Pedro Martín
f45173997b
fix(api): wrap long account IDs in PDF report cover table ( #13063 )
2026-10-16 10:33:07 +02:00
Rajesh Nadiminti and Rubén De la Torre Vico
136e4efdb5
feat(gcp): add vertexai service with workbench public IP and root access checks ( #13062 )
...
Co-authored-by: Rubén De la Torre Vico <98956809+puchy22@users.noreply.github.com >
2026-10-16 10:20:34 +02:00
Pedro Martín
de4db487d5
fix(container): bump Trivy to 0.76.0 in SDK and API images ( #13064 )
2026-10-16 09:55:18 +02:00
Prowler Bot and prowler-bot
f5aaec21cc
chore(release): Bump versions to v5.46.0 ( #13056 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-10-15 13:28:01 +02:00
Pedro Martín
64ce5a7503
fix(api): pin Redoc to 2.5.1 so the docs render ( #13053 )
2026-10-15 12:01:03 +02:00
César Arroba Vico
2600d49195
fix(ci): create the release tracking ref locally in prepare-release ( #13052 )
2026-10-15 11:51:12 +02:00
César Arroba Vico
7c4b12b655
fix(ci): fetch the release branch after creating it in prepare-release ( #13050 )
2026-10-15 11:23:57 +02:00
Prowler Bot and prowler-bot
9b56a3b657
chore(changelog): v5.45.0 ( #13049 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-10-15 11:12:38 +02:00
Pedro Martín
f70b648cde
chore(changelog): v5.45.0 highlights ( #13048 )
2026-10-15 11:05:49 +02:00
César Arroba
1f8ca695e8
fix(api): recycle gunicorn workers to cap memory growth ( #13047 )
2026-10-15 09:36:33 +02:00
Pepe Fagoaga and coderabbitai[bot]
d8a4e98850
docs: new listings for the AWS Marketplace ( #12948 )
...
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
2026-10-14 23:08:32 +02:00
Pedro Martín
d9b53b2637
fix(iac): block SSRF in repository connection test ( #12960 )
2026-10-14 16:25:13 +02:00
Pedro Martín
a4d07678b4
fix(outputs): neutralise injection in CSV and HTML reports ( #12963 )
2026-10-14 13:55:43 +02:00
Alejandro Bailo
64c19b3db6
fix(ui): show Registry subscription and setup prompts ( #13038 )
2026-10-14 13:51:08 +02:00
Rajesh Nadiminti and Rubén De la Torre Vico
286ae6c7cf
feat(azure): add aiservices network ACL and prompt shield checks ( #12997 )
...
Co-authored-by: Rubén De la Torre Vico <98956809+puchy22@users.noreply.github.com >
2026-10-14 10:55:27 +02:00
Pedro Martín
8e67f0251c
fix(ui): point Slack partial list to inviting the app ( #13036 )
2026-10-14 10:32:12 +02:00
Rajesh Nadiminti and Rubén De la Torre Vico
3c50cec509
feat(azure): add aiservices private endpoint, outbound, identity and logging checks ( #12926 )
...
Co-authored-by: Rubén De la Torre Vico <98956809+puchy22@users.noreply.github.com >
2026-10-14 10:26:16 +02:00
Pedro Martín
fbb22834f7
fix(container): bump PowerShell to 7.5.12 in SDK and API ( #13037 )
2026-10-14 10:09:18 +02:00
Pedro Martín
165b62a730
ci(sdk): run Huawei Cloud tests in sdk-tests ( #13035 )
2026-10-14 09:22:30 +02:00
Rajesh Nadiminti and pedrooot
8b814b7643
feat(azure): add aiservices service with network, local auth and CMK checks ( #12925 )
...
Co-authored-by: pedrooot <pedromarting3@gmail.com >
2026-10-14 09:03:25 +02:00
Pepe Fagoaga
22468c1443
ci(trufflehog): scan full history and pin scanner image ( #13032 )
2026-10-14 07:53:25 +02:00
a36991f60e
feat(m365): add entra_cross_tenant_access_default_outbound_restricted check ( #12991 )
...
Co-authored-by: kinomakino <3662588+kinomakino@users.noreply.github.com >
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com >
Co-authored-by: Pedro Martín <pedromarting3@gmail.com >
2026-10-13 16:25:42 +02:00
dd63fa960b
feat(m365): add entra_policy_admin_self_service_password_reset_disabled check ( #12990 )
...
Co-authored-by: kinomakino <3662588+kinomakino@users.noreply.github.com >
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com >
Co-authored-by: Pedro Martín <pedromarting3@gmail.com >
2026-10-13 15:59:20 +02:00
80c4113879
feat(m365): add entra_dynamic_group_member_of_rule_not_used check ( #13003 )
...
Co-authored-by: kinomakino <3662588+kinomakino@users.noreply.github.com >
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com >
Co-authored-by: Pedro Martín <pedromarting3@gmail.com >
2026-10-13 15:59:01 +02:00
c438858dbd
feat(m365): add entra_app_registration_redirect_uris_secure check ( #12993 )
...
Co-authored-by: kinomakino <3662588+kinomakino@users.noreply.github.com >
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com >
Co-authored-by: Pedro Martín <pedromarting3@gmail.com >
2026-10-13 15:42:21 +02:00
f606a3c195
feat(m365): add entra_policy_msol_powershell_blocked check ( #13004 )
...
Co-authored-by: kinomakino <3662588+kinomakino@users.noreply.github.com >
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com >
Co-authored-by: Pedro Martín <pedromarting3@gmail.com >
2026-10-13 15:22:01 +02:00
Pedro Martín
c599a9cf1d
fix(container): suppress Trivy HTTP/2 SETTINGS DoS CVE ( #13028 )
2026-10-13 11:55:48 +02:00
Pedro Martín
61d2cc55c4
fix(container): patch Trivy and MCP base image CVEs ( #13009 )
2026-10-09 18:17:48 +02:00
Pedro Martín
859a846147
fix(api): scope user memberships and roles to tenant ( #12965 )
2026-10-09 13:04:11 +02:00
Alejandro Bailo
d8bdc8553f
fix(ui): show registry provider logos and capitalize registry labels ( #12985 )
2026-10-08 18:16:08 +02:00
Pedro Martín and alejandrobailo
f44ea4b6fa
fix(api): require inline kubeconfig credentials ( #12952 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-10-08 18:15:10 +02:00
César Arroba
27c4113d29
fix(aws): query Organizations in the audited partition ( #12988 )
2026-10-08 15:57:58 +02:00
Alejandro Bailo
cf688e3fa1
fix(ui): bump Next.js to 16.3.8 to patch the image optimization SSRF advisory ( #12987 )
2026-10-08 15:17:59 +02:00
César Arroba
92216f1597
ci(release): auto-create minor release branch and lift freeze on publish
...
Create the minor release branch automatically in the release preparation workflow, check versions before creating it, match the version literally, and lift the release freeze when the release is published.
2026-10-08 12:47:38 +02:00
Alejandro Bailo
b5a709664d
fix(ui): show only the chosen registry credential variant ( #12966 )
2026-10-07 16:35:20 +02:00
Alejandro Bailo
9d8060adc5
test(ui): stabilize invite-teammate roles-unavailable test ( #12973 )
2026-10-07 16:14:23 +02:00
StylusFrost
f1e822f7df
chore(trivy): suppress @modelcontextprotocol/sdk CVE-2026-104850 ( #12967 )
2026-10-07 12:27:44 +02:00
StylusFrost
22bc834c09
chore(grype): suppress zlib CVE-2026-85091 until base images ship the fix ( #12970 )
2026-10-07 12:16:04 +02:00
StylusFrost
3f893176ba
fix(ui): bump sharp to 0.35.5 to patch the librsvg advisory ( #12968 )
2026-10-07 11:48:19 +02:00
César Arroba
d38e04dd3e
chore(github): move code ownership from platform to engineering ( #12958 )
2026-10-06 10:42:52 +02:00
Pedro Martín
7ccdf7c0e6
fix(deps): patch pymongo CVEs and ignore proxy-addr ( #12955 )
2026-10-06 10:34:58 +02:00
Alejandro Bailo
bee60c5471
fix(ui): stop reporting client-aborted RSC streams to Sentry ( #12956 )
2026-10-06 10:23:07 +02:00
Alejandro Bailo
f850199645
fix(ui): pin proxy-addr to 2.0.8 to patch the IP spoofing advisory ( #12957 )
2026-10-06 10:10:17 +02:00
Pedro Martín
0321a4f167
fix(deps): patch Django, urllib3 and dulwich CVEs ( #12953 )
2026-10-06 08:48:54 +02:00
Alejandro Bailo
383a9bf903
fix(ui): bump Next.js to 16.3.6 to patch the next/og RCE advisory ( #12922 )
2026-10-01 11:54:44 +02:00
Alejandro Bailo
4605d9a770
feat(ui): invite a teammate from the AWS connect step ( #12917 )
2026-10-01 09:50:10 +02:00
César Arroba
f0da33f451
revert(api): release providers blocked by scans whose worker died ( #12915 )
2026-09-30 13:00:50 +02:00
Alejandro Bailo
a44a725507
fix(ui): retry the first-run redirect until the add-provider wizard opens ( #12914 )
2026-09-30 12:34:52 +02:00
César Arroba
b8ca30400b
fix(api): stop sending personal data to Sentry ( #12912 )
2026-09-30 12:28:42 +02:00
César Arroba
a006525e78
fix(api): release providers blocked by scans whose worker died ( #12899 )
2026-09-30 11:09:21 +02:00
Pedro Martín