Merge 4.14.9 into 5.0.0 - #1500
Merged
Merged
Conversation
feat: bump 4.14.9
fix: remove unnecessary debhelper install-time dependency debhelper is only required to build the .deb package (declared under Build-Depends in dev-tools/build-packages/deb/debian/control), not to install a pre-built one. Remove it from the apt-get install steps used to test package install/upgrade. Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> Co-authored-by: Claude <noreply@anthropic.com>
4 tasks
asteriscos
approved these changes
Aug 14, 2026
Desvelao
added a commit
that referenced
this pull request
Aug 14, 2026
* feat: bump 5.0.0 * Migrate GitHub runners to AWS runners (#1372) * Migrate GitHub runners to AWS runners * Refactor runner naming format in workflow files for consistency * Update revision retrieval method in build workflow to use package.json * Add non-root build user and update bootstrap command for permissions * Refactor runner naming format in workflow files to use format function and create non-root build user in plugin build workflow * Update build commands to run as non-root user for improved security * Fix artifact renaming path in build workflow for consistency * Add installation of zip utility for packaging plugins * Refactor artifact paths in build workflow to use github.workspace for consistency * Install zip utility conditionally for arm64 architecture in build workflow * Add workarounds for AWS CodeBuild runners to handle missing tools and permissions * Add Docker Hub login step and conditional Docker daemon start for AWS CodeBuild * Improve Docker daemon startup process in build workflow for ARM architecture * Add Docker Hub login and start Docker daemon for AWS CodeBuild runners * Add workarounds for AWS CodeBuild runners to handle systemd service management * Refactor DEB package testing to use systemd-enabled container and streamline upgrade checks * Add workaround to install pip3 for AWS CodeBuild ARM runners * Add missing apt-get update before package installation in deb-test scripts * Add workaround for AWS CodeBuild ARM runners to install pip3 and openssh-client * Refactor GitHub Actions workflows to use formatted runner names for AWS CodeBuild runners * Refactor GitHub Actions workflows to use updated runner names for AWS CodeBuild * Improve errors formatting in check flyout (#1379) * feat: improve error formatting in check flyout and not ready yet callouts * chore(changelog): add entry --------- Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> * Remove references to plugins not installed (#1382) * chore: remove anomalyDetectionDashboard build references * chore: add changelog entry * Hide all visible references to the Sample Data App (#1390) * Remove references to the Sample Data App in getNoItemsMessage * Remove all references to the Sample Data App in getNoItemsMessage tests * Merge 4.14.6 into 4.14.7 (#1393) (#1394) * Migrate dashboard package-building workflow runners to AWS CodeBuild (#1374) * Migrate dashboard package-building workflow runners to AWS CodeBuild Replace the self-hosted `wz-linux-amd64` / `wz-linux-arm64` runners in the 4.x package build workflows with AWS CodeBuild runners (codebuild-github-actions-codebuild-runner-dashboard-<arch>-<run_id>-<run_attempt>), backporting the runner migration done in #1372. - 4_builderpackage_dashboard.yml: setup-variables and validate-job to the amd runner; build-package, test-package and upload-package to the arch-conditional runner. - 4_builderpackage_dashboard_core.yml: build job to the arch-conditional runner (inputs.ARCHITECTURE). - build_base.yml / build_wazuh_dashboard_with_plugins.yml: route arm builds to CodeBuild, keep amd on GitHub-hosted runners (mirrors #1372). Closes opensearch-project#5246 * Use format() for conditional CodeBuild runners and run core build as non-root Align with #1372 to avoid runtime errors on the migrated CodeBuild runners: - Conditional `runs-on` expressions cannot nest `${{ }}` inside a string literal (the inner expression is not interpolated, so the runner label would contain the literal text and never match a runner). Replace them with `format(...-{0}-{1}, github.run_id, github.run_attempt)`. - CodeBuild runners execute as root and the OpenSearch Dashboards build tooling misbehaves as root. In 4_builderpackage_dashboard_core.yml run `yarn osd bootstrap` and `yarn build-platform` as a non-root `builduser`, mirroring the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 * Use relative path when renaming the core build artifact The "Rename artifact" step used an absolute GitHub-hosted path (/home/runner/work/wazuh-dashboard/wazuh-dashboard/artifacts/target/...), which does not exist on the AWS CodeBuild runners and makes the `mv` fail. Since the job already sets `working-directory: ./artifacts`, use the relative `target/...` path so it works on any runner. Mirrors the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 * Use github.workspace instead of a shared CURRENT_DIR output for artifact paths * test° * Make package build/test work on AWS CodeBuild runners * Guard systemctl calls so DEB package tests run without systemd * Migrate DEB package tests to use systemd-enabled container and streamline installation scripts * Add workarounds for missing zip, pip3, and openssh-client on AWS CodeBuild ARM runners * Pin reusable workflow refs to 4.14.6 --------- * Migrate GitHub runners to aws runners (#1380) * Add DockerHub secrets and create non-root build user in package build workflow * Commit to test * Add Docker Hub credentials for build user to pull authenticated images * Revert commit to test * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1388) chore(tag-reference): change tag reference for 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> * Migrate artifact handling to S3 in dashboard workflows (#1401) * Enhance AWS S3 integration in build workflows by adding execution repository input and updating artifact upload processes * Inherit secrets in build jobs for improved security and access management * Fix S3 upload commands in build workflow to remove redundant 's3://' prefix * Add logging for downloaded artifacts in S3 workflow * Fix S3 artifact download path by adding trailing slash to bucket URL * Upgrade AWS CLI configuration to use version 6 in dashboard workflows * Migrate artifact downloads to S3 in dashboard workflows and update package paths in test scripts * Fix package path in SCP command for RPM installation in dashboard build workflow * Update execution repository references to version 5 in dashboard workflows * Fix package generation failed because the SHA-512 file was missing (#1407) fix(workflow): empty variable interpolation on uploading sha512 file * Merge 4.14.7 into 5.0.0 (#1409) * Migrate artifact handling to S3 in dashboard workflows (#1397) * Adds changelog entries for versions 4.10.2–4.10.5 (#1312) * Refactor Allocator instance/composite names and add custom AWS tagging for better resource management 4x (#1284) * feat: refactor AWS instance creation with custom tags in build workflow * Refactor AWS instance creation to streamline custom tagging and improve resource management * feat: bump 4.14.6 * Revert "Bump 4.14.6 branch" * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1318) chore(tag-reference): change tag reference for 4.14.6 * Fixes changelog entry order in RPM spec (#1320) * Fixes changelog entry order in RPM spec * Updates workflow refs to v4.14.6-rc1 * Updates workflow refs 4.14.6 (#1321) * Migrate dashboard package-building workflow runners to AWS CodeBuild (#1374) * Migrate dashboard package-building workflow runners to AWS CodeBuild Replace the self-hosted `wz-linux-amd64` / `wz-linux-arm64` runners in the 4.x package build workflows with AWS CodeBuild runners (codebuild-github-actions-codebuild-runner-dashboard-<arch>-<run_id>-<run_attempt>), backporting the runner migration done in #1372. - 4_builderpackage_dashboard.yml: setup-variables and validate-job to the amd runner; build-package, test-package and upload-package to the arch-conditional runner. - 4_builderpackage_dashboard_core.yml: build job to the arch-conditional runner (inputs.ARCHITECTURE). - build_base.yml / build_wazuh_dashboard_with_plugins.yml: route arm builds to CodeBuild, keep amd on GitHub-hosted runners (mirrors #1372). Closes opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use format() for conditional CodeBuild runners and run core build as non-root Align with #1372 to avoid runtime errors on the migrated CodeBuild runners: - Conditional `runs-on` expressions cannot nest `${{ }}` inside a string literal (the inner expression is not interpolated, so the runner label would contain the literal text and never match a runner). Replace them with `format('...-{0}-{1}', github.run_id, github.run_attempt)`. - CodeBuild runners execute as root and the OpenSearch Dashboards build tooling misbehaves as root. In 4_builderpackage_dashboard_core.yml run `yarn osd bootstrap` and `yarn build-platform` as a non-root `builduser`, mirroring the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use relative path when renaming the core build artifact The "Rename artifact" step used an absolute GitHub-hosted path (/home/runner/work/wazuh-dashboard/wazuh-dashboard/artifacts/target/...), which does not exist on the AWS CodeBuild runners and makes the `mv` fail. Since the job already sets `working-directory: ./artifacts`, use the relative `target/...` path so it works on any runner. Mirrors the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use github.workspace instead of a shared CURRENT_DIR output for artifact paths * test° * Make package build/test work on AWS CodeBuild runners * Guard systemctl calls so DEB package tests run without systemd * Migrate DEB package tests to use systemd-enabled container and streamline installation scripts * Add workarounds for missing zip, pip3, and openssh-client on AWS CodeBuild ARM runners * Pin reusable workflow refs to 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Migrate GitHub runners to aws runners (#1380) * Add DockerHub secrets and create non-root build user in package build workflow * Commit to test * Add Docker Hub credentials for build user to pull authenticated images * Revert commit to test * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1388) chore(tag-reference): change tag reference for 4.14.6 * feat: migrate artifact handling to S3 in dashboard workflows * Commit to test * feat: remove AWS secrets from dashboard build workflow * feat: remove AWS IAM role and region secrets from dashboard build workflow * feat: inherit secrets in the build job for dashboard package workflow * feat: add workflow_name input to plugin workflows in dashboard package build * feat: migrate artifact handling to use EXECUTION_REPOSITORY for S3 uploads * feat: update AWS CLI configuration to use v6 and assume role for S3 uploads * feat: update AWS role for artifact handling in dashboard workflow * feat: update CI_DEV_INTERNAL_BUCKET to use secrets and inherit secrets for plugin builds * feat: update CI_DEV_INTERNAL_BUCKET to use secrets for improved security * feat: add id-token permission for plugin build jobs in dashboard workflow * feat: update workflow references to version 4.14.6 for dashboard and plugins * Commit to test * Revert commit to test --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Juan Felipe Gonzalez Ortiz <53414652+felipegonzalezmv@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Julia Magán <80041853+juliamagan@users.noreply.github.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> * Merge 4.14.6 into 4.14.7 (#1408) * Adds changelog entries for versions 4.10.2–4.10.5 (#1312) * Refactor Allocator instance/composite names and add custom AWS tagging for better resource management 4x (#1284) * feat: refactor AWS instance creation with custom tags in build workflow * Refactor AWS instance creation to streamline custom tagging and improve resource management * feat: bump 4.14.6 * Revert "Bump 4.14.6 branch" * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1318) chore(tag-reference): change tag reference for 4.14.6 * Fixes changelog entry order in RPM spec (#1320) * Fixes changelog entry order in RPM spec * Updates workflow refs to v4.14.6-rc1 * Updates workflow refs 4.14.6 (#1321) * Migrate dashboard package-building workflow runners to AWS CodeBuild (#1374) * Migrate dashboard package-building workflow runners to AWS CodeBuild Replace the self-hosted `wz-linux-amd64` / `wz-linux-arm64` runners in the 4.x package build workflows with AWS CodeBuild runners (codebuild-github-actions-codebuild-runner-dashboard-<arch>-<run_id>-<run_attempt>), backporting the runner migration done in #1372. - 4_builderpackage_dashboard.yml: setup-variables and validate-job to the amd runner; build-package, test-package and upload-package to the arch-conditional runner. - 4_builderpackage_dashboard_core.yml: build job to the arch-conditional runner (inputs.ARCHITECTURE). - build_base.yml / build_wazuh_dashboard_with_plugins.yml: route arm builds to CodeBuild, keep amd on GitHub-hosted runners (mirrors #1372). Closes opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use format() for conditional CodeBuild runners and run core build as non-root Align with #1372 to avoid runtime errors on the migrated CodeBuild runners: - Conditional `runs-on` expressions cannot nest `${{ }}` inside a string literal (the inner expression is not interpolated, so the runner label would contain the literal text and never match a runner). Replace them with `format('...-{0}-{1}', github.run_id, github.run_attempt)`. - CodeBuild runners execute as root and the OpenSearch Dashboards build tooling misbehaves as root. In 4_builderpackage_dashboard_core.yml run `yarn osd bootstrap` and `yarn build-platform` as a non-root `builduser`, mirroring the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use relative path when renaming the core build artifact The "Rename artifact" step used an absolute GitHub-hosted path (/home/runner/work/wazuh-dashboard/wazuh-dashboard/artifacts/target/...), which does not exist on the AWS CodeBuild runners and makes the `mv` fail. Since the job already sets `working-directory: ./artifacts`, use the relative `target/...` path so it works on any runner. Mirrors the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use github.workspace instead of a shared CURRENT_DIR output for artifact paths * test° * Make package build/test work on AWS CodeBuild runners * Guard systemctl calls so DEB package tests run without systemd * Migrate DEB package tests to use systemd-enabled container and streamline installation scripts * Add workarounds for missing zip, pip3, and openssh-client on AWS CodeBuild ARM runners * Pin reusable workflow refs to 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Migrate GitHub runners to aws runners (#1380) * Add DockerHub secrets and create non-root build user in package build workflow * Commit to test * Add Docker Hub credentials for build user to pull authenticated images * Revert commit to test * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1388) chore(tag-reference): change tag reference for 4.14.6 * feat: bump 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Juan Felipe Gonzalez Ortiz <53414652+felipegonzalezmv@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Julia Magán <80041853+juliamagan@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Juan Felipe Gonzalez Ortiz <53414652+felipegonzalezmv@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Julia Magán <80041853+juliamagan@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> * feat: bump 5.0.0 * Reordering the changelog in RPM packages (#1414) * Revert bump 5.0.0 branch (#1416) revert commit * Infinite requests after navigation (#1400) * fix: apps sometimes not unmounting * chore: add changelog entry * chore: update entry changelog --------- Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> * Remove deprecated isProduction field (#1421) * refactor: remove deprecated is_production field from package builders * refactor: remove deprecated isProduction field * chore: add changelog entry * feat: bump 5.0.0 * Optimize Draft PRs (#1415) * feat: update pull request triggers to include additional types * feat: optimize draft PR handling in build workflow * feat: optimize workflows to skip execution for draft pull requests * feat: add concurrency settings to workflow files for improved draft PR handling * fix: update import path for healthCheckConfig in injected_metadata_service.mock.ts * fix: update expected field counts in management tests * test: enhance notReady server setup with injectable route handler * test: update HomePublicPlugin tests to reflect changes in app registration logic * fix: update processProcOutput to handle additional deprecation warning and browserslist warning * chore: optimize workflows by removing Windows job configurations and commenting out unused test groups * Update security policy (#1426) docs(security): update security policy * Dashboard - Changelog standardization & enforcement (#1417) * chore(devx): add changelog enforcer CI workflow * chore(devx): standardize CHANGELOG format * chore(devx): standardize CHANGELOG format * chore(devx): update bumper to regenerate CHANGELOG on version bump The update_changelog() function now rewrites CHANGELOG.md using the new standard format: version header, Added section with support entry, and Prior versions section with links pruned to the last 2 minor versions. * fix(devx): use branch name without v prefix in prior version links * chore(devx): use actions/checkout@v6 in changelog verifier workflows * feat: add changelog verifier GitHub Action - Introduced a new workflow to verify that CHANGELOG.md is updated for pull requests unless the 'no-changelog' label is applied. feat: implement unit tests for tools scripts - Created a new workflow to run unit tests for tools scripts located under the tools/ directory on pull requests. - Tests are executed in isolated environments using throwaway fixture repositories. feat: add changelog_bump.sh script - Implemented a script to manage the CHANGELOG.md file during version bumps, ensuring proper formatting and prior version references. chore: add .gitignore for test temporary files - Added a .gitignore file to exclude temporary files generated during testing. docs: create README for tools unit tests - Documented the usage and structure of unit tests for tools scripts, including instructions for running tests. test: add run_all.sh to execute all unit tests - Created a script to run all unit tests for tools scripts and report results. test: implement unit tests for changelog_bump.sh - Added comprehensive tests for changelog_bump.sh, covering argument validation, version bumps, and changelog updates. test: implement unit tests for repository_bumper.sh - Added unit tests for repository_bumper.sh, validating argument handling, version bumps, and file updates. * chore: update changelog verifier workflow to use Ubuntu 24.04 and enhance concurrency settings --------- Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Make Discover CSV download row limit configurable (#1442) * feat: make Discover CSV download row limit configurable via reports.csv.maxRows (#1434) * Add change log * feat(discover): add reference to max row in csv export setting --------- Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> * Update CLAUDE configuration and add new skills (#1444) * Update CLAUDE configuration and add new skills - Enhance .gitignore to include specific CLAUDE settings and temporary files. - Revise CLAUDE.md to clarify project context and architecture. - Introduce new skills for analyzing vulnerabilities, checking standards, creating pull requests, developing issues, and resolving CVEs. - Add settings.json for CLAUDE permissions management. - Document workflows and commands for new skills in their respective SKILL.md files. * Enhance CLAUDE.md documentation for local development - Clarify the usage of the yarn run v1.22.22 info Visit https://yarnpkg.com/en/docs/cli/run for documentation about this command. command for the raw OSD dev server. - Introduce a new section detailing the local run model using the repo's Docker dev environment. - Provide instructions for running the full stack locally, including mounting external plugin repositories. * change message to no reference local routes --------- Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> * Create issue-creation skill and update PR template (#1447) * Enhance issue and PR templates for clarity and consistency; add new issue creation skill Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * Remove redundant label type/task from task issue template Signed-off-by: Diego Garcia diego.garcia@wazuh.com * Document stale enhancement label in issue-creation skill for consistency Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * Standardize issue-creation skill to apply real Wazuh labels instead of stale template frontmatter Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * Align issue-creation skill section 3 style with sibling repos (prose, not a redundant label bullet list) Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * Fix task_template.md label claim: remove non-existent type/task, use level/task only Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * fix(skills): point create-pr example at a filled body, not the template The gh pr create example in step 6 pointed --body-file at the blank pull_request_template.md itself, which would file a PR with unfilled placeholder text if run verbatim. Point it at a filled temp file instead. Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> * docs: remove How to Test section from PR template Manual verification steps are now covered elsewhere; drop the redundant section to simplify the template. Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> * docs: rework PR template review checklist Replace the fixed test-command checklist with broader review items covering evidence, documentation, dependencies, and labeling. Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> --------- Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> Signed-off-by: Diego Garcia diego.garcia@wazuh.com Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> * feat: bump 5.0.0 * feat: revert 5.0.0 references * Enforce Prettier formatting check on commit to prevent Prettier failures in PR pipelines (#1449) chore(devx): add prettier check to pre-commit hook and CI workflow * feat: bump 5.0.0 * Merge 4.14.8 into 5.0.0 (#1460) * feat: bump 4.14.8 * Merge 4.14.7 into 4.14.8 (#1458) * feat: bump 4.14.7 * Change tag reference for 4.14.7 (#1432) fix: update tag references to 4.14.7 in dashboard build workflows --------- Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> --------- Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> * Change bumper_repository workflows merge type (#1464) fix: use squash merge strategy in bumper repository workflows Change gh pr merge from --merge to --squash in 4_/5_/6_bumper_repository.yml so bump PRs land as a single squashed commit, consistent with this repo's squash-merge convention for single-purpose PRs. Related to #1459 Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * Add wazuh-ai-assistant to the 5.x package build pipeline (#1465) wazuh/wazuh-dashboard-plugins#8790 adds the new Wazuh AI Assistant plugin under plugins/wazuh-ai-assistant/, alongside main, wazuh-core and wazuh-check-updates. The build-outputs and build-plugins matrices in 5_builderpackage_dashboard.yml are hardcoded per plugin, so without this change the new plugin would never be built or bundled into the final wazuh-dashboard package. Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Merge 4.14.8 into 5.0.0 (#1474) * Change bumper_repository workflows merge type (#1463) * fix: use squash merge strategy in bumper repository workflow Change gh pr merge from --merge to --squash in 4_bumper_repository.yml so bump PRs land as a single squashed commit, consistent with this repo's squash-merge convention for single-purpose PRs. Related to #1459 Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * fix: correct inverted changelog dates in wazuh-dashboard.spec The 4.14.8 and 4.10.5 changelog entries had inverted dates (4.14.8 dated before 4.10.5, breaking the otherwise strictly-descending order). Swap the two dates so 4.14.8 correctly sits above 4.10.5 chronologically. Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * fix: reorder changelog entries instead of altering their dates The previous commit incorrectly swapped the 4.14.8 and 4.10.5 entries' dates to fix the ordering. That falsifies each entry's actual release date. Instead, reorder the two entries (move 4.10.5, dated later, above 4.14.8) so the changelog restores descending order while keeping each entry's real date unchanged. Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> --------- Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * Merge 4.14.7 into 4.14.8 (#1473) feat: bump 4.14.7 Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> --------- Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> Co-authored-by: Diego García <82405377+Ripdiegozz@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> * Add AI assistant encryption key on installation (#1481) * feat: generate wazuh_ai_assistant encryption key on install Provision a random base64-encoded 32-byte wazuh_ai_assistant.encryptionKey into the OpenSearch Dashboards keystore during first install, reusing the existing keystore-creation guard in the deb postinst and rpm %post scripts. Falls back through openssl, /dev/urandom, and the bundled Node binary; logs a non-fatal warning and continues the install if generation fails. Upgrades are a no-op by design. Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * test: verify wazuh_ai_assistant.encryptionKey in CI package smoke tests Extend the existing deb install/uninstall smoke test and the RPM install CI step to assert opensearch-dashboards-keystore list contains the wazuh_ai_assistant.encryptionKey entry after a fresh install, catching regressions in the postinst/%post key-provisioning logic automatically. Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> --------- Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> * Change the changelog format to use a table per block (#1482) * Change the changelog format to use a table per block Render every Added/Changed/Fixed/Removed block as an Issue/Comment table, moving the existing references into the Issue column and keeping the descriptions unchanged. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Signed-off-by: Juan Felipe Gonzalez <felipegonzalezmv@hotmail.com> * Generate changelog tables in the changelog bumper The bumper reset CHANGELOG.md to bullet-list sections seeded with a "- Support for Wazuh X.Y.Z" entry. Emit an empty "| Issue | Comment |" table per section instead, so a bumped changelog starts in the table format, and drop the seeded entry, which had no reference to put in the Issue column. Update the tests, their fixtures and the tools/tests README accordingly. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Signed-off-by: Juan Felipe Gonzalez <felipegonzalezmv@hotmail.com> * Remove the Support for Wazuh changelog entry The entry had no issue or pull request reference, so in the new table format it rendered as a row with an empty Issue column. The changelog bumper no longer seeds it either. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Signed-off-by: Juan Felipe Gonzalez <felipegonzalezmv@hotmail.com> * Add missing issue to the changelog entry --------- Signed-off-by: Juan Felipe Gonzalez <felipegonzalezmv@hotmail.com> Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Merge 4.14.9 into 5.0.0 (#1487) Bump 4.14.9 branch (#1485) feat: bump 4.14.9 Co-authored-by: Wazuh CI <22834044+wazuhci@users.noreply.github.com> * Remove unnecessary debhelper install-time dependency (#1483) fix: remove unnecessary debhelper install-time dependency debhelper is only required to build the .deb package (declared under Build-Depends in dev-tools/build-packages/deb/debian/control), not to install a pre-built one. Remove it from the apt-get install steps used to test package install/upgrade. Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> Co-authored-by: Claude <noreply@anthropic.com> * Merge 4.14.9 into 5.0.0 (#1500) * Bump 4.14.9 branch (#1485) feat: bump 4.14.9 * Remove unnecessary debhelper install-time dependency (#1484) fix: remove unnecessary debhelper install-time dependency debhelper is only required to build the .deb package (declared under Build-Depends in dev-tools/build-packages/deb/debian/control), not to install a pre-built one. Remove it from the apt-get install steps used to test package install/upgrade. Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> Co-authored-by: Claude <noreply@anthropic.com> --------- Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> Co-authored-by: Wazuh CI <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Claude <noreply@anthropic.com> * fix(prettier): code style * Fix prettier --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Signed-off-by: Diego Garcia <diego.garcia@wazuh.com> Signed-off-by: Diego Garcia diego.garcia@wazuh.com Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com> Signed-off-by: Juan Felipe Gonzalez <felipegonzalezmv@hotmail.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Rodrigo López <37187963+rodrigofez@users.noreply.github.com> Co-authored-by: Diego García <82405377+Ripdiegozz@users.noreply.github.com> Co-authored-by: Gonzalo Arancibia <72573241+gonzaarancibia@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Juan Felipe Gonzalez Ortiz <53414652+felipegonzalezmv@users.noreply.github.com> Co-authored-by: Julia Magán <80041853+juliamagan@users.noreply.github.com> Co-authored-by: Vikman Fernandez-Castro <vmfdez90@gmail.com> Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Merge 4.14.9 into 5.0.0
Caution
Merge PR strategy: Squash and merge