Alejandro Bailo
383a9bf903
fix(ui): bump Next.js to 16.3.6 to patch the next/og RCE advisory ( #12922 )
2026-10-01 11:54:44 +02:00
Alejandro Bailo
4605d9a770
feat(ui): invite a teammate from the AWS connect step ( #12917 )
2026-10-01 09:50:10 +02:00
César Arroba
f0da33f451
revert(api): release providers blocked by scans whose worker died ( #12915 )
2026-09-30 13:00:50 +02:00
Alejandro Bailo
a44a725507
fix(ui): retry the first-run redirect until the add-provider wizard opens ( #12914 )
2026-09-30 12:34:52 +02:00
César Arroba
b8ca30400b
fix(api): stop sending personal data to Sentry ( #12912 )
2026-09-30 12:28:42 +02:00
César Arroba
a006525e78
fix(api): release providers blocked by scans whose worker died ( #12899 )
2026-09-30 11:09:21 +02:00
Pedro Martín
ed510e217d
chore(deps): bump pyjwt to 2.14.0 for osv-scanner ( #12911 )
2026-09-30 10:21:11 +02:00
Alejandro Bailo
04511f339e
test(ui): stabilize attack-paths refit integration test ( #12896 )
2026-09-29 18:42:19 +02:00
Pedro Martín
f418b32c81
fix(oci): use home region for identity bootstrap ( #12865 )
2026-09-29 17:50:54 +02:00
Pedro Martín
65fb146e76
chore(trivy): suppress fast-uri CVE-2026-84292 ( #12907 )
2026-09-29 17:04:46 +02:00
Prowler Bot and prowler-bot
5ea363d582
chore(release): Bump versions to v5.45.0 ( #12905 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-09-29 16:31:16 +02:00
Prowler Bot and prowler-bot
3ec379a75a
chore(changelog): v5.44.0 ( #12900 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-09-29 13:32:41 +02:00
Pedro Martín
ea020ed46e
chore(changelog): v5.44.0 highlights ( #12897 )
2026-09-29 13:32:13 +02:00
Alejandro Bailo
60b936005c
test(ui): scope E2E delete dialog and scans table locators ( #12898 )
2026-09-29 12:32:55 +02:00
Pedro Martín
03502c2426
fix(api): require operation permission to revoke tasks ( #12893 )
2026-09-28 17:15:39 +02:00
Alejandro Bailo
e6320b178a
fix(ui): bundle all icons so the UI renders without internet access ( #12892 )
2026-09-28 15:58:32 +02:00
Alejandro Bailo
4195a4f818
test(ui): add AWS provider in one step in the E2E helper ( #12895 )
2026-09-28 15:38:47 +02:00
César Arroba
8d003c60d0
fix(api): skip unconfigured attack paths sinks on provider deletion ( #12894 )
...
Provider deletion now skips attack path graph cleanup for a sink whose connection settings have already been removed, instead of failing. The skip is logged as a warning, while the configured active sink still raises on error as before.
2026-09-28 14:33:44 +02:00
Alejandro Bailo
d5136f364c
perf(ui): stream the findings page and load the Finding Group filter on open ( #12891 )
2026-09-28 12:21:13 +02:00
Rubén De la Torre Vico
453c953f37
fix(api): avoid field-named annotation in attack surface aggregation ( #12889 )
2026-09-28 11:39:36 +02:00
César Arroba
c114aa304b
fix(api): stop locking the API key row on every authenticated request ( #12882 )
2026-09-28 11:16:13 +02:00
Alejandro Bailo
c2b8092461
feat(ui): hint the resource re-check beside Last seen ( #12883 )
2026-09-25 14:55:21 +02:00
Pedro Martín
26d9d24e5d
docs(introduction): list UI and API support for Okta ( #12881 )
2026-09-25 10:16:53 +02:00
Alejandro Bailo
ee59e35bc2
fix(ui): stop offering reports and compliance for partial scans ( #12880 )
2026-09-25 10:09:33 +02:00
César Arroba
e0fa23b9ee
fix(ui): show API error message when mute rule creation fails ( #12853 )
2026-09-24 15:35:19 +02:00
Alejandro Bailo
4dbc3c7e74
feat(ui): re-check a resource with a partial scan from the findings actions ( #12879 )
2026-09-24 13:54:15 +02:00
César Arroba
576433d85d
fix(api): reap orphaned attack paths temp Neo4j databases ( #12832 )
2026-09-24 13:23:36 +02:00
Rubén De la Torre Vico
bf179212a5
fix(api): return the new scan id when a scan is created ( #12878 )
2026-09-24 13:12:44 +02:00
César Arroba
60f936a10b
fix(ui): wait for the full provider connection check before reporting a result ( #12869 )
2026-09-24 11:23:56 +02:00
César Arroba
15630f54d2
fix(aws): reuse the STS region that answered and add PROWLER_AWS_BOTO3_RETRIES_MAX_ATTEMPTS ( #12870 )
2026-09-24 10:24:44 +02:00
César Arroba
706603fe4d
feat(api): add an explicit endpoint for S3-compatible scan output storage ( #12871 )
2026-09-24 10:24:19 +02:00
Pedro Martín and alejandrobailo
dc67fe4f37
feat(ui): connect and test AWS accounts in one step ( #12876 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-09-24 09:57:59 +02:00
Prowler Bot and prowler-bot
2c233c2f6c
chore(release): Bump versions to v5.44.0 ( #12860 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-09-23 13:11:45 +02:00
Alejandro Bailo
69e1d19abe
feat(ui): open the paid plan upgrade modal from report downloads ( #12875 )
2026-09-23 13:08:49 +02:00
Alejandro Bailo
859421b0ec
fix(ui): read the persisted sidebar mode without a hydration mismatch ( #12873 )
2026-09-23 13:03:28 +02:00
Pedro Martín and alejandrobailo
ea36f12a01
feat(ui): connect AWS accounts in a single wizard step ( #12852 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-09-22 18:21:55 +02:00
Pujitha Paladugu
50a9138bea
fix(api): sign report download URLs with SigV4 when the bucket region is set ( #12746 )
...
When DJANGO_OUTPUT_S3_AWS_DEFAULT_REGION is set, get_s3_presign_client() signs download URLs with SigV4, path-style, against the regional host, so SSE-KMS buckets no longer reject them with InvalidArgument. Without a region or a public endpoint, URLs are signed as before, and get_s3_client() is unchanged.
Fixes #12734
2026-09-22 16:12:44 +02:00
tejas_0007
09821e6328
fix(api): log Celery worker failures and restart compose services ( #12465 )
...
Declare the Celery worker, kombu, billiard and amqp loggers so fatal worker errors are no longer silenced by disable_existing_loggers, and log task failures from celery.app.trace at WARNING. Add restart: unless-stopped to the long-running services in docker-compose.yml.
Refs #12461
2026-09-22 12:23:51 +02:00
César Arroba
94899e20fd
ci(ui): pass E2E AWS credentials through env vars ( #12864 )
2026-09-22 10:42:40 +02:00
Pedro Martín
79da676c86
chore(changelog): v5.43.0 highlights ( #12839 )
2026-09-22 09:22:26 +02:00
Rubén De la Torre Vico
8b35b69731
fix(api): make every endpoint resolve the same latest scan for a provider ( #12858 )
2026-09-21 17:38:11 +02:00
Prowler Bot and prowler-bot
81d90fc31e
chore(changelog): v5.43.0 ( #12856 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-09-21 15:30:24 +02:00
César Arroba
8b5f1250a9
chore(changelog): reclassify FedRAMP 20x pilot removal as changed ( #12855 )
2026-09-21 15:26:00 +02:00
98d2db4e13
feat(aws): Update regions for AWS services ( #12846 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
Co-authored-by: César Arroba <19954079+cesararroba@users.noreply.github.com >
2026-09-21 13:00:52 +02:00
César Arroba
c9068515b2
fix(deps): bump anyio to 4.14.2 and accept unfixable CPython CVE-2026-82049 ( #12848 )
2026-09-21 12:51:41 +02:00
Alejandro Bailo
3823186914
fix(ui): hide Registry when it is unavailable to the deployment ( #12847 )
2026-09-21 12:27:22 +02:00
Alejandro Bailo and Claude Fable 5.1
03cb59c20d
feat(ui): install Registry checks artifacts on the API's verdict ( #12843 )
...
Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com >
2026-09-18 16:04:58 +02:00
Pedro Martín
d819639f0e
fix(cloudflare): request every permission the checks need ( #12842 )
2026-09-18 13:13:30 +02:00
Pedro Martín
6c8d6994bb
fix(api): sign report URLs against public storage host ( #12552 )
2026-09-18 10:16:13 +02:00
Pedro Martín
07d48ab15d
fix(huaweicloud): remove mock data from SMN service ( #12836 )
2026-09-18 09:20:35 +02:00
Alejandro Bailo