12.0.27

🐛 Release Notes

• fix(discovery): let a discovery scan run ICMP-only, without SNMP credentials
  • PR: #3463

🐛 Fixes

• fix(discovery): let a discovery scan run ICMP-only, without SNMP credentials
  • PR: #3463

Changes

• feat(llm): attribute AI spend to employees and ingest coding-agent telemetry natively
  • PR: #3422
• feat(chart): support extraEnv and extraVolumes/extraVolumeMounts on every service
  • PR: #3426
• fix: harden Slack request verification
  • PR: #3428
• feat(ssrf): let self-hosted instances allow private-network webhooks
  • PR: #3427
• fix(monitor): a second breaching host gets its own alert instead of being silenced
  • PR: #3429
• feat(network-device): auto-provision monitors from import rules
  • PR: #3436
• fix(telemetry): make attribute wildcard search actually work, across every signal
  • PR: #3430
• fix(teams): stop steering self-hosted admins into installing the wrong app
  • PR: #3438
• perf(network): count the fleet in Postgres, and batch the ingest write path
  • PR: #3441
• Network Map: calm the map's ink instead of hiding its lines (#3432)
  • PR: #3439
• feat(network-topology): add an unmanaged neighbour to monitoring from the map
  • PR: #3442
• fix(security-events): stop the connector loops dying inside their own catch blocks
  • PR: #3437
• test(network): let the discovery-scan tests describe the lookup as it is now
  • PR: #3443
• feat(network): site rollup policy, daily uptime, and maintenance windows
  • PR: #3440
• test(network-site): make the service stubs prove they match the route
  • PR: #3449
• fix(discovery): give the scan target a column again, not just a filter (#3446)
  • PR: #3451
• fix(network-device): give a ping-only imported device something that reports on it (#3447)
  • PR: #3453
• fix(ai): enforce the project enableAi kill switch on the five "Generate with AI" endpoints
  • PR: #3450
• fix(terraform-provider): recover from the "column does not exist" select rejection
  • PR: #3454
• fix(enterprise-license): create a licence instead of answering Server Error
  • PR: #3456
• fix(ai): move the enableAi kill switch inside executeWithLogging
  • PR: #3461
• Add STIX/TAXII threat-intel feeds and IOC enrichment to Security Events
  • PR: #3455
• fix(network-discovery): let a discovery scan's settings be edited after creation
  • PR: #3462
• fix(ci): unbreak master's compile, build and lint
  • PR: #3460
• Fix the acknowledge page's broken logo and give it alert context
  • PR: #3464
• fix(2fa): make the MFA recovery path exist, on the web and on mobile (#3382)
  • PR: #3467
• fix(workspace-notifications): wire the On-Call Duty Policy rule conditions
  • PR: #3465
• perf(ci): shard Common tests across eight jobs
  • PR: #3471
• Source map support: unminify browser exception stack traces
  • PR: #3472
• perf(ci): avoid duplicate feature branch workflows
  • PR: #3473
• feat(inventory): activity feeds for infrastructure and catalog resources
  • PR: #3475
• Let one discovery scan try several SNMP credential sets
  • PR: #3476
• docs(integrations): document connecting Jira and Microsoft Dynamics 365 to workflows
  • PR: #3474