From db9356ba867776f54d2ae4c793faf1e1b0234393 Mon Sep 17 00:00:00 2001 From: Prowler Bot Date: Tue, 14 Jul 2026 12:16:36 +0200 Subject: [PATCH] chore(changelog): v5.33.2 forward-sync to master (#11977) Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com> --- api/CHANGELOG.md | 10 ++++++++++ api/changelog.d/attack-paths-child-id-size.fixed.md | 1 - .../attack-paths-graph-mutation-retries.fixed.md | 1 - api/changelog.d/scan-summary-deadlocks.fixed.md | 1 - prowler/CHANGELOG.md | 9 +++++++++ .../ec2-imdsv2-regional-resource-identity.fixed.md | 1 - prowler/changelog.d/ec2-targeted-ami-loading.fixed.md | 1 - 7 files changed, 19 insertions(+), 5 deletions(-) delete mode 100644 api/changelog.d/attack-paths-child-id-size.fixed.md delete mode 100644 api/changelog.d/attack-paths-graph-mutation-retries.fixed.md delete mode 100644 api/changelog.d/scan-summary-deadlocks.fixed.md delete mode 100644 prowler/changelog.d/ec2-imdsv2-regional-resource-identity.fixed.md delete mode 100644 prowler/changelog.d/ec2-targeted-ami-loading.fixed.md diff --git a/api/CHANGELOG.md b/api/CHANGELOG.md index 9e8b541130..ba5e0638e0 100644 --- a/api/CHANGELOG.md +++ b/api/CHANGELOG.md @@ -4,6 +4,16 @@ All notable changes to the **Prowler API** are documented in this file. +## [1.34.2] (Prowler v5.33.2) + +### 🐞 Fixed + +- Attack Paths graph mutations now retry transient Neptune concurrency and deadline failures, while Neo4j mutations use managed transaction retries [(#11968)](https://github.com/prowler-cloud/prowler/pull/11968) +- Attack Paths scans now use bounded child node identifiers for normalized list values in Neo4j and Neptune, preventing Neo4j RANGE index key size failures [(#11969)](https://github.com/prowler-cloud/prowler/pull/11969) +- `scan-summary` aggregation now upserts summaries in deterministic conflict-key order, preventing PostgreSQL deadlocks during concurrent reaggregation [(#11971)](https://github.com/prowler-cloud/prowler/pull/11971) + +--- + ## [1.34.1] (Prowler v5.33.1) ### 🐞 Fixed diff --git a/api/changelog.d/attack-paths-child-id-size.fixed.md b/api/changelog.d/attack-paths-child-id-size.fixed.md deleted file mode 100644 index 4479bbbb20..0000000000 --- a/api/changelog.d/attack-paths-child-id-size.fixed.md +++ /dev/null @@ -1 +0,0 @@ -Attack Paths scans now use bounded child node identifiers for normalized list values in Neo4j and Neptune, preventing Neo4j RANGE index key size failures diff --git a/api/changelog.d/attack-paths-graph-mutation-retries.fixed.md b/api/changelog.d/attack-paths-graph-mutation-retries.fixed.md deleted file mode 100644 index f48e99462c..0000000000 --- a/api/changelog.d/attack-paths-graph-mutation-retries.fixed.md +++ /dev/null @@ -1 +0,0 @@ -Attack Paths graph mutations now retry transient Neptune concurrency and deadline failures, while Neo4j mutations use managed transaction retries diff --git a/api/changelog.d/scan-summary-deadlocks.fixed.md b/api/changelog.d/scan-summary-deadlocks.fixed.md deleted file mode 100644 index 0fcb4479bd..0000000000 --- a/api/changelog.d/scan-summary-deadlocks.fixed.md +++ /dev/null @@ -1 +0,0 @@ -`scan-summary` aggregation now upserts summaries in deterministic conflict-key order, preventing PostgreSQL deadlocks during concurrent reaggregation diff --git a/prowler/CHANGELOG.md b/prowler/CHANGELOG.md index 3a9ebff986..2a0d5899f5 100644 --- a/prowler/CHANGELOG.md +++ b/prowler/CHANGELOG.md @@ -4,6 +4,15 @@ All notable changes to the **Prowler SDK** are documented in this file. +## [5.33.2] (Prowler v5.33.2) + +### 🐞 Fixed + +- EC2 AMI loading now targets Amazon-owned AMIs used by audited instances, reducing AWS API calls during EC2 scans [(#11958)](https://github.com/prowler-cloud/prowler/pull/11958) +- `ec2_instance_account_imdsv2_enabled` findings now use regional resource ARNs, preventing findings from different AWS Regions from collapsing into one resource [(#11966)](https://github.com/prowler-cloud/prowler/pull/11966) + +--- + ## [5.33.1] (Prowler v5.33.1) ### 🐞 Fixed diff --git a/prowler/changelog.d/ec2-imdsv2-regional-resource-identity.fixed.md b/prowler/changelog.d/ec2-imdsv2-regional-resource-identity.fixed.md deleted file mode 100644 index 97e854ce61..0000000000 --- a/prowler/changelog.d/ec2-imdsv2-regional-resource-identity.fixed.md +++ /dev/null @@ -1 +0,0 @@ -`ec2_instance_account_imdsv2_enabled` findings now use regional resource ARNs, preventing findings from different AWS Regions from collapsing into one resource diff --git a/prowler/changelog.d/ec2-targeted-ami-loading.fixed.md b/prowler/changelog.d/ec2-targeted-ami-loading.fixed.md deleted file mode 100644 index 6fed547536..0000000000 --- a/prowler/changelog.d/ec2-targeted-ami-loading.fixed.md +++ /dev/null @@ -1 +0,0 @@ -EC2 AMI loading now targets Amazon-owned AMIs used by audited instances, reducing AWS API calls during EC2 scans