Skip to content

[pull] main from GreedyBear-Project:main - #43

Merged
pull[bot] merged 44 commits into
threatcode:mainfrom
GreedyBear-Project:main
Sep 24, 2026
Merged

[pull] main from GreedyBear-Project:main#43
pull[bot] merged 44 commits into
threatcode:mainfrom
GreedyBear-Project:main

Conversation

@pull

@pull pull Bot commented Sep 24, 2026 •
edited
Loading

Copy link
Copy Markdown

See Commits and Changes for more details.

Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

dependabot Bot and others added 30 commits September 4, 2026 09:44
@dependabot
build(deps): bump github/codeql-action from 1 to 4 (#1546)
e7defe2 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1 to 4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@v1...v4)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps): bump pilosus/action-pip-license-checker from 2 to 3 (#1550)
ff98762 
Bumps [pilosus/action-pip-license-checker](https://github.com/pilosus/action-pip-license-checker) from 2 to 3.
- [Release notes](https://github.com/pilosus/action-pip-license-checker/releases)
- [Changelog](https://github.com/pilosus/action-pip-license-checker/blob/main/CHANGELOG.md)
- [Commits](pilosus/action-pip-license-checker@v2...v3)

---
updated-dependencies:
- dependency-name: pilosus/action-pip-license-checker
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps): bump actions/setup-python from 5 to 7 (#1549)
eeda6b5 
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 5 to 7.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@v5...v7)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps): bump actions/upload-artifact from 4 to 7 (#1548)
d47f229 
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v4...v7)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps): bump library/nginx in /docker (#1545)
d90439a 
Bumps library/nginx from 1.31.4-alpine to 1.31.5-alpine.

---
updated-dependencies:
- dependency-name: library/nginx
  dependency-version: 1.31.5-alpine
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps): bump actions/checkout from 2 to 7 (#1547)
0795368 
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v2...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@aashu2006
feat: add API docs links to the header Docs menu. Closes #1541 (#1553)
b6e3774
@joshuavetos
Payload quota error notification. Closes #1555 (#1558)
671942c 
Co-authored-by: joshuavetos <joshuavetos@users.noreply.github.com>
@rainnj
Document rationale for add_tags vs replace_tags_for_source. Closes #1559
b6883ab 
 (#1563)

* Document rationale for add_tags vs replace_tags_for_source. Progresses #1551

* Fix indentation: replace tabs with spaces

* Fix trailing whitespace
@rainnj
Add usage guide to add_tags docstring. Closes #1559 (#1564)
a77b019
@aashu2006
fix: normalize SHA256 case in payload extraction. Closes #1556 (#1565)
946c7ad 
* fix: normalize SHA256 case in payload extraction. Closes #1556

* refactor: inline .lower() instead of a wrapper function
@dependabot
build(deps): bump actions/setup-node from 4 to 7 (#1577)
fb3b61c 
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4 to 7.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v4...v7)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps): bump actions/dependency-review-action from 4 to 5 (#1576)
62d859d 
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 4 to 5.
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](actions/dependency-review-action@v4...v5)

---
updated-dependencies:
- dependency-name: actions/dependency-review-action
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps-dev): bump ruff from 0.16.5 to 0.16.6 (#1574)
b236b33 
Bumps [ruff](https://github.com/astral-sh/ruff) from 0.16.5 to 0.16.6.
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.5...0.16.6)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.16.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps): bump softprops/action-gh-release from 2 to 3 (#1575)
a6893de 
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 2 to 3.
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](softprops/action-gh-release@v2...v3)

---
updated-dependencies:
- dependency-name: softprops/action-gh-release
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@kikiscodedeliveryservice @rtpadala
feat: Link HoneypotPayload to Cowrie sessions and attacker IOCs by SH…
cf3322e 
…A256. Closes #1509 (#1552)

* feat: Link HoneypotPayload to Cowrie sessions and attacker IOCs by SHA256. Closes #1509

* fix: use lower-cased shasum matching instead of __iexact

---------

Co-authored-by: Rohit Padala <rohit.padala@jodopay.com>
@cclts @regulartim
Move gb-ui components into frontend. Closes #1454 (#1482)
eb5a219 
* Move gb-ui components into frontend

* Add table visual regression tests

* Exclude visual specs from Vitest

* Keep visual tests out of CI

* Keep visual tests out of DataTable

* Remove unused chart wrappers

* Document shared UI component source

* sync package-lock.json

---------

Co-authored-by: tim <46972822+regulartim@users.noreply.github.com>
@aashu2006
fix: normalize SHA256 case in payload API lookups. Closes #1579 (#1580)
0d59fac
@Prasad8830
fix(cronjobs): keep metadata for payloads skipped at quarantine quota. …
8d7472b 
…Closes #1532 (#1570)
@regulartim
Update README (#1567)
0daa060 
* remove Daniele and add GSoC contributors to "special thanks"

* update GSoC section and decouple it from IntelOwl

* fix typo

* add project links
@suvani-ctrl
perf(admin): use raw_id_fields in HoneypotPayloadAdmin to optimize pa…
b348e4b 
…ge load (#1542) (#1562)
@rainnj
Add BaseEnrichmentJob/HttpEnrichmentJob base classes. Closes #1566 (#…
471111c 
…1590)

* Extract BaseEnrichmentJob/HttpEnrichmentJob and move enrichment jobs into their own folder

* Address review comments on enrichment refactor. Progresses #1551
@AdeshDeshmukh
Fix stored XSS in admin collapsed_list_display. Closes #1594 (#1595)
dac586d
@cclts @regulartim
Fix payload extraction time window. Closes #1554. (#1588)
885ec5f 
* Fix payload extraction time window

* move get_time_window to greedybear/utils.py and fix keyword arguments

* Clean leftover changes

---------

Co-authored-by: tim <46972822+regulartim@users.noreply.github.com>
@aashu2006
Allow querying Cowrie sessions by ID. Closes #1578 (#1586)
004ec00 
* feat: allow querying Cowrie sessions by ID. Closes #1578

* Address review: hex regex, 16 digit limit, duration filter, clearer errors
@regulartim
Remove imports from deep CommonJS paths. Closes #1597 (#1598)
1a24a07
@kikiscodedeliveryservice
fix: let payload extraction upgrade hash-only stubs instead of skippi…
8a5729a 
…ng them. Closes #1530 (#1593)

* fix: let payload extraction upgrade hash-only stubs instead of skipping them. Closes #1530

* fix: handle NULL payload_file, preserve fields on upgrade, revert to get_or_create

fix: handle NULL payload_file, preserve fields on upgrade, revert to get_or_create
@Nisarg0007 @regulartim
Allow GreedyBear to run without Elasticsearch. Closes #1599 (#1611)
fa73dfc 
* fix: allow GreedyBear to run without Elasticsearch

* refactor: handle unavailable Elasticsearch in repository

* test: cover Elasticsearch unavailable cronjobs

* fix: update Elasticsearch configuration warning

* fix format

---------

Co-authored-by: tim <46972822+regulartim@users.noreply.github.com>
@regulartim
Disable facet counts in Django admin. Closes #1615 (#1616)
7a19b5d 
* add GreedyBearModelAdmin base class with disabled facet counts

* fix format
@regulartim
Add raw ID fields in Django admin. Closes #1617 (#1618)
3f38870 
* add credentials to raw_id_fields in CowrieSessionModelAdmin

* add source to raw_id_fields in CredentialModelAdmin
dev-aditya-hub and others added 14 commits September 22, 2026 08:14
@dev-aditya-hub
Keep feed cache version from expiring on bump. Closes #1609 (#1610)
aaf077f 
* Keep feed cache version from expiring on bump

* Shorten comment and reuse the class set wrapper
@dev-aditya-hub
Recover event batches stuck in processing after worker crash. Closes #…
52397c1 
…1601 (#1600)

* Recover event batches stuck in processing after worker crash

* Claim batches with no started_at and expose the field
@SupRaKoshti
fix: Normalize hashes in command sequence API. Closes #1581 (#1626)
270f6e7
@Prasad8830 @regulartim
Add payload hashes to the advanced feed responses. Closes #1543 (#1612)
317dece 
* feat: add payload SHA256 hashes to the advanced feed responses. Closes #1543

* fix(feeds): gate payload_hashes on verbose to avoid unbounded response size. Closes #1543

* condense comment

---------

Co-authored-by: tim <46972822+regulartim@users.noreply.github.com>
@AdeshDeshmukh
Count IOCs linked to any active honeypot in feeds_types statistics. C…
360a192 
…loses #1614 (#1620)

* Count IOCs linked to any active honeypot in feeds_types statistics. Closes #1614

* Simplify statistics regression tests to plain URLs per review
@AdeshDeshmukh
Guard scoring jobs against empty IoC data. Closes #1625 (#1627)
36934b1 
* Guard scoring jobs against empty IoC data. Closes #1625

* Snapshot training data on empty-feature skip per review
@dependabot
build(deps): bump library/nginx in /docker (#1630)
d3f78d0 
Bumps library/nginx from 1.31.5-alpine to 1.31.6-alpine.

---
updated-dependencies:
- dependency-name: library/nginx
  dependency-version: 1.31.6-alpine
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps-dev): bump ruff from 0.16.6 to 0.16.7 (#1604)
03c1f3f 
Bumps [ruff](https://github.com/astral-sh/ruff) from 0.16.6 to 0.16.7.
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.6...0.16.7)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.16.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@rainnj
Enforce Tag identity uniqueness and deduplicate existing rows. Closes #…
4726bf3 
…1628 (#1632)

* Enforce Tag identity uniqueness and deduplicate existing rows. Closes #1628

* Set ignore_conflicts in replace_tags_for_source
@dev-aditya-hub
Link event collector IOCs to their sensor's honeypot. Closes #1624 (#…
82d9479 
…1635)

IOCs ingested through the event collector API never reached any feed:
they were saved with no honeypot, while every feed filters on
honeypots__active=True.

Each event IOC is now linked to a Honeypot derived from the reporting
sensor's honeypot_software, defaulting to "External" when unset and
creating the honeypot as active if missing. honeypot_software is capped
at 15 characters in SensorCreateSerializer so it always fits
Honeypot.name, and is truncated during processing to keep sensors
registered before the cap from failing a whole batch.
@regulartim
bump python dependencies
e7e81c4
@regulartim
bump node dependencies
45684e9
@regulartim
bump 3.6.3
2f031e7
@regulartim
Merge pull request #1560 from GreedyBear-Project/develop
713e73d 
3.6.3
@pull pull Bot locked and limited conversation to collaborators Sep 24, 2026
@pull pull Bot added the ⤵️ pull label Sep 24, 2026
@pull
pull Bot merged commit 713e73d into threatcode:main Sep 24, 2026
1 check passed
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

No reviews

Assignees

No one assigned

Labels

⤵️ pull

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.