Releases: mondoohq/mql
Releases · mondoohq/mql
v13.1.1
What's Changed
- 🧹 Remove
sshhostkeyplatform id package and update imports by @slntopp in #6940 - 🐛 Recover and report panics in provider subprocesses by @vjeffrey in #6939
- ⭐️ improved provider versioning utility by @imilchev in #6951
- 🧹 do not commit provider release temp files by @imilchev in #6959
- 🎉 nmap-13.0.1, oci-13.0.1, opcua-13.0.1, os-13.2.3, shodan-13.0.1, slack-13.0.1, snowflake-13.0.1, tailscale-13.0.1, terraform-13.0.1, vcd-13.0.1, vsphere-13.0.1 by @github-actions[bot] in #6960
- ✨ Add custom tags to error reports for enhanced context by @slntopp in #6957
- 🧹 Update AWS SDK deps and fix stale .lr enum comments by @tas50 in #6963
- 🧹 Add concurrency group to release-providers workflow by @imilchev in #6961
- 🐛 Improve performance of process socket handling and refactor related functions by @slntopp in #6962
- 🐛 Fix wrong error variable returned in initAwsEc2Volume by @tas50 in #6965
- 🧹 Add .claude/worktrees/ to .gitignore by @tas50 in #6967
- 🐛 Fix internet gateway ARN using OwnerId instead of AccountId by @tas50 in #6966
- 🐛 Fix Neptune endpoint using wrong conversion function by @tas50 in #6964
- 🧹 aws: modernize Go syntax (any, slices.Chunk, stdlib slices) by @tas50 in #6889
- 🧹 Modernize arista and network providers with Go idioms by @tas50 in #6891
- ⚡ Fix N+1 and redundant API calls in Arista provider by @tas50 in #6947
- 🐛 Skip blob API calls for Azure Data Lake Storage Gen2 accounts by @vjeffrey in #6968
- 🧹 Improve Arista testing instructions by @tas50 in #6969
- 📄 Add doc comments to os.lr resources by @tas50 in #6971
- ✨ Add machine.cpu resource with correct socket/core reporting by @tas50 in #6946
- ✨ Add AppArmor resource to OS provider by @tas50 in #6970
Full Changelog: v13.1.0...v13.1.1
v13.1.0
What's Changed
- 🎉 os-13.2.0 by @tas50 in #6885
- ⭐ Add BGP, MLAG, ACL resources and extend existing Arista EOS resources by @tas50 in #6559
- ⭐ Add hardware environment and inventory resources to Arista EOS by @tas50 in #6893
- 🎉 arista-13.1.0 by @tas50 in #6894
- 🐛 os: fix services.list reporting wrong running state for systemd services by @jaym in #6890
- 🐛 Fix goreleaser workflow conditions for tag pushes by @philipbalinov in #6888
- 🎉 os-13.2.1 by @syrull in #6896
- Fix nil panics in AWS provider resources by @vjeffrey in #6895
- 🎉 aws-13.0.2 by @tas50 in #6897
- 🐛 Fix nil panic in GCP IAM service account init by @tas50 in #6900
- 🎉 gcp-13.1.1 by @tas50 in #6901
- 🐛 Handle DNS resolution errors in ElastiCache discovery by @tas50 in #6902
- ✨ aws: add capacity providers, statistics, and service connect to ECS clusters by @tas50 in #6898
- 🎉 aws-13.1.0 by @tas50 in #6905
- ✨ Add SageMaker, Inspector findings, Shield DRT, Firehose destinations, and Org delegated admin resources by @tas50 in #6879
- 🧹 Update AWS provider SDK dependencies by @tas50 in #6906
- ✨ Add UniFi provider to default providers by @tas50 in #6912
- ✨ cloudformation: add dependsOn, rules, and improve README by @tas50 in #6908
- ⭐ Add virtual network discovery to Azure provider by @tas50 in #6904
- ⭐ Add fields and peerings to Azure virtual network resource by @tas50 in #6914
- 🧹 clean up redundant make providers/build|install calls by @arlimus in #6913
- 🧹 remove core provider dependency from provider by @arlimus in #6918
- Bump github/codeql-action from 4.32.4 to 4.32.6 by @dependabot[bot] in #6915
- Bump docker/login-action from 3.7.0 to 4.0.0 by @dependabot[bot] in #6917
- Bump actions/dependency-review-action from 4.8.3 to 4.9.0 by @dependabot[bot] in #6916
- 🐛 Fix nil pointer dereferences in AWS CloudFront and ECS by @tas50 in #6919
- 🐛 Fix S3 bucket ARN validation for GovCloud and China partitions by @tas50 in #6921
- 🐛 Fix Macie custom data identifier detail fetch using wrong region by @tas50 in #6922
- 🐛 Fix DRS job ARN fallback producing empty account ID by @tas50 in #6926
- 🐛 Fix missing pagination in AWS DynamoDB, Config, ECS, Redshift, SageMaker by @tas50 in #6920
- ⭐ Add GCP Backup & DR, Vertex AI, and Cloud Armor enhancements by @tas50 in #6909
- ✨ add helper to merge recordings by @arlimus in #6927
- 🧹 Update deps for mql and providers 20260316 by @github-actions[bot] in #6928
- fix(okta): handle DYNAMIC_V2 network zone type in API responses by @syrull in #6929
- 🧹 remove warn logs for hypervisor and hostname detection by @imilchev in #6931
- 🧹 providers stderr to logger by @imilchev in #6930
- 🎉 os-13.2.2 by @imilchev in #6932
- 🧹 Modernize GCP provider with Go 1.21+ idioms by @tas50 in #6892
- 🧹 remove the progress cli pkg by @imilchev in #6935
- 🧹 Add tests for sysInfoHeader and use Product struct by @preslavgerchev in #6934
- ✨ Add BIG-IP provider to default providers by @tas50 in #6937
- 🐛 Fix nil pointer panic in recording asset finalize by @vjeffrey in #6899
- 🐛 Fix Lambda function init lookup by name+region by @tas50 in #6923
- 🐛 Fix nil pointer dereferences in EC2, Elasticsearch, Config, Inspector by @tas50 in #6924
- 🐛 Fix race conditions in AWS IAM, SQS, DynamoDB, EKS lazy loaders by @tas50 in #6925
- Bump AWS, Azure, and GCP provider minor versions by @tas50 in #6936
- 🐛 normalize -k flag into fields array in audtid by @syrull in #6933
- 🧹 Use built-in AWS paginators. by @VasilSirakov in #6941
- 🧹 Bump AWS provider to 13.2.1 by @tas50 in #6944
- ✨ Add Batch, Lightsail, CloudFormation, and EventBridge Pipes/Scheduler resources by @tas50 in #6907
Full Changelog: v13.0.1...v13.1.0
v13.0.1
What's Changed
- 🛑 Bump all provider versions to 13.0.0 by @tas50 in #6864
- 🧹 update go version by @imilchev in #6871
- 🧹 Revert nginx resource by @tas50 in #6872
- fix: flip bump-cnspec CI toggle by @philipbalinov in #6870
- 🧹 Bump provider versions to 13.0.1 by @tas50 in #6873
- ⭐ gcp: add Filestore, Cloud Tasks, Cloud Scheduler, App Engine, Cloud Deploy, and Dataflow resources by @tas50 in #6844
- Fix per-package architecture detection for windows/app packages by @czunker in #6875
- 🏃🏻♂️ build provider arch in parallel by @imilchev in #6874
- 🐛 Fix asset duplication logic and add unit tests for discovered assets by @slntopp in #6861
- 🐛 fix: bound snap package enumeration over ssh by @syrull in #6878
- ⭐ Add GCP Artifact Registry support with 9 new resource types and ~45 fields by @tas50 in #6701
- 🐛 Fix GCP network/subnetwork discovery not working + several crashes by @tas50 in #6675
- 🧹 Bump actions/upload-artifact from 6.0.0 to 7.0.0 by @dependabot[bot] in #6852
- Bump os and gcp providers to 13.1.0 by @tas50 in #6880
- 🐛 Fix cache key collision for not-found package, service, and kernel.module by @jaym in #6881
- 🧹 Bump os provider to 13.1.1 by @jaym in #6882
- ✨ Add mdadm resource for Linux software RAID arrays by @tas50 in #6884
- ⭐ Add ZFS resources to OS provider by @tas50 in #6784
- ✨ os: add ipv4, ipv6, primaryIPv4, primaryIPv6 to network resource by @tas50 in #6839
- Reduce SSH service and file scan commands by @syrull in #6886
Full Changelog: v13.0.0...v13.0.1
v13.0.0
What's Changed
- 🐛 fix: use correct reference if containerd store is enabled by @slntopp in #6643
- 🎉 os-11.8.4 by @slntopp in #6645
- 🎉🎉🎉 v13 🎉🎉🎉 by @arlimus in #6511
- ⭐ Azure: Add 79 new fields in 17 resources by @tas50 in #6627
- 🧹 Use pointer types when AWS/GCP when we can by @tas50 in #6652
- 🧹 Update Azure SDK deps to the latest by @tas50 in #6650
- 🧹 Improve the where clause error to help with debugging by @tas50 in #6646
- ✨ track provider versions per resources and fields by @arlimus in #6654
- Bump goreleaser/goreleaser-action from 6.4.0 to 7.0.0 by @dependabot[bot] in #6657
- ⭐ remove manifest files + minMondooVersion + replace with version in resources.json by @arlimus in #6660
- 🧹 Remove the content dispatch job by @tas50 in #6659
- 🎉 tailscale-11.0.74 by @arlimus in #6662
- 🎉 tailscale-11.0.79 by @arlimus in #6663
- ⭐ Add additional fields to the GCP pub/sub resources by @tas50 in #6655
- 🎉 gcp-11.3.0 by @tas50 in #6664
- ⭐ Extend sudoers resource to support all major OS paths by @tas50 in #6658
- ⭐ Enable 10 additional GCP resource types to be discovered and treated as standalone assets by @LittleSalkin1806 in #6649
- ⭐ Expand Azure provider using fields in new SDKs by @tas50 in #6653
- 🐛 Minor fixes and improvements to aws.ec2.instance by @tas50 in #6670
- 🧹 Update fields to support all enums by @tas50 in #6665
- 🎉 aws-11.12.3 by @tas50 in #6671
- 🎉 gcp-11.4.0 by @tas50 in #6668
- 🎉 os-11.8.5 by @tas50 in #6669
- ⭐ Add 2 new AWS fields necessary for writing additional checks by @tas50 in #6673
- 🎉 aws-11.13.0 by @tas50 in #6674
- ⭐ ELB load balancer tags query and discovery for classic load balancers by @gerysz in #6672
- 🎉 aws-11.14.0 by @tas50 in #6678
- 🎉 azure-11.5.0 by @tas50 in #6677
- ⭐ Expand Azure resources + scan additional Azure resources as their own platforms by @tas50 in #6630
- 🎉 azure-11.6.0 by @tas50 in #6680
- 🤖 Automatically create provider bump PRs by @czunker in #6644
- ⭐ GCP: Add resources for Firestore, Spanner, Bigtable, and AlloyDB by @tas50 in #6615
- 🎉 gcp-11.5.0 by @tas50 in #6683
- 🧹 Add tests for wrlinux by @tas50 in #6688
- ✨ Update providers 20260226 by @github-actions[bot] in #6691
- ✨ Update providers 20260226 by @github-actions[bot] in #6692
- 🧹 Do not trigger provider releases on config changes by @czunker in #6696
- 🐛 Fix ELB classic load balancer field alignment and filtering by @LittleSalkin1806 in #6679
- ⭐ GCP: Add Cloud Armor, SSL, Cloud NAT, CAS, Audit Config, and Org Policy resources by @tas50 in #6685
- Version/aws 11.15.0 by @tas50 in #6700
- 🧹 Remove the extra wind river test by @tas50 in #6703
- ⭐ AWS: 18 new resources, ~70 new fields on existing resources, 23 services by @tas50 in #6667
- ✨ Update providers 20260228 by @github-actions[bot] in #6705
- ✨ Update providers 20260228 by @github-actions[bot] in #6706
- ⭐ AWS Lambda: 7 new resources, ~15 new fields on existing resources by @tas50 in #6712
- ✨ Update providers 20260228 by @github-actions[bot] in #6713
- ⭐ MS365: Add
microsoft.security.informationProtection.sensitivityLabelsresource by @florinutz in #6422 - ✨ Update providers 20260301 by @github-actions[bot] in #6719
- 🧹 Minor spellcheck config updates by @tas50 in #6702
- ✨ Add platform detection for LEDE Linux by @tas50 in #6720
- Bump github/codeql-action from 4.31.10 to 4.32.4 by @dependabot[bot] in #6727
- Bump actions/dependency-review-action from 4.8.2 to 4.8.3 by @dependabot[bot] in #6726
- 🐛 Handle unsupported Docker image manifest types gracefully by @tas50 in #6723
- ✨ Update providers 20260301 by @github-actions[bot] in #6728
- 🧹 Rename github connection Hash to OptionsHash by @tas50 in #6724
- ✨ Add shieldedInstanceConfig sub-resource to gcp.compute.instance by @tas50 in #6721
- 🧹 Deprecate aws.ec2.image arn field by @tas50 in #6718
- ⭐ Azure: Add 26 security-relevant fields across 9 resources by @tas50 in #6717
- ⭐ Add support for additional operating systems to rsyslog resource by @tas50 in #6661
- ⭐ Add AWS Route 53 resources by @tas50 in #6704
- ⭐ AWS EC2: 18 new fields on instance and image resources + placement resource by @tas50 in #6714
- ✨ Update providers 20260301 by @github-actions[bot] in #6731
- 🧹 Disable auto-update providers on push to main. by @VasilSirakov in #6739
- ⭐ Add AWS WorkDocs resources by @tas50 in #6740
- ✨ Github repository dependency graph SBOM resource. by @VasilSirakov in #6695
- 🧹 Fix AWS lr.go file by @tas50 in #6742
- ⭐ Update GitLab SDK to v1.45.0, add security resources by @tas50 in #6716
- ⭐ OCI: Add --profile and --config-file flags, fix --region parsing by @tas50 in #6725
- ⭐ Add AWS AppStream 2.0 resources by @tas50 in #6743
- ⭐ Add AWS Directory Service resources by @tas50 in #6744
- 🐛 Fix azure storage container init returning wrong resource by @tas50 in #6735
- 🐛 Fix azure storage blob properties missing id field by @tas50 in #6745
- 🐛 Fix network.interfaces gateway parsing for peer interfaces by @tas50 in #6746
- 🎉 oci-11.2.0 by @tas50 in #6753
- 🎉 azure-11.6.1 by @tas50 in #6752
- 🎉 os-11.8.13 by @tas50 in #6751
- 🎉 gitlab-11.2.0 by @tas50 in #6750
- 🎉 github-11.5.0 by @tas50 in #6749
- 🎉 aws-11.16.0 by @tas50 in #6748
- 🧹 google-workspace: update Google SDK to v0.269.0 by @tas50 in #6756
- 🧹 ms365: update Microsoft Graph SDK to latest by @tas50 in #6757
- 🧹 slack, snowflake, terraform: update SDK deps to latest by @tas50 in #6759
- ⭐ Update go-github to v84, add security resources to github provider by @tas50 in #6715
- ⭐ Add 37 new fields to Azure compute and storage resources by @tas50 in #6758
- ⭐ Add 22 new fields to Google Workspace resources by @tas50 in #6761
- 🎉 azure-11.7.0 by @tas50 in #6763
- 🎉 github-11.6.0 by @tas50 in #6762
- 🎉 google-workspace-11.2.0 by @tas50 in #6764
- Bump EnricoMi/publish-unit-test-result-action from 2.22.0 to 2.23.0 by @dependabot[bot] in #6765
- ✨ Add 42 new fields to ms365 provider resources by @tas50 in #6766
- 🎉 ms365-11.2.0 by @tas50 in #6767
- Fix spoofable author check in auto-merge workflow by @tas50 in #6768
- Add explicit permissions block to reusable lint workflow by @tas50 in #6770
- V13: ⭐ Expose terraform required_providers as typed resource list by @tas50 in #6741
- ⭐ v13: Convert Azure Defender dict values into resources by @tas50 in #6694
- ✨ Add docker.file.healthcheck, volume, shell, and workdir resources by @tas50 in #6773
- 🐛 Fix ms365 Teams blockedDomains returning empty value by ...
v13.0.0-rc9
What's Changed
- ⭐ gcp: enrich provider with new resources, fields, and typed references by @tas50 in #6842
- ⚡ gcp: fix pagination bugs and reduce redundant API calls by @tas50 in #6843
- ⭐ gcp: add custom IAM roles resource by @tas50 in #6845
- ⭐ gcp: add instance groups, instance group managers, and network firewall policies by @tas50 in #6846
- gcp: add compute health checks, URL maps, target proxies, and network peerings by @tas50 in #6847
- ⭐ aws: add Shield Advanced and Network Firewall resources by @tas50 in #6848
- ✨ ms365: expose additional fields from existing API responses by @tas50 in #6849
- Bump actions/setup-go from 6.2.0 to 6.3.0 by @dependabot[bot] in #6853
- Bump dawidd6/action-download-artifact from 14 to 16 by @dependabot[bot] in #6854
- ✨ Add Windows 10 ESU detection by @czunker in #6824
- 🐛 Fix ms365 nested resource with init func by @Bajusz15 in #6503
- Pin package-url/packageurl-go to v0.1.3 by @czunker in #6856
- 🧹 Update deps for mql and providers 20260309 by @github-actions[bot] in #6858
- Fix intermittent integration test failures (add -p 1) by @czunker in #6859
- ✨ Detect Oracle ELS support by @czunker in #6857
- 🐛 fix: prevent binary self-update from disabling provider auto-update by @philipbalinov in #6851
Full Changelog: v13.0.0-rc7...v13.0.0-rc9
v13.0.0-rc8
What's Changed
- ⭐ gcp: enrich provider with new resources, fields, and typed references by @tas50 in #6842
- ⚡ gcp: fix pagination bugs and reduce redundant API calls by @tas50 in #6843
- ⭐ gcp: add custom IAM roles resource by @tas50 in #6845
- ⭐ gcp: add instance groups, instance group managers, and network firewall policies by @tas50 in #6846
- gcp: add compute health checks, URL maps, target proxies, and network peerings by @tas50 in #6847
- ⭐ aws: add Shield Advanced and Network Firewall resources by @tas50 in #6848
- ✨ ms365: expose additional fields from existing API responses by @tas50 in #6849
- Bump actions/setup-go from 6.2.0 to 6.3.0 by @dependabot[bot] in #6853
- Bump dawidd6/action-download-artifact from 14 to 16 by @dependabot[bot] in #6854
- ✨ Add Windows 10 ESU detection by @czunker in #6824
- 🐛 Fix ms365 nested resource with init func by @Bajusz15 in #6503
- Pin package-url/packageurl-go to v0.1.3 by @czunker in #6856
- 🧹 Update deps for mql and providers 20260309 by @github-actions[bot] in #6858
- Fix intermittent integration test failures (add -p 1) by @czunker in #6859
- ✨ Detect Oracle ELS support by @czunker in #6857
- 🐛 fix: prevent binary self-update from disabling provider auto-update by @philipbalinov in #6851
Full Changelog: v13.0.0-rc7...v13.0.0-rc8
v13.0.0-rc7
What's Changed
- add port option to the nmap provider by @atomic111 in #6822
- ✨ Add gitlab.namespace resource with subscription plan info by @tas50 in #6829
- ⚡ aws/eks: add pagination to ListClusters, ListNodegroups, and ListAddons by @tas50 in #6831
- ⚡ aws/backup: add pagination to ListBackupVaults by @tas50 in #6832
- ⚡ aws: lazy-load expensive Describe fields for WAF, Kinesis, and Athena by @tas50 in #6833
- ⚡ aws: lazy-load tags and remove redundant API calls by @tas50 in #6830
- 🧹 Use sentinel error when failing to detect provider for asset with no connections. by @VasilSirakov in #6836
- Expose 19 security-relevant fields from existing AWS API responses by @tas50 in #6837
- ⭐ Add nginx resource by @tas50 in #6783
- ⭐ aws: add MSK and MQ resources by @tas50 in #6838
- fix: remove deprecated nfpms debian version constraint by @philipbalinov in #6840
Full Changelog: v13.0.0-rc5...v13.0.0-rc7
v13.0.0-rc6
What's Changed
- ✨ Extend Timestream InfluxDB resources with security fields by @tas50 in #6814
- 🧹 fix nmap provider examples to use cnspec commands by @atomic111 in #6817
- 🐛 Fix GOCOVERDIR leaking to mql binary in integration tests by @czunker in #6807
- ⭐ Add typed resource fields for KMS keys, VPCs, and security fields across AWS resources by @tas50 in #6816
- ⭐ Clean up python.package and add requiresPython, projectUrls fields by @tas50 in #6722
- 🧹 Fix compleatedAt typo in aws.codedeploy.deployment by @tas50 in #6819
- ✨ Add AWS Glue and Elastic Beanstalk resources by @tas50 in #6820
- Add new AWS resources and expand asset discovery by @tas50 in #6821
- ✨ Add Intune device ID detection to Windows clients by @czunker in #6686
- ⭐ Add Windows 11 client hotpatch detection by @czunker in #6787
- 🧹 v13: Remove deprecated MQL properties by @tas50 in #5893
- ⭐ use in-place engine auto-updates on windows by @arlimus in #6825
Full Changelog: v13.0.0-rc4...v13.0.0-rc6
v13.0.0-rc5
What's Changed
- ✨ Extend Timestream InfluxDB resources with security fields by @tas50 in #6814
- 🧹 fix nmap provider examples to use cnspec commands by @atomic111 in #6817
- 🐛 Fix GOCOVERDIR leaking to mql binary in integration tests by @czunker in #6807
- ⭐ Add typed resource fields for KMS keys, VPCs, and security fields across AWS resources by @tas50 in #6816
- ⭐ Clean up python.package and add requiresPython, projectUrls fields by @tas50 in #6722
- 🧹 Fix compleatedAt typo in aws.codedeploy.deployment by @tas50 in #6819
- ✨ Add AWS Glue and Elastic Beanstalk resources by @tas50 in #6820
- Add new AWS resources and expand asset discovery by @tas50 in #6821
- ✨ Add Intune device ID detection to Windows clients by @czunker in #6686
- ⭐ Add Windows 11 client hotpatch detection by @czunker in #6787
- 🧹 v13: Remove deprecated MQL properties by @tas50 in #5893
- ⭐ use in-place engine auto-updates on windows by @arlimus in #6825
Full Changelog: v13.0.0-rc4...v13.0.0-rc5
v13.0.0-rc4
What's Changed
- 🧹 Update provider dependencies by @tas50 in #6796
- ✨ Add WAF regex pattern sets, logging config, and associated resources by @tas50 in #6797
- ⭐ Add AWS Athena workgroup resource by @tas50 in #6798
- ⭐ Add AWS EventBridge resources by @tas50 in #6799
- ⭐ Add AWS Kinesis and Firehose resources by @tas50 in #6800
- ⭐ Add AWS MemoryDB resources by @tas50 in #6802
- ⭐ Add AWS Timestream for InfluxDB resources by @tas50 in #6803
- Add AWS Route 53 domain registration resource by @tas50 in #6804
- Add AWS Cognito user pool and identity pool resources by @tas50 in #6805
- ⭐ Add apache2 resource by @tas50 in #6782
- ⭐ Add AWS DocumentDB cluster and instance resources by @tas50 in #6806
- 🐛 fix auto-update check interval by @arlimus in #6810
- Extend aws.workspaces.workspace with connection status and security groups by @tas50 in #6812
- ✨ prefix the update-url if missing + better fallbacks by @arlimus in #6811
- 🧹 deactivate auto-updates of engine for windows by default by @arlimus in #6813
Full Changelog: v13.0.0-rc3...v13.0.0-rc4