César Arroba
5be514a991
fix(api): fail migrations fast when blocked on a lock
...
Set lock_timeout on the migration session so a metadata-only migration
blocked waiting for ACCESS EXCLUSIVE on a busy table fails loudly instead
of queueing every later reader behind it. Configurable via
DJANGO_MIGRATION_LOCK_TIMEOUT (default 5s, 0 disables it).
2026-07-15 18:49:48 +02:00
Prowler Bot and prowler-bot
0d899b3076
chore(release): Bump versions to v5.35.0 ( #12004 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-07-15 18:16:32 +02:00
Prowler Bot and prowler-bot
3fd9fca32f
chore(changelog): v5.34.0 ( #11999 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-07-15 16:21:14 +02:00
Josema Camacho
07d7e9d5bb
fix(api): retry wrapped Neptune transient errors ( #11996 )
2026-07-15 16:01:04 +02:00
Josema Camacho
077dff7f68
fix(api): resolve critical container scan findings ( #11991 )
2026-07-15 12:08:52 +02:00
Josema Camacho
a4752d6a27
fix(api): prevent false Attack Paths stale cleanup ( #11986 )
2026-07-15 11:07:21 +02:00
Josema Camacho
bd72ec91ea
fix(api): combine permissions across assigned roles ( #11979 )
2026-07-14 13:52:12 +02:00
Prowler Bot and prowler-bot
db9356ba86
chore(changelog): v5.33.2 forward-sync to master ( #11977 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-07-14 12:16:36 +02:00
Josema Camacho
53772e2931
fix(api): prevent concurrent scan summary deadlocks ( #11970 )
2026-07-14 10:40:26 +02:00
Josema Camacho
d37d5058bb
fix(api): bound attack paths normalized-list child IDs ( #11960 )
2026-07-14 09:48:12 +02:00
Josema Camacho
8debf70d5c
fix(api): retry transient attack paths graph mutations ( #11961 )
2026-07-14 09:45:52 +02:00
Pepe Fagoaga
3c78a0df43
fix(changelog): correct fragments for the UI ( #11952 )
2026-07-13 09:31:57 +02:00
Prowler Bot and prowler-bot
a4bf70eecf
chore(changelog): v5.33.1 forward-sync to master ( #11948 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-07-10 14:50:12 +02:00
Pepe Fagoaga
106026614d
chore(security): allow internal endpoints for Lighthouse AI OpenAI compatible ( #11941 )
2026-07-10 12:55:16 +02:00
Adrián Peña and Josema Camacho
3f2e5929d9
fix(api): harden Lighthouse provider base URLs ( #11928 )
...
Co-authored-by: Josema Camacho <josema@prowler.com >
2026-07-10 11:24:40 +02:00
Josema Camacho
c93ea035fc
fix(api): make AWS Attack Paths query aggregation Neo4j compatible ( #11931 )
2026-07-10 11:19:08 +02:00
Josema Camacho and Pepe Fagoaga
b44f8ebf5f
fix(api): add query-level retry with primary fallback to rls_transaction via execute_wrapper ( #10379 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-07-09 17:47:03 +02:00
Hugo Pereira Brito
be78fe8374
fix(jira): surface dispatch failures ( #11918 )
2026-07-09 16:09:12 +01:00
Josema Camacho
bf9c53a4c3
fix(api): keep auth tests order-safe after token revocation ( #11919 )
2026-07-09 15:41:51 +02:00
Adrián Peña
18b3c49234
fix(api): invalidate tokens after password updates ( #11901 )
2026-07-09 10:36:58 +02:00
Adrián Peña
84ea68927f
fix(api): scope user role updates to tenant ( #11903 )
2026-07-09 10:36:49 +02:00
Josema Camacho
3461f9ac49
test(api): reduce report, provider, auth, and sentry test costs ( #11888 )
2026-07-08 14:31:53 +02:00
Adrián Peña
6c5f54808d
feat: add changelog fragments workflow ( #11572 )
2026-07-08 10:19:12 +02:00
Prowler Bot and prowler-bot
18e1bf5195
chore(release): Bump versions to v5.34.0 ( #11874 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-07-07 18:23:01 +02:00
Josema Camacho
5e00c4bfcf
chore(docs): update changelogs for 5.33.0 ( #11866 )
2026-07-07 13:07:40 +02:00
Hugo Pereira Brito
ad04e69c35
fix(kubernetes): reject exec auth in cloud kubeconfigs ( #11753 )
2026-07-07 09:57:46 +01:00
Adrián Peña
6cae37174c
fix(api): queue provider scans when one is active ( #11848 )
2026-07-07 10:28:41 +02:00
Pedro Martín
3cc8f86780
feat(api): remove provider credentials for PDF report ( #11845 )
2026-07-07 09:45:34 +02:00
Pedro Martín and César Arroba
81c3152ebb
chore(changelog): prepare for 5.32.1 ( #11856 )
...
Co-authored-by: César Arroba <19954079+cesararroba@users.noreply.github.com >
2026-07-06 16:14:20 +02:00
Adrián Peña and alejandrobailo
7b5d724bb7
fix: handle invitations in social and SAML auth ( #11752 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-07-06 14:49:07 +02:00
Hugo Pereira Brito
398a0a484f
fix(api): restrict user profile updates to self ( #11792 )
2026-07-03 11:53:01 +01:00
Josema Camacho
0cf6f2f83e
fix(api): add attack paths scan DB defaults ( #11826 )
2026-07-03 11:30:55 +02:00
Prowler Bot and prowler-bot
2e37188c9f
chore(release): Bump versions to v5.33.0 ( #11820 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-07-02 16:56:03 +02:00
Pepe Fagoaga
a76ba156d5
chore(changelog): v5.32.0 ( #11805 )
2026-07-02 13:17:56 +02:00
Josema Camacho
87a15d7bb8
feat(api): support timestamp precision in findings filters ( #11754 )
2026-07-02 09:27:22 +02:00
renovate[bot]
f5bdacd07a
chore(docker): update docker ( #11601 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-02 09:08:50 +02:00
Josema Camacho
72cf2a65a6
perf(api): optimize attack paths graph cleanup ( #11755 )
2026-07-01 16:28:59 +02:00
César Arroba
af6918d57b
chore(api): opt out of PowerShell telemetry in the API image ( #11746 )
2026-07-01 10:02:59 +02:00
Josema Camacho
c3ce3d2b3c
fix(api): preflight attack paths graph databases ( #11743 )
2026-06-30 17:01:48 +02:00
Daniel Barranquero
34e8e3ca61
chore(api): replace detect-secrets with kingfisher-bin to match the SDK ( #11698 )
2026-06-30 15:59:18 +02:00
Hugo Pereira Brito
36006de8ce
chore(ci): bump Trivy scanner to v0.71.2 ( #11728 )
2026-06-30 11:45:55 +01:00
Hugo Pereira Brito
e40e9a6483
fix(docker): remove build dependencies from images ( #11730 )
2026-06-30 11:31:51 +01:00
Josema Camacho
4e7e2f7eab
fix(api): cap attack paths sink sync batches ( #11724 )
2026-06-29 17:48:02 +02:00
Pedro Martín and Pepe Fagoaga
d6f5f060ca
feat(compliance): add CIS Controls v8.1 universal framework ( #11700 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-06-26 13:27:02 +02:00
Josema Camacho
5793cd7e38
feat(api): make Attack Paths sink selectable between Neo4j and Neptune ( #11524 )
2026-06-26 10:22:29 +02:00
Josema Camacho
2b7db88694
fix(api): handle deleted scans during progress saves ( #11696 )
2026-06-25 14:12:12 +02:00
Pepe Fagoaga
7785829969
chore: changelog v5.31.1 ( #11691 )
2026-06-25 08:28:34 +02:00
Josema Camacho
4e00cfd1b6
fix(api): avoid mutating API key manager during auth ( #11686 )
2026-06-24 16:50:55 +02:00
Davidm4r
917e5d07ff
test(api): speed up API test suite ( #11681 )
2026-06-24 15:15:29 +02:00
Adrián Peña
dc228e8b36
docs(api): move SAML changelog entry to v5.31.0 ( #11677 )
2026-06-23 17:18:20 +02:00
César Arroba