v9.6.0-rc1

What's Changed

• fix: fixed hover states for the zone selector and env selector BED-8997 by @Holocraft in #3001
• chore: move GetRole and Get Permission to new architecture BED-8824 by @stephanieslamb in #2945
• chore: Add dependency resolutions for package vulns to main BED-9026 by @maffkipp in #3015
• chore: improve indicator for non system records with empty notes Bed 8922 by @LucasParraF in #3000
• chore: pfc openapi schema - BED-8758 by @mykeelium in #2990
• fix: (Main) Vuln Fix Resolutions update - BED-9036 by @specter-flq in #3022
• chore: protect custom_node_kinds from modifications if they are associated with an extension BED-8537 by @AD7ZJ in #3002
• chore(deps): bump axios from 1.16.1 to 1.18.0 by @dependabot[bot] in #3007
• chore: fixed vulnerability CVE-2026-16221 BED-9038 by @Holocraft in #3031
• fix: Properly indicate DeleteAllGraph when selected in DB Management - BED-8799 by @StephenHinck in #2937
• feat: Optimize PG graph database wipes - BED-8787 by @StephenHinck in #2936
• chore: postcss bump BED-9048 by @urangel in #3042
• feat: queue managment operation endpoints BED-8089 by @lrfalslev in #2977
• feat: get available managment operation endpoint BED-8266 by @lrfalslev in #2984
• test(a11y): playwright coverage for explorer - search page - bed-8633 by @JayC-Specter in #3034
• chore: Certification UI: EnvironmentId should stay on the URL when navigating to a different view BED-8926 by @LucasParraF in #3048
• fix(Build): add resolution for patched brace-expansion - BED-9060 by @TheNando in #3056
• feat: Doodle MultiSelect Component - BED-8716 by @nicole-m-martin in #3006
• chore: Add SBOM vulnerability scans BED-8648 by @ykaiboussiSO in #2950
• chore: Path OpenTelemetry and gRPC Go dependencies BED-9072 by @ykaiboussiSO in #3059
• fix: fix selectnodes BED-8284 by @bsheth711 in #2998
• feat(alert event publisher): BED-7948 add Publisher by @sirisjo in #3053
• fix: Updated Findings Endpoint to return asset_group_tag_id instead of zone_id for consistency - BED-8567 by @kpowderly in #3055
• fix: restore table height virtualization classname (BED-9057) by @dcairnsspecterops in #3054
• feat: added focus state to checkboxes BED-8975 by @Holocraft in #3052
• feat: download client artifact endpoint BED-8091 by @lrfalslev in #3064
• feat: Download Client Support Bundle (BED-7971) by @bfaulk96 in #3045
• feat: Add New GET Node Kind Endpoint - BED-8756 by @LawsonWillard in #3010
• feat: delete client artifact endpoint BED-8129 by @lrfalslev in #3069
• test(a11y): playwright coverage for explorer - pathfinding page - bed-8633 by @JayC-Specter in #3057
• fix: respond with source kind only as fallback BED-9059 by @urangel in #3065
• feat: New Finding Types Endpoint for Findings Table - BED-8673 by @kpowderly in #3058
• chore: Call graph DB OptimizeStorage() from datapipe BED-8341 by @AD7ZJ in #3019
• chore: Add reusable multiselect URL state hook BED-8621 by @maffkipp in #3073
• feat(ui): Delete Client Support Bundle (BED-7978) by @bfaulk96 in #3071
• fix: Restore consistent horizontal page spacing BED-9094 by @bfaulk96 in #3074
• chore: move ListRoles to new architecture BED-9005 by @catsiller in #3043
• test(a11y): playwright coverage for explorer - cypher page - bed-8633 by @JayC-Specter in #3072
• chore: V9.5.1 merge main - BED-9118 by @definitelynotagoblin in #3082
• chore: Clarify variable analysis intent logs - BED-9119 by @StephenHinck in #3084
• feat: added focus state for text inputs BED-8975 by @Holocraft in #3076
• feat: wire up webhooks table: BED-8558 by @jvacca-specterops in #3050
• test(a11y): playwright coverage for explore - entity information panel - BED-8633 by @JayC-Specter in #3085
• chore: Patch GO-2026-5774 go-chi/chi Go Dependency BED-9125 by @ykaiboussiSO in #3090
• fix: user input spread as props page crash BED-9076 by @urangel in #3066
• feat: enable opengraph_extension_management flag by default BED-9051 by @computator in #3080
• chore(Yarn): bump vulns for brace-expansion, fast-uri - BED-9133 by @TheNando in #3093
• feat: Add api/v2/relationship-kinds/{relationship_kind_id} - BED-8757 by @brandonshearin in #3061
• chore: add DOCKER_HOST_PATH config to dev environment BED-9105 by @computator in #3081
• test(a11y): playwright coverage for explore - graph controls -bed-8633 by @JayC-Specter in #3091
• test(a11y): playwright coverage for api-explorer - bed-8640 by @JayC-Specter in #3097
• fix(auth): restrict domain PATCH endpoint to graph write permission - BED-8846 by @cami-specter in #3070
• test(a11y): add Privilege Zones coverage - BED-8635 by @TheNando in #3020
• feat: Findings Table Severity Filter (BED-8619) by @dcairnsspecterops in #3079
• fix(docs): Updates for BED-8602 by @slimi-so in #2967
• fix: export additional type (BED-8619) by @dcairnsspecterops in #3103
• feat: Enable optimization by default, add logs - BED-9170 by @StephenHinck in #3105
• chore(goose): add function to determine if the database is up-to-date BED-9123 by @sirisjo in #3099
• chore(JS Deps): update js-yaml version for CVE - BED-9179, BED-9134 by @TheNando in #3113
• feat: Optimize PG source_kind, relation deletion using indices - BED-8832 by @StephenHinck in #2942
• chore: Add Markdown Validation to OpenGraph Remediations and Kind Info Inputs - BED-8964 by @LawsonWillard in #3092
• chore: upgrade authentik to 2026.5 BED-8628 by @mistahj67 in #3106
• fix(HA): do not error out on concurrent database_switch table create BED-9171 by @sirisjo in #3110
• feat: add part_number for artifact upload - BED-7968 by @mykeelium in #2869
• feat: add S3 Configuration - BED-9174 by @mykeelium in #3116
• test(a11y): admin file ingest, data quality coverage - BED-8639 by @JayC-Specter in #3100
• fix: add nanoid resolution (BED-9192) by @dcairnsspecterops in #3121
• feat: expose artifact metadata on management operations (BED-9186) by @bfaulk96 in #3117
• feat: Findings Prioritization Feature Flag - BED-9035 by @kpowderly in #3108
• fix: prevent large support bundle downloads BED-9186 by @lrfalslev in #3123

New Contributors

• @JayC-Specter made their first contribution in #3034

Full Changelog: v9.5.1...v9.6.0-rc1