Version 7.260309.0-lts.3

Critical & security fixes:

• #15158 User visibility outside non-org segregation does not work
• #15267 Add an option to allow ElastisSearch 'filter' if really needed
• #15272 OIDC configuration failing on Nonce mismatch since 7.260326.0

Direct security updates:

• graphiql updated from 4.1.2 to 5.2.2
• @apollo/server updated from 5.4.0 to 5.5.0
• node-forge updated from 1.3.3 to 1.4.0
• nodemailer updated from 8.0.1 to 8.0.4

Indirect security updates:

• brace-expansion updated from 1.1.12 to 1.1.13
• brace-expansion updated from 2.0.2 to 2.0.3
• brace-expansion updated from 5.0.4 to 5.0.5
• lodash updated from 4.17.23 to 4.18.1
• picomatch updated from 2.3.1 to 2.3.2
• picomatch updated from 4.0.3 to 4.0.4
• yaml updated from 2.8.2 to 2.8.3
• yaml updated from 1.10.2 to 1.10.3

Full Changelog: 7.260309.0-lts.2...7.260309.0-lts.3

Version 7.260409.0

Enhancements:

• #15347 Improve streams loading
• #15201 Fix filters for related data
• #15132 STIX 2.0 converter: Entities
• #14727 Reorganize Entity Type customization page with horizontal tabs
• #14649 [Connector Catalog] Name of Connector Not Captured
• #13488 [Security coverage] Improvement of displayed results
• #12023 The ability to set the polling frequency on a TAXII feed
• #5376 Add the relationship type "belongs to" between Infrastructure and Organization

Bug Fixes:

• #14254 In the data tab, ctrl+click on files is not working
• #14269 Issue opening a PIR when queues are not set up properly
• #14757 Dashboard: breakdown on horizontal/vertical bars
• #14794 Connector scopes layout issue
• #15171 Upgrade graphql-ws version
• #15187 [BUG] batch_size not enforced as a cap in BatchCallbackWrapper
• #15216 [Form Intake] "Disable on-the-fly entity creation" toggle rejected by backend schema validation
• #15311 SSO: When using force env with local.config.disabled = true, local is not disabled
• #15329 [RBAC] Capability descriptions not updated on existing instances after upgrade
• #15339 Prevent re-rendering Settings right menu
• #15360 [DOC] Fix typo issue on troubleshooting for SSO
• #15371 When local strategy is disabled and user try to login with local "successully logged" is misleading
• #15374 [BUG] convert_markdown() corrupts literal <code> text in entity descriptions during STIX bundle ingestion
• #15418 Add templating tests

Pull Requests:

• [frontend/backend] up graphql-ws to 6.0.8 (#15171) by @JeremyCloarec in #15156
• [backend/frontend] Add and render logo for managed connectors (#14649) by @esrevi in #15302
• [doc] Add a breaking change entry (#15218) by @aHenryJard in #15307
• [backend] fix getConnectorQueueSize when only one targetQueues exists (#14269) by @JeremyCloarec in #14270
• [deps] Update dependency amqplib to v1 by @renovate[bot] in #15303
• [backend/frontend] add scheduling period for TAXII feed (#12023) by @CelineSebe in #15177
• [backend] add disableCreation & mainEntityDisableCreation in form (#15216) by @JeremyCloarec in #15318
• [backend] fix logo graphql in manager contract excerpt field (#14649) by @esrevi in #15338
• [deps] Update dependency yara-python to v4.5.4 by @renovate[bot] in #11288
• [frontend] feat(security-coverage): add result page (#13488) by @gabriel-peze in #15009
• [frontend] feat(IngestionRSS): Add 1 Click deploy (#15315) by @hervyt in #15316
• [deps] Update dependency prometheus-client to ~=0.24.1 by @renovate[bot] in #14631
• [client] fix: batch_size race conditions (#15187) by @Renizmy in #14555
• [frontend] Refactor: mutualize SDO pages routes and tabs (#13389) by @fellowseb in #15123
• [backend] Reorganize integration test helpers to get more coverage (#15292) by @fellowseb in #15293
• [deps] Update dependency ae-cvss-calculator to v1.0.12 by @renovate[bot] in #15356
• [deps] Update dependency express-rate-limit to v8.3.2 by @renovate[bot] in #15357
• [deps] Update dependency @langchain/core to v1.1.37 by @renovate[bot] in #15355
• [deps] Update dependency react-cookie to v8.1.0 by @renovate[bot] in #15358
• [frontend] Update rjsf monorepo to v6 (#15340) by @ludovic in #15341
• [frontend] Improve streams loading (#15347) by @lndrtrbn in #15348
• [docs] Fix SSO typo and formatting (#15360) by @nino-filigran in #15361
• [frontend] add vertical gap in connector Scope (#14794) by @JeremyCloarec in #15363
• [backend] Add specific fintel filters for entities (#15201) by @delemaf in #15233
• [frontend/backend] Fix nx analytics config (#15366) by @delemaf in #15367
• [deps] Update dependency @langchain/core to v1.1.38 by @renovate[bot] in #15359
• [deps] Update dependency validator to v13.15.35 by @renovate[bot] in #15383
• [deps] Update aws-sdk-js-v3 monorepo by @renovate[bot] in #15380
• [deps] Update devDependencies (non-major) by @renovate[bot] in #15381
• [deps] Update dependency amqplib to v1.0.3 by @renovate[bot] in #15375
• [deps] Update dependency http-proxy-agent to v9 by @renovate[bot] in #15377
• [deps] Update dependency html-react-parser to v6 by @renovate[bot] in #15384
• [deps] Update dependency https-proxy-agent to v9 by @renovate[bot] in #15378
• [deps] Update dependency turndown to v7.2.4 by @renovate[bot] in #15387
• [deps] Update dependency rate-limiter-flexible to v11 by @renovate[bot] in #15388
• [deps] Lock file maintenance by @renovate[bot] in #15382
• [frontend] Fix config for widget breakdowns (#14757) by @lndrtrbn in #15268
• [backend] Introduce @ff GraphQL directive to restrict access based on feature flag value (#15330) by @fellowseb in #15331
• [ci] Add automated deployment on master-ff on commit on master (#15166) by @efaure in #15168
• [frontend] In the data tab, fix opening the file in a new window (#14254) by @CelineSebe in #15322
• [backend/frontend] Fix localStrategy on force env (#15311) by @aHenryJard in #15333
• [backend] STIX 2.0 converter: Entities (#15132) by @marieflorescontact in #15256
• [ci] Remove steps related to branch release/current (#15401) by @efaure in #15402
• [deps] Update dependency @langchain/core to v1.1.39 by @renovate[bot] in #15389
• [backend] add migration to fix capa description (#15329) by @JeremyCloarec in #15395
• [frontend] entities tabs (#14727) by @esrevi in #15372
• [backend/frontend] add the relationship type "belongs to" between Organization and Infrastructure(#5376) by @CelineSebe in #15404
• [client-python] fix <code> tags conversion to backticks (#15374) by @OctaveLaventure in #15393
• [frontend] prevent re-rending of settings right menu (#15339) by @frapuks in #15345
• [backend/frontend] Remove FINTEL_FOR_ENTITY feature flag (#15210) by @delemaf in #15368
• [backend] Add templating tests (#15418) by @Archidoit in #15419

New Contributors:

• @gabriel-peze made their first contribution in #15009

Full Changelog: 7.260401.0...7.260409.0

Version 6.9.29

Bug Fixes:

• #15216 [Form Intake] "Disable on-the-fly entity creation" toggle rejected by backend schema validation
• #14269 Issue opening a PIR when queues are not set up properly
• #15267 Add an option to allow filter if really needed
• #15218 Remove internal filter from API
• #15158 User visibility outside non-org segregation does not work

Pull Requests:

• [backend/frontend] fix users visibility outside org segreg (#15158) by @JeremyCloarec in #15173
• [backend] move script usage to internal_script and remove by default from API (#15267)(#15218) by @aHenryJard in #15299

Full Changelog: 6.9.28...6.9.29

Version 7.260401.0

Enhancements:

• #15131 STIX 2.0 converter: Techniques

Bug Fixes:

• #15272 OIDC configuration failing on Nonce mismatch since 7.260326.0
• #15226 Fix typos in the Spanish translations
• #15213 Organization admin bad caps
• #15084 Playbook "Manipulate Knowledge" does not serialize boolean value on initial component creation when switch is left at default (false)
• #15013 [Diamond Model] Entity logos are not centered in the diamond corners
• #14846 Overview of group, alignement issue
• #14768 Activity: no more raw details anymore
• #14676 [backend] Backend inconsistency between "vulnerability" and "vulnerabilities" in openAEV and openCTI STIX bundles
• #14070 Unable to Edit Incident Content in Editor View
• #11550 In settings, the right menu is re-rendering when swithing and should not

Pull Requests:

• [frontend/backend] add filters on drafts (#14058) by @frapuks in #15154
• [backend] remove internal filter from API (#15218) by @aHenryJard in #15219
• [backend] STIX 2.0 converter: Techniques (#15131) by @marieflorescontact in #15103
• [deps] Update dependency nodemailer to v8.0.4 [SECURITY] by @renovate[bot] in #15235
• [deps] Update dependency @apollo/server to v5.5.0 [SECURITY] by @renovate[bot] in #15236
• [deps] Update dependency csv-parse to v6.2.1 by @renovate[bot] in #15105
• [deps] Update devDependencies (non-major) by @renovate[bot] in #15119
• [deps] Update dependency @noble/ed25519 to v3.0.1 by @renovate[bot] in #15104
• [deps] Update dependency jose to v6.2.2 by @renovate[bot] in #15115
• [deps] Update dependency moment-timezone to v0.6.1 by @renovate[bot] in #15111
• [deps] Update rabbitmq Docker tag to v4.2.5 by @renovate[bot] in #15106
• [deps] Update dependency @datadog/pprof to v5.14.0 by @renovate[bot] in #15114
• [deps] Update dependency node-forge to v1.4.0 [SECURITY] by @renovate[bot] in #15237
• [deps] Update dependency markdown-to-jsx to v9.7.13 by @renovate[bot] in #15120
• [deps] Update dependency graphql to v16.13.2 by @renovate[bot] in #15240
• [deps] Update dependency file-type to v21.3.4 by @renovate[bot] in #15239
• [deps] Update elasticsearch Docker tag to v8.19.13 by @renovate[bot] in #15244
• [deps] Update kibana Docker tag to v8.19.13 by @renovate[bot] in #15245
• [deps] Update redis Docker tag to v8.6.2 by @renovate[bot] in #15246
• [deps] Update aws-sdk-js-v3 monorepo by @renovate[bot] in #15118
• [deps] Update dependency otplib to v13.4.0 by @renovate[bot] in #15247
• [deps] Update otel/opentelemetry-collector-contrib Docker tag to v0.148.0 by @renovate[bot] in #15250
• [deps] Update dependency ws to v8.20.0 by @renovate[bot] in #15249
• [backend] Changed vulnerabilities to vulnerability in security coverage vocabulary (#14676) by @MTorbay-Filigran in #15193
• [frontend] prevent re-rendering AccessesMenu (#11550) by @frapuks in #15060
• [frontend] Fix Spanish typos in the front (#15226) by @febrezo in #13470
• [frontend] fix Organizations admin being displayed in lower case (#15213) by @JeremyCloarec in #15232
• [frontend] realigned with diamond (#15013) by @ValentinBouzinFiligran in #15152
• [deps] Update dependency marked to v17.0.5 by @renovate[bot] in #15241
• [deps] Update dependency react-grid-layout to v2.2.3 by @renovate[bot] in #15242
• [deps] Update dependency recharts to v3.8.1 by @renovate[bot] in #15243
• [deps] Update dependency @datadog/pprof to v5.14.1 by @renovate[bot] in #15263
• [deps] Update codecov/codecov-action action to v6 by @renovate[bot] in #15257
• [frontend] init isEditorHeaderDisabled to proper value (#14070) by @JeremyCloarec in #14145
• [deps] Update dependency nx to v22.6.2 by @renovate[bot] in #15264
• [backend] revert remove internal filter from API (#15218) by @aHenryJard in #15270
• [deps] Lock file maintenance by @renovate[bot] in #15238
• [deps] Update dependency vite-plugin-static-copy to v4 by @renovate[bot] in #15262
• [frontend] Improve Security Coverage Overview (#13488) by @MarineLeM in #14796
• [backend] Fix typo in history line (#10291) by @marieflorescontact in #15275
• [frontend] list item button updated to keep the right design (#14846) by @ValentinBouzinFiligran in #14925
• [frontend] fix x_opencti_detection initial value (#15084) by @JeremyCloarec in #15229
• [backend] Update zod@4, @langchain/*@1, openai@6 & ^@mistralai/mistralai@1 (#12161) by @fellowseb in #15251
• [ci] enforce closing issue only for PR targetting master branch (#15254) by @aHenryJard in #15255
• [frontend/backend] Add content to all containers (#12530) by @delemaf in #15146
• [frontend] [Playbook] Component Title displays name and action (#14951) by @SarahBocognano in #15073
• [backend] move script usage to internal_script and remove by default from API (#15267)(#15218) by @aHenryJard in #15284
• [ci] Be more selective on mandatory coverage (#15287) by @aHenryJard in #15288
• [backend] Fixes OIDC configuration failing on Nonce mismatch (#15272) by @marieflorescontact in #15300
• [deps] Update dependency @pyroscope/nodejs to v0.4.11 by @renovate[bot] in #15276
• [deps] Update dependency axios to v1.14.0 by @renovate[bot] in #15277
• [frontend] Handle breaking changes in dependency vite-plugin-static-copy v4 (#15296) by @lndrtrbn in #15297
• [frontend] fix raw data json in activity log drawer (#14768) by @CelineSebe in #15230

Full Changelog: 7.260326.0...7.260401.0

Version 7.260326.0

Enhancements:

• #15109 [frontend] Integrate chatbot v2 React component
• #15076 [DOC] execution traces of playbooks
• #15057 Improve rescan operation by creating async version to prevent timeout errors
• #14999 [RSSFeeds x XTMHub] - Ability to import/export RSS Feeds
• #14338 Add new relationships to support vulnerability impact analysis
• #14056 Worfklow: Ability in Draft to manage org sharing
• #14015 Fix use of header for full synchronization
• #13479 Add react flow to the platform
• #11763 Playbook: Improve retention time display of execution logs

Bug Fixes:

• #15158 User visibility outside non-org segregation does not work
• #15151 2FA reset does not show trash anymore
• #15090 Platform login message is not displayed in SSO only
• #15078 Original creation date filter not available in Cases
• #15039 [Bug] Connector trigger filters hardcoded to ['entity_type'] — regression from UI design system refactor
• #15034 OIDC provider don't relay state
• #15010 SSO V7 conversion of OpenID configuration without group mapping set a wrong default group configuration.
• #15007 [BUG] Small memory leak in sseMiddleware sendEvent
• #14996 SSO V7 GROUPS_MANAGEMENT__GROUPS_MAPPING empty fails on map is not a function
• #14978 [Sighting] x_opencti_negative field is not updated on upsert

Pull Requests:

• [frontend] migrate react-grid-layout from v1 to v2 (#14955) by @ludovic in #14959
• [backend] add rulesRescanAsync (#15057) by @JeremyCloarec in #15061
• [backend] add missing generated graphql files (#15057) by @JeremyCloarec in #15062
• [deps] Upgrade recharts to v3.8.0 (follow-up Renovate PR #12765) (#15063) by @ludovic in #15064
• [ci] use gh cli to check if an issue is linked (#13869) by @aHenryJard in #14709
• [deps] Update dependency graphiql to v5 by @renovate[bot] in #11876
• [backend] send existing_users_count in auto-register (#15001) by @carinelebas in #15002
• [backend] Fix use of synchronized-upsert header (#14015) by @SouadHadjiat in #14243
• [frontend] Fix available filter keys for connector trigger filters (#15039) by @Archidoit in #15043
• [backend] Sighting x_opencti_negative upsert (#14978) by @Archidoit in #15006
• [backend] Reducing allowed content in CSP (#14169) by @aHenryJard in #14947
• [backend] Improve retention time display of playbook logs (#11763) by @SouadHadjiat in #14779
• [docs] update execution traces section.md (#15076) by @tobybutler405 in #15075
• [drafts] Enable org sharing in drafts (#14056) by @OctaveLaventure in #14533
• [backend] Fix OIDC conversion without group mapping (#15010) by @marieflorescontact in #15056
• [deps] Update dependency file-type to v21.3.3 by @renovate[bot] in #15085
• [deps] Update dependency rate-limiter-flexible to v10.0.1 by @renovate[bot] in #15052
• [deps] Update dependency react-force-graph-2d to v1.29.1 by @renovate[bot] in #14388
• [backend] Fix path fallbacks in migration converter (#14996) by @marieflorescontact in #15095
• [deps] Update dependency react-force-graph-3d to v1.29.1 by @renovate[bot] in #14389
• [backend] 'Original creation date' should be filterable for Cases (#15078) by @Archidoit in #15081
• [deps] Update dependency jsdom to v29 by @renovate[bot] in #15053
• [backend] Relay state in OIDC (#15034) by @xfournet in #15065
• [backend] clean up once listener in sendEvent after Promise.race has finished (#15007) by @JeremyCloarec in #15008
• [backend/frontend] Integrate chatbot v2 with legacy v1 fallback (#15109) by @SamuelHassine in #15108
• [ci] Add workflow for deploying feature branch to staging (#15126) by @sbocahu in #15125
• [backend] Fix query in setting index fails when internal_object has rollover (#12138) by @aHenryJard in #15139
• [backend] Entity restoration should restore former creation dates of relationships (#13115) by @SarahBocognano in #14609
• [utils] Raise patch coverage requirements (#14218) by @xfournet in #14221
• [backend] Chunk1 - Separate engine-data-converter (#13612) by @delemaf in #15127
• [backend/frontend] Chunk 1: Add fintel to StixDomainObject (#10962) by @delemaf in #13825
• [frontend] Display option labels instead of IDs in PlaybookFlowFieldArray (#14619) by @Gwendoline-FAVRE-FELIX in #14914
• [backend] Add missing dedicated index for settings update on start (#12138) by @aHenryJard in #15144
• [frontend/backend] Chunk 2: Add attribute to StixDomainObject fintels (#10962) by @delemaf in #13890
• [frontend/backend] - (RSSFeeds) Add import/export of rss feeds (#14999) by @hervyt in #15059
• [frontend] In SSO only, platform login message should be displayed (#15090) by @Archidoit in #15093
• [backend/frontend] fix users visibility outside org segreg (#15158) by @JeremyCloarec in #15167
• [backend/frontend] Add new IMEI, ICCID and IMSI Observables (#3182) by @labo-flg in #14237
• [frontend] update FF to put this feature under workflow feature (#14058) by @frapuks in #15155
• [frontend] Fix admin 2FA reset button condition (#15151) by @SouadHadjiat in #15181
• [backend/frontend] remove feature flag on org sharing in drafts (#14056) by @OctaveLaventure in #15175
• [backend] use logMigration for all recent migrations (#15195) by @SouadHadjiat in #15196

Full Changelog: 7.260318.0...7.260326.0

Version 7.260309.0-lts.2

Critical & security fixes

• #14878 Handle release of LTS version
• #14877 Live Stream Sync: File operations create infinite event loop in bidirectional sync
• #14966 Error when clicking enrichment button after adding an external reference
• #15017 [worker] Regression: opencti_operation set to 'event' instead of actual operation type in push_handler.py
• #15027 Improve SSE resolutions
• #14895 consumer drawer visible for every user
• #14015 Fix use of header for full synchronization
• #14169 Reducing allowed content in CSP
• #14808 Login button label is not working in SAML configuration
• #15026 SSO mappings expression should not be case sensitive
• #15010 SSO V7 conversion of OpenID configuration without group mapping set a wrong default group configuration.
• #14996 SSO V7 GROUPS_MANAGEMENT__GROUPS_MAPPING empty fails on map is not a function
• #15034 OIDC provider don't relay state
• #14920 Send retry in RabbitMQ improvements
• #11790 Incorrect redirect after logout when using base_path
• #15007 [BUG] Small memory leak in sseMiddleware sendEvent

Security updates

• pyjwt updated from 2.11.0 to 2.12.0
• dompurify updated from 3.3.1 to 3.3.3
• express-rate-limit updated from 8.2.1 to 8.3.1
• file-type updated from 21.3.0 to 21.3.3
• tar updated from 7.5.9 to to 7.5.11
• undici
  • opencti-front: updated from 7.22.0 to 7.24.4
  • opencti-graphql: updated from 6.23.0 to 6.24.1

Pull Requests:

• [backend] backport of add sha256 to file metadata & use sha256 to check for duplicate upload (#14877) by @JeremyCloarec in #14970
• [frontend] Error when clicking enrichment button after adding an external reference (#14966) by @SarahBocognano in #14988
• [worker] Fix opencti_operation set to 'event' instead of actual operation type (#15017) by @xfournet in #15020
• [backend] Improve SSE resolutions (#15027) by @aHenryJard in #15030

Full Changelog: 7.260309.0-lts1...7.260309.0-lts.2

Version 7.260318.0

Enhancements:

• #13593 [chatbot] Increase character limit for AI assistant questions
• #14928 Pre-configured Copilot agents to easily get technical documentation

Bug Fixes:

• #15014 [Bug] Indicator pattern display reverted to plain text in v7, code/indented view missing for SIGMA/YARA patterns
• #15017 [worker] Regression: opencti_operation set to 'event' instead of actual operation type in push_handler.py
• #14799 Connector detail view UI bug on hovering the "danger zone" in menu
• #15026 SSO mappings expression should not be case sensitive
• #15036 When trying to add a “has” relationship in the vulnerabilities menu, this is not always possible

Pull Requests:

• [deps] Update dependency rate-limiter-flexible to v10 by @renovate[bot] in #15016
• [backend] refactor: migrate feed, taxiiCollection and streamCollection to new module pattern (#14918) by @ludovic in #14975
• [docs] Clarify 'capabilities' for draft mode and main context (#14704) by @tobybutler405 in #14499
• [worker] Fix opencti_operation set to 'event' instead of actual operation type (#15017) by @xfournet in #15018
• [docs] Add Copilot agents for technical devs documentation (#14928) by @lndrtrbn in #14929
• [docs] Form Intake: document feature (#13731) by @nino-filigran in #14713
• [frontend] Connector reset menu item tooltip (#14799) by @Archidoit in #14919
• [backend] Improve SSE resolutions (#15027) by @richard-julien in #14980
• [frontend] Increase character limit to 2000 for AI assistant questions (#13593) by @Archidoit in #15042
• [frontend] Indicator pattern display for SIGMA/YARA pattern (#15014) by @Archidoit in #15023
• [backend] Make SSO attribute mapping expressions case insensitive (#15026) by @xfournet in #15033
• [frontend] fix “has” relationship in the vulnerabilities menu (#15036) by @CelineSebe in #15038

New Contributors

• @ludovic made their first contribution in #14975
• @tobybutler405 made their first contribution in #14499

Full Changelog: 7.260317.0...7.260318.0

Version 6.9.28

No changelog for this release.

Pull Requests:

• [worker] Fix opencti_operation set to 'event' instead of actual operation type (#15017) by @xfournet in #15019
• [backend] Improve SSE resolutions (#15027) by @aHenryJard in #15031

Full Changelog: 6.9.27...6.9.28

Version 7.260317.0

Enhancements:

• #14288 Filter on 'description' attribute in Live streams, Notifiers, and Playbooks

Bug Fixes:

• #14966 Error when clicking enrichment button after adding an external reference
• #14854 History issue / log on add "itself" in creators (now "add untranslated")
• #14853 Editing a live stream, the form has wrong layout
• #14809 When doing top right import, dialog is not closable by clicking elsewhere or using escape
• #14539 Dashboard configuration export (JSON) fails with INTERNAL_SERVER_ERROR: "Expected a string but received a Object"
• #14527 Dashboard: Export fails when a widget contains a dynamic "in regard of" filter
• #11790 Incorrect redirect after logout when using base_path
• #10111 Functional dates not always displayed in timelines

Pull Requests:

• [deps] Update dependency @datadog/pprof to v5.13.4 by @renovate[bot] in #14718
• [deps] Update dependency ae-cvss-calculator to v1.0.11 by @renovate[bot] in #14719
• [deps] Update dependency axios to v1.13.6 by @renovate[bot] in #14720
• [deps] Update dependency html-to-pdfmake to v2.5.33 by @renovate[bot] in #14845
• [deps] Update dependency react-syntax-highlighter to v16.1.1 by @renovate[bot] in #14721
• [deps] Update dependency webpack to v5.105.4 by @renovate[bot] in #14750
• [deps] Update dependency black to v26.3.0 by @renovate[bot] in #14870
• [deps] Update dependency convert to v7 by @renovate[bot] in #14678
• [deps] Update dependency types-pytz to v2026 by @renovate[bot] in #14843
• [deps] Update docker/login-action action to v4 by @renovate[bot] in #14842
• [deps] Update docker/setup-buildx-action action to v4 by @renovate[bot] in #14859
• [deps] Update GitHub Artifact Actions (major) by @renovate[bot] in #14663
• [deps] Update devDependencies (non-major) by @renovate[bot] in #14851
• [deps] Update elasticsearch Docker tag to v8.19.12 by @renovate[bot] in #14751
• [deps] Update kibana Docker tag to v8.19.12 by @renovate[bot] in #14753
• [deps] Update redis Docker tag to v8.6.1 by @renovate[bot] in #14679
• [deps] Update dependency ejs to v5 by @renovate[bot] in #14863
• [deps] Update aws-sdk-js-v3 monorepo by @renovate[bot] in #14685
• [deps] Update dependency graphql to v16.13.1 by @renovate[bot] in #14677
• [deps] Update dependency express-rate-limit to v8.2.2 [SECURITY] by @renovate[bot] in #14841
• [deps] Update dependency dompurify to v3.3.2 [SECURITY] by @renovate[bot] in #14810
• [deps] Update Slashgear/action-check-pr-title digest to 76166c6 by @renovate[bot] in #14661
• [deps] Update docker/metadata-action action to v6 by @renovate[bot] in #14861
• [deps] Update dependency marked to v17.0.4 by @renovate[bot] in #14849
• [deps] Update docker/build-push-action action to v7 by @renovate[bot] in #14860
• [deps] Update dependency pytest-cases to ~=3.10.1 by @renovate[bot] in #14813
• [deps] Update dependency jose to v6.2.0 by @renovate[bot] in #14884
• [deps] Update dependency express-rate-limit to v8.3.0 by @renovate[bot] in #14883
• [deps] Update devDependencies (non-major) by @renovate[bot] in #14882
• [ci] Handle release of LTS (#14878) by @efaure in #14880
• [deps] Lock file maintenance by @renovate[bot] in #14852
• [backend] Fix incorrect redirect after logout when using base_path (#11790) by @marieflorescontact in #14866
• [backend] STIX 2.0 converter: Events (#8832) by @marieflorescontact in #11883
• [ci] Fix regex to trigger release build on lts (#14878) by @efaure in #14889
• [backend] STIX 2.0 converter: Arsenal (#8832) by @marieflorescontact in #12045
• [ci] Add license for docker-compose instances (#14892) by @efaure in #14893
• [backend] add representative on creators attribute (#14854) by @JeremyCloarec in #14865
• [deps] Update dependency file-type to v21.3.1 [SECURITY] by @renovate[bot] in #14888
• [deps] Update dependency pytest to v9 by @renovate[bot] in #13195
• [deps] Update otel/opentelemetry-collector-contrib Docker tag to v0.147.0 by @renovate[bot] in #14811
• [deps] Update dependency jose to v6.2.1 by @renovate[bot] in #14905
• [deps] Update dependency nodemailer to v8.0.2 by @renovate[bot] in #14906
• [deps] Update dependency express-rate-limit to v8.3.1 by @renovate[bot] in #14909
• [deps] Update dependency react-pdf to v10.4.1 by @renovate[bot] in #14591
• [deps] Update dependency typescript-eslint to v8.57.0 by @renovate[bot] in #14910
• [deps] Update dependency black to v26.3.1 [SECURITY] by @renovate[bot] in #14912
• [frontend] Import dialog should close when clicking elsewhere (#14809) by @Archidoit in #14916
• [frontend] Stream edition form layout (#14853) by @Archidoit in #14917
• [backend] Create customView module (#13389) by @fellowseb in #14735
• [task] Restores the labels of issues created from the Github issue template (#14924) by @romain-filigran in #14922
• [backend] add more logs in send retry & implement exponential backoff (#14920) by @JeremyCloarec in #14921
• [frontend/backend] button_label_override as parameter (#14808) by @ValentinBouzinFiligran in #14902
• [frontend] button disabled when stream is off (#14732) by @ValentinBouzinFiligran in #14886
• [frontend] created at for functional date added (#10111) by @ValentinBouzinFiligran in #14654
• [frontend] orga validation condition updated (#14162) by @ValentinBouzinFiligran in #14610
• [frontend] Mutualize to StixDomainObjectTabsBox (#13389) by @fellowseb in #14908
• [backend] STIX 2.0 converter: Threats (#8832) by @marieflorescontact in #14897
• [deps] Update dependency @datadog/pprof to v5.13.5 by @renovate[bot] in #14931
• [deps] Update dependency dompurify to v3.3.3 by @renovate[bot] in #14933
• [deps] Update dependency markdown-to-jsx to v9.7.9 by @renovate[bot] in #14869
• [deps] Update dependency file-type to v21.3.2 [SECURITY] by @renovate[bot] in #14932
• [deps] Update dependency tough-cookie to v6.0.1 by @renovate[bot] in #14945
• [backend] add sha256 to file metadata & use sha256 to check for duplicate upload (#14877) by @JeremyCloarec in #14903
• [ci] Switch LTS tag format from 7.260309.0-ltsx to 7.260309.0-lts.x and improve pycti check (#14878) by @efaure in #14950
• [deps] Update aws-sdk-js-v3 monorepo by @renovate[bot] in #14936
• [deps] Update devDependencies (non-major) by @renovate[bot] in #14939
• [deps] Lock file maintenance by @renovate[bot] in https://...

Version 6.9.27

bug fixes

• #14877 Live Stream Sync: File operations create infinite event loop in bidirectional sync

Pull Requests:

• [backend] backport of add sha256 to file metadata & use sha256 to check for duplicate upload (#14877) by @JeremyCloarec in #14969

Full Changelog: 6.9.26...6.9.27