json) @renovate (#12164)
- Bump boto3 from 1.37.25 to 1.37.26 @dependabot (#12165)
- Bump boto3 from 1.37.24 to 1.37.25 @dependabot (#12159)
- Update dependency prettier from 3.5.2 to v3.5.3 (docs/package.json) @renovate (#12154)
- Bump drf-spectacular-sidecar from 2025.3.1 to 2025.4.1 @dependabot (#12156)
- Bump boto3 from 1.37.23 to 1.37.24 @dependabot (#12157)
- Update dependency python from 3.12.9 to 3.13 (.github/workflows/slack-pr-reminder.yml) @renovate (#12145)
- Update actions/checkout action from v2 to v4 (.github/workflows/slack-pr-reminder.yml) @renovate (#12146)
- Update dependency vite from 6.2.3 to v6.2.4 [SECURITY] @renovate (#12148)
- Update actions/setup-python action from v2 to v5 (.github/workflows/slack-pr-reminder.yml) @renovate (#12149)
- Bump djangorestframework from 3.15.2 to 3.16.0 @dependabot (#12140)
- Bump boto3 from 1.37.22 to 1.37.23 @dependabot (#12141)
- Bump boto3 from 1.37.21 to 1.37.22 @dependabot (#12125)
- Bump sqlalchemy from 2.0.39 to 2.0.40 @dependabot (#12126)
- Update Helm release postgresql from 16.5.6 to ~16.6.0 (helm/defectdojo/Chart.yaml) @renovate (#12124)
- Bump boto3 from 1.37.20 to 1.37.21 @dependabot (#12115)
- Bump boto3 from 1.37.19 to 1.37.20 @dependabot (#12111)
- Bump humanize from 4.12.1 to 4.12.2 @dependabot (#12102)
- Update dependency @tabler/icons from 3.30.0 to v3.31.0 (docs/package.json) @renovate (#12097)
- Update actions/setup-python action from v5.4.0 to v5.5.0 (.github/workflows/test-helm-chart.yml) @renovate (#12098)
- Bump boto3 from 1.37.18 to 1.37.19 @dependabot (#12103)
- Bump vite from 6.2.0 to 6.2.3 in /docs @dependabot (#12104)
- Update dependency prettier from 3.5.2 to v3.5.3 (docs/package.json) @renovate (#12095)
- Update actions/setup-node action from v4.2.0 to v4.3.0 (.github/workflows/validate_docs_build.yml) @renovate (#12096)
- Update dependency vite from 6.2.2 to v6.2.3 (docs/package.json) @renovate (#12092)
- Update actions/cache action from v4.2.2 to v4.2.3 (.github/workflows/validate_docs_build.yml) @renovate (#12089)
- Bump ruff from 0.11.1 to 0.11.2 @dependabot (#12084)
- Bump boto3 from 1.37.17 to 1.37.18 @dependabot (#12085)
- Update gcr.io/cloudsql-docker/gce-proxy Docker tag from 1.37.5 to v1.37.6 (helm/defectdojo/values.yaml) @renovate (#12063)
- Update mccutchen/go-httpbin Docker tag from 2.17.1 to v2.18.0 (docker-compose.override.unit_tests_cicd.yml) @renovate (#12064)
- Bump boto3 from 1.37.16 to 1.37.17 @dependabot (#12069)
- Bump django-debug-toolbar from 5.0.1 to 5.1.0 @dependabot (#12070)
- Bump ruff from 0.11.0 to 0.11.1 @dependabot (#12071)
- Update actions/cache action from v4.2.2 to v4.2.3 (.github/workflows/gh-pages.yml) @renovate (#12052)
- Bump boto3 from 1.37.15 to 1.37.16 @dependabot (#12059)
- Update actions/upload-artifact action from v4.6.1 to v4.6.2 (.github/workflows/fetch-oas.yml) @renovate (#12055)
- Update actions/download-artifact action from v4.2.0 to v4.2.1 (.github/workflows/rest-framework-tests.yml) @renovate (#12053)
- Bump djangosaml2 from 1.9.4 to 1.10.1 @dependabot (#12060)
- Bump boto3 from 1.37.14 to 1.37.15 @dependabot (#12049)
- Bump djangosaml2 from 1.9.3 to 1.9.4 @dependabot (#12043)
- Update actions/download-artifact action from v4.1.9 to v4.2.0 (.github/workflows/rest-framework-tests.yml) @renovate (#120...
2.44.4 🌈
Please consult the Upgrade notes in the documentation for specific instructions for this release, and general upgrade instructions. Below is an automatically generated list of all PRs merged since the previous release.
Changes since 2.44.3
- Jira Finding Groups: Confusion on strings vs functions @Maffooch (#12128)
- 💄 beautify multiple file format choices @manuel-sommer (#12117)
- remove exclude_search from Features page @paulOsinski (#12121)
- Import Memory Handling: Do not maintain parsed findings long term @Maffooch (#12106)
- 🎉 resolve todo in ort parser @manuel-sommer (#12082)
- sso docs: make environment variables vs local_settings more explicit @valentijnscholten (#12061)
- 🐛 fix gitlab dast to parse request response pair #12050 @manuel-sommer (#12057)
- 🎉 add references to testssl @manuel-sommer (#12045)
- Changelog 2.44.2 / 2.44.3 @paulOsinski (#12040)
- add resources to wait-for-db @hoferbeck (#12023)
🚩 Changes to settings.dist.py
/ local_settings.py
- 🎉 Add slackware security advisory to vulnid @manuel-sommer (#12113)
- Add archlinux security advisory to vulnid @manuel-sommer (#12078)
- Add openSUSE vulnerabilities to vulnid @manuel-sommer (#12041)
🚩 Database migration
🖌 Updates in UI
- 🎉 Add slackware security advisory to vulnid @manuel-sommer (#12113)
🔧 Improved code quality with linters
- Ruff: Add PLW0602 @manuel-sommer (#12075)
🧰 Maintenance
- Bump vite from 6.2.0 to 6.2.3 in /docs @dependabot[bot] (#12104)
2.44.3 🌈
Please consult the Upgrade notes in the documentation for specific instructions for this release, and general upgrade instructions. Below is an automatically generated list of all PRs merged since the previous release.
Changes since 2.44.2
- Generic JSON: Explicitly process tags like other tools @Maffooch (#12056)
- 🎉 fix parser anchore engine to parse new report format #11552 @manuel-sommer (#12020)
- 💄 Remove unused burp parser method @manuel-sommer (#12026)
- add aqua vulnerabilities format @kzzz1 (#12000)
- SLA Calculations 1/2: Add unit tests to capture current behaviour @valentijnscholten (#11923)
- Docs: Pin versions and add GHA for testing build failures @Maffooch (#12038)
- 💄 Remove deprecated Django import and is_safe_url @manuel-sommer (#11991)
- 🐛 fix unittest example in docs @manuel-sommer (#11992)
- dedupe command: fix NoneType on empty set of models @valentijnscholten (#11998)
- fix(helm-metrics): Flag format for promExporter changed @kiblik (#12010)
- DOCKER.md: use docker compose everywhere @valentijnscholten (#12014)
- Docs updates: 2.44.2 @paulOsinski (#11985)
🚩 Changes to settings.dist.py
/ local_settings.py
- Jira Webhook: Prevent finding group findings from being reopened @Maffooch (#12048)
- 🎉 add proofpoint vulnid @manuel-sommer (#12004)
🧰 Maintenance
- Bump @babel/helpers from 7.26.0 to 7.26.10 in /docs @dependabot[bot] (#12034)
- Bump @babel/runtime from 7.26.0 to 7.26.10 in /docs @dependabot[bot] (#12037)
2.44.2 🌈
Please consult the Upgrade notes in the documentation for specific instructions for this release, and general upgrade instructions. Below is an automatically generated list of all PRs merged since the previous release.
Changes since 2.44.1
- upgrade notes: correct dedupe command lines @valentijnscholten (#12007)
- Lift the Feature Freeze @Maffooch (#12001)
- OpenVAS endpoint and severity improvements @valentijnscholten (#11955)
- docker entrypoints: use bash everywhere @valentijnscholten (#11942)
- fix(notif): Add findings_reactivated and findings_untouched again @kiblik (#11963)
- docs: source-code-repositories: clarify default scm type @valentijnscholten (#11968)
- Pro Release notes : 2.44.1 @paulOsinski (#11983)
🚩 Changes to settings.dist.py
/ local_settings.py
- 🎉 add fortiguard vulnid @manuel-sommer (#11926)
🖌 Updates in UI
- update permissions documentation links to reflect correct paths @blakeaowens (#11986)
2.44.1 🌈
Please consult the Upgrade notes in the documentation for specific instructions for this release, and general upgrade instructions. Below is an automatically generated list of all PRs merged since the previous release.
Changes since 2.44.0
- 🐛 fix benchmark internal server error @manuel-sommer (#11974)
- Release notes: 2.44 @paulOsinski (#11943)
- Docs: add supported report types index / maintenance @paulOsinski (#11921)
- Notes history/edit/delete bugfix @dogboat (#11949)
🚩 Changes to settings.dist.py
/ local_settings.py
- Add generic OIDC login option @dandersonsw (#10614)
- 🎉 Splunk vulnIDs @manuel-sommer (#11908)
🚩 Database migration
- 🐛 fix broken AWS Endpoints @quirinziessler (#11902)
🚀 API features and enhancements
🖌 Updates in UI
- Add generic OIDC login option @dandersonsw (#10614)
🗣 Updates in localization
🧰 Maintenance
- Bump django from 5.1.6 to 5.1.7 @dependabot[bot] (#11966)
2.44.0 🌈
Please consult the Upgrade notes in the documentation for specific instructions for this release, and general upgrade instructions. Below is an automatically generated list of all PRs merged since the previous release.
Changes since 2.43.0
- Update 12 parsers to have better metadata @Jino-T (#11900)
- fix(helm): add spec.strategy in deployment django @Mistikan (#11859)
- feat(helm): Add secret annotations @al-cheb (#11860)
- ms_defender: Improve reliability and error handling @valentijnscholten (#11898)
- markdown docs: fix dead links @valentijnscholten (#11878)
- docs: Updating Trustwave parser documentation with detailed field mappings @skywalke34 (#11880)
- arm64 builds: unit tests @valentijnscholten (#11830)
- fix / cleanup paths in integration tests @valentijnscholten (#11809)
- 🪲 Parse empty machines in Defender @manuel-sommer (#11844)
- Async Deprecation Notice + additional docs changes @paulOsinski (#11874)
- github templates: ask for docker compose and helm version @valentijnscholten (#11841)
- fix(docker): Some versions stayed behind @kiblik (#11785)
- ⬆️ Bump urllib3 to 1.26.20 @manuel-sommer (#11891)
- Feb docs hotfix @paulOsinski (#11870)
- Release Notes: 2.43.3 @paulOsinski (#11857)
- API Tags: Add filter for
AND
expressions @Maffooch (#11743) - Surveys: Correct Question 404 @Maffooch (#11862)
- Return Feedback about wrong File Format in ZAP @manuel-sommer (#11772)
- Importer Close Old Findings: Accommodate different dedupe algorithms @Maffooch (#11729)
- Pin pyopenssl to something recent @valentijnscholten (#11800)
- fix: media-pvc template extraLabels @runderwoodcr14 (#11711)
- DOCKER.md: remove leftover
dc-
references @valentijnscholten (#11760) - 🐛 fix Noseyparker description @manuel-sommer (#11726)
- feat(release): Label and group linters @kiblik (#11718)
- Ruff: Add PLR04 and fix PLR0402 @kiblik (#11713)
- Ruff: Add and fix ISC003 + merge ISC @kiblik (#11706)
- corrected link for parser guide @pUrGe12 (#11761)
- Fixing call to date_parser in AWS Inspector2 parser @cneill (#11767)
- Sample Data: Remove audit logs entries @Maffooch (#11752)
- Docs: fix broken links @valentijnscholten (#11762)
- Ruff: Add and fix PLW0108 @kiblik (#11641)
- Support builds for different architectures including arm64 @valentijnscholten (#11673)
- Ruff: Add PLC18 and fix PLC1802 @kiblik (#11707)
- NodeJS: Correct Debian bullseye reference @valentijnscholten (#11670)
- Ruff: Add and fix D414 @kiblik (#11655)
- Ruff: Add and fix SIM113 @kiblik (#11652)
- Ruff: Add and fix SIM117 @kiblik (#11653)
- Ruff: Add and fix PLW0127 @kiblik (#11642)
- dashboard: last 7 days should be 7 days @valentijnscholten (#11702)
- feat(db-migration-checker): Add successful message @kiblik (#11685)
- feat(gha): Pin and update actions/checkout @kiblik (#11675)
- feat(gha): Update and pin "peter-evans/create-pull-request" @kiblik (#11674)
- make alpine builds work with docker compose @valentijnscholten (#11669)
- feat(k8s-test): Try login and obtain API token @kiblik (#11656)
- fix(dockerfile): rename django stage in alpine @kiblik (#11654)
- feat(db-checker): Extension of "db reachable" @kiblik (#11651)
- Ruff: Add and fix TRY401 @kiblik (#11644)
🚩 Changes to settings.dist.py
/ local_settings.py
- 🎉 implement vulnid logic for suse @manuel-sommer (#11890)
- 🎉 add atlassian vulnids @manuel-sommer (#11882)
- Add Palo Alto Networks Security Advisories to vulnid @manuel-sommer (#11832)
- Add MGAA advisories to vulnid @manuel-sommer (#11858)
- fix(sessions): Clean old expired sessions @kiblik (#11770)
- Ruff: Add and fix PLR6104 @kiblik (#11716)
- add PMASA (php my admin security advisory) to vulnid @manuel-sommer (#11753)
- add Typo3 vulnids @manuel-sommer (#11744)
- Render SAML attributes_map_dir config value to string instead of an object @catshapednoodles (#11764)
- Ruff: Add and fix A002 @kiblik (#11646)
- Update Burp Scan to use Hashcode Dedupe @hblankenship (#11419)
- 🎉 add MGASA vulnid @manuel-sommer (#11668)
🚩 Database migration
- jira issue type migration quickfix @valentijnscholten (#11831)
- fix(sessions): Clean old expired sessions @kiblik (#11770)
🚀 API features and enhancements
- Ruff: Fix for Bump ruff to 0.9.7 @manuel-sommer (#11865)
- Ruff: Fix for bump to 0.9.6 #11759 @manuel-sommer (#11768)
- Hash Codes: Ensure Vulnerability IDs are used in calculations when added outside of import @Maffooch (#11732)
- Duplicate Delete errors: catch IntegrityErrors (A) @valentijnscholten (#11739)
- Ruff: Add PLR5 and fix PLR5501 @kiblik (#11714)
- Ruff: Add and fix PLR6201 @kiblik (#11717)
- Ruff: Add and fix A002 @kiblik (#11646)
- Ruff: Add and fix TRY300 @kiblik (#11643)
- Ruff: Add and fix A001 @kiblik (#11645)
- api spec: SLA days remaining can be null @valentijnscholten (#11701)
- Ruff: Add and fix FBT002 (+ merge all FBT rules) @kiblik (#11261)
🖌 Updates in UI
- Added accessibility for charts @littlesvensson (#11801)
- 🎉 implement vulnid logic for suse @manuel-sommer (#11890)
- fix(ui): Increase readability in "Members" list @kiblik (#11840)
- Docs Updates: Feb @paulOsinski (#11791)
- Allow tab to "Show Password" within Login Page @kevin-vuong99 (#11812)
- Added labels for checkbox column headers @littlesvensson (#11819)
- Fix aria-label in search box @kevin-vuong99 (#11769)
- Ruff: Add and fix PLR6104 @kiblik (#11716)
- Ruff: Add and fix PLR6201 @kiblik (#11717)
- jira push error reasons should not be propagated to all channels @valentijnscholten (#11738)
- Ruff: Add and fix A002 @kiblik (#11646)
- Ruff: Add and fix TRY300 @kiblik (#11643)
- Ruff: Add and fix ISC002 @kiblik (#11705)
- Adjusted number fields in tables @littlesvensson (#11677)
- Accessibility calendar switch buttons @littlesvensson (#11661)
- Ruff: Add and fix FBT002 (+ merge all FBT rules) @kiblik (#11261)
🗣 Updates in localization
- Accessibility calendar switch buttons @littlesvensson (#11661)
🔧 Improved code quality with linters
- Ruff: Add and fix PLW0604 @kiblik (#11773)
- Ruff: Add PLC28 and "fix" PLC28 @kiblik (#11774)
- Ruff: Add PLR02 and fix PLR0202 @kiblik (#11712)
- Ruff: Add PLR5 and fix PLR5501 @kiblik (#11714)
- Ruff: Add and fix PLR6104 @kiblik (#11716)
- Ruff: Merge safe rules (A, FIX, PLW01) @kiblik (#11750)
- Ruff: Add and fix PLR6201 @kiblik (#11717)
🧰 Maintenance
- Bump ruff from 0.9.7 to 0.9.9 @dependabot (#11918)
- Bump json-log-formatter from 1.1 to 1.1.1 @dependabot (#11919)
- Bump boto3 from 1.37.2 to 1.37.3 @dependabot (#11917)
- Bump boto3 from 1.37.1 to 1.37.2 @dependabot (#11910)
- chore(deps): update actions/cache action from v4.2.1 to v4.2.2 (.github/workflows/gh-pages.yml) @renovate (#11914)
- Bump boto3 from 1.37.0 to 1.37.1 @dependabot (#11905)
- chore(deps): update docker/setup-buildx-action action from v3.9.0 to v3.10.0 (.github/workflows/release-x-manual-docker-containers.yml) @renovate (#11907)
- chore(deps): update docker/build-push-action action from v6.14.0 to v6.15.0 (.github/workflows/release-x-manual-docker-containers.yml) @renovate (#11906)
- chore(deps): update actions/download-artifact action from v4.1.8 to v4.1.9 (.github/workflows/rest-framework-tests.yml) @renovate (#11899)
- chore(deps): update dependency vite from 6.1.1 to v6.2.0 (docs/package.json) @renovate (#11895)
- Bump boto3 from 1.36.26 to 1.37.0 @dependabot (#11897)
- Bump boto3 from 1.36.25 to 1.36.26 @dependabot (#11883)
- chore(deps): update actions/upload-artifact action from v4.6.0 to v4.6.1 (.github/workflows/fetch-oas.yml) @renovate (#11871)
- chore(deps): update postgres docker tag from 17.3 to v17.4 (docker-compose.yml) @renovate (#11876)
- chore(deps): update dependency prettier from 3.5.1 to v3.5.2 (docs/package.json) @renovate (#11877)
- chore(deps): update peter-evans/create-pull-request action from v7.0.6 to v7.0.7 (.github/workflows/update-sample-data.yml) @renovate (#11881)
- Bump psycopg[c] from 3.2.4 to 3.2.5 @dependabot (#11884)
- Bump vulners from 2.3.4 to 2.3.6 @dependabot (#11885)
- fix(deps): update dependency @thulite/images from 3.3.0 to v3.3.1 (docs/package.json) @renovate (#11863)
- chore(deps): update gcr.io/cloudsql-docker/gce-proxy docker tag from 1.37.4 to v1.37.5 (helm/defectdojo/values.yaml) @renovate (#11866)
- Bump boto3 from 1.36.24 to 1.36.25 @dependabot (#11868)
- Bump boto3 from 1.36.23 to 1.36.24 @dependabot (#11861)
- chore(deps): update docker/build-push-action action from v6.13.0 to v6.14.0 (.github/workflows/release-x-manual-docker-containers.yml) @renovate (#11855)
- Bump boto3 from 1.36.22 to 1.36.23 @dependabot (#11854)
- Bump humanize from 4.12.0 to 4.12.1 @dependabot (#11853)
- Bump social-auth-core from 4.5.4 to 4.5.6 @dependabot (#11825)
- chore(deps): update dependency vite from 6.1.0 to v6.1.1 (docs/package.json) @renovate (#11852)
- chore(deps): update actions/cache action from v4.2.0 to v4.2.1 (.github/workflows/gh-pages.yml) @renovate (#11851)
- Bump social-auth-app-django from 5.4.2 to 5.4.3 @dependabot (#11822)
- Bump easymde from 2.18.0 to 2.19.0 in /components @dependabot (#11847)
- Update azure/setup-helm action from v4.2.0 to v4.3.0 (.github/workflows/test-helm-chart.yml) @renovate (#11846)
- Bump boto3 from 1.36.20 to 1.36.22 @dependabot (#11845)
- Bump node from 23.7.0-alpine3.20 to 23.8.0-alpine3.20 @dependabot (#11839)
- Bump nginx from
b471bb6
to4ff102c
@dependabot (#11838) - Bump humanize from 4.11.0 to 4.12.0 @dependabot (#11837)
- Bump django-filter from 24.3 to 25.1 @dependabot (#11835)
- Update postgres:17.3-alpine Docker digest from 17.3 to 17.3-alpine (docker-compose.yml) @renovate (#11827)
- Bump boto3 from 1.36.19 to 1.36.20 @dependabot (#11824)
- Bump vulners from 2.3.3 to 2.3.4 @dependabot (#11823)
- chore(deps): update postgres docker tag from 17.2 to v17.3 (...
2.43.4 🌈
Please consult the Upgrade notes in the documentation for specific instructions for this release, and general upgrade instructions. Below is an automatically generated list of all PRs merged since the previous release.
Changes since 2.43.3
- Feb docs hotfix @paulOsinski (#11870)
- Release Notes: 2.43.3 @paulOsinski (#11857)
- API Tags: Add filter for
AND
expressions @Maffooch (#11743) - Surveys: Correct Question 404 @Maffooch (#11862)
- Return Feedback about wrong File Format in ZAP @manuel-sommer (#11772)
🖌 Updates in UI
- Docs Updates: Feb @paulOsinski (#11791)
2.43.3 🌈
Please consult the Upgrade notes in the documentation for specific instructions for this release, and general upgrade instructions. Below is an automatically generated list of all PRs merged since the previous release.
Changes since 2.43.2
🚀 API features and enhancements
- Hash Codes: Ensure Vulnerability IDs are used in calculations when added outside of import @Maffooch (#11732)
- Duplicate Delete errors: catch IntegrityErrors (A) @valentijnscholten (#11739)
🖌 Updates in UI
- Fix aria-label in search box @kevin-vuong99 (#11769)
🧰 Maintenance
- Bump cryptography from 44.0.0 to 44.0.1 @dependabot[bot] (#11795)
2.43.2 🌈
Please consult the Upgrade notes in the documentation for specific instructions for this release, and general upgrade instructions. Below is an automatically generated list of all PRs merged since the previous release.
Changes since 2.43.1
- Pin pyopenssl to something recent @valentijnscholten (#11800)
- fix: media-pvc template extraLabels @runderwoodcr14 (#11711)
- DOCKER.md: remove leftover
dc-
references @valentijnscholten (#11760) - 🐛 fix Noseyparker description @manuel-sommer (#11726)
- corrected link for parser guide @pUrGe12 (#11761)
🚩 Changes to settings.dist.py
/ local_settings.py
- add PMASA (php my admin security advisory) to vulnid @manuel-sommer (#11753)
- add Typo3 vulnids @manuel-sommer (#11744)
🖌 Updates in UI
- jira push error reasons should not be propagated to all channels @valentijnscholten (#11738)