0796ae44d6
chore: change hash
2026-04-15 09:54:52 +02:00
7f1591780f
chore: update changelog
2026-04-15 09:48:22 +02:00
7824bb5e36
fix(api): self-heal finding-group summaries on /latest drift
...
- Detect drifted provider/day summaries on /finding-groups/latest
- Enqueue targeted reaggregation task with per-tenant throttling
- Pin APITask RLS writes to primary DB to avoid replica routing
- Backfill latest scan per provider/day instead of per day
2026-04-15 09:43:53 +02:00
f3a042933f
chore(deps): replace pre-commit and husky with prek ( #10601 )
2026-04-14 16:34:54 +02:00
be6fe1db04
chore(security): bump pytest to 9.0.3 ( #10678 )
2026-04-14 13:59:30 +02:00
51591cb8cd
build: bump poetry to 2.3.4 and consolidate SDK workflows ( #10681 )
2026-04-14 13:32:46 +02:00
1335332fe9
chore(api): Bump version to v1.25.0 ( #10668 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-04-13 22:18:59 +02:00
c6d5f44c5e
chore: update pyjwt ( #10661 )
2026-04-13 14:09:37 +02:00
5d24a41625
feat(api): add sort support for all finding group counter fields ( #10655 )
2026-04-13 13:34:35 +02:00
6534faf678
chore: review changelog for v5.23 ( #10631 )
2026-04-13 08:59:07 +02:00
e4b2950436
refactor(api): split finding-groups status from muted state ( #10630 )
2026-04-09 18:07:43 +02:00
56c370d3a4
chore(ccc): update with latest version and improve mapping ( #10625 )
2026-04-09 15:27:18 +02:00
b0d8534907
feat(api): add needed changes for GoogleWorkspace compliance ( #10629 )
2026-04-09 14:36:55 +02:00
379df7800d
chore(deps): bump aiohttp from 3.13.3 to 3.13.5 in /api ( #10538 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-04-09 09:27:55 +02:00
e6aedcb207
feat(api): support sort by delta on finding-groups endpoints ( #10606 )
2026-04-08 11:04:57 +02:00
abaacd7dbf
feat(api): finding group first_seen_at semantics and resource delta ( #10595 )
2026-04-07 16:41:08 +02:00
33efd72b97
chore(deps): bump authlib from 1.6.5 to 1.6.9 ( #10579 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-07 13:31:59 +02:00
8bc03f8d04
fix(api): remove clear_cache from attack paths read-only query endpoints ( #10586 )
2026-04-07 12:46:51 +02:00
5fff3b920d
fix(api): exclude spurious retrieve from Jira docs and add known limitations ( #10580 )
2026-04-06 14:30:38 +02:00
961f9c86da
feat(ui): Add tenant management ( #10491 )
...
Co-authored-by: Pablo Fernandez <pfe@NB0240.local >
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
Co-authored-by: David <david.copo@gmail.com >
2026-04-06 10:31:30 +02:00
509ec74c3d
fix(ui): findings groups improvements — security fixes, code quality, and UX feedback ( #10513 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-04-01 15:54:46 +02:00
ab8e83da3f
fix(api,ui): dynamically fetch Jira issue types instead of hardcoding "Task" ( #10534 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-04-01 14:37:49 +02:00
af6198e6c2
feat(api): integrate Vercel provider into API layer ( #10190 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-04-01 13:20:49 +02:00
2a8b6261e1
fix(api): false 404 and sorting on finding group resources endpoints ( #10510 )
2026-03-30 12:47:16 +02:00
94e234cefb
fix(api): use raw FK ids in membership post_delete signal to avoid cascade lookup failures ( #10497 )
2026-03-27 16:16:28 +01:00
8bfeee238b
feat(api): replace _provider_id property with label-based isolation and regex injection for custom queries ( #10402 )
2026-03-27 14:31:56 +01:00
cc197ea901
feat(api): add periodic cleanup of stale Attack Paths scans with dead-worker detection ( #10387 )
2026-03-27 14:17:22 +01:00
73e0ac6892
chore: update dependencies ( #10492 )
2026-03-27 13:13:47 +01:00
0a11ca4a68
feat(celery): VALKEY_SCHEME environment variable ( #10420 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-03-27 09:22:35 +01:00
c953fa7e67
fix(api): resolve check_title filter to check_id for consistent finding-group counts ( #10486 )
2026-03-27 09:05:02 +01:00
716c130140
feat(security): security best practices from StepSecurity ( #10480 )
...
Signed-off-by: StepSecurity Bot <bot@stepsecurity.io >
Co-authored-by: stepsecurity-app[bot] <188008098+stepsecurity-app[bot]@users.noreply.github.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-03-26 13:58:19 +01:00
dd00d71a07
fix(api): fix finding groups muted filter, counters and reaggregation ( #10477 )
2026-03-26 10:35:21 +01:00
2cf45c72b6
fix(api): remove MANAGE_ACCOUNT permission requirement for listing or create a tenant ( #10468 )
2026-03-26 09:41:16 +01:00
45f0909c3e
chore(api): pin all unpinned dependencies to exact versions ( #10469 )
2026-03-25 13:27:04 +01:00
9bf2a13177
fix: resolve 403 error for admin users listing tenants ( #10460 )
2026-03-25 10:13:54 +01:00
d15e67e2e5
fix(api): filter neo4j.io defunct connection logs in Sentry before_send ( #10452 )
2026-03-25 09:55:12 +01:00
aa3641718b
fix(api): populate compliance data in check_metadata for findings ( #10449 )
2026-03-24 17:19:53 +01:00
bb80797392
fix(api): support finding-group aggregated filters ( #10428 )
2026-03-24 16:39:26 +01:00
0984cfd75b
chore(api): Bump version to v1.24.0 ( #10440 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-03-24 14:05:48 +01:00
55ed7a0663
docs(CHANGELOG): cutting for 5.22.0 ( #10437 )
2026-03-24 12:15:44 +01:00
844efbd046
perf(api): deduplicate nodes before ProwlerFinding lookup in Attack Paths queries ( #10424 )
2026-03-23 17:16:15 +01:00
d60b4f0f52
fix(api): Update Flask and Werkzeug to address vulnerabilities ( #10430 )
2026-03-23 16:59:03 +01:00
591f5a8603
fix(api): align finding-group latest aggregation ( #10419 )
2026-03-23 12:43:45 +01:00
ad6368a446
chore: add defusedxml as api dependency ( #10401 )
2026-03-19 18:26:55 +01:00
3361393b7d
chore: update changelog ( #10400 )
2026-03-19 17:55:18 +01:00
0b7a21a70c
fix(api): [security] use defusedxml to prevent XML bomb DoS in SAML metadata parsing ( #10165 )
...
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
Co-authored-by: Adrián Peña <adrianjpr@gmail.com >
2026-03-19 17:44:52 +01:00
872e6e239c
perf(api): replace JOINs with pre-check in threat score aggregation query ( #10394 )
2026-03-19 17:30:06 +01:00
2fe92cfce3
feat(api): add check title search for finding groups ( #10377 )
2026-03-19 16:48:26 +01:00
ab266080d0
perf(api): add trigram indexes for finding groups ( #10378 )
2026-03-19 13:54:50 +01:00
4638b39ed4
chore(api): Bump version to v1.23.0 ( #10393 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-03-19 13:42:46 +01:00
Adrián Jesús Peña Rodríguez