Version 7.260728.0

Enhancements:

• #7105 feat(spur): create external-import connector
• #7075 feat(decoupling): manifest fragments improvements and misc fixes
• #7057 feat(crowdstrike-recon): add UBI9 image build support
• #7053 feat(google-ti-feeds): parametrize sub-entities to fetch per data collection
• #7033 feat(doppel-alert-takedown): add Doppel Alert and Takedown internal enrichment connector
• #7024 feat(google-ti-feeds): add malware/threat actor association filters for Delta Sync indicator import
• #6989 feat(ransomlook): create the connector
• #6946 feat(manifest): add "License Type" metadata to characterize connector's associated feed/solution license
• #6865 feat(Zscaler): migrate connector to the catalog
• #6863 feat(ZeroFox): migrate connector to the catalog
• #6862 feat(ServiceNow): migrate connector to the catalog
• #6861 feat(SOC Prime): migrate connector to the catalog
• #6860 feat(Shodan InternetDB): migrate connector to the catalog
• #6855 feat(google-ti-feeds): Add minimum GTI score filter for Delta Sync indicator import
• #6853 feat(MalBeacon): migrate connector to the catalog
• #6771 feat(Import File STIX): migrate connector to the catalog

Bug Fixes:

• #7070 fix(taxii-post): empty token env var prevents basic auth fallback
• #6555 fix(urlscan): ignores some user configs
• #4756 fix(hatching-triage): unable to enrich URL

---

Pull Requests:

• feat(socprime): migrate connector to manager-supported mode (#6861) by @jabesq in #7049
• feat(zerofox): migrate connector to manager-supported mode (#6863) by @jabesq in #7052
• feat(shodan-internetdb): migrate connector to manager-supported mode (#6860) by @jabesq in #7048
• feat(zscaler): migrate connector to manager-supported mode (#6865) by @jabesq in #7050
• feat(google-ti-feeds): add GTI_INDICATOR_MIN_SCORE filter for Delta Sync indicators (#6855) by @jabesq in #7074
• feat(manifest-fragment): enforce enum-based fields and passthrough unmapped keys (#6928) by @jabesq in #7029
• feat(ransomlook): add RansomLook connector (#6989) by @blauwers in #7001
• feat(malbeacon): migrate connector to manager-supported mode (#6853) by @jabesq in #7051
• feat(doppel-alert-takedown): add Doppel Alert and Takedown internal enrichment connector (#7033) by @romain-filigran in #7034
• feat(servicenow): migrate connector to manager-supported mode (#6862) by @jabesq in #6997
• feat(google-ti-feeds): parametrize sub-entities to fetch per data collection (#7053) by @jabesq in #7073
• chore(connectors): bump pycti pins and misc connector fixes (#7053) by @jabesq in #7088
• chore(ci): add crowdstrike-recon to ubi9 image build support (#7057) by @jabesq in #7092
• feat(import-file-stix): migrate connector to manager_supported mode (#6771) by @helene-nguyen in #7087
• chore(deps): update dependency google-api-python-client to v2.198.0 by @renovate[bot] in #7020
• fix(deps): update dependency aiohttp to v3.14.1 [security] by @renovate[bot] in #7089
• chore(deps): update dependency requests to v2.33.0 [security] by @renovate[bot] in #7006
• chore(ci): improve bulk release visibility and manifest workflow (#7075) by @jabesq in #7082
• fix(ci): support LTS version format MAJOR.YYMMDD.PATCH-lts.N in release tooling (#6019) by @jabesq in #7103
• feat(spur): implement Spur external-import connector (#2662) by @plygrnd in #6958
• fix(hatching-triage-sandbox): handle search API errors gracefully (#4756) by @throuxel in #7081
• chore(deps): update dependency google-api-core to v2.33.0 by @renovate[bot] in #7107
• chore(deps): update actions/setup-python action to v6.3.0 by @renovate[bot] in #7106
• feat(google-ti-feeds): add malware/threat actor filter (#7024) by @throuxel in #7090
• chore(anyrun): update connector titles, descriptions and naming (#7111) by @anyrun-integrations in #7112
• fix(urlscan): honor config labels and duration_period (#6555) by @jabesq in #7091
• fix(deps): bump pytest to 9.0.3 to fix vulnerable tmpdir handling (#7109) by @throuxel in #7110
• fix(taxii-post): empty token env var prevents basic auth fallback (#7070) by @throuxel in #7071

New Contributors:

• @anyrun-integrations made their first contribution in #7112

Full Changelog: 7.260722.0...7.260728.0