Version 3.260805.0

Bug Fixes:

• #7157 fix(attack-path): terminal view shows default argument values instead of the real resolved command
• #7147 fix(expectations): collector-filled expectations lose their security platform association in the search index
• #7137 fix(widgets): scenario overview drill-downs (kill chain results, posture gauges) fail with a series index error
• #7129 fix(topbar): hide Ask Ariane button when XTM One is not configured
• #7122 fix(connectors): misleading 'element already exists' on migration and locked catalog-less collectors
• #7120 Windows/Linux agent scripts cannot download agent binaries in version 3.260731.0
• #7114 fix(expectations): legacy inject expectation signature types crash collectors
• #7112 fix(engine): engine sync concurrency cap permanently starves models sharing the same trigger phase
• #7100 fix(engine): documents stay stale in Elasticsearch after long transactions - indexing cursor commit-visibility race
• #5343 fix(mail-inject): WebP images embedded in email body are not rendered by recipients
• #4388 fix: custom dashboard time ranges throw Internal Server Error when end date earlier than start date

Pull Requests:

• fix(dashboards): drill security-coverage widgets into every declared series (#7137) by Samuel Hassine (@SamuelHassine) in #7138
• fix(expectations): restore security platform associations for collector-filled and asset-group expectations (#7147) by Samuel Hassine (@SamuelHassine) in #7148
• fix(chaining): show endpoint seen IP instead of full IP list on the map (#5048) by EvaE-Filigran in #7097
• fix(deps): update dependency commons-validator:commons-validator to v1.11.0 by renovate[bot] in #7133
• fix(deps): update logback monorepo to v1.6.1 by renovate[bot] in #7132
• fix(deps): update dependency @tanstack/react-virtual to v3.14.9 by renovate[bot] in #7134
• fix(deps): update dependency software.amazon.awssdk:bom to v2.50.0 by renovate[bot] in #7135
• fix(deps): update dependency react-router to v7.18.2 by renovate[bot] in #7136
• chore(deps): update yarn to v4.18.0 by renovate[bot] in #7140
• fix(deps): update dependency react-grid-layout to v2.2.4 by renovate[bot] in #7141
• fix(deps): update dependency axios to v1.19.0 by renovate[bot] in #7142
• fix(attack-path): highlight the full causal chain when clicking a finding (#7118) by Sébastien MIGUEL (@Seb-MIGUEL) in #7118
• chore(deps): update devdependencies (non-major) by renovate[bot] in #7143
• fix(inject): resolve payload argument placeholders in terminal view (#7110) by Sébastien MIGUEL (@Seb-MIGUEL) in #7110
• chore(deps): update dependency node to v22.23.2 - autoclosed by renovate[bot] in #7145
• chore(deps): lock file maintenance by renovate[bot] in #7144
• fix(chaining): Visualize Complete Dependency Chain (#6680) by Camille Roux (@camrrx) in #7104
• fix(attack-path): scope the focused view to the endpoint's real causal chain (#7152) by Sébastien MIGUEL (@Seb-MIGUEL) in #7152
• feat(executors): add #{payload_location} placeholder for payload commands (#6265) by Matt Van Horn (@mvanhorn) in #6294
• fix(queue): make BatchQueueService's internal maps thread-safe (#7116) by Sébastien MIGUEL (@Seb-MIGUEL) in #7116
• fix(deps): update dependency @xyflow/react to v12.11.0 by renovate[bot] in #6091
• fix(attack-path): resolve payload argument placeholders in the frozen terminal snapshot (#7157) by Sébastien MIGUEL (@Seb-MIGUEL) in #7158
• fix(attack-path): scope a finding's focus on itself, and stop truncating the causal walk (#7156) by Sébastien MIGUEL (@Seb-MIGUEL) in #7156
• feat(injection): verify arguments before apply (#236) by Gabriel Pezé (@gabriel-peze) in #7094
• feat(injection): fix build (#236) by Gabriel Pezé (@gabriel-peze) in #7163
• fix: remove the isfindings filter to process chained outputs (#7077) by Stephanya Casanova (@savacano28) in #7155
• fix(attack-path): stop a steady-state delta tick from wiping the live top-bar counters (#7165) by Sébastien MIGUEL (@Seb-MIGUEL) in #7165
• fix(deps): update react monorepo by renovate[bot] in #7170
• fix(deps): update dependency software.amazon.awssdk:bom to v2.50.2 by renovate[bot] in #7169
• fix(deps): update dependency react-intl to v10.1.19 by renovate[bot] in #7168
• fix(deps): update dependency @xyflow/react to v12.11.2 by renovate[bot] in #7167
• fix(attack-path): colour injector links by that injector's own worst-case status (#7162) by Sébastien MIGUEL (@Seb-MIGUEL) in #7162
• fix(chaining): add autolink by default in action inputs (#6198) by Stephanya Casanova (@savacano28) in #7124
• fix(dashboard): return 400 instead of 500 for inverted date ranges (#4388) by Romuald Lemesle (@RomuDeuxfois) in #7172
• fix(chaining): resolve dropped/duplicated combinations when mappers share a primitive type (#6926) by Murat Arslan (@mergenhan) in #7160
• fix(attack-path): fall back to the full chain when a scoped seed is collapsed (#7175) by Sébastien MIGUEL (@Seb-MIGUEL) in #7176
• fix(attack-path): make expectation table scrollable, reconstruct injector command line, paginate findings/executions (#7161) by Sébastien MIGUEL (@Seb-MIGUEL) in #7161
• feat(chaining): freeze simulation logic-map and scope once launched (#5508) by EvaE-Filigran in #7173
• fix(chaining): fix action output as "finding" on attack path map (#5048) by EvaE-Filigran in #7166
• fix(chaining): add isEnterpriseEdition true in accessControl to every chaining apis (#4435) by Hedi (@heditar) in #7089
• fix(deps): update dependency @hookform/resolvers to v5.6.0 by renovate[bot] in #7182
• fix(deps): update dependency react-hook-form to v7.84.0 by renovate[bot] in #7183

New Contributors:

• Matt Van Horn (@mvanhorn) made their first contribution in #6294

Full Changelog: 3.260731.1...3.260805.0