0.141.0

What's Changed

• feat(bbot): ingest BBOT scan reports by @kunaals in #3061
• feat(snowflake): add Snowflake intel module by @jychp in #3110
• feat(miradore): add Miradore MDM intel module by @jychp in #3117
• feat: compute internet exposure for Scaleway, Railway, Modal, Netlify, Supabase, Cloudflare and Vercel by @jychp in #3143
• fix(cve_metadata): bound Neo4j transaction memory for the ENRICHES fan-out by @jychp in #3152
• fix(rules): make identity_fields uniquely key each fact's query rows by @jychp in #3147
• chore: bump the minor-and-patch group with 8 updates by @dependabot[bot] in #3156
• chore: bump github/codeql-action/upload-sarif from 4.37.4 to 4.37.6 in the minor-and-patch group by @dependabot[bot] in #3155
• chore: drop dead azure-cli-core dependency and bump workos to 9.1.0 by @jychp in #3158
• feat(zizmor): ingest zizmor GitHub Actions audit reports by @jychp in #3140
• feat(scaleway): add Web Hosting ingestion by @iheartnathan in #3016
• feat(gcp): add SSL policy and target proxy support by @ashton-suire in #3146
• fix(semgrep): handle null reachability in SCA vuln transform by @amdadulbari in #3151
• perf(tests): cut unit tests 60s->29s and integration 310s->229s by @jychp in #3127
• feat(deps): add optional neo4j-rust extra for the Rust Bolt codec by @jychp in #3165
• perf(gitlab): resolve tag digests before fetching container manifests by @jychp in #3163
• perf(github): stop paying full backoff for recovered dependency graph timeouts by @jychp in #3164
• refactor(microsoft): build the Graph credential in one place by @jychp in #3167
• chore: bump github/codeql-action/upload-sarif from 4.37.6 to 4.37.7 in the minor-and-patch group by @dependabot[bot] in #3168
• chore: bump the minor-and-patch group with 6 updates by @dependabot[bot] in #3170
• chore: bump astral-sh/setup-uv from 9.0.0 to 10.0.1 by @dependabot[bot] in #3169
• feat(aws-ec2): add Transit Gateway route table ingestion by @wheel5up in #2962
• Ttsujimoto/digitalocean sdk upgrade by @damixen in #3160
• feat(GCP): add GCP VPN tunnels and VPC peerings by @bhargav2427 in #3176
• feat(railway): ingest deployment source revision by @kunaals in #3179
• feat(railway): model filesystem snapshots by @kunaals in #3180
• perf(ontology): add an index on PackageVersion.name by @jychp in #3186
• feat(trivy): ingest filesystem scan reports by @kunaals in #3181
• feat(huntress): add Huntress EDR intel module by @jychp in #3153
• feat(GCP): GCP org folder project exclusions by @bhargav2427 in #3175
• fix(s3): tolerate transport errors when a bucket's region is unreachable by @serge-wq in #3192
• fix(aws): reduce stale analysis windows by @jychp in #3197
• fix(tenable): harden ingestion and align conventions by @jychp in #3196
• feat(introspection): expose inherited materialized ontology relationships by @jychp in #3202
• feat(kubernetes): ingest GPU and persistent storage by @kunaals in #3187
• feat(kubernetes): map container PVC access by @kunaals in #3188
• fix(docs): prevent sidebar label overlap by @kunaals in #3209
• chore: bump types-pyyaml from 6.0.12.20260724 to 6.0.12.20260815 by @dependabot[bot] in #3208
• chore: bump the minor-and-patch group with 8 updates by @dependabot[bot] in #3206
• chore: bump the minor-and-patch group with 2 updates by @dependabot[bot] in #3205
• docs(huntress): use American English by @kunaals in #3210
• chore: bump workos from 9.1.0 to 10.0.1 by @dependabot[bot] in #3207
• chore: bump pagerduty from 6.3.0 to 7.0.0 by @dependabot[bot] in #3171
• docs: expand intel modules sidebar by default by @kunaals in #3217
• refactor(okta): Update Okta Module to use Models by @csanders-git in #1243
• feat(orca): add Orca Security module by @kunaals in #3157
• fix(aws-ssm): make public parameter catalogs opt-in by @kunaals in #3203

New Contributors

• @iheartnathan made their first contribution in #3016
• @amdadulbari made their first contribution in #3151
• @wheel5up made their first contribution in #2962
• @damixen made their first contribution in #3160
• @bhargav2427 made their first contribution in #3176
• @csanders-git made their first contribution in #1243

Full Changelog: 0.140.0...0.141.0