BloodHound CE v9.6.0

What's Changed

• fix: fixed hover states for the zone selector and env selector BED-8997 by @Holocraft in #3001
• chore: move GetRole and Get Permission to new architecture BED-8824 by @stephanieslamb in #2945
• chore: Add dependency resolutions for package vulns to main BED-9026 by @maffkipp in #3015
• chore: improve indicator for non system records with empty notes Bed 8922 by @LucasParraF in #3000
• chore: pfc openapi schema - BED-8758 by @mykeelium in #2990
• fix: (Main) Vuln Fix Resolutions update - BED-9036 by @specter-flq in #3022
• chore: protect custom_node_kinds from modifications if they are associated with an extension BED-8537 by @AD7ZJ in #3002
• chore(deps): bump axios from 1.16.1 to 1.18.0 by @dependabot[bot] in #3007
• chore: fixed vulnerability CVE-2026-16221 BED-9038 by @Holocraft in #3031
• fix: Properly indicate DeleteAllGraph when selected in DB Management - BED-8799 by @StephenHinck in #2937
• feat: Optimize PG graph database wipes - BED-8787 by @StephenHinck in #2936
• chore: postcss bump BED-9048 by @urangel in #3042
• feat: queue managment operation endpoints BED-8089 by @lrfalslev in #2977
• feat: get available managment operation endpoint BED-8266 by @lrfalslev in #2984
• test(a11y): playwright coverage for explorer - search page - bed-8633 by @JayC-Specter in #3034
• chore: Certification UI: EnvironmentId should stay on the URL when navigating to a different view BED-8926 by @LucasParraF in #3048
• fix(Build): add resolution for patched brace-expansion - BED-9060 by @TheNando in #3056
• feat: Doodle MultiSelect Component - BED-8716 by @nicole-m-martin in #3006
• chore: Add SBOM vulnerability scans BED-8648 by @ykaiboussiSO in #2950
• chore: Path OpenTelemetry and gRPC Go dependencies BED-9072 by @ykaiboussiSO in #3059
• fix: fix selectnodes BED-8284 by @bsheth711 in #2998
• feat(alert event publisher): BED-7948 add Publisher by @sirisjo in #3053
• fix: Updated Findings Endpoint to return asset_group_tag_id instead of zone_id for consistency - BED-8567 by @kpowderly in #3055
• fix: restore table height virtualization classname (BED-9057) by @dcairnsspecterops in #3054
• feat: added focus state to checkboxes BED-8975 by @Holocraft in #3052
• feat: download client artifact endpoint BED-8091 by @lrfalslev in #3064
• feat: Download Client Support Bundle (BED-7971) by @bfaulk96 in #3045
• feat: Add New GET Node Kind Endpoint - BED-8756 by @LawsonWillard in #3010
• feat: delete client artifact endpoint BED-8129 by @lrfalslev in #3069
• test(a11y): playwright coverage for explorer - pathfinding page - bed-8633 by @JayC-Specter in #3057
• fix: respond with source kind only as fallback BED-9059 by @urangel in #3065
• feat: New Finding Types Endpoint for Findings Table - BED-8673 by @kpowderly in #3058
• chore: Call graph DB OptimizeStorage() from datapipe BED-8341 by @AD7ZJ in #3019
• chore: Add reusable multiselect URL state hook BED-8621 by @maffkipp in #3073
• feat(ui): Delete Client Support Bundle (BED-7978) by @bfaulk96 in #3071
• fix: Restore consistent horizontal page spacing BED-9094 by @bfaulk96 in #3074
• chore: move ListRoles to new architecture BED-9005 by @catsiller in #3043
• test(a11y): playwright coverage for explorer - cypher page - bed-8633 by @JayC-Specter in #3072
• chore: V9.5.1 merge main - BED-9118 by @definitelynotagoblin in #3082
• chore: Clarify variable analysis intent logs - BED-9119 by @StephenHinck in #3084
• feat: added focus state for text inputs BED-8975 by @Holocraft in #3076
• feat: wire up webhooks table: BED-8558 by @jvacca-specterops in #3050
• test(a11y): playwright coverage for explore - entity information panel - BED-8633 by @JayC-Specter in #3085
• chore: Patch GO-2026-5774 go-chi/chi Go Dependency BED-9125 by @ykaiboussiSO in #3090
• fix: user input spread as props page crash BED-9076 by @urangel in #3066
• feat: enable opengraph_extension_management flag by default BED-9051 by @computator in #3080
• chore(Yarn): bump vulns for brace-expansion, fast-uri - BED-9133 by @TheNando in #3093
• feat: Add api/v2/relationship-kinds/{relationship_kind_id} - BED-8757 by @brandonshearin in #3061
• chore: add DOCKER_HOST_PATH config to dev environment BED-9105 by @computator in #3081
• test(a11y): playwright coverage for explore - graph controls -bed-8633 by @JayC-Specter in #3091
• test(a11y): playwright coverage for api-explorer - bed-8640 by @JayC-Specter in #3097
• fix(auth): restrict domain PATCH endpoint to graph write permission - BED-8846 by @cami-specter in #3070
• test(a11y): add Privilege Zones coverage - BED-8635 by @TheNando in #3020
• feat: Findings Table Severity Filter (BED-8619) by @dcairnsspecterops in #3079
• fix(docs): Updates for BED-8602 by @slimi-so in #2967
• fix: export additional type (BED-8619) by @dcairnsspecterops in #3103
• feat: Enable optimization by default, add logs - BED-9170 by @StephenHinck in #3105
• chore(goose): add function to determine if the database is up-to-date BED-9123 by @sirisjo in #3099
• chore(JS Deps): update js-yaml version for CVE - BED-9179, BED-9134 by @TheNando in #3113
• feat: Optimize PG source_kind, relation deletion using indices - BED-8832 by @StephenHinck in #2942
• chore: Add Markdown Validation to OpenGraph Remediations and Kind Info Inputs - BED-8964 by @LawsonWillard in #3092
• chore: upgrade authentik to 2026.5 BED-8628 by @mistahj67 in #3106
• fix(HA): do not error out on concurrent database_switch table create BED-9171 by @sirisjo in #3110
• feat: add part_number for artifact upload - BED-7968 by @mykeelium in #2869
• feat: add S3 Configuration - BED-9174 by @mykeelium in #3116
• test(a11y): admin file ingest, data quality coverage - BED-8639 by @JayC-Specter in #3100
• fix: add nanoid resolution (BED-9192) by @dcairnsspecterops in #3121
• feat: expose artifact metadata on management operations (BED-9186) by @bfaulk96 in #3117
• feat: Findings Prioritization Feature Flag - BED-9035 by @kpowderly in #3108
• fix: prevent large support bundle downloads BED-9186 by @lrfalslev in #3123
• chore: cherry-pick bump go to 1.26.5 BED-9197 (#3124) by @superlinkx in #3126
• fix: use explicit columns in identity role/permission reads for deleted_at: BED-9237 by @stephanieslamb in #3139
• fix: bump dawgs to v0.7.0 BED-8967 (#3125) by @seanjSO in #3141
• chore: Hide Support Bundle OpenAPI Schema Cherry-Pick (BED-9243) by @bfaulk96 in #3147
• chore: bump dompurify to 3.4.13 to resolve XSS CVEs BED-9194 by @sircodemane in #3149
• chore: update nanoid to 3.3.18 to address CVE-2026-67213 - BED-9314 by @sircodemane in ht...

v9.6.0-rc6

What's Changed

• chore: updating AzureHound version to v3.1.0 BED-9204 by @sircodemane in #3166

Full Changelog: v9.6.0-rc5...v9.6.0-rc6

v9.6.0-rc5

What's Changed

• chore: upgrade go to 1.26.6 BED-9328 #3158 cherry pick by @superlinkx in #3159

Full Changelog: v9.6.0-rc4...v9.6.0-rc5

v9.6.0-rc4

What's Changed

• chore: Hide Support Bundle OpenAPI Schema Cherry-Pick (BED-9243) by @bfaulk96 in #3147
• chore: bump dompurify to 3.4.13 to resolve XSS CVEs BED-9194 by @sircodemane in #3149
• chore: update nanoid to 3.3.18 to address CVE-2026-67213 - BED-9314 by @sircodemane in #3154

Full Changelog: v9.6.0-rc3...v9.6.0-rc4

v9.6.0-rc3

What's Changed

• fix: use explicit columns in identity role/permission reads for deleted_at: BED-9237 by @stephanieslamb in #3139
• fix: bump dawgs to v0.7.0 BED-8967 (#3125) by @seanjSO in #3141

Full Changelog: v9.6.0-rc2...v9.6.0-rc3

v9.6.0-rc2

What's Changed

• chore: cherry-pick bump go to 1.26.5 BED-9197 (#3124) by @superlinkx in #3126

Full Changelog: v9.6.0-rc1...v9.6.0-rc2

v9.6.0-rc1

What's Changed

• fix: fixed hover states for the zone selector and env selector BED-8997 by @Holocraft in #3001
• chore: move GetRole and Get Permission to new architecture BED-8824 by @stephanieslamb in #2945
• chore: Add dependency resolutions for package vulns to main BED-9026 by @maffkipp in #3015
• chore: improve indicator for non system records with empty notes Bed 8922 by @LucasParraF in #3000
• chore: pfc openapi schema - BED-8758 by @mykeelium in #2990
• fix: (Main) Vuln Fix Resolutions update - BED-9036 by @specter-flq in #3022
• chore: protect custom_node_kinds from modifications if they are associated with an extension BED-8537 by @AD7ZJ in #3002
• chore(deps): bump axios from 1.16.1 to 1.18.0 by @dependabot[bot] in #3007
• chore: fixed vulnerability CVE-2026-16221 BED-9038 by @Holocraft in #3031
• fix: Properly indicate DeleteAllGraph when selected in DB Management - BED-8799 by @StephenHinck in #2937
• feat: Optimize PG graph database wipes - BED-8787 by @StephenHinck in #2936
• chore: postcss bump BED-9048 by @urangel in #3042
• feat: queue managment operation endpoints BED-8089 by @lrfalslev in #2977
• feat: get available managment operation endpoint BED-8266 by @lrfalslev in #2984
• test(a11y): playwright coverage for explorer - search page - bed-8633 by @JayC-Specter in #3034
• chore: Certification UI: EnvironmentId should stay on the URL when navigating to a different view BED-8926 by @LucasParraF in #3048
• fix(Build): add resolution for patched brace-expansion - BED-9060 by @TheNando in #3056
• feat: Doodle MultiSelect Component - BED-8716 by @nicole-m-martin in #3006
• chore: Add SBOM vulnerability scans BED-8648 by @ykaiboussiSO in #2950
• chore: Path OpenTelemetry and gRPC Go dependencies BED-9072 by @ykaiboussiSO in #3059
• fix: fix selectnodes BED-8284 by @bsheth711 in #2998
• feat(alert event publisher): BED-7948 add Publisher by @sirisjo in #3053
• fix: Updated Findings Endpoint to return asset_group_tag_id instead of zone_id for consistency - BED-8567 by @kpowderly in #3055
• fix: restore table height virtualization classname (BED-9057) by @dcairnsspecterops in #3054
• feat: added focus state to checkboxes BED-8975 by @Holocraft in #3052
• feat: download client artifact endpoint BED-8091 by @lrfalslev in #3064
• feat: Download Client Support Bundle (BED-7971) by @bfaulk96 in #3045
• feat: Add New GET Node Kind Endpoint - BED-8756 by @LawsonWillard in #3010
• feat: delete client artifact endpoint BED-8129 by @lrfalslev in #3069
• test(a11y): playwright coverage for explorer - pathfinding page - bed-8633 by @JayC-Specter in #3057
• fix: respond with source kind only as fallback BED-9059 by @urangel in #3065
• feat: New Finding Types Endpoint for Findings Table - BED-8673 by @kpowderly in #3058
• chore: Call graph DB OptimizeStorage() from datapipe BED-8341 by @AD7ZJ in #3019
• chore: Add reusable multiselect URL state hook BED-8621 by @maffkipp in #3073
• feat(ui): Delete Client Support Bundle (BED-7978) by @bfaulk96 in #3071
• fix: Restore consistent horizontal page spacing BED-9094 by @bfaulk96 in #3074
• chore: move ListRoles to new architecture BED-9005 by @catsiller in #3043
• test(a11y): playwright coverage for explorer - cypher page - bed-8633 by @JayC-Specter in #3072
• chore: V9.5.1 merge main - BED-9118 by @definitelynotagoblin in #3082
• chore: Clarify variable analysis intent logs - BED-9119 by @StephenHinck in #3084
• feat: added focus state for text inputs BED-8975 by @Holocraft in #3076
• feat: wire up webhooks table: BED-8558 by @jvacca-specterops in #3050
• test(a11y): playwright coverage for explore - entity information panel - BED-8633 by @JayC-Specter in #3085
• chore: Patch GO-2026-5774 go-chi/chi Go Dependency BED-9125 by @ykaiboussiSO in #3090
• fix: user input spread as props page crash BED-9076 by @urangel in #3066
• feat: enable opengraph_extension_management flag by default BED-9051 by @computator in #3080
• chore(Yarn): bump vulns for brace-expansion, fast-uri - BED-9133 by @TheNando in #3093
• feat: Add api/v2/relationship-kinds/{relationship_kind_id} - BED-8757 by @brandonshearin in #3061
• chore: add DOCKER_HOST_PATH config to dev environment BED-9105 by @computator in #3081
• test(a11y): playwright coverage for explore - graph controls -bed-8633 by @JayC-Specter in #3091
• test(a11y): playwright coverage for api-explorer - bed-8640 by @JayC-Specter in #3097
• fix(auth): restrict domain PATCH endpoint to graph write permission - BED-8846 by @cami-specter in #3070
• test(a11y): add Privilege Zones coverage - BED-8635 by @TheNando in #3020
• feat: Findings Table Severity Filter (BED-8619) by @dcairnsspecterops in #3079
• fix(docs): Updates for BED-8602 by @slimi-so in #2967
• fix: export additional type (BED-8619) by @dcairnsspecterops in #3103
• feat: Enable optimization by default, add logs - BED-9170 by @StephenHinck in #3105
• chore(goose): add function to determine if the database is up-to-date BED-9123 by @sirisjo in #3099
• chore(JS Deps): update js-yaml version for CVE - BED-9179, BED-9134 by @TheNando in #3113
• feat: Optimize PG source_kind, relation deletion using indices - BED-8832 by @StephenHinck in #2942
• chore: Add Markdown Validation to OpenGraph Remediations and Kind Info Inputs - BED-8964 by @LawsonWillard in #3092
• chore: upgrade authentik to 2026.5 BED-8628 by @mistahj67 in #3106
• fix(HA): do not error out on concurrent database_switch table create BED-9171 by @sirisjo in #3110
• feat: add part_number for artifact upload - BED-7968 by @mykeelium in #2869
• feat: add S3 Configuration - BED-9174 by @mykeelium in #3116
• test(a11y): admin file ingest, data quality coverage - BED-8639 by @JayC-Specter in #3100
• fix: add nanoid resolution (BED-9192) by @dcairnsspecterops in #3121
• feat: expose artifact metadata on management operations (BED-9186) by @bfaulk96 in #3117
• feat: Findings Prioritization Feature Flag - BED-9035 by @kpowderly in #3108
• fix: prevent large support bundle downloads BED-9186 by @lrfalslev in #3123

New Contributors

• @JayC-Specter made their first contribution in #3034

Full Changelog: v9.5.1...v9.6.0-rc1

BloodHound CE v9.5.1

What's Changed

• fix(data quality): Write Data Quality in Batches, gate behind new data quality feature flag BED-9078 by @sirisjo in #3063

Full Changelog: v9.5.0...v9.5.1

v9.5.1-rc1

What's Changed

• fix(data quality): Write Data Quality in Batches, gate behind new data quality feature flag BED-9078 by @sirisjo in #3063

Full Changelog: v9.5.0...v9.5.1-rc1

BloodHound CE v9.5.0

What's Changed

• chore: prepare for code review - BED-8268 by @mykeelium in #2863
• chore: improve readability of kind count summary BED-8259 by @LucasParraF in #2934
• chore: proposal for Audit Logging Middleware BHE-8674 by @superlinkx in #2870
• feat(Data Quality): add environment_kind_id and environment_kind_display_name to available-domains response BED-8685 by @sirisjo in #2938
• chore: Migrate Toggle Flag - BED-8789 by @Flake85 in #2941
• feat: add new api client handlers and types for og entity panel BED-8741 by @urangel in #2940
• fix(data quality, db): migration to rename old data_quality_stats_table and create with new data_quality_stats table BED-8616 by @sirisjo in #2946
• fix: Revert focus styles - BED-8864 by @KillahDillah in #2955
• feat: disallow UPLOAD_ONLY role from some views (BED-7937) by @dcairnsspecterops in #2944
• fix: explore table id collision confusion BED-8026 by @urangel in #2959
• chore: Discarding environment query params on Summary view BED-8766 by @LucasParraF in #2947
• chore(alerts): Add webhook id for API BED-8016 by @mistahj67 in #2898
• chore: Merge stage/v9.4.0 to main BED-8831 by @RaymondLaubert in #2966
• refactor(filters): add filter pkg and middleware for slice architecture BED-8594 by @mistahj67 in #2943
• chore: PZ History UI height fix BED-8828 by @LucasParraF in #2963
• feat(Data Quality): Add /data-quality-stats endpoint BED-8610 by @sirisjo in #2961
• feat: KindInfo Storage Method Implementation: BED-8858 by @brandonshearin in #2962
• chore: update icon colors - BED-7787 by @KillahDillah in #2964
• feat: Remove Findings Table FF Gate from Findings Endpoint - BED-8728 by @kpowderly in #2970
• refactor(sort): add sort pkg and middleware for slice architecture BED-8596 by @mistahj67 in #2951
• feat: add read providers permission - BED-8587 by @catsiller in #2965
• feat: create Webhooks table on Delivery Page: BED-8546 by @jvacca-specterops in #2971
• refactor: useFetchEntityInfo uses new getNodeByID endpoint BED-8742 by @urangel in #2958
• chore: move markdown rendering component to shared ui BED-8961 by @urangel in #2985
• feat: add use_raw_object_id feature flag BED-8954 by @StranDutton in #2980
• feat(Playwright): add profile a11y coverage - BED-8636 by @TheNando in #2969
• fix: enforce opengraph permissions on custom node kind endpoints - BED-8970 by @wes-mil in #2989
• fix(Docker): fix HMR when running dev in container - BED-8971 by @TheNando in #2988
• refactor(paging): add paging to params and middleware BED-8597 by @mistahj67 in #2974
• feat(data quality): count OpenGraph nodes by environment BED-8614 by @mvlipka in #2973
• feat: Add KindInfo to api/v2/nodes/node_id - BED-8762 by @brandonshearin in #2982
• fix: apply etac rules to getNodeByID REST API by @ddlees in #2978
• refactor: retrieve edge entity info via get relationship by id BED-8743 by @urangel in #2972
• feat: start and end managment operation endpoints BED-8325 by @lrfalslev in #2948
• feat: focus styling BED-8950 by @Holocraft in #2979
• feat: Add KindInfo to Extension Upsert - BED-8764 by @LawsonWillard in #2986
• chore: API Explorer a11y - BED-7221 by @KillahDillah in #2987
• feat: add ?include-info to v2 relationships API BED-8763 by @seanjSO in #2993
• feat(api): add GET data quality stats aggregations endpoint - BED-8611 by @cami-specter in #2975
• fix: refactor checkbox component to update to new DS colors and state - BED-8724 by @nicole-m-martin in #2933
• feat: webhook details modal: BED-8952 by @jvacca-specterops in #2991
• chore: upsert any custom-node-kinds entries that are missing from kind table BED-7922 by @AD7ZJ in #2829
• fix: Add error to dropdown when attempting to create rule with no object (BED-7760) by @dcairnsspecterops in #2983
• fix: fixed input issue BED-8998 by @Holocraft in #2999
• feat: render markdown based kind info for extensions in entity panel BED-8613 by @urangel in #2995
• feat: move objectId capitalization behind feature flag - BED-8939 by @StranDutton in #2996
• feat: case sensitive search behind feature flag - BED-8943 by @StranDutton in #3004
• feat: In Data Quality Page, for OG, added listing Aggregations & Environments and rendering Stats & Table - BED 8607 by @specter-flq in #2997
• feat: update performance diagnostic common search query - BED-9001 by @TheNando in #3005
• chore: Add dependency resolutions for package vulns BED-9026 by @maffkipp in #3014
• fix: case insensitive search when use_raw_object_ids flag is enabled - BED-9021 by @StranDutton in #3012
• feat: reject older azurehound versions when use_raw_object_id flag is enabled - BED-9020 by @ktstrader in #3011
• fix: (Stage) Vuln Fix Resolutions update -BED-9036 by @specter-flq in #3021
• fix: fix aggregation display name - BED 9031 by @specter-flq in #3018
• chore: fixed vulnerability CVE-2026-16221 BED-9038 by @Holocraft in #3028
• fix: AZRole node split for Privileged Role Administrator under use_raw_object_id - BED-9046 by @ktstrader in #3038
• fix(data quality): OpenGraph Total Relationship Count BED-9045 by @mvlipka in #3037
• fix: omit propertyNames usage in api spec BED-9042 by @urangel in #3035
• fix: clickable node list items in entity panel explore BED-9047 by @urangel in #3040
• chore: postcss bump BED-9048 by @urangel in #3041
• fix: composition graph rendering BED-9052 by @urangel in #3046
• chore: bump collector versions by @lrfalslev in #3047

Full Changelog: v9.4.0...v9.5.0