v1.3.0 — Stability & Reliability

What's Changed

Stability release — fix crash-looping components, harden reliability, optimize resource usage. 27 files changed, 618 insertions, 242 deletions.

Fixed

• Wazuh Manager analysisd crash — Missing default ruleset directories caused zero rules to load, analysisd exited immediately
• Wazuh Dashboard crash-loop (35+ restarts) — OpenSearch hostname mismatch caused ECONNREFUSED
• Cortex OOMKilled — Memory limit increased from 512Mi to 768Mi
• rootcheck errors — Added missing rootkit database paths
• test-flow.sh — Fixed arithmetic bug, label mismatches, removed eval usage
• NetworkPolicy Prometheus ports — Added actual app metrics ports

Added

• Health probes on 5 services: OpenSearch, Redis, RabbitMQ, MinIO, Wazuh Agent
• CronJob guards on all 3 OpenCTI connectors (concurrencyPolicy: Forbid, deadlines, TTL)
• OpenSearch ISM policies — auto-delete: Wazuh alerts (30d), audit logs (14d), OpenCTI (90d)
• scripts/setup-ism.sh — ISM policy creation and verification
• MCP server retry logic with exponential backoff on 429/503/timeout
• Configurable MCP server settings via environment variables
• test-flow.sh API connectivity tests + verbose mode (-v)
• deploy-stack.sh post-deploy health check
• MIT License
• .github/ templates: bug report, feature request, PR template, security policy
• Full CHANGELOG.md with entries for all releases

Changed

• Wazuh Manager: 0 rules loaded → 8,549 built-in + 8 custom rules
• test-flow.sh: 33/33 checks passing across 8 sections
• MCP server packages bumped to 1.3.0

Security

• 0 npm vulnerabilities across all MCP servers
• Full security audit passed: secrets, RBAC, image pinning, input validation, NetworkPolicies

Full Changelog: v1.2.0...v1.3.0