v0.5.4

🔖 Release 0.5.4

What's New

• Updated load testing tool fake_news by @javuto in #860
• Activity pkg to handle data from nodes and environments by @javuto in #861
• Disable osctrl-admin for docker development environment by @javuto in #862
• Updated activity pkg to store environment osquery activity by @javuto in #864
• build(deps-dev): bump vite from 8.0.13 to 8.0.16 in /frontend in the npm_and_yarn group across 1 directory by @dependabot[bot] in #863
• build(deps): bump the npm_and_yarn group across 1 directory with 2 updates by @dependabot[bot] in #865
• Potential path traversal found by codex security plugin by @javuto in #866
• Moving activity to main node view by @javuto in #867
• Prevent reboot loop in development environment by @javuto in #868
• Bump to all npm dependencies by @javuto in #869
• Bump to DOMpurify to satisfy dependabot alert by @javuto in #870
• Wire Redis activity rollups through to the frontend by @javuto in #871
• Dependencies update triggered by dependabot by @javuto in #872
• Saving schedule saves full configuration by @javuto in #873
• Display rendered configuration for environment by @javuto in #874
• Ad-hoc tool to test TLS endpoints using node_key from nodes by @javuto in #875
• Changes to node details view and surface node_key for admins by @javuto in #876
• Fixed distributed queries and status led by @javuto in #877
• Improved distributed query visibility and control across the query views by @javuto in #878
• Improved carves visibility and control across the carve views by @javuto in #879
• Redesigned view for carves and queries by @javuto in #880
• Lower intervals for the development environment and query in schedule by @javuto in #881
• Per-host filtering for the osctrl-tls HTTP debug dump by @javuto in #882
• Prepare release 0.5.4 and bump osquery to 5.23.1 by @javuto in #883

Full Changelog: v0.5.3...v0.5.4

0.5.3

🔖 Release 0.5.3

What's New

• docker-compose standalone is not the standard way to trigger docker c… by @ITJamie in #824
• osctrl: defensive hardening round — login timing, rate-limit XFF bypass, JWT rotation, info-disclosure closes by @alvarofraguas in #826
• Fix for goreleaser error when tagging a new release by @javuto in #827
• release: fix multi-arch Docker builds (manifest list export error) by @alvarofraguas in #828
• make: actionable errors for docker_dev + add docker_dev_certs target by @alvarofraguas in #834
• provision: fix yq and Go installer arch detection on x86_64 by @alvarofraguas in #838
• release: pass GOARCH build-arg to arm64 docker builds by @alvarofraguas in #839
• provision: auto-detect repo root instead of assuming ~/osctrl by @alvarofraguas in #835
• api: fine-grained permission control for service account creation by @alvarofraguas in #837
• auth: lift OIDC into reusable pkg/auth provider package by @alvarofraguas in #829
• auth: OIDC support for osctrl-api + React SPA by @alvarofraguas in #830
• auth: SAML 2.0 support for osctrl-api + React SPA by @alvarofraguas in #831
• frontend: SPA Users page — Add/Delete/Reset Password parity with legacy admin by @alvarofraguas in #832
• frontend: SPA UX polish — TargetSelector, audit fix, CSRF priming by @alvarofraguas in #833
• frontend: bump Node from 20 to 22 in Docker builds by @alvarofraguas in #840
• fix: OIDC/SAML logout, empty-target queries/carves, carve bulk actions, envless login by @alvarofraguas in #842
• security: fix 13 findings from security audit by @alvarofraguas in #843
• Adapt CI pipelines to have develop as default branch by @javuto in #844
• Annotations in osctrl-api to keep API documented by @javuto in #845
• Generator of swagger YAML and JSON using Makefile by @javuto in #846
• Up to date OpenAPI 3 YAML and tool to convert generated swagger by @javuto in #847
• Exposing frontend via nginx for TLS termination in docker dev environment by @javuto in #848
• Enrollment & config parity: per-OS flags, cert upload, assembled config + SPA tabs/sliders/forms/docs links by @alvarofraguas in #849
• Fix merge against main and update develop by @javuto in #850
• frontend: responsive sidenav — mobile drawer + desktop icon-rail collapse by @alvarofraguas in #851
• Banner to warn users about upcoming deprecation of osctrl-admin by @javuto in #852
• Updated README with notice about deprecation of osctrl-admin by @javuto in #853
• Removed legacy port from dev env by @javuto in #854
• Show permissions in profile page by @javuto in #855
• Reload frontend build when changes to code by @javuto in #856
• Prepare release 0.5.3 by @javuto in #857
• Makefile job to merge develop into main by @javuto in #858
• Fixed to error in release cicd pipeline by @javuto in #859

New Contributors

• @ITJamie made their first contribution in #824

Full Changelog: v0.5.2...v0.5.3

0.5.2

🔖 Release 0.5.2

What's New

• Redesigned CICD pipeline, simpler and using goreleaser by @javuto in #792
• Fix for Dockerfiles when building with GoReleaser by @javuto in #793
• Fix for goreleaser pushing multiarch images by @javuto in #794
• Default golang 1.26.1 by @javuto in #795
• Different fix for goreleaser pushing multiarch images by @javuto in #796
• Updated dockerfiles for snapshot images by @javuto in #797
• Copy static files building osctrl-admin docker image by @javuto in #798
• Configuration endpoints to receive osquery configuration from gitOps by @javuto in #799
• feat: add OIDC auth support for osctrl-admin by @jan-krueger in #801
• Dependencies update by @javuto in #802
• Replacing deprecated code in s3 aws sdk by @javuto in #803
• Dependencies update after refactor by @javuto in #804
• add new env to api by @mehdi-shokohi in #805
• Bug/fix remove api action by @mehdi-shokohi in #806
• Fix OSX quick-enroll: stop osqueryd before unload by @kimjune01 in #807
• Rebuild of docker dev environment on template/static changes by @javuto in #808
• Support for osquery 5.23.0 by @javuto in #809
• Fix race condition in IncExecution and IncError by @kimjune01 in #810
• Avoid cross environment queries/carves without permissions by @javuto in #811
• Verify node_key with environment to prevent unauthorized data by @javuto in #812
• osctrl-api: security hardening — auth bedrock, env secret containment, TLS-side rate-limit by @alvarofraguas in #813
• osctrl-api: API extensions for a React admin frontend (round 2 of 3) by @alvarofraguas in #814
• osctrl-frontend: React admin SPA at frontend/ (round 3 of 3) by @alvarofraguas in #815
• osctrl-tls: hardening — constant-time secrets, per-IP enroll rate-limit, audit-log on failed enrolls (round 1b of 3) by @alvarofraguas in #816
• osctrl: follow-up fixes for #813 — per-service --auth defaults + carve path SQL escape by @alvarofraguas in #817
• Bump esbuild from 0.21.5 to removed in /frontend in the npm_and_yarn group across 1 directory by @dependabot[bot] in #818
• Bumping nginx version for dev environment by @javuto in #819
• Prepare for release 0.5.2 by @javuto in #820
• Dependencies update before release by @javuto in #821

New Contributors

• @jan-krueger made their first contribution in #801
• @mehdi-shokohi made their first contribution in #805
• @kimjune01 made their first contribution in #807
• @alvarofraguas made their first contribution in #813

Full Changelog: v0.5.1...v0.5.2

0.5.1

🔖 Release 0.5.1

What's New

• Updated README with file structure and flowchart by @javuto in #783
• Bump github.com/russellhaering/goxmldsig from 1.5.0 to 1.6.0 in the go_modules group across 1 directory by @dependabot[bot] in #784
• Retrieving latest release metadata from osctrl.net in osctrl-admin by @javuto in #785
• Retrieving latest release metadata from stats.osctrl.net in osctrl-api by @javuto in #786
• Use goroutine for release check and fixed login in osctrl-admin by @javuto in #787
• Retrieving latest release metadata from stats.osctrl.net in osctrl-tls by @javuto in #788
• Support for osquery 5.22.1 by @javuto in #789
• Dependencies upgrade by @javuto in #790
• Prepare for release 0.5.1 by @javuto in #791

Full Changelog: v0.5.0...v0.5.1

0.5.0

🔖 Release 0.5.0

What's New

• Multiple fixes to CICD and dependencies update by @javuto in #764
• Multiple fixes for osctrl-api and api_tester tool by @javuto in #765
• Exclude tools directory from air configuration by @javuto in #766
• Fix all golangci-lint errors by @javuto in #767
• Order the list of osctrl-cli commands in alphabetical order by @javuto in #768
• Multiple fixes in osctrl-cli and osctrl-api by @javuto in #769
• Adding SECURITY.md policy by @javuto in #770
• Refresh README with emojis by @javuto in #771
• Bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 in the go_modules group across 1 directory by @dependabot[bot] in #775
• Small error in YAML config and ignoring md files by @javuto in #776
• Prevent unsanitized input when creating new environments in osctrl-admin by @javuto in #777
• Sanitized query in on-demand query list by @javuto in #778
• Support for osquery 5.21.0 by @javuto in #779
• Filter hostname on environment edit action by @javuto in #780
• Dependencies upgrade by @javuto in #781
• Prepare for release 0.5.0 by @javuto in #782

Full Changelog: v0.4.9...v0.5.0

0.4.9

🔖 Release 0.4.9

⚠️ This is a breaking release

The changes introduced in #754 makes this release NOT backwards compatible. Configuration for all services changed from using multiple JSON files, to a single YAML file. The env variables have not changed so it should not impact deployments where configuration is made via this method. More details in the documentation

What's New

• Fix for goreleaser CICD pipeline by @javuto in #743
• Fix for failing GHA pipelines to build on PR and release by @javuto in #744
• Fix for DEB package missing file by @javuto in #745
• Bump golang.org/x/crypto from 0.43.0 to 0.45.0 in the go_modules group across 1 directory by @dependabot[bot] in #747
• Preparation to have SAML config file by @javuto in #748
• Migrate aws sdk to v2 for the kinesis logger by @javuto in #749
• Migrate urfave/cli to v3 by @javuto in #750
• Support for osquery 5.20.0 by @javuto in #751
• Bump golang to 1.25.4 by @javuto in #752
• Dependencies upgrade by @javuto in #753
• Single YAML configuration file by @javuto in #754
• Generation of example configuration in osctrl-tls by @javuto in #755
• Generation of example configuration in osctrl-admin and osctrl-api by @javuto in #756
• Use single YAML file in provision.sh by @javuto in #757
• Cleaner install of go in provision.sh by @javuto in #758
• Adapt creation of deb packages to single YAML configuration by @javuto in #759
• Prevent crash in osctrl-api and other fixes around configuration by @javuto in #760
• Fix error in cicd pipeline due to DEB package creation error for cli by @javuto in #761
• Tool to test osctrl-api by @javuto in #762
• ⚠️ Prepare for release 0.4.9 by @javuto in #763

Full Changelog: v0.4.8...v0.4.9

0.4.8

🔖 Release 0.4.8

What's New

• Pagination and search in Datatables with serverside by @javuto in #723
• Customization of background and branding images by @javuto in #725
• Prevent query to overflow table by @javuto in #726
• Audit log for osctrl-admin by @javuto in #727
• Audit logs in osctrl-api and osctrl-cli by @javuto in #729
• Download distributed query results if > 100 by @javuto in #730
• Fix for left side menus for query results and carves by @javuto in #733
• Dependencies upgrade by @javuto in #735
• Implement deferred Select2 initialization for tag modal by @zhuoyuan-liu in #731
• Enhance pagination and search functionality for nodes in JSON endpoints by @zhuoyuan-liu in #734
• Skip tag creation for UUIDs, localnames and hostname by @javuto in #737
• Ensure go proxy settings to prevent dependencies error by @javuto in #739
• Implement node search functionality with Select2 integration and pagination support by @zhuoyuan-liu in #740
• Make optimized UI the default by @javuto in #741
• Prepare for release 0.4.8 by @javuto in #742

Full Changelog: v0.4.7...v0.4.8

0.4.7

🔖 Release 0.4.7

What's New

• Updated slack link to osquery by @javuto in #701
• Fixes for goreleaser CICD to build artifacts by @javuto in #702
• Ability to have custom tags by @javuto in #706
• Show tokens in username profile by @javuto in #707
• Use postgres, mysql or sqlite for backend driver by @javuto in #708
• More progress for YAML single configuration by @javuto in #709
• Updates to README by @javuto in #710
• Support for osquery 5.19.0 by @javuto in #711
• Query and carve based on tags in osctrl-admin by @javuto in #712
• Query and carve based on tags in osctrl-api and osctrl-cli by @javuto in #713
• 3 osquery nodes in docker dev environment by @javuto in #714
• Multiple fixes using tags in osctrl-admin, osctrl-api and osctrl-cli by @javuto in #715
• Disable osquery functionality via flags by @javuto in #716
• Adding fake_news.go to simulate load efficiently by @javuto in #717
• Fix for active nodes being displayed as inactive by @javuto in #718
• Resume nodes activity using fake_news by @javuto in #719
• Populate osquery flag parameters in osctrl-tls and osctrl-api by @javuto in #720
• More granular telemetry for fake_news_go by @javuto in #721
• Prepare for release 0.4.7 by @javuto in #722

Full Changelog: v0.4.6...v0.4.7

0.4.6

🔖 Release 0.4.6

What's New

• Using GoReleaser to build and release osctrl by @javuto in #674
• Fix for --version in osctrl-tls by @javuto in #675
• Fix for --version in osctrl-admin by @javuto in #676
• Fix for --version in osctrl-api and osctrl-cli by @javuto in #677
• Adding build metadata to docker binaries by @javuto in #678
• Display build metadata on service start by @javuto in #679
• Fix for SAML SP-initiated flow bug #685 by @javuto in #686
• Single YAML configuration file for osctrl-tls by @javuto in #684
• Fix for issue #680 to tag nodes by @javuto in #691
• Fix for issue #681 to auto create non-existing tags by @javuto in #692
• Fix for issue #688 env query access can not see queries by @javuto in #693
• Typo in osctrl-admin error message by @javuto in #694
• Tagging node using osctrl-api by @javuto in #695
• Improvements to user management in osctrl-api, osctrl-cli and osctrl-admin by @javuto in #696
• Fixed incorrect URL for all osctrl-api calls by @javuto in #697
• Removing platform stats from sidebar in osctrl-admin by @javuto in #698
• Fix for #690: Queries failed to delete in osctrl-admin by @javuto in #699
• Prepare for release 0.4.6 by @javuto in #700

Full Changelog: v0.4.5...v0.4.6

0.4.5

🔖 Release 0.4.5

What's New

• Fix error when creating node queries for large datasets by @zhuoyuan-liu in #631
• Refactor calls to debug messages in all services by @javuto in #632
• Using correct directory for make install_admin target by @javuto in #633
• Removing references to Debug Service or HTTP from all services by @javuto in #638
• Add inmemory cache for env by @zhuoyuan-liu in #636
• Refactor nodes package by @zhuoyuan-liu in #640
• Change default inactive hours to be positive by @javuto in #642
• Upgrade go to 1.24.2 by @javuto in #643
• Flag to enable the osctrld endpoints by @javuto in #646
• Refresh pre-commit config and remove python rules by @javuto in #647
• Potential fix for code scanning alert no. 25: Use of a known vulnerable action by @javuto in #648
• Potential fix for code scanning alert no. 20: Workflow does not contain permissions by @javuto in #650
• Potential fix for code scanning alert no. 24: Use of a known vulnerable action by @javuto in #649
• Update action/download-artifacts to latest version by @javuto in #651
• Potential fix for code scanning alert no. 19: Workflow does not contain permissions by @javuto in #652
• Potential fix for code scanning alert no. 11: Workflow does not contain permissions by @javuto in #653
• Potential fix for code scanning alert no. 14: Workflow does not contain permissions by @javuto in #654
• Using golang 1.24.3 by @javuto in #655
• Adding support for osquery 5.17.0 by @javuto in #656
• Lookup node by identifier inosctrl-api by @javuto in #657
• Adding support to osctrl-cli to look up nodes via osctrl-api by @javuto in #658
• Refactor strings.NewReader into bytes to avoid allocations by @javuto in #659
• Adding service users by @javuto in #661
• Dependencies bump and changes to osctrl-cli due to API changes by @javuto in #662
• Support for osquery 5.18.1 by @javuto in #663
• Adding deps-update in Makefile by @javuto in #664
• Prepare for release 0.4.5 by @javuto in #665
• Use cosign keyless to publish docker images by @javuto in #666
• Multiple fixes to tagged release GHA by @javuto in #667
• Update all actions to latest version and pin to commit by @javuto in #668
• Fix for cosign format due to multiple tags by @javuto in #669
• Fix for create_release GHA when tagged by @javuto in #670
• More accurate releases matrix by @javuto in #671
• Skip adding the commit sha in DEB package by @javuto in #672

Full Changelog: v0.4.4...v0.4.5