v9.9.0-rc1

What's Changed

• feat: Move Zone node generation and feature-flag behavior into Enterprise - BED-9855 by @kpowderly in #3342
• chore: add stale work item automation BED-9793 by @elikmiller in #3339
• feat: Bulk PZ rule ingestion from bundle BED-9319 by @AD7ZJ in #3321
• feat: Refresh DoodleUI typography foundation BED-9082 by @justin-prime1 in #3067
• chore(params): add is_null and is_not_null params BED-9583 by @sirisjo in #3340
• feat: JSON validation messaging: BED-9858 by @jvacca-specterops in #3346
• fix: Broken Object Level Auth ETAC Bypass -relay-targets Bed-8843 by @Useinovski in #3212
• fix: Broken Object Level Authorization - ETAC Bypass - acl-inheritance BED-9120 by @Useinovski in #3216
• feat: Extension Upsert Logging Enrichment - BED-9497 by @LawsonWillard in #3345
• chore: add pull request size limit BED-9793 by @elikmiller in #3344
• feat: Display Associated Labels in Explore Entity Panel BED-9168 by @justin-prime1 in #3102
• feat: add Slider Input Component to Doodle UI BED-9891 by @catsiller in #3354
• chore: require admin approval for go.mod and go.work changes BED-9898 by @mvlipka in #3355
• feat: add icons to confirmation dialog: BED-9728 by @jvacca-specterops in #3356
• fix: BED-9752 saved queries caret reversed by @irshadaj in #3362
• chore: bump fast-uri vuln fix BED-9930 by @bsheth711 in #3365
• chore: update axios and brace-expansion by @elikmiller in #3367
• fix: move http-cache-semantics to non-vuln version - BED-9944 by @mykeelium in #3409
• fix: Delete golangci-lint before recreate - BED-9942 by @StephenHinck in #3370
• feat(job): Add secret store config BED-9852 by @mistahj67 in #3357
• chore: Icon/Icon Button refactor - BED-6062 by @KillahDillah in #3326
• fix(auth): remove unsafe SAMLResponse WARN logging - BED-9639 by @cami-specter in #3260
• feat: Add Doodle UI Drawer BED-9865 by @bfaulk96 in #3353
• feat: BED-9498 extension ID saved queries cannot be modified by @AlyaEru in #3359
• feat(jobs): add profiles create endpoint BED-9573 by @lrfalslev in #3363
• chore: bump collector version - BED-9859 by @mykeelium in #3407
• feat: Do not gate Optimize on analysis - BED-9971 by @StephenHinck in #3428
• chore(jobs): update outcome enum for partially-succeeded BED-9902 by @mistahj67 in #3414
• feat: explore graph directions and spacing controls BED-9130 by @catsiller in #3348
• chore: moved ListUsers to new architecture BED-9736 by @stephanieslamb in #3325
• chore(deps): bump DAWGs release version to v0.9.1 BED-9780 by @AlyaEru in #3435
• feat(GH Checks): update types in conventional commit check - BED-9975 by @TheNando in #3431
• chore(jobs): API - Schedules: Create BED-9578 by @ALCooper12 in #3333
• chore: update AzureHound to latest patch - BED-9984 by @mykeelium in #3439
• feat: job history table: BED-9864 by @jvacca-specterops in #3427
• feat: surface extension based saved queries in UI BED-9322 by @urangel in #3408
• fix: restore managed-service-account DNS compositions BED-9336 by @JonasBK in #3401
• fix: restore exact ADCS trust paths BED-9336 by @JonasBK in #3403
• fix: restore exact ADCS CA host validation BED-9336 by @JonasBK in #3405
• fix: restore ADCSESC3 creation and composition alignment BED-9336 by @JonasBK in #3406
• refactor: add CHOW ingest types and JSON schemas - BED-7790 by @wes-mil in #3416
• refactor: add streaming CHOW payload validation - BED-7790 by @wes-mil in #3417
• refactor: adopt CHOW validation for ingest - BED-7790 by @wes-mil in #3420
• refactor: remove the legacy ingest parser - BED-7790 by @wes-mil in #3421
• refactor: remove legacy ingest types and schemas - BED-7790 by @wes-mil in #3422
• feat: Add DoodleUI Stepper BED-9866 by @bfaulk96 in #3424
• chore: upgrade go 1.27.2 and related dependencies BED-10000 by @superlinkx in #3442
• chore: Icon Refactor pt 2 - BED-9929 by @KillahDillah in #3364
• feat: BED-9897 add "extension" to list queries scope values by @AlyaEru in #3441
• perf: Domain lookup taking too long BED-7066 by @Useinovski in #3434
• feat(jobs): add profiles update endpoint BED-9574 by @lrfalslev in #3358
• chore: add rate limiting middleware to slices missing the middleware - BED-9788 by @Flake85 in #3341
• feat(api): Implements BED-9337 by @slimi-so in #3351
• chore(docs): Update attack-paths/findings-types BED-9830 by @cweidenkeller in #3451
• feat: render non-traversable Explorer edges as dashed lines by @TheNando in #3448
• test: Add missing test coverage for offset/skip BED-10027 by @Useinovski in #3452
• feat: Added shadow shield Icon Bed 9137 by @LucasParraF in #3443
• chore: require OH >v0.3.0 when use_raw_object_id flag enabled - BED-9831 by @StranDutton in #3411
• feat: add collection resource list clients and Select loading state (BED-9956) by @bfaulk96 in #3449
• chore(jobs): remove 415 from API response docs BED-9589 by @sirisjo in #3459
• feat: Label synthetic zone node correctly on the graph - BED-9969 by @kpowderly in #3436
• fix(jobs): align secret creation OpenAPI schemas - BED-9570 by @definitelynotagoblin in #3454
• ci: update actions/upload-artifact to v7 to update nodejs runner to 24 BED-9946 by @mvlipka in #3455
• refactor: Remove/Update Docker Content Trust for Image Signing. BED-8974 by @RaymondLaubert in #3360
• chore: remove zone node feature flag BED-9993 by @bsheth711 in #3470
• fix: Apply search limit and ETAC filtering in database query BED-10036 by @StephenHinck in #3456
• fix: Restrict objectid search to exact BTree lookups with case-variant matching BED-10037 by @StephenHinck in #3457
• fix: correct audit log count when using date filters BED-10051 by @julian1j in #3471
• chore(permissions): Add CollectionReadJobs to Power User role BED-10061 by @mistahj67 in #3481
• feat: config for experiment storage by @zinic in #3288
• chore(dawgs-release): Upgrading DAWGS version from v0.9.1 to v0.9.2 by @ykaiboussiSO in #3484
• ci: update docker/build-push-action to NodeJS 24 BED-9948 by @mvlipka in #3485
• feat: CSV export from findings table BED-9138 by @maffkipp in #3447
• chore: remove unproduced GPOAppliesTo and CanApplyGPO from post-processed edges BED-9943 by @StephenHinck in #3371
• feat: migrate DCSync post-processing to DCA BED-9943 by @StephenHinck in #3372
• feat: migrate ProtectAdminGroups post-processing to DCA BED-9943 by @StephenHinck in #3373
• feat: migrate SyncLAPSPassword post-processing to DCA BED-9943 by @StephenHinck in #3374
• feat: migrate HasTrustKeys post-processing to DCA BED-9943 by @StephenHinck in #3375
• feat: migrate CanRDP post-processing to DCA BED-9943 by @StephenHinck in #3376
• feat: migrate AdminTo, CanPSRemote and ExecuteDCOM post-processing to DCA BED-9943 by @StephenHinck in #3377
• feat: migrate TrustedForNTAuth post-processing to DCA BED-9943 by @StephenHinck in #3378
• feat: migrate IssuedSignedBy post-processing to DCA BED-9943 by @StephenHinck in #3379
• feat: migrate EnterpriseCAFor post-processing to DCA BED-9943 by @StephenHinck in #3380
• feat: migrate ExtendedByPolicy post-processing to DCA BED-9943 by @StephenHinck in #3381
• feat: migrate EnrollOnBehalfOf post-processing to DCA BED-9943 by @StephenHinck in #3382
• feat: migrate GoldenCert post-processing to DCA BED-9943 by @StephenHinck in #3383
• feat: migrate ADCSESC1 post-processing to DCA BED-9943 by @StephenHinck in #3384
• feat: migrate ADCSESC3 post-processing to DCA BED-9943 by @StephenHinck in #3385
• feat: migrate ADCSESC4 post-processing to DCA BED-9943 by @StephenHinck in #3386
• feat: migrate ADCSESC6a post-processing to DCA BED-9943 by @StephenHinck in #3387
• feat: migrate ADCSESC6b post-processing to DCA BED-9943 by @StephenHinck in #3388
• feat: migrate ADCSESC9a post-processing to DCA BED-9943 by @StephenHinck in #3389
• feat: migrate ADCSESC9b post-processing to DCA BED-9943 by @StephenHinck in #3390
• feat: migrate ADCSESC10a post-processing to DCA BED-9943 by @StephenHinck in #3391
• feat: migrate ADCSESC10b post-processing to DCA BED-9943 by @StephenHinck in #3392
• feat: migrate ADCSESC13 post-processing to DCA and drop the legacy ADCS ESC operation BED-9943 by @StephenHinck in #3393
• feat: migrate CoerceAndRelayNTLMToADCS post-processing to DCA BED-9943 by @StephenHinck in #3394
• feat: migrate CoerceAndRelayNTLMToSMB post-processing to DCA BED-9943 by @StephenHinck in #3395
• feat: migrate CoerceAndRelayNTLMToLDAP and LDAPS post-processing to DCA BED-9943 by @StephenHinck in #3396
• feat: migrate ExecuteCommand post-processing to DCA BED-9943 by @StephenHinck in #3397
• feat: migrate AZRoleApprover post-processing to DCA BED-9943 by @StephenHinck in #3398
• feat: migrate SyncedToEntraUser and SyncedToADUser post-processing to DCA BED-9943 by @StephenHinck in #3399
• refactor: remove legacy delete-recreate post-processing helpers BED-9943 by @StephenHinck in #3400
• chore(jobs): add 409 response to end endpoint BED-9588 by @sirisjo in #3490
• fix: Filters dropdown options text color and cell hover effect regression Bed-10023 by @LucasParraF in #3488
• chore: Upgrade aws-actions/configure-aws-credentials. BED-9947 by @RaymondLaubert in #3486
• chore(jobs): add cancelled to outcome enum BED-9588 by @sirisjo in #3496
• feat: job history drawer: BED-9899 by @jvacca-specterops in #3482
• feat: OG mgmt page enhancements BED-9833 by @urangel in #3432
• refactor: Separated Cosign Verify from the Sign Job. BED-8974 by @RaymondLaubert in #3500
• ci: updated docker/login-action to latest version BED-9949 by @mvlipka in #3495
• ci: updated docker/metadata-action to latest version BED-9950 by @mvlipka in #3497
• ci: updated docker/setup-buildx-action to latest version BED-9951 by @mvlipka in #3498
• chore: Fix ADCS slow test fixtures BED-10101 by @StephenHinck in #3504
• fix: Correct collection secret client fields (BED-10102) by @bfaulk96 in #3507
• chore: NPM cleanup BED-10059 by @maffkipp in #3487
• fix(etac): enforce ETAC permissions on the azure related entities endpoint - BED-9121 by @cami-specter in #3352
• fix: Update Error Handling and Tests for Zip Extension Bundles - BED-10068 by @LawsonWillard in #3491
• feat: Add Marketplace to BloodHound Community Edition BED-10067 by @justin-prime1 in #3227
• refactor(datapipe): Swap job id to string for uuid logging support BED-10022 by @mistahj67 in #3450
• chore: bump collector versions - BED-10084,BED-10085,BED-10086 by @mykeelium in #3508
• chore(jobs): swap api endpoints to collie-job prefix BED-10133 by @mistahj67 in #3514
• chore: dawgs bump - BED-10142 by @brandonshearin in #3517

Full Changelog: v9.8.0-rc1...v9.9.0-rc1