Releases: SEGARK-oficial/CentralOps
Releases · SEGARK-oficial/CentralOps
Release list
v2.4.0
2.4.0 (2026-07-25)
Features
- frontend: redesign do console alinhado ao site comercial (ce5693a)
- frontend: redesign do console alinhado ao site comercial (554ddc6)
Bug Fixes
- 2.3.0 pendura o boot na migração — self-deadlock por segunda conexão (ba11ebd)
- config: tira o placeholder "Sua Empresa" dos defaults de deploy (31208cb)
- db: não abrir segunda conexão dentro da transação de migração (e88d09d)
- deploy: plumbar APP_DB_MIGRATION_LOCK_TIMEOUT_MS até o container (5bbadd0)
- flow: ponto de status deixa de ser desenhado por cima do nome do nó (eebbc7d)
- flow: ponto de status deixa de ser desenhado por cima do nome do nó (1e53491)
- frontend: liga o reservoir, conserta as URLs de docs e para de apagar raw_reduction (8ffebaf)
v2.3.0
2.3.0 (2026-07-24)
Features
- api: expor filtro de coleta e atraso real na API (d22da15)
- brand: dar identidade própria ao CentralOps e corrigir o que os docs quebravam (a3d84ae)
- capture: exportar eventos capturados em CSV/NDJSON com streaming (bcdbb44)
- capture: rota estruturada no desfecho e antes/depois no inspetor (6ba9b29)
- collect: filtro de coleta declarado pelo plugin, por integração (a7e6e10)
- dedupe: TTL em segundos (piso 4h) e fórmula de capacidade do Redis (b829856)
- destinations: campo de preço por GB (FinOps) na UI do destino (acc3bbe)
- filtro de coleta plugin-driven, trava de ciclo e medição do atraso real (bf1d3aa)
- helm: expor as flags de PII, redução, metering e drift no chart (492c7bb)
- mappings: podar o raw nos seeds — drop dos blobs Sophos e drop_nulls (d3d2616)
- metering: decompor bytes_saved por causa e sinalizar mistura de unidades (1a585c9)
- reduction: primitiva de drop do raw + Route.drop_raw, e o bug que apagava raw_reduction a cada edição (7ad8a10)
- reduction: primitiva de drop no raw_reduction (drop/keep_only/drop_nulls) (3418799)
- routes-ui: expor "descartar raw" no formulário de rota (17dfc90)
- routing: Route.drop_raw — descartar o bloco raw por destino (2546781)
- ui: configurar o filtro de coleta e distinguir os dois atrasos (45b56b0)
Bug Fixes
- capture: scrubbar segredos embutidos em valores no ring de captura (6578601)
- collect: trava por (integração, stream) e medição do atraso real (a52de5c)
- config-bundle: preservar drop_raw no round-trip de exportação (96e263e)
- destinations: não exibir o bucket parcial como se fosse a taxa do destino (416e8e7)
- drift-ui: tornar drift sem mapping filtrável e não engolir erro de carga (0a906e1)
- drift,capture,metering: detecção por path, captura com rota/antes-depois/export e metering honesto (71aae41)
- drift,dedupe: escopo subtree em drift/samples e TTL de dedupe em horas (piso 4h) (ab33027)
- drift,mappings: escopo subtree-aware em drift, discover-fields e samples (ff4a1f7)
- drift: detectar campos por PATH, não por chave de topo (4c295b1)
- drift: mascarar o valor de amostra persistido (PII fail-closed) (42976ba)
- drift: upsert atômico e fail-closed em organização nula (cf66dff)
- flow: creditar volume da fonte no minuto real, não no fim do ciclo (a92a547)
- flow: parar de recalcular a redução e rotular as bases de medição do card (f801b51)
- mappings: parar de apagar raw_reduction a cada edição de mapping (22ee873)
- observability: gravar a latência de entrega real (a série era sempre vazia) (afc3434)
- routes-ui: corrigir textos da UI que descreviam o produto errado (e4bedba)
- routes: escopo de rotas subtree-aware, alinhado com fontes e integrações (0b2d2fb)
- routes: revalidar condição e chave de supressão ao restaurar versão (d6f0096)
- routes: validar suppress_key com a mesma allowlist da condition (34f719f)
- routing: corrigir aviso que dizia alavancas de redução desligadas por padrão (2d45e18)
- routing: não carimbar sample_rate em rota protegida (3b00539)
- suppress,routes,observability: supressão que descartava tudo, latência nunca gravada e contadores do /flow inflados (cb8c0c8)
- suppress: não descartar tráfego com assinatura degenerada nem em rota protegida (159f8d4)
v2.2.0
2.2.0 (2026-07-19)
Features
- auth: add correlation.preview, never granted to read-only roles (925e971)
- capture: record every event outcome, not just successful deliveries (d6136e9)
- i18n: add the correlation namespace in pt, en and es (253fc56)
- inflight: classify events in the pipeline, before they reach the SIEM (428e337)
- inflight: preview a rule against real samples without persisting anything (184efd9)
- observability: per-rule 24h counters, which the 3h TTL made impossible (66ab079)
- routes: expose the volume-reduction levers end to end (fcf6044)
Bug Fixes
- capture-ui: align the outcome vocabulary with the backend enum (9104a60)
- contract: expose eval_mode to the client and name inflight as a Detection source (4c7f0f8)
- correlation: normalise timestamps to UTC and fail closed on a broken where (440a69e)
- dedupe: cut the TTL to 1 day, unify its default, and surface Redis eviction (ddaf54d)
- dedupe: release unsettled claims on every data plane, not just kafka (ac1a246)
- flow: attach the wheel-zoom listener as non-passive (fb0817a)
- inflight: implement contains, report rule truncation, and unbreak the cython sweep (a31b9c0)
- providers: advertise spec_kinds by runtime availability, not static catalog (af00344)
- quarantine: cap writes per reason per cycle and keep the metric faithful (7c13cfa)
- threat-intel: drop the dead re-export that made the package unimportable (84afcf8)
Performance Improvements
- normalize: resolve simple dot-paths without the jmespath interpreter (2034852)
v2.1.0
2.1.0 (2026-07-18)
Features
- add manual release trigger to build-and-publish and update release-please to build both API and frontend images with provenance and signing (a41c7ba)
Bug Fixes
- collectors: bound per-cycle work in all paginating collectors to stop the soft-timeout poison-loop (4ecddaa)
- dispose DB engine pool on worker process initialization to ensure fork safety (8489f54)
- flow: record per-route route/drop counters unconditionally, not only under sampling (db492f0)
- metering: credit bytes_saved for sampling and suppression reduction levers (1a3cf9b)
- ocsf: emit timestamp_t in milliseconds, map Veeam to 1006 and CloudWatch to Base Event (659c110)
- update correlation engine to support millisecond timestamps and add Veeam brand icon (21710bb)
Performance Improvements
- flow: memoize FlowCanvas node/edge visuals, throttle pan to rAF, dedupe gradients, cap SMIL particles (87d8126)
v2.0.0
2.0.0 (2026-07-17)
⚠ BREAKING CHANGES
- the Wazuh-only alerts surface was removed (route /alerts, alerts API endpoints, the /dashboard/summary v1 Accept path, and the MCP list_integration_alerts tool). Use federated search (Investigations) + Detections instead. Sophos/Wazuh alert ingestion is unchanged.
Features
- add Wazuh detection mapping validation and fix missing seed definition (567ff40)
- implement node aggregation with +N expand functionality and update FlowCanvas layout constants (736f1f1)
- implement robust CSV export for federated search results and add i18n support for federated search labels (48699e1)
- replace raw condition operator labels with localized, human-friendly definitions in RouteConditionEditor (a6538e7)
Bug Fixes
- dispose DB pool on soft-timeout and initialize local variables early to prevent UnboundLocalError during pipeline failures (4dc3b33)
- let global admins scope live capture to a tenant via org selector (baaadae)
- prevent normalization engine from applying pre_cast and value_map to default values to avoid errors with non-string defaults (6f7c675)
- prevent session cookie boot crashes by handling empty environment variables and fixing OCSF resource path anchoring. (329b37a)
- resolve RedBeat starvation and crash-loops by increasing lock timeout, setting max loop interval, and enforcing idempotent scheduler registration. (29038a8)
- sanitize service account shim IDs to prevent foreign key violations in audit and mapping logs (cf43df8)
Performance Improvements
- batch ingestion metering with InVolumeAccumulator to reduce Redis I/O latency in pipeline (13e4cbc)
Code Refactoring
- document alerts surface removal as breaking (f424f36)