v2.2.1

Updated the following libraries:
setuptools==70.0.0 => 77.0.3
uvicorn==0.22.0 => 0.34.0
fastapi==0.110.0=> 0.115.11
pyyaml==6.0.1=> 6.0.2
python-benedict==0.31.0 => 0.34.1
paho-mqtt==2.0.0 => 2.1.0
stix2-validator==3.1.4 => 3.2.0
Jinja2==3.1.4=> 3.1.6
kestrel-core==1.8 => 1.8.2

v2.1.0

• Revamped MQTT connection logic
• Updated HTTP logic
• Introduced Feature Flags, to allow extra features to be easily enabled or disabled from the config.toml file
• Kestrel logic is included but Feature Flagged Off
• Improved device client id generation
• Improved OpenC2 command validation
• Introduced the Threat Hunt Schema
• Bumped express from 4.18.2 to 4.19.2 in /node_utils
• Bumped fastapi from 0.100.0 to 0.110.0
• Bumped jinja2 from 3.1.2 to 3.1.3

v2.0.0

• major improvements to the http and mqtt transports
• includes the beta threat hunting actuator profile for message validation
• streamlined startup
• introduction of configurable features via the config.toml
• basic kestrel integration examples
• updated readme documentation with clearer instructions, examples and OpenC2 goals

v1.1.2

Vulnerability update.
Bump Flask from 2.0.2 to 2.3.2.
Bumped cryptography from 38.0.3 to 41.0.0.

v1.1.1

Vulnerability fixes applied.

Critical: CVE-2022-42915
Critical: CVE-2022-32221
Critical: CVE-2022-42915
Critical: CVE-2023-23914
Critical: CVE-2022-23521
Critical: CVE-2022-41903
Critical: CVE-2023-23914
High: CVE-2022-39260
High: CVE-2022-43680
High: CVE-2022-42916
High: CVE-2022-43551
High: CVE-2023-23916
High: CVE-2023-23946
High: CVE-2022-4450
High: CVE-2023-0215
High: CVE-2023-0286
Medium: CVE-2022-39253
Medium: CVE-2022-43552
Medium: CVE-2023-23915
Medium: CVE-2023-22490
Medium: CVE-2022-4304
Medium: CVE-2023-0464

OIF Device 1.1.0

• Refreshed Readme documentation with updated startup instructions, links, images, and maintainer info
• Updated 3rd Party Dependencies
  • Moment 2.29.3 to 2.29.4
• Replaced 3rd Party Dependencies
  • djangorestframework-jwt 1.11.1. to djangorestframework-simplejwt 5.2.0
• Resolved the following vulnerabilities
  • CVE-2022-40674
  • CVE-2022-36359
  • CVE-2022-29217
• Introduced Repo Versioning coupled with corresponding Git Tags and Docker Images
• TypeScripting cleanup
• CodeLint cleanup
• Moved Docker Images to Docker Hub to help improve startup speed and simplify the startup process
• Improved CICD logic
• Various Development Library updates

What's Changed

• Repo code init by @czack425 in #1
• omitting logger until it can be fixed by @dmg2 in #2
• pre plugfest update by @dmg2 in #3
• Updated to latest version after plug fest with bleach update. by @dmg2 in #4
• Update repos for latest reference by @ScreamBun in #5
• Updates from CAW and spec by @ScreamBun in #20
• Update logger dependencies by @ScreamBun in #27
• Fall Cleaning OIF development update by @ScreamBun in #30

New Contributors

• @czack425 made their first contribution in #1
• @dmg2 made their first contribution in #2
• @ScreamBun made their first contribution in #5

Full Changelog: https://github.com/oasis-open/openc2-oif-device/commits/v1.1.0