v0.7.4 — Baseline Learning Mode

What's new in v0.7.4

Baseline Learning Mode

• Observes normal network behaviour (hosts, peers, ports, DNS domains/categories) and raises anomaly findings on deviations
• Five new anomaly categories: anomaly_new_host, anomaly_new_peer, anomaly_new_port, anomaly_new_dns_domain, anomaly_new_dns_category
• Enable/disable/configure in Settings → Integrations → Security Assistant → Configure
• Network Behaviour card on the Overview shows baseline status and key stats
• Baseline anomalies shown in a dedicated Baseline Anomalies section, separate from Security Findings

Security Findings Overhaul

• Four view modes — By Category, By Host, By Severity, Flat — per section
• Human-friendly category labels (Vulnerability / CVE, Port Scan, Suspicious Open Port, High Egress Traffic)
• Dismiss all / Restore all on every group card
• Per-section search bars — press Enter to apply; no focus loss on each keystroke
• Unified Dismissed section — security + baseline dismissed items together; teal Baseline chip on baseline entries

Statistics Dashboard

• Top N Hosts in Deviations chart (Pie / List toggle)
• Top N External IPs in Deviations chart (Pie / List toggle)

Network Map

• More distinct edge colours per traffic type
• Zoom and pan state preserved across re-renders
• Fixed duplicate hostname label on internal nodes

Bug Fixes

• Critical severity findings sorted last (SEV_ORDER falsy-zero bug)
• Dismissed baseline anomalies invisible in Dismissed section
• Config flow crash on HA 2024.4+ (selector import, OptionsFlow.init)
• BaselineManager.observe_snapshot() unexpected keyword argument
• Double 'ago' in relative timestamps
• Nav badge overcounting dismissed items
• Search inputs losing focus on every keystroke

Integration

• HACS support (hacs.json)
• Integration renamed to Security Assistant
• README fully updated; all translations updated (de, es, fr, it)