2.35.2 🌈

Please consult the Upgrade notes in the documentation for specific instructions for this release, and general upgrade instructions. Below is an automatically generated list of all PRs merged since the previous release.

Changes since 2.35.1

• Entrypoint Scripts: Add container level breakouts to prevent doom loopings @Maffooch (#10374)

🚀 API features and enhancements

• openapi fix: allow last_login to be null @cedricbu (#10360)

🐛 Bug Fixes

• Async Importer: Correct typing bug with DD_ASYNC_FINDING_IMPORT enabled @Maffooch (#10373)

2.35.1 🌈

Please consult the Upgrade notes in the documentation for specific instructions for this release, and general upgrade instructions. Below is an automatically generated list of all PRs merged since the previous release.

Changes since 2.35.0

• fix(imp-options): Wrong type-checker in validate_api_scan_configuration @kiblik (#10345)
• 🐛 fix netsparker issue #10311 @manuel-sommer (#10312)

🚀 API features and enhancements

• Mark UserProfile properties user_contact_info and global_role as optional @sfowl (#10314)

🐛 Bug Fixes

• String Filtering: Correct Typo For Reviewers @Maffooch (#10353)
• Importer: Correct add_findings_to_auto_group args @Maffooch (#10351)
• String Filtering: Support ID matching for links on listing pages @Maffooch (#10352)

2.35.0 🌈

Please consult the Upgrade notes in the documentation for specific instructions for this release, and general upgrade instructions. Below is an automatically generated list of all PRs merged since the previous release.

Changes since 2.34.0

• fix(Qualys parser): wrong handling enable_weakness @kiblik (#10105)
• fix(docker): Bump versions (python 3.11, debian bookworm) @kiblik (#10286)
• Rebased PR for Vulnerability Ids @hblankenship (#10301)
• fix NoneType exception in case of simple risk acceptance @lme-nca (#10309)
• Calm the deduplication of MsDefender @manuel-sommer (#10293)
• RedHatSatellite module_streams field is dict within list @manuel-sommer (#10291)
• Sonarqube flow field contains dict @manuel-sommer (#10290)
• fix(docker): Bump versions (python 3.11, alpine 3.20) @kiblik (#10280)
• fix: fix severity lookup in Qualys parser @nv-pipo (#10205)
• feat(django): preload django app @sebglon (#10138)
• Optimize nginx configs for performance by default @testaccount90009 (#10151)
• Update views.py to fix #10162 @devsecopsale (#10173)
• 🐛 severity mapping, ✨ defender performance improvement @manuel-sommer (#10185)
• Import History: Adding a few tests @Maffooch (#10235)
• fix(docs): Broken images in source-code-repositories.md @kiblik (#10261)
• msdefender: migrate cve to unsaved_vulnerability_ids @manuel-sommer (#10109)
• fix(integrity check): update hash + handle collectstatic @kiblik (#10241)
• Nosey Parker description fixes @tpat13 (#9856)
• Added with best practice for file open @hblankenship (#10115)
• 🐛 fix SARIF, issue #10191 @manuel-sommer (#10200)
• 🐛 reset description in progpilot after each finding @manuel-sommer (#10210)
• 🐛 fix severity in sonarqube scan detailed @manuel-sommer (#10157)
• Fix(api-sq): Doc: typo in multi branch scanning @kiblik (#10186)
• 💄 remove unnecessary content from sonarqube findings @manuel-sommer (#10133)
• 💄 remove unnecessary content from redhatsatellite findings @manuel-sommer (#10134)
• Setting status code on 400/500 errors @cneill (#10164)
• Product Metrics Bugfixes @blakeaowens (#10163)
• remove cve field from docs @manuel-sommer (#10110)
• Fix Report generation issue (pic_token template tag) @dogboat (#10153)

🚩 Changes to settings.dist.py / local_settings.py

• Introduce coverity scan parser @tschaepe-secuvera (#10097)
• feat(settings): Add integrity checker @kiblik (#10212)
• Consolidation of notification creation @kiblik (#8824)
• advance vulnerability urls @manuel-sommer (#10136)

🚩 Database migration

• Optionally Enforce SLA Remediation Days @blakeaowens (#10179)

🚀 API features and enhancements

• Risk Acceptance: Make API set/unset risk acceptance status @Maffooch (#10320)
• Importers: migrate to options class @Maffooch (#10254)
• feat(user): Show date of user creation @kiblik (#10119)
• Optionally Enforce SLA Remediation Days @blakeaowens (#10179)
• Object File Uploads: Add validations and download functionality @Maffooch (#10183)

🐛 Bug Fixes

• Risk Acceptance: Make API set/unset risk acceptance status @Maffooch (#10320)
• Test_Import: Correct exception for multiple findings in the same object @Maffooch (#10226)
• Object File Uploads: Add validations and download functionality @Maffooch (#10183)

🖌 Updates in UI

• Bugfix -> Dev: 2.35.0 @Maffooch (#10322)
• Make social login buttons fully clickable @WojTecH94 (#10304)
• numerical ordering for multiple pages @manuel-sommer (#9636)
• Importers: migrate to options class @Maffooch (#10254)
• Make endpoint names visible in reports @dogboat (#10230)
• Improving date of discovery filter @hblankenship (#10204)
• feat(user): Show date of user creation @kiblik (#10119)
• Optionally Enforce SLA Remediation Days @blakeaowens (#10179)
• Importers: Small corrections @Maffooch (#10182)
• Object File Uploads: Add validations and download functionality @Maffooch (#10183)
• fix(notifications-email): Use a for urls @kiblik (#10193)

🧰 Maintenance

• Bump netaddr from 1.2.1 to 1.3.0 @dependabot (#10318)
• Bump requests from 2.32.2 to 2.32.3 @dependabot (#10319)
• Bump boto3 from 1.34.116 to 1.34.117 @dependabot (#10317)
• Bump nginx from 1.26.0-alpine to 1.27.0-alpine @dependabot (#10316)
• chore(deps): update dependency ruff from 0.4.6 to v0.4.7 (requirements-lint.txt) @renovate (#10310)
• Bump python-gitlab from 4.5.0 to 4.6.0 @dependabot (#10306)
• Bump openpyxl from 3.1.2 to 3.1.3 @dependabot (#10307)
• Bump boto3 from 1.34.115 to 1.34.116 @dependabot (#10308)
• Bump boto3 from 1.34.111 to 1.34.115 @dependabot (#10302)
• chore(deps): update redis:7.2.5-alpine docker digest from 7.2.5 to 7.2.5-alpine (docker-compose.yml) @renovate (#10267)
• chore(deps): update helm release redis from 19.4.0 to ~19.5.0 (helm/defectdojo/chart.yaml) @renovate (#10265)
• Bump asteval from 0.9.32 to 0.9.33 @dependabot (#10269)
• chore(deps): update nginx/nginx-prometheus-exporter docker tag from 1.1.0 to v1.2.0 (helm/defectdojo/values.yaml) @renovate (#10300)
• chore(deps): update helm release postgresql from 15.4.2 to ~15.5.0 (helm/defectdojo/chart.yaml) @renovate (#10294)
• Bump coverage from 7.5.1 to 7.5.3 @dependabot (#10298)
• Update dependency ruff from 0.4.5 to v0.4.6 (requirements-lint.txt) @renovate (#10287)
• chore(deps): update postgres:16.3-alpine docker digest from 16.3 to 16.3-alpine (docker-compose.yml) @renovate (#10257)
• chore(deps): update dependency ruff from 0.4.4 to v0.4.5 (requirements-lint.txt) @renovate (#10258)
• Bump boto3 from 1.34.110 to 1.34.111 @dependabot (#10262)
• chore(deps): update helm release rabbitmq from 14.1.5 to ~14.3.0 (helm/defectdojo/chart.yaml) @renovate (#10245)
• Update Helm release postgresql from 15.3.5 to ~15.4.0 (helm/defectdojo/Chart.yaml) @renovate (#10244)
• Bump requests from 2.31.0 to 2.32.2 @dependabot (#10250)
• chore(deps): update helm release redis from 19.3.4 to ~19.4.0 (helm/defectdojo/chart.yaml) @renovate (#10246)
• chore(deps): update redis docker tag from 7.2.4 to v7.2.5 (docker-compose.yml) @renovate (#10234)
• Bump boto3 from 1.34.108 to 1.34.110 @dependabot (#10251)
• chore(deps): update redis:7.2.4-alpine docker digest from 7.2.4 to 7.2.4-alpine (docker-compose.yml) @renovate (#10225)
• Bump openapitools/openapi-generator-cli from v7.5.0 to v7.6.0 @dependabot (#10228)
• Bump boto3 from 1.34.107 to 1.34.108 @dependabot (#10229)
• Bump vulners from 2.1.5 to 2.1.7 @dependabot (#10220)
• Update gcr.io/cloudsql-docker/gce-proxy Docker tag from 1.35.2 to v1.35.3 (helm/defectdojo/values.yaml) @renovate (#10218)
• Bump boto3 from 1.34.106 to 1.34.107 @dependabot (#10221)
• Bump python-gitlab from 4.4.0 to 4.5.0 @dependabot (#10209)
• Update gcr.io/cloudsql-docker/gce-proxy Docker tag from 1.35.1 to v1.35.2 (helm/defectdojo/values.yaml) @renovate (#10216)
• Bump boto3 from 1.34.103 to 1.34.106 @dependabot (#10217)
• Update Helm release postgresql from 15.2.13 to ~15.3.0 (helm/defectdojo/Chart.yaml) @renovate (#10187)
• Bump boto3 from 1.34.102 to 1.34.103 @dependabot (#10189)
• Bump lxml from 5.2.1 to 5.2.2 @dependabot (#10190)
• Bump nginx from ca16009 to ef587d1 @dependabot (#10192)
• Update postgres Docker tag from 16.2 to v16.3 (docker-compose.yml) @renovate (#10177)
• Bump ruff from 0.4.3 to 0.4.4 @dependabot (#10181)
• Bump boto3 from 1.34.101 to 1.34.102 @dependabot (#10180)
• Update manusa/actions-setup-minikube action from v2.10.0 to v2.11.0 (.github/workflows/k8s-tests.yml) @renovate (#10174)
• Update Helm release redis from 19.2.0 to ~19.3.0 (helm/defectdojo/Chart.yaml) @renovate (#10170)
• Bump boto3 from 1.34.100 to 1.34.101 @dependabot (#10172)
• Update Helm release redis from 19.1.5 to ~19.2.0 (helm/defectdojo/Chart.yaml) @renovate (#10139)
• Bump boto3 from 1.34.98 to 1.34.100 @dependabot (#10158)
• Bump cryptography from 42.0.5 to 42.0.7 @dependabot (#10145)
• Bump djangosaml2 from 1.9.2 to 1.9.3 @dependabot (#10142)

2.34.5 🌈

Please consult the Upgrade notes in the documentation for specific instructions for this release, and general upgrade instructions. Below is an automatically generated list of all PRs merged since the previous release.

Changes since 2.34.4

• 🐛 severity mapping, ✨ defender performance improvement @manuel-sommer (#10185)
• Import History: Adding a few tests @Maffooch (#10235)
• fix(docs): Broken images in source-code-repositories.md @kiblik (#10261)
• msdefender: migrate cve to unsaved_vulnerability_ids @manuel-sommer (#10109)

2.34.4 🌈

Please consult the Upgrade notes in the documentation for specific instructions for this release, and general upgrade instructions. Below is an automatically generated list of all PRs merged since the previous release.

Changes since 2.34.3

• 🐛 fix SARIF, issue #10191 @manuel-sommer (#10200)
• 🐛 reset description in progpilot after each finding @manuel-sommer (#10210)

🐛 Bug Fixes

• Test_Import: Correct exception for multiple findings in the same object @Maffooch (#10226)

🖌 Updates in UI

• Make endpoint names visible in reports @dogboat (#10230)

2.34.3 🌈

Please consult the Upgrade notes in the documentation for specific instructions for this release, and general upgrade instructions. Below is an automatically generated list of all PRs merged since the previous release.

Changes since 2.34.2

• 🐛 fix severity in sonarqube scan detailed @manuel-sommer (#10157)
• Fix(api-sq): Doc: typo in multi branch scanning @kiblik (#10186)

🚀 API features and enhancements

• Object File Uploads: Add validations and download functionality @Maffooch (#10183)

🐛 Bug Fixes

• Object File Uploads: Add validations and download functionality @Maffooch (#10183)

🖌 Updates in UI

• Importers: Small corrections @Maffooch (#10182)
• Object File Uploads: Add validations and download functionality @Maffooch (#10183)
• fix(notifications-email): Use a for urls @kiblik (#10193)

2.34.2 🌈

Please consult the Upgrade notes in the documentation for specific instructions for this release, and general upgrade instructions. Below is an automatically generated list of all PRs merged since the previous release.

Changes since 2.34.1

• 💄 remove unnecessary content from sonarqube findings @manuel-sommer (#10133)
• 💄 remove unnecessary content from redhatsatellite findings @manuel-sommer (#10134)
• Setting status code on 400/500 errors @cneill (#10164)
• Product Metrics Bugfixes @blakeaowens (#10163)
• remove cve field from docs @manuel-sommer (#10110)

🚩 Changes to settings.dist.py / local_settings.py

• advance vulnerability urls @manuel-sommer (#10136)

2.34.1 🌈

Please consult the Upgrade notes in the documentation for specific instructions for this release, and general upgrade instructions. Below is an automatically generated list of all PRs merged since the previous release.

Changes since 2.34.0

• Fix Report generation issue (pic_token template tag) @dogboat (#10153)

2.34.0 🌈

Please consult the Upgrade notes in the documentation for specific instructions for this release, and general upgrade instructions. Below is an automatically generated list of all PRs merged since the previous release.

Changes since 2.33.0

• Merge Bugfix into Dev for 2.34.0 @Maffooch (#10125)
• ✨ implement progpilot SAST parser #10044 @manuel-sommer (#10052)
• 🐛 fix hcl_appscan, handle severity is None #10074 @manuel-sommer (#10101)
• 🐛 Fix RedHatSatellite components @manuel-sommer (#10082)
• fix awssecurityhub findings @manuel-sommer (#10072)
• add test description for AWS SecurityHub Scan @manuel-sommer (#9904)
• add Knowledge Base link to docs sidebar element @paulOsinski (#10075)
• remove non-working links from social-authentication.md @paulOsinski (#10071)
• ✨ implement yarn2 parser @manuel-sommer (#9985)
• Update Release Notes for 2.34.0 @manuel-sommer (#10077)
• Newlines in SARIF parser code blocks @ahmsec (#9932)
• refactor generic parser @manuel-sommer (#9922)
• Fix engagements filters in 'engagements by product view' @davidhernandeze (#10046)
• Ruff: add and fix some of DJ rules @kiblik (#9891)
• Add support for more GIT SCMs in finding view for the finding URL @eu-david (#9710)
• Ruff: add and fix EXE rules @kiblik (#9896)
• helm: Add subcomponent labels for celery beat and worker at deployment @al-cheb (#9865)
• extend _index.md with link to Knowledge Base @paulOsinski (#10002)
• Unit Tests: Correct File Close Warnings @hblankenship (#10055)
• Parser: Fix Qualys Parser Mitigation Date Issue @MarianG (#9888)
• update semgrep tests @hblankenship (#10058)
• Filter All Engagements by Date @davidhernandeze (#9914)
• Updated DryRun Security config @mtesauro (#10037)
• Updates to semgrep parser @mtesauro (#10033)
• Helm postgresql: Upgrade image @kiblik (#9966)
• Fix: Broken Swagger when Remote User enabled @kiblik (#9960)
• fix anchore_grype null characters issue, #9942 @manuel-sommer (#9962)
• GH-action: Detect Merge Conflicts - update v3 @kiblik (#9940)
• fix horusec null characters issue, #9939 @manuel-sommer (#9941)
• Remove pyproject.toml, add ruff.toml @cneill (#9929)
• resolve fixme from cobalt parser @manuel-sommer (#9921)
• 🐛 jake json output in cyclonedx not parsed @manuel-sommer (#9873)
• Checkmarx one parser support API exported files @FelixHernandez (#9917)
• Ruff: Fix UP (after couple of merges) @kiblik (#9903)
• sonarqube: cve to vulnerability_ids @manuel-sommer (#9902)
• 🔨 restructure json in scout suite unittests @manuel-sommer (#9874)
• Ruff: Add checks that are fully solved @kiblik (#9864)
• rework intsights to split csv and json @manuel-sommer (#9855)
• Remove 'version' from docker-compose @kiblik (#9831)
• osv_scanner: migrate from cve to unsaved_vulnerability_ids @manuel-sommer (#9832)
• yarn_audit: migrate from cve to unsaved_vulnerability_ids @manuel-sommer (#9833)
• nancy: migrate from cve to unsaved_vulnerability_ids @manuel-sommer (#9834)
• 🐛 RedHatSatellite, multiple vulnids @manuel-sommer (#9875)
• resolve generic parser fixme @manuel-sommer (#9854)
• 🐛 whitehat sentinel fix mitigated tzinfo attribute @manuel-sommer (#9872)
• Bugfix for NoneType Error in SSLyze parser @manuel-sommer (#9850)
• 🎇 refactor sonarqube and add JSON parsing for api export @manuel-sommer (#9734)
• GHA: Update docker-compose refs to docker compose @Maffooch (#9871)
• GHA: Update docker-compose refs to docker compose @Maffooch (#9870)

🚩 Changes to settings.dist.py / local_settings.py

• RemoteUser: Hide from Swagger @kiblik (#9961)
• Ruff: clean-up after multiple merges not cover by new rules @kiblik (#10078)
• remove aws scout2 parser @manuel-sommer (#9894)
• Ruff: add isort @kiblik (#9754)
• Make the number of request/response pairs returned by the API configurable @hblankenship (#9967)
• Gunicorn: Legacy cleanup @Maffooch (#9953)
• PreDjango 4.2 fixes @kiblik (#9882)
• ✨ add RHSA link for RedHatSatellite findings @manuel-sommer (#9877)
• Ruff: add pyupgrade @kiblik (#9755)
• Add NOTIFICATIONS_SYSTEM_LEVEL_TRUMP @kiblik (#9699)

🚩 Database migration

• Similar Findings: Create Toggle @Maffooch (#10047)
• Filtering Performance: Add opt-in setting for converting to string ba… @Maffooch (#10038)
• Severity: Extra validation and cleanup @Maffooch (#9952)

🚀 General features and enhancements

• Importer + Reimport: Reorg, cleanup, comment @Maffooch (#10011)
• String Based Filtering: Follow on for #10038 @Maffooch (#10050)
• Jira Webhook: Reorg logging and responses @Maffooch (#10049)
• Similar Findings: Create Toggle @Maffooch (#10047)
• Filtering Performance: Add opt-in setting for converting to string ba… @Maffooch (#10038)

🚀 API features and enhancements

• Importer + Reimport: Reorg, cleanup, comment @Maffooch (#10011)
• Ruff: clean-up after multiple merges not cover by new rules @kiblik (#10078)
• Ruff: add isort @kiblik (#9754)
• Ruff: add and fix EM rules @kiblik (#9892)
• Ruff: add and fix C4 @kiblik (#9889)
• Make the number of request/response pairs returned by the API configurable @hblankenship (#9967)
• Severity: Extra validation and cleanup @Maffooch (#9952)
• Ruff: add pyupgrade @kiblik (#9755)

🐛 Bug Fixes

• Set Finding date if nothing is set from the parser @Maffooch (#10018)
• Severity: Extra validation and cleanup @Maffooch (#9952)

🖌 Updates in UI

• Class based reports views @dogboat (#10124)
• Checkmarx One: Add additional parsing for different report formats @Maffooch (#10102)
• Ruff: clean-up after multiple merges not cover by new rules @kiblik (#10078)
• Ruff: add isort @kiblik (#9754)
• Ruff: add and fix C4 @kiblik (#9889)
• Product Metrics: Performance Enhancements @blakeaowens (#10059)
• String Based Filtering: Follow on for #10038 @Maffooch (#10050)
• Similar Findings: Create Toggle @Maffooch (#10047)
• Fix numerical sorting in the old UI for Active/Verified findings @davidhernandeze (#10045)
• Filtering Performance: Add opt-in setting for converting to string ba… @Maffooch (#10038)
• fix in engagement_list.html @manuel-sommer (#9970)
• Hide checkbox and action columns on Test view Findings listing @dogboat (#9971)
• Update dojo_sort template tag to properly handle querystrings with keys with multiple values @dogboat (#9969)
• view-finding-footer-fix Close a div so footer displays properly @dogboat (#9968)
• Edit wording on "Add group members" pages @dogboat (#9965)
• Update format_epss display tag to try/catch formatting errors @dogboat (#9934)
• Ruff: add pyupgrade @kiblik (#9755)

🧰 Maintenance

• Bump sqlalchemy from 2.0.29 to 2.0.30 @dependabot (#10120)
• Bump ruff from 0.4.2 to 0.4.3 @dependabot (#10121)
• Bump boto3 from 1.34.97 to 1.34.98 @dependabot (#10122)
• Bump coverage from 7.5.0 to 7.5.1 @dependabot (#10123)
• Update rabbitmq Docker tag from 3.13.1 to v3.13.2 (docker-compose.yml) @renovate (#10103)
• Bump boto3 from 1.34.96 to 1.34.97 @dependabot (#10106)
• Bump ruff from 0.4.1 to 0.4.2 @dependabot (#10042)
• Bump boto3 from 1.34.95 to 1.34.96 @dependabot (#10096)
• Update Helm release rabbitmq from 11.16.2 to v14 (helm/defectdojo/Chart.yaml) @renovate (#10069)
• Bump drf-spectacular-sidecar from 2024.4.1 to 2024.5.1 @dependabot (#10080)
• Bump boto3 from 1.34.94 to 1.34.95 @dependabot (#10079)
• Bump boto3 from 1.34.93 to 1.34.94 @dependabot (#10067)
• Bump social-auth-app-django from 5.4.0 to 5.4.1 @dependabot (#10026)
• Bump boto3 from 1.34.92 to 1.34.93 @dependabot (#10054)
• Bump jquery-ui from 1.13.2 to 1.13.3 in /components @dependabot (#10056)
• Bump nginx from 1.25.5-alpine to 1.26.0-alpine @dependabot (#10057)
• Bump social-auth-core from 4.5.3 to 4.5.4 @dependabot (#10030)
• Bump social-auth-app-django from 5.4.0 to 5.4.1 @dependabot (#10029)
• Bump boto3 from 1.34.90 to 1.34.92 @dependabot (#10036)
• Bump boto3 from 1.34.89 to 1.34.90 @dependabot (#10024)
• Bump django-split-settings from 1.2.0 to 1.3.1 @dependabot (#10022)
• Bump uwsgi from 2.0.23 to 2.0.25.1 @dependabot (#10023)
• Bump coverage from 7.4.4 to 7.5.0 @dependabot (#10020)
• Bump celery from 5.3.6 to 5.4.0 @dependabot (#10019)
• Bump pycurl from 7.45.2 to 7.45.3 @dependabot (#10016)
• Bump djangosaml2 from 1.9.1 to 1.9.2 @dependabot (#10014)
• Bump redis from 5.0.3 to 5.0.4 @dependabot (#10017)
• Bump gitpython from 3.1.41 to 3.1.43 @dependabot (#10015)
• Bump blackduck from 1.1.0 to 1.1.3 @dependabot (#10013)
• Bump netaddr from 0.10.1 to 1.2.1 @dependabot (#10004)
• Bump packageurl-python from 0.13.4 to 0.15.0 @dependabot (#10008)
• Bump sqlalchemy from 2.0.25 to 2.0.29 @dependabot (#10006)
• Bump debugpy from 1.8.0 to 1.8.1 @dependabot (#10005)
• Bump boto3 from 1.34.35 to 1.34.89 @dependabot (#10007)
• Bump markdown from 3.5.2 to 3.6 @dependabot (#9991)
• Bump moment from 2.29.4 to 2.30.1 in /components @dependabot (#9996)
• Bump html2text from 2020.1.16 to 2024.2.26 @dependabot (#9990)
• Bump jquery from 3.7.0 to 3.7.1 in /components @dependabot (#9997)
• Bump social-auth-core from 4.5.2 to 4.5.3 @dependabot (#9992)
• Bump pdfmake from 0.2.7 to 0.2.10 in /components @dependabot (#9994)
• Bump cryptography from 42.0.4 to 42.0.5 @dependabot (#9989)
• Bump drf-spectacular from 0.27.1 to 0.27.2 @dependabot (#9981)
• Bump asteval from 0.9.31 to 0.9.32 @dependabot (#9980)
• Bump drf-spectacular-sidecar from 2024.3.4 to 2024.4.1 @dependabot (#9976)
• Bump vobject from 0.9.6.1 to 0.9.7 @dependabot (#9978)
• Bump python-dateutil from 2.8.2 to 2.9.0.post0 @dependabot (#9982)
• Bump openapitools/openapi-generator-cli from v7.4.0 to v7.5.0 @dependabot (#9983)
• Bump nginx from 1.25.4-alpine to 1.25.5-alpine @dependabot (#9984)
• Update postgres:16.2-alpine Docker digest from 16.2 to 16.2-alpine (docker-compose.yml) @renovate (#9972)
• Update redis:7.2.4-al...

2.33.7 🌈

Please consult the Upgrade notes in the documentation for specific instructions for this release, and general upgrade instructions. Below is an automatically generated list of all PRs merged since the previous release.

Changes since 2.33.6

• update semgrep tests @hblankenship (#10058)

🚩 Database migration

• Similar Findings: Create Toggle @Maffooch (#10047)

🚀 General features and enhancements

• String Based Filtering: Follow on for #10038 @Maffooch (#10050)
• Jira Webhook: Reorg logging and responses @Maffooch (#10049)
• Similar Findings: Create Toggle @Maffooch (#10047)

🖌 Updates in UI

• Product Metrics: Performance Enhancements @blakeaowens (#10059)
• String Based Filtering: Follow on for #10038 @Maffooch (#10050)
• Similar Findings: Create Toggle @Maffooch (#10047)

🧰 Maintenance

• Bump social-auth-app-django from 5.4.0 to 5.4.1 @dependabot (#10026)