Synapse

Latest version: v2.192.0

Safety actively analyzes 688554 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 10 of 57

2.142.2

=====================

Bugfixes
--------
- Fix an issue which caused the Docker image tags for
``vertexproject/synapse-cryotank:v2.141.1``,
``vertexproject/synapse-jsonstor:v2.141.1``, and
``vertexproject/synapse-stemcell:v2.141.1``, to refer to same image.
(`3249 <https://github.com/vertexproject/synapse/pull/3249>`_)

2.142.1

=====================

Bugfixes
--------
- Fix an issue which prevented the publication of the Synapse containers with
``v2.x.x`` tags.
(`3248 <https://github.com/vertexproject/synapse/pull/3248>`_)

2.142.0

=====================

Automatic Migrations
--------------------
- Renormalize the ``risk:vuln:cvss:v2`` and ``risk:vuln:cvss:v3`` properties.
(`3224 <https://github.com/vertexproject/synapse/pull/3224>`_)
- Migrate the ``risk:vuln:name`` type from a ``str`` to a ``risk:vulnname``
form.
(`3227 <https://github.com/vertexproject/synapse/pull/3227>`_)
- See :ref:`datamigration` for more information about automatic migrations.

Model Changes
-------------
- Update to the ``it``, ``ou``, and ``risk`` models.
(`3224 <https://github.com/vertexproject/synapse/pull/3224>`_)
(`3227 <https://github.com/vertexproject/synapse/pull/3227>`_)
(`3237 <https://github.com/vertexproject/synapse/pull/3237>`_)
- See :ref:`userguide_model_v2_142_0` for more detailed model changes.

Features and Enhancements
-------------------------
- Always convert dictionary keys to their primitive values when working with
dictionary objects in Storm. Dictionary objects can no longer have keys
set which are mutable objects, such as Nodes.
(`3233 <https://github.com/vertexproject/synapse/pull/3233>`_)
- Add support for octal constants, such as ``0o755``, in Storm expressions.
(`3231 <https://github.com/vertexproject/synapse/pull/3231>`_)
- Add additional events to the Behold API message stream for the addition
and removal of extended model elements.
(`3228 <https://github.com/vertexproject/synapse/pull/3228>`_)
- Update the ``$lib.dmon.add()`` variable capture to record variables
from embedded query objects.
(`3230 <https://github.com/vertexproject/synapse/pull/3230>`_)
- Add a ``.title()`` method on Storm strings to get title case formatted
strings.
(`3242 <https://github.com/vertexproject/synapse/pull/3242>`_)
- Add a general purpose process pool using forked workers in order to speed
up certain processing operations. This includes the Storm operations for
JSONSchema parsing, HTML parsing, STIX validation, and XML parsing.
(`3033 <https://github.com/vertexproject/synapse/pull/3033>`_)
(`3229 <https://github.com/vertexproject/synapse/pull/3229>`_)
- Add a new Cell configuration option, ``max:users``. This can be set to limit
the maximum number of non-``root`` users on Cell.
(`3244 <https://github.com/vertexproject/synapse/pull/3244>`_)
- Add an ``/api/v1/aha/services`` HTTP API to the Aha service. This
can be used to get a list of the services registered with Aha.
(`3238 <https://github.com/vertexproject/synapse/pull/3238>`_)
- Add support for Cosign signatures of tagged Synapse containers. See
additional information at :ref:`dev_docker_verification`.
(`3196 <https://github.com/vertexproject/synapse/pull/3196>`_)
- Adjust internal names for Storm objects.
(`3229 <https://github.com/vertexproject/synapse/pull/3229>`_)

Bugfixes
--------
- Fix a bug in the scrape for ``inet:ipv4`` where IP addresses were found
when there was leading or trailing numbers around the IP addresses.
(`3234 <https://github.com/vertexproject/synapse/pull/3234>`_)
- Fix a bug where ``$lib.model.ext.delForm()`` did not check for extended
property definitions before deletion. Extended properties on a custom form
must be deleted prior to deleting the form.
(`3223 <https://github.com/vertexproject/synapse/pull/3223>`_)
- Always remove the ``mirror`` configuration option from ``cell.yaml`` file
when provisioning a service via Aha. The previous behavior prevented the
correct restoration of a service from a backup which was previously
provisioned as a mirror and is being restored as a leader.
(`3240 <https://github.com/vertexproject/synapse/pull/3240>`_)
- Add additional type checking when adding extended model forms and properties
to the Cortex. Previously invalid types could raise an ``AttributeError``.
(`3243 <https://github.com/vertexproject/synapse/pull/3243>`_)

Improved Documentation
----------------------
- Update the Storm lift reference to add an example of lifting nodes by the
universal ``.created`` property.
(`3245 <https://github.com/vertexproject/synapse/pull/3245>`_)

2.141.0

=====================

Model Changes
-------------
- Update to the ``it`` and ``lang`` models.
(`3219 <https://github.com/vertexproject/synapse/pull/3219>`_)
- See :ref:`userguide_model_v2_141_0` for more detailed model changes.

Features and Enhancements
-------------------------
- Update ``$lib.infosec.cvss.vectToScore()`` to include a normalized
CVSS vector in the output.
(`3211 <https://github.com/vertexproject/synapse/pull/3211>`_)
- Optimize the addition and removal of lightweight edges when operating
on N1 edges in Storm.
(`3214 <https://github.com/vertexproject/synapse/pull/3214>`_)
- Added ``$lib.gen.langByCode``.
(`3219 <https://github.com/vertexproject/synapse/pull/3219>`_)

Bugfixes
--------
- Fix bug with regular expression comparisons for some types.
(`3213 <https://github.com/vertexproject/synapse/pull/3213>`_)
- Fix a ``TypeError`` being raised when passing a heavy Number object to
``$lib.math.number()``.
(`3215 <https://github.com/vertexproject/synapse/pull/3215>`_)
- Fix an issue with the Cell backup space checks. They now properly calculate
the amount of free space when the Cell backup directory is configured
on a separate volume from the Cell storage directory.
(`3216 <https://github.com/vertexproject/synapse/pull/3216>`_)
- Prevent the ``yield`` operator from directly emitting nodes into the Storm
pipeline if those node objects came from a different view. Nodes previously
lifted in this manner must be lifted by calling the ``iden()`` function on
the object to ensure the node being lifted into the pipeline reflects the
current view.
(`3218 <https://github.com/vertexproject/synapse/pull/3218>`_)
- Always remove the ``mirror`` configuration option from ``cell.mods.yaml``
when provisioning a service via Aha. The previous behavior prevented the
correct restoration of a service from a backup which had been changed from
being a leader to being a mirror.
(`3220 <https://github.com/vertexproject/synapse/pull/3220>`_)

2.140.1

=====================

Bugfixes
--------
- Fix a typo which prevented the Synapse package for ``v2.140.0`` from being
published on PyPI.
(`3212 <https://github.com/vertexproject/synapse/pull/3212>`_)

2.140.0

=====================

Announcement
------------

Synapse now only supports Python 3.11+.

Model Changes
-------------
- Update to the ``inet``, ``file``, and ``ou`` models.
(`3192 <https://github.com/vertexproject/synapse/pull/3192>`_)
(`3202 <https://github.com/vertexproject/synapse/pull/3202>`_)
(`3207 <https://github.com/vertexproject/synapse/pull/3207>`_)
- See :ref:`userguide_model_v2_140_0` for more detailed model changes.

Features and Enhancements
-------------------------
- Synapse now only supports Python 3.11+. The library will now fail to import
on earlier Python interpeters, and the published modules on PyPI will no
longer install on Python versions < 3.11.
(`3156 <https://github.com/vertexproject/synapse/pull/3156>`_)
- Replace ``setup.py`` with a ``pyproject.toml`` file.
(`3156 <https://github.com/vertexproject/synapse/pull/3156>`_)
(`3195 <https://github.com/vertexproject/synapse/pull/3195>`_)
- Usages of ``hashlib.md5()`` and ``hashlib.sha1()`` have been updated to add
the ``usedforsecurity=False`` argument.
(`3163 <https://github.com/vertexproject/synapse/pull/3163>`_)
- The Storm ``diff`` command is now marked as safe for ``readonly`` execution.
(`3207 <https://github.com/vertexproject/synapse/pull/3207>`_)
- Add a ``svc:set`` event to the Behold API message stream. This event is
fired when a Cortex connects to a Storm Service.
(`3205 <https://github.com/vertexproject/synapse/pull/3205>`_)

Bugfixes
--------
- Catch ``ZeroDivisionError`` and ``decimal.InvalidOperation`` errors in Storm
expressions and raise a ``StormRuntimeError``.
(`3203 <https://github.com/vertexproject/synapse/pull/3203>`_)
- Fix a bug where ``synapse.lib.platforms.linux.getTotalMemory()`` did not
return the correct value in a process running in cgroupsv1 without a
maximum memory limit set.
(`3198 <https://github.com/vertexproject/synapse/pull/3198>`_)
- Fix a bug where a Cron job could be created with an invalid Storm query.
Cron jobs now have their queries parsed as part of creation to ensure that
they are valid Storm. ``$lib.cron`` APIs now accept heavy Storm query
objects as query inputs.
(`3201 <https://github.com/vertexproject/synapse/pull/3201>`_)
(`3207 <https://github.com/vertexproject/synapse/pull/3207>`_)
- Field data sent via Storm ``$lib.inet.http`` APIs that uses a multipart
upload without a valid ``name`` field now raises a ``BadArg`` error.
Previously this would result in a Python ``TypeError``.
(`3199 <https://github.com/vertexproject/synapse/pull/3199>`_)
(`3206 <https://github.com/vertexproject/synapse/pull/3206>`_)

Deprecations
------------
- Remove the deprecated ``synapse.common.lockfile()`` function.
(`3191 <https://github.com/vertexproject/synapse/issue/3191>`_)

Page 10 of 57

Links

Releases

Has known vulnerabilities

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.