Merge pull request #1139 from owasp-noir/release/v0.29.0

release v0.29.0

Author: hahwul

CHANGELOG.md

@@ -2,6 +2,38 @@
 
 All notable changes to [Noir](https://github.com/owasp-noir/noir) will be documented in this file.
 
+## v0.29.0
+
+### Added
+- Salvo (Rust) framework support
+- Hono (Node.js) framework support
+- Nitro.js framework support
+- httprouter (Go) framework support
+- GoFrame (Go) framework support
+- gRPC specification analyzer and detector
+- Cross-file route analysis for Go analyzers
+- Kemal namespace and mount routing support
+- `NOIR_PARSER_MAX_DEPTH` environment variable to cap import-following depth
+- Framework auth taggers
+- Framework taggers
+
+### Changed
+- Improved scan performance with buffered channels, optimized file handling, and parallel taggers
+- Refactored Go framework analyzers for clarity, consistency, and reduced duplication
+- Improved detector coverage and reduced false positives
+- Tightened Symfony detector heuristics
+- Refined JSP XML detection
+- Used `sarif.cr` library for SARIF output
+- Upgraded snapcraft base to core24
+
+### Fixed
+- Fixed `--only-techs` to accept canonical tech keys
+- Fixed floating point exception when `ai_max_token` is 0
+- Fixed JS parser false-positive routes from HTTP client calls and nested expressions
+- Fixed Kotlin Spring flaky test caused by non-deterministic `Dir.glob` ordering
+- Fixed cross-file group resolution bugs in Go analyzers
+- Fixed Chi mounted router parameter extraction
+
 ## v0.28.0
 
 ### Added

Dockerfile

@@ -21,7 +21,7 @@ RUN apt-get update && \
 ##= RUNNER =##
 FROM debian:13-slim
 LABEL org.opencontainers.image.title="OWASP Noir"
-LABEL org.opencontainers.image.version="0.28.0"
+LABEL org.opencontainers.image.version="0.29.0"
 LABEL org.opencontainers.image.description="Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface."
 LABEL org.opencontainers.image.authors="Noir Team (@hahwul, @ksg97031)"
 LABEL org.opencontainers.image.source=https://github.com/owasp-noir/noir

docs/content/_index.ko.md

@@ -7,7 +7,7 @@ template = "landing"
   <div class="hero-split">
     <div class="hero-text">
       <div class="hero-eyebrow">
-        <span class="hero-badge">v0.28.0</span>
+        <span class="hero-badge">v0.29.0</span>
         <span class="hero-badge hero-badge-owasp">OWASP Project</span>
       </div>
       <h1 class="hero-title">

docs/content/_index.md

@@ -7,7 +7,7 @@ template = "landing"
   <div class="hero-split">
     <div class="hero-text">
       <div class="hero-eyebrow">
-        <span class="hero-badge">v0.28.0</span>
+        <span class="hero-badge">v0.29.0</span>
         <span class="hero-badge hero-badge-owasp">OWASP Project</span>
       </div>
       <h1 class="hero-title">

docs/content/development/how_to_release/index.ko.md

@@ -45,7 +45,7 @@ sort_by = "weight"
 
     ```bash
     brew bump-formula-pr --strict --version <VERSION> noir
-    # 예: brew bump-formula-pr --strict --version 0.28.0 noir
+    # 예: brew bump-formula-pr --strict --version 0.29.0 noir
     ```
 
 3.  **스타일 확인** (선택사항):

docs/content/development/how_to_release/index.md

@@ -45,7 +45,7 @@ Submit a PR to `homebrew-core`:
 
     ```bash
     brew bump-formula-pr --strict --version <VERSION> noir
-    # Example: brew bump-formula-pr --strict --version 0.28.0 noir
+    # Example: brew bump-formula-pr --strict --version 0.29.0 noir
     ```
 
 3.  **Style Check** (Optional):

flake.nix

@@ -33,7 +33,7 @@
 
         noir = pkgs.crystal.buildCrystalPackage rec {
           pname = "noir";
-          version = "0.28.0";
+          version = "0.29.0";
 
           src = ./.;
 

github-action/Dockerfile

@@ -1,5 +1,5 @@
 # Use the OWASP Noir base image from GitHub Container Registry
-FROM ghcr.io/owasp-noir/noir:v0.28.0
+FROM ghcr.io/owasp-noir/noir:v0.29.0
 
 # Install jq for JSON processing
 USER 0

github-action/README.md

@@ -26,7 +26,7 @@ jobs:
 
       - name: Run OWASP Noir
         id: noir
-        uses: owasp-noir/noir@v0.28.0
+        uses: owasp-noir/noir@v0.29.0
         with:
           base_path: '.'
 
@@ -48,7 +48,7 @@ jobs:
 
       - name: Run OWASP Noir with Passive Scanning
         id: noir
-        uses: owasp-noir/noir@v0.28.0
+        uses: owasp-noir/noir@v0.29.0
         with:
           base_path: 'src'
           format: 'json'
@@ -117,7 +117,7 @@ For a complete list, run: `noir --list-techs`
 ### Ruby on Rails
 
 ```yaml
-- uses: owasp-noir/noir@v0.28.0
+- uses: owasp-noir/noir@v0.29.0
   with:
     base_path: '.'
     techs: 'rails'
@@ -127,7 +127,7 @@ For a complete list, run: `noir --list-techs`
 ### Node.js/Express
 
 ```yaml
-- uses: owasp-noir/noir@v0.28.0
+- uses: owasp-noir/noir@v0.29.0
   with:
     base_path: 'src'
     techs: 'express'
@@ -137,7 +137,7 @@ For a complete list, run: `noir --list-techs`
 ### Python/Django
 
 ```yaml
-- uses: owasp-noir/noir@v0.28.0
+- uses: owasp-noir/noir@v0.29.0
   with:
     base_path: '.'
     techs: 'django'
@@ -166,7 +166,7 @@ For a complete list, run: `noir --list-techs`
 Enable debug output for troubleshooting:
 
 ```yaml
-- uses: owasp-noir/noir@v0.28.0
+- uses: owasp-noir/noir@v0.29.0
   with:
     base_path: '.'
     debug: 'true'

shard.yml

@@ -1,6 +1,6 @@
 # Project Metadata
 name: noir
-version: 0.28.0
+version: 0.29.0
 authors:
   - hahwul <hahwul@gmail.com>
   - ksg97031 <ksg97031@gmail.com>