v2.4.0

What's Changed

Table Changes

• Add schema generation and merging for platform-specific tables in CI by @cesarfda in #2743
• Add rule for 1PRK 1Password Recovery Key secrets by @FritzX6 in #2744

Features and Improvements

• Write native messaging manifest on launcher startup by @RebeccaMahany in #2737
• Native messaging host support by @RebeccaMahany in #2738
• Native messaging support for Firefox by @RebeccaMahany in #2747

Bug Fixes

• Check more locations for xauthority file when launching desktop process on Linux by @RebeccaMahany in #2736
• Accurately check current running osquery version in autoupdater by @RebeccaMahany in #2740
• Remove two launcher-orphaned sloggers, observe sendbuffer errors by @brhoades in #2751
• Ignore android:apk-key-hash from generic-api-key findings by @RebeccaMahany in #2752
• logshipper: increase buffer/batch size, fix potential client race, add sendbuffer draining by @brhoades in #2753
• Fix JWE check for secretscan table false positives by @RebeccaMahany in #2758

Performance Improvements

• added buffered transport to osquery by @cesarfda in #2754

Observability

• Check for quarantine xattr in quarantine checkup by @RebeccaMahany in #2734

Build and Package

• Fix creating tree for automated root.json update by @RebeccaMahany in #2755

Tests, Docs, and Other No-op Changes

• Remove project workflow by @RebeccaMahany in #2735

Dependency Updates

• Upgrade golang.org/x/image for GO-2026-4961, GO-2026-5061, GO-2026-5062 by @RebeccaMahany in #2749

General

• update dt4a auth origin allowlist regex by @zackattack01 in #2732
• Restrict access to launcher.db and its backups on Windows by @RebeccaMahany in #2733
• Simple TUF based downloader by @directionless in #2600
• Shorten autoupdate interval from 1h to 15m by @RebeccaMahany in #2739
• support update downloads during autoupdater initial delay by @zackattack01 in #2741
• Remove port from ServerName in tls client config by @jbielick in #2742
• Stub out osquery function in reset test to avoid flaky behavior by @RebeccaMahany in #2745
• Include quarantine directory/directories in quarantine checkup summary by @RebeccaMahany in #2746
• Notification localization by @cesarfda in #2750
• [Automated] July 2026 - Update TUF root.json by @github-actions[bot] in #2756
• adding agents file by @cesarfda in #2757

New Contributors

• @jbielick made their first contribution in #2742
• @brhoades made their first contribution in #2751

Full Changelog: v2.3.2...v2.4.0