Release: Merge release into master from: release/2.53.5#13992
Merged
Release: Merge release into master from: release/2.53.5#13992
Conversation
….54.0-dev Release: Merge back 2.53.4 into bugfix from: master-into-bugfix/2.53.4-2.54.0-dev
* added relevant test name to close old findings comment * Added test url to close old finding comment * Better handling for close old findings comments
* Increasing timeouts for unit tests * fix timeouts --------- Co-authored-by: Valentijn Scholten <valentijnscholten@gmail.com>
Fix incorrect endpoint parsing when endpoints lack a protocol (scheme). When endpoints are converted to strings without a protocol, hyperlink.parse() misinterprets the hostname as the scheme, causing deduplication to fail. This fix normalizes endpoint strings by prepending '//' if '://' is missing, replicating the behavior from dojo/endpoint/utils.py line 265. Fixes #10215
…3968) Fixes #11314 When copying a FileUpload, the copy() method appends ' - clone-{hash}' (17 characters) to the title without checking if it would exceed the database max_length constraint of 100 characters. This causes a DataError when copying tests with files that have long names. The fix truncates the original title before appending the clone suffix to ensure the total length never exceeds 100 characters.
…ser (#13973) * Fix Tenable CSV import fails with 'Version of CPE not implemented' - Add exception handling around CPE parsing in TenableCSVParser - Log unsupported CPE versions at DEBUG level instead of crashing - Allows import to continue when encountering unsupported CPE formats - Fixes issue #11243 * Fix: Populate vulnerability_id field in BlackDuck Binary Analysis parser - Add unsaved_vulnerability_ids assignment when CVE is present - This ensures the vulnerability_id field is populated for de-duplication - Fixes #12442 * Test: Add assertions for vulnerability_id field in BlackDuck Binary Analysis parser tests - Verify unsaved_vulnerability_ids is populated with CVE value - Add specific assertion for single vuln test case - Add general assertion for multiple vulns test case - Related to #12442
* Fix test_type mismatch validation during reimport (#10219) - Add validation in consolidate_dynamic_tests to detect test_type mismatches during reimport - Raise ValidationError with descriptive message when test_type doesn't match - Validation occurs before any findings are processed or deduplication starts - Add test cases for matching test_type, mismatched test_type, and initial import scenarios - Create test data files for generic parser with different test types Fixes #10219 * fixes * add docs
…finding_jira_sync is enabled (#13983) * Fix JIRA form processing logic * ruff
github-actions
bot
requested review from
Maffooch and
mtesauro
as code owners
🔴 Risk threshold exceeded.This pull request modifies a sensitive file (dojo/importers/default_importer.py), triggering a configured codepaths edit warning; sensitive file paths and allowed authors can be adjusted in .dryrunsecurity.yaml.
🔴 Configured Codepaths Edit in
|
| Vulnerability | Configured Codepaths Edit |
|---|---|
| Description | Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml. |
We've notified @mtesauro.
All finding details can be found in the DryRun Security Dashboard.
Maffooch
pushed a commit
to valentijnscholten/django-DefectDojo
that referenced
this pull request
Feb 16, 2026
Release: Merge release into master from: release/2.53.5
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
4 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Release triggered by
rossops