Version 3.260731.0

Enhancements:

• #6983 feat(reporting): full-fledged reporting module and platform enhancements
• #6952 feat(platform): recurring atomic testing, filter negation, channel redesign, clean bootstrap and UX consistency wave
• #6938 feat(catalog): display the catalog connector container version on the integration detail page
• #6848 feat(platform): restore simulation execution and batch overview, lessons and catalog fixes
• #6808 feat: continue platform deep UX improvements and add expectation security platform foundation
• #6734 [XTMHub]🎯 Connect to Hub from OpenAEV Design
• #6470 [Multi-Tenancy] - Enhance the tenant switcher
• #6399 feat(multitenancy): API isolation v2 collector GCatalog
• #6284 [Multi-Tenancy] Share Instance name ( tenant name ) with openCTI for security coverage results.
• #6164 US.6-T.1 -> [Audit Logging Token lifecycle audit logging
• #5793 US.8 -> Critical Log Write Failure — Stack Halt
• #5705 US.6 -> [Audit Logging][SessionId] Expired session event
• #5484 US.3-T.1 -> [Audit Logging][Transport Abstraction] Create AuditTransport interface + AuditTransportDispatcher + LogAppenderTransport
• #5483 US.1-T.4 -> [Audit Logging][Collection: Auth] Login/logout/SSO auth event hooks + tests
• #5480 US.1-T.1 -> [Audit Logging][Collection: CRUD] Core AOP aspect + AuditLogService refactoring
• #3496 fix: payload not loading and inject stuck in pending after Docker deployment on new instance

Bug Fixes:

• #7063 fix(api): injector-registered security platforms (Nuclei) stay editable while the injector is live
• #7054 fix(security-coverage): duplicate security_coverages rows break STIX bundle processing (NonUniqueResultException)
• #7050 fix(api): throttle post-migration full reindex to prevent DB pool exhaustion
• #7048 fix(api): assets demoted by the taxonomy remodel are uneditable (404) and missing from inject target selection
• #7040 fix(expectations): asset results view still displays the expiration manager entry on vulnerability expectations answered by a scanner
• #7027 fix(api): inject global score shows PARTIAL instead of FAILED when an asset group expectation with all-assets validation mode fails
• #7025 fix(api): collector-managed security platforms are always deletable since collectors v2 tenant activation
• #7022 fix(expectations): expiration manager stamps redundant or contradictory results on vulnerability expectations already answered by a scanner
• #6997 fix: real-time inject updates, expectation verdicts, tenant scoping, findings visibility and vulnerability UI fixes
• #6961 fix(expectations): AI defense feed hands endpoint parent expectations to mismatched collectors, clobbering agent verdicts
• #6868 fix(streaming): avoid HikariCP pool exhaustion from per-event permission checks
• #6820 fix(scenario): adding injects to scenario (new, existing) from the threat arsenal page does not carry default expectations over
• #6817 fix(rbac): threat arsenal seems not to be on the manager default role
• #6778 fix(api): collector upserts restream unchanged entities and flood the event stream
• #6710 fix(ui,docs): block broken macOS session/service-user agent install modes + update docs
• #6337 fix(threat-library): column status is misaligned
• #6336 fix(ui): when all entries in a burger are disabled, the burger itself should be disabled, to avoid misleading the user
• #5805 fix: CSV export fails for users with Asset role
• #5701 fix: unknown error when opening "Manage Grants" on any group in Settings → Security → Groups
• #3469 fix: top margin of player creation form does not respect 20px for the first field
• #3460 fix: results in the atomic testing header are misaligned and misplaced
• #3415 fix: documents uploaded for injects/collectors icons should not be shown or deletable

Pull Requests:

• fix(docs): add warning to ensure base url can be resolved from endpoints (#3496) by @antoinemzs in #6919
• fix(deps): update dependency @hookform/resolvers to v5.5.7 by @renovate[bot] in #7065
• fix(linter): review linter issues and package command (#5720) by @gabriel-peze in #7072
• feat(attack-path): add a native complex file finding type (#6647) by @Seb-MIGUEL in #7016
• fix(attack-path): draw causal edges for complex findings via backend-resolved matchedFindingIds (#6647) by @Seb-MIGUEL in #7038
• feat(chaining): allow linking inputs to many primitive types (#6198) by @savacano28 in #6901
• fix(chaining): keep scope configuration in sync with streamed workflow updates (#4824) by @savacano28 with @Copilot in #6743
• fix(chaining): scope variables is not working by @mergenhan in #7062
• test(chaining): prove engine reads/writes enforce simulation grant (#6357) by @laugiov in #7076
• fix(chaining): expand subnets to be used as inputs in chaining scenarios (#4824) by @savacano28 in #7010
• fix(dashboard): make widget totals and their drill-downs read one definition (#7079) by @SamuelHassine in #7080
• feat(chaining): add action output type for output parsers (#7075) by @savacano28 in #7061
• fix(inject): tenant-scope the batched execution-callback consumer (#6357) by @laugiov in #7085
• test(chaining): guard @accesscontrol on every chaining endpoint (#6357) by @laugiov in #7086
• feat(chaining): create action from event (#7073) by @camrrx in #7074
• fix(chaining): payload steps without a condition mapper only ran once for a single asset by @mergenhan in #7084
• fix(api): lock injector-registered security platforms while the injector lives (#7063) by @SamuelHassine in #7064
• feat(attack-path): live graph updates, paged panel reads and real platform attribution (#6647) by @Seb-MIGUEL in #6996
• fix(deps): update dependency software.amazon.awssdk:bom to v2.49.4 by @renovate[bot] in #7090
• chore(deps): update dependency com.diffplug.spotless:spotless-maven-plugin to v3.9.0 by @renovate[bot] in #7091
• feat(attack-path): snapshot detection remediations at step execution (#6963) by @EvaE-Filigran in #7053
• feat(chaining): attack-path add collector result (#6965) by @EvaE-Filigran in #7036
• feat(crowdstrike): add trace on failed api post call (#3029) by @gabriel-peze in #7083
• fix(chaining): mask sensitive scope variable values in scope UI (#4824) by @savacano28 with @Copilot in #7069
• fix(chaining): dropdown list should be user friendly (OpenAEV-Platform/filigran-private#238) by @mergenhan in #7088
• fix(connectors): prevent managed entity mutation in connector read paths (#7092) by @SamuelHassine in #7093

New Contributors:

• @mergenhan made their first contribution in #7062

Full Changelog: 3.260729.0...3.260731.0