4.2.0

Security

• Patched several CVEs identified in third-party libraries.

Improvements

PKCE support in OAuth2

• Added support for the PKCE option in OAuth2 authentication.

Kubernetes

• Added a new configuration option: job.kubernetes.imagePullSecrets.
• Set backoffLimit to 0 for analyzer and responder jobs.

Bug Fixes

• Kubernetes: Fixed an issue with the trustStore / keyStore blocks in the configuration file that prevented a secure connection to Elasticsearch.
• Fixed an issue affecting the API key revocation endpoint.