diff --git a/api/CHANGELOG.md b/api/CHANGELOG.md index 5c917d3198..ff78a2d8e4 100644 --- a/api/CHANGELOG.md +++ b/api/CHANGELOG.md @@ -4,6 +4,21 @@ All notable changes to the **Prowler API** are documented in this file. + +## [1.34.1] (Prowler v5.33.1) + +### 🐞 Fixed + +- Session tokens are rejected after account password updates [(#11914)](https://github.com/prowler-cloud/prowler/pull/11914) +- Jira dispatch task results now surface user-facing Jira failure messages [(#11925)](https://github.com/prowler-cloud/prowler/pull/11925) +- AWS Attack Paths privilege escalation queries no longer fail on Neo4j with `Aggregation column contains implicit grouping expressions` [(#11939)](https://github.com/prowler-cloud/prowler/pull/11939) + +### 🔐 Security + +- OpenAI-compatible Lighthouse provider base URLs are restricted before connection checks [(#11940)](https://github.com/prowler-cloud/prowler/pull/11940) +- `LIGHTHOUSE_AI_OPENAI_COMPATIBLE_ALLOWED_HOSTS` environment variable to allow internal hosts as OpenAI-compatible Lighthouse AI base URLs [(#11942)](https://github.com/prowler-cloud/prowler/pull/11942) + +--- ## [1.34.0] (Prowler v5.33.0) ### 🚀 Added diff --git a/api/changelog.d/aws-attack-paths-neo4j-aggregation.fixed.md b/api/changelog.d/aws-attack-paths-neo4j-aggregation.fixed.md deleted file mode 100644 index 17d53096da..0000000000 --- a/api/changelog.d/aws-attack-paths-neo4j-aggregation.fixed.md +++ /dev/null @@ -1 +0,0 @@ -AWS Attack Paths privilege escalation queries no longer fail on Neo4j with `Aggregation column contains implicit grouping expressions` diff --git a/api/changelog.d/jira-dispatch-errors.fixed.md b/api/changelog.d/jira-dispatch-errors.fixed.md deleted file mode 100644 index 8aa080e8e9..0000000000 --- a/api/changelog.d/jira-dispatch-errors.fixed.md +++ /dev/null @@ -1 +0,0 @@ -Jira dispatch task results now surface user-facing Jira failure messages diff --git a/api/changelog.d/lighthouse-openai-compatible-allowed-hosts.security.md b/api/changelog.d/lighthouse-openai-compatible-allowed-hosts.security.md deleted file mode 100644 index a015cd090b..0000000000 --- a/api/changelog.d/lighthouse-openai-compatible-allowed-hosts.security.md +++ /dev/null @@ -1 +0,0 @@ -`LIGHTHOUSE_AI_OPENAI_COMPATIBLE_ALLOWED_HOSTS` environment variable to allow internal hosts as OpenAI-compatible Lighthouse AI base URLs diff --git a/api/changelog.d/lighthouse-provider-base-url.security.md b/api/changelog.d/lighthouse-provider-base-url.security.md deleted file mode 100644 index 6e70e9fbdd..0000000000 --- a/api/changelog.d/lighthouse-provider-base-url.security.md +++ /dev/null @@ -1 +0,0 @@ -OpenAI-compatible Lighthouse provider base URLs are restricted before connection checks diff --git a/api/changelog.d/password-token-refresh.fixed.md b/api/changelog.d/password-token-refresh.fixed.md deleted file mode 100644 index 87101d2d52..0000000000 --- a/api/changelog.d/password-token-refresh.fixed.md +++ /dev/null @@ -1 +0,0 @@ -Session tokens are rejected after account password updates diff --git a/prowler/CHANGELOG.md b/prowler/CHANGELOG.md index 7a98933c5f..15b0142163 100644 --- a/prowler/CHANGELOG.md +++ b/prowler/CHANGELOG.md @@ -4,6 +4,19 @@ All notable changes to the **Prowler SDK** are documented in this file. + +## [5.33.1] (Prowler v5.33.1) + +### 🐞 Fixed + +- ECS task definition resource limits now select the latest task definitions by registration date instead of relying on ARN ordering [(#11891)](https://github.com/prowler-cloud/prowler/pull/11891) +- `dlm_ebs_snapshot_lifecycle_policy_exists` no longer initializes the full EC2 inventory just to detect EBS snapshots, avoiding slow scans when checking DLM lifecycle policies [(#11900)](https://github.com/prowler-cloud/prowler/pull/11900) +- `dms_instance_no_public_access` no longer initializes the full EC2 service when there are no DMS replication instances [(#11902)](https://github.com/prowler-cloud/prowler/pull/11902) +- `organizations_scp_check_deny_regions` no longer reports false `FAIL` for AWS Organizations that restrict regions with Allow-based SCPs; the Allow path now checks the statement `Effect` instead of an always-false comparison that made it unreachable [(#11915)](https://github.com/prowler-cloud/prowler/pull/11915) +- Jira issue creation failures now preserve safe structured response details from Jira [(#11925)](https://github.com/prowler-cloud/prowler/pull/11925) +- Azure Function App optional permission failures now log as warnings, and Function App environment variable fields use the correct spelling internally [(#11926)](https://github.com/prowler-cloud/prowler/pull/11926) + +--- ## [5.33.0] (Prowler v5.33.0) ### 🐞 Fixed diff --git a/prowler/changelog.d/azure-function-app-permission-warnings.fixed.md b/prowler/changelog.d/azure-function-app-permission-warnings.fixed.md deleted file mode 100644 index f455f1ee19..0000000000 --- a/prowler/changelog.d/azure-function-app-permission-warnings.fixed.md +++ /dev/null @@ -1 +0,0 @@ -Azure Function App optional permission failures now log as warnings, and Function App environment variable fields use the correct spelling internally diff --git a/prowler/changelog.d/dlm-ebs-snapshot-lifecycle-policy.fixed.md b/prowler/changelog.d/dlm-ebs-snapshot-lifecycle-policy.fixed.md deleted file mode 100644 index 2a07052351..0000000000 --- a/prowler/changelog.d/dlm-ebs-snapshot-lifecycle-policy.fixed.md +++ /dev/null @@ -1 +0,0 @@ -`dlm_ebs_snapshot_lifecycle_policy_exists` no longer initializes the full EC2 inventory just to detect EBS snapshots, avoiding slow scans when checking DLM lifecycle policies diff --git a/prowler/changelog.d/dms-instance-no-public-access-ec2-lazy.fixed.md b/prowler/changelog.d/dms-instance-no-public-access-ec2-lazy.fixed.md deleted file mode 100644 index 71e77ccb36..0000000000 --- a/prowler/changelog.d/dms-instance-no-public-access-ec2-lazy.fixed.md +++ /dev/null @@ -1 +0,0 @@ -`dms_instance_no_public_access` no longer initializes the full EC2 service when there are no DMS replication instances diff --git a/prowler/changelog.d/ecs-task-definitions-registration-date.fixed.md b/prowler/changelog.d/ecs-task-definitions-registration-date.fixed.md deleted file mode 100644 index 6f470e4873..0000000000 --- a/prowler/changelog.d/ecs-task-definitions-registration-date.fixed.md +++ /dev/null @@ -1 +0,0 @@ -ECS task definition resource limits now select the latest task definitions by registration date instead of relying on ARN ordering diff --git a/prowler/changelog.d/jira-dispatch-errors.fixed.md b/prowler/changelog.d/jira-dispatch-errors.fixed.md deleted file mode 100644 index c626872ecd..0000000000 --- a/prowler/changelog.d/jira-dispatch-errors.fixed.md +++ /dev/null @@ -1 +0,0 @@ -Jira issue creation failures now preserve safe structured response details from Jira diff --git a/prowler/changelog.d/scp-allow-region-check.fixed.md b/prowler/changelog.d/scp-allow-region-check.fixed.md deleted file mode 100644 index e8dd521f9f..0000000000 --- a/prowler/changelog.d/scp-allow-region-check.fixed.md +++ /dev/null @@ -1 +0,0 @@ -`organizations_scp_check_deny_regions` no longer reports false `FAIL` for AWS Organizations that restrict regions with Allow-based SCPs; the Allow path now checks the statement `Effect` instead of an always-false comparison that made it unreachable diff --git a/ui/CHANGELOG.md b/ui/CHANGELOG.md index 0c484d17a3..e9442e920f 100644 --- a/ui/CHANGELOG.md +++ b/ui/CHANGELOG.md @@ -4,6 +4,19 @@ All notable changes to the **Prowler UI** are documented in this file. + +## [1.34.0] (Prowler v5.33.1) + +### 🔄 Changed + +- RBAC role forms now explain Unlimited Visibility inside the Visibility section and keep the setting visible while group selection is hidden [(#11890)](https://github.com/prowler-cloud/prowler/pull/11890) + +### 🐞 Fixed + +- CIS Level 1 and Level 2 compliance filters now match profiles prefixed with a license tier (e.g. "E3 Level 1"), so M365 CIS requirements are no longer hidden [(#11924)](https://github.com/prowler-cloud/prowler/pull/11924) +- Jira dispatch polling now reports failed issue creation tasks instead of treating partial failures as successful [(#11925)](https://github.com/prowler-cloud/prowler/pull/11925) + +--- ## [1.33.0] (Prowler v5.33.0) ### 🚀 Added diff --git a/ui/changelog.d/cis-profile-level-filter-m365.fixed.md b/ui/changelog.d/cis-profile-level-filter-m365.fixed.md deleted file mode 100644 index d6a07fd36f..0000000000 --- a/ui/changelog.d/cis-profile-level-filter-m365.fixed.md +++ /dev/null @@ -1 +0,0 @@ -CIS Level 1 and Level 2 compliance filters now match profiles prefixed with a license tier (e.g. "E3 Level 1"), so M365 CIS requirements are no longer hidden diff --git a/ui/changelog.d/jira-dispatch-errors.fixed.md b/ui/changelog.d/jira-dispatch-errors.fixed.md deleted file mode 100644 index 3d9afe9918..0000000000 --- a/ui/changelog.d/jira-dispatch-errors.fixed.md +++ /dev/null @@ -1 +0,0 @@ -Jira dispatch polling now reports failed issue creation tasks instead of treating partial failures as successful diff --git a/ui/changelog.d/rbac-unlimited-visibility.changed.md b/ui/changelog.d/rbac-unlimited-visibility.changed.md deleted file mode 100644 index b8f5bc5725..0000000000 --- a/ui/changelog.d/rbac-unlimited-visibility.changed.md +++ /dev/null @@ -1 +0,0 @@ -RBAC role forms now explain Unlimited Visibility inside the Visibility section and keep the setting visible while group selection is hidden