v1.6.1

Changes

• rename bouncers to remediation component in openAPI (#2936) @AlteredCoder
• docker: distribute geoip db in slim image (#2920) @mmetc

New Features

• LAPI: local api unix socket support (#2770) @mmetc

Improvements

• docker: pre-download hub items (debian image) (#2934) @mmetc
• docker: pre-download all hub items and data, opt-in hub update/upgrade (#2933) @mmetc
• add patterns_dir configuration option (#2868) @kampka
• cscli: Add user-agent to all hub requests (#2915) @mmetc
• add libinjection expr helpers (#2914) @blotus
• improve a bit cscli examples when it comes to list mgmt (#2911) @buixor
• cscli metrics: sort table order (#2908) @mmetc
• update windows pipeline (#2909) @blotus
• crowdsec: remove warning if prometheus port is taken during cold logs processing (#2857) @mmetc
• bin/crowdsec: avoid writing errors twice when log_media=stdout (#2876) @mmetc
• cron: spread server load when upgrading hub and data files (#2873) @mmetc
• lp metrics: collect datasources and console options (#2870) @mmetc
• refact pkg/apiserver (auth helpers) (#2856) @mmetc
• refact cscli (globals) (#2854) @mmetc
• add unix socket option (#2764) @LaurenceJJones
• refact pkg/apiclient (#2846) @mmetc
• refact "cscli config" (#2832) @mmetc
• Appsec unix socket (#2737) @LaurenceJJones
• cscli metrics: rename buckets -> scenarios (#2848) @mmetc
• add SetMeta and SetParsed helpers (#2845) @buixor
• implement highAvailability feature (#2506) @he2ss
• pkg/hubtest: extract methods + consistent error handling (#2756) @mmetc
• log processor: share apiclient in output goroutines (#2836) @mmetc
• bats: color formatter in CI (#2838) @mmetc
• refact "cscli console" (#2834) @mmetc
• refact "cscli notifications" (#2833) @mmetc
• refact "cscli explain" (#2835) @mmetc
• refact "cscli alerts" (#2827) @mmetc
• refact "cscli lapi" (#2825) @mmetc
• update calls to deprecated x509 methods (#2824) @mmetc
• refact cscli metric processing (#2816) @mmetc
• Dedicated whitelist metrics (#2813) @buixor
• refact "cscli" root cmd (#2811) @mmetc
• refact "cscli metrics" part 3 (#2807) @mmetc
• refact "cscli metrics" part 2 (#2806) @mmetc
• refact "cscli metrics" part 1 (#2805) @mmetc
• refact "cscli decisions"; lint (#2804) @mmetc
• refact "cscli dashboard" (#2803) @mmetc
• refact "cscli papi" (#2802) @mmetc
• refact "cscli simulation" (#2801) @mmetc
• refact "cscli " (#2782) @mmetc
• refact "cscli hub" (#2800) @mmetc
• refact "cscli alerts" (#2778) @mmetc
• refact "cscli machines" (#2777) @mmetc
• refact "cscli bouncers" (#2776) @mmetc
• CI: rename workflows, update docker build (#2798) @mmetc
• cscli: don't print use_wal warning (#2794) @mmetc
• option to override hub url template. for testers only. (#2785) @mmetc
• lint: disallow naked returns (#2771) @mmetc
• lint: enable linter "wastedassign" (#2772) @mmetc

Bug Fixes

• windows: fix data file update (remove before rename) (#2930) @mmetc
• Fix REQUEST_URI behavior (#2891 #2917) @buixor
• hub update: reload crowdsec if only data files have changed (#2912) @mmetc
• fix locking logic for HA and add list unsubscribe for PAPI (#2904) @buixor
• warn if user is using inotify to tail a symlink (#2881) @blotus
• file acquisition: don't bubble error when tailed file disappears (#2903) @mmetc
• fix rpm build (#2894) @sabban
• fix unix socket error (#2897) @LaurenceJJones
• lapi: log error "can't sinchronize with console" only if papi is enabled (#2896) @mmetc
• add cron as a suggested package for debian package (#2799) @blotus
• appsec: delete api key header before processing the request (#2890) @blotus
• acquisition : take prometheus level into account (#2885) @buixor
• Fix armhf build (#2886) @sabban
• cscli tests + fix bouncer/machine prune (#2883) @mmetc
• support both scope and scopes parameter in decisions filter (#2882) @blotus
• appsec: get the original UA from headers (#2809) @blotus
• file acquis: add mutex to protect access to the internal tail map (#2878) @blotus
• pkg/cwhub: download data assets to temporary files to avoid partial fetch (#2879) @mmetc
• auto detect if reading logs or storing sqlite db on a network share (#2241) @blotus
• cscli: hide hashed api keys (#2874) @mmetc
• fix: log stack trace while computing metrics (#2865) @mmetc
• systemd: check configuration before attempting reload (#2861) @mmetc
• appsec: split return code for bouncer and user (#2821) @blotus
• loki acquisition: set headers/basic auth if set for queryRange (#2815) @LaurenceJJones
• decouple docker image from package release (#2791) @mmetc
• update docker_start.sh (#2780) @LaurenceJJones
• fix some tests (#2775) @sabban
• armhf fix for getfstype (#2884) @sabban

Chore / Deps

• use go 1.21.9; update dependencies (#2931) @mmetc
• split & reorganize appsec tests. Add tests on existing zones (#2925) @buixor
• CI: use golangci-lint 1.57 (#2916) @mmetc
• bump github.com/docker/docker from 24.0.7+incompatible to 24.0.9+incompatible (#2913) @dependabot
• bump github.com/jackc/pgx/v4 from 4.14.1 to 4.18.2 (#2887) @dependabot
• CI: bump lint version and update configuration (#2901) @mmetc
• CI: use go 1.21.8 (#2906) @mmetc
• CI: bump github actions (#2895) @mmetc
• bump google.golang.org/protobuf from 1.31.0 to 1.33.0 (#2893) @dependabot
• bump dependencies for geoip db / lookup (#2880) @mmetc
• CI: "make generate" target; use ent 0.12.5 (#2871) @mmetc
• pkg/csconfig: use yaml.v3; deprecate yaml.v2 for new code (#2867) @mmetc
• remove dependencies on enescakir/emoji, gotest.tools (#2837) @mmetc
• re-generate ent code (#2844) @mmetc
• use go 1.21.7 (#2830) @mmetc
• update codeql action to v3 (#2822) @blotus
• CI: workflow improvements (#2792) @mmetc
• disable docker flavor test (#2783) @mmetc
• disable docker flavor test (#2781) @mmetc

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

Installation

Take a look at the installation instructions.