BloodHound CE v9.7.0

What's Changed

• chore: cherry-pick golang-vulns BED-9072 by @superlinkx in #3060
• chore: bump go to 1.26.5 BED-9197 by @superlinkx in #3124
• feat: added focus state for select BED-8975 by @Holocraft in #3120
• chore: move datapipe status endpoint BED-9115 by @catsiller in #3083
• fix: bump dawgs to v0.7.0 BED-8967 by @seanjSO in #3125
• chore: move finding-trends to new arch BED-9018 by @Flake85 in #3101
• fix: use explicit columns in identity role/permission reads for deleted_at by @stephanieslamb in #3134
• feat: Entity Panel templating - BED 9017 by @brandonshearin in #3095
• chore(api): remove unused request signing helpers - BED-9255 by @saluc28 in #3111
• chore(alerts): plumb alertPublisher into resources BED-9195 by @mistahj67 in #3122
• chore: Remove disabled support bundle OpenAPI definitions (BED-9243) by @bfaulk96 in #3140
• chore(deps): bump dompurify to 3.4.13 to resolve XSS CVEs BED-9194 by @elikmiller in #3143
• chore: Button Refactor - BED-6463 by @KillahDillah in #3030
• feat(logging): add query parameter logging for /api/v2 requests - BED-8563 by @cami-specter in #2895
• fix: fixed focus state rings for table buttons BED-9173 by @Holocraft in #3145
• feat: added focus state for textarea and datepicker BED-8975 by @Holocraft in #3128
• chore(Deps): update nanoid to 3.3.18 CVE-2026-67213 - BED-9314 by @TheNando in #3153
• feat: explore graph controls icons - BED-9043 by @catsiller in #3132
• feat: KindInfo Markdown Template Validation BED-9022 by @AD7ZJ in #3107
• test(a11y): playwright coverage for administration - database management and manage users' pages - bed-8639 by @JayC-Specter in #3104
• chore: upgrade go to 1.26.6 BED-9328 by @superlinkx in #3158
• test(A11y): coverage for Administration: SSO, bloodhound configuration, EA - BED-8639, BED-8639 by @JayC-Specter in #3109
• chore(alerts): update OpenAPI docs for GET alert events endpoint BED-8994 by @sirisjo in #3142
• feat: add multi-destination pathfinding with drag-and-drop reordering by @julian1j in #2954
• chore: Button refactor fast follow - BED - 9261 by @KillahDillah in #3155
• chore: updating AzureHound version to v3.1.0 BED-9204 by @ktstrader in #3165
• fix: mui dialogs override for z index BED-8108 by @catsiller in #3157
• feat: Request Partial Analysis when the Findings Prioritization FF is enabled - BED-9178 by @kpowderly in #3133
• fix: Prevent stale pathfinding results from hiding cypher search widget (BED-9216) by @dcairnsspecterops in #3130
• feat: add attack path selector to findings table (BED-8281) by @dcairnsspecterops in #3136
• fix: Fix OpenGraph Management table layout (BED-9316) by @bfaulk96 in #3156
• test(A11y): add coverage for PZ History tab - BED-8635 by @TheNando in #3163
• feat: added required fields indicator BED-7225 by @Holocraft in #3164
• test(a11y): components coverage; nav & env selector - BED-8641 by @JayC-Specter in #3170
• chore: Upgrade golang.org/x/mod deps from v0.38.0 to v0.40.0 BED-9355 by @ykaiboussiSO in #3173
• fix: Prevent Graph from Resetting - BED-9157 by @specter-flq in #3172
• chore: Focus trap on TextFields when required - BED-9129 by @KillahDillah in #3160
• fix: Restore Allure report generation BED-9374 by @ykaiboussiSO in #3180
• feat: Add artifact expiration cleanup safeguards (BED-9152) by @bfaulk96 in #3146
• chore(Alerts): API: Uncomment OpenAPI spec for all Completed Endpoints BED-9366 by @ALCooper12 in #3178
• test(a11y): quick upload dialog & date range coverage - BED-8641 by @JayC-Specter in #3181
• docs: improve esc14 texts by @JonasBK in #2960
• feat(harness): Conditionally Create Default Admin Account BED-9232 by @mvlipka in #3167
• chore: bh_datapipe_status metric refactor - BED-8676 by @brandonshearin in #3169
• docs: Add Doc For Schema Upsert Reconciliation Architecture - BED-9330 by @LawsonWillard in #3183
• fix: Update node tar resolution (BED-9461) by @dcairnsspecterops in #3191
• feat: Updated Doodle MultiSelect style variants - BED-9220 by @nicole-m-martin in #3177
• feat: wire up notifications and event history tables: BED-8599 by @jvacca-specterops in #3174
• feat: track cypher query error metrics BED-7854 by @seanjSO in #3175
• feat(A11y): clean up tests and add fixtures - BED-9440 by @TheNando in #3187
• chore(openapi): Add Zone Protected Asset score docs by @cweidenkeller in #3184
• chore(alerts): uncomment test endpoint BED-8020 by @sirisjo in #3185
• chore(alerts): remove alerts constant from BHCE BED-9448 by @sirisjo in #3193
• test(A11y): add accessibility fixtures to shared lib - BED-8740 by @TheNando in #3203
• fix: typeerror fix on data quality page domains BED-9445 by @catsiller in #3202
• chore: Posture page table screen reader support - BED-9128 by @KillahDillah in #3205
• feat: add LinesWithMagnifyingGlass icon BED-9144 by @dcairnsspecterops in #3182
• fix: Allow per-route exclusions from query filter predicate parsing BED-9358 by @maffkipp in #3192
• feat: snackbar alerts: BED-8549 by @jvacca-specterops in #3162
• feat(UI): Update JSClient to support Zone protected asset score endpoint by @cweidenkeller in #3186
• feat: webhooks run test dialog: BED-9482 by @jvacca-specterops in #3208
• feat: DB support for creating PZ rules via OG extension management (BED-9331) by @benwaples in #3176
• feat: implement presigned artifact downloads BED-9244 by @lrfalslev in #3190
• fix(ci): BHCE Tagging Parity To BHE For Tagging Images BED-9375 by @mvlipka in #3210
• test(A11y): add stubs for BHE coverage - BED-9441 by @TheNando in #3209
• feat: add support bundle download URL client method (BED-9361) by @bfaulk96 in #3179
• chore: add diagnostic logging for s3 - BED-9489 by @mykeelium in #3213
• fix: merge properties for node info enriched by API at runtime BED-9345 by @urangel in #3204
• chore: update featureflag tests - BED-9484 by @Flake85 in #3211
• fix(UI): Change JS Client response for BED-8760 by @cweidenkeller in #3218
• feat(doc): Resolved BED-8947 by @slimi-so in #3197
• feat: Add icons for Floating Action Bar copy button (BED-9147) by @dcairnsspecterops in #3207
• feat: allow className in copyToClipboard component: BED-9493 by @jvacca-specterops in #3222
• feat: added keyboard navigation functionality BED-7220 by @Holocraft in #3214
• chore: add prioritization_rank type BED-8620 by @LucasParraF in #3220
• chore(dependencies): update goose dependencies to fix ambiguous imports BED-9525 by @mvlipka in #3221
• chore: Remove test-only dependencies from UI bundle BED-9504 by @maffkipp in #3217
• fix(auth): store identifiers - BED-9064 by @cami-specter in #3189
• chore: add migration to default support bundle and artifact cleanup -BED-9554 by @mykeelium in #3231
• chore(deps): Cherrypick DAWGS v0.8.0 Into Stage BED-9544 by @mvlipka in #3232
• chore: Update npm Browserslist to 4.28.8 due to a security vuln - BED… by @LawsonWillard in #3235
• fix: Color token changes for correct contrast - BED-9563 by @specter-flq in #3236
• chore(deps): cherry pick fix yarn audit fixes BED-9610 by @mvlipka in #3249
• fix: undefined name value in toast message, rules page hmac secret fl… by @jvacca-specterops in #3245
• chore(Vuln): Patch CVE-2026-84304 vulns of gRPC (#3255) by @ykaiboussiSO in #3263
• chore: bump collector versions - BED-9530,BED-9531,BED-9532 (#3267) by @mykeelium in #3268

New Contributors

• @saluc28 made their first contribution in #3111

Full Changelog: v9.6.0...v9.7.0