3.5.0 by regulartim · Pull Request #1326 · GreedyBear-Project/GreedyBear

regulartim · 2026-05-11T08:10:41Z

Checklist for creating a new release

Change version number in pyproject.toml and run uv lock
Verify CI Tests
Verify that the PR is named with a correct version number like x.x.x
Merge the PR to the main branch. The release will be done automatically by the CI

Note: Only use "Merge and commit" as the merge strategy and not "Squash and merge". Using "Squash and merge" makes history between branches misaligned.

…oses #1234 (#1258) Signed-off-by: Drona Raj Gyawali <dronarajgyawali@gmail.com>

* Add rule set * Fix import

* Add ruel set * Fix violations

…1280 (#1288) * Add rule set * Add rule set * Add rule set * Add ruff rule FA

* Install gb-ui library * Replace imports * Update frontend README

* Add rule set * Fix violations

* Add ruff rule * Fix violations * Exclude SIM108 rule

* Add rule and exception for G004 * Reorder ignores * Fix violations

* Add rule * Fix violations

#1289) * Enhancement: optimization in Cowrie _get_sessions #1260 - Reduced Time Complexity from O(N*M) to O(M) * chore: simplify src_ip extraction in _get_scanners to fix PR review * chore: remove redundant src_ip check per reviewer feedback

) * Fix statistics source handling for proxy and IPv6 * Add merge migration for conflicting greedybear 0050 leaves * Make statistics source migration sequential after 0050 * Set 0051 statistics migration dependency to 0050_attackeractivitybucket * Address moderator feedback: raise exception instead of returning empty string - Add UnableToExtractSourceIPError custom exception - Modify get_request_source_ip() to raise exception with logging when no valid IP found - Update all callers (utils.py, enrichment.py, command_sequence.py, cowrie_session.py) to handle exception - Update test to expect exception behavior instead of empty string - Statistics recording is now skipped when source IP cannot be extracted * Fix formatting: add blank line after docstring * Fix linter errors: remove unnecessary pass and sort imports * Fix import order in command_sequence.py to match original

* add database index for attacker_country_code * generate migration for attacker_country_code index * normalize attacker_country_code to uppercase on write * use exact lookup with upper() for country_code query * fix migration chain after merging develop

* Add rule * Fix violations * Add resolve() to get absolute path

* Add rule * Fix violations

… (#1302)

* add callback for logout error * fix logout test to handle error * handle logout error by catching promise rejection

…1304) * add union by rank to unionfind implementation * add test for unequal union by rank

* Add rule and exceptions * Trigger CI

…1280

* Add rule and exception * Fix violations

Bumps [ruff](https://github.com/astral-sh/ruff) from 0.15.11 to 0.15.12. - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.15.11...0.15.12) --- updated-dependencies: - dependency-name: ruff dependency-version: 0.15.12 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump dependencies * Fix incompatible code * Fix map not showing with https * Fix tests * Fix CI * Fix CI even more * Add try-catch block * Update npm dependencies * Fix test

…1319) Bumps [stylelint](https://github.com/stylelint/stylelint) from 17.10.0 to 17.11.0. - [Release notes](https://github.com/stylelint/stylelint/releases) - [Changelog](https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md) - [Commits](stylelint/stylelint@17.10.0...17.11.0) --- updated-dependencies: - dependency-name: stylelint dependency-version: 17.11.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [gunicorn](https://github.com/benoitc/gunicorn) from 25.3.0 to 26.0.0. - [Release notes](https://github.com/benoitc/gunicorn/releases) - [Commits](benoitc/gunicorn@25.3.0...26.0.0) --- updated-dependencies: - dependency-name: gunicorn dependency-version: 26.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [django-q2](https://github.com/GDay/django-q2) from 1.9.0 to 1.10.0. - [Release notes](https://github.com/GDay/django-q2/releases) - [Changelog](https://github.com/django-q2/django-q2/blob/master/CHANGELOG.md) - [Commits](django-q2/django-q2@v1.9.0...v1.10.0) --- updated-dependencies: - dependency-name: django-q2 dependency-version: 1.10.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…h 2 updates (#1324) Bumps the npm_and_yarn group with 2 updates in the /.github/configurations/node_linters/stylelint directory: [fast-uri](https://github.com/fastify/fast-uri) and [postcss](https://github.com/postcss/postcss). Bumps the npm_and_yarn group with 1 update in the /frontend directory: [fast-uri](https://github.com/fastify/fast-uri). Updates `fast-uri` from 3.1.0 to 3.1.2 - [Release notes](https://github.com/fastify/fast-uri/releases) - [Commits](fastify/fast-uri@v3.1.0...v3.1.2) Updates `postcss` from 8.5.9 to 8.5.14 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.9...8.5.14) Updates `fast-uri` from 3.1.0 to 3.1.2 - [Release notes](https://github.com/fastify/fast-uri/releases) - [Commits](fastify/fast-uri@v3.1.0...v3.1.2) --- updated-dependencies: - dependency-name: fast-uri dependency-version: 3.1.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: postcss dependency-version: 8.5.14 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fast-uri dependency-version: 3.1.2 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> (cherry picked from commit 5a3d8cc)

* Set HTTP_X_FORWARDED_FOR in nginx configs * Remove use of REMOTE_ADDR * Adapt tests

* Add env variable to compose file to signal https * Depend security settings on https * Adapt tests * Add bug specific test cases

* gbctl: add backup retention and fix help text * gbctl: harden backup retention

* test: add unit tests for API access token management and the sessions page component * test: add test cases for expired session rendering in SessionList and APIAccess error handling * test: format APIaccess test error object for improved readability * fix: update localStorage condition to handle undefined globalThis property in vitest setup * fix: replace userEvent with fireEvent in APIAccess tests to resolve timer-related hang issues * style: reformat import statement for readability in APIaccess test file * fix: correct condition for mocking localStorage in vitest setup

Bumps [pandas](https://github.com/pandas-dev/pandas) from 3.0.2 to 3.0.3. - [Release notes](https://github.com/pandas-dev/pandas/releases) - [Commits](pandas-dev/pandas@v3.0.2...v3.0.3) --- updated-dependencies: - dependency-name: pandas dependency-version: 3.0.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [requests](https://github.com/psf/requests) from 2.33.1 to 2.34.0. - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v2.33.1...v2.34.0) --- updated-dependencies: - dependency-name: requests dependency-version: 2.34.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [coverage](https://github.com/coveragepy/coveragepy) from 7.13.5 to 7.14.0. - [Release notes](https://github.com/coveragepy/coveragepy/releases) - [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst) - [Commits](coveragepy/coveragepy@7.13.5...7.14.0) --- updated-dependencies: - dependency-name: coverage dependency-version: 7.14.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* build(deps): bump elasticsearch from 9.3.0 to 9.4.0 Bumps [elasticsearch](https://github.com/elastic/elasticsearch-py) from 9.3.0 to 9.4.0. - [Release notes](https://github.com/elastic/elasticsearch-py/releases) - [Commits](elastic/elasticsearch-py@v9.3.0...v9.4.0) --- updated-dependencies: - dependency-name: elasticsearch dependency-version: 9.4.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * Add comment --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: tim <46972822+regulartim@users.noreply.github.com>

* migrate eslint config and bump to v9 * import eslint plugins in config * removing unused imports and compatibility layer * remove eslintrc as dev dependency * align CI to use eslint v9 * centralize ESLint configuration and update project dependencies. * typo in comment. * remove legacy ESLint configuration and update project linting paths * remove stale lint configs

Bumps [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) from 4.1.5 to 4.1.6. - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.6/packages/coverage-v8) --- updated-dependencies: - dependency-name: "@vitest/coverage-v8" dependency-version: 4.1.6 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) from 4.1.5 to 4.1.6. - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.6/packages/vitest) --- updated-dependencies: - dependency-name: vitest dependency-version: 4.1.6 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…al usage . Closes #1294 (#1295) * added credential_count Signed-off-by: Drona Raj Gyawali <dronarajgyawali@gmail.com> * endpoint only for advanc. feed Signed-off-by: Drona Raj Gyawali <dronarajgyawali@gmail.com> * added edgecases --------- Signed-off-by: Drona Raj Gyawali <dronarajgyawali@gmail.com>

regulartim and others added 30 commits April 23, 2026 07:42

Add comment to legacy API endpoint

8b470b8

feat: add retention policy for Statistics table.Closes #1261 (#1281)

8e35f02

Add credential reuse detection cronjob for IOC behavioral tagging. Cl…

29c3376

…oses #1234 (#1258) Signed-off-by: Drona Raj Gyawali <dronarajgyawali@gmail.com>

Add Tag field to IOC model admin

133a6c1

Add Ruff rule sets A to pyproject.toml. Progresses #1280 (#1286)

55a2632

* Add rule set * Fix import

Add Ruff rule sets FURB to pyproject.toml. Progresses #1280 (#1287)

5fd141d

* Add ruel set * Fix violations

Add Ruff rule sets FA, FLY, NPY, ISC to pyproject.toml. Progresses #…

4cc300c

…1280 (#1288) * Add rule set * Add rule set * Add rule set * Add ruff rule FA

Add Ruff rule set PD to pyproject.toml. Progresses #1280

70e41ec

Use gb-ui frontend library. Progresses #801 (#1284)

cdf371b

* Install gb-ui library * Replace imports * Update frontend README

Add Ruff rule set PERF to pyproject.toml. Progresses #1280 (#1290)

8129599

* Add rule set * Fix violations

Add Ruff rule set SIM to pyproject.toml. Progresses #1280 (#1291)

75b126e

* Add ruff rule * Fix violations * Exclude SIM108 rule

Add Ruff rule set G to pyproject.toml. Progresses #1280 (#1292)

7abea73

* Add rule and exception for G004 * Reorder ignores * Fix violations

Add Ruff rule set PIE to pyproject.toml. Progresses #1280 (#1293)

f638104

* Add rule * Fix violations

Add Ruff rule set PTH to pyproject.toml. Progresses #1280 (#1298)

bedf686

* Add rule * Fix violations * Add resolve() to get absolute path

Add Ruff rule set RET to pyproject.toml. Progresses #1280 (#1300)

38be1ed

* Add rule * Fix violations

Fix unnecessary re-renders by moving HOC outside AppMain. Progesses #71…

a817f27

… (#1302)

Fix logout callback. Closes #1282 (#1303)

4fab90a

* add callback for logout error * fix logout test to handle error * handle logout error by catching promise rejection

add union by rank to union find implementation in LSH. Closes #1285 (#…

aef2040

…1304) * add union by rank to unionfind implementation * add test for unequal union by rank

Add Ruff rule set S to pyproject.toml. Progresses #1280 (#1306)

1f9b296

* Add rule and exceptions * Trigger CI

Add Ruff rule sets SLOT, TD and TID to pyproject.toml. Progresses #…

654f587

…1280

Add Ruff rule set RUF to pyproject.toml. Progresses #1280 (#1307)

582c863

* Add rule and exception * Fix violations

added the cleanup in emailVerfication (#1308)

6d29193

Upgrade to React version 19. Closes #801 (#1301)

1436ced

* Bump dependencies * Fix incompatible code * Fix map not showing with https * Fix tests * Fix CI * Fix CI even more * Add try-catch block * Update npm dependencies * Fix test

Adjust column widths on Feeds page

312de34

dependabot Bot and others added 16 commits May 7, 2026 10:40

Bump 3.5.0

501a2e0

Update package-lock.json

dd1a5f2

Forward X-Forwarded-For header to uWSGI. Closes #1318 (#1327)

90e8aa9

* Set HTTP_X_FORWARDED_FOR in nginx configs * Remove use of REMOTE_ADDR * Adapt tests

Fix admin CSRF 403 on HTTP deployments. Closes #1328 (#1329)

6f9c3d5

* Add env variable to compose file to signal https * Depend security settings on https * Adapt tests * Add bug specific test cases

gbctl: add backup retention and fix help text. Closes #1311 (#1323)

34d4f39

* gbctl: add backup retention and fix help text * gbctl: harden backup retention

regulartim marked this pull request as ready for review May 19, 2026 08:00

regulartim requested a review from mlodic May 19, 2026 08:00

mlodic approved these changes May 19, 2026

View reviewed changes

regulartim merged commit 1589c88 into main May 19, 2026
7 checks passed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

3.5.0#1326

3.5.0#1326
regulartim merged 46 commits into
mainfrom
develop

regulartim commented May 11, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

11 participants

Uh oh!

Conversation

regulartim commented May 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Checklist for creating a new release

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

11 participants

regulartim commented May 11, 2026 •

edited

Loading