Changes

• docker: remove CROWDSEC_CONTAINER_ENV (#4085) @mmetc
• refact cscli: define csconfig.Getter once (#4091) @mmetc
• refact load/save apic token: dependencies and sentinel errors (#4081) @mmetc
• pkg/csplugin: use backoff package to retry notifications (#3944) @mmetc
• refact pkg/database batching (#3906) @mmetc
• refact pkg/acquisition: split appsec.go (#4043) @mmetc
• refact pkg/acquisition: journalctl configuration (#4057) @mmetc
• lint revive: lower complexity threshold (#4056) @mmetc
• lint: unused parameters / 2 (#4055) @mmetc
• lint: unused parameters (#4049) @mmetc
• refact pkg/acquisition: split loki.go (#4034) @mmetc
• refact pkg/acquisition: split victorialogs.go (#4037) @mmetc
• refact pkg/acquisition: split wineventlog.go (#4036) @mmetc
• refact pkg/acquisition: split s3.go (#4035) @mmetc
• refact pkg/acquisition: split k8s_audit.go (#4033) @mmetc
• refact pkg/acquisition: split kinesis.go (#4032) @mmetc
• refact pkg/acquisition: split kafka.go (#4031) @mmetc
• refact pkg/acquisition: split cloudwatch.go (#4029) @mmetc
• refact pkg/acquisition: split http.go (#4030) @mmetc
• refactg pkg/acquisition: split file.go (#4038) @mmetc
• refact pkg/acquisition: split syslog.go (#4028) @mmetc
• papi: explicit context (#3973) @mmetc
• pkg/csplugin: remove unused function (#4019) @mmetc
• pkg/types -> new imports pt 4 (#4012) @mmetc
• pkg/types -> new imports pt 3 (#4014) @mmetc
• pkg/types -> new imports pt 2 (#4013) @mmetc
• pkg/types -> new imports pt 1 (#4011) @mmetc
• pkg/types -> pkg/{pipeline,fsutil,enrichment,logging...} (#4006) @mmetc
• CI: enable linter "protogetter" (#3995) @mmetc
• enable linters: unnecessary-format, unused-receiver (#4001) @mmetc
• refact: remove unused struct fields and params / 3; enable linter "unused" (#3334) @mmetc

New Features

• WAF: Add DropRequest helper to block request in hooks (#4016) @blotus

Improvements

• pkg/acquisition: update syslog to RestartableStreamer (#4040) @mmetc
• refact logging configuration; add log_media="syslog" (#4045) @mmetc
• cscli hubtest: better report docker/nuclei errors (#4052) @mmetc
• build: check make version before running Makefile (#4054) @mmetc
• pkg/acquisition: refact journalctl datasource and unified retry loop (#4023) @mmetc
• option api.server.disable_usage_metrics_export (#4021) @mmetc
• build: optional pure-go sqlite driver (#3908) @mmetc

Bug Fixes

• fix accessLogger setup to separate file (#4103) @mmetc
• docker acquisition: prevent data races (#3956) @mmetc
• Fix avoidable prometheus metrics cardinality (#4080) @g00g1
• loki acquisition: remove forgotten debug print (#4062) @mmetc
• fix 2808: show certificate path in "lapi status" (#4053) @mmetc
• decisionStream: only select required fields from the DB (#4024) @blotus

Documentation

• docs: add public roadmap section to README.md (#4039) @mazzma12

Chore / Deps

• build(deps): bump github/codeql-action from 4.31.4 to 4.31.6 (#4101) @dependabot[bot]
• build(deps): bump golangci/golangci-lint-action from 9.0.0 to 9.1.0 (#4083) @dependabot[bot]
• Update go-re2 to 1.10.0 (#4020) @blotus
• waf: remove custom raw body processor and use the upstream one (#4092) @blotus
• build(deps): bump actions/setup-python from 6.0.0 to 6.1.0 (#4089) @dependabot[bot]
• update go-cs-lib (#4084) @mmetc
• update coraza (#4047) @blotus
• build(deps): bump actions/checkout from 5.0.1 to 6.0.0 (#4077) @dependabot[bot]
• build(deps): bump astral-sh/setup-uv from 7.1.3 to 7.1.4 (#4078) @dependabot[bot]
• replace prom2json with native Prometheus parser and context-aware scraping in CLI metrics (#3932) @mmetc
• build(deps): bump actions/setup-go from 6.0.0 to 6.1.0 (#4073) @dependabot[bot]
• build(deps): bump github/codeql-action from 4.31.3 to 4.31.4 (#4069) @dependabot[bot]
• build(deps): bump actions/checkout from 5.0.0 to 5.0.1 (#4064) @dependabot[bot]
• update docker/docker to moby/moby (version docker-v29.0.0) (#4048) @mmetc
• build(deps): bump github/codeql-action from 4.31.0 to 4.31.3 (#4051) @dependabot[bot]
• build(deps): bump astral-sh/setup-uv from 7.1.2 to 7.1.3 (#4042) @dependabot[bot]
• build(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.0.0 (#4041) @dependabot[bot]
• build(deps): bump docker/setup-qemu-action from 3.6.0 to 3.7.0 (#4025) @dependabot[bot]
• CI: update golangci-lint to 2.6.1 (#4026) @mmetc
• waf: extract temp state from AppsecRuntimeConfig (#3952) @blotus
• build(deps): bump astral-sh/setup-uv from 7.1.1 to 7.1.2 (#4009) @dependabot[bot]
• build(deps): bump github/codeql-action from 4.30.9 to 4.31.0 (#4008) @dependabot[bot]
• build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 (#4010) @dependabot[bot]

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

Installation

Take a look at the installation instructions.