Version 7.260828.0

Enhancements:

• #7425 feat(misp): create UBI9 base image for MISP external import connector
• #7386 feat(connectors-sdk): add System model
• #7334 [AssetNote] Create UBI9 image of AssetNote connector
• #7260 feat(ci): add Renovate rule for grouped pycti version bumps
• #7224 feat(export-file-csv): migrate connector to the catalog

Bug Fixes:

• #7414 fix(proofpoint-et-intelligence): enrichment crashes on a country code pycountry cannot resolve
• #7392 fix(cpe): an API failure is swallowed at DEBUG level and the run is still reported as successful
• #7390 fix(virustotal): URL enrichment fails entirely when VirusTotal reports an empty last_serving_ip_address relationship
• #7360 fix(google-dtm): alerts lose their alert.md attachment when an optional field is absent
• #7357 fix(shodan): the whole enrichment fails when Shodan returns no geolocation for an IP
• #7265 fix(microsoft-sentinel-incidents): surface Azure AD OAuth errors instead of KeyError
• #7200 fix(Alienvault): default docker compose file missing "Z" timestamp
• #7003 fix(recorded-future): Report creator is incorrectly added to Report object_refs
• #6880 fix(email-intel-imap): plain text email body renders as a single unbroken block (newlines lost) in report content
• #6351 fix(misp): fails when Sighting.Organisation is a list instead of an object

---

Pull Requests:

• fix(misp): correct Sighting.Organisation list handling (#6351) by Sai Asish Y (@SAY-5) in #6352
• chore(renovate): reconfigure pycti priority rule (#7260) by Hugo Dupras (@jabesq) in #7364
• chore(deps): update pre-commit hook psf/black-pre-commit-mirror to v26.5.1 by renovate[bot] in #7384
• fix(deps): update dependency black to v26.5.1 by renovate[bot] in #7375
• chore(deps): update dependency pillow to v12.3.0 [security] - abandoned by renovate[bot] in #7329
• fix(deps): update dependency mypy to ~=1.20.2 by renovate[bot] in #7376
• fix(deps): update dependency pre-commit to ~=4.6.2 by renovate[bot] in #7377
• fix(deps): update dependency pytest-order to ~=1.5.0 by renovate[bot] in #7379
• chore(deps): update astral-sh/setup-uv action to v10 by renovate[bot] in #7371
• chore(deps): update actions/checkout action to v7.0.1 by renovate[bot] in #7368
• feat(connectors-sdk): add System model (#7386) by Helene Nguyen (@helene-nguyen) in #7387
• chore(deps): update toshimaru/auto-author-assign action to v2.1.2 by renovate[bot] in #7366
• chore(deps): update dependency pylint to v4 by renovate[bot] in #7385
• chore(deps): update docker/setup-buildx-action action to v4.3.0 by renovate[bot] in #7383
• chore(deps): update docker/metadata-action action to v6.2.0 by renovate[bot] in #7382
• chore(deps): update docker/login-action action to v4.6.0 by renovate[bot] in #7381
• fix(virustotal): handle empty last_serving_ip_address relationship (#7390) by Romain GUIGNARD (@romain-filigran) in #7391
• fix(google-dtm): guard optional fields when building the alert content (#7360) by Romain GUIGNARD (@romain-filigran) in #7361
• fix(cpe): report API failures instead of swallowing them (#7392) by Romain GUIGNARD (@romain-filigran) in #7394
• chore(deps): update dependency greynoise to v3.1.0 by renovate[bot] in #7116
• chore(deps): update dependency censys-platform to ~=0.16.0 by renovate[bot] in #7328
• chore(build): add assetnote-import to ubi9 image build support (#7334) by Nicolas Carenton (@ncarenton) in #7396
• fix(deps): upgrade astroid to be compatible with pylint (#1153) by Hugo Dupras (@jabesq) in #7399
• fix(recordedfuture): report creator is no longer added to Report object_refs (#7003) by Romain GUIGNARD (@romain-filigran) in #7333
• fix(deps): update dependency pytest to v9.1.1 by renovate[bot] in #7378
• chore(connectors-sdk): remove deprecated OCTI models module (#7196) by Pauline Eustachy (@Powlinett) in #7197
• fix(shodan): build only the locations returned by the API (#7357) by Romain GUIGNARD (@romain-filigran) in #7358
• chore(deps): update dependency assemblyline-client to v4.10.1 by renovate[bot] in #7418
• fix(deps): update dependency ruff to v0.16.4 by renovate[bot] in #7380
• feat(export-file-csv): migrate connector to manager-supported mode (#7224) by Hugo Dupras (@jabesq) in #7338
• fix(microsoft-sentinel-incidents): check OAuth token response status (#7265) by Romain GUIGNARD (@romain-filigran) in #7266
• feat(misp): create UBI9 base image for MISP external import (#7425) by Nicolas Carenton (@ncarenton) in #7428
• fix(proofpoint-et-intelligence): stop crashing on an unresolvable country code (#7414) by Romain GUIGNARD (@romain-filigran) in #7415
• fix(alienvault): default docker compose file missing "Z" timestamp (#7200) by Hugo Dupras (@jabesq) in #7411
• fix(email-intel-imap): preserve line breaks in plain text email content (#6880) by yunono (@yunono-filg) in #7173
• feat(release): add force option to delete/recreate dangling tags and releases (#7119) by Hugo Dupras (@jabesq) in #7350
• fix(manifest-fragment): derive min_version from the pinned pycti version (#7119) by Hugo Dupras (@jabesq) in #7351
• fix(composer): allow null license_type and subscription_link in manifest schema (#7119) by Hugo Dupras (@jabesq) in #7388

Full Changelog: 7.260824.0...7.260828.0