2.5.1

What's Changed

Security 🚨

• fix: add authentication to audit router (GHSA-34r4-95hx-gxqr) by @sebdraven in #1276
• fix: prevent AQL injection via sorting and filter_aliases parameters by @sebdraven in #1277
• fix: prevent path traversal in ExportTask file name (GHSA-4q3w-w2g5-8wqq) by @sebdraven in #1280
• Fix path traversal in DFIQ UUID (GHSA-6xf2-8436-rgvf) by @sebdraven in #1279

Bug fixes 🐛

• fix: use correct Pydantic discriminator field name in observable endpoints by @sebdraven in #1278

Other Changes

• feat(logging): Add structured JSON logging support for console by @tomchop in #1265
• deps: bump timesketch-api-client to >=20260312 by @jkppr in #1266
• Add agentic functionalities to yeti by @tomchop in #1267
• feat(sessions): Add endpoint to retrieve a session by user and session ID by @tomchop in #1269
• Fix GitHub Actions security warnings reported by zizmor by @tomchop in #1270
• test: verify dfiq_test_data.zip cross-references stay consistent by @sebdraven in #1281
• fix: correct template_dir config key, add example export templates by @sebdraven in #1282

New Contributors

• @jkppr made their first contribution in #1266

Full Changelog: 2.5.0...2.5.1

2.5.0

What's Changed

Other Changes

• Global search by @tomchop in #1257
• Add search_multiple endpoints by @tomchop in #1258

Full Changelog: 2.4.2...2.5.0

2.4.2

What's Changed

Other Changes

• [ISSUE-1173] Add 'description' field to tags by @jeanbrand0n in #1255

New Contributors

• @jeanbrand0n made their first contribution in #1255

Full Changelog: 2.4.0...2.4.2

2.4.1

Full Changelog: 2.4.0...2.4.1

2.4.0

Warning

This release has breaking changes, see below and be careful when upgrading.

What's Changed

Breaking changes 🧨

• Tags refactor by @tomchop in #1250

New feeds

• Update OpenPhish feed URL to new GitHub location by @drego85 in #1252

New Contributors

• @drego85 made their first contribution in #1252

Full Changelog: 2.3.7...2.4.0

2.3.7

What's Changed

Enhancements 📈

• Add find endpoints by @tomchop in #1249

Other Changes

• Move to uv by @tomchop in #1246

Full Changelog: 2.3.6...2.3.7

2.3.6

What's Changed

Enhancements 📈

• Add bloom checking endpoints by @tomchop in #1243
• Only match on regexes to speed things up by @tomchop in #1244

Bug fixes 🐛

• Add some docstrings and fixes by @tomchop in #1245
• Update DFIQ yaml when saving by @tomchop in #1247

Full Changelog: 2.3.5...2.3.6

2.3.5

What's Changed

Bug fixes 🐛

• Bugfix on ACLs by @tomchop in #1242

Full Changelog: 2.3.4...2.3.5

2.3.4

What's Changed

Enhancements 📈

• Move context attributes to a mixin by @tomchop in #1232
• Yara overlays by @tomchop in #1235

Bug fixes 🐛

• Tweaks to event timeline logging by @tomchop in #1239
• Stop automatically extracting Query objects when reading DFIQ directories by @tomchop in #1240

Other Changes

• Event workers also take the --debug flag into account by @tomchop in #1234
• Fix flaky test by @tomchop in #1241

Full Changelog: 2.3.3...2.3.4

2.3.3

What's Changed

Security 🚨

• Security updates by @tomchop in #1238

Enhancements 📈

• Yara bundles & optimized validation by @tomchop in #1230
• Speed up ACL checks doing manual queries by @tomchop in #1225
• Tweak DFIQ patch endpoint to also accept objects by @tomchop in #1229

Other Changes

• Add Elastic Security feed by @Fryyyyy in #1226
• Cleanup by @tomchop in #1228
• Fix docker entrypoint & image script by @tomchop in #1233

New Contributors

• @Fryyyyy made their first contribution in #1226

Full Changelog: 2.3.1...2.3.3