From 1459046985908c099bd2b2e279530e8a47bccdf8 Mon Sep 17 00:00:00 2001 From: Prowler Bot Date: Fri, 17 Jul 2026 12:00:58 +0200 Subject: [PATCH] chore(changelog): v5.35.0 (#12038) Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com> --- api/CHANGELOG.md | 14 +++++++++++++ .../attack-paths-scan-reliability.fixed.md | 1 - .../attack-paths-scan-time-limit.fixed.md | 1 - .../jira-site-name-validation.security.md | 1 - .../social-account-linking.security.md | 1 - mcp_server/CHANGELOG.md | 8 ++++++++ .../prowler-tools-namespace.changed.md | 1 - prowler/CHANGELOG.md | 12 +++++++++++ .../jira-tenant-info-request.security.md | 1 - .../sdk-scan-config-exclusions.added.md | 1 - ui/CHANGELOG.md | 20 +++++++++++++++++++ ...ws-org-one-step-stackset-deploy.changed.md | 1 - .../dynamic-provider-alias-delete.changed.md | 1 - .../findings-scan-filter-selection.fixed.md | 1 - .../prowler-tools-namespace.changed.md | 1 - .../s3-integration-bucket-account-id.fixed.md | 1 - ui/changelog.d/sidebar-redesign.changed.md | 1 - .../ui-dependency-vulnerabilities.security.md | 1 - 18 files changed, 54 insertions(+), 14 deletions(-) delete mode 100644 api/changelog.d/attack-paths-scan-reliability.fixed.md delete mode 100644 api/changelog.d/attack-paths-scan-time-limit.fixed.md delete mode 100644 api/changelog.d/jira-site-name-validation.security.md delete mode 100644 api/changelog.d/social-account-linking.security.md delete mode 100644 mcp_server/changelog.d/prowler-tools-namespace.changed.md delete mode 100644 prowler/changelog.d/jira-tenant-info-request.security.md delete mode 100644 prowler/changelog.d/sdk-scan-config-exclusions.added.md delete mode 100644 ui/changelog.d/aws-org-one-step-stackset-deploy.changed.md delete mode 100644 ui/changelog.d/dynamic-provider-alias-delete.changed.md delete mode 100644 ui/changelog.d/findings-scan-filter-selection.fixed.md delete mode 100644 ui/changelog.d/prowler-tools-namespace.changed.md delete mode 100644 ui/changelog.d/s3-integration-bucket-account-id.fixed.md delete mode 100644 ui/changelog.d/sidebar-redesign.changed.md delete mode 100644 ui/changelog.d/ui-dependency-vulnerabilities.security.md diff --git a/api/CHANGELOG.md b/api/CHANGELOG.md index a311614ca9..1b26c2b014 100644 --- a/api/CHANGELOG.md +++ b/api/CHANGELOG.md @@ -4,6 +4,20 @@ All notable changes to the **Prowler API** are documented in this file. +## [1.36.0] (Prowler v5.35.0) + +### 🐞 Fixed + +- `attack-paths-scan-perform` Celery tasks now use the configurable long-task time limits instead of the six-hour defaults [(#12009)](https://github.com/prowler-cloud/prowler/pull/12009) +- Attack Paths scans handle provider deletion races cleanly, detect stale tasks after 16 hours, use backend-specific graph synchronization batches, and report exhausted Neptune write retries with the original database error [(#12019)](https://github.com/prowler-cloud/prowler/pull/12019) + +### 🔐 Security + +- Jira integration credentials only accept bare Atlassian site names containing letters, numbers, and hyphens [(#12012)](https://github.com/prowler-cloud/prowler/pull/12012) +- Social account linking requires a verified matching email from both the identity provider and the existing user account without sending account connection notifications [(#12013)](https://github.com/prowler-cloud/prowler/pull/12013) + +--- + ## [1.35.0] (Prowler v5.34.0) ### 🐞 Fixed diff --git a/api/changelog.d/attack-paths-scan-reliability.fixed.md b/api/changelog.d/attack-paths-scan-reliability.fixed.md deleted file mode 100644 index 1532943dc8..0000000000 --- a/api/changelog.d/attack-paths-scan-reliability.fixed.md +++ /dev/null @@ -1 +0,0 @@ -Attack Paths scans handle provider deletion races cleanly, detect stale tasks after 16 hours, use backend-specific graph synchronization batches, and report exhausted Neptune write retries with the original database error diff --git a/api/changelog.d/attack-paths-scan-time-limit.fixed.md b/api/changelog.d/attack-paths-scan-time-limit.fixed.md deleted file mode 100644 index 3726b52668..0000000000 --- a/api/changelog.d/attack-paths-scan-time-limit.fixed.md +++ /dev/null @@ -1 +0,0 @@ -`attack-paths-scan-perform` Celery tasks now use the configurable long-task time limits instead of the six-hour defaults diff --git a/api/changelog.d/jira-site-name-validation.security.md b/api/changelog.d/jira-site-name-validation.security.md deleted file mode 100644 index d06244297a..0000000000 --- a/api/changelog.d/jira-site-name-validation.security.md +++ /dev/null @@ -1 +0,0 @@ -Jira integration credentials only accept bare Atlassian site names containing letters, numbers, and hyphens diff --git a/api/changelog.d/social-account-linking.security.md b/api/changelog.d/social-account-linking.security.md deleted file mode 100644 index 74e9fd129a..0000000000 --- a/api/changelog.d/social-account-linking.security.md +++ /dev/null @@ -1 +0,0 @@ -Social account linking requires a verified matching email from both the identity provider and the existing user account without sending account connection notifications diff --git a/mcp_server/CHANGELOG.md b/mcp_server/CHANGELOG.md index ec0a2e354f..5898f816c9 100644 --- a/mcp_server/CHANGELOG.md +++ b/mcp_server/CHANGELOG.md @@ -4,6 +4,14 @@ All notable changes to the **Prowler MCP Server** are documented in this file. +## [0.8.0] (Prowler v5.35.0) + +### 🔄 Changed + +- Core Prowler tool namespace from the `prowler_app_*` prefix to `prowler_*` [(#12017)](https://github.com/prowler-cloud/prowler/pull/12017) + +--- + ## [0.7.2] (Prowler v5.28.1) ### 🐞 Fixed diff --git a/mcp_server/changelog.d/prowler-tools-namespace.changed.md b/mcp_server/changelog.d/prowler-tools-namespace.changed.md deleted file mode 100644 index 0ca03d15ca..0000000000 --- a/mcp_server/changelog.d/prowler-tools-namespace.changed.md +++ /dev/null @@ -1 +0,0 @@ -Core Prowler tool namespace from the `prowler_app_*` prefix to `prowler_*` diff --git a/prowler/CHANGELOG.md b/prowler/CHANGELOG.md index e2f20c952f..408c76d3e1 100644 --- a/prowler/CHANGELOG.md +++ b/prowler/CHANGELOG.md @@ -4,6 +4,18 @@ All notable changes to the **Prowler SDK** are documented in this file. +## [5.35.0] (Prowler v5.35.0) + +### 🚀 Added + +- `excluded_checks` and `excluded_services` in scan configurations to narrow the execution scope [(#12028)](https://github.com/prowler-cloud/prowler/pull/12028) + +### 🔐 Security + +- Jira tenant information requests validate site names and do not follow redirects [(#12012)](https://github.com/prowler-cloud/prowler/pull/12012) + +--- + ## [5.34.0] (Prowler v5.34.0) ### 🚀 Added diff --git a/prowler/changelog.d/jira-tenant-info-request.security.md b/prowler/changelog.d/jira-tenant-info-request.security.md deleted file mode 100644 index 270ba01bfc..0000000000 --- a/prowler/changelog.d/jira-tenant-info-request.security.md +++ /dev/null @@ -1 +0,0 @@ -Jira tenant information requests validate site names and do not follow redirects diff --git a/prowler/changelog.d/sdk-scan-config-exclusions.added.md b/prowler/changelog.d/sdk-scan-config-exclusions.added.md deleted file mode 100644 index 6955af0e70..0000000000 --- a/prowler/changelog.d/sdk-scan-config-exclusions.added.md +++ /dev/null @@ -1 +0,0 @@ -`excluded_checks` and `excluded_services` in scan configurations to narrow the execution scope diff --git a/ui/CHANGELOG.md b/ui/CHANGELOG.md index 26385b3adc..40cb61691f 100644 --- a/ui/CHANGELOG.md +++ b/ui/CHANGELOG.md @@ -4,6 +4,26 @@ All notable changes to the **Prowler UI** are documented in this file. +## [1.35.0] (Prowler v5.35.0) + +### 🔄 Changed + +- AWS Organizations onboarding now deploys the management account role and the member-account StackSet from a single CloudFormation stack, replacing the manual StackSet console step [(#11927)](https://github.com/prowler-cloud/prowler/pull/11927) +- Dynamic providers can now be renamed and deleted from the Providers table [(#11957)](https://github.com/prowler-cloud/prowler/pull/11957) +- Sidebar navigation with grouped sections, clearer active states, and a responsive mobile overlay [(#11994)](https://github.com/prowler-cloud/prowler/pull/11994) +- Core Prowler tools in Lighthouse use the `prowler_*` namespace while preserving legacy `prowler_app_*` compatibility [(#12017)](https://github.com/prowler-cloud/prowler/pull/12017) + +### 🐞 Fixed + +- The AWS S3 integration CloudFormation quick-create link now sets the bucket owner account ID, preventing a stack validation error when S3 integration is enabled [(#11927)](https://github.com/prowler-cloud/prowler/pull/11927) +- `Scan ID` filter on the Findings page now shows the active scan when opening findings from a scan's `View Findings` action [(#11997)](https://github.com/prowler-cloud/prowler/pull/11997) + +### 🔐 Security + +- `js-yaml` to 4.3.0, `@sentry/nextjs` to 10.65.0 with `import-in-the-middle` 3.3.1, and transitive `hono`, `dompurify`, `ws`, `vite`, `@babel/core` and `@opentelemetry/core` to patched versions, resolving 13 npm audit advisories (3 high, 9 moderate, 1 low) plus `hono` CVE-2026-59896, published on NVD but not yet in the npm audit feed [(#12029)](https://github.com/prowler-cloud/prowler/pull/12029) + +--- + ## [1.34.0] (Prowler v5.34.0) ### 🚀 Added diff --git a/ui/changelog.d/aws-org-one-step-stackset-deploy.changed.md b/ui/changelog.d/aws-org-one-step-stackset-deploy.changed.md deleted file mode 100644 index caffe6c120..0000000000 --- a/ui/changelog.d/aws-org-one-step-stackset-deploy.changed.md +++ /dev/null @@ -1 +0,0 @@ -AWS Organizations onboarding now deploys the management account role and the member-account StackSet from a single CloudFormation stack, replacing the manual StackSet console step diff --git a/ui/changelog.d/dynamic-provider-alias-delete.changed.md b/ui/changelog.d/dynamic-provider-alias-delete.changed.md deleted file mode 100644 index 75adeeeffb..0000000000 --- a/ui/changelog.d/dynamic-provider-alias-delete.changed.md +++ /dev/null @@ -1 +0,0 @@ -Dynamic providers can now be renamed and deleted from the Providers table diff --git a/ui/changelog.d/findings-scan-filter-selection.fixed.md b/ui/changelog.d/findings-scan-filter-selection.fixed.md deleted file mode 100644 index ff1f70c117..0000000000 --- a/ui/changelog.d/findings-scan-filter-selection.fixed.md +++ /dev/null @@ -1 +0,0 @@ -`Scan ID` filter on the Findings page now shows the active scan when opening findings from a scan's `View Findings` action diff --git a/ui/changelog.d/prowler-tools-namespace.changed.md b/ui/changelog.d/prowler-tools-namespace.changed.md deleted file mode 100644 index f1affd1715..0000000000 --- a/ui/changelog.d/prowler-tools-namespace.changed.md +++ /dev/null @@ -1 +0,0 @@ -Core Prowler tools in Lighthouse use the `prowler_*` namespace while preserving legacy `prowler_app_*` compatibility diff --git a/ui/changelog.d/s3-integration-bucket-account-id.fixed.md b/ui/changelog.d/s3-integration-bucket-account-id.fixed.md deleted file mode 100644 index 5b2d6310be..0000000000 --- a/ui/changelog.d/s3-integration-bucket-account-id.fixed.md +++ /dev/null @@ -1 +0,0 @@ -The AWS S3 integration CloudFormation quick-create link now sets the bucket owner account ID, preventing a stack validation error when S3 integration is enabled diff --git a/ui/changelog.d/sidebar-redesign.changed.md b/ui/changelog.d/sidebar-redesign.changed.md deleted file mode 100644 index 9d45d8ffdf..0000000000 --- a/ui/changelog.d/sidebar-redesign.changed.md +++ /dev/null @@ -1 +0,0 @@ -Sidebar navigation with grouped sections, clearer active states, and a responsive mobile overlay diff --git a/ui/changelog.d/ui-dependency-vulnerabilities.security.md b/ui/changelog.d/ui-dependency-vulnerabilities.security.md deleted file mode 100644 index d68f71e955..0000000000 --- a/ui/changelog.d/ui-dependency-vulnerabilities.security.md +++ /dev/null @@ -1 +0,0 @@ -`js-yaml` to 4.3.0, `@sentry/nextjs` to 10.65.0 with `import-in-the-middle` 3.3.1, and transitive `hono`, `dompurify`, `ws`, `vite`, `@babel/core` and `@opentelemetry/core` to patched versions, resolving 13 npm audit advisories (3 high, 9 moderate, 1 low) plus `hono` CVE-2026-59896, published on NVD but not yet in the npm audit feed