Releases: ptarmiganlabs/butler-sos
Releases · ptarmiganlabs/butler-sos
Release list
butler-sos: v15.0.1
15.0.1 (2026-06-09)
Bug Fixes
- remove redundant esbuild install step from CI workflows (b95417e)
- update Audit.qs version range for Butler SOS 15.0.0 compatibility (4385677)
Miscellaneous
- update dependencies to latest versions (fbc02f5)
🛡 VirusTotal GitHub Action analysis:
butler-sos: v15.0.0
15.0.0 (2026-05-24)
⚠ BREAKING CHANGES
- make Butler SOS handle events from Audit.qs Qlik Sense extension
Features
- add source host validation for UDP endpoints (95a67f2)
- audit: add envelope validation for UUIDs and event types (faa0920)
- audit: add logging for schema validation and payload errors (29854c5)
- audit: check TLS version for audit events API, warn if deprecated (9671493)
- audit: enhance logging for connection test success and failures (8a80b13)
- audit: enhance screenshot download functionality with redirect handling and host validation (386dabf)
- audit: implement Audit.qs version compatibility checks and update documentation (92480aa)
- audit: implement consistent response structure and codes (c57d15f)
- audit: implement HTTP rate limiting configuration and validation (494a529)
- audit: implement SSRF protection with hostname allow-list for screenshot downloads (d96e673)
- audit: implement verbose logging for audit events and enhance tests (4a18df7)
- audit: update audit events schema to include user ticket support and enhance session caching (ad579d1)
- audit: update user ticket handling to derive virtual proxy from screenshot URL (8921cd6)
- make Butler SOS handle events from Audit.qs Qlik Sense extension (d63cf97)
Bug Fixes
- address review feedback on UDP source validation (b127825)
- audit: gate debug JSON.stringify behind isLevelEnabled check to avoid eager PII evaluation (bca65d4)
- audit: refine CORS and headers handling for audit API (1fca905)
- audit: update config schema to require 'destination' and 'tls' properties (7960808)
- docs: update agent instruction files (5ff9fce)
- parallel DNS resolution, early IP check, throttled reject logs for UDP handlers (c5ab84d)
- startup: Log successful startup of rejected events tracking (3825015)
- throttle missing-version warn state cleanup to once per minute (a96d6b5)
- update insiders-build workflow to prevent execution on release commits (eaa0b2c)
Miscellaneous
- add .gitkeep to docs/to-doc-site directory (72a1439)
- add JSDoc for audit-events test helpers (b0affe5)
- deps: update dependencies to latest versions (1b989ba)
- deps: update ESLint and related packages to latest versions (429c1f1)
- update dependencies (99cfb83)
- update dependencies and improve InfluxDB metrics handling (18676a9)
- update package.json to add knip (b3dec68)
Refactoring
- extract createRejectThrottle to shared utility, add tests, prune stale map entries (69bb8f5)
- update correlationId handling in audit events API and documentation (4968e82)
Documentation
- add detailed documentation for Audit Events API, including status codes, rate limiting, and crash dump feature (784e682)
- add TLS and CORS configuration documentation for audit events API (0b6ab86)
- clarify gitnexus CLI alternatives and add PR 1345 doc-site summary (7468a0f)
- update GitNexus project details and CLI command instructions in AGENTS.md and CLAUDE.md (6571022)
- update README to clarify InfluxDB configuration for metrics and audit events (b3b2a05)
🛡 VirusTotal GitHub Action analysis:
butler-sos: v14.0.0
14.0.0 (2025-12-09)
⚠ BREAKING CHANGES
- events: Add proper queue for incoming log and user events
Features
- Enhance logging for incoming UDP log events (02858c2)
- events: Add proper queue for incoming log and user events (22fdc30)
- events: Sanitize all incoming event data before using it (e536f0e)
Bug Fixes
- Not captured log events from QSEoW due to bug introduced in recent refactoring of the codebase (b3db037)
Miscellaneous
- deps: update dependencies in package.json (26ccb62)
- deps: Update dependencies to latest versions (49195b9)
- workflows: update action versions in CI configuration files (ad4f3e8)
🛡 VirusTotal GitHub Action analysis:
butler-sos: v13.0.0
13.0.0 (2025-09-29)
This release bring a new level of robustness to the Butler SOS build process.
Won't be visible to regular users of the tool, but as it establishes a better foundation for the future it's a good thing.
There is also a minor (but breaking) change in the form of the "-c" (same as "--configfile") parameter is now mandatory.
Most users use Butler SOS this way anyway, so it will not affect most users.
But if you run Butler SOS in Docker you may want to review your compose files (or whatever mechanism you have to defined container parameters).
⚠ BREAKING CHANGES
- -c / --configfile option is now mandatory
Features
- -c / --configfile option is now mandatory (b5a3c91)
- Add version info to description of the binary, shown when started with no command line options (720a8db)
- build: Inject git SHA and date into package.json for versioning in insidier's builds (ffcc8ba)
- telemetry: Enhance telemetry messaging for user clarity and support (8f05c3c)
Bug Fixes
- telemetry: Make telemetry handling and error management more robust (c03e92a)
Miscellaneous
- deps: update actions/checkout action to v5 (b746fa4)
- deps: update actions/download-artifact action to v5 (43859ac)
- deps: update actions/setup-node action to v5 (43cd744)
- deps: update dependency eslint-plugin-jsdoc to v60.4.1 (5e6fe40)
- deps: update google/osv-scanner-action action to v2.2.2 (46f22b3)
- deps: update influxdb docker tag to v1.12.2 (1798e11)
- enhance CI/CD pipeline with improved monitoring of insider builds (b3363e1)
- update dependencies in package.json (d48e98d)
Refactoring
- improve and make error logging more consistent (7137608)
🛡 VirusTotal GitHub Action analysis:
butler-sos: v12.0.1
butler-sos: v12.0.0
12.0.0 (2025-07-31)
This release brings some significant changes in the area of security.
During the build process (when the Butler SOS binaries are created) there are now more security checks, using properly maintained tools from both Microsoft, Google and others.
A Software Bill of Materials (SBOM) is also created during the build process, making it easier to understand what components are included in Butler SOS (this is needed in some enterprise environments).
⚠ BREAKING CHANGES
- Add new setting in YAML config file to disable retrieval of info about the host where Butler SOS is running.
Features
- Add new setting in YAML config file to disable retrieval of info about the host where Butler SOS is running. (85add0c)
- Enhance build process and security measures (fe5628b)
Bug Fixes
- Enhance Docker architecture logging in mainScript for better clarity on environment (989e3a4)
- Improve input validation in getFormattedTime and enhance logging in messageEventHandler (1a22e46)
- Only verify settings in YAML config file if the setting's associated feature is enabled (8f50c5d)
- Remove trailing slash warning in healthcheck endpoint requests (e1a33df), closes #942
- update error message for telemetry and system info configuration (121d8fd)
Miscellaneous
- Add OSV-Scanner scheduled workflow for automated vulnerability scanning (803fd4d)
- Add test cases for file interactions in SEA vs non-SEA modes (8c14980)
- Add unit test guidelines to copilot instructions (438d59d)
- deps: update dependency mqtt to v5.14.0 (d0ea578)
- deps: update google/osv-scanner-action action to v2.1.0 (043f402)
- Implement comprehensive license checking and reporting using license-checker-rseidelsohn (a13b1e3)
- update dependencies in package.json (33cd762)
- Update influxdb Docker tag to v1.11.8 (0b892e6)
- update package dependencies and add new scripts (eec0d4e)
- Update security scanning details and add npm-check-updates dependency (cf25e92)
- Upgrade Jest to v30.0.5 and fix ES module compatibility (490768f)
Refactoring
- Simplify return statements and improve code readability in prism.js (b53aa8b)
🛡 VirusTotal GitHub Action analysis:
butler-sos: v11.1.0
11.1.0 (2025-05-23)
Features
- Add custom 404 page for config visualisation server (3523025)
- Build binary specifically for Apple Silicon (1c4b906)
- enhance 404 page with improved styling and interactive elements (f1548c7)
Bug Fixes
- config-visualise: Update asset retrieval to use binary format for images (8f11a11)
- docker: Update base image to Node22 (7f3ad5a)
Miscellaneous
- Add a first set of ca 90 unit tests (12d44bd)
- Add copilot instructions for code formatting and JSDoc comments (dc6233a)
- deeps: update dependencies for commander, ua-parser-js, and eslint-config-prettier. Update code and tests to handle changes in those libs. (78bc8c7)
- deps: update @fastify/static, posthog-node, and systeminformation to latest versions (9c77b14)
- deps: update dependencies for fastify, eslint, eslint-plugin-jsdoc, and snyk (aa5cd1d)
- deps: Update dependencies: bump @fastify/rate-limit to 10.3.0, commander to 14.0.0, and config to 4.0.0 (0bcd12d)
- deps: update Fastify and related dependencies to latest versions (3707472)
- deps: update uuid and globals dependencies to latest versions (cf669f8)
- deps: Upgrade Prism to 1.30 (e0287cd)
- Switch to using Node SEA when building binaries for Windows, macOS-x64 and Linux (d073518)
- Update runtime version to 22 for dev work (bf226b3)
Refactoring
- Add JSDoc comments to ALL functions (b406e6c)
- Make parsing of event messages from QS more scalable, maintainable and testable. (4d8dcea)
Documentation
- Add new Markdown source code overview file and cmd for creating it (53c4a77)
🛡 VirusTotal GitHub Action analysis:
butler-sos: v11.0.3
11.0.3 (2024-10-23)
Bug Fixes
- config: Add missing property in sample config file (51b64b3), closes #930
- config: Allow empty New Relic destination array in config file (9601a9c), closes #929
- influxdb2: Allow pos/neg engine cache values (f9d8ecb), closes #933
- startup: Make sure log level can be set via command line (45733c9), closes #932
- startup: Make sure no attempts to access InfluxDB if it is disabled in config file (4010a1c), closes #931
🛡 VirusTotal GitHub Action analysis:
butler-sos: v11.0.2
11.0.2 (2024-10-21)
Bug Fixes
- build: Pre-build binaries no longer crash in some conditions during startup (dbaece8), closes #924
- startup: Better detection of invalid config file structure and content (befc5ee), closes #925
Miscellaneous
- deps: Update dependencies (6b6c965)
🛡 VirusTotal GitHub Action analysis:
butler-sos: v11.0.1
11.0.1 (2024-09-20)
Miscellaneous
- Remove Postgress dependency, as log db support has been discontinued (94aea42)
- Remove leftover references to Postgress log db in the code (1c3fbcc)
Documentation
- Update README file badges (0eb42c1)
🛡 VirusTotal GitHub Action analysis:
🛡 VirusTotal GitHub Action analysis: