Version 7.261103.0

Enhancements:

• #19449 feat(licensing): accept a Filigran license installed as the platform license

Bug Fixes:

• #19484 fix(ingestion): Improvement of JSON ingestion
• #19480 fix(client-python): files with # in their name can't be fetched or exported by pycti
• #19478 fix(schema): make the user merge scalar discovery the only source of targets
• #19475 fix(auth): harmonize redirect handling across authentication endpoints
• #19468 fix(telemetry): Prometheus metrics exporter only listens on localhost since 7.261026.0
• #19408 fix(auth): user / service account switch dropped when the password is sent first
• #19352 fix(filters): Nested filter groups are not correctly displayed in Data Sharing tables
• #19340 fix(data-sharing): clicking the live stream actions menu also opens the stream consumers drawer
• #19198 fix(frontend): Fintel PDF export turns line-height values with units (px/pt/em) into huge gaps between lines
• #19065 fix(client-python): get_config_variable() returns unconverted strings for boolean settings
• #18258 fix(drafts): validate draft context in TAXII and HTTP routes to prevent unauthorized access
• #18207 fix(schema): declare WorkflowDefinition version createdBy as a user reference
• #18206 fix(schema): declare InternalFile.metaData.creator_id as a user reference
• #18205 fix(schema): declare BackgroundTask.initiator_id as a user reference
• #18204 fix(schema): declare PublicDashboard.user_id
• #18203 fix(schema): declare NewsFeedItem.user_id as a user reference
• #18202 fix(schema): declare Connector.connector_user_id as a user reference
• #17758 fix(user): use the same token mask for logs and graphQL API
• #16784 fix(backend): one malformed playbook stops the entire playbook cron handler
• #14581 fix(playbook): stop update confidence level of an ioc when an on observable is extracted from an ioc by a playbook.
• #10633 fix(data-sharing): live stream sets status to "Unknown"

---

Pull Requests:

• chore(deps): update dependency axios to v1.21.0 by renovate[bot] in #19437
• fix(deps): update dependency react-intl to v12.1.6 by renovate[bot] in #19436
• fix(deps): update dependency jsonpath-plus to v11.2.2 by renovate[bot] in #19434
• fix(deps): update dependency openai to v7.45.1 by renovate[bot] in #19378
• fix(deps): update dependency @filigran/chatbot to v3.15.1 by renovate[bot] in #19377
• fix(deps): update dependency marked to v18.1.2 by renovate[bot] in #19374
• fix(deps): update graphql-tools monorepo by renovate[bot] in #19375
• fix(deps): update dependency react-router to v8.5.1 by renovate[bot] in #19439
• feat(licensing): accept a Filigran license pasted as the OpenCTI license (#19449) by Samuel Hassine (@SamuelHassine) in #19448
• fix(client-python): parse boolean settings strictly in get_config_variable (#19065) by Samuel Hassine (@SamuelHassine) in #19445
• fix(user): use the same token mask for logs and graphQL API (#17758) by Samuel Hassine (@SamuelHassine) in #19446
• fix(backend): isolate playbook cron errors per playbook (#16784) by Samuel Hassine (@SamuelHassine) in #19447
• fix(backend): declare Connector.connector_user_id as a user reference (#18202) by Samuel Hassine (@SamuelHassine) in #19454
• fix(data-sharing): fix display of nested filter groups and prevent line click to be triggered on button click (#19352) (#19340) by Mathieu Cartaud (@mcartaud) in #19353
• fix(backend): declare BackgroundTask.initiator_id as a user reference (#18205) by Samuel Hassine (@SamuelHassine) in #19457
• fix(backend): declare NewsFeedItem.user_id as a user reference (#18203) by Samuel Hassine (@SamuelHassine) in #19455
• fix(auth): keep the service account switch when the password comes first (#19408) by Raphael Bourgeois (@RBourgeoisGH) in #19409
• fix(backend): declare PublicDashboard.user_id as a user reference (#18204) by Samuel Hassine (@SamuelHassine) in #19456
• fix(backend): declare InternalFile metaData.creator_id as a user reference (#18206) by Samuel Hassine (@SamuelHassine) in #19458
• feat(search-engine): support Elasticsearch 9 servers with a dual Elastic client (#10729) by Olivier SOTIN (@T0t1n) in #18398
• feat(tls): add global switches for TLS certificate verification (#19009) by Marie Flores (@marieflorescontact) in #19274
• fix(backend): declare WorkflowDefinition version createdBy as a user reference (#18207) by Samuel Hassine (@SamuelHassine) in #19459
• fix(telemetry): Prometheus metrics exporter only listens on localhost since 7.261026.0 (#19468) by Sébastien Wauquier (@fellowseb) in #19471
• feat(custom-fields): enable custom fields feature (#18991) by Ludovic Bouges (@ludovic) in #19124
• fix(export): keep CSS line-height with a unit proportional in PDF exports (#19198) by Samuel Hassine (@SamuelHassine) in #19494
• fix(playbook): stop update confidence level of an ioc when an on observable is extracted from an ioc by a playbook. (#14581) by Gianpiero Bozza (@gianpierobozza) in #19472
• fix(client-python): encode the file id in fetch_opencti_file_by_id (#19480) by Samuel Hassine (@SamuelHassine) in #19508
• fix(drafts): validate draft context in TAXII and HTTP routes to prevent unauthorized access (#18258) by Florian DeLemarre (@delemaf) in #18259
• refactor(backend): make the user merge scalar discovery the only source of targets (#19478) by Ludovic Bouges (@ludovic) in #19479
• feat(ingestion): Preparation of ingestion health 1.4: health settings & check for user with wrong capa (#18305) by Archidoit in #19162
• feat(form-intake): support deferred creation of objects in form intake submissions (#18282) by Octave (@OctaveLaventure) in #19019
• feat(worfklow): Mass operation on status & playbook (#17559) by Florian DeLemarre (@delemaf) in #18838
• fix(deps): update dependency @cfworker/json-schema to v4.1.4 by renovate[bot] in #19501
• fix(deps): update dependency @langchain/core to v1.3.2 by renovate[bot] in #19440
• fix(deps): update dependency eventsource to v5.1.4 by renovate[bot] in #19450
• fix(deps): update dependency express-rate-limit to v8.7.2 by renovate[bot] in #19502
• fix(deps): update dependency jose to v6.2.14 by renovate[bot] in #19503
• fix(deps): update dependency markdown-to-jsx to v9.10.4 by renovate[bot] in #19451
• chore(deps): update pgsty/silo docker tag to release.2026-10-26t00-00-00z by renovate[bot] in #19373
• fix(deps): update dependency @filigran/chatbot to v3.16.1 by renovate[bot] in #19444
• fix(deps): update dependency @langchain/openai to v1.8.0 by renovate[bot] in #19400
• fix(deps): update dependency @opentelemetry/semantic-conventions to v1.44.0 by renovate[bot] in #19452
• fix(deps): update dependency file-type to v22.3.0 by renovate[bot] in #19506
• fix(deps): update dependency nodemailer to v10.3.1 by renovate[bot] in #19464
• fix(deps): update dependency @mui/x-date-pickers to v9.17.0 by renovate[bot] in #19505
• feat(form-intake): defer the creation of objects prepared in a form until its submission (#18283) by Octave (@OctaveLaventure) in #19020
• fix(ingestion): run JSONPath script expressions in a worker pool with a timeout (#19484) by Terry PASQUET (@tpasquet) in #19485
• fix(auth): harmonize redirect handling across authentication endpoints (#19475) by Marie Flores (@marieflorescontact) in #19516
• fix(deps): update dependency js-base64 to v3.9.5 by renovate[bot] in #19401
• fix(deps): update jsonforms monorepo to v3.9.0-alpha.2 by renovate[bot] in #19376
• fix(deps): update dependency ws to v8.22.1 by renovate[bot] in #19545
• fix(deps): update dependency otplib to v13.6.0 by renovate[bot] in #19548
• ci(backend): forbid instanceof checks on the search engine clients (#10729) by Amjed NOUIRA (@Amjed-Filigran) in #19512
• fix(deps): update graphql-tools monorepo by renovate[bot] in #19554

New Contributors:

• Gianpiero Bozza (@gianpierobozza) made their first contribution in #19472
• Amjed NOUIRA (@Amjed-Filigran) made their first contribution in #19512

Full Changelog: 7.261030.1...7.261103.0