Version 3.261005.0

Enhancements:

• #8239 feat(multi-tenancy): reopen the last tenant used when coming back to the app
• #8228 chore(deps): bump @filigran/chatbot to 3.12.2
• #8208 chore(deps): bump @filigran/chatbot to 3.12.1
• #8201 feat(multitenancy): retire the activation list and make tenant isolation the default for new tables
• #8087 feat(xtm-one): grant Enterprise Edition from the verified XTM license returned by XTM One
• #8051 feat(OAEV): integrate Filigran Design System v1
• #7943 feat(multi-tenancy): TenantBaseListener fails fast on an unattributed write
• #7937 feat(multitenancy): API isolation v2 datapacks
• #7936 feat(multitenancy): API isolation v2 reporting_schedules
• #7935 feat(multitenancy): API isolation v2 attackpath_execution_remediation
• #7933 feat(multitenancy): API isolation v2 collector_types
• #7924 feat(fds): implement the Filigran Design System v1 across the platform
• #7907 feat(multitenancy): API isolation v2 vulnerability
• #7903 feat(multitenancy): API isolation v2 custom_domain
• #7901 feat(multitenancy): API isolation v2 phishing
• #7888 docs(lessons): document the lessons learned module toggle
• #7775 docs(dev): add macOS development environment guide
• #7766 feat(multi-tenancy): API isolation v2 AttackPattern
• #7505 feat(snapshot): bulk snapshot endpoints for OpenGRC
• #6768 feat(fds): wire Filigran Design System color tokens into the OpenAEV theme
• #6439 feat(multitenancy): API isolation v2 team GUser
• #6415 feat(multitenancy): API isolation v2 reportings and reporting_generations
• #5776 test(chaining): E2E automated testing
• #5508 feat(chaining): snapshot simulation result
• #6503 docs: improve the readability of how to set up OpenAEV as a connector with OpenCTI

Bug Fixes:

• #8290 fix(marking): marking capabilities shown on the role screen when the feature flag is off
• #8286 fix(settings): invalid theme colour value breaks the whole frontend
• #8278 fix(marking): invalid input in marking definitions form, numeric filters and text search
• #8235 fix(i18n): many pages and fields stay in English in every language
• #8197 fix(connectors): migrating a connector twice creates duplicated instances
• #8195 fix(integrations): manager factory lock can deadlock the API after a restart
• #8193 fix(groups): default tenant misses the Admin/Manager/Observer groups and default role capabilities
• #8134 fix(stix): lazy initialization exception in /api/stix/process-bundle
• #8011 fix(notifications): missing translation keys in Triggers filter dropdown
• #7812 [Simulation Execution] Number of Enabled Users always shows zero when opening an inject from the attack timeline

Pull Requests:

• docs(deployment): require RabbitMQ 4.3 minimum by Hedi (@heditar) in #8172
• fix(stix): re-read file drop document after payload creation clears the session (#8134) by Romuald Lemesle (@RomuDeuxfois) in #8137
• test(multi-tenancy): write-attribution detector with a frozen baseline, run in the nightly shadow (#8066) by Laurent Giovannoni (@laugiov) in #8067
• feat(multitenancy): activate the six family 1 tables on v2 isolation (#7903) by Laurent Giovannoni (@laugiov) in #8119
• feat(multi-tenancy): activate payloads and vulnerabilities in v2 (#6437) by Laurent Giovannoni (@laugiov) in #8123
• feat(multi-tenancy): activate phishing_results and fix its public token resolver (#7901) by Laurent Giovannoni (@laugiov) in #8133
• feat(multi-tenancy): activate the reporting and datapack tables in v2 (#6415) by Laurent Giovannoni (@laugiov) in #8130
• fix(ci): restore per-flag Codecov uploads so PRs get coverage reports again by Guillaume (@guillaumejparis) in #8161
• fix(integrations): bound the manager factory lock and scope it per tenant (#8195) by Romuald Lemesle (@RomuDeuxfois) in #8196
• fix(e2e): improve team addition process by handling search response and ensuring visibility by Guillaume (@guillaumejparis) in #8129
• chore(deps): bump @filigran/chatbot to 3.12.1 (#8208) by Samuel Hassine (@SamuelHassine) in #8209
• chore(ci): faster feature branch deploys with a description checkbox trigger by Guillaume (@guillaumejparis) in #8175
• chore(deps): bump @filigran/chatbot to 3.12.2 (#8228) by Samuel Hassine (@SamuelHassine) in #8229
• fix(auth): rotate the session id on login and remove the no-op logout endpoint (#318) by Romuald Lemesle (@RomuDeuxfois) in #8152
• fix(connectors): avoid duplicated instances when migrating a connector (#8197) by Romuald Lemesle (@RomuDeuxfois) in #8198
• chore(deps): update vitest monorepo to v5 by renovate[bot] in #7819
• fix(inject): group the inject results search by payload type (#6437) by Romuald Lemesle (@RomuDeuxfois) in #8230
• feat(marking): only display highest marking (#7635) by corinnekrych (@corinnekrych) in #8149
• feat(settings): expose the build commit in the platform settings (#8231) by Romuald Lemesle (@RomuDeuxfois) in #8232
• fix(payload): stop flagging payloads with expected security platforms as dirty on load (#6437) by Romuald Lemesle (@RomuDeuxfois) in #8236
• feat(marking): Task.3 US.1 - Assign a marking to an asset (#8030) by Johanah LEKEU (@johanah29) in #8177
• chore(fds): design system migration — running status against main (#7924) by Sandy Ghs (@sandyghs) in #7919
• ci(fds): run the design system gates inside the core pipeline (#7924) by Guillaume (@guillaumejparis) in #8243
• refactor(multi-tenancy): attribute team writes and read teams from the request scope (#6439) by Laurent Giovannoni (@laugiov) in #8212
• feat(api): flexible and configurable rate limiting (#289) by antoinemzs in #7983
• test(multi-tenancy): fail the build when a strict tenant table is neither isolated nor deferred (#8201) by Laurent Giovannoni (@laugiov) in #8203
• feat(multi-tenancy): activate the attack_patterns table in v2 (#7766) by Laurent Giovannoni (@laugiov) in #8207
• fix(design-system): keep the MUI date-pick behaviour in DateField and store scheduling dates at UTC midnight (#7924) by Yann (@impolitepanda) in #8247
• revert(api): flexible and configurable rate limiting (pvt/#289) by antoinemzs in #8249
• feat(settings): show the build commit in the version tooltip by Guillaume (@guillaumejparis) in #8241
• feat(xtm-one): grant Enterprise Edition from the verified XTM license… by Samuel Hassine (@SamuelHassine) in #8275
• fix(marking): invalid input in marking definitions form, numeric filters and text search (#8278) by Romuald Lemesle (@RomuDeuxfois) in #8279
• fix(deps): update dependency com.rabbitmq:amqp-client to v5.37.0 by renovate[bot] in #8277
• chore(deps): update dependency aquasecurity/trivy to v0.75.0 by renovate[bot] in #8276
• chore(deps): update opensearchproject/opensearch docker tag to v3.9.0 by renovate[bot] in #8254
• chore(deps): update devdependencies (non-major) by renovate[bot] in #8266
• chore(deps): update dependency org.mock-server:mockserver-netty to v8 by renovate[bot] in #8042
• fix(deps): update dependency react-hook-form to v7.89.0 by renovate[bot] in #8269
• chore(deps): update dependency ch.qos.logback:logback-classic to v1.6.5 by renovate[bot] in #8263
• fix(deps): update dependency org.apache.commons:commons-lang3 to v3.21.0 by renovate[bot] in #8268
• chore(deps): lock file maintenance by renovate[bot] in #8270
• fix(deps): update build and test tooling (non-major) by renovate[bot] in #8265
• fix(multi-tenancy): refacto organizations (#300) by Gaetan Santucci (@GaetanSantucci) in #8002
• fix(design-system): small follow-up fixes after the design system migration (#7924) by Guillaume (@guillaumejparis) in #8246
• fix(i18n): translate remaining UI strings and enforce translation quality checks (#8235) by EvaE-Filigran in #8281
• fix(simulation): show enabled users when opening an inject from the attack timeline (#7812) by Romuald Lemesle (@RomuDeuxfois) in #8248
• feat(multi-tenancy): reopen the last tenant used when coming back to the app (#8239) by Romuald Lemesle (@RomuDeuxfois) in #8240
• fix(front): add missing i18n keys for notification trigger filter labels (#8011) by Michael (@theluckystrike) in #8116
• feat(snapshot): bulk snapshot endpoints for OpenGRC (#7505) by Alexandre Gaspard (@alexgaspard) in #7535
• docs(dev): add macOS development environment guide (#7775) by 2n1u0 (@lopezi) in #7776
• fix(expectations): settle detection and prevention as soon as one security platform succeeds (#8178) by Romuald Lemesle (@RomuDeuxfois) in #8178
• docs(lessons): document the lessons learned module toggle (#7888) by Denise (@DeniseMonreale) in #7889
• docs(usage): improve OpenCTI connector setup steps (#6503) by Abdullah (@AzazelSensei) in #8014
• feat(marking): Task.2 US.0 implement ASSIGN_MARKING capability chain (#8025) by Johanah LEKEU (@johanah29) in #8233
• fix(i18n): translate secondary domain tooltips and complete backend error message keys (#8235) by EvaE-Filigran in #8289
• feat(multi-tenancy): align default tenant groups with new tenant groups (#8193) by corinnekrych (@corinnekrych) in #8194
• fix(chaining): pause chaining simulation by EvaE-Filigran in #8163
• refactor(chaining): refactor workflow state storage - data layer (#6287) by Yann (@impolitepanda) in #7840
• fix(marking): marking capabilities shown on the role screen when the feature flag is off (#8290) by Romuald Lemesle (@RomuDeuxfois) in #8291
• fix(settings): invalid theme colour value breaks the whole frontend (#8286) by Guillaume (@guillaumejparis) in #8287
• fix(front): lessons learned email key didn't match Lessons.tsx by Michael (@theluckystrike) in #8258
• fix(deps): update back-end production dependencies (non-major) by renovate[bot] in #8267
• chore(deps): manage the version of a MinIO client transitive dependency (#8282) by Romuald Lemesle (@RomuDeuxfois) in #8283
• fix(marking): marking definitions menu entry uses the roles icon (#8300) by Romuald Lemesle (@RomuDeuxfois) in #8301

New Contributors:

• Michael (@theluckystrike) made their first contribution in #8116
• Alexandre Gaspard (@alexgaspard) made their first contribution in #7535
• 2n1u0 (@lopezi) made their first contribution in #7776
• Denise (@DeniseMonreale) made their first contribution in #7889

Full Changelog: 3.261001.0...3.261005.0