Version 7.260309.0-lts.6
Critical & security fixes:
- #16565 fix(docker): new alpine version is not compatible with Dockerfile, pin alpine version
- #16900 fix(bug): improve KNOWLEDGE_KNUPDATE capability
- #16383 fix(playbook): enrichment step does not work for indicators
- #15868 Improve automatic enrichment on creation or update of elements
- #16731 fix(client-python): upgrade starlette to >=1.3.0 to fix CVE-2026-54282
- #17039 fix(lts): when starting a new LTS platform, platform id should be displayed to facilitate license request
- #16705 feat(backend): EJS templating improvements
- #16929 feat(json mapper): improve json mapper extraction regexp
Direct security updates (#17025):
- axios updated from 1.16.1 to 1.18.0
- dompurify updated from 3.4.1 to 3.4.11
- graphiql updated from 5.2.2 to 5.2.4
- react-router-dom updated from 6.30.3 to 6.30.4
- nodemailer updated from 8.0.5 to 9.0.1
- ws updated from 8.20.1 to 8.21.0
- fastapi (client-python) updated from >=0.115.2 to >=0.133.0
- starlette (client-python) pinned to >=1.3.0
Indirect (transient) security updates:
- @graphiql/plugin-doc-explorer updated from 0.4.1 to 0.4.2
- @graphiql/plugin-history updated from 0.4.1 to 0.4.2
- @graphiql/react updated from 0.37.3 to 0.37.7
- @graphiql/toolkit updated from 0.11.3 to 0.12.1
- @remix-run/router updated from 1.23.2 to 1.23.3
- brace-expansion updated from 1.1.13 to 1.1.15
- brace-expansion updated from 2.0.3 to 2.1.1
- brace-expansion updated from 5.0.5 to 5.0.7
- brace-expansion updated from 5.0.6 to 5.0.7
- fast-uri updated from 3.1.2 to 3.1.3
- form-data updated from 4.0.5 to 4.0.6
- graphql-language-service updated from 5.5.0 to 5.5.2
- linkify-it updated from 5.0.0 to 5.0.2
- lodash-es updated from 4.17.23 to 4.18.1
- markdown-it updated from 14.1.1 to 14.3.0
- monaco-graphql updated from 1.7.3 to 1.8.0
- react-router updated from 6.30.3 to 6.30.4
Pull Requests:
- ci: use conventional PRs conventions (#16433) by @mcartaud in #16738
- fix(dockerfile): pin node22 alpine version to 3.23 (#16565) by @mcartaud in #16740
- fix(backend): remove comments before template validation (#16705) by @mcartaud in #16737
- fix(bug): improve KNOWLEDGE_KNUPDATE capability (#16879) by @SarahBocognano in #16904
- fix(playbook): enrichment step does not work for indicators (#16383) by @SouadHadjiat in #16622
- feat(backend): improve automatic enrichment on element creation or update (#15868) by @SouadHadjiat in #16621
- feat(json-mapper): improve extractWithRegexp (#16929) by @OctaveLaventure in #16954
- chore(deps): update LTS dependencies (#17025) by @aHenryJard in #17029
- fix(lts): add missing platform id in LTS license agreement dialog (#17039) by @labo-flg in #17054
Full Changelog: 7.260309.0-lts.5...7.260309.0-lts.6