Skip to content

v4.21.0

Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 10 Sep 15:55
v4.21.0
b47065b
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

4.21.0 (2026-09-10)

Changelog

Features

  • Release Track tabs changed to "Board", "Releases", and "Config".
  • The ability to delete release tracks is moved to the bottom of the Config tab.
  • Metadata for the x-mitre-collection object emitted in STIX 2.1 bundles is now more steerable. Users can select the publishing identity (created_by_ref), collection markings (which appears in the collection's object_marking_refs list), collection ID, and the collection's created timestamp. The latter two cannot be changed after the first snapshot is persisted because it would break the provenance/lineage of snapshots. We hope this will make the x-mitre-collection object less opaque to Workbench editors.
  • The publishing identity can optionally be set to inherit from the organization/global identity. Otherwise, users can select from any available STIX identity in the object library.
  • Similarly, the collection marking can be set to inherit from the organization/global marking definition. Otherwise, users can select from any available marking definition in the object library.
  • Users can now configure custom aliases for their release track ID which maps to a valid URL slug. For example, rather than reach the release track via /api/release-tracks/release-track-${uuid}, users can set alias to something like defense-team and route to the track via /api/release-tracks/defense-team.
  • The snapshot cards visible on the Releases tab have been visually overhauled.
  • The user workflows for creating snapshots is more simpler and more intuitive. For standard tracks, the "preview and release" button as well as the "create draft" button have been removed. We realized that these were unnecessary because the Workbench automatically creates a new draft whenever a change occurs — now, that draft is always shown at the top of the Releases tab, and it's marked accordingly with a label that says "latest". Thus, users need not think about creating standard track snapshots. Instead, they just need to think about whether and when the latest (draft) snapshot is ready to be tagged and released. For virtual tracks, the "create draft" button still exists.
  • Each snapshot card now shows which user identity was causally associated with its creation.
  • Each snapshot card now shows the causal operation that triggered the snapshot to be created. For example, "candidates added" indicates that a draft was created as a result of a new candidate being added; "scheduled snapshot" indicates that a snapshot was created through the track's cron-based scheduling mechanism; etc.
  • The frontend now fully supports configuring virtual track cron schedules.
  • Users can now convert snapshots between tagged and draft status.
  • Users can delete draft snapshots. Guardrails exist to ensure that delete operations do not result in fragmented snapshot lineages.
  • Users can now change the semver release value of a tagged snapshot after the tagging operation.
  • In all such cases where the x-mitre-collection object may be effected, the STIX 2.1 SHA-256 hash will be recomputed.
  • Two new data quality dashboards have been added: "Cross-Domain Relationships" and "Objects Without Domains".

Bugs

  • Various bugs were resolved effecting the accuracy of snapshot graph provenance. In some cases, data leaks were occurring whereby unreleased objects in the staged tier were being observed in emitted STIX bundles. These issues have been resolved.
  • Fixed an issue with the "Duplicate Relationships" dashboard function that was causing the backend to crash when the Data Quality page was opened.

Automated Changelog

Bug Fixes

  • migrations: remove unnecessary migration scripts (ee6a278)
  • reports: reduce duplicate relationship report memory use (65ebb4e)

Features

  • release-tracks: allow administrators to delete the latest release (ef57b10)
  • release-tracks: export sealed bundles only and add track aliases (fd8cf16)
  • release-tracks: expose virtual snapshot provenance (f186a28)
  • release-tracks: preserve drafts for safe release rollback and retagging (7aca0df)
  • release-tracks: record snapshot creation provenance (a795b04)
  • release-tracks: seal snapshot content manifests (2fffeb7)
  • release-tracks: separate draft conversion from snapshot deletion (e9fd856)
  • release-tracks: support virtual schedule updates (ac3dd03)
  • reports: add domain consistency report (eb3711a)
Assets 2
Loading