PyPI

pycti

7.261002.0OpenCTI-Platform/opencti ↗New releases in your daily digest, changelog included.

Python API client for OpenCTI.

Last release 2 days ago
02 Oct 2026
Ships on a steady schedule
a new release about every 2 weeks
Most releases are documented
notes for 53 of the last 60 stable releases
Nothing withdrawn
no release was ever pulled
7 years old
455 releases · first in 2019

Release timeline

455 releases since 2019

20192020202120222023202420252026

Releases

7.261002.02 Oct 2026Security
fix(vulnerability): normalize CVSS enum values and return validation ( #18291 ) by Céline Sèbe (@CelineSebe) in #18608
Enhancements:

#18605 feat(chatbot): show quota, prompts and persisted message feedback in the embedded chat

#18453 feat(perf): improve findRemovedEmbeddedStoragePathsFromMarkdownFields usage

#18449 refactor(notifications): split alerts and triggers in notifications page

#13041 feat(investigation): allow 1-click duplication of investigations

Bug Fixes:

#18630 fix(history): history and activity managers replay the stream backlog from where it started at startup after a stream interruption upon resume

#18612 fix(merge-users): userMerge-restrictedMembers-test races the history record of its own case

#18607 refactor(user): migrate user to module

#18599 fix(stream): stream processor waits after every batch, even when more events are pending

#18567 fix(health): s3_used_size collection times out on buckets holding many files

#18555 fix(scope): Running OpenAEV enrichment on a manual Security Coverage hides existing coverage results until page refresh

#18552 Publisher manager leaks SMTP sockets

#18460 fix(security-coverage): coverage results wiped after triggering enrichment

#18446 fix(user): improve service account edition port to LTS

#18436 fix(perf): improve cachemanager pubsub usage

#18435 fix(fintel): fix issues related to introduction of the shortcut for fintel generation

#18404 fix(error): improve management of "Http call interceptor fail"

#18291 fix(scope): CVSS3 enum values trigger INTERNAL_SERVER_ERROR instead of validation error

#18180 fix(ui): (+) button instead of 'create X' button

#17952 fix(dashboards): Date attribute selection in step 4 shows attributes irrelevant to the selected perspective

Pull Requests:

fix(perf): in cache manager, only sub to relevant topics (#18436) by Jeremy Cloarec (@JeremyCloarec) in #18437

feat(chatbot): show quota, prompts and persisted message feedback in the embedded chat (#18605) by Samuel Hassine (@SamuelHassine) in #18606

feat(perf): only call findRemovedEmbeddedStoragePathsFromMarkdownFields when necessary (#18453) by Jeremy Cloarec (@JeremyCloarec) in #18464

fix(security-coverage): keep coverage results id in enrichment fragment (#18460) by nvk (@nvkhope) in #18461

fix(widget): Date attribute input values according to widget perspective (#17952) by Archidoit in #18456

fix(smtp): set a default SMTP connection timeout (#18552) by nvk (@nvkhope) in #18553

test(merge-users): stop racing the history record of the restricted members case (#18612) by Ludovic Bouges (@ludovic) in #18613

fix(redis): fix tls_cluster_node_mode conf name (#17694) by Jeremy Cloarec (@JeremyCloarec) in #18616

fix(deps): update dependency react-router to v8 by renovate[bot] in #18176

fix(stream): read again right away after a full stream batch (#18599) by Xavier Fournet (@xfournet) in #18600

fix(deps): update dependency amqplib to v2.1.0 by renovate[bot] in #18627

fix(deps): update dependency @langchain/core to v1.2.13 by renovate[bot] in #18624

fix(deps): update dependency nodemailer to v10.0.11 by renovate[bot] in #18625

fix(deps): update dependency @langchain/openai to v1.6.0 by renovate[bot] in #18626

feat(notifications): merge alerts and notifications page (#18449) by hervyt in #18457

fix(error): update error level for http bad formatted requests (#18404) by A. Jard (@aHenryJard) in #18414

fix(fintel): fix issues related to introduction of the shortcut for fintel generation (#18435) by Florian DeLemarre (@delemaf) in #18518

feat(workflow): make Status a workflowDefinition projection (#17899) by Florian DeLemarre (@delemaf) in #18152

refactor(user): migrate user backend code to module architecture (#18607) by Marie Flores (@marieflorescontact) in #18621

fix(ui): Replace remaining (+) buttons by Create button (#18180) by Archidoit in #18511

fix(fintel): allow column customization for related entities in Fintel templates (#12861) by Gwendoline-FAVRE-FELIX in #18533

fix(deps): update dependency react-pdf to v11 by renovate[bot] in #18271

fix(history): resume history and activity managers from last indexed event on restart (#18630) by Sébastien Wauquier (@fellowseb) in #18631

fix(vulnerability): normalize CVSS enum values and return validation (#18291) by Céline Sèbe (@CelineSebe) in #18608

fix(widget): missing import (#17952) by esrevi in #18639

feat(merge-users): remap the user references held in stored filters (#17501) by Ludovic Bouges (@ludovic) in #18042

chore(deps): bump @filigran/chatbot to 3.12.1 (#18641) by Samuel Hassine (@SamuelHassine) in #18642

fix(deps): update dependency amqplib to v2.2.0 by renovate[bot] in #18645

fix(deps): update dependency nodemailer to v10.0.12 by renovate[bot] in #18644

fix(deps): update dependency @node-saml/passport-saml to v5.1.1 by renovate[bot] in #18643

chore(deps): bump @filigran/chatbot to 3.12.2 (#18646) by Samuel Hassine (@SamuelHassine) in #18647

fix(health): compute s3_used_size from indexed file sizes instead of listing the bucket (#18567) by Sébastien Bocahu (@sbocahu) in #18640

Full Changelog: 7.260930.0...7.261002.0

7.260930.030 Sept 2026

fix(publicdashboard): enforce capability checks for restricted user contexts ( #18528 ) by Marie Flores (@marieflorescontact) in #18534

Enhancements:

#17824 feat(security-coverage): Creating a manual security coverage entity - allowing selection of entities
#15492 feat(security-coverage): manually re-link behaviors (TTPs), vulnerabilities and related entities to assess coverage
#8920 feat(ingestion): provide TAXII Client errors within UI

Bug Fixes:

#18594 fix(xtm-one): open XTM One in the browser on the identity it publishes, not on its internal URL
#18564 fix(xtm-one): trust and address XTM One by its published identity when it is reached on an internal URL
#18528 fix(publicdashboard): improve dashboard created by admin
#18468 fix(scope): Custom theme does not expose color setting for blue custom fields after v7.260921.0 upgrade
#18293 fix(data-sharing): Embedded image in report description not synced via live stream

Pull Requests:

fix(publicdashboard): enforce capability checks for restricted user contexts (#18528) by Marie Flores (@marieflorescontact) in #18534
feat(merge-users): disable the source, emit the merge trace and gate the source deletion (#17499) by Ludovic Bouges (@ludovic) in #18039
chore(deps): bump @filigran/chatbot to 3.11.0 (#18549) by Samuel Hassine (@SamuelHassine) in #18551
feat(catalog): reload catalog when manifest has changed on backend (#18280) by esrevi in #18465
chore(deps): bump @filigran/chatbot to 3.11.1 (#18560) by Samuel Hassine (@SamuelHassine) in #18561
fix(graphql-upload): align multipart GraphQL filed size limit with JSON body limit (#18293) by esrevi in #18538
fix(front): let a custom theme reach the design system tokens (#18468) by Sandy Ghs (@sandyghs) in #18544
fix(xtm-one): trust and address XTM One by its published identity when it is reached on an internal URL (#18564) by Samuel Hassine (@SamuelHassine) in #18585
fix(deps): update dependency csv-parse to v7.0.3 by renovate[bot] in #18589
fix(xtm-one): open XTM One in the browser on the identity it publishes, not on its internal URL (#18594) by Samuel Hassine (@SamuelHassine) in #18595
fix(xtm-one): read XTM One's identity for the browser only when XTM One is configured (#18594) by Samuel Hassine (@SamuelHassine) in #18596
feat(backend): merge users: close the accesses the merged-away account keeps (#17500) by Ludovic Bouges (@ludovic) in #18041
test(merge): raise the filterTargetByExisting growth threshold from 10 to 15 (#18592) by Xavier Fournet (@xfournet) in #18593
fix(deps): update dependency ws to v8.22.0 by renovate[bot] in #18598
fix(deps): update dependency re2 to v1.27.0 by renovate[bot] in #18597
chore(deps): update yarn to v4.18.1 by renovate[bot] in #18588
feat(catalog): add min_version and max_version fields to V1 catalog schema (#18545) by Sébastien Wauquier (@fellowseb) in #18546
test(e2e): wait for each dashboard date clear to be saved before typing the next date (#18601) by Xavier Fournet (@xfournet) in #18602
fix(deps): update dependency jsonpath-plus to v11 by renovate[bot] in #18509

Full Changelog: 7.260928.1...7.260930.0

Open source →

Additional notes

Version 7.260930.0

Compare

Choose a tag to compare

Open source →

7.260928.028 Sept 2026Security

feat(vulnerability): SSVC risk-based prioritization metrics ( #17045 ) by Marie Flores (@marieflorescontact) in #18367

Enhancements:

#18485 feat(xtm-one): verify the Filigran-signed XTM license returned by XTM One registration
#18399 feat(datamodel): add number_seen and max_distinct_count counters to Observed Data
#18233 docs(news-feed): update XTM Hub docs with new page
#17938 feat(accessibility): Update use of MenuList to List to resolve keyboard navigation issues
#17407 feat(accessibility): Resolve high accessibility issues
#17350 feat(logs): Add ingestion logs on all ingestion type
#17045 feat(vulnerability): SSVC risk-based prioritization metrics (CISA BOD 26-04)
#11940 feat(datamodel): support "sighting" between an Indicator and a "Security Platform"

Bug Fixes:

#18492 fix(ai): route Ask AI container report generation through XTM One
#18476 fix(merge-users): the dry/real divergence refusal never says what diverged
#18462 fix(ip-accesslist): admin config token is not excluded from access list check
#18432 fix(perf): improve buildChanges time complexity
#18405 fix(connector): prevent connector managed deployment
#18318 fix(frontend): Pagination returns no results on page 2 when combining filters
#18230 fix(playbooks): Update Knowledge reports successful patch but does not persist the change
#18144 fix(User): improve userEdit
#17913 [Merge] Merged entity does not set the acting user as creator
#17742 fix(user): improve org admin
#17740 fix(user): improve service account edition
#17694 fix(scope): Redis cluster mode: fixed TLS servername prevents using per-node certificates
#16148 fix(notifications): notifications are still sent to expired or inactive accounts
#13752 fix(decay-rules): decay exclusions should set valid_until much later and not get revoked

Community Contributions Highlight:

feat(accessibility): update components to use List and ListItemButton instead of MenuList and MenuItem (#17938) by scarletmerlin123 in #17941

Pull Requests:

fix(deps): update dependency lru-cache to v11.5.3 by renovate[bot] in #18409
fix(deps): update dependency canonicalize to v5.1.0 by renovate[bot] in #18411
fix(deps): update dependency react-intl to v12.1.1 by renovate[bot] in #18410
chore(deps): update rabbitmq docker tag to v4.3.6 by renovate[bot] in #18408
fix(deps): update dependency openai to v7.19.0 by renovate[bot] in #18412
feat(observed-data): add number_seen and max_distinct_count counters (#18399) by Samuel Hassine (@SamuelHassine) in #18400
fix(deps): update dependency js-base64 to v3.9.4 by renovate[bot] in #18420
fix(deps): update dependency react-intl to v12.1.2 by renovate[bot] in #18421
fix(deps): update dependency openai to v7.20.0 by renovate[bot] in #18422
fix(notifications): filter out inactive users in notifications (#16148) by Jeremy Cloarec (@JeremyCloarec) in #17826
feat(vulnerability): SSVC risk-based prioritization metrics (#17045) by Marie Flores (@marieflorescontact) in #18367
fix(connector): prevent deploy connector without EE license (#18405) by esrevi in #18406
fix(ingestion): remove ingestion logs feature flag and fix JSON log status (#17350) by Marie Flores (@marieflorescontact) in #18369
feat(accessibility): Resolve high accessibility issues (#17407) by scarletmerlin123 in #17505
docs(news-feed): update XTM Hub docs with new page (#18233) by Valentin (@Kroustille) in #18234
fix(redis): always default to redis__hostname for tls servername if no tls__servername set (#17694) by Jeremy Cloarec (@JeremyCloarec) in #18416
chore(migration): introduce opencti_api_migration_duration metric (#16263) by Sébastien Wauquier (@fellowseb) in #16379
fix(case): fix typing issue in TaskPopover (#18431) by Sébastien Wauquier (@fellowseb) in #18433
fix(deps): update dependency eventsource to v5.1.2 by renovate[bot] in #18443
fix(deps): update dependency @lezer/javascript to v1.5.5 by renovate[bot] in #18442
perf(notification): build the update event context once per event (#18444) by Xavier Fournet (@xfournet) in #18445
perf(markdown): collect embedded image paths in a single pass per node (#18454) by Xavier Fournet (@xfournet) in #18455
feat(catalog): introduce new delivery mechanism for the catalog (#16059) by Sébastien Wauquier (@fellowseb) in #17769
refactor(frontend): replace Axios with the Fetch API (#18376) by Xavier Fournet (@xfournet) in #18375
fix(user): improve org admin (#17742) by Jeremy Cloarec (@JeremyCloarec) in #17745
fix(perf): improve buildChanges from quadratic to linear time complexity (#18432) by Jeremy Cloarec (@JeremyCloarec) in #18434
fix(deps): update dependency marked to v18.0.14 by renovate[bot] in #18471
fix(deps): update dependency @pyroscope/nodejs to v0.6.4 by renovate[bot] in #18470
fix(deps): update dependency openai to v7.22.0 by renovate[bot] in #18472
fix(deps): update dependency maplibre-gl to v6.11.0 by renovate[bot] in #18479
fix(deps): update dependency undici to v8.11.0 by renovate[bot] in #18473
fix(deps): update dependency @langchain/core to v1.2.12 by renovate[bot] in #18441
fix(deps): update dependency openai to v7.23.0 by renovate[bot] in #18480
chore(deps): update dependency jsdom to v30 by renovate[bot] in #17436
fix(ci): read pull request labels from the API in the linked issue check (#18474) by Xavier Fournet (@xfournet) in #18475
fix(merge-users): say what diverged when the two passes disagree (#18476) by Xavier Fournet (@xfournet) in #18477
fix(deps): update dependency maplibre-gl to v6.11.1 by renovate[bot] in #18481
test(e2e): drive the restricted user from a second browser context (#18482) by Xavier Fournet (@xfournet) in #18484
chore(deps): bump @filigran/chatbot to 3.10.0 (#18487) by Samuel Hassine (@SamuelHassine) in #18488
feat(xtm-one): grant the Enterprise Edition from the verified XTM license returned by XTM One (#18485) by Samuel Hassine (@SamuelHassine) in #18486
fix(deps): update dependency dompurify to v3.4.16 by renovate[bot] in #18489
chore(deps): update maildev/maildev docker tag to v3 by renovate[bot] in #18491
chore(deps): update elasticsearch docker tag to v8.19.22 by renovate[bot] in #18490
chore(deps): update kibana docker tag to v8.19.22 by renovate[bot] in #18494
fix(ai): route Ask AI container report generation through XTM One (#18492) by Samuel Hassine (@SamuelHassine) in #18493
fix(deps): update aws-sdk-js-v3 monorepo by renovate[bot] in #18497
chore(deps): update devdependencies (non-major) by renovate[bot] in #18496
chore(deps): update node.js to v22.23.3 by renovate[bot] in #18495
fix(deps): update dependency graphql-ws to v6.3.0 by renovate[bot] in #18505
fix(deps): update dependency undici to v8.11.2 by renovate[bot] in #18504
fix(deps): update dependency react-intl to v12.1.3 by renovate[bot] in #18503
fix(deps): update dependency maplibre-gl to v6.11.2 by renovate[bot] in #18502
chore(deps): update devdependencies (non-major) by renovate[bot] in #18501
fix(deps): update aws-sdk-js-v3 monorepo to v3.1140.0 by renovate[bot] in #18507
chore(deps): lock file maintenance by renovate[bot] in #18506
fix(user): improve userEdit (#18144) by Marie Flores (@marieflorescontact) in #18158
fix(decay-rules): change decay excluded indicator creation (#13752) by Jeremy Cloarec (@JeremyCloarec) in #17028
feat(investigations): support duplicating an investigation (#18076) by nino-filigran in #18121
feat(security-platform): support "sighting" between an Indicator and a "Security Platform" (#11940) by Céline Sèbe (@CelineSebe) in #17963
feat(accessibility): update components to use List and ListItemButton instead of MenuList and MenuItem (#17938) by scarletmerlin123 in #17941
fix(backend): add merging user as creator of the merged entity (#17913) by Gabriele Bonadiman (@gabrielebonadiman) in #18287
fix(ip-whitelist): fix incorrect exclusion of bypass tokens (#18462) by Landry Trebon (@lndrtrbn) in #18523

Full Changelog: 7.260921.0...7.260928.0

Open source →

Additional notes

Version 7.260928.0

Compare

Choose a tag to compare

Open source →

7.260921.021 Sept 2026

feat(fintel): column selection for entity attributes ( #15604 ) by Gwendoline-FAVRE-FELIX in #18143

Enhancements:

#18328 News Feed OCTI for OCTI Integrations (except connectors)
#18216 Enforce dependency declarations in CI
#15604 feat(fintel): column selection for entity attributes

Bug Fixes:

#18355 fix(ci): the minio host port 35300 collides with the runner ephemeral port range
#18326 test(e2e): the dashboard restriction test runs with a user missing its seeded group and cannot be retried
#18325 fix(tests): the raw stream test flips between 15 and 16 report updates since workflow publish creates statuses
#18112 fix(draft): exiting a draft does not always clear the draft context
#18026 fix(pycti): Invalid STIX bundle produced by pycti get_stix_bundle_or_object_from_entity_id when entity creator organization is TLP-restricted for the requesting user
#15021 fix(export): wide tables embedded in report content are cut off in PDF exports

Pull Requests:

feat(fintel): column selection for entity attributes (#15604) by Gwendoline-FAVRE-FELIX in #18143
refactor(health): expose health and storage metrics through the prometheus subsystem (#17770) by Sébastien Bocahu (@sbocahu) in #17417
fix(deps): update dependency nodemailer to v10.0.9 by renovate[bot] in #18250
fix(tests): patch the legacy status to a status different from the current one (#18325) by Xavier Fournet (@xfournet) in #18327
test(e2e): fail the seeding on error and keep the admin session across the dashboard restriction test (#18326) by Xavier Fournet (@xfournet) in #18329
fix(deps): update dependency file-type to v22.1.0 by renovate[bot] in #18268
fix(deps): update dependency zod to v4.6.5 by renovate[bot] in #18316
fix(deps): update dependency maplibre-gl to v6.9.1 by renovate[bot] in #18240
fix(deps): update dependency content-type to v3.1.0 by renovate[bot] in #18267
fix(deps): update dependency nodemailer to v10.0.10 by renovate[bot] in #18342
fix(deps): update dependency canonicalize to v5 by renovate[bot] in #18236
chore(deps): update devdependencies (non-major) by renovate[bot] in #18251
fix(deps): update dependency openai to v7.15.0 by renovate[bot] in #18269
chore(ci): enforce dependency declarations in CI, and fix the drift it surfaced (#18216) by Xavier Fournet (@xfournet) in #18217
test(e2e): assert the page the restoring login actually displays (#18343) by Xavier Fournet (@xfournet) in #18344
fix(deps): update dependency @mui/types to v7.4.12 by renovate[bot] in #18347
chore(deps): update dependency knip to v6.35.1 by renovate[bot] in #18349
fix(deps): update dependency undici to v6.28.1 by renovate[bot] in #18346
fix(deps): update dependency undici to v8 by renovate[bot] in #18348
fix(ci): stop publishing the unused minio host port 35300 (#18355) by Xavier Fournet (@xfournet) in #18356
fix(backend): preserve standard id when building a restricted entity (#18026) by Gabriele Bonadiman (@gabrielebonadiman) in #18147
fix(deps): update dependency moment to v2.31.0 by renovate[bot] in #18359
chore(deps): update codecov/codecov-action action to v7.1.0 by renovate[bot] in #18358
docs(exclusion-lists): clarify CIDR usage and indicator-only scope (#18333) by Gabriele Bonadiman (@gabrielebonadiman) in #18330
docs(saml): add information on signing requests (#17893) by A. Jard (@aHenryJard) in #17895
fix(deps): update dependency eventsource-parser to v4.1.1 by renovate[bot] in #18370
chore(tooling): move the tooling to TypeScript and lint every source file (#18350) by Xavier Fournet (@xfournet) in #18351
fix(deps): update dependency maplibre-gl to v6.10.0 by renovate[bot] in #18373
fix(deps): update dependency markdown-to-jsx to v9.10.3 by renovate[bot] in #18374
fix(deps): update dependency react-router to v7.18.4 by renovate[bot] in #18371
fix(deps): update dependency react-intl to v12 by renovate[bot] in #18372
fix(deps): update dependency react-intl to v12.0.2 by renovate[bot] in #18377
fix(deps): update rjsf monorepo to v6.10.1 by renovate[bot] in #18380
fix(deps): update dependency graphql-ws to v6.2.2 by renovate[bot] in #18379
chore(deps): update devdependencies (non-major) by renovate[bot] in #18382
fix(deps): update dependency react-draggable to v4.7.2 by renovate[bot] in #18383
fix(deps): update aws-sdk-js-v3 monorepo to v3.1134.0 by renovate[bot] in #18384
fix(deps): update dependency react-intl to v12.1.0 by renovate[bot] in #18386
fix(deps): update dependency openai to v7.17.0 by renovate[bot] in #18381
chore(deps): update codecov/codecov-action action to v7.1.1 by renovate[bot] in #18387
fix(deps): update dependency file-type to v22.1.1 by renovate[bot] in #18388
chore(deps): lock file maintenance by renovate[bot] in #18385
chore(deps): update otel/opentelemetry-collector-contrib docker tag to v0.161.0 by renovate[bot] in #18378
fix(deps): update dependency html-react-parser to v6.1.8 by renovate[bot] in #18390
fix(deps): update dependency rate-limiter-flexible to v11.2.1 by renovate[bot] in #18393
fix(deps): update aws-sdk-js-v3 monorepo to v3.1135.0 by renovate[bot] in #18391
fix(deps): update dependency content-type to v3.1.1 by renovate[bot] in #18389
chore(deps): lock file maintenance by renovate[bot] in #18392
fix(user): improve user service account edition (#17740) by Jeremy Cloarec (@JeremyCloarec) in #17741
fix(draft): stop re-entering a draft the user has just left (#18112) by Xavier Fournet (@xfournet) in #18235
chore(deps): update dependency knip to v6.37.0 by renovate[bot] in #18397
fix(deps): update dependency openai to v7.18.0 by renovate[bot] in #18396
feat(news-feed): handle new resource integration type (#18328) by Valentin (@Kroustille) in #18335
chore: deployment cleanup (#18365) by A. Jard (@aHenryJard) in #18366
fix(export): wide tables embedded in report content are cut off in PDF exports (#15021) by Florian DeLemarre (@delemaf) in #18341
feat(merge-users): re-point assignee and participant relations (#17497) by Ludovic Bouges (@ludovic) in #17924
feat(merge-users): history and activity attribution rewritten to the target user (#17498) by Ludovic Bouges (@ludovic) in #17951

Full Changelog: 7.260917.0...7.260921.0

Open source →

Additional notes

Version 7.260921.0

Compare

Choose a tag to compare

Open source →

7.260917.017 Sept 2026Security

feat(vulnerability): land SSVC risk-based prioritization metrics behind FF ( #17045 ) by Marie Flores (@marieflorescontact) in #18074

Enhancements:

#18307 feat(Fintel): Simply the ExportHTML to PDF so that it generates directly the Fintel in PDF
#17889 feat(accessibility): Update the BulkRelationDialog to be a more accessible design
#17341 feat(backend): expose lock acquisition wait metrics to detect lock contention
#14716 feat(security-coverage): multi-OpenAEV security coverage results

Bug Fixes:

#18321 fix(frontend): alerts page is blank since the news feed page extraction
#18288 fix(frontend): investigation graph crashes when a relationship is nested on both ends
#18285 fix(ci): doc ci is broken
#18277 fix(integration-tests): the dates of the reports used in filterGroup-test.js are outdated, and it fails the tests
#18273 fix(scope): mislaignment of delete button on tasks page
#17694 fix(scope): Redis cluster mode: fixed TLS servername prevents using per-node certificates
#17395 Missing-reference retry sleeps ~2s while the dependency race resolves in <0.3s
#9838 fix(knowledge-view): table and bar counters don't refresh on add/delete element in knowledge tab

Pull Requests:

fix(i18n): update regex to handle t_i18n calls with multiple arguments (#16887) by Mathieu Cartaud (@mcartaud) in #16888
feat(client-python): opt-in exponential retry schedule for worker missing-reference waits (#17395) by Olivier SOTIN (@T0t1n) in #17398
fix(engine): retry failed bulk items selectively on partial failures (#17134) by Olivier SOTIN (@T0t1n) in #17141
fix(test): changed date management in filterGoup test (#18277) by MTorbay-Filigran in #18278
fix(redis): support per-node TLS certificates in clusters (#17694) by Laurent Bonnet (@labo-flg) in #17903
feat(telemetry): expose lock acquisition wait and contention metrics (#17341) by Olivier SOTIN (@T0t1n) in #17343
fix(ci): mkdocs build requires fetch-depth: 0 (#18285) by A. Jard (@aHenryJard) in #18286
feat(security-coverage): multi-OpenAEV security coverage results (#14716) by MTorbay-Filigran in #16072
feat(workflow): Make workflow publish create/resolve Status (#17898) by Florian DeLemarre (@delemaf) in #17927
fix(frontend): render both sides of a relationship nested on both ends in the knowledge graph (#18288) by Gabriele Bonadiman (@gabrielebonadiman) in #18290
feat(vulnerability): land SSVC risk-based prioritization metrics behind FF (#17045) by Marie Flores (@marieflorescontact) in #18074
feat(merge-users): dry-run/run framework, handler registry and coverage manifest (#17494) by Ludovic Bouges (@ludovic) in #17535
feat(merge-users): Scalar user references and public sharing user rewrite (#17495) by Ludovic Bouges (@ludovic) in #17577
feat(merge-users): RBAC rights merge and union/strict option (#17496) by Ludovic Bouges (@ludovic) in #17892
fix(security-coverage): show duration and affinity fields in both creation modes (#18301) by nvk (@nvkhope) in #18302
fix(deps): update dependency marked to v18.0.13 by renovate[bot] in #18297
fix(deps): update dependency react-intl to v10.2.2 by renovate[bot] in #18270
fix(deps): update dependency zod to v4.6.4 by renovate[bot] in #18265
fix(deps): update dependency convert to v8.0.2 - autoclosed by renovate[bot] in #18264
fix(deps): update dependency compression to v1.8.2 by renovate[bot] in #18263
feat(accessibility): Update the BulkRelationDialog to be a more accessible design (#17889) by scarletmerlin123 in #17916
fix(ui): alignment of delete button on tasks page (#18273) by Céline Sèbe (@CelineSebe) in #18300
feat(dx): add back-end rebuild + back+front GraphQL rebuild on save (#13402) by Octave (@OctaveLaventure) in #13857
chore(deps): lock file maintenance by renovate[bot] in #18254
fix(deps): update aws-sdk-js-v3 monorepo to v3.1130.0 by renovate[bot] in #18266
fix(deps): update dependency @langchain/openai to v1.5.13 by renovate[bot] in #18296
fix(deps): update dependency @langchain/core to v1.2.11 by renovate[bot] in #18295
fix(knowledge-view): table and bar counters don't refresh on add/delete element in knowledge tab (#9838) by Florian DeLemarre (@delemaf) in #18198
chore(deps): update @filigran/rich-text-editor to 1.2.1 (#18319) by Ludovic Bouges (@ludovic) in #18320
fix(frontend): restore the alerts page after the news feed page extraction (#18321) by Xavier Fournet (@xfournet) in #18323
feat(fintel): simply the export HTML to PDF so that it generates directly the Fintel in PDF (#18307) by Florian DeLemarre (@delemaf) in #18313

Full Changelog: 7.260914.0...7.260917.0

Open source →

Additional notes

Version 7.260917.0

Compare

Choose a tag to compare

Open source →

7.260914.014 Sept 2026

feat(platform): configurable keep-alive timeout for deployments behind a load balancer ( #17648 ) by Xavier Fournet (@xfournet) in #17943

Enhancements:

#18238 chore(dev): replace the MinIO image by pgsty/silo in the development and CI stacks
#17648 feat(platform): configurable keep-alive/headers timeout for ALB/ECS to prevent intermittent 502s
#17403 feat(ci): backend test jobs rebuild from scratch 3x instead of reusing a pre-built image

Bug Fixes:

#18142 fix(tests): the telemetry collector clears the Redis gauges while the integration tests run (flaky test)
#18133 fix(tests): the integration test wait budgets are unmeasured (flaky tests)
#17947 fix(report): Report updates silently dropped when published is the epoch placeholder (1970-01-01)
#17576 fix(segregation): Live stream share objects' stix IDs contained in container even though they do not meet the filter of the stream
#17472 fix(backend): pingConnector echoes stale connector_state under ES latency (read-after-write race)
#17226 fix(scope): Attack Patterns list (kill chain) view fails on large entities - "An unknown error occurred" (StixDomainObjectAttackPatternsKillChainQuery)

Pull Requests:

feat(platform): configurable keep-alive timeout for deployments behind a load balancer (#17648) by Xavier Fournet (@xfournet) in #17943
fix(segregation): ids of entities that do not meet the filter of the stream are no longer shared in the object_ref list (#17576) by MTorbay-Filigran in #17949
test(backend): do not start the telemetry manager during the tests (flaky test) (#18142) by Xavier Fournet (@xfournet) in #18161
fix(deps): update graphql-tools monorepo by renovate[bot] in #18225
fix(deps): update dependency marked to v18.0.12 by renovate[bot] in #18223
fix(deps): update dependency nodemailer to v10.0.1 by renovate[bot] in #18224
fix(deps): update dependency maplibre-gl to v6.8.0 by renovate[bot] in #18227
test(backend): set the wait budgets from measured timings (#18133) by Xavier Fournet (@xfournet) in #18134
fix(backend): pingConnector echoes stale connector_state under ES latency read-after-write race (#17472) by Gabriele Bonadiman (@gabrielebonadiman) in #18196
refactor(news-feed): extract news feed components to a specific page (#18085) by Valentin (@Kroustille) in #18150
fix(report): preserve published date when set to epoch placeholder (#17947) by Ludovic Bouges (@ludovic) in #18221
chore(dev): replace the MinIO image by pgsty/silo in the development and CI stacks (#18238) by Xavier Fournet (@xfournet) in #18239
fix(deps): update dependency @mistralai/mistralai to v2.7.0 by renovate[bot] in #18241
docs(deployment): finish the MinIO to Silo rename after #18239 - FIPS, map and configuration pages (#18244) by Samuel Hassine (@SamuelHassine) in #18245
fix(deps): update dependency openai to v7.13.0 by renovate[bot] in #18237
fix(deps): update rjsf monorepo to v6.10.0 by renovate[bot] in #18246
docs(fips): point the MinIO FIPS images to Quay.io (#18242) by Xavier Fournet (@xfournet) in #18243
fix(deps): update aws-sdk-js-v3 monorepo by renovate[bot] in #18252
fix(deps): update dependency zod to v4.6.1 by renovate[bot] in #18253
fix(deps): update dependency @langchain/openai to v1.5.12 by renovate[bot] in #18249
fix(deps): update dependency @langchain/core to v1.2.10 by renovate[bot] in #18248
fix(ap): batch nested connections to prevent list view errors (#17226) by nvk (@nvkhope) in #17954
fix(ci): reuse builder-back image across backend test jobs instead of rebuilding 3x (#17403) by Gabriele Bonadiman (@gabrielebonadiman) in #17860
refactor(backend): refactor engine mapping generation (#13635) by Souad Hadjiat (@SouadHadjiat) in #15857

Full Changelog: 7.260910.0...7.260914.0

Open source →

Additional notes

Version 7.260914.0

Compare

Choose a tag to compare

Open source →

7.260910.010 Sept 2026Deprecated

fix(ci): replace deprecated circleci/node:current image with cimg/node ( #18159 ) by Xavier Fournet (@xfournet) in #18160

Enhancements:

#18156 chore(frontend): import from react-router instead of react-router-dom
#18102 feat(stream): add metrics on events offloaded to S3
#17840 feat(accessibility): Resolve low accessibility issues
#17548 feat(accessibility): Update Left nav to function with keyboard controls
#17664 feat(fds): integrate Filigran Design System v1

Bug Fixes:

#18194 fix(scope): deleting undefined observable throws hard error instead of warning
#18159 fix(ci): CircleCI packaging jobs fail after Debian Bullseye EOL
#18119 fix(frontend): Shared organizations list overflows in Systems
#18096 fix(backend): escaping in templates
#18048 fix(ui): blue disks on marking is truncated instead of floating above
#18035 fix(graph): Warning hidding buttons in Analyses graph
#18030 fix(ui): Unwanted 'search' text display
#17778 fix(sync): detect large files/images attached to entities and skip retrying when ERR_STRING_TOO_LONG raised
#16975 fix(ui): in profile, missing bottom margin
#16937 fix(ui): pariticipants ships
#16066 fix(ui): launch background task window alignment issue
#15079 fix(ui): tooltip UI is incorrect for import and create buttons

Pull Requests:

fix(deps): update dependency react-router-dom to v7 by renovate[bot] in #18107
fix(backend): escaping in templates (#18096) by Xavier Fournet (@xfournet) in #18097
feat(ingestion): add ingestion logs for RSS feeds (#17527) by ValentinBouzinFiligran in #17699
feat(ingestion): add json feed logs (#17529) by ValentinBouzinFiligran in #17744
feat(accessibility): Update Left nav to function with keyboard controls (#17548) by scarletmerlin123 in #17581
feat(accessibility): resolve low accessibility issues (#17840) by scarletmerlin123 in #17875
chore(frontend): import from react-router instead of react-router-dom (#18156) by Xavier Fournet (@xfournet) in #18157
fix(ci): replace deprecated circleci/node:current image with cimg/node (#18159) by Xavier Fournet (@xfournet) in #18160
feat(ui): Integration of the new Filigran design system V1 (#17664) by Archidoit in #18117
fix(deps): update dependency jose to v6.2.12 by renovate[bot] in #18168
fix(deps): update dependency react-intl to v10.1.26 by renovate[bot] in #18170
fix(deps): update dependency sanitize-html to v2.17.7 by renovate[bot] in #18171
fix(deps): update dependency openai to v7.10.0 by renovate[bot] in #18172
fix(deps): update dependency convert to v8 by renovate[bot] in #18174
test(e2e): wait for the PIR top author widgets before asserting them (flaky test) (#17152) by Xavier Fournet (@xfournet) in #18178
fix(deps): update dependency openid-client to v6.8.8 by renovate[bot] in #18169
chore(deps): update elasticsearch docker tag to v8.19.21 by renovate[bot] in #18130
feat(ingestion): add stream feed logs (#17531) by ValentinBouzinFiligran in #17787
fix(observable): throws a warning message when no entity found on delete observable (#18194) by esrevi in #18195
feat(ui): Fix Filigran new design system introduction issues (#17664) by Archidoit in #18193
feat(stream): add metrics & logging for stream events offloading (#18102) by Jeremy Cloarec (@JeremyCloarec) in #18120
fix(ux): Possibility to remove organizations sharing in tooltips (#18119) by Archidoit in #18148
fix(deps): update dependency dompurify to v3.4.15 by renovate[bot] in #18210
chore(deps): update docker/dockerfile docker tag to v1.27 by renovate[bot] in #18136
fix(deps): update dependency nodemailer to v10 by renovate[bot] in #18175
fix(sync): handle oversized sync attachment payloads (#17778) by Sébastien Wauquier (@fellowseb) in #17857
chore(deps): update otel/opentelemetry-collector-contrib docker tag to v0.160.0 by renovate[bot] in #18138
chore(deps): update actions/checkout action to v7 by renovate[bot] in #18185
chore(deps): update vitest monorepo to v5 by renovate[bot] in #18173
chore(deps): update actions/setup-node action to v7 by renovate[bot] in #18186
feat(fds): implement Slider input from filigran design system (#18191) by Archidoit in #18192

Full Changelog: 7.260907.0...7.260910.0

Open source →

Additional notes

Version 7.260910.0

Compare

Choose a tag to compare

Open source →

7.260907.07 Sept 2026

Community Contributions Highlight:

Enhancements:

#17908 feat(docker): adopt the FIPS 140-3 validated python-nodejs-fips base image
#16815 feat(investigations): Add 'Create Entity' button to investigations add entity drawer
#15191 feat(graph): ability to create entities in the investigation graph

Bug Fixes:

#18109 fix(tests): telemetry manager tests poll asynchronous counters with a too short budget (flaky tests)
#17709 fix(Dashboard): Entities list widget filters become non-editable after reload when using nested dynamic "In regards of" filters
#17678 Improve email list
#17512 fix(client): Omitted created_by_ref becomes explicit createdBy: null in mutation input (absence is not distinguished from null)
#16392 fix(custom-views): CURRENT ENTITY option missing from autocomplete in nested in regards of (dynamic) sub-filter
#15882 fix: incident knowledge tab doesn't display required data
#10171 fix(filters): filter missing on "Courses of Action"

Community Contributions Highlight:

feat(investigations): add create entity button to the add entity drawer on investigations (#16815) by scarletmerlin123 in #16816

Pull Requests:

test(e2e): stabilize custom view golden path test (flaky test) (#18081) by Xavier Fournet (@xfournet) in #18082
feat(connector): add activity log for managed connector configuration update (#18078) by Mathieu Cartaud (@mcartaud) in #18079
feat(worfklow): handle new workflow UI for all entities (#17555) by Florian DeLemarre (@delemaf) in #17621
test(e2e): type dates from the first section of the field (flaky test) (#16071) by Xavier Fournet (@xfournet) in #18108
test(backend): give the telemetry counters time to land (flaky tests) (#18109) by Xavier Fournet (@xfournet) in #18110
test(e2e): fail on the draft exit itself instead of a later step (#18115) by Xavier Fournet (@xfournet) in #18113
test(e2e): apply the report markings one at a time (#18116) by Xavier Fournet (@xfournet) in #18114
feat(ingestion): add ingestion logs for CSV feeds (#17528) by ValentinBouzinFiligran in #17614
fix(deps): update dependency @langchain/openai to v1.5.11 by renovate[bot] in #18127
fix(deps): update dependency nodemailer to v9.1.1 by renovate[bot] in #18128
fix(deps): update dependency openai to v7.9.0 by renovate[bot] in #18132
chore(deps): update kibana docker tag to v8.19.21 by renovate[bot] in #18131
fix(deps): update dependency maplibre-gl to v6.7.0 by renovate[bot] in #18135
fix(deps): update aws-sdk-js-v3 monorepo by renovate[bot] in #18139
chore(deps): update devdependencies (non-major) by renovate[bot] in #18137
chore(deps): lock file maintenance by renovate[bot] in #18140
chore(frontend): make frontend port parametric (#18068) by Sébastien Wauquier (@fellowseb) in #18069
feat(filters): Add 'revoked' filter for technical views (#10171) by Archidoit in #17959
feat(filters): add CURRENT ENTITY option in id filters of 'in regards of (dynamic)' (#16392) by Archidoit in #17955
fix(client-python): omit createdBy from mutation input when created_by_ref is absent (#17512) by Gabriele Bonadiman (@gabrielebonadiman) in #17708
feat(investigations): add create entity button to the add entity drawer on investigations (#16815) by scarletmerlin123 in #16816
fix(backend): improve emails (#17678) by Landry Trebon (@lndrtrbn) in #17679
fix(incidents): knowledge tab doesn't display required data (#15882) by Octave (@OctaveLaventure) in #18092
feat(filters): Enable dynamic regarding of nested filter update in widgets (#17709) by Archidoit in #17962
docs(readme): advertise THREAD community event on REAMDE.md by Jason Harris (@techcraver) in #18124
feat(docker): adopt the FIPS 140-3 validated base image (#17908) by Xavier Fournet (@xfournet) in #17909

New Contributors:

Jason Harris (@techcraver) made their first contribution in #18124

Full Changelog: 7.260904.0...7.260907.0

Open source →

Additional notes

Version 7.260907.0

Compare

Choose a tag to compare

Open source →

7.260901.01 Sept 2026Security

feat(data-model): create vulnerability module ( #17933 ) by Marie Flores (@marieflorescontact) in #17934

Enhancements:

#17932 feat(workflow): release status sync by name through streams
#17907 feat(theme): Built-in template
#17676 feat(accessibility): Resolve medium accessibility issues

Bug Fixes:

#18012 fix(backend): Painless update scripts interpolate field names and exhaust the engine script compilation limit
#17964 fix(chatbot): upstream error detail objects reach the chat as [object Object]
#17956 fix(chatbot): opening Ask Ariane crashes the dashboard on a placeholder translation key
#16192 fix(ai-assistant): AI chatbot panel overlaps and hides the entity detail dialog in graph views

Pull Requests:

feat(accessibility): resolve medium accessibility issues (#17676) by scarletmerlin123 in #17781
fix(deps): update dependency graphiql to v5.3.0 by renovate[bot] in #17968
fix(deps): update dependency axios to v1.20.0 by renovate[bot] in #17982
fix(deps): update aws-sdk-js-v3 monorepo by renovate[bot] in #17986
chore(deps): update devdependencies (non-major) by renovate[bot] in #17985
fix(deps): update dependency @noble/ed25519 to v3.2.0 by renovate[bot] in #18008
chore(deps): update devdependencies (non-major) by renovate[bot] in #18005
fix(deps): update dependency nodemailer to v9.0.6 by renovate[bot] in #18006
fix(deps): update dependency openai to v7.8.0 by renovate[bot] in #17987
chore(deps): update dependency webpack to v5.110.0 by renovate[bot] in #18007
fix(deps): update aws-sdk-js-v3 monorepo to v3.1120.0 by renovate[bot] in #18016
chore(deps): update dependency webpack to v5.110.1 by renovate[bot] in #18022
chore(deps): lock file maintenance by renovate[bot] in #18009
chore(deps): update anchore/sbom-action action to v0.24.1 by renovate[bot] in #18024
feat(theme): Filigran built-in themes (#17907) by Archidoit in #17922
feat(streams): release status sync by name through streams (#17932) by Octave (@OctaveLaventure) in #17935
fix(backend): make Painless update scripts stable (#18012) by Xavier Fournet (@xfournet) in #18013
chore(logs): improve error logging for engine to log the whole query (#17876) by Souad Hadjiat (@SouadHadjiat) in #17877
feat(data-model): create vulnerability module (#17933) by Marie Flores (@marieflorescontact) in #17934
fix(deps): update dependency zod to v4.5.1 by renovate[bot] in #18045
fix(deps): update dependency react-intl to v10.1.24 by renovate[bot] in #18044
fix(chatbot): keep the panel from crashing and unmask upstream error text (#17956, #17964) by Fred LL (@fred-lr) in #17957
fix(graph): adjust toolbar and details sidebar to prevent chatbot overflow (#16192) by Mathieu Cartaud (@mcartaud) in #17698

Full Changelog: 7.260828.0...7.260901.0

Open source →

Additional notes

Version 7.260901.0

Compare

Choose a tag to compare

Open source →

7.260828.028 Aug 2026

fix(connector): fix connector name collision during migration ( #17564 ) by Jeremy Cloarec (@JeremyCloarec) in #17764

Enhancements:

#17830 feat(chatbot): support human-in-the-loop tool approval in Ask Ariane
#17786 feat(inference): add inference rule to derive System has Vulnerability from System uses Software and Software has Vulnerability
#17312 feat(accessibility): Resolve critical accessibility issues
#17254 feat(platform): replace external map tile server with local PMTiles rendering
#15548 feat(datamodel): add Score field on TA, IS, Malware, Incident and Event entities
#6726 feat(inference): propagation rule linking vulnerabilities to Infrastructure through used software
#6320 feat(export): export map widget

Bug Fixes:

#17818 fix(notifiers): improve notifier connection query
#17789 fix(activity): refactor activity
#17772 fix(theme): refactor theme handling
#17752 fix(playbook): manipulate knowledge component doesn't work on the “Score has changed” filter
#17705 fix(email): Improve email verification
#17564 fix(connector): check name collision on connector migration
#17491 fix(client-python): define concurrency model for API-listen connector callbacks
#17489 fix(stream): File sync via live stream fails for filenames containing #
#17291 fix(frontend): OpenCTI UI cannot download documents when APP_BASE_PATH is defined
#17140 fix(bg-tasks): Dates for background tasks are unknown in dialog box
#14946 Dashboard Map Widget: GeoJSON country overlays not rendered on wrapped world copies
#10077 fix(ui): resolve world map issue

Pull Requests:

fix(connector): fix connector name collision during migration (#17564) by Jeremy Cloarec (@JeremyCloarec) in #17764
fix(stream): properly encode fetchUri in syncManager (#17489) by Jeremy Cloarec (@JeremyCloarec) in #17825
fix(deps): update dependency openid-client to v6.8.7 by renovate[bot] in #17865
fix(deps): update dependency @langchain/openai to v1.5.10 by renovate[bot] in #17863
fix(deps): update dependency react-pdf to v10.5.0 by renovate[bot] in #17867
fix(deps): update dependency html-to-pdfmake to v2.5.34 by renovate[bot] in #17864
chore(deps): update docker/setup-buildx-action action to v4.3.0 by renovate[bot] in #17849
chore(deps): update github/codeql-action action to v4.37.7 by renovate[bot] in #17730
fix(deps): update dependency eventsource-parser to v4 by renovate[bot] in #17701
fix(deps): update dependency content-type to v3 by renovate[bot] in #17868
fix(deps): update dependency graphql-scalars to v2 by renovate[bot] in #17869
chore(deps): update github/codeql-action action to v4.37.8 by renovate[bot] in #17879
chore(deps): update prom/prometheus docker tag to v3.14.0 by renovate[bot] in #17847
fix(deps): update dependency @mistralai/mistralai to v2 by renovate[bot] in #15116
fix(deps): update dependency otplib to v13.5.0 by renovate[bot] in #17880
fix(deps): update dependency eventsource to v5 by renovate[bot] in #17702
chore(deps): update rabbitmq docker tag to v4.3.5 by renovate[bot] in #17881
fix(deps): update dependency jose to v6.2.10 by renovate[bot] in #17883
fix(deps): update dependency eventsource to v5.1.1 by renovate[bot] in #17882
feat(worfklow): Handle workflow Instance on all entities (#17551) by Florian DeLemarre (@delemaf) in #17579
docs: clarify STIX IDs for imported objects (#10203) by Daniel (@codewithdaniel1) in #17483
fix(front): incorrect file path for download with APP_BASE_PATH (#17291) by Mathieu Cartaud (@mcartaud) in #17704
feat(platform): replace external map tile server with local PMTiles rendering (#17254) by Xavier Fournet (@xfournet) in #17255
feat(rules): New rule to propagate 'has' relationships from software to system (#17786) by Landry Trebon (@lndrtrbn) in #17861
feat(rules): New rule to propagate 'has' relationships from software to infrastructure (#6726) by Landry Trebon (@lndrtrbn) in #17897
fix(client-python): define concurrency model for API-listen connector callbacks (#17491) by Gabriele Bonadiman (@gabrielebonadiman) in #17739
feat(accessibility): Resolve critical accessibility issues (#17312) by scarletmerlin123 in #17393
fix(deps): update dependency pmtiles to v4.5.0 by renovate[bot] in #17915
fix(deps): update dependency maplibre-gl to v6.5.0 by renovate[bot] in #17914
chore(docker): remove the now unused libmagic native dependency (#17911) by Xavier Fournet (@xfournet) in #17912
fix(activity): refactor audits (#17789) by Jeremy Cloarec (@JeremyCloarec) in #17791
feat(chatbot): support human-in-the-loop tool approval in Ask Ariane (#17830) by Fred LL (@fred-lr) in #17834
fix(starlette): fix version in worker and node python (#17918) by A. Jard (@aHenryJard) in #17919
fix(playbook): fix manipulate knowledge and other components playbook with "score has changed" filters (#17752) by Céline Sèbe (@CelineSebe) in #17765
fix(deps): update dependency react-intl to v10 by renovate[bot] in #13776
test(authentication-provider): validate OIDC provider creation used by XTM Hub trial instances (#17930) by jpkha in #17931
fix(deps): update dependency maplibre-gl to v6.6.0 by renovate[bot] in #17942
fix(deps): update dependency marked to v18.0.11 by renovate[bot] in #17939

New Contributors:

Fred LL (@fred-lr) made their first contribution in #17834

Full Changelog: 7.260824.0...7.260828.0

Open source →

Additional notes

Version 7.260828.0

Compare

Choose a tag to compare

Open source →

7.260824.024 Aug 2026

fix(deps): update dependency @langchain/core to v1.2.8 by renovate [bot] in #17746

Enhancements:

#17838 docs: update integrations page
#17827 bug(docs): broken links on "Other resources" documentation page
#17480 feat(worfklow): groundwork for experimental Status sync between platforms through streams
#15217 feat(fintel): make first and back pages optional (One-Pager mode)

Bug Fixes:

#17756 fix(access): minor refactor of access utils
#17665 fix(worker): error Unrecognized error during bundle import are not all errors
#17236 fix(ui): in light mode, there is no header in drawers
#15295 fix(csv-mapper): export of 'Creators' when exporting in CSV
#11847 fix(dashboards): horizontal bar chart widget displays sector targeting based on result count instead of full data set

Pull Requests:

fix(deps): update dependency @langchain/core to v1.2.8 by renovate[bot] in #17746
fix(deps): update rjsf monorepo to v6.8.0 by renovate[bot] in #17748
docs(client-python): document that update flag only affects entity merge collisions (#13377) by Gabriele Bonadiman (@gabrielebonadiman) in #17657
fix(access): minor refactor of access utils (#17756) by Florian DeLemarre (@delemaf) in #17757
fix(deps): update dependency jose to v6.2.9 by renovate[bot] in #17768
fix(deps): update dependency file-type to v22.0.2 by renovate[bot] in #17767
fix(email): Improve email verification (#17705) by Sarah Bocognano (@SarahBocognano) in #17706
fix(csv-mapper): export of 'Creators' when exporting in CSV (#15295) by Sarah Bocognano (@SarahBocognano) in #17310
fix(theme): refactor themes (#17772) by Jeremy Cloarec (@JeremyCloarec) in #17773
feat(datamodel): add score on Incident (#17675) by Céline Sèbe (@CelineSebe) in #17677
feat(datamodel): add score on Event (#17696) by Céline Sèbe (@CelineSebe) in #17697
fix(dashboard): fix relation counter (#11847) by Francois GRUNERT (@frapuks) in #17771
feat(rabbitmq): Proposal B - split stix bundles in node.js before pushing to worker queue (#17265) by Gabriele Bonadiman (@gabrielebonadiman) in #17265
fix(notifiers): improve notifier connection query (#17818) by Sarah Bocognano (@SarahBocognano) in #17819
fix(deps): update dependency js-base64 to v3.9.3 by renovate[bot] in #17831
fix(deps): update dependency openai to v7.5.0 by renovate[bot] in #17832
docs(resources): updated and fixed broken links in the resources section of the documentation (#17827) by Romain GUIGNARD (@romain-filigran) in #17829
fix(worker): move to warn data format functional errors (#17665) by A. Jard (@aHenryJard) in #17669
feat(backend): store large stream event messages to S3 instead of Redis (#12089) by Jeremy Cloarec (@JeremyCloarec) in #12485
docs(integrations): Update doc integrations (#17838) by Alice Debra (@alice-debra) in #17836
fix(deps): update dependency openid-client to v6.8.6 by renovate[bot] in #17842
fix(deps): update dependency marked to v18.0.10 by renovate[bot] in #17841
chore(deps): update elasticsearch docker tag to v8.19.20 by renovate[bot] in #17721
fix(deps): update dependency react-router-dom to v6.30.6 by renovate[bot] in #17843
fix(deps): update dependency remark-flexible-markers to v1.3.6 by renovate[bot] in #17844
fix(deps): update dependency uuid to v14.0.2 by renovate[bot] in #17845
fix(deps): update dependency dompurify to v3.4.14 by renovate[bot] in #17848
fix(deps): update aws-sdk-js-v3 monorepo by renovate[bot] in #17851
chore(deps): update devdependencies (non-major) by renovate[bot] in #17850
fix(deps): update dependency @langchain/core to v1.2.9 by renovate[bot] in #17853
fix(deps): update dependency @langchain/openai to v1.5.9 by renovate[bot] in #17747
chore(deps): update dependency @vitejs/plugin-react to v6.1.0 by renovate[bot] in #17854
chore(deps): lock file maintenance by renovate[bot] in #17852
chore(deps): lock file maintenance by renovate[bot] in #17856
chore(deps): update dependency vite to v8.2.2 by renovate[bot] in #17855
feat(fintel): make first and back pages optional (One-Pager mode) (#15217) by Gwendoline-FAVRE-FELIX in #17680
fix(deps): update dependency canonicalize to v4 by renovate[bot] in #17717
fix(deps): update dependency content-disposition to v3 by renovate[bot] in #17736
chore(deps): update otel/opentelemetry-collector-contrib docker tag to v0.159.0 by renovate[bot] in #17846
fix(deps): update dependency @graphql-tools/utils to v12 by renovate[bot] in #17719
feat(worfklow): groundwork for experimental Status sync between platforms through streams (#17480) by Octave (@OctaveLaventure) in #17506
chore(docs): force a password change (#9606) by Céline Sèbe (@CelineSebe) in #17057
fix(ui): in light mode, there is no header in drawers (#17236) by Sarah Bocognano (@SarahBocognano) in #17775
chore(deps): update dependency monocart-reporter to v2.12.6 by renovate[bot] in #17862

Full Changelog: 7.260817.0...7.260824.0

Open source →

Additional notes

Version 7.260824.0

Compare

Choose a tag to compare

Open source →

7.260817.017 Aug 2026

chore(xtmone): clean xtm-one test cd (#17660) by @aHenryJard in https://github.com/OpenCTI-Platform/opencti/pull/17661

Enhancements:

#17620 feat(ci): add on-demand deployment for already-built feature branch images

Bug Fixes:

#17686 fix(worker): malformed STIX messages nack forever, block queues indefinitely
#17618 fix(case-template): align relation mutation authorization with case template administration
#17511 fix(backend): Upsert clears existing createdBy to null when incoming confidence is higher (createdBy ref path lacks emptiness guard)
#17431 fix(stream): improve OTP handling
#17421 fix(backend): draft upsert of existing Attack Pattern crashes with "TypeError: _a25.map is not a function" in getConsolidatedUpdatePatch
#16078 fix(frontend): observable nested objects table displays current File instead of opposite object for reversed sample relationship
#15180 fix(ui): observable mandatory fields
#12432 fix(ask-ai): AI Summary is broken in some cases
#10792 fix(ui): placeholders not aligned with table headers in add-entities of containers

Pull Requests:

chore(xtmone): clean xtm-one test cd (#17660) by @aHenryJard in https://github.com/OpenCTI-Platform/opencti/pull/17661
chore(deps): lock file maintenance by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17663
fix(frontend): Container add entities panel, fix entity type display and loading skeleton (#10792) by @lndrtrbn in https://github.com/OpenCTI-Platform/opencti/pull/17673
chore(deps): update dependency cookie to v2 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/16870
fix(backend): fix upsert on non multiple refs (#17511) by @JeremyCloarec in https://github.com/OpenCTI-Platform/opencti/pull/17518
fix(stream): add OTP validation check in sseMiddleware (#17431) by @JeremyCloarec in https://github.com/OpenCTI-Platform/opencti/pull/17432
fix(case-template): improvement of capability for case template relation mutations (#17618) by @CelineSebe in https://github.com/OpenCTI-Platform/opencti/pull/17619
feat(datamodel): add score on Threat Actor group (#17650) by @CelineSebe in https://github.com/OpenCTI-Platform/opencti/pull/17636
feat(datamodel): add score on intrusion set (#17651) by @CelineSebe in https://github.com/OpenCTI-Platform/opencti/pull/17658
feat(datamodel): add score on Malware (#17659) by @CelineSebe in https://github.com/OpenCTI-Platform/opencti/pull/17662
fix(deps): update dependency eventsource-parser to v3.1.1 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17700
fix(deps): update dependency apexcharts to v4.7.0 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17056
fix(frontend): opposite object in obs nested objects table (#16078) by @ValentinBouzinFiligran in https://github.com/OpenCTI-Platform/opencti/pull/17571
fix(deps): update dependency openid-client to v6.8.5 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17714
fix(deps): update dependency graphql-scalars to v1.26.0 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17716
fix(deps): update dependency @pyroscope/nodejs to v0.6.3 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17713
chore(deps): update dependency wheel to ~=0.48.0 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17715
chore(deps): update dependency prometheus-client to ~=0.26.0 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17364
chore(deps): update dependency pysigma to v1.5.0 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/16909
chore(deps): update dependency pika to ~=1.4.4 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/15913
chore(deps): update dependency build to ~=1.5.0 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/15796
fix(deps): update graphql-tools monorepo by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17718
chore(deps): update kibana docker tag to v8.19.20 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17720
chore(deps): update devdependencies (non-major) by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17722
fix(deps): update dependency @langchain/core to v1.2.6 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17723
fix(deps): update aws-sdk-js-v3 monorepo by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17725
fix(deps): update dependency @langchain/openai to v1.5.7 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17724
chore(deps): lock file maintenance by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17726
chore(deps): lock file maintenance by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17731
fix(deps): update dependency @langchain/core to v1.2.7 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17732
fix(deps): update dependency html-react-parser to v6.1.7 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17733
fix(deps): update aws-sdk-js-v3 monorepo to v3.1110.0 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17734
fix(deps): update dependency content-type to v2.1.0 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17735
fix(backend): draft upsert of existing entity crashes with TypeError in getConsolidatedUpdatePatch (#17421) by @gabrielebonadiman in https://github.com/OpenCTI-Platform/opencti/pull/17470
fix(front): fix trads and required visual (#15180) by @ValentinBouzinFiligran in https://github.com/OpenCTI-Platform/opencti/pull/17689
chore(codeowners): delete .github/CODEOWNERS not working with GH entreprise orgs (#16950) by @labo-flg in https://github.com/OpenCTI-Platform/opencti/pull/17743

Full Changelog: https://github.com/OpenCTI-Platform/opencti/compare/7.260811.0...7.260817.0

Open source →

Additional notes

Enhancements:

#17620 feat(ci): add on-demand deployment for already-built feature branch images

Bug Fixes:

#17686 fix(worker): malformed STIX messages nack forever, block queues indefinitely
#17618 fix(case-template): align relation mutation authorization with case template administration
#17511 fix(backend): Upsert clears existing createdBy to null when incoming confidence is higher (createdBy ref path lacks emptiness guard)
#17431 fix(stream): improve OTP handling
#17421 fix(backend): draft upsert of existing Attack Pattern crashes with "TypeError: _a25.map is not a function" in getConsolidatedUpdatePatch
#16078 fix(frontend): observable nested objects table displays current File instead of opposite object for reversed sample relationship
#15180 fix(ui): observable mandatory fields
#12432 fix(ask-ai): AI Summary is broken in some cases
#10792 fix(ui): placeholders not aligned with table headers in add-entities of containers

Pull Requests:

chore(xtmone): clean xtm-one test cd (#17660) by A. Jard (@aHenryJard) in #17661
chore(deps): lock file maintenance by renovate[bot] in #17663
fix(frontend): Container add entities panel, fix entity type display and loading skeleton (#10792) by Landry Trebon (@lndrtrbn) in #17673
chore(deps): update dependency cookie to v2 by renovate[bot] in #16870
fix(backend): fix upsert on non multiple refs (#17511) by Jeremy Cloarec (@JeremyCloarec) in #17518
fix(stream): add OTP validation check in sseMiddleware (#17431) by Jeremy Cloarec (@JeremyCloarec) in #17432
fix(case-template): improvement of capability for case template relation mutations (#17618) by Céline Sèbe (@CelineSebe) in #17619
feat(datamodel): add score on Threat Actor group (#17650) by Céline Sèbe (@CelineSebe) in #17636
feat(datamodel): add score on intrusion set (#17651) by Céline Sèbe (@CelineSebe) in #17658
feat(datamodel): add score on Malware (#17659) by Céline Sèbe (@CelineSebe) in #17662
fix(deps): update dependency eventsource-parser to v3.1.1 by renovate[bot] in #17700
fix(deps): update dependency apexcharts to v4.7.0 by renovate[bot] in #17056
fix(frontend): opposite object in obs nested objects table (#16078) by ValentinBouzinFiligran in #17571
fix(deps): update dependency openid-client to v6.8.5 by renovate[bot] in #17714
fix(deps): update dependency graphql-scalars to v1.26.0 by renovate[bot] in #17716
fix(deps): update dependency @pyroscope/nodejs to v0.6.3 by renovate[bot] in #17713
chore(deps): update dependency wheel to ~=0.48.0 by renovate[bot] in #17715
chore(deps): update dependency prometheus-client to ~=0.26.0 by renovate[bot] in #17364
chore(deps): update dependency pysigma to v1.5.0 by renovate[bot] in #16909
chore(deps): update dependency pika to ~=1.4.4 by renovate[bot] in #15913
chore(deps): update dependency build to ~=1.5.0 by renovate[bot] in #15796
fix(deps): update graphql-tools monorepo by renovate[bot] in #17718
chore(deps): update kibana docker tag to v8.19.20 by renovate[bot] in #17720
chore(deps): update devdependencies (non-major) by renovate[bot] in #17722
fix(deps): update dependency @langchain/core to v1.2.6 by renovate[bot] in #17723
fix(deps): update aws-sdk-js-v3 monorepo by renovate[bot] in #17725
fix(deps): update dependency @langchain/openai to v1.5.7 by renovate[bot] in #17724
chore(deps): lock file maintenance by renovate[bot] in #17726
chore(deps): lock file maintenance by renovate[bot] in #17731
fix(deps): update dependency @langchain/core to v1.2.7 by renovate[bot] in #17732
fix(deps): update dependency html-react-parser to v6.1.7 by renovate[bot] in #17733
fix(deps): update aws-sdk-js-v3 monorepo to v3.1110.0 by renovate[bot] in #17734
fix(deps): update dependency content-type to v2.1.0 by renovate[bot] in #17735
fix(backend): draft upsert of existing entity crashes with TypeError in getConsolidatedUpdatePatch (#17421) by Gabriele Bonadiman (@gabrielebonadiman) in #17470
fix(front): fix trads and required visual (#15180) by ValentinBouzinFiligran in #17689
chore(codeowners): delete .github/CODEOWNERS not working with GH entreprise orgs (#16950) by Laurent Bonnet (@labo-flg) in #17743

Full Changelog: 7.260811.0...7.260817.0

Additional notes

Version 7.260817.0

Compare

Choose a tag to compare

Open source →

7.260811.011 Aug 2026

fix(backend): [Investigation] fix non-idempotent operation during concurrent stream sync (#15207) by @OctaveLaventure in https://github.com/OpenCTI-Pl

Enhancements:

#16216 feat(background-tasks): ability to update relations start/stop time via mass operation

Bug Fixes:

#17638 fix(email-template): update capabilities for mutations
#17553 fix(import-export): STIX import/export stalled on worker uncatch errors
#17533 fix(public-dashboard): Improve ensurePublicContext in public-dashboards
#17466 fix(users): Improve users edition for organizations administrators
#16814 fix(stream): restrict context data depending on user access
#15207 fix: ensure report rel_object.internal_id values are deduplicated

Pull Requests:

fix(backend): [Investigation] fix non-idempotent operation during concurrent stream sync (#15207) by @OctaveLaventure in https://github.com/OpenCTI-Platform/opencti/pull/15582
fix(users): improve users edition for organizations administrators (#17466) by @SouadHadjiat in https://github.com/OpenCTI-Platform/opencti/pull/17467
feat(background-tasks): ability to update relations start/stop time via mass operation (#16216) by @Gwendoline-FAVRE-FELIX in https://github.com/OpenCTI-Platform/opencti/pull/17541
fix(public-dashboard): Improve ensurePublicContext in public-dashboards (#17533) by @SarahBocognano in https://github.com/OpenCTI-Platform/opencti/pull/17534
fix(worker): prevent message queue consumer from stalling on unhandled exceptions (#17553) by @gabrielebonadiman in https://github.com/OpenCTI-Platform/opencti/pull/17573
fix(stream): restrict context data depending on user access (#16814) by @JeremyCloarec in https://github.com/OpenCTI-Platform/opencti/pull/17585
chore(deps): update devdependencies (non-major) by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17597
fix(deps): update dependency @langchain/core to v1.2.5 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17596
fix(deps): update dependency dompurify to v3.4.13 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17601
fix(deps): update dependency express-rate-limit to v8.6.2 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17602
fix(deps): update dependency graphql-ws to v6.2.1 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17604
fix(deps): update dependency jose to v6.2.8 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17603
fix(deps): update dependency marked to v18.0.9 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17605
fix(deps): update dependency nodemailer to v9.0.5 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17606
fix(deps): update dependency react-grid-layout to v2.2.4 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17607
fix(deps): update dependency axios to v1.19.0 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17640
chore(deps): update yarn to v4.18.0 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17613
fix(deps): update dependency csv-parse to v7.0.2 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17600
chore(deps): update prom/prometheus docker tag to v3.13.2 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17595
fix(deps): update dependency @langchain/openai to v1.5.6 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17598
fix(deps): update dependency ws to v8.21.3 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17608
fix(deps): update dependency ipaddr.js to v2.5.0 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17641
fix(deps): update dependency markdown-to-jsx to v9.10.2 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17642
fix(deps): update dependency openai to v7 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17439
chore(deps): update docker/dockerfile docker tag to v1.26 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17609
chore(deps): update otel/opentelemetry-collector-contrib docker tag to v0.158.0 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17612
fix(deps): update dependency graphql-upload to v18 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17643
refactor(safe-ejs): use JS AST parser to remove comments (#17475) by @mcartaud in https://github.com/OpenCTI-Platform/opencti/pull/17478
fix(email-template): update capabilities for mutations (#17638) by @SarahBocognano in https://github.com/OpenCTI-Platform/opencti/pull/17639

Full Changelog: https://github.com/OpenCTI-Platform/opencti/compare/7.260807.0...7.260811.0

Open source →

Additional notes

Enhancements:

#16216 feat(background-tasks): ability to update relations start/stop time via mass operation

Bug Fixes:

#17638 fix(email-template): update capabilities for mutations
#17553 fix(import-export): STIX import/export stalled on worker uncatch errors
#17533 fix(public-dashboard): Improve ensurePublicContext in public-dashboards
#17466 fix(users): Improve users edition for organizations administrators
#16814 fix(stream): restrict context data depending on user access
#15207 fix: ensure report rel_object.internal_id values are deduplicated

Pull Requests:

fix(backend): [Investigation] fix non-idempotent operation during concurrent stream sync (#15207) by Octave (@OctaveLaventure) in #15582
fix(users): improve users edition for organizations administrators (#17466) by Souad Hadjiat (@SouadHadjiat) in #17467
feat(background-tasks): ability to update relations start/stop time via mass operation (#16216) by Gwendoline-FAVRE-FELIX in #17541
fix(public-dashboard): Improve ensurePublicContext in public-dashboards (#17533) by Sarah Bocognano (@SarahBocognano) in #17534
fix(worker): prevent message queue consumer from stalling on unhandled exceptions (#17553) by Gabriele Bonadiman (@gabrielebonadiman) in #17573
fix(stream): restrict context data depending on user access (#16814) by Jeremy Cloarec (@JeremyCloarec) in #17585
chore(deps): update devdependencies (non-major) by renovate[bot] in #17597
fix(deps): update dependency @langchain/core to v1.2.5 by renovate[bot] in #17596
fix(deps): update dependency dompurify to v3.4.13 by renovate[bot] in #17601
fix(deps): update dependency express-rate-limit to v8.6.2 by renovate[bot] in #17602
fix(deps): update dependency graphql-ws to v6.2.1 by renovate[bot] in #17604
fix(deps): update dependency jose to v6.2.8 by renovate[bot] in #17603
fix(deps): update dependency marked to v18.0.9 by renovate[bot] in #17605
fix(deps): update dependency nodemailer to v9.0.5 by renovate[bot] in #17606
fix(deps): update dependency react-grid-layout to v2.2.4 by renovate[bot] in #17607
fix(deps): update dependency axios to v1.19.0 by renovate[bot] in #17640
chore(deps): update yarn to v4.18.0 by renovate[bot] in #17613
fix(deps): update dependency csv-parse to v7.0.2 by renovate[bot] in #17600
chore(deps): update prom/prometheus docker tag to v3.13.2 by renovate[bot] in #17595
fix(deps): update dependency @langchain/openai to v1.5.6 by renovate[bot] in #17598
fix(deps): update dependency ws to v8.21.3 by renovate[bot] in #17608
fix(deps): update dependency ipaddr.js to v2.5.0 by renovate[bot] in #17641
fix(deps): update dependency markdown-to-jsx to v9.10.2 by renovate[bot] in #17642
fix(deps): update dependency openai to v7 by renovate[bot] in #17439
chore(deps): update docker/dockerfile docker tag to v1.26 by renovate[bot] in #17609
chore(deps): update otel/opentelemetry-collector-contrib docker tag to v0.158.0 by renovate[bot] in #17612
fix(deps): update dependency graphql-upload to v18 by renovate[bot] in #17643
refactor(safe-ejs): use JS AST parser to remove comments (#17475) by Mathieu Cartaud (@mcartaud) in #17478
fix(email-template): update capabilities for mutations (#17638) by Sarah Bocognano (@SarahBocognano) in #17639

Full Changelog: 7.260807.0...7.260811.0

Additional notes

Version 7.260811.0

Compare

Choose a tag to compare

Open source →

7.260807.07 Aug 2026

docs: explain bulk observable creation (#17354) by @codewithdaniel1 in https://github.com/OpenCTI-Platform/opencti/pull/17460

Enhancements:

#17451 feat(errors): Move ingestion error to warn and harmonize them
#17399 refactor(backend): errors.js to ts
#17223 [XTMHub]🎯 Connect to Hub from OpenCTI Design
#16680 feat(UX): Remove automatic text-transform: capitalize on labels, preserve user-defined casing
#15691 feat(filters): shareable and reusable saved searches
#15689 feat(dashboards): reusable saved filters in dashboards
#12674 feat(filters): improve wildcard prefix and fuzzy search option

Bug Fixes:

#17546 Improve label management for custom dashboard distribution widgets.
#17476 fix(notifier): Playbook notifier component element access
#17471 fix(settings): Settings edit field patch
#17469 fix(frontend): missing 'danger zone' within connector reset option
#17389 fix(backend): distinguish client-disconnect abort from real engine errors in relation creation logs
#17384 fix(import): Unclear error for failing import with user connector
#17311 fix(scope): Assigning an Organization to a Service Account does not take it into account
#13583 fix(ux): inconsistency in the names used for manager vs technical user

Pull Requests:

docs: explain bulk observable creation (#17354) by @codewithdaniel1 in https://github.com/OpenCTI-Platform/opencti/pull/17460
feat(backend): Allow lucene advanced search syntax (~ and *) (#12674) by @JeremyCloarec in https://github.com/OpenCTI-Platform/opencti/pull/15863
fix(filters): Utils for filter operators allowing empty values (#17516) by @Archidoit in https://github.com/OpenCTI-Platform/opencti/pull/17509
feat(widgets): Saved filters in widgets: refinements & introduction in custom views (#15689) by @Archidoit in https://github.com/OpenCTI-Platform/opencti/pull/17408
fix(import): clarify draft access error for non-service-account connectors (#17384) by @gabrielebonadiman in https://github.com/OpenCTI-Platform/opencti/pull/17450
fix(errors): harmonize error on ingestion (#17451) by @aHenryJard in https://github.com/OpenCTI-Platform/opencti/pull/17453
chore(ci): Use fixed commit hash for all marketplace actions (#17486) by @aHenryJard in https://github.com/OpenCTI-Platform/opencti/pull/17487
fix(frontend): missing 'danger zone' within connector reset option (#17469) by @delemaf in https://github.com/OpenCTI-Platform/opencti/pull/17520
feat(widgets): Saved filters in widgets: Remove FF (#15689) by @Archidoit in https://github.com/OpenCTI-Platform/opencti/pull/17523
docs: Saved filters in widgets (#15689) by @Archidoit in https://github.com/OpenCTI-Platform/opencti/pull/17468
fix(backend): distinguish client-disconnect abort from real engine errors in logs (#17389) by @gabrielebonadiman in https://github.com/OpenCTI-Platform/opencti/pull/17390
fix(notifier): Playbook notifier component element access (#17476) by @Archidoit in https://github.com/OpenCTI-Platform/opencti/pull/17479
fix(dashboard): Improve label management for custom dashboard distribution widgets (#17546) by @ludovic in https://github.com/OpenCTI-Platform/opencti/pull/17547
fix(settings): settings edit field patch (#17471) by @Archidoit in https://github.com/OpenCTI-Platform/opencti/pull/17473
refactor(backend): errors.js to ts (#17399) by @Archidoit in https://github.com/OpenCTI-Platform/opencti/pull/17401
feat(custom-fields): Chunk 2 — Admin UI (Settings) (#17179) by @ludovic in https://github.com/OpenCTI-Platform/opencti/pull/16953
feat(ingestion): TAXII feed tabs (#17532) by @ValentinBouzinFiligran in https://github.com/OpenCTI-Platform/opencti/pull/17540
fix(ci): use local commit python for node python (#17488) by @aHenryJard in https://github.com/OpenCTI-Platform/opencti/pull/17519
fix(ux): inconsistency in the names used for manager vs technical user (#13583) by @SarahBocognano in https://github.com/OpenCTI-Platform/opencti/pull/17266
fix(labels): respect user defined label case (#16680) by @mcartaud in https://github.com/OpenCTI-Platform/opencti/pull/17070
chore(deps): update dependency pytest-cov to ~=7.1.0 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/15248
fix: Improve elastic filters handling (#17508) by @mcartaud in https://github.com/OpenCTI-Platform/opencti/pull/17510
fix(ingestion): improve ingestion validation (#17020) by @mcartaud in https://github.com/OpenCTI-Platform/opencti/pull/17046

New Contributors:

@codewithdaniel1 made their first contribution in https://github.com/OpenCTI-Platform/opencti/pull/17460

Full Changelog: https://github.com/OpenCTI-Platform/opencti/compare/7.260803.0...7.260807.0

Open source →

Additional notes

Enhancements:

#17451 feat(errors): Move ingestion error to warn and harmonize them
#17399 refactor(backend): errors.js to ts
#17223 [XTMHub]🎯 Connect to Hub from OpenCTI Design
#16680 feat(UX): Remove automatic text-transform: capitalize on labels, preserve user-defined casing
#15691 feat(filters): shareable and reusable saved searches
#15689 feat(dashboards): reusable saved filters in dashboards
#12674 feat(filters): improve wildcard prefix and fuzzy search option

Bug Fixes:

#17546 Improve label management for custom dashboard distribution widgets.
#17476 fix(notifier): Playbook notifier component element access
#17471 fix(settings): Settings edit field patch
#17469 fix(frontend): missing 'danger zone' within connector reset option
#17389 fix(backend): distinguish client-disconnect abort from real engine errors in relation creation logs
#17384 fix(import): Unclear error for failing import with user connector
#17311 fix(scope): Assigning an Organization to a Service Account does not take it into account
#13583 fix(ux): inconsistency in the names used for manager vs technical user

Pull Requests:

docs: explain bulk observable creation (#17354) by Daniel (@codewithdaniel1) in #17460
feat(backend): Allow lucene advanced search syntax (~ and *) (#12674) by Jeremy Cloarec (@JeremyCloarec) in #15863
fix(filters): Utils for filter operators allowing empty values (#17516) by Archidoit in #17509
feat(widgets): Saved filters in widgets: refinements & introduction in custom views (#15689) by Archidoit in #17408
fix(import): clarify draft access error for non-service-account connectors (#17384) by Gabriele Bonadiman (@gabrielebonadiman) in #17450
fix(errors): harmonize error on ingestion (#17451) by A. Jard (@aHenryJard) in #17453
chore(ci): Use fixed commit hash for all marketplace actions (#17486) by A. Jard (@aHenryJard) in #17487
fix(frontend): missing 'danger zone' within connector reset option (#17469) by Florian DeLemarre (@delemaf) in #17520
feat(widgets): Saved filters in widgets: Remove FF (#15689) by Archidoit in #17523
docs: Saved filters in widgets (#15689) by Archidoit in #17468
fix(backend): distinguish client-disconnect abort from real engine errors in logs (#17389) by Gabriele Bonadiman (@gabrielebonadiman) in #17390
fix(notifier): Playbook notifier component element access (#17476) by Archidoit in #17479
fix(dashboard): Improve label management for custom dashboard distribution widgets (#17546) by Ludovic Bouges (@ludovic) in #17547
fix(settings): settings edit field patch (#17471) by Archidoit in #17473
refactor(backend): errors.js to ts (#17399) by Archidoit in #17401
feat(custom-fields): Chunk 2 — Admin UI (Settings) (#17179) by Ludovic Bouges (@ludovic) in #16953
feat(ingestion): TAXII feed tabs (#17532) by ValentinBouzinFiligran in #17540
fix(ci): use local commit python for node python (#17488) by A. Jard (@aHenryJard) in #17519
fix(ux): inconsistency in the names used for manager vs technical user (#13583) by Sarah Bocognano (@SarahBocognano) in #17266
fix(labels): respect user defined label case (#16680) by Mathieu Cartaud (@mcartaud) in #17070
chore(deps): update dependency pytest-cov to ~=7.1.0 by renovate[bot] in #15248
fix: Improve elastic filters handling (#17508) by Mathieu Cartaud (@mcartaud) in #17510
fix(ingestion): improve ingestion validation (#17020) by Mathieu Cartaud (@mcartaud) in #17046

New Contributors:

Daniel (@codewithdaniel1) made their first contribution in #17460

Full Changelog: 7.260803.0...7.260807.0

Additional notes

Version 7.260807.0

Compare

Choose a tag to compare

Open source →

7.260803.03 Aug 2026

fix(rbac): allow participate-to relation creation only for administrated organization (#17375) by @marieflorescontact in https://github.com/OpenCTI-Pl

Enhancements:

#17464 feat(dataSanity): Allow to stop an operation
#17427 feat(express): improve headers management
#17418 docs: document SBOM format
#17381 refactor(frontend): migrate environment.jsx to tsx

Bug Fixes:

#17446 fix(ci): forward client_python_local to the feature branch deploy build
#17443 fix(simplelabeltooltip): simpleLabelTooltip
#17440 fix(FormIntake): Form intake cannot be exported via UI anymore
#17414 fix(client-python): OpenCTIConnector constructor should accept scope as a list, not only as a comma-separated string
#17413 fix(scope): Merge hangs on entities with large relationship counts due to O(n×m) scan in filterTargetByExisting
#17404 fix(ui): Modify icon for internal enrichment connectors
#17375 fix(api): improve userAddRelation
#17369 fix(datasanity): Data sanity operation should be skipped if already running.
#17275 fix(stream): Can't access streams list
#17264 fix(playbook): playbook not appliying marking to observables
#17243 fix(dashboard): Relationship widgets don't take start time into account
#17099 fix(backend): file objects with valid hashes rejected during TAXII ingestion
#16921 fix(jsonmapper): Json mapper memory management improvement
#16759 fix(graph): Security platform displayed as Unknown on page reload
#16612 fix(client-python): connectors lose state under platform latency (stale ping echo)
#13437 fix(ux): cannot load entities/observables anymore when there is a large number of them
#2944 fix(ingestion): import_stix2.py fails with UTF-8 values
#2574 fix(ingestion): STIX 2.1 import, Windows registry key value erroneous or lost objects

Pull Requests:

fix(rbac): allow participate-to relation creation only for administrated organization (#17375) by @marieflorescontact in https://github.com/OpenCTI-Platform/opencti/pull/17378
fix(deps): update dependency graphql to v17 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/16724
fix(deps): update rjsf monorepo to v6.7.1 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17367
chore(docs): update maptile to V3 & remove ai eanbled from config (#16114) (#14469) by @nino-filigran in https://github.com/OpenCTI-Platform/opencti/pull/16268
chore(client-python): remove libmagic/python-magic dependency in favor of mimetypes (#13517) by @gabrielebonadiman in https://github.com/OpenCTI-Platform/opencti/pull/17374
fix(client-python): create and link inline registry values on windows-registry-key import (#2574) by @gabrielebonadiman in https://github.com/OpenCTI-Platform/opencti/pull/17385
refactor(frontend): Migrate environment.jsx to tsx (#17381) by @Archidoit in https://github.com/OpenCTI-Platform/opencti/pull/17396
fix(backend): add TLSH to known hashes (#17099) by @JeremyCloarec in https://github.com/OpenCTI-Platform/opencti/pull/17167
fix(jsonmapper): add maxRecords parameter to jsonMappingExecution (#16921) by @JeremyCloarec in https://github.com/OpenCTI-Platform/opencti/pull/16922
fix(ui): Internal enrichment connectors icon (#17404) by @Archidoit in https://github.com/OpenCTI-Platform/opencti/pull/17405
fix(deps): update dependency recharts to v3.10.1 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17392
fix(deps): update dependency express-rate-limit to v8.6.1 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17411
fix(stream): fix number values in filter (#17275) by @JeremyCloarec in https://github.com/OpenCTI-Platform/opencti/pull/17282
docs(sbom): add sbom documentation (#17418) by @aHenryJard in https://github.com/OpenCTI-Platform/opencti/pull/17419
fix(merge): avoid quadratic scan when filtering existing target relations during merge (#17413) by @gabrielebonadiman in https://github.com/OpenCTI-Platform/opencti/pull/17415
fix(deps): update dependency js-base64 to v3.9.2 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17434
chore(deps): update dependency webpack to v5.109.1 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17433
fix(deps): update dependency node-calls-python to v1.13.0 - autoclosed by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17435
fix(client-python): accept scope as string or list in OpenCTIConnector (#17414) by @helene-nguyen in https://github.com/OpenCTI-Platform/opencti/pull/17416
feat(express): improve header management (#17427) by @JeremyCloarec in https://github.com/OpenCTI-Platform/opencti/pull/17429
ci: fix backend integration test results upload path (#17428) by @mcartaud in https://github.com/OpenCTI-Platform/opencti/pull/17430
fix(widget): Take start and end dates into account in relationship widgets (#17243) by @Archidoit in https://github.com/OpenCTI-Platform/opencti/pull/17279
fix(datasanity): do not run again an operation that is running (#17369) by @aHenryJard in https://github.com/OpenCTI-Platform/opencti/pull/17372
fix(chart): improve simpleLabelTooltip (#17443) by @ludovic in https://github.com/OpenCTI-Platform/opencti/pull/17444
fix(ci): forward client_python_local to the feature branch deploy build (#17446) by @nvkhope in https://github.com/OpenCTI-Platform/opencti/pull/17447
docs(organization): Add documentation for Organization Segregation (#17426) by @emmafiligran in https://github.com/OpenCTI-Platform/opencti/pull/17422
feat(custom-field): Chunk 1 - POC → Production Ready (Backend) (#17178) by @ludovic in https://github.com/OpenCTI-Platform/opencti/pull/16907
fix(deps): update dependency @pyroscope/nodejs to v0.6.2 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17459
chore(deps): update dependency webpack to v5.109.2 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17458
fix(deps): update dependency react-draggable to v4.7.1 by @renovate[bot] in https://github.com/OpenCTI-Platform/opencti/pull/17461
fix(graph): add missing security platform and coverage fragments (#16759) by @JeremyCloarec in https://github.com/OpenCTI-Platform/opencti/pull/17454
fix(formintake): add back ability to export form intake in popover (#17440) by @JeremyCloarec in https://github.com/OpenCTI-Platform/opencti/pull/17445
feat(datasanity): allow to stop a stale operation (#17464) by @aHenryJard in https://github.com/OpenCTI-Platform/opencti/pull/17465
fix(ux): cannot load entities/observables anymore when there is a large number of them (#13437) by @delemaf in https://github.com/OpenCTI-Platform/opencti/pull/17237
fix(backend): Assigning an Organization to a Service Account is taken into account (#17311) by @MTorbay-Filigran in https://github.com/OpenCTI-Platform/opencti/pull/17409
fix(ipwhitelist): also add admin user in default ip whitelist exclusions (#17264) by @JeremyCloarec in https://github.com/OpenCTI-Platform/opencti/pull/17474

New Contributors:

@emmafiligran made their first contribution in https://github.com/OpenCTI-Platform/opencti/pull/17422

Full Changelog: https://github.com/OpenCTI-Platform/opencti/compare/7.260728.0...7.260803.0

Open source →

Additional notes

Enhancements:

#17464 feat(dataSanity): Allow to stop an operation
#17427 feat(express): improve headers management
#17418 docs: document SBOM format
#17381 refactor(frontend): migrate environment.jsx to tsx

Bug Fixes:

#17446 fix(ci): forward client_python_local to the feature branch deploy build
#17443 fix(simplelabeltooltip): simpleLabelTooltip
#17440 fix(FormIntake): Form intake cannot be exported via UI anymore
#17414 fix(client-python): OpenCTIConnector constructor should accept scope as a list, not only as a comma-separated string
#17413 fix(scope): Merge hangs on entities with large relationship counts due to O(n×m) scan in filterTargetByExisting
#17404 fix(ui): Modify icon for internal enrichment connectors
#17375 fix(api): improve userAddRelation
#17369 fix(datasanity): Data sanity operation should be skipped if already running.
#17275 fix(stream): Can't access streams list
#17264 fix(playbook): playbook not appliying marking to observables
#17243 fix(dashboard): Relationship widgets don't take start time into account
#17099 fix(backend): file objects with valid hashes rejected during TAXII ingestion
#16921 fix(jsonmapper): Json mapper memory management improvement
#16759 fix(graph): Security platform displayed as Unknown on page reload
#16612 fix(client-python): connectors lose state under platform latency (stale ping echo)
#13437 fix(ux): cannot load entities/observables anymore when there is a large number of them
#2944 fix(ingestion): import_stix2.py fails with UTF-8 values
#2574 fix(ingestion): STIX 2.1 import, Windows registry key value erroneous or lost objects

Pull Requests:

fix(rbac): allow participate-to relation creation only for administrated organization (#17375) by Marie Flores (@marieflorescontact) in #17378
fix(deps): update dependency graphql to v17 by renovate[bot] in #16724
fix(deps): update rjsf monorepo to v6.7.1 by renovate[bot] in #17367
chore(docs): update maptile to V3 & remove ai eanbled from config (#16114) (#14469) by nino-filigran in #16268
chore(client-python): remove libmagic/python-magic dependency in favor of mimetypes (#13517) by Gabriele Bonadiman (@gabrielebonadiman) in #17374
fix(client-python): create and link inline registry values on windows-registry-key import (#2574) by Gabriele Bonadiman (@gabrielebonadiman) in #17385
refactor(frontend): Migrate environment.jsx to tsx (#17381) by Archidoit in #17396
fix(backend): add TLSH to known hashes (#17099) by Jeremy Cloarec (@JeremyCloarec) in #17167
fix(jsonmapper): add maxRecords parameter to jsonMappingExecution (#16921) by Jeremy Cloarec (@JeremyCloarec) in #16922
fix(ui): Internal enrichment connectors icon (#17404) by Archidoit in #17405
fix(deps): update dependency recharts to v3.10.1 by renovate[bot] in #17392
fix(deps): update dependency express-rate-limit to v8.6.1 by renovate[bot] in #17411
fix(stream): fix number values in filter (#17275) by Jeremy Cloarec (@JeremyCloarec) in #17282
docs(sbom): add sbom documentation (#17418) by A. Jard (@aHenryJard) in #17419
fix(merge): avoid quadratic scan when filtering existing target relations during merge (#17413) by Gabriele Bonadiman (@gabrielebonadiman) in #17415
fix(deps): update dependency js-base64 to v3.9.2 by renovate[bot] in #17434
chore(deps): update dependency webpack to v5.109.1 by renovate[bot] in #17433
fix(deps): update dependency node-calls-python to v1.13.0 - autoclosed by renovate[bot] in #17435
fix(client-python): accept scope as string or list in OpenCTIConnector (#17414) by Helene Nguyen (@helene-nguyen) in #17416
feat(express): improve header management (#17427) by Jeremy Cloarec (@JeremyCloarec) in #17429
ci: fix backend integration test results upload path (#17428) by Mathieu Cartaud (@mcartaud) in #17430
fix(widget): Take start and end dates into account in relationship widgets (#17243) by Archidoit in #17279
fix(datasanity): do not run again an operation that is running (#17369) by A. Jard (@aHenryJard) in #17372
fix(chart): improve simpleLabelTooltip (#17443) by Ludovic Bouges (@ludovic) in #17444
fix(ci): forward client_python_local to the feature branch deploy build (#17446) by Kevin Nunes (@nvkhope) in #17447
docs(organization): Add documentation for Organization Segregation (#17426) by emfiligran (@emmafiligran) in #17422
feat(custom-field): Chunk 1 - POC → Production Ready (Backend) (#17178) by Ludovic Bouges (@ludovic) in #16907
fix(deps): update dependency @pyroscope/nodejs to v0.6.2 by renovate[bot] in #17459
chore(deps): update dependency webpack to v5.109.2 by renovate[bot] in #17458
fix(deps): update dependency react-draggable to v4.7.1 by renovate[bot] in #17461
fix(graph): add missing security platform and coverage fragments (#16759) by Jeremy Cloarec (@JeremyCloarec) in #17454
fix(formintake): add back ability to export form intake in popover (#17440) by Jeremy Cloarec (@JeremyCloarec) in #17445
feat(datasanity): allow to stop a stale operation (#17464) by A. Jard (@aHenryJard) in #17465
fix(ux): cannot load entities/observables anymore when there is a large number of them (#13437) by Florian DeLemarre (@delemaf) in #17237
fix(backend): Assigning an Organization to a Service Account is taken into account (#17311) by MTorbay-Filigran in #17409
fix(ipwhitelist): also add admin user in default ip whitelist exclusions (#17264) by Jeremy Cloarec (@JeremyCloarec) in #17474

New Contributors:

emfiligran (@emmafiligran) made their first contribution in #17422

Full Changelog: 7.260728.0...7.260803.0

Additional notes

Version 7.260803.0

Compare

Choose a tag to compare

Open source →