v1.0.0-RC2

This RC2 v1 introduces HTTP/2 support, additional info in metadata, adding the port scanned in Scan Output, as well as upgrading a number of dependencies and bug fixes.

New Features

• Adds support for scanning servers that only support HTTP/2 and h2c (http2 over plain-text)
• Adds the port scanned to each output line. This is helpful when port can be defined as a tool-wide CLI flag, passed in as an input line, or defined differently for different modules in multiple module scans and will help users disambiguate what was scanned
• Adds more info to the metadata, specifically exactly what ZGrab2 CLI args were used for a scan.

Bug Fixes

• A regression was introduced in v0.2.0 where if a TLS handshake failed after collecting some info, only an error would be returned. The old behavior was that any info from the TLS handshake would be returned with the error, yielding more handshake details on these failing connections.
• Fixes an issue where the Application Options field on the multiple module wasn't being parsed correctly.

What's Changed

• build(deps): bump golang.org/x/net from 0.41.0 to 0.42.0 by @dependabot[bot] in #575
• replace blocked cloudflare.com test with working domain by @phillip-stephens in #585
• Fix "Application Options" mutliple module parsing by @phillip-stephens in #578
• Fix integration tests on Github Runner by @phillip-stephens in #586
• feat(http): add SkipHost request option by @UnknownEclipse in #580
• feat(siemens): add custom readtimeout by flag by @zsbahtiar in #584
• build(deps): bump github.com/prometheus/client_golang from 1.22.0 to 1.23.0 by @dependabot[bot] in #587
• build(deps): bump golang.org/x/text from 0.27.0 to 0.28.0 by @dependabot[bot] in #593
• build(deps): bump golang.org/x/sys from 0.34.0 to 0.35.0 by @dependabot[bot] in #589
• build(deps): bump golang.org/x/crypto from 0.40.0 to 0.41.0 by @dependabot[bot] in #594
• build(deps): bump golang.org/x/net from 0.42.0 to 0.43.0 by @dependabot[bot] in #592
• Normalize scanning module variable usage by @Seanstoppable in #595
• build(deps): bump actions/download-artifact from 4 to 5 by @dependabot[bot] in #588
• build(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in #591
• Add port to ScanResponse output by @Seanstoppable in #596
• Bump minimum version for go to 1.24 by @phillip-stephens in #597
• build(deps): bump actions/setup-go from 5 to 6 by @dependabot[bot] in #605
• build(deps): bump golang.org/x/time from 0.12.0 to 0.13.0 by @dependabot[bot] in #600
• build(deps): bump github.com/prometheus/client_golang from 1.23.0 to 1.23.2 by @dependabot[bot] in #603
• build(deps): bump golang.org/x/sys from 0.35.0 to 0.36.0 by @dependabot[bot] in #601
• Make verbose a base flag by @Seanstoppable in #599
• build(deps): bump golang.org/x/text from 0.28.0 to 0.29.0 by @dependabot[bot] in #602
• build(deps): bump actions/attest-build-provenance from 2 to 3 by @dependabot[bot] in #604
• Add additional tests for http by @Seanstoppable in #606
• Phillip/98 metadata file improvements by @phillip-stephens in #607
• build(deps): bump golang.org/x/crypto from 0.41.0 to 0.42.0 by @dependabot[bot] in #610
• build(deps): bump golang.org/x/net from 0.43.0 to 0.44.0 by @dependabot[bot] in #609
• Update ZFlags by @phillip-stephens in #608
• Add support for HTTP/2 and HTTP/2 over clear-text by @phillip-stephens in #581
• build(deps): bump github.com/rogpeppe/go-internal from 1.10.0 to 1.14.1 by @dependabot[bot] in #612
• Return all the TLS handshake details we have even if handshake fails by @phillip-stephens in #613

New Contributors

• @zsbahtiar made their first contribution in #584

Full Changelog: v1.0.0-RC1...v1.0.0-RC2