1.12.0 🌈

Changes since 1.11.0

• master-into-dev: use --disable-dev-shm-usage to start chrome (#3739) @valentijnscholten (#3740)
• Release: Merge release into master from: release/1.12.0 @github-actions (#3712)
• Fix access typo @joesiewert (#3706)
• integration tests: wait for findings datatable @valentijnscholten (#3704)
• release drafter and doc updates @valentijnscholten (#3691)
• master-into-dev: docs + release drafter @valentijnscholten (#3685)
• Snyk findings: deduplication enhancements @rmoldesc (#3662)
• release drafter changes @valentijnscholten (#3626)
• Release: Merge back 1.11.1 into dev from: master-into-dev/1.12.0-dev @github-actions (#3625)
• Release: Merge release into master from: release/1.11.1 @github-actions (#3624)
• Snyk parser fixes @rmoldesc (#3615)
• sync master to dev: workflow changes + renovate settings @valentijnscholten (#3618)
• Adding retry into the k8s workflow @dsever (#3614)
• Release: Merge back 1.11.0 into dev from: master-into-dev/1.12.0-dev @github-actions (#3565)

💣 Breaking changes

• APIv1: disable by default @valentijnscholten (#3608)
• remove unused / left over custom_field dependency @valentijnscholten (#3574)

🚩 Requires settings change or database migration

• Increase alert field size to 250 @madchap (#3682)
• risk acceptance: enhance! @valentijnscholten (#3529)
• feat(alerts): automated cleanup of alerts per user @alles-klar (#3598)
• remove unused / left over custom_field dependency @valentijnscholten (#3574)

🚩 Security

• Security: Prevent XEE in parsers, Prevent open redirect @valentijnscholten (#3622)

🚀 New importers

• Importer: Burp REST API (Fix #3447) @damiencarol (#3542)
• ScoutSuite parser @hasantayyar (#3602)
• Snyk parser enhancements @rmoldesc (#3616)
• 3520: Added OSSIndex Devaudit scanner import functionality @bp4151 (#3570)
• Improve Micro Focus Webinspect parser @damiencarol (#3621)
• Add Scantist Vulnerability Scan Parser @mohcer (#3610)

🚀 General features and enhancements

• risk acceptance: enhance! @valentijnscholten (#3529)
• GHA: Docker build caching and other speed improvements @valentijnscholten (#3659)
• Findings list: Display jira key instead of jira bug icon @madchap (#3605)
• Add Arbitrary File Uploads @Maffooch (#3566)
• [APIv2] Prefetch Mixins + Composable Swagger Schema @RomainJufer (#3516)
• Exposing additional securityContext settings in parent values.yaml @namloc2001 (#3582)
• Add swagger schema test with tagged test cases @RomainJufer (#3528)
• Add more unit tests for AppSpider report parser @damiencarol (#3634)
• Import Gitlab projects as DefectDojo products fix Issue #1984 @christophe226 (#2211)
• feat(clair parser): parse component name and version @alles-klar (#3600)
• system settings through apiv2 @manuel-sommer (#3562)
• feat(alerts): automated cleanup of alerts per user @alles-klar (#3598)
• Add the close_old_findings parameter also to reimport API @ccojocar (#3572)
• Component enhancements @ricardomeulendijks (#3578)
• Add unit tests for Bandit parser @damiencarol (#3568)

🚀 API features and enhancements

• [APIv2] Prefetch Mixins + Composable Swagger Schema @RomainJufer (#3516)
• Add swagger schema test with tagged test cases @RomainJufer (#3528)

🐛 Bug Fixes

• integration tests: use --disable-dev-shm-usage to start chrome @valentijnscholten (#3739)
• Increase alert field size to 250 @madchap (#3682)
• Fix date format on Fortify parser @Maffooch (#3696)
• dependency track parser: fix dedupe, set hash code fields @valentijnscholten (#3667)
• add product via prod_type: use normal add product logic @valentijnscholten (#3692)
• files upload: remove from filters @valentijnscholten (#3690)
• Fix tag migration for legacy products @valentijnscholten (#3684)
• Fix bug in redirect function call @damiencarol (#3673)
• notifications: make them synchronous @valentijnscholten (#3678)
• fix engagement styling bug @valentijnscholten (#3669)
• jira: fix broken author check for cloud @valentijnscholten (#3668)
• Jira: fix support for epic as default issuetype + error handling @valentijnscholten (#3609)
• add product: fix missing error messages @valentijnscholten (#3658)
• Fix impact bug on Burp REST API parser and add more unit tests @damiencarol (#3657)
• Fix sonarqube 3-hourly sync job @valentijnscholten (#3619)
• Fix JFrog Xray JSON parser for CWE and CVSS v3 (#3597 fix) @damiencarol (#3585)
• jira webhook: fix incoming author name check @valentijnscholten (#3606)
• fix anchore reimport, sync reimport logic API<->UI, add unit tests @valentijnscholten (#3629)
• Display Active and Verified counts @madchap (#3590)
• fix(qualys-parser): map qid to vuln_id_from_tool @alles-klar (#3601)
• Parameter confidence is optional and CWE's are not always numerical in GitLab SAST @StefanFl (#3567)
• Send status changes from re-import to jira @Maffooch (#3592)
• Reimport (UI): Preserve existing tags when reimporting scan/test @valentijnscholten (#3596)

📝 Documentation updates

• Add swagger schema test with tagged test cases @RomainJufer (#3528)
• Update to release workflow @madchap (#3591)
• Initial parser doc @madchap (#3603)

🧰 Maintenance

• cleanup old comments / commented out code @valentijnscholten (#3697)
• Update rabbitmq Docker tag from 3.8.10 to v3.8.11 (docker-compose.yml) @renovate (#3688)
• Update rabbitmq:3.8.10 Docker digest from 3.8.10 to 3.8.10 (docker-compose.yml) @renovate (#3670)
• Bump bleach from 3.2.1 to 3.2.2 @dependabot (#3672)
• Bump django-celery-results from 2.0.0 to 2.0.1 @dependabot (#3661)
• Update busybox Docker tag from 1.32.0-musl to v1.33.0 (docker-compose.override.unit_tests_cicd.yml) @renovate (#3665)
• master-to-dev: GHA: Docker build caching and other speed improvements (#3659) @valentijnscholten (#3664)
• Update rabbitmq Docker tag from 3.8.9 to v3.8.10 (docker-compose.yml) @renovate (#3660)
• Bump cvss from 2.1 to 2.2 @dependabot (#3645)
• Bump mysql-connector-python from 8.0.22 to 8.0.23 @dependabot (#3652)
• Update mysql Docker tag from 5.7.32 to v5.7.33 (docker-compose.yml) @renovate (#3651)
• Bump pdfmake from 0.1.69 to 0.1.70 in /components @dependabot (#3646)
• Remove usage of django.utils.six vendored library version of six @damiencarol (#3649)
• remove old/dead/left-behind code @valentijnscholten (#3635)
• Fix #3638 Django static import deprecated @damiencarol (#3637)
• Update rabbitmq:3.8.9 Docker digest from 3.8.9 to 3.8.9 (docker-compose.yml) @renovate (#3633)
• Bump python-gitlab from 2.4.0 to 2.5.0 @dependabot (#3627)
• chore(deps): update mysql:5.7.32 docker digest from 5.7.32 to 5.7.32 (docker-compose.yml) @renovate (#3617)
• chore(deps): update styfle/cancel-workflow-action action from 0.6.0 to v0.7.0 (.github/workflows/cancel-outdated-workflow-runs.yml) @renovate (#3620)
• Update sample data fixture file @Maffooch (#3580)
• chore(deps): update rabbitmq:3.8.9 docker digest from 3.8.9 to 3.8.9 (docker-compose.yml) @renovate (#3595)
• Switch to official django-tagulous release @valentijnscholten (#3579)
• pin sqlalchemy dependency @valentijnscholten (#3583)
• remove unused / left over custom_field dependency @valentijnscholten (#3574)
• Bump jsonlines from 1.2.0 to 2.0.0 @dependabot (#3581)
• Bump pillow from 8.0.1 to 8.1.0 @dependabot (#3575)
• Bump mysqlclient from 2.0.2 to 2.0.3 @dependabot (#3576)
• Bump busybox from 1.32.0-musl to 1.33.0-musl @dependabot (#3577)

Untagged PRs

• Release: Merge release into master from: release/1.12.0 @github-actions (#3712)
• Fix access typo @joesiewert (#3706)
• integration tests: wait for findings datatable @valentijnscholten (#3704)
• release drafter and doc updates @valentijnscholten (#3691)
• master-into-dev: docs + release drafter @valentijnscholten (#3685)
• Snyk findings: deduplication enhancements @rmoldesc (#3662)
• release drafter changes @valentijnscholten (#3626)
• Release: Merge back 1.11.1 into dev from: master-into-dev/1.12.0-dev @github-actions (#3625)