2.3.33

Fixes

• properly handle object_refs for STIX SDOs other than observed-data
• remove deprecated infer_datetime_format arg to Pandas to_datetime function

2.3.32

Fixes

• Fix SQL generation with ref lists, e.g. email-message:to_refs[*].value (#118)

2.3.31

Fixes

• Fix SQL translation of MATCHES operator (#116)

2.3.30

Some random fixes.

Fixes

• ingest: drop all unmapped columns at once, which is much faster
• Don't add table name to ref'ed prop in assign_query (#113)

2.3.29

Fixes in aio "fast translate" only

Fixes

• Better handling of "long" property names for PostgreSQL (otherwise they get silently truncated and chaos ensues)

2.3.28

Another round of "fast translation/ingestion" fixes

Fixes

• missing tables when using fast translation (#109)
• grouping a mix of list and str columns results in a list of lists (seen with elastic_ecs in x-oca-event:category)

2.3.27

More "fast translation" fixes

Fixes

• TypeError: 'float' object is not iterable #106
• AttributeError: 'dict' object has no attribute 'split' #107

Changes

• Removed support for Python 3.7 (no actual changes, but we no longer test on 3.7)

2.3.26

Fixes

• fast translation: improved ToInteger transformer implementation (for issue #104)

2.3.25

Fixes

• rework fast translation so that (most) stix-shifter transformers run before grouping is handled
• fix ValueError: invalid literal for int() with base 10: '' in asyncstorage.py

2.3.24

Changes

• SqlStorage.extract_observeddata_attribtutes will now accept a list of strings for name_of_attribute to add multiple attributes; it will still accept single string if you only want a single attribute form the original observation

Fixes

• SqlStorage.extract_observeddata_attribtutes will rename the observation id field to observation_id automatically to avoid clashing with the existing id field (fixes opencybersecurityalliance/kestrel-lang#360)