Migrate GitHub runners to AWS runners by yenienserrano · Pull Request #1372 · wazuh/wazuh-dashboard

yenienserrano · 2026-06-18T13:07:09Z

Description

The workflow runners are being updated

Test

Build deb wazuh-dashboard on arm64
Build rpm wazuh-dashboard on aarch64
Build deb wazuh-dashboard on amd64
Build rpm wazuh-dashboard on x86_64

Check List

All tests pass
- yarn test:jest
- yarn test:jest_integration
New functionality includes testing.
New functionality has been documented.
Update CHANGELOG.md
Commits are signed per the DCO using --signoff

github-actions · 2026-06-18T13:55:57Z

🔗 Workflow run · commit 15600d1a9c7206f04c89aa50c58caf09a8b1a921

❌ 22 Jest Test Failure(s)

📄 `junit-jest-group2-Linux/TEST-Jest Tests.xml`

❌ OpenSearchDashboardsRequest headers property exposes authorization header if secured = false (0.001s)

Jest Tests.src/core/server/http/router

TypeError: undefined is not iterable (cannot read property Symbol(Symbol.iterator))
    at Object.<anonymous> (/home/runner/work/wazuh-dashboard/wazuh-dashboard/src/core/server/http/http_service.test.ts:150:10)

❌ logs error if already set up (0.003s)

Jest Tests.src/core/server/http

Error: expect(received).toMatchSnapshot(properties)

Snapshot name: `RenderingService setup() render() renders "core" page 1`

- Snapshot  - 1
+ Received  + 9

@@ -24,10 +24,13 @@
        "branch": Any<String>,
        "buildNum": Any<Number>,
  … (26 more lines)

❌ RenderingService setup() render() renders "core" page for blank basepath (0.017s)

Jest Tests.src/core/server/rendering

Error: expect(received).toMatchSnapshot(properties)

Snapshot name: `RenderingService setup() render() renders "core" page for blank basepath 1`

- Snapshot  - 1
+ Received  + 9

@@ -24,10 +24,13 @@
        "branch": Any<String>,
        "buildNum": Any<Number>,
  … (26 more lines)

❌ RenderingService setup() render() renders "core" page driven by defaults (0.010s)

Jest Tests.src/core/server/rendering

Error: expect(received).toMatchSnapshot(properties)

Snapshot name: `RenderingService setup() render() renders "core" page driven by defaults 1`

- Snapshot  - 1
+ Received  + 9

@@ -24,10 +24,13 @@
        "branch": Any<String>,
        "buildNum": Any<Number>,
  … (26 more lines)

❌ RenderingService setup() render() renders "core" page driven by settings (0.010s)

Jest Tests.src/core/server/rendering

Error: expect(received).toMatchSnapshot(properties)

Snapshot name: `RenderingService setup() render() renders "core" page driven by settings 1`

- Snapshot  - 1
+ Received  + 9

@@ -24,10 +24,13 @@
        "branch": Any<String>,
        "buildNum": Any<Number>,
  … (26 more lines)

❌ RenderingService setup() render() renders "core" page with no defaults or overrides (0.011s)

Jest Tests.src/core/server/rendering

Error: expect(received).toMatchSnapshot(properties)

Snapshot name: `RenderingService setup() render() renders "core" page with no defaults or overrides 1`

- Snapshot  - 1
+ Received  + 9

@@ -24,10 +24,13 @@
        "branch": Any<String>,
        "buildNum": Any<Number>,
  … (26 more lines)

❌ RenderingService setup() render() renders "core" with excluded user settings (0.011s)

Jest Tests.src/core/server/rendering

Error: expect(received).toMatchSnapshot(properties)

Snapshot name: `RenderingService setup() render() renders "core" with excluded user settings 1`

- Snapshot  - 1
+ Received  + 9

@@ -24,10 +24,13 @@
        "branch": Any<String>,
        "buildNum": Any<Number>,
  … (26 more lines)

❌ RenderingService setup() render() renders "core" from legacy request (0.010s)

Jest Tests.src/core/server/rendering

Error: expect(received).toMatchSnapshot(properties)

Snapshot name: `RenderingService setup() render() renders "core" from legacy request 1`

- Snapshot  - 1
+ Received  + 9

@@ -24,10 +24,13 @@
        "branch": Any<String>,
        "buildNum": Any<Number>,
  … (26 more lines)

❌ ApmSystem setup does not init apm if no config provided (0.001s)

Jest Tests.src/core/public

Error: expect(received).toMatchSnapshot(hint)

Snapshot name: `correctly creates default environment in dev mode when isDevClusterMaster (deprecated) is true: env properties 1`

- Snapshot  - 0
+ Received  + 3

@@ -28,10 +28,13 @@
      "branch": "some-branch",
      "buildNum": 9007199254740991,
  … (17 more lines)

❌ correctly creates default environment in dev mode when isDevClusterManager is true (0.002s)

Jest Tests.packages/osd-config/src

Error: expect(received).toMatchSnapshot(hint)

Snapshot name: `correctly creates default environment in dev mode when isDevClusterManager is true: env properties 1`

- Snapshot  - 0
+ Received  + 3

@@ -28,10 +28,13 @@
      "branch": "some-branch",
      "buildNum": 9007199254740991,
  … (17 more lines)

❌ correctly creates default environment in dev mode when isDevClusterManager and isDevClusterMaster both are true (0.002s)

Jest Tests.packages/osd-config/src

Error: expect(received).toMatchSnapshot(hint)

Snapshot name: `correctly creates default environment in dev mode when isDevClusterManager and isDevClusterMaster both are true: env properties 1`

- Snapshot  - 0
+ Received  + 3

@@ -28,10 +28,13 @@
      "branch": "some-branch",
      "buildNum": 9007199254740991,
  … (17 more lines)

❌ correctly creates default environment in prod distributable mode. (0.003s)

Jest Tests.packages/osd-config/src

Error: expect(received).toMatchSnapshot(hint)

Snapshot name: `correctly creates default environment in prod distributable mode.: env properties 1`

- Snapshot  - 0
+ Received  + 3

@@ -28,10 +28,13 @@
      "branch": "feature-v1",
      "buildNum": 100,
  … (17 more lines)

❌ correctly creates default environment in prod non-distributable mode. (0.002s)

Jest Tests.packages/osd-config/src

Error: expect(received).toMatchSnapshot(hint)

Snapshot name: `correctly creates default environment in prod non-distributable mode.: env properties 1`

- Snapshot  - 0
+ Received  + 3

@@ -28,10 +28,13 @@
      "branch": "feature-v1",
      "buildNum": 9007199254740991,
  … (17 more lines)

❌ correctly creates default environment if --env.name is supplied. (0.003s)

Jest Tests.packages/osd-config/src

Error: expect(received).toMatchSnapshot(hint)

Snapshot name: `correctly creates default environment if \`--env.name\` is supplied.: dev env properties 1`

- Snapshot  - 0
+ Received  + 3

@@ -29,10 +29,13 @@
      "branch": "feature-v1",
      "buildNum": 9007199254740991,
  … (17 more lines)

Error: expect(received).toMatchSnapshot(hint)

Snapshot name: `correctly creates default environment if \`--env.name\` is supplied.: prod env properties 1`

- Snapshot  - 0
+ Received  + 3

@@ -29,10 +29,13 @@
      "branch": "feature-v1",
      "buildNum": 9007199254740991,
  … (17 more lines)

❌ correctly creates environment with constructor. (0.001s)

Jest Tests.packages/osd-config/src

Error: expect(received).toMatchSnapshot(hint)

Snapshot name: `correctly creates environment with constructor.: env properties 1`

- Snapshot  - 0
+ Received  + 3

@@ -28,10 +28,13 @@
      "branch": "feature-v1",
      "buildNum": 100,
  … (17 more lines)

❌ CelestialCard Group functionality renders group toggle button when isGroup is true (0.023s)

Jest Tests.packages/osd-apm-topology/src/components/celestial_card

Error: expect(received).toMatchSnapshot()

Snapshot name: `Header help menu hides survey link 1`

- Snapshot  - 1
+ Received  + 0

@@ -1853,11 +1853,10 @@
                            </span>
                          </a>
  … (15 more lines)

📄 `junit-jest-integration-Linux/TEST-Jest Integration Tests.xml`

❌ copyAll() applies select globs if specified, ignores dot files (0.025s)

Jest Integration Tests.src/dev/build/lib/integration_tests

Error: expect(received).toMatchInlineSnapshot(snapshot)

Snapshot name: `builds a generated plugin into a viable archive 2`

- Snapshot  - 0
+ Received  + 3

@@ -3,8 +3,11 @@
   │ info initialized, 0 bundles cached
   │ info starting worker [1 bundle]
  … (11 more lines)

❌ builds a non-semver generated plugin into a viable archive (7.214s)

Jest Integration Tests.packages/osd-plugin-helpers/src/integration_tests

Error: expect(received).toMatchInlineSnapshot(snapshot)

Snapshot name: `builds a non-semver generated plugin into a viable archive 2`

- Snapshot  - 0
+ Received  + 3

@@ -3,8 +3,11 @@
   │ info initialized, 0 bundles cached
   │ info starting worker [1 bundle]
  … (11 more lines)

📄 `junit-jest-integration-Windows/TEST-Jest Integration Tests.xml`

❌ copyAll() applies select globs if specified, ignores dot files (0.032s)

Jest Integration Tests.src\dev\build\lib\integration_tests

Error: expect(received).toMatchInlineSnapshot(snapshot)

Snapshot name: `builds a generated plugin into a viable archive 2`

- Snapshot  - 0
+ Received  + 3

@@ -3,8 +3,11 @@
   │ info initialized, 0 bundles cached
   │ info starting worker [1 bundle]
  … (11 more lines)

❌ builds a non-semver generated plugin into a viable archive (16.660s)

Jest Integration Tests.packages\osd-plugin-helpers\src\integration_tests

Error: expect(received).toMatchInlineSnapshot(snapshot)

Snapshot name: `builds a non-semver generated plugin into a viable archive 2`

- Snapshot  - 0
+ Received  + 3

@@ -3,8 +3,11 @@
   │ info initialized, 0 bundles cached
   │ info starting worker [1 bundle]
  … (11 more lines)

❌ applies filter function specified (0.012s)

Jest Integration Tests.src\dev\build\lib\integration_tests

TypeError: Cannot read properties of undefined (reading 'coreStart')
    at Object.<anonymous> (D:\a\wazuh-dashboard\wazuh-dashboard\src\plugins\workspace\server\saved_objects\integration_tests\workspace_ui_settings_wrapper.test.ts:64:51)
    at Object.asyncJestTest (D:\a\wazuh-dashboard\wazuh-dashboard\node_modules\jest-jasmine2\build\jasmineAsyncInstall.js:173:37)
    at D:\a\wazuh-dashboard\wazuh-dashboard\node_modules\jest-jasmine2\build\queueRunner.js:89:12
    at new Promise (<anonymous>)
    at mapper (D:\a\wazuh-dashboard\wazuh-dashboard\node_modules\jest-jasmine2\build\queueRunner.js:72:19)
    at D:\a\wazuh-dashboard\wazuh-dashboard\node_modules\jest-jasmine2\build\queueRunner.js:119:41

❌ workspace ui settings saved object client wrapper should get and update global ui settings when currently not in a workspace [Attempt #2] (0.001s)

Jest Integration Tests.src\plugins\workspace\server\saved_objects\integration_tests

TypeError: Cannot read properties of undefined (reading 'get')
    at Object.<anonymous> (D:\a\wazuh-dashboard\wazuh-dashboard\src\plugins\workspace\server\saved_objects\integration_tests\workspace_ui_settings_wrapper.test.ts:106:41)
    at Object.asyncJestTest (D:\a\wazuh-dashboard\wazuh-dashboard\node_modules\jest-jasmine2\build\jasmineAsyncInstall.js:173:37)
    at D:\a\wazuh-dashboard\wazuh-dashboard\node_modules\jest-jasmine2\build\queueRunner.js:89:12
    at new Promise (<anonymous>)
    at mapper (D:\a\wazuh-dashboard\wazuh-dashboard\node_modules\jest-jasmine2\build\queueRunner.js:72:19)
    at D:\a\wazuh-dashboard\wazuh-dashboard\node_modules\jest-jasmine2\build\queueRunner.js:119:41

22 failure(s) across 3 suite(s). Full XML reports are in the junit-jest-* artifacts.

…n and create non-root build user in plugin build workflow

…deBuild Move the runs-on values of the package-building workflows from the GitHub-hosted ubuntu-latest runner to AWS CodeBuild ephemeral runners, following issue wazuh/internal-devel-requests#5246 and mirroring wazuh/wazuh-dashboard#1372. - 4_builderpackage_plugins.yml (test-packages): Form A (amd) - 4_builderprecompiled_base-dev-environment.yml (deploy_and_run_command): Form A (amd) These workflows are AMD-only on 4.10.5 (no architecture input/matrix), so both use the fixed AMD CodeBuild runner label. Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com>

…s to AWS CodeBuild Move the runs-on values of the package-building and bumper workflows off the self-hosted/GitHub-hosted runners and onto AWS CodeBuild ephemeral runners, following issue wazuh/internal-devel-requests#5246 and mirroring wazuh/wazuh-dashboard#1372. - 4_builderpackage_plugins.yml (test-packages): wz-linux-amd64 -> Form A (amd) - 4_builderprecompiled_base-dev-environment.yml (deploy_and_run_command): wz-linux-amd64 -> Form A (amd) - 4_bumper_repository.yml (bump): ubuntu-22.04 -> Form A (amd) These workflows are AMD-only on 4.14.6 (no architecture input/matrix), so all use the fixed AMD CodeBuild runner label. Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com>

…deBuild Move the runs-on values of the package-building workflows off the self-hosted wz-linux-amd64 runner and onto AWS CodeBuild ephemeral runners, following issue wazuh/internal-devel-requests#5246 and mirroring wazuh/wazuh-dashboard#1372. - 4_builderpackage_plugins.yml (test-packages): wz-linux-amd64 -> Form A (amd) - 4_builderprecompiled_base-dev-environment.yml (deploy_and_run_command): wz-linux-amd64 -> Form A (amd) These workflows are AMD-only on 4.14.6 (no architecture input/matrix), so both use the fixed AMD CodeBuild runner label. Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com>

…non-root Align with #1372 to avoid runtime errors on the migrated CodeBuild runners: - Conditional `runs-on` expressions cannot nest `${{ }}` inside a string literal (the inner expression is not interpolated, so the runner label would contain the literal text and never match a runner). Replace them with `format('...-{0}-{1}', github.run_id, github.run_attempt)`. - CodeBuild runners execute as root and the OpenSearch Dashboards build tooling misbehaves as root. In 4_builderpackage_dashboard_core.yml run `yarn osd bootstrap` and `yarn build-platform` as a non-root `builduser`, mirroring the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com>

The "Rename artifact" step used an absolute GitHub-hosted path (/home/runner/work/wazuh-dashboard/wazuh-dashboard/artifacts/target/...), which does not exist on the AWS CodeBuild runners and makes the `mv` fail. Since the job already sets `working-directory: ./artifacts`, use the relative `target/...` path so it works on any runner. Mirrors the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com>

… consistency

…kflow

… permissions

… CodeBuild

…tecture

…anagement

…eamline upgrade checks

…ripts

…ssh-client

…WS CodeBuild runners

… CodeBuild

…1374) * Migrate dashboard package-building workflow runners to AWS CodeBuild Replace the self-hosted `wz-linux-amd64` / `wz-linux-arm64` runners in the 4.x package build workflows with AWS CodeBuild runners (codebuild-github-actions-codebuild-runner-dashboard-<arch>-<run_id>-<run_attempt>), backporting the runner migration done in #1372. - 4_builderpackage_dashboard.yml: setup-variables and validate-job to the amd runner; build-package, test-package and upload-package to the arch-conditional runner. - 4_builderpackage_dashboard_core.yml: build job to the arch-conditional runner (inputs.ARCHITECTURE). - build_base.yml / build_wazuh_dashboard_with_plugins.yml: route arm builds to CodeBuild, keep amd on GitHub-hosted runners (mirrors #1372). Closes opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use format() for conditional CodeBuild runners and run core build as non-root Align with #1372 to avoid runtime errors on the migrated CodeBuild runners: - Conditional `runs-on` expressions cannot nest `${{ }}` inside a string literal (the inner expression is not interpolated, so the runner label would contain the literal text and never match a runner). Replace them with `format('...-{0}-{1}', github.run_id, github.run_attempt)`. - CodeBuild runners execute as root and the OpenSearch Dashboards build tooling misbehaves as root. In 4_builderpackage_dashboard_core.yml run `yarn osd bootstrap` and `yarn build-platform` as a non-root `builduser`, mirroring the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use relative path when renaming the core build artifact The "Rename artifact" step used an absolute GitHub-hosted path (/home/runner/work/wazuh-dashboard/wazuh-dashboard/artifacts/target/...), which does not exist on the AWS CodeBuild runners and makes the `mv` fail. Since the job already sets `working-directory: ./artifacts`, use the relative `target/...` path so it works on any runner. Mirrors the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use github.workspace instead of a shared CURRENT_DIR output for artifact paths * test° * Make package build/test work on AWS CodeBuild runners * Guard systemctl calls so DEB package tests run without systemd * Migrate DEB package tests to use systemd-enabled container and streamline installation scripts * Add workarounds for missing zip, pip3, and openssh-client on AWS CodeBuild ARM runners * Pin reusable workflow refs to 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com>

#8651) * Migrate dashboard plugins package-building workflow runners to AWS CodeBuild Move the runs-on values of the package-building workflows off the self-hosted wz-linux-amd64 runner and onto AWS CodeBuild ephemeral runners, following issue wazuh/internal-devel-requests#5246 and mirroring wazuh/wazuh-dashboard#1372. - 4_builderpackage_plugins.yml (test-packages): wz-linux-amd64 -> Form A (amd) - 4_builderprecompiled_base-dev-environment.yml (deploy_and_run_command): wz-linux-amd64 -> Form A (amd) These workflows are AMD-only on 4.14.6 (no architecture input/matrix), so both use the fixed AMD CodeBuild runner label. Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Pull OSD test image from ECR Public to avoid Docker Hub rate limits * Migrate remaining 4.x workflow runners to CodeBuild and log in to Docker Hub --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com>

asteriscos

The packages were built correctly. 🟢

…1373) * Migrate dashboard package-building workflow runners to AWS CodeBuild Replace the GitHub-hosted `ubuntu-latest` runners in the 4.x package build workflows with AWS CodeBuild runners (codebuild-github-actions-codebuild-runner-dashboard-<arch>-<run_id>-<run_attempt>), backporting the runner migration done in #1372. - 4_builderpackage_dashboard.yml: setup-variables and validate-job to the amd runner; build-and-test-package to the arch-conditional runner. - 4_builderpackage_dashboard_core.yml: build job to the arch-conditional runner (matrix.ARCHITECTURE). - build_base.yml / build_wazuh_dashboard_with_plugins.yml: route arm builds to CodeBuild, keep amd on GitHub-hosted runners (mirrors #1372). Closes opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Commit to test * Remove support for arm64 architecture in package build workflow * Remove arm64 runner configuration from dashboard build workflow * Refactor build workflow to create non-root user and streamline build process * Refactor dashboard build workflows to use github.workspace for artifact paths * Add Docker Hub credentials to build plugins job in workflow * Create non-root user for build and test steps in workflow * Add Docker Hub login step to avoid anonymous pull rate limits in workflow * Add Docker Hub login step to avoid pull rate limits in AWS CodeBuild workflow * Fix indentation for Docker Hub login step in AWS CodeBuild workflow * Refactor build workflow to create non-root user after Docker Hub login and copy credentials for authenticated image pulls * Revert commit to test --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com>

#8650) * Migrate dashboard plugins package-building workflow runners to AWS CodeBuild Move the runs-on values of the package-building workflows from the GitHub-hosted ubuntu-latest runner to AWS CodeBuild ephemeral runners, following issue wazuh/internal-devel-requests#5246 and mirroring wazuh/wazuh-dashboard#1372. - 4_builderpackage_plugins.yml (test-packages): Form A (amd) - 4_builderprecompiled_base-dev-environment.yml (deploy_and_run_command): Form A (amd) These workflows are AMD-only on 4.10.5 (no architecture input/matrix), so both use the fixed AMD CodeBuild runner label. Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Update artifact download steps and add Docker Hub login in the build workflow * Add required secrets for Docker Hub authentication in build workflow --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com>

* Migrate dashboard plugins package-building and bumper workflow runner… (#8651) * Migrate dashboard plugins package-building workflow runners to AWS CodeBuild Move the runs-on values of the package-building workflows off the self-hosted wz-linux-amd64 runner and onto AWS CodeBuild ephemeral runners, following issue wazuh/internal-devel-requests#5246 and mirroring wazuh/wazuh-dashboard#1372. - 4_builderpackage_plugins.yml (test-packages): wz-linux-amd64 -> Form A (amd) - 4_builderprecompiled_base-dev-environment.yml (deploy_and_run_command): wz-linux-amd64 -> Form A (amd) These workflows are AMD-only on 4.14.6 (no architecture input/matrix), so both use the fixed AMD CodeBuild runner label. Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Pull OSD test image from ECR Public to avoid Docker Hub rate limits * Migrate remaining 4.x workflow runners to CodeBuild and log in to Docker Hub --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Migrate GitHub runners to aws runners (#8660) fix: add missing secrets for Docker Hub authentication in build workflow * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#8672) chore(tag-reference): change tag reference for 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com>

* Migrate dashboard package-building workflow runners to AWS CodeBuild (#1374) * Migrate dashboard package-building workflow runners to AWS CodeBuild Replace the self-hosted `wz-linux-amd64` / `wz-linux-arm64` runners in the 4.x package build workflows with AWS CodeBuild runners (codebuild-github-actions-codebuild-runner-dashboard-<arch>-<run_id>-<run_attempt>), backporting the runner migration done in #1372. - 4_builderpackage_dashboard.yml: setup-variables and validate-job to the amd runner; build-package, test-package and upload-package to the arch-conditional runner. - 4_builderpackage_dashboard_core.yml: build job to the arch-conditional runner (inputs.ARCHITECTURE). - build_base.yml / build_wazuh_dashboard_with_plugins.yml: route arm builds to CodeBuild, keep amd on GitHub-hosted runners (mirrors #1372). Closes opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use format() for conditional CodeBuild runners and run core build as non-root Align with #1372 to avoid runtime errors on the migrated CodeBuild runners: - Conditional `runs-on` expressions cannot nest `${{ }}` inside a string literal (the inner expression is not interpolated, so the runner label would contain the literal text and never match a runner). Replace them with `format('...-{0}-{1}', github.run_id, github.run_attempt)`. - CodeBuild runners execute as root and the OpenSearch Dashboards build tooling misbehaves as root. In 4_builderpackage_dashboard_core.yml run `yarn osd bootstrap` and `yarn build-platform` as a non-root `builduser`, mirroring the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use relative path when renaming the core build artifact The "Rename artifact" step used an absolute GitHub-hosted path (/home/runner/work/wazuh-dashboard/wazuh-dashboard/artifacts/target/...), which does not exist on the AWS CodeBuild runners and makes the `mv` fail. Since the job already sets `working-directory: ./artifacts`, use the relative `target/...` path so it works on any runner. Mirrors the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use github.workspace instead of a shared CURRENT_DIR output for artifact paths * test° * Make package build/test work on AWS CodeBuild runners * Guard systemctl calls so DEB package tests run without systemd * Migrate DEB package tests to use systemd-enabled container and streamline installation scripts * Add workarounds for missing zip, pip3, and openssh-client on AWS CodeBuild ARM runners * Pin reusable workflow refs to 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Migrate GitHub runners to aws runners (#1380) * Add DockerHub secrets and create non-root build user in package build workflow * Commit to test * Add Docker Hub credentials for build user to pull authenticated images * Revert commit to test * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1388) chore(tag-reference): change tag reference for 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com>

* Migrate dashboard package-building workflow runners to AWS CodeBuild (#1374) * Migrate dashboard package-building workflow runners to AWS CodeBuild Replace the self-hosted `wz-linux-amd64` / `wz-linux-arm64` runners in the 4.x package build workflows with AWS CodeBuild runners (codebuild-github-actions-codebuild-runner-dashboard-<arch>-<run_id>-<run_attempt>), backporting the runner migration done in #1372. - 4_builderpackage_dashboard.yml: setup-variables and validate-job to the amd runner; build-package, test-package and upload-package to the arch-conditional runner. - 4_builderpackage_dashboard_core.yml: build job to the arch-conditional runner (inputs.ARCHITECTURE). - build_base.yml / build_wazuh_dashboard_with_plugins.yml: route arm builds to CodeBuild, keep amd on GitHub-hosted runners (mirrors #1372). Closes opensearch-project#5246 * Use format() for conditional CodeBuild runners and run core build as non-root Align with #1372 to avoid runtime errors on the migrated CodeBuild runners: - Conditional `runs-on` expressions cannot nest `${{ }}` inside a string literal (the inner expression is not interpolated, so the runner label would contain the literal text and never match a runner). Replace them with `format(...-{0}-{1}, github.run_id, github.run_attempt)`. - CodeBuild runners execute as root and the OpenSearch Dashboards build tooling misbehaves as root. In 4_builderpackage_dashboard_core.yml run `yarn osd bootstrap` and `yarn build-platform` as a non-root `builduser`, mirroring the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 * Use relative path when renaming the core build artifact The "Rename artifact" step used an absolute GitHub-hosted path (/home/runner/work/wazuh-dashboard/wazuh-dashboard/artifacts/target/...), which does not exist on the AWS CodeBuild runners and makes the `mv` fail. Since the job already sets `working-directory: ./artifacts`, use the relative `target/...` path so it works on any runner. Mirrors the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 * Use github.workspace instead of a shared CURRENT_DIR output for artifact paths * test° * Make package build/test work on AWS CodeBuild runners * Guard systemctl calls so DEB package tests run without systemd * Migrate DEB package tests to use systemd-enabled container and streamline installation scripts * Add workarounds for missing zip, pip3, and openssh-client on AWS CodeBuild ARM runners * Pin reusable workflow refs to 4.14.6 --------- * Migrate GitHub runners to aws runners (#1380) * Add DockerHub secrets and create non-root build user in package build workflow * Commit to test * Add Docker Hub credentials for build user to pull authenticated images * Revert commit to test * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1388) chore(tag-reference): change tag reference for 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com>

* feat: bump 5.0.0 * Migrate GitHub runners to AWS runners (#1372) * Migrate GitHub runners to AWS runners * Refactor runner naming format in workflow files for consistency * Update revision retrieval method in build workflow to use package.json * Add non-root build user and update bootstrap command for permissions * Refactor runner naming format in workflow files to use format function and create non-root build user in plugin build workflow * Update build commands to run as non-root user for improved security * Fix artifact renaming path in build workflow for consistency * Add installation of zip utility for packaging plugins * Refactor artifact paths in build workflow to use github.workspace for consistency * Install zip utility conditionally for arm64 architecture in build workflow * Add workarounds for AWS CodeBuild runners to handle missing tools and permissions * Add Docker Hub login step and conditional Docker daemon start for AWS CodeBuild * Improve Docker daemon startup process in build workflow for ARM architecture * Add Docker Hub login and start Docker daemon for AWS CodeBuild runners * Add workarounds for AWS CodeBuild runners to handle systemd service management * Refactor DEB package testing to use systemd-enabled container and streamline upgrade checks * Add workaround to install pip3 for AWS CodeBuild ARM runners * Add missing apt-get update before package installation in deb-test scripts * Add workaround for AWS CodeBuild ARM runners to install pip3 and openssh-client * Refactor GitHub Actions workflows to use formatted runner names for AWS CodeBuild runners * Refactor GitHub Actions workflows to use updated runner names for AWS CodeBuild * Improve errors formatting in check flyout (#1379) * feat: improve error formatting in check flyout and not ready yet callouts * chore(changelog): add entry --------- Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> * Remove references to plugins not installed (#1382) * chore: remove anomalyDetectionDashboard build references * chore: add changelog entry * Hide all visible references to the Sample Data App (#1390) * Remove references to the Sample Data App in getNoItemsMessage * Remove all references to the Sample Data App in getNoItemsMessage tests * Merge 4.14.6 into 4.14.7 (#1393) (#1394) * Migrate dashboard package-building workflow runners to AWS CodeBuild (#1374) * Migrate dashboard package-building workflow runners to AWS CodeBuild Replace the self-hosted `wz-linux-amd64` / `wz-linux-arm64` runners in the 4.x package build workflows with AWS CodeBuild runners (codebuild-github-actions-codebuild-runner-dashboard-<arch>-<run_id>-<run_attempt>), backporting the runner migration done in #1372. - 4_builderpackage_dashboard.yml: setup-variables and validate-job to the amd runner; build-package, test-package and upload-package to the arch-conditional runner. - 4_builderpackage_dashboard_core.yml: build job to the arch-conditional runner (inputs.ARCHITECTURE). - build_base.yml / build_wazuh_dashboard_with_plugins.yml: route arm builds to CodeBuild, keep amd on GitHub-hosted runners (mirrors #1372). Closes opensearch-project#5246 * Use format() for conditional CodeBuild runners and run core build as non-root Align with #1372 to avoid runtime errors on the migrated CodeBuild runners: - Conditional `runs-on` expressions cannot nest `${{ }}` inside a string literal (the inner expression is not interpolated, so the runner label would contain the literal text and never match a runner). Replace them with `format(...-{0}-{1}, github.run_id, github.run_attempt)`. - CodeBuild runners execute as root and the OpenSearch Dashboards build tooling misbehaves as root. In 4_builderpackage_dashboard_core.yml run `yarn osd bootstrap` and `yarn build-platform` as a non-root `builduser`, mirroring the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 * Use relative path when renaming the core build artifact The "Rename artifact" step used an absolute GitHub-hosted path (/home/runner/work/wazuh-dashboard/wazuh-dashboard/artifacts/target/...), which does not exist on the AWS CodeBuild runners and makes the `mv` fail. Since the job already sets `working-directory: ./artifacts`, use the relative `target/...` path so it works on any runner. Mirrors the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 * Use github.workspace instead of a shared CURRENT_DIR output for artifact paths * test° * Make package build/test work on AWS CodeBuild runners * Guard systemctl calls so DEB package tests run without systemd * Migrate DEB package tests to use systemd-enabled container and streamline installation scripts * Add workarounds for missing zip, pip3, and openssh-client on AWS CodeBuild ARM runners * Pin reusable workflow refs to 4.14.6 --------- * Migrate GitHub runners to aws runners (#1380) * Add DockerHub secrets and create non-root build user in package build workflow * Commit to test * Add Docker Hub credentials for build user to pull authenticated images * Revert commit to test * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1388) chore(tag-reference): change tag reference for 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Rodrigo López <37187963+rodrigofez@users.noreply.github.com> Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> Co-authored-by: Diego García <82405377+Ripdiegozz@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com>

* Adds changelog entries for versions 4.10.2–4.10.5 (#1312) * Refactor Allocator instance/composite names and add custom AWS tagging for better resource management 4x (#1284) * feat: refactor AWS instance creation with custom tags in build workflow * Refactor AWS instance creation to streamline custom tagging and improve resource management * feat: bump 4.14.6 * Revert "Bump 4.14.6 branch" * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1318) chore(tag-reference): change tag reference for 4.14.6 * Fixes changelog entry order in RPM spec (#1320) * Fixes changelog entry order in RPM spec * Updates workflow refs to v4.14.6-rc1 * Updates workflow refs 4.14.6 (#1321) * Migrate dashboard package-building workflow runners to AWS CodeBuild (#1374) * Migrate dashboard package-building workflow runners to AWS CodeBuild Replace the self-hosted `wz-linux-amd64` / `wz-linux-arm64` runners in the 4.x package build workflows with AWS CodeBuild runners (codebuild-github-actions-codebuild-runner-dashboard-<arch>-<run_id>-<run_attempt>), backporting the runner migration done in #1372. - 4_builderpackage_dashboard.yml: setup-variables and validate-job to the amd runner; build-package, test-package and upload-package to the arch-conditional runner. - 4_builderpackage_dashboard_core.yml: build job to the arch-conditional runner (inputs.ARCHITECTURE). - build_base.yml / build_wazuh_dashboard_with_plugins.yml: route arm builds to CodeBuild, keep amd on GitHub-hosted runners (mirrors #1372). Closes opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use format() for conditional CodeBuild runners and run core build as non-root Align with #1372 to avoid runtime errors on the migrated CodeBuild runners: - Conditional `runs-on` expressions cannot nest `${{ }}` inside a string literal (the inner expression is not interpolated, so the runner label would contain the literal text and never match a runner). Replace them with `format('...-{0}-{1}', github.run_id, github.run_attempt)`. - CodeBuild runners execute as root and the OpenSearch Dashboards build tooling misbehaves as root. In 4_builderpackage_dashboard_core.yml run `yarn osd bootstrap` and `yarn build-platform` as a non-root `builduser`, mirroring the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use relative path when renaming the core build artifact The "Rename artifact" step used an absolute GitHub-hosted path (/home/runner/work/wazuh-dashboard/wazuh-dashboard/artifacts/target/...), which does not exist on the AWS CodeBuild runners and makes the `mv` fail. Since the job already sets `working-directory: ./artifacts`, use the relative `target/...` path so it works on any runner. Mirrors the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use github.workspace instead of a shared CURRENT_DIR output for artifact paths * test° * Make package build/test work on AWS CodeBuild runners * Guard systemctl calls so DEB package tests run without systemd * Migrate DEB package tests to use systemd-enabled container and streamline installation scripts * Add workarounds for missing zip, pip3, and openssh-client on AWS CodeBuild ARM runners * Pin reusable workflow refs to 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Migrate GitHub runners to aws runners (#1380) * Add DockerHub secrets and create non-root build user in package build workflow * Commit to test * Add Docker Hub credentials for build user to pull authenticated images * Revert commit to test * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1388) chore(tag-reference): change tag reference for 4.14.6 * feat: migrate artifact handling to S3 in dashboard workflows * Commit to test * feat: remove AWS secrets from dashboard build workflow * feat: remove AWS IAM role and region secrets from dashboard build workflow * feat: inherit secrets in the build job for dashboard package workflow * feat: add workflow_name input to plugin workflows in dashboard package build * feat: migrate artifact handling to use EXECUTION_REPOSITORY for S3 uploads * feat: update AWS CLI configuration to use v6 and assume role for S3 uploads * feat: update AWS role for artifact handling in dashboard workflow * feat: update CI_DEV_INTERNAL_BUCKET to use secrets and inherit secrets for plugin builds * feat: update CI_DEV_INTERNAL_BUCKET to use secrets for improved security * feat: add id-token permission for plugin build jobs in dashboard workflow * feat: update workflow references to version 4.14.6 for dashboard and plugins * Commit to test * Revert commit to test --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Juan Felipe Gonzalez Ortiz <53414652+felipegonzalezmv@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Julia Magán <80041853+juliamagan@users.noreply.github.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com>

* Migrate dashboard plugins package-building and bumper workflow runner… (#8651) * Migrate dashboard plugins package-building workflow runners to AWS CodeBuild Move the runs-on values of the package-building workflows off the self-hosted wz-linux-amd64 runner and onto AWS CodeBuild ephemeral runners, following issue wazuh/internal-devel-requests#5246 and mirroring wazuh/wazuh-dashboard#1372. - 4_builderpackage_plugins.yml (test-packages): wz-linux-amd64 -> Form A (amd) - 4_builderprecompiled_base-dev-environment.yml (deploy_and_run_command): wz-linux-amd64 -> Form A (amd) These workflows are AMD-only on 4.14.6 (no architecture input/matrix), so both use the fixed AMD CodeBuild runner label. Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Pull OSD test image from ECR Public to avoid Docker Hub rate limits * Migrate remaining 4.x workflow runners to CodeBuild and log in to Docker Hub --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Migrate GitHub runners to aws runners (#8660) fix: add missing secrets for Docker Hub authentication in build workflow * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#8672) chore(tag-reference): change tag reference for 4.14.6 * feat: migrate artifact handling to S3 in build workflows * feat: update workflows to streamline S3 artifact handling * fix: refine artifact upload path to ensure correct file handling * fix: add recursive flag to aws s3 cp for complete directory copy * fix: simplify plugin installation command in install-plugins.sh * feat: update environment workflows to enhance S3 artifact handling * fix: remove unnecessary blank line in variable setting step * feat: update workflows to migrate artifact handling from base environment to package-specific workflow * fix: update workflow_run reference in build job for clarity * feat: enhance workflow inputs to allow dynamic workflow name for artifact building * feat: migrate artifact handling to use execution repository format for S3 uploads * feat: refine plugin installation script to target specific zip files in /tmp * feat: migrate CI_DEV_INTERNAL_BUCKET and AWS role to use secrets for enhanced security * feat: add id-token permission for enhanced security in workflows * feat: update permissions in build workflow to ensure id-token access is correctly set * feat: add id-token permission to test packages job for enhanced security --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com>

* Migrate dashboard plugins package-building and bumper workflow runner… (#8651) * Migrate dashboard plugins package-building workflow runners to AWS CodeBuild Move the runs-on values of the package-building workflows off the self-hosted wz-linux-amd64 runner and onto AWS CodeBuild ephemeral runners, following issue wazuh/internal-devel-requests#5246 and mirroring wazuh/wazuh-dashboard#1372. - 4_builderpackage_plugins.yml (test-packages): wz-linux-amd64 -> Form A (amd) - 4_builderprecompiled_base-dev-environment.yml (deploy_and_run_command): wz-linux-amd64 -> Form A (amd) These workflows are AMD-only on 4.14.6 (no architecture input/matrix), so both use the fixed AMD CodeBuild runner label. Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Pull OSD test image from ECR Public to avoid Docker Hub rate limits * Migrate remaining 4.x workflow runners to CodeBuild and log in to Docker Hub --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Migrate GitHub runners to aws runners (#8660) fix: add missing secrets for Docker Hub authentication in build workflow * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#8672) chore(tag-reference): change tag reference for 4.14.6 * feat: bump 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com>

* Adds changelog entries for versions 4.10.2–4.10.5 (#1312) * Refactor Allocator instance/composite names and add custom AWS tagging for better resource management 4x (#1284) * feat: refactor AWS instance creation with custom tags in build workflow * Refactor AWS instance creation to streamline custom tagging and improve resource management * feat: bump 4.14.6 * Revert "Bump 4.14.6 branch" * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1318) chore(tag-reference): change tag reference for 4.14.6 * Fixes changelog entry order in RPM spec (#1320) * Fixes changelog entry order in RPM spec * Updates workflow refs to v4.14.6-rc1 * Updates workflow refs 4.14.6 (#1321) * Migrate dashboard package-building workflow runners to AWS CodeBuild (#1374) * Migrate dashboard package-building workflow runners to AWS CodeBuild Replace the self-hosted `wz-linux-amd64` / `wz-linux-arm64` runners in the 4.x package build workflows with AWS CodeBuild runners (codebuild-github-actions-codebuild-runner-dashboard-<arch>-<run_id>-<run_attempt>), backporting the runner migration done in #1372. - 4_builderpackage_dashboard.yml: setup-variables and validate-job to the amd runner; build-package, test-package and upload-package to the arch-conditional runner. - 4_builderpackage_dashboard_core.yml: build job to the arch-conditional runner (inputs.ARCHITECTURE). - build_base.yml / build_wazuh_dashboard_with_plugins.yml: route arm builds to CodeBuild, keep amd on GitHub-hosted runners (mirrors #1372). Closes opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use format() for conditional CodeBuild runners and run core build as non-root Align with #1372 to avoid runtime errors on the migrated CodeBuild runners: - Conditional `runs-on` expressions cannot nest `${{ }}` inside a string literal (the inner expression is not interpolated, so the runner label would contain the literal text and never match a runner). Replace them with `format('...-{0}-{1}', github.run_id, github.run_attempt)`. - CodeBuild runners execute as root and the OpenSearch Dashboards build tooling misbehaves as root. In 4_builderpackage_dashboard_core.yml run `yarn osd bootstrap` and `yarn build-platform` as a non-root `builduser`, mirroring the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use relative path when renaming the core build artifact The "Rename artifact" step used an absolute GitHub-hosted path (/home/runner/work/wazuh-dashboard/wazuh-dashboard/artifacts/target/...), which does not exist on the AWS CodeBuild runners and makes the `mv` fail. Since the job already sets `working-directory: ./artifacts`, use the relative `target/...` path so it works on any runner. Mirrors the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use github.workspace instead of a shared CURRENT_DIR output for artifact paths * test° * Make package build/test work on AWS CodeBuild runners * Guard systemctl calls so DEB package tests run without systemd * Migrate DEB package tests to use systemd-enabled container and streamline installation scripts * Add workarounds for missing zip, pip3, and openssh-client on AWS CodeBuild ARM runners * Pin reusable workflow refs to 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Migrate GitHub runners to aws runners (#1380) * Add DockerHub secrets and create non-root build user in package build workflow * Commit to test * Add Docker Hub credentials for build user to pull authenticated images * Revert commit to test * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1388) chore(tag-reference): change tag reference for 4.14.6 * feat: bump 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Juan Felipe Gonzalez Ortiz <53414652+felipegonzalezmv@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Julia Magán <80041853+juliamagan@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com>

* Sanitize Markdown component (#8713) * fix: add missing sanitization * chore: update unit tests * chore: add changelog entry * fix: apply prettier * fix: apply prettier * Migrate artifact handling to S3 in build workflows (#8686) * Migrate dashboard plugins package-building and bumper workflow runner… (#8651) * Migrate dashboard plugins package-building workflow runners to AWS CodeBuild Move the runs-on values of the package-building workflows off the self-hosted wz-linux-amd64 runner and onto AWS CodeBuild ephemeral runners, following issue wazuh/internal-devel-requests#5246 and mirroring wazuh/wazuh-dashboard#1372. - 4_builderpackage_plugins.yml (test-packages): wz-linux-amd64 -> Form A (amd) - 4_builderprecompiled_base-dev-environment.yml (deploy_and_run_command): wz-linux-amd64 -> Form A (amd) These workflows are AMD-only on 4.14.6 (no architecture input/matrix), so both use the fixed AMD CodeBuild runner label. Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Pull OSD test image from ECR Public to avoid Docker Hub rate limits * Migrate remaining 4.x workflow runners to CodeBuild and log in to Docker Hub --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Migrate GitHub runners to aws runners (#8660) fix: add missing secrets for Docker Hub authentication in build workflow * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#8672) chore(tag-reference): change tag reference for 4.14.6 * feat: migrate artifact handling to S3 in build workflows * feat: update workflows to streamline S3 artifact handling * fix: refine artifact upload path to ensure correct file handling * fix: add recursive flag to aws s3 cp for complete directory copy * fix: simplify plugin installation command in install-plugins.sh * feat: update environment workflows to enhance S3 artifact handling * fix: remove unnecessary blank line in variable setting step * feat: update workflows to migrate artifact handling from base environment to package-specific workflow * fix: update workflow_run reference in build job for clarity * feat: enhance workflow inputs to allow dynamic workflow name for artifact building * feat: migrate artifact handling to use execution repository format for S3 uploads * feat: refine plugin installation script to target specific zip files in /tmp * feat: migrate CI_DEV_INTERNAL_BUCKET and AWS role to use secrets for enhanced security * feat: add id-token permission for enhanced security in workflows * feat: update permissions in build workflow to ensure id-token access is correctly set * feat: add id-token permission to test packages job for enhanced security --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> * Merge 4.14.6 into 4.14.7 (#8722) * Migrate dashboard plugins package-building and bumper workflow runner… (#8651) * Migrate dashboard plugins package-building workflow runners to AWS CodeBuild Move the runs-on values of the package-building workflows off the self-hosted wz-linux-amd64 runner and onto AWS CodeBuild ephemeral runners, following issue wazuh/internal-devel-requests#5246 and mirroring wazuh/wazuh-dashboard#1372. - 4_builderpackage_plugins.yml (test-packages): wz-linux-amd64 -> Form A (amd) - 4_builderprecompiled_base-dev-environment.yml (deploy_and_run_command): wz-linux-amd64 -> Form A (amd) These workflows are AMD-only on 4.14.6 (no architecture input/matrix), so both use the fixed AMD CodeBuild runner label. Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Pull OSD test image from ECR Public to avoid Docker Hub rate limits * Migrate remaining 4.x workflow runners to CodeBuild and log in to Docker Hub --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Migrate GitHub runners to aws runners (#8660) fix: add missing secrets for Docker Hub authentication in build workflow * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#8672) chore(tag-reference): change tag reference for 4.14.6 * feat: bump 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Rodrigo López <37187963+rodrigofez@users.noreply.github.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com>

* add Responses events tab with linked finding flyout (#8681) * add Responses events tab with linked finding flyout * wrap ids query in lucene language envelope for searchSource * refactor: replace custom flyout with standard DocumentViewTableAndJson in Responses tab * fix: expose source finding _id in Source Finding tab * fix: use sentence case for Active Response flyout title * Prettier fix * fix: prettier fixes for active responses events tab * fix labels * Add spacer * fix: update changelog description * fix: update changelog description * fix: prettier --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Moved file from root folder to server in order to fix import on `index.ts` (#8693) * fix import on index.ts and plugin.ts from file on the root of the project. Signed-off-by: Adam Navarro Megías <adam.navarro@wazuh.com> * changelog Signed-off-by: Adam Navarro Megías <adam.navarro@wazuh.com> * change import :( Signed-off-by: Adam Navarro Megías <adam.navarro@wazuh.com> --------- Signed-off-by: Adam Navarro Megías <adam.navarro@wazuh.com> * Document new app Indexer management > Settings app (#8691) * chore: add docs * chore: update image * chore: update image --------- Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> * Change height inside FIM > Inventory sub-tabs (#8709) * Change height * Update CHANGELOG * Use same value than the other tabs * Remove column from malware detection findings table (#8703) * Removed column Signed-off-by: Adam Navarro Megías <adam.navarro@wazuh.com> * changelog Signed-off-by: Adam Navarro Megías <adam.navarro@wazuh.com> --------- Signed-off-by: Adam Navarro Megías <adam.navarro@wazuh.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> * Changed the management of daemons status to the new API response schema (#8706) * change: adapt GET /cluster/{node_id}/status API manager response - Adapt checkDaemons function in frontend side - Adapt checkDaemons function in backend side - Redesing daemons view in Status app: - Add ready and running status information to each daemon - Add overiew ready information - Wrap daemons information into a panel * chore(changelog): add entry * feat(status): move damoens panel to bottom * chore(status): removed unused styles * feat(status): sort daemons by name * feat(status): lowercase the daemon status tooltip * feat(status): lowercase the daemon status tooltip * feat(status): change porperty accessors * Fix `Configuration Assesment > Inventory & Findings` columns width (#8699) * Rework columns Signed-off-by: Adam Navarro Megías <adam.navarro@wazuh.com> * Restore constants and move decimalFormat to helpers + changelog Signed-off-by: Adam Navarro Megías <adam.navarro@wazuh.com> --------- Signed-off-by: Adam Navarro Megías <adam.navarro@wazuh.com> * Migrate artifact handling to S3 in build workflows (#8695) ### Description Migrate artifact handling to S3 in build workflows ### Evidence [(5.x) Build app package (on demand)](https://github.com/wazuh/wazuh-dashboard-plugins/actions/runs/28447770857) ### Check List - [ ] All tests pass - [ ] `yarn test:jest` - [ ] New functionality includes testing. - [ ] New functionality has been documented. - [ ] Update [CHANGELOG.md](./../CHANGELOG.md) - [ ] Commits are signed per the DCO using --signoff * Merge 4.14.7 into 5.0.0 (#8725) * Sanitize Markdown component (#8713) * fix: add missing sanitization * chore: update unit tests * chore: add changelog entry * fix: apply prettier * fix: apply prettier * Migrate artifact handling to S3 in build workflows (#8686) * Migrate dashboard plugins package-building and bumper workflow runner… (#8651) * Migrate dashboard plugins package-building workflow runners to AWS CodeBuild Move the runs-on values of the package-building workflows off the self-hosted wz-linux-amd64 runner and onto AWS CodeBuild ephemeral runners, following issue wazuh/internal-devel-requests#5246 and mirroring wazuh/wazuh-dashboard#1372. - 4_builderpackage_plugins.yml (test-packages): wz-linux-amd64 -> Form A (amd) - 4_builderprecompiled_base-dev-environment.yml (deploy_and_run_command): wz-linux-amd64 -> Form A (amd) These workflows are AMD-only on 4.14.6 (no architecture input/matrix), so both use the fixed AMD CodeBuild runner label. Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Pull OSD test image from ECR Public to avoid Docker Hub rate limits * Migrate remaining 4.x workflow runners to CodeBuild and log in to Docker Hub --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Migrate GitHub runners to aws runners (#8660) fix: add missing secrets for Docker Hub authentication in build workflow * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#8672) chore(tag-reference): change tag reference for 4.14.6 * feat: migrate artifact handling to S3 in build workflows * feat: update workflows to streamline S3 artifact handling * fix: refine artifact upload path to ensure correct file handling * fix: add recursive flag to aws s3 cp for complete directory copy * fix: simplify plugin installation command in install-plugins.sh * feat: update environment workflows to enhance S3 artifact handling * fix: remove unnecessary blank line in variable setting step * feat: update workflows to migrate artifact handling from base environment to package-specific workflow * fix: update workflow_run reference in build job for clarity * feat: enhance workflow inputs to allow dynamic workflow name for artifact building * feat: migrate artifact handling to use execution repository format for S3 uploads * feat: refine plugin installation script to target specific zip files in /tmp * feat: migrate CI_DEV_INTERNAL_BUCKET and AWS role to use secrets for enhanced security * feat: add id-token permission for enhanced security in workflows * feat: update permissions in build workflow to ensure id-token access is correctly set * feat: add id-token permission to test packages job for enhanced security --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> * Merge 4.14.6 into 4.14.7 (#8722) * Migrate dashboard plugins package-building and bumper workflow runner… (#8651) * Migrate dashboard plugins package-building workflow runners to AWS CodeBuild Move the runs-on values of the package-building workflows off the self-hosted wz-linux-amd64 runner and onto AWS CodeBuild ephemeral runners, following issue wazuh/internal-devel-requests#5246 and mirroring wazuh/wazuh-dashboard#1372. - 4_builderpackage_plugins.yml (test-packages): wz-linux-amd64 -> Form A (amd) - 4_builderprecompiled_base-dev-environment.yml (deploy_and_run_command): wz-linux-amd64 -> Form A (amd) These workflows are AMD-only on 4.14.6 (no architecture input/matrix), so both use the fixed AMD CodeBuild runner label. Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Pull OSD test image from ECR Public to avoid Docker Hub rate limits * Migrate remaining 4.x workflow runners to CodeBuild and log in to Docker Hub --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Migrate GitHub runners to aws runners (#8660) fix: add missing secrets for Docker Hub authentication in build workflow * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#8672) chore(tag-reference): change tag reference for 4.14.6 * feat: bump 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Rodrigo López <37187963+rodrigofez@users.noreply.github.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Signed-off-by: Adam Navarro Megías <adam.navarro@wazuh.com> Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Adam Navarro Megías <145340543+Adman23@users.noreply.github.com> Co-authored-by: Rodrigo López <37187963+rodrigofez@users.noreply.github.com> Co-authored-by: Fernando Castilla <164048568+FernandoCastilla@users.noreply.github.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com>

* Migrate artifact handling to S3 in dashboard workflows (#1397) * Adds changelog entries for versions 4.10.2–4.10.5 (#1312) * Refactor Allocator instance/composite names and add custom AWS tagging for better resource management 4x (#1284) * feat: refactor AWS instance creation with custom tags in build workflow * Refactor AWS instance creation to streamline custom tagging and improve resource management * feat: bump 4.14.6 * Revert "Bump 4.14.6 branch" * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1318) chore(tag-reference): change tag reference for 4.14.6 * Fixes changelog entry order in RPM spec (#1320) * Fixes changelog entry order in RPM spec * Updates workflow refs to v4.14.6-rc1 * Updates workflow refs 4.14.6 (#1321) * Migrate dashboard package-building workflow runners to AWS CodeBuild (#1374) * Migrate dashboard package-building workflow runners to AWS CodeBuild Replace the self-hosted `wz-linux-amd64` / `wz-linux-arm64` runners in the 4.x package build workflows with AWS CodeBuild runners (codebuild-github-actions-codebuild-runner-dashboard-<arch>-<run_id>-<run_attempt>), backporting the runner migration done in #1372. - 4_builderpackage_dashboard.yml: setup-variables and validate-job to the amd runner; build-package, test-package and upload-package to the arch-conditional runner. - 4_builderpackage_dashboard_core.yml: build job to the arch-conditional runner (inputs.ARCHITECTURE). - build_base.yml / build_wazuh_dashboard_with_plugins.yml: route arm builds to CodeBuild, keep amd on GitHub-hosted runners (mirrors #1372). Closes opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use format() for conditional CodeBuild runners and run core build as non-root Align with #1372 to avoid runtime errors on the migrated CodeBuild runners: - Conditional `runs-on` expressions cannot nest `${{ }}` inside a string literal (the inner expression is not interpolated, so the runner label would contain the literal text and never match a runner). Replace them with `format('...-{0}-{1}', github.run_id, github.run_attempt)`. - CodeBuild runners execute as root and the OpenSearch Dashboards build tooling misbehaves as root. In 4_builderpackage_dashboard_core.yml run `yarn osd bootstrap` and `yarn build-platform` as a non-root `builduser`, mirroring the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use relative path when renaming the core build artifact The "Rename artifact" step used an absolute GitHub-hosted path (/home/runner/work/wazuh-dashboard/wazuh-dashboard/artifacts/target/...), which does not exist on the AWS CodeBuild runners and makes the `mv` fail. Since the job already sets `working-directory: ./artifacts`, use the relative `target/...` path so it works on any runner. Mirrors the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use github.workspace instead of a shared CURRENT_DIR output for artifact paths * test° * Make package build/test work on AWS CodeBuild runners * Guard systemctl calls so DEB package tests run without systemd * Migrate DEB package tests to use systemd-enabled container and streamline installation scripts * Add workarounds for missing zip, pip3, and openssh-client on AWS CodeBuild ARM runners * Pin reusable workflow refs to 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Migrate GitHub runners to aws runners (#1380) * Add DockerHub secrets and create non-root build user in package build workflow * Commit to test * Add Docker Hub credentials for build user to pull authenticated images * Revert commit to test * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1388) chore(tag-reference): change tag reference for 4.14.6 * feat: migrate artifact handling to S3 in dashboard workflows * Commit to test * feat: remove AWS secrets from dashboard build workflow * feat: remove AWS IAM role and region secrets from dashboard build workflow * feat: inherit secrets in the build job for dashboard package workflow * feat: add workflow_name input to plugin workflows in dashboard package build * feat: migrate artifact handling to use EXECUTION_REPOSITORY for S3 uploads * feat: update AWS CLI configuration to use v6 and assume role for S3 uploads * feat: update AWS role for artifact handling in dashboard workflow * feat: update CI_DEV_INTERNAL_BUCKET to use secrets and inherit secrets for plugin builds * feat: update CI_DEV_INTERNAL_BUCKET to use secrets for improved security * feat: add id-token permission for plugin build jobs in dashboard workflow * feat: update workflow references to version 4.14.6 for dashboard and plugins * Commit to test * Revert commit to test --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Juan Felipe Gonzalez Ortiz <53414652+felipegonzalezmv@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Julia Magán <80041853+juliamagan@users.noreply.github.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> * Merge 4.14.6 into 4.14.7 (#1408) * Adds changelog entries for versions 4.10.2–4.10.5 (#1312) * Refactor Allocator instance/composite names and add custom AWS tagging for better resource management 4x (#1284) * feat: refactor AWS instance creation with custom tags in build workflow * Refactor AWS instance creation to streamline custom tagging and improve resource management * feat: bump 4.14.6 * Revert "Bump 4.14.6 branch" * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1318) chore(tag-reference): change tag reference for 4.14.6 * Fixes changelog entry order in RPM spec (#1320) * Fixes changelog entry order in RPM spec * Updates workflow refs to v4.14.6-rc1 * Updates workflow refs 4.14.6 (#1321) * Migrate dashboard package-building workflow runners to AWS CodeBuild (#1374) * Migrate dashboard package-building workflow runners to AWS CodeBuild Replace the self-hosted `wz-linux-amd64` / `wz-linux-arm64` runners in the 4.x package build workflows with AWS CodeBuild runners (codebuild-github-actions-codebuild-runner-dashboard-<arch>-<run_id>-<run_attempt>), backporting the runner migration done in #1372. - 4_builderpackage_dashboard.yml: setup-variables and validate-job to the amd runner; build-package, test-package and upload-package to the arch-conditional runner. - 4_builderpackage_dashboard_core.yml: build job to the arch-conditional runner (inputs.ARCHITECTURE). - build_base.yml / build_wazuh_dashboard_with_plugins.yml: route arm builds to CodeBuild, keep amd on GitHub-hosted runners (mirrors #1372). Closes opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use format() for conditional CodeBuild runners and run core build as non-root Align with #1372 to avoid runtime errors on the migrated CodeBuild runners: - Conditional `runs-on` expressions cannot nest `${{ }}` inside a string literal (the inner expression is not interpolated, so the runner label would contain the literal text and never match a runner). Replace them with `format('...-{0}-{1}', github.run_id, github.run_attempt)`. - CodeBuild runners execute as root and the OpenSearch Dashboards build tooling misbehaves as root. In 4_builderpackage_dashboard_core.yml run `yarn osd bootstrap` and `yarn build-platform` as a non-root `builduser`, mirroring the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use relative path when renaming the core build artifact The "Rename artifact" step used an absolute GitHub-hosted path (/home/runner/work/wazuh-dashboard/wazuh-dashboard/artifacts/target/...), which does not exist on the AWS CodeBuild runners and makes the `mv` fail. Since the job already sets `working-directory: ./artifacts`, use the relative `target/...` path so it works on any runner. Mirrors the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use github.workspace instead of a shared CURRENT_DIR output for artifact paths * test° * Make package build/test work on AWS CodeBuild runners * Guard systemctl calls so DEB package tests run without systemd * Migrate DEB package tests to use systemd-enabled container and streamline installation scripts * Add workarounds for missing zip, pip3, and openssh-client on AWS CodeBuild ARM runners * Pin reusable workflow refs to 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Migrate GitHub runners to aws runners (#1380) * Add DockerHub secrets and create non-root build user in package build workflow * Commit to test * Add Docker Hub credentials for build user to pull authenticated images * Revert commit to test * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1388) chore(tag-reference): change tag reference for 4.14.6 * feat: bump 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Juan Felipe Gonzalez Ortiz <53414652+felipegonzalezmv@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Julia Magán <80041853+juliamagan@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Juan Felipe Gonzalez Ortiz <53414652+felipegonzalezmv@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Julia Magán <80041853+juliamagan@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com>

* feat: bump 5.0.0 * Migrate GitHub runners to AWS runners (#1372) * Migrate GitHub runners to AWS runners * Refactor runner naming format in workflow files for consistency * Update revision retrieval method in build workflow to use package.json * Add non-root build user and update bootstrap command for permissions * Refactor runner naming format in workflow files to use format function and create non-root build user in plugin build workflow * Update build commands to run as non-root user for improved security * Fix artifact renaming path in build workflow for consistency * Add installation of zip utility for packaging plugins * Refactor artifact paths in build workflow to use github.workspace for consistency * Install zip utility conditionally for arm64 architecture in build workflow * Add workarounds for AWS CodeBuild runners to handle missing tools and permissions * Add Docker Hub login step and conditional Docker daemon start for AWS CodeBuild * Improve Docker daemon startup process in build workflow for ARM architecture * Add Docker Hub login and start Docker daemon for AWS CodeBuild runners * Add workarounds for AWS CodeBuild runners to handle systemd service management * Refactor DEB package testing to use systemd-enabled container and streamline upgrade checks * Add workaround to install pip3 for AWS CodeBuild ARM runners * Add missing apt-get update before package installation in deb-test scripts * Add workaround for AWS CodeBuild ARM runners to install pip3 and openssh-client * Refactor GitHub Actions workflows to use formatted runner names for AWS CodeBuild runners * Refactor GitHub Actions workflows to use updated runner names for AWS CodeBuild * Improve errors formatting in check flyout (#1379) * feat: improve error formatting in check flyout and not ready yet callouts * chore(changelog): add entry --------- Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> * Remove references to plugins not installed (#1382) * chore: remove anomalyDetectionDashboard build references * chore: add changelog entry * Hide all visible references to the Sample Data App (#1390) * Remove references to the Sample Data App in getNoItemsMessage * Remove all references to the Sample Data App in getNoItemsMessage tests * Merge 4.14.6 into 4.14.7 (#1393) (#1394) * Migrate dashboard package-building workflow runners to AWS CodeBuild (#1374) * Migrate dashboard package-building workflow runners to AWS CodeBuild Replace the self-hosted `wz-linux-amd64` / `wz-linux-arm64` runners in the 4.x package build workflows with AWS CodeBuild runners (codebuild-github-actions-codebuild-runner-dashboard-<arch>-<run_id>-<run_attempt>), backporting the runner migration done in #1372. - 4_builderpackage_dashboard.yml: setup-variables and validate-job to the amd runner; build-package, test-package and upload-package to the arch-conditional runner. - 4_builderpackage_dashboard_core.yml: build job to the arch-conditional runner (inputs.ARCHITECTURE). - build_base.yml / build_wazuh_dashboard_with_plugins.yml: route arm builds to CodeBuild, keep amd on GitHub-hosted runners (mirrors #1372). Closes opensearch-project#5246 * Use format() for conditional CodeBuild runners and run core build as non-root Align with #1372 to avoid runtime errors on the migrated CodeBuild runners: - Conditional `runs-on` expressions cannot nest `${{ }}` inside a string literal (the inner expression is not interpolated, so the runner label would contain the literal text and never match a runner). Replace them with `format(...-{0}-{1}, github.run_id, github.run_attempt)`. - CodeBuild runners execute as root and the OpenSearch Dashboards build tooling misbehaves as root. In 4_builderpackage_dashboard_core.yml run `yarn osd bootstrap` and `yarn build-platform` as a non-root `builduser`, mirroring the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 * Use relative path when renaming the core build artifact The "Rename artifact" step used an absolute GitHub-hosted path (/home/runner/work/wazuh-dashboard/wazuh-dashboard/artifacts/target/...), which does not exist on the AWS CodeBuild runners and makes the `mv` fail. Since the job already sets `working-directory: ./artifacts`, use the relative `target/...` path so it works on any runner. Mirrors the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 * Use github.workspace instead of a shared CURRENT_DIR output for artifact paths * test° * Make package build/test work on AWS CodeBuild runners * Guard systemctl calls so DEB package tests run without systemd * Migrate DEB package tests to use systemd-enabled container and streamline installation scripts * Add workarounds for missing zip, pip3, and openssh-client on AWS CodeBuild ARM runners * Pin reusable workflow refs to 4.14.6 --------- * Migrate GitHub runners to aws runners (#1380) * Add DockerHub secrets and create non-root build user in package build workflow * Commit to test * Add Docker Hub credentials for build user to pull authenticated images * Revert commit to test * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1388) chore(tag-reference): change tag reference for 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> * Migrate artifact handling to S3 in dashboard workflows (#1401) * Enhance AWS S3 integration in build workflows by adding execution repository input and updating artifact upload processes * Inherit secrets in build jobs for improved security and access management * Fix S3 upload commands in build workflow to remove redundant 's3://' prefix * Add logging for downloaded artifacts in S3 workflow * Fix S3 artifact download path by adding trailing slash to bucket URL * Upgrade AWS CLI configuration to use version 6 in dashboard workflows * Migrate artifact downloads to S3 in dashboard workflows and update package paths in test scripts * Fix package path in SCP command for RPM installation in dashboard build workflow * Update execution repository references to version 5 in dashboard workflows * Fix package generation failed because the SHA-512 file was missing (#1407) fix(workflow): empty variable interpolation on uploading sha512 file * Merge 4.14.7 into 5.0.0 (#1409) * Migrate artifact handling to S3 in dashboard workflows (#1397) * Adds changelog entries for versions 4.10.2–4.10.5 (#1312) * Refactor Allocator instance/composite names and add custom AWS tagging for better resource management 4x (#1284) * feat: refactor AWS instance creation with custom tags in build workflow * Refactor AWS instance creation to streamline custom tagging and improve resource management * feat: bump 4.14.6 * Revert "Bump 4.14.6 branch" * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1318) chore(tag-reference): change tag reference for 4.14.6 * Fixes changelog entry order in RPM spec (#1320) * Fixes changelog entry order in RPM spec * Updates workflow refs to v4.14.6-rc1 * Updates workflow refs 4.14.6 (#1321) * Migrate dashboard package-building workflow runners to AWS CodeBuild (#1374) * Migrate dashboard package-building workflow runners to AWS CodeBuild Replace the self-hosted `wz-linux-amd64` / `wz-linux-arm64` runners in the 4.x package build workflows with AWS CodeBuild runners (codebuild-github-actions-codebuild-runner-dashboard-<arch>-<run_id>-<run_attempt>), backporting the runner migration done in #1372. - 4_builderpackage_dashboard.yml: setup-variables and validate-job to the amd runner; build-package, test-package and upload-package to the arch-conditional runner. - 4_builderpackage_dashboard_core.yml: build job to the arch-conditional runner (inputs.ARCHITECTURE). - build_base.yml / build_wazuh_dashboard_with_plugins.yml: route arm builds to CodeBuild, keep amd on GitHub-hosted runners (mirrors #1372). Closes opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use format() for conditional CodeBuild runners and run core build as non-root Align with #1372 to avoid runtime errors on the migrated CodeBuild runners: - Conditional `runs-on` expressions cannot nest `${{ }}` inside a string literal (the inner expression is not interpolated, so the runner label would contain the literal text and never match a runner). Replace them with `format('...-{0}-{1}', github.run_id, github.run_attempt)`. - CodeBuild runners execute as root and the OpenSearch Dashboards build tooling misbehaves as root. In 4_builderpackage_dashboard_core.yml run `yarn osd bootstrap` and `yarn build-platform` as a non-root `builduser`, mirroring the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use relative path when renaming the core build artifact The "Rename artifact" step used an absolute GitHub-hosted path (/home/runner/work/wazuh-dashboard/wazuh-dashboard/artifacts/target/...), which does not exist on the AWS CodeBuild runners and makes the `mv` fail. Since the job already sets `working-directory: ./artifacts`, use the relative `target/...` path so it works on any runner. Mirrors the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use github.workspace instead of a shared CURRENT_DIR output for artifact paths * test° * Make package build/test work on AWS CodeBuild runners * Guard systemctl calls so DEB package tests run without systemd * Migrate DEB package tests to use systemd-enabled container and streamline installation scripts * Add workarounds for missing zip, pip3, and openssh-client on AWS CodeBuild ARM runners * Pin reusable workflow refs to 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Migrate GitHub runners to aws runners (#1380) * Add DockerHub secrets and create non-root build user in package build workflow * Commit to test * Add Docker Hub credentials for build user to pull authenticated images * Revert commit to test * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1388) chore(tag-reference): change tag reference for 4.14.6 * feat: migrate artifact handling to S3 in dashboard workflows * Commit to test * feat: remove AWS secrets from dashboard build workflow * feat: remove AWS IAM role and region secrets from dashboard build workflow * feat: inherit secrets in the build job for dashboard package workflow * feat: add workflow_name input to plugin workflows in dashboard package build * feat: migrate artifact handling to use EXECUTION_REPOSITORY for S3 uploads * feat: update AWS CLI configuration to use v6 and assume role for S3 uploads * feat: update AWS role for artifact handling in dashboard workflow * feat: update CI_DEV_INTERNAL_BUCKET to use secrets and inherit secrets for plugin builds * feat: update CI_DEV_INTERNAL_BUCKET to use secrets for improved security * feat: add id-token permission for plugin build jobs in dashboard workflow * feat: update workflow references to version 4.14.6 for dashboard and plugins * Commit to test * Revert commit to test --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Juan Felipe Gonzalez Ortiz <53414652+felipegonzalezmv@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Julia Magán <80041853+juliamagan@users.noreply.github.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> * Merge 4.14.6 into 4.14.7 (#1408) * Adds changelog entries for versions 4.10.2–4.10.5 (#1312) * Refactor Allocator instance/composite names and add custom AWS tagging for better resource management 4x (#1284) * feat: refactor AWS instance creation with custom tags in build workflow * Refactor AWS instance creation to streamline custom tagging and improve resource management * feat: bump 4.14.6 * Revert "Bump 4.14.6 branch" * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1318) chore(tag-reference): change tag reference for 4.14.6 * Fixes changelog entry order in RPM spec (#1320) * Fixes changelog entry order in RPM spec * Updates workflow refs to v4.14.6-rc1 * Updates workflow refs 4.14.6 (#1321) * Migrate dashboard package-building workflow runners to AWS CodeBuild (#1374) * Migrate dashboard package-building workflow runners to AWS CodeBuild Replace the self-hosted `wz-linux-amd64` / `wz-linux-arm64` runners in the 4.x package build workflows with AWS CodeBuild runners (codebuild-github-actions-codebuild-runner-dashboard-<arch>-<run_id>-<run_attempt>), backporting the runner migration done in #1372. - 4_builderpackage_dashboard.yml: setup-variables and validate-job to the amd runner; build-package, test-package and upload-package to the arch-conditional runner. - 4_builderpackage_dashboard_core.yml: build job to the arch-conditional runner (inputs.ARCHITECTURE). - build_base.yml / build_wazuh_dashboard_with_plugins.yml: route arm builds to CodeBuild, keep amd on GitHub-hosted runners (mirrors #1372). Closes opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use format() for conditional CodeBuild runners and run core build as non-root Align with #1372 to avoid runtime errors on the migrated CodeBuild runners: - Conditional `runs-on` expressions cannot nest `${{ }}` inside a string literal (the inner expression is not interpolated, so the runner label would contain the literal text and never match a runner). Replace them with `format('...-{0}-{1}', github.run_id, github.run_attempt)`. - CodeBuild runners execute as root and the OpenSearch Dashboards build tooling misbehaves as root. In 4_builderpackage_dashboard_core.yml run `yarn osd bootstrap` and `yarn build-platform` as a non-root `builduser`, mirroring the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use relative path when renaming the core build artifact The "Rename artifact" step used an absolute GitHub-hosted path (/home/runner/work/wazuh-dashboard/wazuh-dashboard/artifacts/target/...), which does not exist on the AWS CodeBuild runners and makes the `mv` fail. Since the job already sets `working-directory: ./artifacts`, use the relative `target/...` path so it works on any runner. Mirrors the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use github.workspace instead of a shared CURRENT_DIR output for artifact paths * test° * Make package build/test work on AWS CodeBuild runners * Guard systemctl calls so DEB package tests run without systemd * Migrate DEB package tests to use systemd-enabled container and streamline installation scripts * Add workarounds for missing zip, pip3, and openssh-client on AWS CodeBuild ARM runners * Pin reusable workflow refs to 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Migrate GitHub runners to aws runners (#1380) * Add DockerHub secrets and create non-root build user in package build workflow * Commit to test * Add Docker Hub credentials for build user to pull authenticated images * Revert commit to test * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1388) chore(tag-reference): change tag reference for 4.14.6 * feat: bump 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Juan Felipe Gonzalez Ortiz <53414652+felipegonzalezmv@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Julia Magán <80041853+juliamagan@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Juan Felipe Gonzalez Ortiz <53414652+felipegonzalezmv@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Julia Magán <80041853+juliamagan@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> * fix(workflow): default value --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Rodrigo López <37187963+rodrigofez@users.noreply.github.com> Co-authored-by: Diego García <82405377+Ripdiegozz@users.noreply.github.com> Co-authored-by: Gonzalo Arancibia <72573241+gonzaarancibia@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Juan Felipe Gonzalez Ortiz <53414652+felipegonzalezmv@users.noreply.github.com> Co-authored-by: Julia Magán <80041853+juliamagan@users.noreply.github.com>

* feat: bump 5.0.0 * Migrate GitHub runners to AWS runners (#1372) * Migrate GitHub runners to AWS runners * Refactor runner naming format in workflow files for consistency * Update revision retrieval method in build workflow to use package.json * Add non-root build user and update bootstrap command for permissions * Refactor runner naming format in workflow files to use format function and create non-root build user in plugin build workflow * Update build commands to run as non-root user for improved security * Fix artifact renaming path in build workflow for consistency * Add installation of zip utility for packaging plugins * Refactor artifact paths in build workflow to use github.workspace for consistency * Install zip utility conditionally for arm64 architecture in build workflow * Add workarounds for AWS CodeBuild runners to handle missing tools and permissions * Add Docker Hub login step and conditional Docker daemon start for AWS CodeBuild * Improve Docker daemon startup process in build workflow for ARM architecture * Add Docker Hub login and start Docker daemon for AWS CodeBuild runners * Add workarounds for AWS CodeBuild runners to handle systemd service management * Refactor DEB package testing to use systemd-enabled container and streamline upgrade checks * Add workaround to install pip3 for AWS CodeBuild ARM runners * Add missing apt-get update before package installation in deb-test scripts * Add workaround for AWS CodeBuild ARM runners to install pip3 and openssh-client * Refactor GitHub Actions workflows to use formatted runner names for AWS CodeBuild runners * Refactor GitHub Actions workflows to use updated runner names for AWS CodeBuild * Improve errors formatting in check flyout (#1379) * feat: improve error formatting in check flyout and not ready yet callouts * chore(changelog): add entry --------- Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> * Remove references to plugins not installed (#1382) * chore: remove anomalyDetectionDashboard build references * chore: add changelog entry * Hide all visible references to the Sample Data App (#1390) * Remove references to the Sample Data App in getNoItemsMessage * Remove all references to the Sample Data App in getNoItemsMessage tests * Merge 4.14.6 into 4.14.7 (#1393) (#1394) * Migrate dashboard package-building workflow runners to AWS CodeBuild (#1374) * Migrate dashboard package-building workflow runners to AWS CodeBuild Replace the self-hosted `wz-linux-amd64` / `wz-linux-arm64` runners in the 4.x package build workflows with AWS CodeBuild runners (codebuild-github-actions-codebuild-runner-dashboard-<arch>-<run_id>-<run_attempt>), backporting the runner migration done in #1372. - 4_builderpackage_dashboard.yml: setup-variables and validate-job to the amd runner; build-package, test-package and upload-package to the arch-conditional runner. - 4_builderpackage_dashboard_core.yml: build job to the arch-conditional runner (inputs.ARCHITECTURE). - build_base.yml / build_wazuh_dashboard_with_plugins.yml: route arm builds to CodeBuild, keep amd on GitHub-hosted runners (mirrors #1372). Closes opensearch-project#5246 * Use format() for conditional CodeBuild runners and run core build as non-root Align with #1372 to avoid runtime errors on the migrated CodeBuild runners: - Conditional `runs-on` expressions cannot nest `${{ }}` inside a string literal (the inner expression is not interpolated, so the runner label would contain the literal text and never match a runner). Replace them with `format(...-{0}-{1}, github.run_id, github.run_attempt)`. - CodeBuild runners execute as root and the OpenSearch Dashboards build tooling misbehaves as root. In 4_builderpackage_dashboard_core.yml run `yarn osd bootstrap` and `yarn build-platform` as a non-root `builduser`, mirroring the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 * Use relative path when renaming the core build artifact The "Rename artifact" step used an absolute GitHub-hosted path (/home/runner/work/wazuh-dashboard/wazuh-dashboard/artifacts/target/...), which does not exist on the AWS CodeBuild runners and makes the `mv` fail. Since the job already sets `working-directory: ./artifacts`, use the relative `target/...` path so it works on any runner. Mirrors the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 * Use github.workspace instead of a shared CURRENT_DIR output for artifact paths * test° * Make package build/test work on AWS CodeBuild runners * Guard systemctl calls so DEB package tests run without systemd * Migrate DEB package tests to use systemd-enabled container and streamline installation scripts * Add workarounds for missing zip, pip3, and openssh-client on AWS CodeBuild ARM runners * Pin reusable workflow refs to 4.14.6 --------- * Migrate GitHub runners to aws runners (#1380) * Add DockerHub secrets and create non-root build user in package build workflow * Commit to test * Add Docker Hub credentials for build user to pull authenticated images * Revert commit to test * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1388) chore(tag-reference): change tag reference for 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> * Migrate artifact handling to S3 in dashboard workflows (#1401) * Enhance AWS S3 integration in build workflows by adding execution repository input and updating artifact upload processes * Inherit secrets in build jobs for improved security and access management * Fix S3 upload commands in build workflow to remove redundant 's3://' prefix * Add logging for downloaded artifacts in S3 workflow * Fix S3 artifact download path by adding trailing slash to bucket URL * Upgrade AWS CLI configuration to use version 6 in dashboard workflows * Migrate artifact downloads to S3 in dashboard workflows and update package paths in test scripts * Fix package path in SCP command for RPM installation in dashboard build workflow * Update execution repository references to version 5 in dashboard workflows * Fix package generation failed because the SHA-512 file was missing (#1407) fix(workflow): empty variable interpolation on uploading sha512 file * Merge 4.14.7 into 5.0.0 (#1409) * Migrate artifact handling to S3 in dashboard workflows (#1397) * Adds changelog entries for versions 4.10.2–4.10.5 (#1312) * Refactor Allocator instance/composite names and add custom AWS tagging for better resource management 4x (#1284) * feat: refactor AWS instance creation with custom tags in build workflow * Refactor AWS instance creation to streamline custom tagging and improve resource management * feat: bump 4.14.6 * Revert "Bump 4.14.6 branch" * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1318) chore(tag-reference): change tag reference for 4.14.6 * Fixes changelog entry order in RPM spec (#1320) * Fixes changelog entry order in RPM spec * Updates workflow refs to v4.14.6-rc1 * Updates workflow refs 4.14.6 (#1321) * Migrate dashboard package-building workflow runners to AWS CodeBuild (#1374) * Migrate dashboard package-building workflow runners to AWS CodeBuild Replace the self-hosted `wz-linux-amd64` / `wz-linux-arm64` runners in the 4.x package build workflows with AWS CodeBuild runners (codebuild-github-actions-codebuild-runner-dashboard-<arch>-<run_id>-<run_attempt>), backporting the runner migration done in #1372. - 4_builderpackage_dashboard.yml: setup-variables and validate-job to the amd runner; build-package, test-package and upload-package to the arch-conditional runner. - 4_builderpackage_dashboard_core.yml: build job to the arch-conditional runner (inputs.ARCHITECTURE). - build_base.yml / build_wazuh_dashboard_with_plugins.yml: route arm builds to CodeBuild, keep amd on GitHub-hosted runners (mirrors #1372). Closes opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use format() for conditional CodeBuild runners and run core build as non-root Align with #1372 to avoid runtime errors on the migrated CodeBuild runners: - Conditional `runs-on` expressions cannot nest `${{ }}` inside a string literal (the inner expression is not interpolated, so the runner label would contain the literal text and never match a runner). Replace them with `format('...-{0}-{1}', github.run_id, github.run_attempt)`. - CodeBuild runners execute as root and the OpenSearch Dashboards build tooling misbehaves as root. In 4_builderpackage_dashboard_core.yml run `yarn osd bootstrap` and `yarn build-platform` as a non-root `builduser`, mirroring the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use relative path when renaming the core build artifact The "Rename artifact" step used an absolute GitHub-hosted path (/home/runner/work/wazuh-dashboard/wazuh-dashboard/artifacts/target/...), which does not exist on the AWS CodeBuild runners and makes the `mv` fail. Since the job already sets `working-directory: ./artifacts`, use the relative `target/...` path so it works on any runner. Mirrors the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use github.workspace instead of a shared CURRENT_DIR output for artifact paths * test° * Make package build/test work on AWS CodeBuild runners * Guard systemctl calls so DEB package tests run without systemd * Migrate DEB package tests to use systemd-enabled container and streamline installation scripts * Add workarounds for missing zip, pip3, and openssh-client on AWS CodeBuild ARM runners * Pin reusable workflow refs to 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Migrate GitHub runners to aws runners (#1380) * Add DockerHub secrets and create non-root build user in package build workflow * Commit to test * Add Docker Hub credentials for build user to pull authenticated images * Revert commit to test * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1388) chore(tag-reference): change tag reference for 4.14.6 * feat: migrate artifact handling to S3 in dashboard workflows * Commit to test * feat: remove AWS secrets from dashboard build workflow * feat: remove AWS IAM role and region secrets from dashboard build workflow * feat: inherit secrets in the build job for dashboard package workflow * feat: add workflow_name input to plugin workflows in dashboard package build * feat: migrate artifact handling to use EXECUTION_REPOSITORY for S3 uploads * feat: update AWS CLI configuration to use v6 and assume role for S3 uploads * feat: update AWS role for artifact handling in dashboard workflow * feat: update CI_DEV_INTERNAL_BUCKET to use secrets and inherit secrets for plugin builds * feat: update CI_DEV_INTERNAL_BUCKET to use secrets for improved security * feat: add id-token permission for plugin build jobs in dashboard workflow * feat: update workflow references to version 4.14.6 for dashboard and plugins * Commit to test * Revert commit to test --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Juan Felipe Gonzalez Ortiz <53414652+felipegonzalezmv@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Julia Magán <80041853+juliamagan@users.noreply.github.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> * Merge 4.14.6 into 4.14.7 (#1408) * Adds changelog entries for versions 4.10.2–4.10.5 (#1312) * Refactor Allocator instance/composite names and add custom AWS tagging for better resource management 4x (#1284) * feat: refactor AWS instance creation with custom tags in build workflow * Refactor AWS instance creation to streamline custom tagging and improve resource management * feat: bump 4.14.6 * Revert "Bump 4.14.6 branch" * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1318) chore(tag-reference): change tag reference for 4.14.6 * Fixes changelog entry order in RPM spec (#1320) * Fixes changelog entry order in RPM spec * Updates workflow refs to v4.14.6-rc1 * Updates workflow refs 4.14.6 (#1321) * Migrate dashboard package-building workflow runners to AWS CodeBuild (#1374) * Migrate dashboard package-building workflow runners to AWS CodeBuild Replace the self-hosted `wz-linux-amd64` / `wz-linux-arm64` runners in the 4.x package build workflows with AWS CodeBuild runners (codebuild-github-actions-codebuild-runner-dashboard-<arch>-<run_id>-<run_attempt>), backporting the runner migration done in #1372. - 4_builderpackage_dashboard.yml: setup-variables and validate-job to the amd runner; build-package, test-package and upload-package to the arch-conditional runner. - 4_builderpackage_dashboard_core.yml: build job to the arch-conditional runner (inputs.ARCHITECTURE). - build_base.yml / build_wazuh_dashboard_with_plugins.yml: route arm builds to CodeBuild, keep amd on GitHub-hosted runners (mirrors #1372). Closes opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use format() for conditional CodeBuild runners and run core build as non-root Align with #1372 to avoid runtime errors on the migrated CodeBuild runners: - Conditional `runs-on` expressions cannot nest `${{ }}` inside a string literal (the inner expression is not interpolated, so the runner label would contain the literal text and never match a runner). Replace them with `format('...-{0}-{1}', github.run_id, github.run_attempt)`. - CodeBuild runners execute as root and the OpenSearch Dashboards build tooling misbehaves as root. In 4_builderpackage_dashboard_core.yml run `yarn osd bootstrap` and `yarn build-platform` as a non-root `builduser`, mirroring the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use relative path when renaming the core build artifact The "Rename artifact" step used an absolute GitHub-hosted path (/home/runner/work/wazuh-dashboard/wazuh-dashboard/artifacts/target/...), which does not exist on the AWS CodeBuild runners and makes the `mv` fail. Since the job already sets `working-directory: ./artifacts`, use the relative `target/...` path so it works on any runner. Mirrors the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use github.workspace instead of a shared CURRENT_DIR output for artifact paths * test° * Make package build/test work on AWS CodeBuild runners * Guard systemctl calls so DEB package tests run without systemd * Migrate DEB package tests to use systemd-enabled container and streamline installation scripts * Add workarounds for missing zip, pip3, and openssh-client on AWS CodeBuild ARM runners * Pin reusable workflow refs to 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Migrate GitHub runners to aws runners (#1380) * Add DockerHub secrets and create non-root build user in package build workflow * Commit to test * Add Docker Hub credentials for build user to pull authenticated images * Revert commit to test * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1388) chore(tag-reference): change tag reference for 4.14.6 * feat: bump 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Juan Felipe Gonzalez Ortiz <53414652+felipegonzalezmv@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Julia Magán <80041853+juliamagan@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Juan Felipe Gonzalez Ortiz <53414652+felipegonzalezmv@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Julia Magán <80041853+juliamagan@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> * feat: bump 5.0.0 * Reordering the changelog in RPM packages (#1414) * Revert bump 5.0.0 branch (#1416) revert commit * Infinite requests after navigation (#1400) * fix: apps sometimes not unmounting * chore: add changelog entry * chore: update entry changelog --------- Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> * Remove deprecated isProduction field (#1421) * refactor: remove deprecated is_production field from package builders * refactor: remove deprecated isProduction field * chore: add changelog entry * feat: bump 5.0.0 * Optimize Draft PRs (#1415) * feat: update pull request triggers to include additional types * feat: optimize draft PR handling in build workflow * feat: optimize workflows to skip execution for draft pull requests * feat: add concurrency settings to workflow files for improved draft PR handling * fix: update import path for healthCheckConfig in injected_metadata_service.mock.ts * fix: update expected field counts in management tests * test: enhance notReady server setup with injectable route handler * test: update HomePublicPlugin tests to reflect changes in app registration logic * fix: update processProcOutput to handle additional deprecation warning and browserslist warning * chore: optimize workflows by removing Windows job configurations and commenting out unused test groups * Update security policy (#1426) docs(security): update security policy * Dashboard - Changelog standardization & enforcement (#1417) * chore(devx): add changelog enforcer CI workflow * chore(devx): standardize CHANGELOG format * chore(devx): standardize CHANGELOG format * chore(devx): update bumper to regenerate CHANGELOG on version bump The update_changelog() function now rewrites CHANGELOG.md using the new standard format: version header, Added section with support entry, and Prior versions section with links pruned to the last 2 minor versions. * fix(devx): use branch name without v prefix in prior version links * chore(devx): use actions/checkout@v6 in changelog verifier workflows * feat: add changelog verifier GitHub Action - Introduced a new workflow to verify that CHANGELOG.md is updated for pull requests unless the 'no-changelog' label is applied. feat: implement unit tests for tools scripts - Created a new workflow to run unit tests for tools scripts located under the tools/ directory on pull requests. - Tests are executed in isolated environments using throwaway fixture repositories. feat: add changelog_bump.sh script - Implemented a script to manage the CHANGELOG.md file during version bumps, ensuring proper formatting and prior version references. chore: add .gitignore for test temporary files - Added a .gitignore file to exclude temporary files generated during testing. docs: create README for tools unit tests - Documented the usage and structure of unit tests for tools scripts, including instructions for running tests. test: add run_all.sh to execute all unit tests - Created a script to run all unit tests for tools scripts and report results. test: implement unit tests for changelog_bump.sh - Added comprehensive tests for changelog_bump.sh, covering argument validation, version bumps, and changelog updates. test: implement unit tests for repository_bumper.sh - Added unit tests for repository_bumper.sh, validating argument handling, version bumps, and file updates. * chore: update changelog verifier workflow to use Ubuntu 24.04 and enhance concurrency settings --------- Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Make Discover CSV download row limit configurable (#1442) * feat: make Discover CSV download row limit configurable via reports.csv.maxRows (#1434) * Add change log * feat(discover): add reference to max row in csv export setting --------- Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> * Update CLAUDE configuration and add new skills (#1444) * Update CLAUDE configuration and add new skills - Enhance .gitignore to include specific CLAUDE settings and temporary files. - Revise CLAUDE.md to clarify project context and architecture. - Introduce new skills for analyzing vulnerabilities, checking standards, creating pull requests, developing issues, and resolving CVEs. - Add settings.json for CLAUDE permissions management. - Document workflows and commands for new skills in their respective SKILL.md files. * Enhance CLAUDE.md documentation for local development - Clarify the usage of the yarn run v1.22.22 info Visit https://yarnpkg.com/en/docs/cli/run for documentation about this command. command for the raw OSD dev server. - Introduce a new section detailing the local run model using the repo's Docker dev environment. - Provide instructions for running the full stack locally, including mounting external plugin repositories. * change message to no reference local routes --------- Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> * Create issue-creation skill and update PR template (#1447) * Enhance issue and PR templates for clarity and consistency; add new issue creation skill Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * Remove redundant label type/task from task issue template Signed-off-by: Diego Garcia diego.garcia@wazuh.com * Document stale enhancement label in issue-creation skill for consistency Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * Standardize issue-creation skill to apply real Wazuh labels instead of stale template frontmatter Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * Align issue-creation skill section 3 style with sibling repos (prose, not a redundant label bullet list) Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * Fix task_template.md label claim: remove non-existent type/task, use level/task only Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * fix(skills): point create-pr example at a filled body, not the template The gh pr create example in step 6 pointed --body-file at the blank pull_request_template.md itself, which would file a PR with unfilled placeholder text if run verbatim. Point it at a filled temp file instead. Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> * docs: remove How to Test section from PR template Manual verification steps are now covered elsewhere; drop the redundant section to simplify the template. Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> * docs: rework PR template review checklist Replace the fixed test-command checklist with broader review items covering evidence, documentation, dependencies, and labeling. Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> --------- Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> Signed-off-by: Diego Garcia diego.garcia@wazuh.com Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> * feat: bump 5.0.0 * feat: revert 5.0.0 references * Enforce Prettier formatting check on commit to prevent Prettier failures in PR pipelines (#1449) chore(devx): add prettier check to pre-commit hook and CI workflow * feat: bump 5.0.0 * Merge 4.14.8 into 5.0.0 (#1460) * feat: bump 4.14.8 * Merge 4.14.7 into 4.14.8 (#1458) * feat: bump 4.14.7 * Change tag reference for 4.14.7 (#1432) fix: update tag references to 4.14.7 in dashboard build workflows --------- Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> --------- Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> * Change bumper_repository workflows merge type (#1464) fix: use squash merge strategy in bumper repository workflows Change gh pr merge from --merge to --squash in 4_/5_/6_bumper_repository.yml so bump PRs land as a single squashed commit, consistent with this repo's squash-merge convention for single-purpose PRs. Related to #1459 Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * Add wazuh-ai-assistant to the 5.x package build pipeline (#1465) wazuh/wazuh-dashboard-plugins#8790 adds the new Wazuh AI Assistant plugin under plugins/wazuh-ai-assistant/, alongside main, wazuh-core and wazuh-check-updates. The build-outputs and build-plugins matrices in 5_builderpackage_dashboard.yml are hardcoded per plugin, so without this change the new plugin would never be built or bundled into the final wazuh-dashboard package. Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Merge 4.14.8 into 5.0.0 (#1474) * Change bumper_repository workflows merge type (#1463) * fix: use squash merge strategy in bumper repository workflow Change gh pr merge from --merge to --squash in 4_bumper_repository.yml so bump PRs land as a single squashed commit, consistent with this repo's squash-merge convention for single-purpose PRs. Related to #1459 Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * fix: correct inverted changelog dates in wazuh-dashboard.spec The 4.14.8 and 4.10.5 changelog entries had inverted dates (4.14.8 dated before 4.10.5, breaking the otherwise strictly-descending order). Swap the two dates so 4.14.8 correctly sits above 4.10.5 chronologically. Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * fix: reorder changelog entries instead of altering their dates The previous commit incorrectly swapped the 4.14.8 and 4.10.5 entries' dates to fix the ordering. That falsifies each entry's actual release date. Instead, reorder the two entries (move 4.10.5, dated later, above 4.14.8) so the changelog restores descending order while keeping each entry's real date unchanged. Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> --------- Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * Merge 4.14.7 into 4.14.8 (#1473) feat: bump 4.14.7 Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> --------- Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> Co-authored-by: Diego García <82405377+Ripdiegozz@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> Signed-off-by: Diego Garcia diego.garcia@wazuh.com Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Rodrigo López <37187963+rodrigofez@users.noreply.github.com> Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> Co-authored-by: Diego García <82405377+Ripdiegozz@users.noreply.github.com> Co-authored-by: Gonzalo Arancibia <72573241+gonzaarancibia@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> Co-authored-by: Juan Felipe Gonzalez Ortiz <53414652+felipegonzalezmv@users.noreply.github.com> Co-authored-by: Julia Magán <80041853+juliamagan@users.noreply.github.com> Co-authored-by: Vikman Fernandez-Castro <vmfdez90@gmail.com>

* feat: bump 5.0.0 * Migrate GitHub runners to AWS runners (#1372) * Migrate GitHub runners to AWS runners * Refactor runner naming format in workflow files for consistency * Update revision retrieval method in build workflow to use package.json * Add non-root build user and update bootstrap command for permissions * Refactor runner naming format in workflow files to use format function and create non-root build user in plugin build workflow * Update build commands to run as non-root user for improved security * Fix artifact renaming path in build workflow for consistency * Add installation of zip utility for packaging plugins * Refactor artifact paths in build workflow to use github.workspace for consistency * Install zip utility conditionally for arm64 architecture in build workflow * Add workarounds for AWS CodeBuild runners to handle missing tools and permissions * Add Docker Hub login step and conditional Docker daemon start for AWS CodeBuild * Improve Docker daemon startup process in build workflow for ARM architecture * Add Docker Hub login and start Docker daemon for AWS CodeBuild runners * Add workarounds for AWS CodeBuild runners to handle systemd service management * Refactor DEB package testing to use systemd-enabled container and streamline upgrade checks * Add workaround to install pip3 for AWS CodeBuild ARM runners * Add missing apt-get update before package installation in deb-test scripts * Add workaround for AWS CodeBuild ARM runners to install pip3 and openssh-client * Refactor GitHub Actions workflows to use formatted runner names for AWS CodeBuild runners * Refactor GitHub Actions workflows to use updated runner names for AWS CodeBuild * Improve errors formatting in check flyout (#1379) * feat: improve error formatting in check flyout and not ready yet callouts * chore(changelog): add entry --------- Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> * Remove references to plugins not installed (#1382) * chore: remove anomalyDetectionDashboard build references * chore: add changelog entry * Hide all visible references to the Sample Data App (#1390) * Remove references to the Sample Data App in getNoItemsMessage * Remove all references to the Sample Data App in getNoItemsMessage tests * Merge 4.14.6 into 4.14.7 (#1393) (#1394) * Migrate dashboard package-building workflow runners to AWS CodeBuild (#1374) * Migrate dashboard package-building workflow runners to AWS CodeBuild Replace the self-hosted `wz-linux-amd64` / `wz-linux-arm64` runners in the 4.x package build workflows with AWS CodeBuild runners (codebuild-github-actions-codebuild-runner-dashboard-<arch>-<run_id>-<run_attempt>), backporting the runner migration done in #1372. - 4_builderpackage_dashboard.yml: setup-variables and validate-job to the amd runner; build-package, test-package and upload-package to the arch-conditional runner. - 4_builderpackage_dashboard_core.yml: build job to the arch-conditional runner (inputs.ARCHITECTURE). - build_base.yml / build_wazuh_dashboard_with_plugins.yml: route arm builds to CodeBuild, keep amd on GitHub-hosted runners (mirrors #1372). Closes opensearch-project#5246 * Use format() for conditional CodeBuild runners and run core build as non-root Align with #1372 to avoid runtime errors on the migrated CodeBuild runners: - Conditional `runs-on` expressions cannot nest `${{ }}` inside a string literal (the inner expression is not interpolated, so the runner label would contain the literal text and never match a runner). Replace them with `format(...-{0}-{1}, github.run_id, github.run_attempt)`. - CodeBuild runners execute as root and the OpenSearch Dashboards build tooling misbehaves as root. In 4_builderpackage_dashboard_core.yml run `yarn osd bootstrap` and `yarn build-platform` as a non-root `builduser`, mirroring the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 * Use relative path when renaming the core build artifact The "Rename artifact" step used an absolute GitHub-hosted path (/home/runner/work/wazuh-dashboard/wazuh-dashboard/artifacts/target/...), which does not exist on the AWS CodeBuild runners and makes the `mv` fail. Since the job already sets `working-directory: ./artifacts`, use the relative `target/...` path so it works on any runner. Mirrors the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 * Use github.workspace instead of a shared CURRENT_DIR output for artifact paths * test° * Make package build/test work on AWS CodeBuild runners * Guard systemctl calls so DEB package tests run without systemd * Migrate DEB package tests to use systemd-enabled container and streamline installation scripts * Add workarounds for missing zip, pip3, and openssh-client on AWS CodeBuild ARM runners * Pin reusable workflow refs to 4.14.6 --------- * Migrate GitHub runners to aws runners (#1380) * Add DockerHub secrets and create non-root build user in package build workflow * Commit to test * Add Docker Hub credentials for build user to pull authenticated images * Revert commit to test * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1388) chore(tag-reference): change tag reference for 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> * Migrate artifact handling to S3 in dashboard workflows (#1401) * Enhance AWS S3 integration in build workflows by adding execution repository input and updating artifact upload processes * Inherit secrets in build jobs for improved security and access management * Fix S3 upload commands in build workflow to remove redundant 's3://' prefix * Add logging for downloaded artifacts in S3 workflow * Fix S3 artifact download path by adding trailing slash to bucket URL * Upgrade AWS CLI configuration to use version 6 in dashboard workflows * Migrate artifact downloads to S3 in dashboard workflows and update package paths in test scripts * Fix package path in SCP command for RPM installation in dashboard build workflow * Update execution repository references to version 5 in dashboard workflows * Fix package generation failed because the SHA-512 file was missing (#1407) fix(workflow): empty variable interpolation on uploading sha512 file * Merge 4.14.7 into 5.0.0 (#1409) * Migrate artifact handling to S3 in dashboard workflows (#1397) * Adds changelog entries for versions 4.10.2–4.10.5 (#1312) * Refactor Allocator instance/composite names and add custom AWS tagging for better resource management 4x (#1284) * feat: refactor AWS instance creation with custom tags in build workflow * Refactor AWS instance creation to streamline custom tagging and improve resource management * feat: bump 4.14.6 * Revert "Bump 4.14.6 branch" * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1318) chore(tag-reference): change tag reference for 4.14.6 * Fixes changelog entry order in RPM spec (#1320) * Fixes changelog entry order in RPM spec * Updates workflow refs to v4.14.6-rc1 * Updates workflow refs 4.14.6 (#1321) * Migrate dashboard package-building workflow runners to AWS CodeBuild (#1374) * Migrate dashboard package-building workflow runners to AWS CodeBuild Replace the self-hosted `wz-linux-amd64` / `wz-linux-arm64` runners in the 4.x package build workflows with AWS CodeBuild runners (codebuild-github-actions-codebuild-runner-dashboard-<arch>-<run_id>-<run_attempt>), backporting the runner migration done in #1372. - 4_builderpackage_dashboard.yml: setup-variables and validate-job to the amd runner; build-package, test-package and upload-package to the arch-conditional runner. - 4_builderpackage_dashboard_core.yml: build job to the arch-conditional runner (inputs.ARCHITECTURE). - build_base.yml / build_wazuh_dashboard_with_plugins.yml: route arm builds to CodeBuild, keep amd on GitHub-hosted runners (mirrors #1372). Closes opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use format() for conditional CodeBuild runners and run core build as non-root Align with #1372 to avoid runtime errors on the migrated CodeBuild runners: - Conditional `runs-on` expressions cannot nest `${{ }}` inside a string literal (the inner expression is not interpolated, so the runner label would contain the literal text and never match a runner). Replace them with `format('...-{0}-{1}', github.run_id, github.run_attempt)`. - CodeBuild runners execute as root and the OpenSearch Dashboards build tooling misbehaves as root. In 4_builderpackage_dashboard_core.yml run `yarn osd bootstrap` and `yarn build-platform` as a non-root `builduser`, mirroring the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use relative path when renaming the core build artifact The "Rename artifact" step used an absolute GitHub-hosted path (/home/runner/work/wazuh-dashboard/wazuh-dashboard/artifacts/target/...), which does not exist on the AWS CodeBuild runners and makes the `mv` fail. Since the job already sets `working-directory: ./artifacts`, use the relative `target/...` path so it works on any runner. Mirrors the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use github.workspace instead of a shared CURRENT_DIR output for artifact paths * test° * Make package build/test work on AWS CodeBuild runners * Guard systemctl calls so DEB package tests run without systemd * Migrate DEB package tests to use systemd-enabled container and streamline installation scripts * Add workarounds for missing zip, pip3, and openssh-client on AWS CodeBuild ARM runners * Pin reusable workflow refs to 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Migrate GitHub runners to aws runners (#1380) * Add DockerHub secrets and create non-root build user in package build workflow * Commit to test * Add Docker Hub credentials for build user to pull authenticated images * Revert commit to test * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1388) chore(tag-reference): change tag reference for 4.14.6 * feat: migrate artifact handling to S3 in dashboard workflows * Commit to test * feat: remove AWS secrets from dashboard build workflow * feat: remove AWS IAM role and region secrets from dashboard build workflow * feat: inherit secrets in the build job for dashboard package workflow * feat: add workflow_name input to plugin workflows in dashboard package build * feat: migrate artifact handling to use EXECUTION_REPOSITORY for S3 uploads * feat: update AWS CLI configuration to use v6 and assume role for S3 uploads * feat: update AWS role for artifact handling in dashboard workflow * feat: update CI_DEV_INTERNAL_BUCKET to use secrets and inherit secrets for plugin builds * feat: update CI_DEV_INTERNAL_BUCKET to use secrets for improved security * feat: add id-token permission for plugin build jobs in dashboard workflow * feat: update workflow references to version 4.14.6 for dashboard and plugins * Commit to test * Revert commit to test --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Juan Felipe Gonzalez Ortiz <53414652+felipegonzalezmv@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Julia Magán <80041853+juliamagan@users.noreply.github.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> * Merge 4.14.6 into 4.14.7 (#1408) * Adds changelog entries for versions 4.10.2–4.10.5 (#1312) * Refactor Allocator instance/composite names and add custom AWS tagging for better resource management 4x (#1284) * feat: refactor AWS instance creation with custom tags in build workflow * Refactor AWS instance creation to streamline custom tagging and improve resource management * feat: bump 4.14.6 * Revert "Bump 4.14.6 branch" * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1318) chore(tag-reference): change tag reference for 4.14.6 * Fixes changelog entry order in RPM spec (#1320) * Fixes changelog entry order in RPM spec * Updates workflow refs to v4.14.6-rc1 * Updates workflow refs 4.14.6 (#1321) * Migrate dashboard package-building workflow runners to AWS CodeBuild (#1374) * Migrate dashboard package-building workflow runners to AWS CodeBuild Replace the self-hosted `wz-linux-amd64` / `wz-linux-arm64` runners in the 4.x package build workflows with AWS CodeBuild runners (codebuild-github-actions-codebuild-runner-dashboard-<arch>-<run_id>-<run_attempt>), backporting the runner migration done in #1372. - 4_builderpackage_dashboard.yml: setup-variables and validate-job to the amd runner; build-package, test-package and upload-package to the arch-conditional runner. - 4_builderpackage_dashboard_core.yml: build job to the arch-conditional runner (inputs.ARCHITECTURE). - build_base.yml / build_wazuh_dashboard_with_plugins.yml: route arm builds to CodeBuild, keep amd on GitHub-hosted runners (mirrors #1372). Closes opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use format() for conditional CodeBuild runners and run core build as non-root Align with #1372 to avoid runtime errors on the migrated CodeBuild runners: - Conditional `runs-on` expressions cannot nest `${{ }}` inside a string literal (the inner expression is not interpolated, so the runner label would contain the literal text and never match a runner). Replace them with `format('...-{0}-{1}', github.run_id, github.run_attempt)`. - CodeBuild runners execute as root and the OpenSearch Dashboards build tooling misbehaves as root. In 4_builderpackage_dashboard_core.yml run `yarn osd bootstrap` and `yarn build-platform` as a non-root `builduser`, mirroring the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use relative path when renaming the core build artifact The "Rename artifact" step used an absolute GitHub-hosted path (/home/runner/work/wazuh-dashboard/wazuh-dashboard/artifacts/target/...), which does not exist on the AWS CodeBuild runners and makes the `mv` fail. Since the job already sets `working-directory: ./artifacts`, use the relative `target/...` path so it works on any runner. Mirrors the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use github.workspace instead of a shared CURRENT_DIR output for artifact paths * test° * Make package build/test work on AWS CodeBuild runners * Guard systemctl calls so DEB package tests run without systemd * Migrate DEB package tests to use systemd-enabled container and streamline installation scripts * Add workarounds for missing zip, pip3, and openssh-client on AWS CodeBuild ARM runners * Pin reusable workflow refs to 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Migrate GitHub runners to aws runners (#1380) * Add DockerHub secrets and create non-root build user in package build workflow * Commit to test * Add Docker Hub credentials for build user to pull authenticated images * Revert commit to test * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1388) chore(tag-reference): change tag reference for 4.14.6 * feat: bump 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Juan Felipe Gonzalez Ortiz <53414652+felipegonzalezmv@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Julia Magán <80041853+juliamagan@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Juan Felipe Gonzalez Ortiz <53414652+felipegonzalezmv@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Julia Magán <80041853+juliamagan@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> * feat: bump 5.0.0 * Reordering the changelog in RPM packages (#1414) * Revert bump 5.0.0 branch (#1416) revert commit * Infinite requests after navigation (#1400) * fix: apps sometimes not unmounting * chore: add changelog entry * chore: update entry changelog --------- Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> * Remove deprecated isProduction field (#1421) * refactor: remove deprecated is_production field from package builders * refactor: remove deprecated isProduction field * chore: add changelog entry * feat: bump 5.0.0 * Optimize Draft PRs (#1415) * feat: update pull request triggers to include additional types * feat: optimize draft PR handling in build workflow * feat: optimize workflows to skip execution for draft pull requests * feat: add concurrency settings to workflow files for improved draft PR handling * fix: update import path for healthCheckConfig in injected_metadata_service.mock.ts * fix: update expected field counts in management tests * test: enhance notReady server setup with injectable route handler * test: update HomePublicPlugin tests to reflect changes in app registration logic * fix: update processProcOutput to handle additional deprecation warning and browserslist warning * chore: optimize workflows by removing Windows job configurations and commenting out unused test groups * Update security policy (#1426) docs(security): update security policy * Dashboard - Changelog standardization & enforcement (#1417) * chore(devx): add changelog enforcer CI workflow * chore(devx): standardize CHANGELOG format * chore(devx): standardize CHANGELOG format * chore(devx): update bumper to regenerate CHANGELOG on version bump The update_changelog() function now rewrites CHANGELOG.md using the new standard format: version header, Added section with support entry, and Prior versions section with links pruned to the last 2 minor versions. * fix(devx): use branch name without v prefix in prior version links * chore(devx): use actions/checkout@v6 in changelog verifier workflows * feat: add changelog verifier GitHub Action - Introduced a new workflow to verify that CHANGELOG.md is updated for pull requests unless the 'no-changelog' label is applied. feat: implement unit tests for tools scripts - Created a new workflow to run unit tests for tools scripts located under the tools/ directory on pull requests. - Tests are executed in isolated environments using throwaway fixture repositories. feat: add changelog_bump.sh script - Implemented a script to manage the CHANGELOG.md file during version bumps, ensuring proper formatting and prior version references. chore: add .gitignore for test temporary files - Added a .gitignore file to exclude temporary files generated during testing. docs: create README for tools unit tests - Documented the usage and structure of unit tests for tools scripts, including instructions for running tests. test: add run_all.sh to execute all unit tests - Created a script to run all unit tests for tools scripts and report results. test: implement unit tests for changelog_bump.sh - Added comprehensive tests for changelog_bump.sh, covering argument validation, version bumps, and changelog updates. test: implement unit tests for repository_bumper.sh - Added unit tests for repository_bumper.sh, validating argument handling, version bumps, and file updates. * chore: update changelog verifier workflow to use Ubuntu 24.04 and enhance concurrency settings --------- Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Make Discover CSV download row limit configurable (#1442) * feat: make Discover CSV download row limit configurable via reports.csv.maxRows (#1434) * Add change log * feat(discover): add reference to max row in csv export setting --------- Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> * Update CLAUDE configuration and add new skills (#1444) * Update CLAUDE configuration and add new skills - Enhance .gitignore to include specific CLAUDE settings and temporary files. - Revise CLAUDE.md to clarify project context and architecture. - Introduce new skills for analyzing vulnerabilities, checking standards, creating pull requests, developing issues, and resolving CVEs. - Add settings.json for CLAUDE permissions management. - Document workflows and commands for new skills in their respective SKILL.md files. * Enhance CLAUDE.md documentation for local development - Clarify the usage of the yarn run v1.22.22 info Visit https://yarnpkg.com/en/docs/cli/run for documentation about this command. command for the raw OSD dev server. - Introduce a new section detailing the local run model using the repo's Docker dev environment. - Provide instructions for running the full stack locally, including mounting external plugin repositories. * change message to no reference local routes --------- Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> * Create issue-creation skill and update PR template (#1447) * Enhance issue and PR templates for clarity and consistency; add new issue creation skill Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * Remove redundant label type/task from task issue template Signed-off-by: Diego Garcia diego.garcia@wazuh.com * Document stale enhancement label in issue-creation skill for consistency Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * Standardize issue-creation skill to apply real Wazuh labels instead of stale template frontmatter Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * Align issue-creation skill section 3 style with sibling repos (prose, not a redundant label bullet list) Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * Fix task_template.md label claim: remove non-existent type/task, use level/task only Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * fix(skills): point create-pr example at a filled body, not the template The gh pr create example in step 6 pointed --body-file at the blank pull_request_template.md itself, which would file a PR with unfilled placeholder text if run verbatim. Point it at a filled temp file instead. Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> * docs: remove How to Test section from PR template Manual verification steps are now covered elsewhere; drop the redundant section to simplify the template. Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> * docs: rework PR template review checklist Replace the fixed test-command checklist with broader review items covering evidence, documentation, dependencies, and labeling. Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> --------- Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> Signed-off-by: Diego Garcia diego.garcia@wazuh.com Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> * feat: bump 5.0.0 * feat: revert 5.0.0 references * Enforce Prettier formatting check on commit to prevent Prettier failures in PR pipelines (#1449) chore(devx): add prettier check to pre-commit hook and CI workflow * feat: bump 5.0.0 * Merge 4.14.8 into 5.0.0 (#1460) * feat: bump 4.14.8 * Merge 4.14.7 into 4.14.8 (#1458) * feat: bump 4.14.7 * Change tag reference for 4.14.7 (#1432) fix: update tag references to 4.14.7 in dashboard build workflows --------- Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> --------- Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> * Change bumper_repository workflows merge type (#1464) fix: use squash merge strategy in bumper repository workflows Change gh pr merge from --merge to --squash in 4_/5_/6_bumper_repository.yml so bump PRs land as a single squashed commit, consistent with this repo's squash-merge convention for single-purpose PRs. Related to #1459 Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * Add wazuh-ai-assistant to the 5.x package build pipeline (#1465) wazuh/wazuh-dashboard-plugins#8790 adds the new Wazuh AI Assistant plugin under plugins/wazuh-ai-assistant/, alongside main, wazuh-core and wazuh-check-updates. The build-outputs and build-plugins matrices in 5_builderpackage_dashboard.yml are hardcoded per plugin, so without this change the new plugin would never be built or bundled into the final wazuh-dashboard package. Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Merge 4.14.8 into 5.0.0 (#1474) * Change bumper_repository workflows merge type (#1463) * fix: use squash merge strategy in bumper repository workflow Change gh pr merge from --merge to --squash in 4_bumper_repository.yml so bump PRs land as a single squashed commit, consistent with this repo's squash-merge convention for single-purpose PRs. Related to #1459 Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * fix: correct inverted changelog dates in wazuh-dashboard.spec The 4.14.8 and 4.10.5 changelog entries had inverted dates (4.14.8 dated before 4.10.5, breaking the otherwise strictly-descending order). Swap the two dates so 4.14.8 correctly sits above 4.10.5 chronologically. Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * fix: reorder changelog entries instead of altering their dates The previous commit incorrectly swapped the 4.14.8 and 4.10.5 entries' dates to fix the ordering. That falsifies each entry's actual release date. Instead, reorder the two entries (move 4.10.5, dated later, above 4.14.8) so the changelog restores descending order while keeping each entry's real date unchanged. Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> --------- Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * Merge 4.14.7 into 4.14.8 (#1473) feat: bump 4.14.7 Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> --------- Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> Co-authored-by: Diego García <82405377+Ripdiegozz@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> * Add AI assistant encryption key on installation (#1481) * feat: generate wazuh_ai_assistant encryption key on install Provision a random base64-encoded 32-byte wazuh_ai_assistant.encryptionKey into the OpenSearch Dashboards keystore during first install, reusing the existing keystore-creation guard in the deb postinst and rpm %post scripts. Falls back through openssl, /dev/urandom, and the bundled Node binary; logs a non-fatal warning and continues the install if generation fails. Upgrades are a no-op by design. Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * test: verify wazuh_ai_assistant.encryptionKey in CI package smoke tests Extend the existing deb install/uninstall smoke test and the RPM install CI step to assert opensearch-dashboards-keystore list contains the wazuh_ai_assistant.encryptionKey entry after a fresh install, catching regressions in the postinst/%post key-provisioning logic automatically. Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> --------- Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * Change the changelog format to use a table per block (#1482) * Change the changelog format to use a table per block Render every Added/Changed/Fixed/Removed block as an Issue/Comment table, moving the existing references into the Issue column and keeping the descriptions unchanged. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Signed-off-by: Juan Felipe Gonzalez <felipegonzalezmv@hotmail.com> * Generate changelog tables in the changelog bumper The bumper reset CHANGELOG.md to bullet-list sections seeded with a "- Support for Wazuh X.Y.Z" entry. Emit an empty "| Issue | Comment |" table per section instead, so a bumped changelog starts in the table format, and drop the seeded entry, which had no reference to put in the Issue column. Update the tests, their fixtures and the tools/tests README accordingly. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Signed-off-by: Juan Felipe Gonzalez <felipegonzalezmv@hotmail.com> * Remove the Support for Wazuh changelog entry The entry had no issue or pull request reference, so in the new table format it rendered as a row with an empty Issue column. The changelog bumper no longer seeds it either. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Signed-off-by: Juan Felipe Gonzalez <felipegonzalezmv@hotmail.com> * Add missing issue to the changelog entry --------- Signed-off-by: Juan Felipe Gonzalez <felipegonzalezmv@hotmail.com> Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Merge 4.14.9 into 5.0.0 (#1487) Bump 4.14.9 branch (#1485) feat: bump 4.14.9 Co-authored-by: Wazuh CI <22834044+wazuhci@users.noreply.github.com> --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> Signed-off-by: Diego Garcia diego.garcia@wazuh.com Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> Signed-off-by: Juan Felipe Gonzalez <felipegonzalezmv@hotmail.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Rodrigo López <37187963+rodrigofez@users.noreply.github.com> Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> Co-authored-by: Diego García <82405377+Ripdiegozz@users.noreply.github.com> Co-authored-by: Gonzalo Arancibia <72573241+gonzaarancibia@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> Co-authored-by: Juan Felipe Gonzalez Ortiz <53414652+felipegonzalezmv@users.noreply.github.com> Co-authored-by: Julia Magán <80041853+juliamagan@users.noreply.github.com> Co-authored-by: Vikman Fernandez-Castro <vmfdez90@gmail.com> Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>

* feat: bump 5.0.1 * Merge 5.0.0 into 5.0.1 (#1461) * Dashboard - Changelog standardization & enforcement (#1417) * chore(devx): add changelog enforcer CI workflow * chore(devx): standardize CHANGELOG format * chore(devx): standardize CHANGELOG format * chore(devx): update bumper to regenerate CHANGELOG on version bump The update_changelog() function now rewrites CHANGELOG.md using the new standard format: version header, Added section with support entry, and Prior versions section with links pruned to the last 2 minor versions. * fix(devx): use branch name without v prefix in prior version links * chore(devx): use actions/checkout@v6 in changelog verifier workflows * feat: add changelog verifier GitHub Action - Introduced a new workflow to verify that CHANGELOG.md is updated for pull requests unless the 'no-changelog' label is applied. feat: implement unit tests for tools scripts - Created a new workflow to run unit tests for tools scripts located under the tools/ directory on pull requests. - Tests are executed in isolated environments using throwaway fixture repositories. feat: add changelog_bump.sh script - Implemented a script to manage the CHANGELOG.md file during version bumps, ensuring proper formatting and prior version references. chore: add .gitignore for test temporary files - Added a .gitignore file to exclude temporary files generated during testing. docs: create README for tools unit tests - Documented the usage and structure of unit tests for tools scripts, including instructions for running tests. test: add run_all.sh to execute all unit tests - Created a script to run all unit tests for tools scripts and report results. test: implement unit tests for changelog_bump.sh - Added comprehensive tests for changelog_bump.sh, covering argument validation, version bumps, and changelog updates. test: implement unit tests for repository_bumper.sh - Added unit tests for repository_bumper.sh, validating argument handling, version bumps, and file updates. * chore: update changelog verifier workflow to use Ubuntu 24.04 and enhance concurrency settings --------- Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Make Discover CSV download row limit configurable (#1442) * feat: make Discover CSV download row limit configurable via reports.csv.maxRows (#1434) * Add change log * feat(discover): add reference to max row in csv export setting --------- Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> * Update CLAUDE configuration and add new skills (#1444) * Update CLAUDE configuration and add new skills - Enhance .gitignore to include specific CLAUDE settings and temporary files. - Revise CLAUDE.md to clarify project context and architecture. - Introduce new skills for analyzing vulnerabilities, checking standards, creating pull requests, developing issues, and resolving CVEs. - Add settings.json for CLAUDE permissions management. - Document workflows and commands for new skills in their respective SKILL.md files. * Enhance CLAUDE.md documentation for local development - Clarify the usage of the yarn run v1.22.22 info Visit https://yarnpkg.com/en/docs/cli/run for documentation about this command. command for the raw OSD dev server. - Introduce a new section detailing the local run model using the repo's Docker dev environment. - Provide instructions for running the full stack locally, including mounting external plugin repositories. * change message to no reference local routes --------- Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> * Create issue-creation skill and update PR template (#1447) * Enhance issue and PR templates for clarity and consistency; add new issue creation skill Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * Remove redundant label type/task from task issue template Signed-off-by: Diego Garcia diego.garcia@wazuh.com * Document stale enhancement label in issue-creation skill for consistency Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * Standardize issue-creation skill to apply real Wazuh labels instead of stale template frontmatter Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * Align issue-creation skill section 3 style with sibling repos (prose, not a redundant label bullet list) Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * Fix task_template.md label claim: remove non-existent type/task, use level/task only Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * fix(skills): point create-pr example at a filled body, not the template The gh pr create example in step 6 pointed --body-file at the blank pull_request_template.md itself, which would file a PR with unfilled placeholder text if run verbatim. Point it at a filled temp file instead. Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> * docs: remove How to Test section from PR template Manual verification steps are now covered elsewhere; drop the redundant section to simplify the template. Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> * docs: rework PR template review checklist Replace the fixed test-command checklist with broader review items covering evidence, documentation, dependencies, and labeling. Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> --------- Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> Signed-off-by: Diego Garcia diego.garcia@wazuh.com Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> * feat: bump 5.0.0 * feat: revert 5.0.0 references * Enforce Prettier formatting check on commit to prevent Prettier failures in PR pipelines (#1449) chore(devx): add prettier check to pre-commit hook and CI workflow * feat: bump 5.0.0 * Merge 4.14.8 into 5.0.0 (#1460) * feat: bump 4.14.8 * Merge 4.14.7 into 4.14.8 (#1458) * feat: bump 4.14.7 * Change tag reference for 4.14.7 (#1432) fix: update tag references to 4.14.7 in dashboard build workflows --------- Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> --------- Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> * Fix prettier --------- Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> Signed-off-by: Diego Garcia diego.garcia@wazuh.com Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> Co-authored-by: Gonzalo Arancibia <72573241+gonzaarancibia@users.noreply.github.com> Co-authored-by: Juan Felipe Gonzalez Ortiz <53414652+felipegonzalezmv@users.noreply.github.com> Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> Co-authored-by: Diego García <82405377+Ripdiegozz@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> * Merge 5.0.0 into 5.0.1 (#1475) * feat: bump 5.0.0 * Migrate GitHub runners to AWS runners (#1372) * Migrate GitHub runners to AWS runners * Refactor runner naming format in workflow files for consistency * Update revision retrieval method in build workflow to use package.json * Add non-root build user and update bootstrap command for permissions * Refactor runner naming format in workflow files to use format function and create non-root build user in plugin build workflow * Update build commands to run as non-root user for improved security * Fix artifact renaming path in build workflow for consistency * Add installation of zip utility for packaging plugins * Refactor artifact paths in build workflow to use github.workspace for consistency * Install zip utility conditionally for arm64 architecture in build workflow * Add workarounds for AWS CodeBuild runners to handle missing tools and permissions * Add Docker Hub login step and conditional Docker daemon start for AWS CodeBuild * Improve Docker daemon startup process in build workflow for ARM architecture * Add Docker Hub login and start Docker daemon for AWS CodeBuild runners * Add workarounds for AWS CodeBuild runners to handle systemd service management * Refactor DEB package testing to use systemd-enabled container and streamline upgrade checks * Add workaround to install pip3 for AWS CodeBuild ARM runners * Add missing apt-get update before package installation in deb-test scripts * Add workaround for AWS CodeBuild ARM runners to install pip3 and openssh-client * Refactor GitHub Actions workflows to use formatted runner names for AWS CodeBuild runners * Refactor GitHub Actions workflows to use updated runner names for AWS CodeBuild * Improve errors formatting in check flyout (#1379) * feat: improve error formatting in check flyout and not ready yet callouts * chore(changelog): add entry --------- Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> * Remove references to plugins not installed (#1382) * chore: remove anomalyDetectionDashboard build references * chore: add changelog entry * Hide all visible references to the Sample Data App (#1390) * Remove references to the Sample Data App in getNoItemsMessage * Remove all references to the Sample Data App in getNoItemsMessage tests * Merge 4.14.6 into 4.14.7 (#1393) (#1394) * Migrate dashboard package-building workflow runners to AWS CodeBuild (#1374) * Migrate dashboard package-building workflow runners to AWS CodeBuild Replace the self-hosted `wz-linux-amd64` / `wz-linux-arm64` runners in the 4.x package build workflows with AWS CodeBuild runners (codebuild-github-actions-codebuild-runner-dashboard-<arch>-<run_id>-<run_attempt>), backporting the runner migration done in wazuh/wazuh-dashboard#1372. - 4_builderpackage_dashboard.yml: setup-variables and validate-job to the amd runner; build-package, test-package and upload-package to the arch-conditional runner. - 4_builderpackage_dashboard_core.yml: build job to the arch-conditional runner (inputs.ARCHITECTURE). - build_base.yml / build_wazuh_dashboard_with_plugins.yml: route arm builds to CodeBuild, keep amd on GitHub-hosted runners (mirrors #1372). Closes #5246 * Use format() for conditional CodeBuild runners and run core build as non-root Align with wazuh/wazuh-dashboard#1372 to avoid runtime errors on the migrated CodeBuild runners: - Conditional `runs-on` expressions cannot nest `${{ }}` inside a string literal (the inner expression is not interpolated, so the runner label would contain the literal text and never match a runner). Replace them with `format(...-{0}-{1}, github.run_id, github.run_attempt)`. - CodeBuild runners execute as root and the OpenSearch Dashboards build tooling misbehaves as root. In 4_builderpackage_dashboard_core.yml run `yarn osd bootstrap` and `yarn build-platform` as a non-root `builduser`, mirroring the fix applied to the 5.x core workflow in #1372. Refs #5246 * Use relative path when renaming the core build artifact The "Rename artifact" step used an absolute GitHub-hosted path (/home/runner/work/wazuh-dashboard/wazuh-dashboard/artifacts/target/...), which does not exist on the AWS CodeBuild runners and makes the `mv` fail. Since the job already sets `working-directory: ./artifacts`, use the relative `target/...` path so it works on any runner. Mirrors the fix applied to the 5.x core workflow in wazuh/wazuh-dashboard#1372. Refs #5246 * Use github.workspace instead of a shared CURRENT_DIR output for artifact paths * test° * Make package build/test work on AWS CodeBuild runners * Guard systemctl calls so DEB package tests run without systemd * Migrate DEB package tests to use systemd-enabled container and streamline installation scripts * Add workarounds for missing zip, pip3, and openssh-client on AWS CodeBuild ARM runners * Pin reusable workflow refs to 4.14.6 --------- * Migrate GitHub runners to aws runners (#1380) * Add DockerHub secrets and create non-root build user in package build workflow * Commit to test * Add Docker Hub credentials for build user to pull authenticated images * Revert commit to test * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1388) chore(tag-reference): change tag reference for 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> * Migrate artifact handling to S3 in dashboard workflows (#1401) * Enhance AWS S3 integration in build workflows by adding execution repository input and updating artifact upload processes * Inherit secrets in build jobs for improved security and access management * Fix S3 upload commands in build workflow to remove redundant 's3://' prefix * Add logging for downloaded artifacts in S3 workflow * Fix S3 artifact download path by adding trailing slash to bucket URL * Upgrade AWS CLI configuration to use version 6 in dashboard workflows * Migrate artifact downloads to S3 in dashboard workflows and update package paths in test scripts * Fix package path in SCP command for RPM installation in dashboard build workflow * Update execution repository references to version 5 in dashboard workflows * Fix package generation failed because the SHA-512 file was missing (#1407) fix(workflow): empty variable interpolation on uploading sha512 file * Merge 4.14.7 into 5.0.0 (#1409) * Migrate artifact handling to S3 in dashboard workflows (#1397) * Adds changelog entries for versions 4.10.2–4.10.5 (#1312) * Refactor Allocator instance/composite names and add custom AWS tagging for better resource management 4x (#1284) * feat: refactor AWS instance creation with custom tags in build workflow * Refactor AWS instance creation to streamline custom tagging and improve resource management * feat: bump 4.14.6 * Revert "Bump 4.14.6 branch" * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1318) chore(tag-reference): change tag reference for 4.14.6 * Fixes changelog entry order in RPM spec (#1320) * Fixes changelog entry order in RPM spec * Updates workflow refs to v4.14.6-rc1 * Updates workflow refs 4.14.6 (#1321) * Migrate dashboard package-building workflow runners to AWS CodeBuild (#1374) * Migrate dashboard package-building workflow runners to AWS CodeBuild Replace the self-hosted `wz-linux-amd64` / `wz-linux-arm64` runners in the 4.x package build workflows with AWS CodeBuild runners (codebuild-github-actions-codebuild-runner-dashboard-<arch>-<run_id>-<run_attempt>), backporting the runner migration done in wazuh/wazuh-dashboard#1372. - 4_builderpackage_dashboard.yml: setup-variables and validate-job to the amd runner; build-package, test-package and upload-package to the arch-conditional runner. - 4_builderpackage_dashboard_core.yml: build job to the arch-conditional runner (inputs.ARCHITECTURE). - build_base.yml / build_wazuh_dashboard_with_plugins.yml: route arm builds to CodeBuild, keep amd on GitHub-hosted runners (mirrors #1372). Closes #5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use format() for conditional CodeBuild runners and run core build as non-root Align with wazuh/wazuh-dashboard#1372 to avoid runtime errors on the migrated CodeBuild runners: - Conditional `runs-on` expressions cannot nest `${{ }}` inside a string literal (the inner expression is not interpolated, so the runner label would contain the literal text and never match a runner). Replace them with `format('...-{0}-{1}', github.run_id, github.run_attempt)`. - CodeBuild runners execute as root and the OpenSearch Dashboards build tooling misbehaves as root. In 4_builderpackage_dashboard_core.yml run `yarn osd bootstrap` and `yarn build-platform` as a non-root `builduser`, mirroring the fix applied to the 5.x core workflow in #1372. Refs #5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use relative path when renaming the core build artifact The "Rename artifact" step used an absolute GitHub-hosted path (/home/runner/work/wazuh-dashboard/wazuh-dashboard/artifacts/target/...), which does not exist on the AWS CodeBuild runners and makes the `mv` fail. Since the job already sets `working-directory: ./artifacts`, use the relative `target/...` path so it works on any runner. Mirrors the fix applied to the 5.x core workflow in wazuh/wazuh-dashboard#1372. Refs #5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use github.workspace instead of a shared CURRENT_DIR output for artifact paths * test° * Make package build/test work on AWS CodeBuild runners * Guard systemctl calls so DEB package tests run without systemd * Migrate DEB package tests to use systemd-enabled container and streamline installation scripts * Add workarounds for missing zip, pip3, and openssh-client on AWS CodeBuild ARM runners * Pin reusable workflow refs to 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Migrate GitHub runners to aws runners (#1380) * Add DockerHub secrets and create non-root build user in package build workflow * Commit to test * Add Docker Hub credentials for build user to pull authenticated images * Revert commit to test * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1388) chore(tag-reference): change tag reference for 4.14.6 * feat: migrate artifact handling to S3 in dashboard workflows * Commit to test * feat: remove AWS secrets from dashboard build workflow * feat: remove AWS IAM role and region secrets from dashboard build workflow * feat: inherit secrets in the build job for dashboard package workflow * feat: add workflow_name input to plugin workflows in dashboard package build * feat: migrate artifact handling to use EXECUTION_REPOSITORY for S3 uploads * feat: update AWS CLI configuration to use v6 and assume role for S3 uploads * feat: update AWS role for artifact handling in dashboard workflow * feat: update CI_DEV_INTERNAL_BUCKET to use secrets and inherit secrets for plugin builds * feat: update CI_DEV_INTERNAL_BUCKET to use secrets for improved security * feat: add id-token permission for plugin build jobs in dashboard workflow * feat: update workflow references to version 4.14.6 for dashboard and plugins * Commit to test * Revert commit to test --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Juan Felipe Gonzalez Ortiz <53414652+felipegonzalezmv@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Julia Magán <80041853+juliamagan@users.noreply.github.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> * Merge 4.14.6 into 4.14.7 (#1408) * Adds changelog entries for versions 4.10.2–4.10.5 (#1312) * Refactor Allocator instance/composite names and add custom AWS tagging for better resource management 4x (#1284) * feat: refactor AWS instance creation with custom tags in build workflow * Refactor AWS instance creation to streamline custom tagging and improve resource management * feat: bump 4.14.6 * Revert "Bump 4.14.6 branch" * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1318) chore(tag-reference): change tag reference for 4.14.6 * Fixes changelog entry order in RPM spec (#1320) * Fixes changelog entry order in RPM spec * Updates workflow refs to v4.14.6-rc1 * Updates workflow refs 4.14.6 (#1321) * Migrate dashboard package-building workflow runners to AWS CodeBuild (#1374) * Migrate dashboard package-building workflow runners to AWS CodeBuild Replace the self-hosted `wz-linux-amd64` / `wz-linux-arm64` runners in the 4.x package build workflows with AWS CodeBuild runners (codebuild-github-actions-codebuild-runner-dashboard-<arch>-<run_id>-<run_attempt>), backporting the runner migration done in wazuh/wazuh-dashboard#1372. - 4_builderpackage_dashboard.yml: setup-variables and validate-job to the amd runner; build-package, test-package and upload-package to the arch-conditional runner. - 4_builderpackage_dashboard_core.yml: build job to the arch-conditional runner (inputs.ARCHITECTURE). - build_base.yml / build_wazuh_dashboard_with_plugins.yml: route arm builds to CodeBuild, keep amd on GitHub-hosted runners (mirrors #1372). Closes #5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use format() for conditional CodeBuild runners and run core build as non-root Align with wazuh/wazuh-dashboard#1372 to avoid runtime errors on the migrated CodeBuild runners: - Conditional `runs-on` expressions cannot nest `${{ }}` inside a string literal (the inner expression is not interpolated, so the runner label would contain the literal text and never match a runner). Replace them with `format('...-{0}-{1}', github.run_id, github.run_attempt)`. - CodeBuild runners execute as root and the OpenSearch Dashboards build tooling misbehaves as root. In 4_builderpackage_dashboard_core.yml run `yarn osd bootstrap` and `yarn build-platform` as a non-root `builduser`, mirroring the fix applied to the 5.x core workflow in #1372. Refs #5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use relative path when renaming the core build artifact The "Rename artifact" step used an absolute GitHub-hosted path (/home/runner/work/wazuh-dashboard/wazuh-dashboard/artifacts/target/...), which does not exist on the AWS CodeBuild runners and makes the `mv` fail. Since the job already sets `working-directory: ./artifacts`, use the relative `target/...` path so it works on any runner. Mirrors the fix applied to the 5.x core workflow in wazuh/wazuh-dashboard#1372. Refs #5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use github.workspace instead of a shared CURRENT_DIR output for artifact paths * test° * Make package build/test work on AWS CodeBuild runners * Guard systemctl calls so DEB package tests run without systemd * Migrate DEB package tests to use systemd-enabled container and streamline installation scripts * Add workarounds for missing zip, pip3, and openssh-client on AWS CodeBuild ARM runners * Pin reusable workflow refs to 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Migrate GitHub runners to aws runners (#1380) * Add DockerHub secrets and create non-root build user in package build workflow * Commit to test * Add Docker Hub credentials for build user to pull authenticated images * Revert commit to test * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1388) chore(tag-reference): change tag reference for 4.14.6 * feat: bump 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Juan Felipe Gonzalez Ortiz <53414652+felipegonzalezmv@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Julia Magán <80041853+juliamagan@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Juan Felipe Gonzalez Ortiz <53414652+felipegonzalezmv@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Julia Magán <80041853+juliamagan@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> * feat: bump 5.0.0 * Reordering the changelog in RPM packages (#1414) * Revert bump 5.0.0 branch (#1416) revert commit * Infinite requests after navigation (#1400) * fix: apps sometimes not unmounting * chore: add changelog entry * chore: update entry changelog --------- Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> * Remove deprecated isProduction field (#1421) * refactor: remove deprecated is_production field from package builders * refactor: remove deprecated isProduction field * chore: add changelog entry * feat: bump 5.0.0 * Optimize Draft PRs (#1415) * feat: update pull request triggers to include additional types * feat: optimize draft PR handling in build workflow * feat: optimize workflows to skip execution for draft pull requests * feat: add concurrency settings to workflow files for improved draft PR handling * fix: update import path for healthCheckConfig in injected_metadata_service.mock.ts * fix: update expected field counts in management tests * test: enhance notReady server setup with injectable route handler * test: update HomePublicPlugin tests to reflect changes in app registration logic * fix: update processProcOutput to handle additional deprecation warning and browserslist warning * chore: optimize workflows by removing Windows job configurations and commenting out unused test groups * Update security policy (#1426) docs(security): update security policy * Dashboard - Changelog standardization & enforcement (#1417) * chore(devx): add changelog enforcer CI workflow * chore(devx): standardize CHANGELOG format * chore(devx): standardize CHANGELOG format * chore(devx): update bumper to regenerate CHANGELOG on version bump The update_changelog() function now rewrites CHANGELOG.md using the new standard format: version header, Added section with support entry, and Prior versions section with links pruned to the last 2 minor versions. * fix(devx): use branch name without v prefix in prior version links * chore(devx): use actions/checkout@v6 in changelog verifier workflows * feat: add changelog verifier GitHub Action - Introduced a new workflow to verify that CHANGELOG.md is updated for pull requests unless the 'no-changelog' label is applied. feat: implement unit tests for tools scripts - Created a new workflow to run unit tests for tools scripts located under the tools/ directory on pull requests. - Tests are executed in isolated environments using throwaway fixture repositories. feat: add changelog_bump.sh script - Implemented a script to manage the CHANGELOG.md file during version bumps, ensuring proper formatting and prior version references. chore: add .gitignore for test temporary files - Added a .gitignore file to exclude temporary files generated during testing. docs: create README for tools unit tests - Documented the usage and structure of unit tests for tools scripts, including instructions for running tests. test: add run_all.sh to execute all unit tests - Created a script to run all unit tests for tools scripts and report results. test: implement unit tests for changelog_bump.sh - Added comprehensive tests for changelog_bump.sh, covering argument validation, version bumps, and changelog updates. test: implement unit tests for repository_bumper.sh - Added unit tests for repository_bumper.sh, validating argument handling, version bumps, and file updates. * chore: update changelog verifier workflow to use Ubuntu 24.04 and enhance concurrency settings --------- Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Make Discover CSV download row limit configurable (#1442) * feat: make Discover CSV download row limit configurable via reports.csv.maxRows (#1434) * Add change log * feat(discover): add reference to max row in csv export setting --------- Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> * Update CLAUDE configuration and add new skills (#1444) * Update CLAUDE configuration and add new skills - Enhance .gitignore to include specific CLAUDE settings and temporary files. - Revise CLAUDE.md to clarify project context and architecture. - Introduce new skills for analyzing vulnerabilities, checking standards, creating pull requests, developing issues, and resolving CVEs. - Add settings.json for CLAUDE permissions management. - Document workflows and commands for new skills in their respective SKILL.md files. * Enhance CLAUDE.md documentation for local development - Clarify the usage of the yarn run v1.22.22 info Visit https://yarnpkg.com/en/docs/cli/run for documentation about this command. command for the raw OSD dev server. - Introduce a new section detailing the local run model using the repo's Docker dev environment. - Provide instructions for running the full stack locally, including mounting external plugin repositories. * change message to no reference local routes --------- Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> * Create issue-creation skill and update PR template (#1447) * Enhance issue and PR templates for clarity and consistency; add new issue creation skill Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * Remove redundant label type/task from task issue template Signed-off-by: Diego Garcia diego.garcia@wazuh.com * Document stale enhancement label in issue-creation skill for consistency Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * Standardize issue-creation skill to apply real Wazuh labels instead of stale template frontmatter Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * Align issue-creation skill section 3 style with sibling repos (prose, not a redundant label bullet list) Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * Fix task_template.md label claim: remove non-existent type/task, use level/task only Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * fix(skills): point create-pr example at a filled body, not the template The gh pr create example in step 6 pointed --body-file at the blank pull_request_template.md itself, which would file a PR with unfilled placeholder text if run verbatim. Point it at a filled temp file instead. Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> * docs: remove How to Test section from PR template Manual verification steps are now covered elsewhere; drop the redundant section to simplify the template. Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> * docs: rework PR template review checklist Replace the fixed test-command checklist with broader review items covering evidence, documentation, dependencies, and labeling. Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> --------- Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> Signed-off-by: Diego Garcia diego.garcia@wazuh.com Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> * feat: bump 5.0.0 * feat: revert 5.0.0 references * Enforce Prettier formatting check on commit to prevent Prettier failures in PR pipelines (#1449) chore(devx): add prettier check to pre-commit hook and CI workflow * feat: bump 5.0.0 * Merge 4.14.8 into 5.0.0 (#1460) * feat: bump 4.14.8 * Merge 4.14.7 into 4.14.8 (#1458) * feat: bump 4.14.7 * Change tag reference for 4.14.7 (#1432) fix: update tag references to 4.14.7 in dashboard build workflows --------- Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> --------- Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> * Change bumper_repository workflows merge type (#1464) fix: use squash merge strategy in bumper repository workflows Change gh pr merge from --merge to --squash in 4_/5_/6_bumper_repository.yml so bump PRs land as a single squashed commit, consistent with this repo's squash-merge convention for single-purpose PRs. Related to wazuh/wazuh-dashboard#1459 Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * Add wazuh-ai-assistant to the 5.x package build pipeline (#1465) wazuh/wazuh-dashboard-plugins#8790 adds the new Wazuh AI Assistant plugin under plugins/wazuh-ai-assistant/, alongside main, wazuh-core and wazuh-check-updates. The build-outputs and build-plugins matrices in 5_builderpackage_dashboard.yml are hardcoded per plugin, so without this change the new plugin would never be built or bundled into the final wazuh-dashboard package. Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Merge 4.14.8 into 5.0.0 (#1474) * Change bumper_repository workflows merge type (#1463) * fix: use squash merge strategy in bumper repository workflow Change gh pr merge from --merge to --squash in 4_bumper_repository.yml so bump PRs land as a single squashed commit, consistent with this repo's squash-merge convention for single-purpose PRs. Related to wazuh/wazuh-dashboard#1459 Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * fix: correct inverted changelog dates in wazuh-dashboard.spec The 4.14.8 and 4.10.5 changelog entries had inverted dates (4.14.8 dated before 4.10.5, breaking the otherwise strictly-descending order). Swap the two dates so 4.14.8 correctly sits above 4.10.5 chronologically. Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * fix: reorder changelog entries instead of altering their dates The previous commit incorrectly swapped the 4.14.8 and 4.10.5 entries' dates to fix the ordering. That falsifies each entry's actual release date. Instead, reorder the two entries (move 4.10.5, dated later, above 4.14.8) so the changelog restores descending order while keeping each entry's real date unchanged. Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> --------- Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * Merge 4.14.7 into 4.14.8 (#1473) feat: bump 4.14.7 Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> --------- Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> Co-authored-by: Diego García <82405377+Ripdiegozz@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> Signed-off-by: Diego Garcia diego.garcia@wazuh.com Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Rodrigo López <37187963+rodrigofez@users.noreply.github.com> Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> Co-authored-by: Diego García <82405377+Ripdiegozz@users.noreply.github.com> Co-authored-by: Gonzalo Arancibia <72573241+gonzaarancibia@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> Co-authored-by: Juan Felipe Gonzalez Ortiz <53414652+felipegonzalezmv@users.noreply.github.com> Co-authored-by: Julia Magán <80041853+juliamagan@users.noreply.github.com> Co-authored-by: Vikman Fernandez-Castro <vmfdez90@gmail.com> * Merge 5.0.0 into 5.0.1 (#1488) * feat: bump 5.0.0 * Migrate GitHub runners to AWS runners (#1372) * Migrate GitHub runners to AWS runners * Refactor runner naming format in workflow files for consistency * Update revision retrieval method in build workflow to use package.json * Add non-root build user and update bootstrap command for permissions * Refactor runner naming format in workflow files to use format function and create non-root build user in plugin build workflow * Update build commands to run as non-root user for improved security * Fix artifact renaming path in build workflow for consistency * Add installation of zip utility for packaging plugins * Refactor artifact paths in build workflow to use github.workspace for consistency * Install zip utility conditionally for arm64 architecture in build workflow * Add workarounds for AWS CodeBuild runners to handle missing tools and permissions * Add Docker Hub login step and conditional Docker daemon start for AWS CodeBuild * Improve Docker daemon startup process in build workflow for ARM architecture * Add Docker Hub login and start Docker daemon for AWS CodeBuild runners * Add workarounds for AWS CodeBuild runners to handle systemd service management * Refactor DEB package testing to use systemd-enabled container and streamline upgrade checks * Add workaround to install pip3 for AWS CodeBuild ARM runners * Add missing apt-get update before package installation in deb-test scripts * Add workaround for AWS CodeBuild ARM runners to install pip3 and openssh-client * Refactor GitHub Actions workflows to use formatted runner names for AWS CodeBuild runners * Refactor GitHub Actions workflows to use updated runner names for AWS CodeBuild * Improve errors formatting in check flyout (#1379) * feat: improve error formatting in check flyout and not ready yet callouts * chore(changelog): add entry --------- Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> * Remove references to plugins not installed (#1382) * chore: remove anomalyDetectionDashboard build references * chore: add changelog entry * Hide all visible references to the Sample Data App (#1390) * Remove references to the Sample Data App in getNoItemsMessage * Remove all references to the Sample Data App in getNoItemsMessage tests * Merge 4.14.6 into 4.14.7 (#1393) (#1394) * Migrate dashboard package-building workflow runners to AWS CodeBuild (#1374) * Migrate dashboard package-building workflow runners to AWS CodeBuild Replace the self-hosted `wz-linux-amd64` / `wz-linux-arm64` runners in the 4.x package build workflows with AWS CodeBuild runners (codebuild-github-actions-codebuild-runner-dashboard-<arch>-<run_id>-<run_attempt>), backporting the runner migration done in wazuh/wazuh-dashboard#1372. - 4_builderpackage_dashboard.yml: setup-variables and validate-job to the amd runner; build-package, test-package and upload-package to the arch-conditional runner. - 4_builderpackage_dashboard_core.yml: build job to the arch-conditional runner (inputs.ARCHITECTURE). - build_base.yml / build_wazuh_dashboard_with_plugins.yml: route arm builds to CodeBuild, keep amd on GitHub-hosted runners (mirrors #1372). Closes #5246 * Use format() for conditional CodeBuild runners and run core build as non-root Align with wazuh/wazuh-dashboard#1372 to avoid runtime errors on the migrated CodeBuild runners: - Conditional `runs-on` expressions cannot nest `${{ }}` inside a string literal (the inner expression is not interpolated, so the runner label would contain the literal text and never match a runner). Replace them with `format(...-{0}-{1}, github.run_id, github.run_attempt)`. - CodeBuild runners execute as root and the OpenSearch Dashboards build tooling misbehaves as root. In 4_builderpackage_dashboard_core.yml run `yarn osd bootstrap` and `yarn build-platform` as a non-root `builduser`, mirroring the fix applied to the 5.x core workflow in #1372. Refs #5246 * Use relative path when renaming the core build artifact The "Rename artifact" step used an absolute GitHub-hosted path (/home/runner/work/wazuh-dashboard/wazuh-dashboard/artifacts/target/...), which does not exist on the AWS CodeBuild runners and makes the `mv` fail. Since the job already sets `working-directory: ./artifacts`, use the relative `target/...` path so it works on any runner. Mirrors the fix applied to the 5.x core workflow in wazuh/wazuh-dashboard#1372. Refs #5246 * Use github.workspace instead of a shared CURRENT_DIR output for artifact paths * test° * Make package build/test work on AWS CodeBuild runners * Guard systemctl calls so DEB package tests run without systemd * Migrate DEB package tests to use systemd-enabled container and streamline installation scripts * Add workarounds for missing zip, pip3, and openssh-client on AWS CodeBuild ARM runners * Pin reusable workflow refs to 4.14.6 --------- * Migrate GitHub runners to aws runners (#1380) * Add DockerHub secrets and create non-root build user in package build workflow * Commit to test * Add Docker Hub credentials for build user to pull authenticated images * Revert commit to test * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1388) chore(tag-reference): change tag reference for 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> * Migrate artifact handling to S3 in dashboard workflows (#1401) * Enhance AWS S3 integration in build workflows by adding execution repository input and updating artifact upload processes * Inherit secrets in build jobs for improved security and access management * Fix S3 upload commands in build workflow to remove redundant 's3://' prefix * Add logging for downloaded artifacts in S3 workflow * Fix S3 artifact download path by adding trailing slash to bucket URL * Upgrade AWS CLI configuration to use version 6 in dashboard workflows * Migrate artifact downloads to S3 in dashboard workflows and update package paths in test scripts * Fix package path in SCP command for RPM installation in dashboard build workflow * Update execution repository references to version 5 in dashboard workflows * Fix package generation failed because the SHA-512 file was missing (#1407) fix(workflow): empty variable interpolation on uploading sha512 file * Merge 4.14.7 into 5.0.0 (#1409) * Migrate artifact handling to S3 in dashboard workflows (#1397) * Adds changelog entries for versions 4.10.2–4.10.5 (#1312) * Refactor Allocator instance/composite names and add custom AWS tagging for better resource management 4x (#1284) * feat: refactor AWS instance creation with custom tags in build workflow * Refactor AWS instance creation to streamline custom tagging and improve resource management * feat: bump 4.14.6 * Revert "Bump 4.14.6 branch" * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1318) chore(tag-reference): change tag reference for 4.14.6 * Fixes changelog entry order in RPM spec (#1320) * Fixes changelog entry order in RPM spec * Updates workflow refs to v4.14.6-rc1 * Updates workflow refs 4.14.6 (#1321) * Migrate dashboard package-building workflow runners to AWS CodeBuild (#1374) * Migrate dashboard package-building workflow runners to AWS CodeBuild Replace the self-hosted `wz-linux-amd64` / `wz-linux-arm64` runners in the 4.x package build workflows with AWS CodeBuild runners (codebuild-github-actions-codebuild-runner-dashboard-<arch>-<run_id>-<run_attempt>), backporting the runner migration done in wazuh/wazuh-dashboard#1372. - 4_builderpackage_dashboard.yml: setup-variables and validate-job to the amd runner; build-package, test-package and upload-package to the arch-conditional runner. - 4_builderpackage_dashboard_core.yml: build job to the arch-conditional runner (inputs.ARCHITECTURE). - build_base.yml / build_wazuh_dashboard_with_plugins.yml: route arm builds to CodeBuild, keep amd on GitHub-hosted runners (mirrors #1372). Closes #5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use format() for conditional CodeBuild runners and run core build as non-root Align with wazuh/wazuh-dashboard#1372 to avoid runtime errors on the migrated CodeBuild runners: - Conditional `runs-on` expressions cannot nest `${{ }}` inside a string literal (the inner expression is not interpolated, so the runner label would contain the literal text and never match a runner). Replace them with `format('...-{0}-{1}', github.run_id, github.run_attempt)`. - CodeBuild runners execute as root and the OpenSearch Dashboards build tooling misbehaves as root. In 4_builderpackage_dashboard_core.yml run `yarn osd bootstrap` and `yarn build-platform` as a non-root `builduser`, mirroring the fix applied to the 5.x core workflow in #1372. Refs #5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use relative path when renaming the core build artifact The "Rename artifact" step used an absolute GitHub-hosted path (/home/runner/work/wazuh-dashboard/wazuh-dashboard/artifacts/target/...), which does not exist on the AWS CodeBuild runners and makes the `mv` fail. Since the job already sets `working-directory: ./artifacts`, use the relative `target/...` path so it works on any runner. Mirrors the fix applied to the 5.x core workflow in wazuh/wazuh-dashboard#1372. Refs #5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use github.workspace instead of a shared CURRENT_DIR output for artifact paths * test° * Make package build/test work on AWS CodeBuild runners * Guard systemctl calls so DEB package tests run without systemd * Migrate DEB package tests to use systemd-enabled container and streamline installation scripts * Add workarounds for missing zip, pip3, and openssh-client on AWS CodeBuild ARM runners * Pin reusable workflow refs to 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Migrate GitHub runners to aws runners (#1380) * Add DockerHub secrets and create non-root build user in package build workflow * Commit to test * Add Docker Hub credentials for build user to pull authenticated images * Revert commit to test * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1388) chore(tag-reference): change tag reference for 4.14.6 * feat: migrate artifact handling to S3 in dashboard workflows * Commit to test * feat: remove AWS secrets from dashboard build workflow * feat: remove AWS IAM role and region secrets from dashboard build workflow * feat: inherit secrets in the build job for dashboard package workflow * feat: add workflow_name input to plugin workflows in dashboard package build * feat: migrate artifact handling to use EXECUTION_REPOSITORY for S3 uploads * feat: update AWS CLI configuration to use v6 and assume role for S3 uploads * feat: update AWS role for artifact handling in dashboard workflow * feat: update CI_DEV_INTERNAL_BUCKET to use secrets and inherit secrets for plugin builds * feat: update CI_DEV_INTERNAL_BUCKET to use secrets for improved security * feat: add id-token permission for plugin build jobs in dashboard workflow * feat: update workflow references to version 4.14.6 for dashboard and plugins * Commit to test * Revert commit to test --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Juan Felipe Gonzalez Ortiz <53414652+felipegonzalezmv@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Julia Magán <80041853+juliamagan@users.noreply.github.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> * Merge 4.14.6 into 4.14.7 (#1408) * Adds changelog entries for versions 4.10.2–4.10.5 (#1312) * Refactor Allocator instance/composite names and add custom AWS tagging for better resource management 4x (#1284) * feat: refactor AWS instance creation with custom tags in build workflow * Refactor AWS instance creation to streamline custom tagging and improve resource management * feat: bump 4.14.6 * Revert "Bump 4.14.6 branch" * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1318) chore(tag-reference): change tag reference for 4.14.6 * Fixes changelog entry order in RPM spec (#1320) * Fixes changelog entry order in RPM spec * Updates workflow refs to v4.14.6-rc1 * Updates workflow refs 4.14.6 (#1321) * Migrate dashboard package-building workflow runners to AWS CodeBuild (#1374) * Migrate dashboard package-building workflow runners to AWS CodeBuild Replace the self-hosted `wz-linux-amd64` / `wz-linux-arm64` runners in the 4.x package build workflows with AWS CodeBuild runners (codebuild-github-actions-codebuild-runner-dashboard-<arch>-<run_id>-<run_attempt>), backporting the runner migration done in wazuh/wazuh-dashboard#1372. - 4_builderpackage_dashboard.yml: setup-variables and validate-job to the amd runner; build-package, test-package and upload-package to the arch-conditional runner. - 4_builderpackage_dashboard_core.yml: build job to the arch-conditional runner (inputs.ARCHITECTURE). - build_base.yml / build_wazuh_dashboard_with_plugins.yml: route arm builds to CodeBuild, keep amd on GitHub-hosted runners (mirrors #1372). Closes #5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use format() for conditional CodeBuild runners and run core build as non-root Align with wazuh/wazuh-dashboard#1372 to avoid runtime errors on the migrated CodeBuild runners: - Conditional `runs-on` expressions cannot nest `${{ }}` inside a string literal (the inner expression is not interpolated, so the runner label would contain the literal text and never match a runner). Replace them with `format('...-{0}-{1}', github.run_id, github.run_attempt)`. - CodeBuild runners execute as root and the OpenSearch Dashboards build tooling misbehaves as root. In 4_builderpackage_dashboard_core.yml run `yarn osd bootstrap` and `yarn build-platform` as a non-root `builduser`, mirroring the fix applied to the 5.x core workflow in #1372. Refs #5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use relative path when renaming the core build artifact The "Rename artifact" step used an absolute GitHub-hosted path (/home/runner/work/wazuh-dashboard/wazuh-dashboard/artifacts/target/...), which does not exist on the AWS CodeBuild runners and makes the `mv` fail. Since the job already sets `working-directory: ./artifacts`, use the relative `target/...` path so it works on any runner. Mirrors the fix applied to the 5.x core workflow in wazuh/wazuh-dashboard#1372. Refs #5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use github.workspace instead of a shared CURRENT_DIR output for artifact paths * test° * Make package build/test work on AWS CodeBuild runners * Guard systemctl calls so DEB package tests run without systemd * Migrate DEB package tests to use systemd-enabled container and streamline installation scripts * Add workarounds for missing zip, pip3, and openssh-client on AWS CodeBuild ARM runners * Pin reusable workflow refs to 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Migrate GitHub runners to aws runners (#1380) * Add DockerHub secrets and create non-root build user in package build workflow * Commit to test * Add Docker Hub credentials for build user to pull authenticated images * Revert commit to test * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1388) chore(tag-reference): change tag reference for 4.14.6 * feat: bump 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Juan Felipe Gonzalez Ortiz <53414652+felipegonzalezmv@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Julia Magán <80041853+juliamagan@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Juan Felipe Gonzalez Ortiz <53414652+felipegonzalezmv@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Julia Magán <80041853+juliamagan@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> * feat: bump 5.0.0 * Reordering the changelog in RPM packages (#1414) * Revert bump 5.0.0 branch (#1416) revert commit * Infinite requests after navigation (#1400) * fix: apps sometimes not unmounting * chore: add changelog entry * chore: update entry changelog --------- Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> * Remove deprecated isProduction field (#1421) * refactor: remove deprecated is_production field from package builders * refactor: remove deprecated isProduction field * chore: add changelog entry * feat: bump 5.0.0 * Optimize Draft PRs (#1415) * feat: update pull request triggers to include additional types * feat: optimize draft PR handling in build workflow * feat: optimize workflows to skip execution for draft pull requests * feat: add concurrency settings to workflow files for improved draft PR handling * fix: update import path for healthCheckConfig in injected_metadata_service.mock.ts * fix: update expected field counts in management tests * test: enhance notReady server setup with injectable route handler * test: update HomePublicPlugin tests to reflect changes in app registration logic * fix: update processProcOutput to handle additional deprecation warning and browserslist warning * chore: optimize workflows by removing Windows job configurations and commenting out unused test groups * Update security policy (#1426) docs(security): update security policy * Dashboard - Changelog standardization & enforcement (#1417) * chore(devx): add changelog enforcer CI workflow * chore(devx): standardize CHANGELOG format * chore(devx): standardize CHANGELOG format * chore(devx): update bumper to regenerate CHANGELOG on version bump The update_changelog() function now rewrites CHANGELOG.md using the new standard format: version header, Added section with support entry, and Prior versions section with links pruned to the last 2 minor versions. * fix(devx): use branch name without v prefix in prior version links * chore(devx): use actions/checkout@v6 in changelog verifier workflows * feat: add changelog verifier GitHub Action - Introduced a new workflow to verify that CHANGELOG.md is updated for pull requests unless the 'no-changelog' label is applied. feat: implement unit tests for tools scripts - Created a new workflow to run unit tests for tools scripts located under the tools/ directory on pull requests. - Tests are executed in isolated environments using throwaway fixture repositories. feat: add changelog_bump.sh script - Implemented a script to manage the CHANGELOG.md file during version bumps, ensuring proper formatting and prior version references. chore: add .gitignore for test temporary files - Added a .gitignore file to exclude temporary files generated during testing. docs: create README for tools unit tests - Documented the usage and structure of unit tests for tools scripts, including instructions for running tests. test: add run_all.sh to execute all unit tests - Created a script to run all unit tests for tools scripts and report results. test: implement unit tests for changelog_bump.sh - Added comprehensive tests for changelog_bump.sh, covering argument validation, version bumps, and changelog updates. test: implement unit tests for repository_bumper.sh - Added unit tests for repository_bumper.sh, validating argument handling, version bumps, and file updates. * chore: update changelog verifier workflow to use Ubuntu 24.04 and enhance concurrency settings --------- Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Make Discover CSV download row limit configurable (#1442) * feat: make Discover CSV download row limit configurable via reports.csv.maxRows (#1434) * Add change log * feat(discover): add reference to max row in csv export setting --------- Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> * Update CLAUDE configuration and add new skills (#1444) * Update CLAUDE configuration and add new skills - Enhance .gitignore to include specific CLAUDE settings and temporary files. - Revise CLAUDE.md to clarify project context and architecture. - Introduce new skills for analyzing vulnerabilities, checking standards, creating pull requests, developing issues, and resolving CVEs. - Add settings.json for CLAUDE permissions management. - Document workflows and commands for new skills in their respective SKILL.md files. * Enhance CLAUDE.md documentation for local development - Clarify the usage of the yarn run v1.22.22 info Visit https://yarnpkg.com/en/docs/cli/run for documentation about this command. command for the raw OSD dev server. - Introduce a new section detailing the local run model using the repo's Docker dev environment. - Provide instructions for running the full stack locally, including mounting external plugin repositories. * change message to no reference local routes --------- Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> * Create issue-creation skill and update PR template (#1447) * Enhance issue and PR templates for clarity and consistency; add new issue creation skill Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * Remove redundant label type/task from task issue template Signed-off-by: Diego Garcia diego.garcia@wazuh.com * Document stale enhancement label in issue-creation skill for consistency Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * Standardize issue-creation skill to apply real Wazuh labels instead of stale template frontmatter Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * Align issue-creation skill section 3 style with sibling repos (prose, not a redundant label bullet list) Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * Fix task_template.md label claim: remove non-existent type/task, use level/task only Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * fix(skills): point create-pr example at a filled body, not the template The gh pr create example in step 6 pointed --body-file at the blank pull_request_template.md itself, which would file a PR with unfilled placeholder text if run verbatim. Point it at a filled temp file instead. Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> * docs: remove How to Test section from PR template Manual verification steps are now covered elsewhere; drop the redundant section to simplify the template. Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> * docs: rework PR template review checklist Replace the fixed test-command checklist with broader review items covering evidence, documentation, dependencies, and labeling. Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> --------- Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> Signed-off-by: Diego Garcia diego.garcia@wazuh.com Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> * feat: bump 5.0.0 * feat: revert 5.0.0 references * Enforce Prettier formatting check on commit to prevent Prettier failures in PR pipelines (#1449) chore(devx): add prettier check to pre-commit hook and CI workflow * feat: bump 5.0.0 * Merge 4.14.8 into 5.0.0 (#1460) * feat: bump 4.14.8 * Merge 4.14.7 into 4.14.8 (#1458) * feat: bump 4.14.7 * Change tag reference for 4.14.7 (#1432) fix: update tag references to 4.14.7 in dashboard build workflows --------- Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> --------- Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> * Change bumper_repository workflows merge type (#1464) fix: use squash merge strategy in bumper repository workflows Change gh pr merge from --merge to --squash in 4_/5_/6_bumper_repository.yml so bump PRs land as a single squashed commit, consistent with this repo's squash-merge convention for single-purpose PRs. Related to wazuh/wazuh-dashboard#1459 Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * Add wazuh-ai-assistant to the 5.x package build pipeline (#1465) wazuh/wazuh-dashboard-plugins#8790 adds the new Wazuh AI Assistant plugin under plugins/wazuh-ai-assistant/, alongside main, wazuh-core and wazuh-check-updates. The build-outputs and build-plugins matrices in 5_builderpackage_dashboard.yml are hardcoded per plugin, so without this change the new plugin would never be built or bundled into the final wazuh-dashboard package. Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Merge 4.14.8 into 5.0.0 (#1474) * Change bumper_repository workflows merge type (#1463) * fix: use squash merge strategy in bumper repository workflow Change gh pr merge from --merge to --squash in 4_bumper_repository.yml so bump PRs land as a single squashed commit, consistent with this repo's squash-merge convention for single-purpose PRs. Related to wazuh/wazuh-dashboard#1459 Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * fix: correct inverted changelog dates in wazuh-dashboard.spec The 4.14.8 and 4.10.5 changelog entries had inverted dates (4.14.8 dated before 4.10.5, breaking the otherwise strictly-descending order). Swap the two dates so 4.14.8 correctly sits above 4.10.5 chronologically. Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * fix: reorder changelog entries instead of altering their dates The previous commit incorrectly swapped the 4.14.8 and 4.10.5 entries' dates to fix the ordering. That falsifies each entry's actual release date. Instead, reorder the two entries (move 4.10.5, dated later, above 4.14.8) so the changelog restores descending order while keeping each entry's real date unchanged. Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> --------- Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * Merge 4.14.7 into 4.14.8 (#1473) feat: bump 4.14.7 Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> --------- Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> Co-authored-by: Diego García <82405377+Ripdiegozz@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> * Add AI assistant encryption key on installation (#1481) * feat: generate wazuh_ai_assistant encryption key on install Provision a random base64-encoded 32-byte wazuh_ai_assistant.encryptionKey into the OpenSearch Dashboards keystore during first install, reusing the existing keystore-creation guard in the deb postinst and rpm %post scripts. Falls back through openssl, /dev/urandom, and the bundled Node binary; logs a non-fatal warning and continues the install if generation fails. Upgrades are a no-op by design. Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * test: verify wazuh_ai_assistant.encryptionKey in CI package smoke tests Extend the existing deb install/uninstall smoke test and the RPM install CI step to assert opensearch-dashboards-keystore list contains the wazuh_ai_assistant.encryptionKey entry after a fresh install, catching regressions in the postinst/%post key-provisioning logic automatically. Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> --------- Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * Change the changelog format to use a table per block (#1482) * Change the changelog format to use a table per block Render every Added/Changed/Fixed/Removed block as an Issue/Comment table, moving the existing references into the Issue column and keeping the descriptions unchanged. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Signed-off-by: Juan Felipe Gonzalez <felipegonzalezmv@hotmail.com> * Generate changelog tables in the changelog bumper The bumper reset CHANGELOG.md to bullet-list sections seeded with a "- Support for Wazuh X.Y.Z" entry. Emit an empty "| Issue | Comment |" table per section instead, so a bumped changelog starts in the table format, and drop the seeded entry, which had no reference to put in the Issue column. Update the tests, their fixtures and the tools/tests README accordingly. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Signed-off-by: Juan Felipe Gonzalez <felipegonzalezmv@hotmail.com> * Remove the Support for Wazuh changelog entry The entry had no issue or pull request reference, so in the new table format it rendered as a row with an empty Issue column. The changelog bumper no longer seeds it either. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Signed-off-by: Juan Felipe Gonzalez <felipegonzalezmv@hotmail.com> * Add missing issue to the changelog entry --------- Signed-off-by: Juan Felipe Gonzalez <felipegonzalezmv@hotmail.com> Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Merge 4.14.9 into 5.0.0 (#1487) Bump 4.14.9 branch (#1485) feat: bump 4.14.9 Co-authored-by: Wazuh CI <22834044+wazuhci@users.noreply.github…

* feat: bump 5.0.0 * Migrate GitHub runners to AWS runners (#1372) * Migrate GitHub runners to AWS runners * Refactor runner naming format in workflow files for consistency * Update revision retrieval method in build workflow to use package.json * Add non-root build user and update bootstrap command for permissions * Refactor runner naming format in workflow files to use format function and create non-root build user in plugin build workflow * Update build commands to run as non-root user for improved security * Fix artifact renaming path in build workflow for consistency * Add installation of zip utility for packaging plugins * Refactor artifact paths in build workflow to use github.workspace for consistency * Install zip utility conditionally for arm64 architecture in build workflow * Add workarounds for AWS CodeBuild runners to handle missing tools and permissions * Add Docker Hub login step and conditional Docker daemon start for AWS CodeBuild * Improve Docker daemon startup process in build workflow for ARM architecture * Add Docker Hub login and start Docker daemon for AWS CodeBuild runners * Add workarounds for AWS CodeBuild runners to handle systemd service management * Refactor DEB package testing to use systemd-enabled container and streamline upgrade checks * Add workaround to install pip3 for AWS CodeBuild ARM runners * Add missing apt-get update before package installation in deb-test scripts * Add workaround for AWS CodeBuild ARM runners to install pip3 and openssh-client * Refactor GitHub Actions workflows to use formatted runner names for AWS CodeBuild runners * Refactor GitHub Actions workflows to use updated runner names for AWS CodeBuild * Improve errors formatting in check flyout (#1379) * feat: improve error formatting in check flyout and not ready yet callouts * chore(changelog): add entry --------- Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> * Remove references to plugins not installed (#1382) * chore: remove anomalyDetectionDashboard build references * chore: add changelog entry * Hide all visible references to the Sample Data App (#1390) * Remove references to the Sample Data App in getNoItemsMessage * Remove all references to the Sample Data App in getNoItemsMessage tests * Merge 4.14.6 into 4.14.7 (#1393) (#1394) * Migrate dashboard package-building workflow runners to AWS CodeBuild (#1374) * Migrate dashboard package-building workflow runners to AWS CodeBuild Replace the self-hosted `wz-linux-amd64` / `wz-linux-arm64` runners in the 4.x package build workflows with AWS CodeBuild runners (codebuild-github-actions-codebuild-runner-dashboard-<arch>-<run_id>-<run_attempt>), backporting the runner migration done in #1372. - 4_builderpackage_dashboard.yml: setup-variables and validate-job to the amd runner; build-package, test-package and upload-package to the arch-conditional runner. - 4_builderpackage_dashboard_core.yml: build job to the arch-conditional runner (inputs.ARCHITECTURE). - build_base.yml / build_wazuh_dashboard_with_plugins.yml: route arm builds to CodeBuild, keep amd on GitHub-hosted runners (mirrors #1372). Closes opensearch-project#5246 * Use format() for conditional CodeBuild runners and run core build as non-root Align with #1372 to avoid runtime errors on the migrated CodeBuild runners: - Conditional `runs-on` expressions cannot nest `${{ }}` inside a string literal (the inner expression is not interpolated, so the runner label would contain the literal text and never match a runner). Replace them with `format(...-{0}-{1}, github.run_id, github.run_attempt)`. - CodeBuild runners execute as root and the OpenSearch Dashboards build tooling misbehaves as root. In 4_builderpackage_dashboard_core.yml run `yarn osd bootstrap` and `yarn build-platform` as a non-root `builduser`, mirroring the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 * Use relative path when renaming the core build artifact The "Rename artifact" step used an absolute GitHub-hosted path (/home/runner/work/wazuh-dashboard/wazuh-dashboard/artifacts/target/...), which does not exist on the AWS CodeBuild runners and makes the `mv` fail. Since the job already sets `working-directory: ./artifacts`, use the relative `target/...` path so it works on any runner. Mirrors the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 * Use github.workspace instead of a shared CURRENT_DIR output for artifact paths * test° * Make package build/test work on AWS CodeBuild runners * Guard systemctl calls so DEB package tests run without systemd * Migrate DEB package tests to use systemd-enabled container and streamline installation scripts * Add workarounds for missing zip, pip3, and openssh-client on AWS CodeBuild ARM runners * Pin reusable workflow refs to 4.14.6 --------- * Migrate GitHub runners to aws runners (#1380) * Add DockerHub secrets and create non-root build user in package build workflow * Commit to test * Add Docker Hub credentials for build user to pull authenticated images * Revert commit to test * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1388) chore(tag-reference): change tag reference for 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> * Migrate artifact handling to S3 in dashboard workflows (#1401) * Enhance AWS S3 integration in build workflows by adding execution repository input and updating artifact upload processes * Inherit secrets in build jobs for improved security and access management * Fix S3 upload commands in build workflow to remove redundant 's3://' prefix * Add logging for downloaded artifacts in S3 workflow * Fix S3 artifact download path by adding trailing slash to bucket URL * Upgrade AWS CLI configuration to use version 6 in dashboard workflows * Migrate artifact downloads to S3 in dashboard workflows and update package paths in test scripts * Fix package path in SCP command for RPM installation in dashboard build workflow * Update execution repository references to version 5 in dashboard workflows * Fix package generation failed because the SHA-512 file was missing (#1407) fix(workflow): empty variable interpolation on uploading sha512 file * Merge 4.14.7 into 5.0.0 (#1409) * Migrate artifact handling to S3 in dashboard workflows (#1397) * Adds changelog entries for versions 4.10.2–4.10.5 (#1312) * Refactor Allocator instance/composite names and add custom AWS tagging for better resource management 4x (#1284) * feat: refactor AWS instance creation with custom tags in build workflow * Refactor AWS instance creation to streamline custom tagging and improve resource management * feat: bump 4.14.6 * Revert "Bump 4.14.6 branch" * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1318) chore(tag-reference): change tag reference for 4.14.6 * Fixes changelog entry order in RPM spec (#1320) * Fixes changelog entry order in RPM spec * Updates workflow refs to v4.14.6-rc1 * Updates workflow refs 4.14.6 (#1321) * Migrate dashboard package-building workflow runners to AWS CodeBuild (#1374) * Migrate dashboard package-building workflow runners to AWS CodeBuild Replace the self-hosted `wz-linux-amd64` / `wz-linux-arm64` runners in the 4.x package build workflows with AWS CodeBuild runners (codebuild-github-actions-codebuild-runner-dashboard-<arch>-<run_id>-<run_attempt>), backporting the runner migration done in #1372. - 4_builderpackage_dashboard.yml: setup-variables and validate-job to the amd runner; build-package, test-package and upload-package to the arch-conditional runner. - 4_builderpackage_dashboard_core.yml: build job to the arch-conditional runner (inputs.ARCHITECTURE). - build_base.yml / build_wazuh_dashboard_with_plugins.yml: route arm builds to CodeBuild, keep amd on GitHub-hosted runners (mirrors #1372). Closes opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use format() for conditional CodeBuild runners and run core build as non-root Align with #1372 to avoid runtime errors on the migrated CodeBuild runners: - Conditional `runs-on` expressions cannot nest `${{ }}` inside a string literal (the inner expression is not interpolated, so the runner label would contain the literal text and never match a runner). Replace them with `format('...-{0}-{1}', github.run_id, github.run_attempt)`. - CodeBuild runners execute as root and the OpenSearch Dashboards build tooling misbehaves as root. In 4_builderpackage_dashboard_core.yml run `yarn osd bootstrap` and `yarn build-platform` as a non-root `builduser`, mirroring the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use relative path when renaming the core build artifact The "Rename artifact" step used an absolute GitHub-hosted path (/home/runner/work/wazuh-dashboard/wazuh-dashboard/artifacts/target/...), which does not exist on the AWS CodeBuild runners and makes the `mv` fail. Since the job already sets `working-directory: ./artifacts`, use the relative `target/...` path so it works on any runner. Mirrors the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use github.workspace instead of a shared CURRENT_DIR output for artifact paths * test° * Make package build/test work on AWS CodeBuild runners * Guard systemctl calls so DEB package tests run without systemd * Migrate DEB package tests to use systemd-enabled container and streamline installation scripts * Add workarounds for missing zip, pip3, and openssh-client on AWS CodeBuild ARM runners * Pin reusable workflow refs to 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Migrate GitHub runners to aws runners (#1380) * Add DockerHub secrets and create non-root build user in package build workflow * Commit to test * Add Docker Hub credentials for build user to pull authenticated images * Revert commit to test * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1388) chore(tag-reference): change tag reference for 4.14.6 * feat: migrate artifact handling to S3 in dashboard workflows * Commit to test * feat: remove AWS secrets from dashboard build workflow * feat: remove AWS IAM role and region secrets from dashboard build workflow * feat: inherit secrets in the build job for dashboard package workflow * feat: add workflow_name input to plugin workflows in dashboard package build * feat: migrate artifact handling to use EXECUTION_REPOSITORY for S3 uploads * feat: update AWS CLI configuration to use v6 and assume role for S3 uploads * feat: update AWS role for artifact handling in dashboard workflow * feat: update CI_DEV_INTERNAL_BUCKET to use secrets and inherit secrets for plugin builds * feat: update CI_DEV_INTERNAL_BUCKET to use secrets for improved security * feat: add id-token permission for plugin build jobs in dashboard workflow * feat: update workflow references to version 4.14.6 for dashboard and plugins * Commit to test * Revert commit to test --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Juan Felipe Gonzalez Ortiz <53414652+felipegonzalezmv@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Julia Magán <80041853+juliamagan@users.noreply.github.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> * Merge 4.14.6 into 4.14.7 (#1408) * Adds changelog entries for versions 4.10.2–4.10.5 (#1312) * Refactor Allocator instance/composite names and add custom AWS tagging for better resource management 4x (#1284) * feat: refactor AWS instance creation with custom tags in build workflow * Refactor AWS instance creation to streamline custom tagging and improve resource management * feat: bump 4.14.6 * Revert "Bump 4.14.6 branch" * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1318) chore(tag-reference): change tag reference for 4.14.6 * Fixes changelog entry order in RPM spec (#1320) * Fixes changelog entry order in RPM spec * Updates workflow refs to v4.14.6-rc1 * Updates workflow refs 4.14.6 (#1321) * Migrate dashboard package-building workflow runners to AWS CodeBuild (#1374) * Migrate dashboard package-building workflow runners to AWS CodeBuild Replace the self-hosted `wz-linux-amd64` / `wz-linux-arm64` runners in the 4.x package build workflows with AWS CodeBuild runners (codebuild-github-actions-codebuild-runner-dashboard-<arch>-<run_id>-<run_attempt>), backporting the runner migration done in #1372. - 4_builderpackage_dashboard.yml: setup-variables and validate-job to the amd runner; build-package, test-package and upload-package to the arch-conditional runner. - 4_builderpackage_dashboard_core.yml: build job to the arch-conditional runner (inputs.ARCHITECTURE). - build_base.yml / build_wazuh_dashboard_with_plugins.yml: route arm builds to CodeBuild, keep amd on GitHub-hosted runners (mirrors #1372). Closes opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use format() for conditional CodeBuild runners and run core build as non-root Align with #1372 to avoid runtime errors on the migrated CodeBuild runners: - Conditional `runs-on` expressions cannot nest `${{ }}` inside a string literal (the inner expression is not interpolated, so the runner label would contain the literal text and never match a runner). Replace them with `format('...-{0}-{1}', github.run_id, github.run_attempt)`. - CodeBuild runners execute as root and the OpenSearch Dashboards build tooling misbehaves as root. In 4_builderpackage_dashboard_core.yml run `yarn osd bootstrap` and `yarn build-platform` as a non-root `builduser`, mirroring the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use relative path when renaming the core build artifact The "Rename artifact" step used an absolute GitHub-hosted path (/home/runner/work/wazuh-dashboard/wazuh-dashboard/artifacts/target/...), which does not exist on the AWS CodeBuild runners and makes the `mv` fail. Since the job already sets `working-directory: ./artifacts`, use the relative `target/...` path so it works on any runner. Mirrors the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use github.workspace instead of a shared CURRENT_DIR output for artifact paths * test° * Make package build/test work on AWS CodeBuild runners * Guard systemctl calls so DEB package tests run without systemd * Migrate DEB package tests to use systemd-enabled container and streamline installation scripts * Add workarounds for missing zip, pip3, and openssh-client on AWS CodeBuild ARM runners * Pin reusable workflow refs to 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Migrate GitHub runners to aws runners (#1380) * Add DockerHub secrets and create non-root build user in package build workflow * Commit to test * Add Docker Hub credentials for build user to pull authenticated images * Revert commit to test * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1388) chore(tag-reference): change tag reference for 4.14.6 * feat: bump 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Juan Felipe Gonzalez Ortiz <53414652+felipegonzalezmv@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Julia Magán <80041853+juliamagan@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Juan Felipe Gonzalez Ortiz <53414652+felipegonzalezmv@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Julia Magán <80041853+juliamagan@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> * feat: bump 5.0.0 * Reordering the changelog in RPM packages (#1414) * Revert bump 5.0.0 branch (#1416) revert commit * Infinite requests after navigation (#1400) * fix: apps sometimes not unmounting * chore: add changelog entry * chore: update entry changelog --------- Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> * Remove deprecated isProduction field (#1421) * refactor: remove deprecated is_production field from package builders * refactor: remove deprecated isProduction field * chore: add changelog entry * feat: bump 5.0.0 * Optimize Draft PRs (#1415) * feat: update pull request triggers to include additional types * feat: optimize draft PR handling in build workflow * feat: optimize workflows to skip execution for draft pull requests * feat: add concurrency settings to workflow files for improved draft PR handling * fix: update import path for healthCheckConfig in injected_metadata_service.mock.ts * fix: update expected field counts in management tests * test: enhance notReady server setup with injectable route handler * test: update HomePublicPlugin tests to reflect changes in app registration logic * fix: update processProcOutput to handle additional deprecation warning and browserslist warning * chore: optimize workflows by removing Windows job configurations and commenting out unused test groups * Update security policy (#1426) docs(security): update security policy * Dashboard - Changelog standardization & enforcement (#1417) * chore(devx): add changelog enforcer CI workflow * chore(devx): standardize CHANGELOG format * chore(devx): standardize CHANGELOG format * chore(devx): update bumper to regenerate CHANGELOG on version bump The update_changelog() function now rewrites CHANGELOG.md using the new standard format: version header, Added section with support entry, and Prior versions section with links pruned to the last 2 minor versions. * fix(devx): use branch name without v prefix in prior version links * chore(devx): use actions/checkout@v6 in changelog verifier workflows * feat: add changelog verifier GitHub Action - Introduced a new workflow to verify that CHANGELOG.md is updated for pull requests unless the 'no-changelog' label is applied. feat: implement unit tests for tools scripts - Created a new workflow to run unit tests for tools scripts located under the tools/ directory on pull requests. - Tests are executed in isolated environments using throwaway fixture repositories. feat: add changelog_bump.sh script - Implemented a script to manage the CHANGELOG.md file during version bumps, ensuring proper formatting and prior version references. chore: add .gitignore for test temporary files - Added a .gitignore file to exclude temporary files generated during testing. docs: create README for tools unit tests - Documented the usage and structure of unit tests for tools scripts, including instructions for running tests. test: add run_all.sh to execute all unit tests - Created a script to run all unit tests for tools scripts and report results. test: implement unit tests for changelog_bump.sh - Added comprehensive tests for changelog_bump.sh, covering argument validation, version bumps, and changelog updates. test: implement unit tests for repository_bumper.sh - Added unit tests for repository_bumper.sh, validating argument handling, version bumps, and file updates. * chore: update changelog verifier workflow to use Ubuntu 24.04 and enhance concurrency settings --------- Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Make Discover CSV download row limit configurable (#1442) * feat: make Discover CSV download row limit configurable via reports.csv.maxRows (#1434) * Add change log * feat(discover): add reference to max row in csv export setting --------- Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> * Update CLAUDE configuration and add new skills (#1444) * Update CLAUDE configuration and add new skills - Enhance .gitignore to include specific CLAUDE settings and temporary files. - Revise CLAUDE.md to clarify project context and architecture. - Introduce new skills for analyzing vulnerabilities, checking standards, creating pull requests, developing issues, and resolving CVEs. - Add settings.json for CLAUDE permissions management. - Document workflows and commands for new skills in their respective SKILL.md files. * Enhance CLAUDE.md documentation for local development - Clarify the usage of the yarn run v1.22.22 info Visit https://yarnpkg.com/en/docs/cli/run for documentation about this command. command for the raw OSD dev server. - Introduce a new section detailing the local run model using the repo's Docker dev environment. - Provide instructions for running the full stack locally, including mounting external plugin repositories. * change message to no reference local routes --------- Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> * Create issue-creation skill and update PR template (#1447) * Enhance issue and PR templates for clarity and consistency; add new issue creation skill Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * Remove redundant label type/task from task issue template Signed-off-by: Diego Garcia diego.garcia@wazuh.com * Document stale enhancement label in issue-creation skill for consistency Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * Standardize issue-creation skill to apply real Wazuh labels instead of stale template frontmatter Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * Align issue-creation skill section 3 style with sibling repos (prose, not a redundant label bullet list) Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * Fix task_template.md label claim: remove non-existent type/task, use level/task only Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * fix(skills): point create-pr example at a filled body, not the template The gh pr create example in step 6 pointed --body-file at the blank pull_request_template.md itself, which would file a PR with unfilled placeholder text if run verbatim. Point it at a filled temp file instead. Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> * docs: remove How to Test section from PR template Manual verification steps are now covered elsewhere; drop the redundant section to simplify the template. Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> * docs: rework PR template review checklist Replace the fixed test-command checklist with broader review items covering evidence, documentation, dependencies, and labeling. Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> --------- Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> Signed-off-by: Diego Garcia diego.garcia@wazuh.com Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> * feat: bump 5.0.0 * feat: revert 5.0.0 references * Enforce Prettier formatting check on commit to prevent Prettier failures in PR pipelines (#1449) chore(devx): add prettier check to pre-commit hook and CI workflow * feat: bump 5.0.0 * Merge 4.14.8 into 5.0.0 (#1460) * feat: bump 4.14.8 * Merge 4.14.7 into 4.14.8 (#1458) * feat: bump 4.14.7 * Change tag reference for 4.14.7 (#1432) fix: update tag references to 4.14.7 in dashboard build workflows --------- Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> --------- Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> * Change bumper_repository workflows merge type (#1464) fix: use squash merge strategy in bumper repository workflows Change gh pr merge from --merge to --squash in 4_/5_/6_bumper_repository.yml so bump PRs land as a single squashed commit, consistent with this repo's squash-merge convention for single-purpose PRs. Related to #1459 Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * Add wazuh-ai-assistant to the 5.x package build pipeline (#1465) wazuh/wazuh-dashboard-plugins#8790 adds the new Wazuh AI Assistant plugin under plugins/wazuh-ai-assistant/, alongside main, wazuh-core and wazuh-check-updates. The build-outputs and build-plugins matrices in 5_builderpackage_dashboard.yml are hardcoded per plugin, so without this change the new plugin would never be built or bundled into the final wazuh-dashboard package. Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Merge 4.14.8 into 5.0.0 (#1474) * Change bumper_repository workflows merge type (#1463) * fix: use squash merge strategy in bumper repository workflow Change gh pr merge from --merge to --squash in 4_bumper_repository.yml so bump PRs land as a single squashed commit, consistent with this repo's squash-merge convention for single-purpose PRs. Related to #1459 Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * fix: correct inverted changelog dates in wazuh-dashboard.spec The 4.14.8 and 4.10.5 changelog entries had inverted dates (4.14.8 dated before 4.10.5, breaking the otherwise strictly-descending order). Swap the two dates so 4.14.8 correctly sits above 4.10.5 chronologically. Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * fix: reorder changelog entries instead of altering their dates The previous commit incorrectly swapped the 4.14.8 and 4.10.5 entries' dates to fix the ordering. That falsifies each entry's actual release date. Instead, reorder the two entries (move 4.10.5, dated later, above 4.14.8) so the changelog restores descending order while keeping each entry's real date unchanged. Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> --------- Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * Merge 4.14.7 into 4.14.8 (#1473) feat: bump 4.14.7 Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> --------- Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> Co-authored-by: Diego García <82405377+Ripdiegozz@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> * Add AI assistant encryption key on installation (#1481) * feat: generate wazuh_ai_assistant encryption key on install Provision a random base64-encoded 32-byte wazuh_ai_assistant.encryptionKey into the OpenSearch Dashboards keystore during first install, reusing the existing keystore-creation guard in the deb postinst and rpm %post scripts. Falls back through openssl, /dev/urandom, and the bundled Node binary; logs a non-fatal warning and continues the install if generation fails. Upgrades are a no-op by design. Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * test: verify wazuh_ai_assistant.encryptionKey in CI package smoke tests Extend the existing deb install/uninstall smoke test and the RPM install CI step to assert opensearch-dashboards-keystore list contains the wazuh_ai_assistant.encryptionKey entry after a fresh install, catching regressions in the postinst/%post key-provisioning logic automatically. Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> --------- Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * Change the changelog format to use a table per block (#1482) * Change the changelog format to use a table per block Render every Added/Changed/Fixed/Removed block as an Issue/Comment table, moving the existing references into the Issue column and keeping the descriptions unchanged. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Signed-off-by: Juan Felipe Gonzalez <felipegonzalezmv@hotmail.com> * Generate changelog tables in the changelog bumper The bumper reset CHANGELOG.md to bullet-list sections seeded with a "- Support for Wazuh X.Y.Z" entry. Emit an empty "| Issue | Comment |" table per section instead, so a bumped changelog starts in the table format, and drop the seeded entry, which had no reference to put in the Issue column. Update the tests, their fixtures and the tools/tests README accordingly. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Signed-off-by: Juan Felipe Gonzalez <felipegonzalezmv@hotmail.com> * Remove the Support for Wazuh changelog entry The entry had no issue or pull request reference, so in the new table format it rendered as a row with an empty Issue column. The changelog bumper no longer seeds it either. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Signed-off-by: Juan Felipe Gonzalez <felipegonzalezmv@hotmail.com> * Add missing issue to the changelog entry --------- Signed-off-by: Juan Felipe Gonzalez <felipegonzalezmv@hotmail.com> Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Merge 4.14.9 into 5.0.0 (#1487) Bump 4.14.9 branch (#1485) feat: bump 4.14.9 Co-authored-by: Wazuh CI <22834044+wazuhci@users.noreply.github.com> * Remove unnecessary debhelper install-time dependency (#1483) fix: remove unnecessary debhelper install-time dependency debhelper is only required to build the .deb package (declared under Build-Depends in dev-tools/build-packages/deb/debian/control), not to install a pre-built one. Remove it from the apt-get install steps used to test package install/upgrade. Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> Co-authored-by: Claude <noreply@anthropic.com> * Merge 4.14.9 into 5.0.0 (#1500) * Bump 4.14.9 branch (#1485) feat: bump 4.14.9 * Remove unnecessary debhelper install-time dependency (#1484) fix: remove unnecessary debhelper install-time dependency debhelper is only required to build the .deb package (declared under Build-Depends in dev-tools/build-packages/deb/debian/control), not to install a pre-built one. Remove it from the apt-get install steps used to test package install/upgrade. Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> Co-authored-by: Claude <noreply@anthropic.com> --------- Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> Co-authored-by: Wazuh CI <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Claude <noreply@anthropic.com> * fix(prettier): code style * Fix prettier --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> Signed-off-by: Diego Garcia diego.garcia@wazuh.com Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> Signed-off-by: Juan Felipe Gonzalez <felipegonzalezmv@hotmail.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Rodrigo López <37187963+rodrigofez@users.noreply.github.com> Co-authored-by: Diego García <82405377+Ripdiegozz@users.noreply.github.com> Co-authored-by: Gonzalo Arancibia <72573241+gonzaarancibia@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Juan Felipe Gonzalez Ortiz <53414652+felipegonzalezmv@users.noreply.github.com> Co-authored-by: Julia Magán <80041853+juliamagan@users.noreply.github.com> Co-authored-by: Vikman Fernandez-Castro <vmfdez90@gmail.com> Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>

…1373) * Migrate dashboard package-building workflow runners to AWS CodeBuild Replace the GitHub-hosted `ubuntu-latest` runners in the 4.x package build workflows with AWS CodeBuild runners (codebuild-github-actions-codebuild-runner-dashboard-<arch>-<run_id>-<run_attempt>), backporting the runner migration done in #1372. - 4_builderpackage_dashboard.yml: setup-variables and validate-job to the amd runner; build-and-test-package to the arch-conditional runner. - 4_builderpackage_dashboard_core.yml: build job to the arch-conditional runner (matrix.ARCHITECTURE). - build_base.yml / build_wazuh_dashboard_with_plugins.yml: route arm builds to CodeBuild, keep amd on GitHub-hosted runners (mirrors #1372). Closes opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Commit to test * Remove support for arm64 architecture in package build workflow * Remove arm64 runner configuration from dashboard build workflow * Refactor build workflow to create non-root user and streamline build process * Refactor dashboard build workflows to use github.workspace for artifact paths * Add Docker Hub credentials to build plugins job in workflow * Create non-root user for build and test steps in workflow * Add Docker Hub login step to avoid anonymous pull rate limits in workflow * Add Docker Hub login step to avoid pull rate limits in AWS CodeBuild workflow * Fix indentation for Docker Hub login step in AWS CodeBuild workflow * Refactor build workflow to create non-root user after Docker Hub login and copy credentials for authenticated image pulls * Revert commit to test --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com>

@Desvelao

* Migrate 4.14.5 to 2.19.5 (#1184) * Compatibility with opensearch 2.19.1 (#556) * Bump version 4.13.0 (#565) * Improve horizontal scroll bar in discover plugin (#568) Signed-off-by: yenienserrano <ian.serrano@wazuh.com> Signed-off-by: Álex Ruiz <alejandro.ruiz.becerra@wazuh.com> Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Signed-off-by: JuanGarriuz <juangarriuz@gmail.com> Signed-off-by: Nicolas Agustin Guevara Pihen <42900763+Tostti@users.noreply.github.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Álex Ruiz <alejandro.ruiz.becerra@wazuh.com> Co-authored-by: Maximiliano Ibarra <maximiliano.ibarra@wazuh.com> Co-authored-by: Nicolas Agustin Guevara Pihen <42900763+Tostti@users.noreply.github.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> Co-authored-by: Tostti <nicolas.guevara.pihen@gmail.com> Co-authored-by: Raul Del Pozo Moreno <raul.delpozo@wazuh.com> Co-authored-by: Luciano Gorza <103193307+lucianogorza@users.noreply.github.com> Co-authored-by: Federico Rodriguez <federico.rodriguez@wazuh.com> Co-authored-by: Chantal Belén kelm <99441266+chantal-kelm@users.noreply.github.com> Co-authored-by: JuanGarriuz <juangarriuz@gmail.com> Co-authored-by: JuanGarriuz <juan.garcia@wazuh.com> Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> * Merge 4.11.1 into 4.12.0 (#572) Co-authored-by: Federico Rodriguez <federico.rodriguez@wazuh.com> * Merge 4.12.0 into 4.13.0 (#573) Signed-off-by: yenienserrano <ian.serrano@wazuh.com> Signed-off-by: Álex Ruiz <alejandro.ruiz.becerra@wazuh.com> Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Signed-off-by: JuanGarriuz <juangarriuz@gmail.com> Signed-off-by: Nicolas Agustin Guevara Pihen <42900763+Tostti@users.noreply.github.com> Co-authored-by: Guido Modarelli <38738725+guidomodarelli@users.noreply.github.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Álex Ruiz <alejandro.ruiz.becerra@wazuh.com> Co-authored-by: Maximiliano Ibarra <maximiliano.ibarra@wazuh.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> Co-authored-by: Raul Del Pozo Moreno <raul.delpozo@wazuh.com> Co-authored-by: Luciano Gorza <103193307+lucianogorza@users.noreply.github.com> Co-authored-by: Federico Rodriguez <federico.rodriguez@wazuh.com> Co-authored-by: Chantal Belén kelm <99441266+chantal-kelm@users.noreply.github.com> Co-authored-by: JuanGarriuz <juangarriuz@gmail.com> Co-authored-by: JuanGarriuz <juan.garcia@wazuh.com> Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> * Update Dockerfile to use CentOS 8 instead of latest (#595) * Update Dockerfile to use CentOS 8 instead of latest (#596) * Merge 4.11.2 into 4.12.0 (#604) Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> Co-authored-by: Nicolas Agustin Guevara Pihen <42900763+Tostti@users.noreply.github.com> * Merge 4.11.2 into 4.12.0 (#605) Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> Co-authored-by: Nicolas Agustin Guevara Pihen <42900763+Tostti@users.noreply.github.com> * Bump revision alpha 1 * Revert "Bump revision alpha 1" This reverts commit ab5f03c. * Bump revision to 4.12.0-01 (#607) * Support Wazuh 4.12.1 revision 00 (#613) * Fix tooltip text for no cached mapping field (#614) * Fix the expanded menu to the first rendering (#611) Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Merge 4.12.0 into 4.12.1 (#619) Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Merge 4.12.1 into 4.13.0 (#621) Signed-off-by: yenienserrano <ian.serrano@wazuh.com> Signed-off-by: Álex Ruiz <alejandro.ruiz.becerra@wazuh.com> Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Signed-off-by: JuanGarriuz <juangarriuz@gmail.com> Signed-off-by: Nicolas Agustin Guevara Pihen <42900763+Tostti@users.noreply.github.com> Co-authored-by: Guido Modarelli <38738725+guidomodarelli@users.noreply.github.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Álex Ruiz <alejandro.ruiz.becerra@wazuh.com> Co-authored-by: Maximiliano Ibarra <maximiliano.ibarra@wazuh.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> Co-authored-by: Raul Del Pozo Moreno <raul.delpozo@wazuh.com> Co-authored-by: Luciano Gorza <103193307+lucianogorza@users.noreply.github.com> Co-authored-by: Federico Rodriguez <federico.rodriguez@wazuh.com> Co-authored-by: Chantal Belén kelm <99441266+chantal-kelm@users.noreply.github.com> Co-authored-by: JuanGarriuz <juangarriuz@gmail.com> Co-authored-by: JuanGarriuz <juan.garcia@wazuh.com> Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> * Remove VERSION file during installation for both deb and rpm packages (#625) * Bump revision 02 (#628) * Repository bumper script development (#626) * Generate packages smoke tests (#623) * Adds changelog update to repository bumper (#631) * Bump 4.12.0 rev 03 (#634) * Support Wazuh 4.12.2 revision 00 (#639) * Add Wazuh repository before testing upgrade in smoke tests (#643) * Compatibility with opensearch 2.19.2 (#644) Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Support wazuh 4.14.0 (#666) * Remove 4.12.2 references (#687) * Remove 4.12.2 references (#688) * Remove unnecessary dependency in RPM spec (#676) Co-authored-by: Federico Rodriguez <federico.rodriguez@wazuh.com> * Add `--tag` option to repository bumper script (#697) * Merge 4.13.0 into 4.14.0 (#708) Signed-off-by: Nicolas Agustin Guevara Pihen <42900763+Tostti@users.noreply.github.com> Co-authored-by: Federico Rodriguez <federico.rodriguez@wazuh.com> * Adds automated repository version bumping workflow (#698) * Fix repository bumper workflow PR reference (#719) Signed-off-by: Raul Del Pozo Moreno <14913942+rauldpm@users.noreply.github.com> * Fix bug in repository bumper script (#717) * feat: bump 4.13.0 * Support wazuh 4.13.1 (#732) * Added an admin flag to the repository bumper workflow merge action (#736) Signed-off-by: Raul Del Pozo Moreno <14913942+rauldpm@users.noreply.github.com> * Add PR write permission (#741) * fix: add missing changes related to sync branches * Merge pull request #750 from wazuh/bug/747-fix-repository-tests Fix repository tests * Fix service file was world-inaccessible (#740) Co-authored-by: Gonzalo Arancibia <72573241+gonzaarancibia@users.noreply.github.com> * Merge pull request #750 from wazuh/bug/747-fix-repository-tests Fix repository tests * Fix service file was world-inaccessible (#740) Co-authored-by: Gonzalo Arancibia <72573241+gonzaarancibia@users.noreply.github.com> * Reduce default session cookie timeout (#749) Signed-off-by: gonzaarancibia <gonzaloarancibia48@gmail.com> Signed-off-by: Gonzalo Arancibia <72573241+gonzaarancibia@users.noreply.github.com> * feat: bump 4.13.0 * chore: branch references * Change cp for mv to avoid getting the files duplicated * Update changelog * feat: bump 4.13.0 * change: branch references * Fix apt update error in building deb package with debian:10 Docker base image (#795) * feat: bump 4.13.0 * Remove tag reference in branch (#804) * Update CHANGELOG.md Signed-off-by: Nicolas Agustin Guevara Pihen <42900763+Tostti@users.noreply.github.com> * feat: bump 4.14.1 * add release notes for 2.19.3 Signed-off-by: Ruchi Sharma <ruchi492@gmail.com> * Migrate 4.14.0 to 2.19.3 (#813) Signed-off-by: yenienserrano <ian.serrano@wazuh.com> Signed-off-by: Álex Ruiz <alejandro.ruiz.becerra@wazuh.com> Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Signed-off-by: JuanGarriuz <juangarriuz@gmail.com> Signed-off-by: Nicolas Agustin Guevara Pihen <42900763+Tostti@users.noreply.github.com> Signed-off-by: Raul Del Pozo Moreno <14913942+rauldpm@users.noreply.github.com> Signed-off-by: gonzaarancibia <gonzaloarancibia48@gmail.com> Signed-off-by: Gonzalo Arancibia <72573241+gonzaarancibia@users.noreply.github.com> Co-authored-by: Álex Ruiz <alejandro.ruiz.becerra@wazuh.com> Co-authored-by: Maximiliano Ibarra <maximiliano.ibarra@wazuh.com> Co-authored-by: Nicolas Agustin Guevara Pihen <42900763+Tostti@users.noreply.github.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> Co-authored-by: Tostti <nicolas.guevara.pihen@gmail.com> Co-authored-by: Raul Del Pozo Moreno <raul.delpozo@wazuh.com> Co-authored-by: Luciano Gorza <103193307+lucianogorza@users.noreply.github.com> Co-authored-by: Federico Rodriguez <federico.rodriguez@wazuh.com> Co-authored-by: Chantal Belén kelm <99441266+chantal-kelm@users.noreply.github.com> Co-authored-by: JuanGarriuz <juangarriuz@gmail.com> Co-authored-by: JuanGarriuz <juan.garcia@wazuh.com> Co-authored-by: Guido Modarelli <38738725+guidomodarelli@users.noreply.github.com> Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> Co-authored-by: Raul Del Pozo Moreno <14913942+rauldpm@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Gonzalo Arancibia <72573241+gonzaarancibia@users.noreply.github.com> * Remove 4.13.1 references * Development - AWS XDR+SIEM Refactor Tier 2 - Dashboard - packages-dev.internal.wazuh.com bucket migration (#829) * Update debian and rpm changelog 4.14.1 (#847) * Fix problem in debian and rpm changelog 4.14.1 (#860) * Correct variable case for date parameter in bump script 4.14.1 (#885) Co-authored-by: Federico Rodriguez <federico.rodriguez@wazuh.com> * Adds version-specific dashboard build workflows (4.14.0) (#857) * Add observability anomaly detection and anomaly detection plugins (#843) Co-authored-by: Federico Rodriguez <federico.rodriguez@wazuh.com> * feat: bump 4.13.0 * Update reference to 4.14.1 in workflows * Merge 4.14.0 into 4.14.1 (#922) * Add ML commons plugin to package builder (#875) Co-authored-by: Nicolas Guevara <nicolas.guevara.pihen@gmail.com> Co-authored-by: gonzaarancibia <gonzaloarancibia48@gmail.com> Co-authored-by: Gonzalo Arancibia <72573241+gonzaarancibia@users.noreply.github.com> * Fix Observability category icon sed (#905) * Adds new dashboards plugins (#821) Signed-off-by: Federico Rodriguez <federico.rodriguez@wazuh.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Federico Rodriguez <federico.rodriguez@wazuh.com> * Add data source enabled setting and change Observability category order (#909) * Add data_source.enabled:true to default settings and change order of Observability category * Add changelog * Remove Observability plugin (#913) * Remove Observability plugin * Add changelog * Merge 4.13.0 into 4.14.0 (#920) * feat: bump 4.13.0 * feat: bump 4.13.0 * Change workflow references to 4.13.0 (#898) * feat: bump 4.13.0 --------- Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Nicolas Agustin Guevara Pihen <42900763+Tostti@users.noreply.github.com> * Updates ML Commons plugin version to 4.14.1 Bumps the ML Commons plugin workflow reference from version 4.14.0 to 4.14.1 across build workflows and updates corresponding version comment in repository bumper script. Ensures compatibility with the latest ML Commons plugin release and maintains version consistency across the build pipeline. --------- Signed-off-by: Federico Rodriguez <federico.rodriguez@wazuh.com> Co-authored-by: Federico Rodriguez <federico.rodriguez@wazuh.com> Co-authored-by: Nicolas Guevara <nicolas.guevara.pihen@gmail.com> Co-authored-by: gonzaarancibia <gonzaloarancibia48@gmail.com> Co-authored-by: Gonzalo Arancibia <72573241+gonzaarancibia@users.noreply.github.com> Co-authored-by: Guido Modarelli <38738725+guidomodarelli@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Nicolas Agustin Guevara Pihen <42900763+Tostti@users.noreply.github.com> * Merge 4.14.0 into 4.14.1 (#937) * Add restart always directive to dashboard build configuration (#919) * Add restart always policy to dashboard build configuration * Update changelog --------- Co-authored-by: Gonzalo Arancibia <72573241+gonzaarancibia@users.noreply.github.com> * Merge 4.13.1 into 4.14.0 (#936) feat: bump 4.13.1 Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> --------- Co-authored-by: Nicolas Agustin Guevara Pihen <42900763+Tostti@users.noreply.github.com> Co-authored-by: Gonzalo Arancibia <72573241+gonzaarancibia@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> * Add retry mechanism for transient steps (#947) * add retry mechanism for transient steps Introduce a new function «run_with_retry» to handle transient step retries with configurable attempts and delay. Replace direct calls to critical commands with «run_with_retry» to improve robustness. Add options «--retry-attempts» and «--retry-delay» for user-configurable retry behavior, defaulting to 3 attempts and 15 seconds delay. Update help documentation to include these options. Enhance error handling for «curl» and «docker» commands to provide clearer failure messages after retries are exhausted. * fix: update default version to 4.14.0 for ML Commons plugin in workflows * Revert "fix: update default version to 4.14.0 for ML Commons plugin in workflows" This reverts commit cb89b85. * Fix bumper update build plugin reference workflows in build dashboard workflow (#956) fix(bumper): update version reference build plugin workflows in dashboard build workflow related to 4.x * Merge 4.14.0 into 4.14.1 (#973) * Remove ML Commons and Dashboard Assistant plugins from the package building process (#940) * Removes ML Commons plugin from build workflows * Remove assistant.chat.enabled configuration * Removes ML Commons plugin references from workflows * Remove assistantDashboards * Update changelog * feat: bump 4.14.0 * feat: bump 4.14.0 * feat: bump 4.14.0 --------- Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> * Update of the changelog for rpm packages (#978) Update changelog date to 4.14.1 * feat: bump 4.14.1 * Change tag references to 4.14.1 (#982) chore: change tag references * feat: bump 4.14.1 * Change tag references to 4.14.1 (#994) chore: change tag reference to 4.14.1 * feat: bump 4.14.2 * feat: bump 4.14.1 * Migrate 4.14.2 to 2.19.4 (#1011) * Bump version to 2.19.4 (opensearch-project#10551) * vis(vega): fix data url with signal not working (opensearch-project#10339) (opensearch-project#10559) * vis(vega): fix data url with signal not working * Changeset file for PR opensearch-project#10339 created/updated --------- (cherry picked from commit ba02fa5) Signed-off-by: Yulong Ruan <ruanyl@amazon.com> Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com> Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com> Co-authored-by: opensearch-changeset-bot[bot] <154024398+opensearch-changeset-bot[bot]@users.noreply.github.com> * [Maintenance]CVE fix, Axios fix with patch (opensearch-project#10828) * CVE fix axios fix with patch Signed-off-by: sumukhswamy <sumukhhs@amazon.com> * Changeset file for PR opensearch-project#10828 created/updated * Axios patch fix for ARM Signed-off-by: sumukhswamy <sumukhhs@amazon.com> * build fixes for ARM and windows Signed-off-by: sumukhswamy <sumukhhs@amazon.com> * removed build failing comment Signed-off-by: sumukhswamy <sumukhhs@amazon.com> * addressed comments Signed-off-by: sumukhswamy <sumukhhs@amazon.com> * addressed comments Signed-off-by: sumukhswamy <sumukhhs@amazon.com> * addressed comments Signed-off-by: sumukhswamy <sumukhhs@amazon.com> * fixing test failures Signed-off-by: sumukhswamy <sumukhhs@amazon.com> * fixing test failures Signed-off-by: sumukhswamy <sumukhhs@amazon.com> * added build test change Signed-off-by: sumukhswamy <sumukhhs@amazon.com> --------- Signed-off-by: sumukhswamy <sumukhhs@amazon.com> Co-authored-by: opensearch-changeset-bot[bot] <154024398+opensearch-changeset-bot[bot]@users.noreply.github.com> * Adding release notes-2.19.4 (opensearch-project#10838) * releasenotes-2.19.4 Signed-off-by: sumukhswamy <sumukhhs@amazon.com> * Changeset file for PR opensearch-project#10838 created/updated --------- Signed-off-by: sumukhswamy <sumukhhs@amazon.com> Co-authored-by: opensearch-changeset-bot[bot] <154024398+opensearch-changeset-bot[bot]@users.noreply.github.com> * Vega bump CVE fixes (opensearch-project#10839) * medium CVE fixes Signed-off-by: sumukhswamy <sumukhhs@amazon.com> * Changeset file for PR opensearch-project#10839 created/updated * medium CVE fixes Signed-off-by: sumukhswamy <sumukhhs@amazon.com> * medium CVE fixes Signed-off-by: sumukhswamy <sumukhhs@amazon.com> * webpack changes to add failing scenegraph Signed-off-by: sumukhswamy <sumukhhs@amazon.com> * release notes update Signed-off-by: sumukhswamy <sumukhhs@amazon.com> --------- Signed-off-by: sumukhswamy <sumukhhs@amazon.com> Co-authored-by: opensearch-changeset-bot[bot] <154024398+opensearch-changeset-bot[bot]@users.noreply.github.com> * Transpile vega-lite during build since it has modern js code (opensearch-project#10847) * revert vega-lite back too ^4.16.8 (opensearch-project#10853) * revert vega-lite back too ^4.16.8 Signed-off-by: Yulong Ruan <ruanyl@amazon.com> * Changeset file for PR opensearch-project#10853 created/updated --------- Signed-off-by: Yulong Ruan <ruanyl@amazon.com> Co-authored-by: opensearch-changeset-bot[bot] <154024398+opensearch-changeset-bot[bot]@users.noreply.github.com> * Update Opensearch version * Update default version to 4.14.2 in workflow files --------- Signed-off-by: Yulong Ruan <ruanyl@amazon.com> Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com> Signed-off-by: sumukhswamy <sumukhhs@amazon.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> Co-authored-by: Sayali Gaikawad <gaiksaya@amazon.com> Co-authored-by: opensearch-trigger-bot[bot] <98922864+opensearch-trigger-bot[bot]@users.noreply.github.com> Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com> Co-authored-by: opensearch-changeset-bot[bot] <154024398+opensearch-changeset-bot[bot]@users.noreply.github.com> Co-authored-by: Sumukh Swamy <sumukhhs@amazon.com> Co-authored-by: Amardeepsingh Siglani <amardeep7194@gmail.com> Co-authored-by: Yulong Ruan <ruanyl@amazon.com> * Fix the action that uses Allocator in 4.x (#1012) * Add checkout to change/2750-backport-600-into-main * Remove sudo to install requirements Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Remove branch change --------- Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * feat: bump 4.14.3 * feat: bump 4.14.2 * Change tag references to 4.14.2 (#1035) chore: change tag references * Merge 4.14.2 into 4.14.3 (#1059) * feat: bump 4.14.2 * Change tag reference for 4.14.2 (#1051) chore(tag-reference): change tag reference for 4.14.2 --------- Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> * Merge 4.14.2 into 4.14.3 (#1080) * feat: bump 4.14.2 * Change tag reference for 4.14.2 (#1051) chore(tag-reference): change tag reference for 4.14.2 * Adds version-based branch selection for automation (#1061) * feat: bump 4.14.2 * Change tag reference for 4.14.2 (#1065) chore(tag-reference): change tag reference for 4.14.2 * feat: bump 4.14.2 * Change tag reference for 4.14.2 (#1072) chore(tag-reference): change tag reference for 4.14.2 * feat: bump 4.14.2 --------- Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> * feat: bump 4.14.3 * Change tag reference for 4.14.3 (#1084) chore(tag-reference): change tag reference for 4.14.3 * feat: bump 4.14.4 * Merge 4.14.3 into 4.14.4 (#1094) merge: merge 4.14.3 into 4.14.4 empty commit for sync tracking * Merge 4.14.3 into 4.14.4 (#1100) * feat: bump 4.14.3 * Change tag reference for 4.14.3 (#1098) chore(tag-reference): change tag reference for 4.14.3 --------- Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> * Merge 4.14.3 into 4.14.4 (#1107) * feat: bump 4.14.3 * Change tag reference for 4.14.3 (#1105) chore(tag-reference): change tag reference for 4.14.3 --------- Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> * Merge 4.14.3 into 4.14.4 (#1112) feat: bump 4.14.3 Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> * feat: bump 4.14.5 * Update CI/CD workflows to use custom Linux runners.(4.14.5) (#1130) Update CI/CD workflows to use custom Linux runners. * Disabled useNewHomePage setting (#1132) * Deprecate setting on server * Hide and forse setting on false * Update CHANGELOG * Apply suggestion from @Desvelao Signed-off-by: Antonio <34042064+Desvelao@users.noreply.github.com> * Apply suggestion from @Desvelao Signed-off-by: Antonio <34042064+Desvelao@users.noreply.github.com> * Apply suggestion from @Desvelao Signed-off-by: Antonio <34042064+Desvelao@users.noreply.github.com> * feat: add file header to lint configuration --------- Signed-off-by: Antonio <34042064+Desvelao@users.noreply.github.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> * Merge 4.14.4 into 4.14.5 (#1156) * feat: bump 4.14.4 * Change tag reference for 4.14.4 (#1136) * feat: bump 4.14.4 * Revert "Bump 4.14.4 branch" * Change revision (#1140) * Change tag reference for 4.14.4 (#1142) * feat: bump 4.14.4 * Change tag reference for 4.14.4 (#1153) chore(tag-reference): change tag reference for 4.14.4 * Fix date --------- Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Raul Del Pozo Moreno <14913942+rauldpm@users.noreply.github.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> * Merge 4.14.4 into 4.14.5 (#1162) feat: bump 4.14.4 Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> * Updates OpenSearch Dashboards to version 2.19.5 * Commit for package build testing * Revert "Commit for package build testing" This reverts commit fe2bf01. --------- Signed-off-by: yenienserrano <ian.serrano@wazuh.com> Signed-off-by: Álex Ruiz <alejandro.ruiz.becerra@wazuh.com> Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Signed-off-by: JuanGarriuz <juangarriuz@gmail.com> Signed-off-by: Nicolas Agustin Guevara Pihen <42900763+Tostti@users.noreply.github.com> Signed-off-by: Raul Del Pozo Moreno <14913942+rauldpm@users.noreply.github.com> Signed-off-by: gonzaarancibia <gonzaloarancibia48@gmail.com> Signed-off-by: Gonzalo Arancibia <72573241+gonzaarancibia@users.noreply.github.com> Signed-off-by: Ruchi Sharma <ruchi492@gmail.com> Signed-off-by: Federico Rodriguez <federico.rodriguez@wazuh.com> Signed-off-by: Yulong Ruan <ruanyl@amazon.com> Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com> Signed-off-by: sumukhswamy <sumukhhs@amazon.com> Signed-off-by: Antonio <34042064+Desvelao@users.noreply.github.com> Co-authored-by: Nicolas Agustin Guevara Pihen <42900763+Tostti@users.noreply.github.com> Co-authored-by: Guido Modarelli <38738725+guidomodarelli@users.noreply.github.com> Co-authored-by: Álex Ruiz <alejandro.ruiz.becerra@wazuh.com> Co-authored-by: Maximiliano Ibarra <maximiliano.ibarra@wazuh.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> Co-authored-by: Tostti <nicolas.guevara.pihen@gmail.com> Co-authored-by: Raul Del Pozo Moreno <raul.delpozo@wazuh.com> Co-authored-by: Luciano Gorza <103193307+lucianogorza@users.noreply.github.com> Co-authored-by: Federico Rodriguez <federico.rodriguez@wazuh.com> Co-authored-by: Chantal Belén kelm <99441266+chantal-kelm@users.noreply.github.com> Co-authored-by: JuanGarriuz <juangarriuz@gmail.com> Co-authored-by: JuanGarriuz <juan.garcia@wazuh.com> Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> Co-authored-by: Raul Del Pozo Moreno <14913942+rauldpm@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Gonzalo Arancibia <72573241+gonzaarancibia@users.noreply.github.com> Co-authored-by: Ruchi Sharma <ruchi492@gmail.com> Co-authored-by: Juan Felipe Gonzalez Ortiz <53414652+felipegonzalezmv@users.noreply.github.com> Co-authored-by: gonzaarancibia <gonzaloarancibia48@gmail.com> Co-authored-by: Sayali Gaikawad <gaiksaya@amazon.com> Co-authored-by: opensearch-trigger-bot[bot] <98922864+opensearch-trigger-bot[bot]@users.noreply.github.com> Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com> Co-authored-by: opensearch-changeset-bot[bot] <154024398+opensearch-changeset-bot[bot]@users.noreply.github.com> Co-authored-by: Sumukh Swamy <sumukhhs@amazon.com> Co-authored-by: Amardeepsingh Siglani <amardeep7194@gmail.com> Co-authored-by: Yulong Ruan <ruanyl@amazon.com> Co-authored-by: Maximiliano Ibarra <6089438+Machi3mfl@users.noreply.github.com> * feat: bump 4.14.5 * Change tag reference for 4.14.5 (#1194) chore(tag-reference): change tag reference for 4.14.5 * feat: bump 4.14.5 * feat: bump 4.14.6 * feat: bump 4.14.7 * Merge 4.14.6 into 4.14.7 (#1306) merge: merge 4.14.6 into 4.14.7 empty commit for sync tracking * Merge merge-4.14.6-into-4.14.7 into 4.14.7 [automated] (#1323) * Adds changelog entries for versions 4.10.2–4.10.5 (#1312) * Refactor Allocator instance/composite names and add custom AWS tagging for better resource management 4x (#1284) * feat: refactor AWS instance creation with custom tags in build workflow * Refactor AWS instance creation to streamline custom tagging and improve resource management * feat: bump 4.14.6 * Revert "Bump 4.14.6 branch" * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1318) chore(tag-reference): change tag reference for 4.14.6 * Fixes changelog entry order in RPM spec (#1320) * Fixes changelog entry order in RPM spec * Updates workflow refs to v4.14.6-rc1 * Updates workflow refs 4.14.6 (#1321) --------- Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Juan Felipe Gonzalez Ortiz <53414652+felipegonzalezmv@users.noreply.github.com> Co-authored-by: Julia Magán <80041853+juliamagan@users.noreply.github.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> * Merge merge-4.14.6-into-4.14.7 into 4.14.7 [automated] (#1332) * Adds changelog entries for versions 4.10.2–4.10.5 (#1312) * Refactor Allocator instance/composite names and add custom AWS tagging for better resource management 4x (#1284) * feat: refactor AWS instance creation with custom tags in build workflow * Refactor AWS instance creation to streamline custom tagging and improve resource management * feat: bump 4.14.6 * Revert "Bump 4.14.6 branch" * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1318) chore(tag-reference): change tag reference for 4.14.6 * Fixes changelog entry order in RPM spec (#1320) * Fixes changelog entry order in RPM spec * Updates workflow refs to v4.14.6-rc1 * Updates workflow refs 4.14.6 (#1321) --------- Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Juan Felipe Gonzalez Ortiz <53414652+felipegonzalezmv@users.noreply.github.com> Co-authored-by: Julia Magán <80041853+juliamagan@users.noreply.github.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> * Merge 4.14.6 into 4.14.7 (#1393) * Migrate dashboard package-building workflow runners to AWS CodeBuild (#1374) * Migrate dashboard package-building workflow runners to AWS CodeBuild Replace the self-hosted `wz-linux-amd64` / `wz-linux-arm64` runners in the 4.x package build workflows with AWS CodeBuild runners (codebuild-github-actions-codebuild-runner-dashboard-<arch>-<run_id>-<run_attempt>), backporting the runner migration done in #1372. - 4_builderpackage_dashboard.yml: setup-variables and validate-job to the amd runner; build-package, test-package and upload-package to the arch-conditional runner. - 4_builderpackage_dashboard_core.yml: build job to the arch-conditional runner (inputs.ARCHITECTURE). - build_base.yml / build_wazuh_dashboard_with_plugins.yml: route arm builds to CodeBuild, keep amd on GitHub-hosted runners (mirrors #1372). Closes opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use format() for conditional CodeBuild runners and run core build as non-root Align with #1372 to avoid runtime errors on the migrated CodeBuild runners: - Conditional `runs-on` expressions cannot nest `${{ }}` inside a string literal (the inner expression is not interpolated, so the runner label would contain the literal text and never match a runner). Replace them with `format('...-{0}-{1}', github.run_id, github.run_attempt)`. - CodeBuild runners execute as root and the OpenSearch Dashboards build tooling misbehaves as root. In 4_builderpackage_dashboard_core.yml run `yarn osd bootstrap` and `yarn build-platform` as a non-root `builduser`, mirroring the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use relative path when renaming the core build artifact The "Rename artifact" step used an absolute GitHub-hosted path (/home/runner/work/wazuh-dashboard/wazuh-dashboard/artifacts/target/...), which does not exist on the AWS CodeBuild runners and makes the `mv` fail. Since the job already sets `working-directory: ./artifacts`, use the relative `target/...` path so it works on any runner. Mirrors the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use github.workspace instead of a shared CURRENT_DIR output for artifact paths * test° * Make package build/test work on AWS CodeBuild runners * Guard systemctl calls so DEB package tests run without systemd * Migrate DEB package tests to use systemd-enabled container and streamline installation scripts * Add workarounds for missing zip, pip3, and openssh-client on AWS CodeBuild ARM runners * Pin reusable workflow refs to 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Migrate GitHub runners to aws runners (#1380) * Add DockerHub secrets and create non-root build user in package build workflow * Commit to test * Add Docker Hub credentials for build user to pull authenticated images * Revert commit to test * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1388) chore(tag-reference): change tag reference for 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> * Migrate artifact handling to S3 in dashboard workflows (#1397) * Adds changelog entries for versions 4.10.2–4.10.5 (#1312) * Refactor Allocator instance/composite names and add custom AWS tagging for better resource management 4x (#1284) * feat: refactor AWS instance creation with custom tags in build workflow * Refactor AWS instance creation to streamline custom tagging and improve resource management * feat: bump 4.14.6 * Revert "Bump 4.14.6 branch" * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1318) chore(tag-reference): change tag reference for 4.14.6 * Fixes changelog entry order in RPM spec (#1320) * Fixes changelog entry order in RPM spec * Updates workflow refs to v4.14.6-rc1 * Updates workflow refs 4.14.6 (#1321) * Migrate dashboard package-building workflow runners to AWS CodeBuild (#1374) * Migrate dashboard package-building workflow runners to AWS CodeBuild Replace the self-hosted `wz-linux-amd64` / `wz-linux-arm64` runners in the 4.x package build workflows with AWS CodeBuild runners (codebuild-github-actions-codebuild-runner-dashboard-<arch>-<run_id>-<run_attempt>), backporting the runner migration done in #1372. - 4_builderpackage_dashboard.yml: setup-variables and validate-job to the amd runner; build-package, test-package and upload-package to the arch-conditional runner. - 4_builderpackage_dashboard_core.yml: build job to the arch-conditional runner (inputs.ARCHITECTURE). - build_base.yml / build_wazuh_dashboard_with_plugins.yml: route arm builds to CodeBuild, keep amd on GitHub-hosted runners (mirrors #1372). Closes opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use format() for conditional CodeBuild runners and run core build as non-root Align with #1372 to avoid runtime errors on the migrated CodeBuild runners: - Conditional `runs-on` expressions cannot nest `${{ }}` inside a string literal (the inner expression is not interpolated, so the runner label would contain the literal text and never match a runner). Replace them with `format('...-{0}-{1}', github.run_id, github.run_attempt)`. - CodeBuild runners execute as root and the OpenSearch Dashboards build tooling misbehaves as root. In 4_builderpackage_dashboard_core.yml run `yarn osd bootstrap` and `yarn build-platform` as a non-root `builduser`, mirroring the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use relative path when renaming the core build artifact The "Rename artifact" step used an absolute GitHub-hosted path (/home/runner/work/wazuh-dashboard/wazuh-dashboard/artifacts/target/...), which does not exist on the AWS CodeBuild runners and makes the `mv` fail. Since the job already sets `working-directory: ./artifacts`, use the relative `target/...` path so it works on any runner. Mirrors the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use github.workspace instead of a shared CURRENT_DIR output for artifact paths * test° * Make package build/test work on AWS CodeBuild runners * Guard systemctl calls so DEB package tests run without systemd * Migrate DEB package tests to use systemd-enabled container and streamline installation scripts * Add workarounds for missing zip, pip3, and openssh-client on AWS CodeBuild ARM runners * Pin reusable workflow refs to 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Migrate GitHub runners to aws runners (#1380) * Add DockerHub secrets and create non-root build user in package build workflow * Commit to test * Add Docker Hub credentials for build user to pull authenticated images * Revert commit to test * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1388) chore(tag-reference): change tag reference for 4.14.6 * feat: migrate artifact handling to S3 in dashboard workflows * Commit to test * feat: remove AWS secrets from dashboard build workflow * feat: remove AWS IAM role and region secrets from dashboard build workflow * feat: inherit secrets in the build job for dashboard package workflow * feat: add workflow_name input to plugin workflows in dashboard package build * feat: migrate artifact handling to use EXECUTION_REPOSITORY for S3 uploads * feat: update AWS CLI configuration to use v6 and assume role for S3 uploads * feat: update AWS role for artifact handling in dashboard workflow * feat: update CI_DEV_INTERNAL_BUCKET to use secrets and inherit secrets for plugin builds * feat: update CI_DEV_INTERNAL_BUCKET to use secrets for improved security * feat: add id-token permission for plugin build jobs in dashboard workflow * feat: update workflow references to version 4.14.6 for dashboard and plugins * Commit to test * Revert commit to test --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Juan Felipe Gonzalez Ortiz <53414652+felipegonzalezmv@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Julia Magán <80041853+juliamagan@users.noreply.github.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> * Merge 4.14.6 into 4.14.7 (#1408) * Adds changelog entries for versions 4.10.2–4.10.5 (#1312) * Refactor Allocator instance/composite names and add custom AWS tagging for better resource management 4x (#1284) * feat: refactor AWS instance creation with custom tags in build workflow * Refactor AWS instance creation to streamline custom tagging and improve resource management * feat: bump 4.14.6 * Revert "Bump 4.14.6 branch" * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1318) chore(tag-reference): change tag reference for 4.14.6 * Fixes changelog entry order in RPM spec (#1320) * Fixes changelog entry order in RPM spec * Updates workflow refs to v4.14.6-rc1 * Updates workflow refs 4.14.6 (#1321) * Migrate dashboard package-building workflow runners to AWS CodeBuild (#1374) * Migrate dashboard package-building workflow runners to AWS CodeBuild Replace the self-hosted `wz-linux-amd64` / `wz-linux-arm64` runners in the 4.x package build workflows with AWS CodeBuild runners (codebuild-github-actions-codebuild-runner-dashboard-<arch>-<run_id>-<run_attempt>), backporting the runner migration done in #1372. - 4_builderpackage_dashboard.yml: setup-variables and validate-job to the amd runner; build-package, test-package and upload-package to the arch-conditional runner. - 4_builderpackage_dashboard_core.yml: build job to the arch-conditional runner (inputs.ARCHITECTURE). - build_base.yml / build_wazuh_dashboard_with_plugins.yml: route arm builds to CodeBuild, keep amd on GitHub-hosted runners (mirrors #1372). Closes opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use format() for conditional CodeBuild runners and run core build as non-root Align with #1372 to avoid runtime errors on the migrated CodeBuild runners: - Conditional `runs-on` expressions cannot nest `${{ }}` inside a string literal (the inner expression is not interpolated, so the runner label would contain the literal text and never match a runner). Replace them with `format('...-{0}-{1}', github.run_id, github.run_attempt)`. - CodeBuild runners execute as root and the OpenSearch Dashboards build tooling misbehaves as root. In 4_builderpackage_dashboard_core.yml run `yarn osd bootstrap` and `yarn build-platform` as a non-root `builduser`, mirroring the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use relative path when renaming the core build artifact The "Rename artifact" step used an absolute GitHub-hosted path (/home/runner/work/wazuh-dashboard/wazuh-dashboard/artifacts/target/...), which does not exist on the AWS CodeBuild runners and makes the `mv` fail. Since the job already sets `working-directory: ./artifacts`, use the relative `target/...` path so it works on any runner. Mirrors the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use github.workspace instead of a shared CURRENT_DIR output for artifact paths * test° * Make package build/test work on AWS CodeBuild runners * Guard systemctl calls so DEB package tests run without systemd * Migrate DEB package tests to use systemd-enabled container and streamline installation scripts * Add workarounds for missing zip, pip3, and openssh-client on AWS CodeBuild ARM runners * Pin reusable workflow refs to 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Migrate GitHub runners to aws runners (#1380) * Add DockerHub secrets and create non-root build user in package build workflow * Commit to test * Add Docker Hub credentials for build user to pull authenticated images * Revert commit to test * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1388) chore(tag-reference): change tag reference for 4.14.6 * feat: bump 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Juan Felipe Gonzalez Ortiz <53414652+felipegonzalezmv@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Julia Magán <80041853+juliamagan@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> * feat: bump 4.14.8 * Updates OpenSearch Dashboards to version 2.19.6 * Merge 4.14.7 into 4.14.8 (#1458) * feat: bump 4.14.7 * Change tag reference for 4.14.7 (#1432) fix: update tag references to 4.14.7 in dashboard build workflows --------- Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> * Change bumper_repository workflows merge type (#1463) * fix: use squash merge strategy in bumper repository workflow Change gh pr merge from --merge to --squash in 4_bumper_repository.yml so bump PRs land as a single squashed commit, consistent with this repo's squash-merge convention for single-purpose PRs. Related to #1459 Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * fix: correct inverted changelog dates in wazuh-dashboard.spec The 4.14.8 and 4.10.5 changelog entries had inverted dates (4.14.8 dated before 4.10.5, breaking the otherwise strictly-descending order). Swap the two dates so 4.14.8 correctly sits above 4.10.5 chronologically. Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * fix: reorder changelog entries instead of altering their dates The previous commit incorrectly swapped the 4.14.8 and 4.10.5 entries' dates to fix the ordering. That falsifies each entry's actual release date. Instead, reorder the two entries (move 4.10.5, dated later, above 4.14.8) so the changelog restores descending order while keeping each entry's real date unchanged. Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> --------- Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * Remove unnecessary debhelper install-time dependency (#1484) fix: remove unnecessary debhelper install-time dependency debhelper is only required to build the .deb package (declared under Build-Depends in dev-tools/build-packages/deb/debian/control), not to install a pre-built one. Remove it from the apt-get install steps used to test package install/upgrade. Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> Co-authored-by: Claude <noreply@anthropic.com> --------- Signed-off-by: yenienserrano <ian.serrano@wazuh.com> Signed-off-by: Álex Ruiz <alejandro.ruiz.becerra@wazuh.com> Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Signed-off-by: JuanGarriuz <juangarriuz@gmail.com> Signed-off-by: Nicolas Agustin Guevara Pihen <42900763+Tostti@users.noreply.github.com> Signed-off-by: Raul Del Pozo Moreno <14913942+rauldpm@users.noreply.github.com> Signed-off-by: gonzaarancibia <gonzaloarancibia48@gmail.com> Signed-off-by: Gonzalo Arancibia <72573241+gonzaarancibia@users.noreply.github.com> Signed-off-by: Ruchi Sharma <ruchi492@gmail.com> Signed-off-by: Federico Rodriguez <federico.rodriguez@wazuh.com> Signed-off-by: Yulong Ruan <ruanyl@amazon.com> Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com> Signed-off-by: sumukhswamy <sumukhhs@amazon.com> Signed-off-by: Antonio <34042064+Desvelao@users.noreply.github.com> Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Nicolas Agustin Guevara Pihen <42900763+Tostti@users.noreply.github.com> Co-authored-by: Guido Modarelli <38738725+guidomodarelli@users.noreply.github.com> Co-authored-by: Álex Ruiz <alejandro.ruiz.becerra@wazuh.com> Co-authored-by: Maximiliano Ibarra <maximiliano.ibarra@wazuh.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> Co-authored-by: Tostti <nicolas.guevara.pihen@gmail.com> Co-authored-by: Raul Del Pozo Moreno <raul.delpozo@wazuh.com> Co-authored-by: Luciano Gorza <103193307+lucianogorza@users.noreply.github.com> Co-authored-by: Federico Rodriguez <federico.rodriguez@wazuh.com> Co-authored-by: Chantal Belén kelm <99441266+chantal-kelm@users.noreply.github.com> Co-authored-by: JuanGarriuz <juangarriuz@gmail.com> Co-authored-by: JuanGarriuz <juan.garcia@wazuh.com> Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> Co-authored-by: Raul Del Pozo Moreno <14913942+rauldpm@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Gonzalo Arancibia <72573241+gonzaarancibia@users.noreply.github.com> Co-authored-by: Ruchi Sharma <ruchi492@gmail.com> Co-authored-by: Juan Felipe Gonzalez Ortiz <53414652+felipegonzalezmv@users.noreply.github.com> Co-authored-by: gonzaarancibia <gonzaloarancibia48@gmail.com> Co-authored-by: Sayali Gaikawad <gaiksaya@amazon.com> Co-authored-by: opensearch-trigger-bot[bot] <98922864+opensearch-trigger-bot[bot]@users.noreply.github.com> Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com> Co-authored-by: opensearch-changeset-bot[bot] <154024398+opensearch-changeset-bot[bot]@users.noreply.github.com> Co-authored-by: Sumukh Swamy <sumukhhs@amazon.com> Co-authored-by: Amardeepsingh Siglani <amardeep7194@gmail.com> Co-authored-by: Yulong Ruan <ruanyl@amazon.com> Co-authored-by: Maximiliano Ibarra <6089438+Machi3mfl@users.noreply.github.com> Co-authored-by: Julia Magán <80041853+juliamagan@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Diego García <82405377+Ripdiegozz@users.noreply.github.com> Co-authored-by: Claude <noreply@anthropic.com>

* Migrate 4.10.4 to 2.19.5 (#1187) * Compatibility with OpenSearch 2.11.1 (#131) Signed-off-by: yenienserrano <ian.serrano@wazuh.com> Signed-off-by: Álex Ruiz <alejandro.ruiz.becerra@wazuh.com> Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Álex Ruiz <alejandro.ruiz.becerra@wazuh.com> Co-authored-by: Maximiliano Ibarra <maximiliano.ibarra@wazuh.com> Co-authored-by: Nicolas Agustin Guevara Pihen <42900763+Tostti@users.noreply.github.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> * Add script test packages (#133) * 140 update the repo with the latest changes of wazuh dashboard (#141) * Modify action to allow uploading artifact to S3 (#151) * Modify package generation actions (#157) * Remove unrequired bundle * Fix service * Fix repository tests (#163) * Fix reference in building workflow * Fix tar error in build workflow (#168) * Fix errors in package build workflow (#169) * Add secret for aws region (#171) * Change default theme (#174) * Add ID input to workflows (#179) * Fix css selector to login button (#181) * Fix error generating packages in branches that contain `/` (#183) * Add information to build workflow title (#188) * Build packages with docker (#185) Co-authored-by: Federico Rodriguez <federico.rodriguez@wazuh.com> * Added S3 URI output to package generation upload (#190) * Added missing name statement in package generation workflows (#191) * Added missing name statement in package generation workflows * Sync 4.9.0 to 4.10.0 (#269) Co-authored-by: Luciano Gorza <103193307+lucianogorza@users.noreply.github.com> Co-authored-by: Chantal Belén kelm <99441266+chantal-kelm@users.noreply.github.com> * Change the path to the name of the application to the logo redirection (#276) Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Remove setting new home (#282) * Merge 4.9.1 into 4.10.0 (#306) Signed-off-by: JuanGarriuz <juangarriuz@gmail.com> Co-authored-by: Federico Rodriguez <federico.rodriguez@wazuh.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> Co-authored-by: Nicolas Agustin Guevara Pihen <42900763+Tostti@users.noreply.github.com> Co-authored-by: JuanGarriuz <juangarriuz@gmail.com> Co-authored-by: Raul Del Pozo Moreno <raul.delpozo@wazuh.com> * Merge 4.9.1 into 4.10.0 (#322) Co-authored-by: Chantal Belén kelm <99441266+chantal-kelm@users.noreply.github.com> Co-authored-by: JuanGarriuz <juan.garcia@wazuh.com> Co-authored-by: Federico Rodriguez <federico.rodriguez@wazuh.com> Co-authored-by: Nicolas Agustin Guevara Pihen <42900763+Tostti@users.noreply.github.com> * Bump 4.10.0 rev 01 (#323) * Fix error RPM package checking files (#326) * Merge 4.9.1 into 4.10.0 (#350) Co-authored-by: Federico Rodriguez <federico.rodriguez@wazuh.com> * Bump 4.10.0 revision 02 (#352) * Bump revision to 04 (#356) (#364) Co-authored-by: Federico Rodriguez <federico.rodriguez@wazuh.com> * Bump 4.10.0 rev 03 (#369) * Reduced the loading logo size (#373) * Change order of menu sections (#372) Co-authored-by: Federico Rodriguez <federico.rodriguez@wazuh.com> * Avoid duplicate package creation (#385) * Merge 4.9.2 into 4.10.0 (#395) Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> * Bump revision to 4.10.0-04 (#404) * Remove validation for duplicate packages (#406) * Update the actions' version (#394) Co-authored-by: Federico Rodriguez <federico.rodriguez@wazuh.com> * Reorder sections (#413) * Notification plugin registered in the Explore category (#422) * Fix help menu links (#424) * Bump 4.10.0 rev 05 (#426) * Fix actions artifact plugins name (#428) * Unzip command not found in package generation action (#431) * Bump 4.10.0 rev 06 (#436) * Fix packages generation (#445) * Bump 4.10.0 rev 07 (#452) * Support Wazuh 4.10.1 rev 00 (#464) Signed-off-by: Nicolas Agustin Guevara Pihen <42900763+Tostti@users.noreply.github.com> Co-authored-by: Guido Modarelli <38738725+guidomodarelli@users.noreply.github.com> * Merge 4.10.0 into 4.10.1 (#478) Co-authored-by: JuanGarriuz <juangarriuz@gmail.com> Co-authored-by: Nicolas Agustin Guevara Pihen <nicolas.guevara.pihen@gmail.com> * Fix red mask style for chromium browsers (#481) * Bump revision to 4.10.1 01 (#487) * Set reference in actions to the final tag (#490) * Support Wazuh 4.10.2 revision 00 (#653) * Change centos latest image (#660) * chore(bump): 4.10.2 rev 01 * Set final tag in build workflow (#675) * Bump version 4.10.3 (#678) * File `/etc/default/wazuh-dashboard` modified during upgrade v4.10.2-rc1 (#668) Co-authored-by: Federico Rodriguez <federico.rodriguez@wazuh.com> * Add PR write permission (#743) * Development - AWS XDR+SIEM Refactor Tier 2 - Dashboard - packages-dev.internal.wazuh.com bucket migration (#760) * Revert "Development - AWS XDR+SIEM Refactor Tier 2 - Dashboard - packages-dev.internal.wazuh.com bucket migration" (#783) Co-authored-by: Federico Rodriguez <federico.rodriguez@wazuh.com> * Bump version 4.10.4 (#820) * Merge 4.10.3 into 4.10.4 (#844) Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Federico Rodriguez <federico.rodriguez@wazuh.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> * Development - AWS XDR+SIEM Refactor Tier 2 - Dashboard - packages-dev.internal.wazuh.com bucket migration (#788) Signed-off-by: Federico Rodriguez <federico.rodriguez@wazuh.com> Co-authored-by: Guido Modarelli <guidomodarelli25@gmail.com> Co-authored-by: Federico Rodriguez <federico.rodriguez@wazuh.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> * Adds version-specific dashboard build workflows (4.10.4) (#850) * Updates OpenSearch Dashboards version to 2.19.5 * Commit to test Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Adds dark mode support to Chrome service * Enables new home page UI settings export * Revert "Commit to test" This reverts commit 2690657. * Adds translation files to RPM package spec * Commit to test * Revert "Commit to test" This reverts commit 8d26b82. --------- Signed-off-by: yenienserrano <ian.serrano@wazuh.com> Signed-off-by: Álex Ruiz <alejandro.ruiz.becerra@wazuh.com> Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Signed-off-by: JuanGarriuz <juangarriuz@gmail.com> Signed-off-by: Nicolas Agustin Guevara Pihen <42900763+Tostti@users.noreply.github.com> Signed-off-by: Federico Rodriguez <federico.rodriguez@wazuh.com> Co-authored-by: Álex Ruiz <alejandro.ruiz.becerra@wazuh.com> Co-authored-by: Maximiliano Ibarra <maximiliano.ibarra@wazuh.com> Co-authored-by: Nicolas Agustin Guevara Pihen <42900763+Tostti@users.noreply.github.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> Co-authored-by: Tostti <nicolas.guevara.pihen@gmail.com> Co-authored-by: Raul Del Pozo Moreno <raul.delpozo@wazuh.com> Co-authored-by: Luciano Gorza <103193307+lucianogorza@users.noreply.github.com> Co-authored-by: Federico Rodriguez <federico.rodriguez@wazuh.com> Co-authored-by: Chantal Belén kelm <99441266+chantal-kelm@users.noreply.github.com> Co-authored-by: JuanGarriuz <juangarriuz@gmail.com> Co-authored-by: JuanGarriuz <juan.garcia@wazuh.com> Co-authored-by: Guido Modarelli <38738725+guidomodarelli@users.noreply.github.com> Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> Co-authored-by: Guido Modarelli <guidomodarelli25@gmail.com> * Bump 4.10.4-rc1 (#1271) change: bump 4.10.4 rev01 * Bump Wazuh version to 4.10.5 (#1304) * Migrate dashboard package-building workflow runners to AWS CodeBuild (#1373) * Migrate dashboard package-building workflow runners to AWS CodeBuild Replace the GitHub-hosted `ubuntu-latest` runners in the 4.x package build workflows with AWS CodeBuild runners (codebuild-github-actions-codebuild-runner-dashboard-<arch>-<run_id>-<run_attempt>), backporting the runner migration done in #1372. - 4_builderpackage_dashboard.yml: setup-variables and validate-job to the amd runner; build-and-test-package to the arch-conditional runner. - 4_builderpackage_dashboard_core.yml: build job to the arch-conditional runner (matrix.ARCHITECTURE). - build_base.yml / build_wazuh_dashboard_with_plugins.yml: route arm builds to CodeBuild, keep amd on GitHub-hosted runners (mirrors #1372). Closes opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Commit to test * Remove support for arm64 architecture in package build workflow * Remove arm64 runner configuration from dashboard build workflow * Refactor build workflow to create non-root user and streamline build process * Refactor dashboard build workflows to use github.workspace for artifact paths * Add Docker Hub credentials to build plugins job in workflow * Create non-root user for build and test steps in workflow * Add Docker Hub login step to avoid anonymous pull rate limits in workflow * Add Docker Hub login step to avoid pull rate limits in AWS CodeBuild workflow * Fix indentation for Docker Hub login step in AWS CodeBuild workflow * Refactor build workflow to create non-root user after Docker Hub login and copy credentials for authenticated image pulls * Revert commit to test --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Migrate artifact handling to S3 in dashboard workflows (#1398) * Migrate dashboard workflows to use S3 for artifact storage and update permissions * Fix workflow references for S3 migration in dashboard plugins and security plugin jobs * Inherit secrets for build job in dashboard package workflow * Update workflow references to use version 4.10.5 for dashboard and plugins * Add 'with' parameters for dashboard and plugin builds in workflow * Bump 2.19.6 * ci(dashboard): upload dashboard package and sha512 to S3 internal repository Mirrors the artifact-exchange convention already used by the plugin and dashboard tarball builds, uploading to ${CI_DEV_INTERNAL_BUCKET}/${EXECUTION_REPOSITORY}/${github.run_id}/ in addition to the existing upload to the packages bucket. Co-Authored-By: Claude <noreply@anthropic.com> Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> --------- Signed-off-by: yenienserrano <ian.serrano@wazuh.com> Signed-off-by: Álex Ruiz <alejandro.ruiz.becerra@wazuh.com> Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Signed-off-by: JuanGarriuz <juangarriuz@gmail.com> Signed-off-by: Nicolas Agustin Guevara Pihen <42900763+Tostti@users.noreply.github.com> Signed-off-by: Federico Rodriguez <federico.rodriguez@wazuh.com> Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> Co-authored-by: Álex Ruiz <alejandro.ruiz.becerra@wazuh.com> Co-authored-by: Maximiliano Ibarra <maximiliano.ibarra@wazuh.com> Co-authored-by: Nicolas Agustin Guevara Pihen <42900763+Tostti@users.noreply.github.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> Co-authored-by: Tostti <nicolas.guevara.pihen@gmail.com> Co-authored-by: Raul Del Pozo Moreno <raul.delpozo@wazuh.com> Co-authored-by: Luciano Gorza <103193307+lucianogorza@users.noreply.github.com> Co-authored-by: Federico Rodriguez <federico.rodriguez@wazuh.com> Co-authored-by: Chantal Belén kelm <99441266+chantal-kelm@users.noreply.github.com> Co-authored-by: JuanGarriuz <juangarriuz@gmail.com> Co-authored-by: JuanGarriuz <juan.garcia@wazuh.com> Co-authored-by: Guido Modarelli <38738725+guidomodarelli@users.noreply.github.com> Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> Co-authored-by: Guido Modarelli <guidomodarelli25@gmail.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Claude <noreply@anthropic.com>

Migrate GitHub runners to AWS runners

8381106

yenienserrano self-assigned this Jun 18, 2026

github-actions Bot added the distinguished-contributor label Jun 18, 2026

Refactor runner naming format in workflow files for consistency

87df0ba

yenienserrano added 4 commits June 18, 2026 11:05

Update revision retrieval method in build workflow to use package.json

b56f2b2

Add non-root build user and update bootstrap command for permissions

52de78f

Refactor runner naming format in workflow files to use format functio…

399bb3a

…n and create non-root build user in plugin build workflow

Update build commands to run as non-root user for improved security

1d63398

Fix artifact renaming path in build workflow for consistency

ccaa21d

yenienserrano added 13 commits June 18, 2026 12:55

Add installation of zip utility for packaging plugins

607b893

Refactor artifact paths in build workflow to use github.workspace for…

af2aa1e

… consistency

Install zip utility conditionally for arm64 architecture in build wor…

1a1fc31

…kflow

Add workarounds for AWS CodeBuild runners to handle missing tools and…

48734ba

… permissions

Add Docker Hub login step and conditional Docker daemon start for AWS…

1734a9b

… CodeBuild

Improve Docker daemon startup process in build workflow for ARM archi…

fd65dcc

…tecture

Add Docker Hub login and start Docker daemon for AWS CodeBuild runners

602b1ea

Add workarounds for AWS CodeBuild runners to handle systemd service m…

3167120

…anagement

Refactor DEB package testing to use systemd-enabled container and str…

42a0c14

…eamline upgrade checks

Add workaround to install pip3 for AWS CodeBuild ARM runners

1c25861

Add missing apt-get update before package installation in deb-test sc…

7c36398

…ripts

Add workaround for AWS CodeBuild ARM runners to install pip3 and open…

0f46d84

…ssh-client

Refactor GitHub Actions workflows to use formatted runner names for A…

fed0250

…WS CodeBuild runners

yenienserrano marked this pull request as ready for review June 19, 2026 18:18

Refactor GitHub Actions workflows to use updated runner names for AWS…

15600d1

… CodeBuild

yenienserrano changed the base branch from main to 5.0.0 June 22, 2026 14:50

asteriscos approved these changes Jun 22, 2026

View reviewed changes

asteriscos merged commit 66395ac into 5.0.0 Jun 22, 2026
31 of 64 checks passed

asteriscos deleted the change/5246-5.0.0-migrate-github-runners-to-aws-runners branch June 22, 2026 14:58

Navigation Menu

Uh oh!

Migrate GitHub runners to AWS runners - #1372

Migrate GitHub runners to AWS runners#1372
asteriscos merged 21 commits into
5.0.0from
change/5246-5.0.0-migrate-github-runners-to-aws-runners

yenienserrano commented Jun 18, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jun 18, 2026 •

edited

Loading

Uh oh!

asteriscos left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

yenienserrano commented Jun 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Description

Test

Check List

Uh oh!

github-actions Bot commented Jun 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

❌ 22 Jest Test Failure(s)

📄 junit-jest-group2-Linux/TEST-Jest Tests.xml

📄 junit-jest-integration-Linux/TEST-Jest Integration Tests.xml

📄 junit-jest-integration-Windows/TEST-Jest Integration Tests.xml

Uh oh!

asteriscos left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

yenienserrano commented Jun 18, 2026 •

edited

Loading

github-actions Bot commented Jun 18, 2026 •

edited

Loading

📄 `junit-jest-group2-Linux/TEST-Jest Tests.xml`

📄 `junit-jest-integration-Linux/TEST-Jest Integration Tests.xml`

📄 `junit-jest-integration-Windows/TEST-Jest Integration Tests.xml`