4.7.4.8

Rebuild of v4.7.4.stable7 following pipelines fixes

What’s Changed

This release focuses on improving reliability, security, and day-to-day usability across Assemblyline components.

• Smoother user workflows: UI and submission flows were refined to reduce friction and visual instability.
• Improved data handling: URL/file matching and path-processing behaviors were enhanced for more accurate results.
• Security hardening: Access control and request-handling protections were strengthened.
• Platform modernization: Multiple libraries, SDKs, and runtime dependencies were updated to keep the stack current.
• Greater resilience: Service and backend safeguards were added to better handle edge cases and prevent analysis interruptions.

---

Added

• Support PE LoadConfiguration up to V11
  Added support for newer PE LoadConfiguration versions to improve parser compatibility.

Changed

• Improve path inclusion stripping
• Validate updater source name as folder
• Refactor API route for file upload from the UI to cleanup code
• Update the TLD list
• Migrate Borealis to Clue
• Enable gzip compression for local development
• Replace Popper with Menu in result cards
• Kubernetes client updates (#453)
  • assemblyline-base
  • assemblyline-core
• Update Azure SDKs to 1.0.0 and related filestore code (Discord)

Fixed

• When a URL is provided as input, use the appropriate field in the File index for matching on existing URIs
• Stop page shift on file details drawer quick close
• Minor fixes
  • Guard added on Submit By Hash button.
  • Submissions page API dependency update behavior corrected.
  • Hash-derived key handling sanitized.
  • Narrow-screen alignment fix for Executed Services button.
• Add extra checks to avoid IndexErrors
• Create temporary archive for SHA256 calculation in temp directory (Discord)
• Improve tolerance of classification-related issues that can suspend analysis

Security

• Use safer archive extraction utility
• Access cleanup
• Harden proxy resolution against SSRF and open redirects

Dependencies

• dompurify → v3.4.13 (from v3.4.0)
• vite → v6.4.3 (from v6.4.2)
• vitest → v3.2.6 (from v3.2.4)
• axios → v1.16.1 (from v1.13.2)
• devalue → v5.8.1 (from v5.3.2)