diff --git a/ZapVersions-2.15.xml b/ZapVersions-2.15.xml index 0cffd723..f87f5d90 100644 --- a/ZapVersions-2.15.xml +++ b/ZapVersions-2.15.xml @@ -78,19 +78,19 @@ Alert Filters Allows you to automate the changing of alert risk levels. ZAP Dev Team - 21 - alertFilters-release-21.zap + 22 + alertFilters-release-22.zap release - <h3>Changed</h3> + <h3>Fixed</h3> <ul> -<li>Update minimum ZAP version to 2.15.0.</li> +<li>Handle deleted alerts gracefully.</li> </ul> - https://github.com/zaproxy/zap-extensions/releases/download/alertFilters-v21/alertFilters-release-21.zap - SHA-256:5d2204e186a0be224cbbec05c900179af630cfb370cbdc206c4895b81cb60936 + https://github.com/zaproxy/zap-extensions/releases/download/alertFilters-v22/alertFilters-release-22.zap + SHA-256:a8036a258f67b9974cb07407e274bb2535e56a78b5b85c51b1ee5e6544e034c9 https://www.zaproxy.org/docs/desktop/addons/alert-filters/ https://github.com/zaproxy/zap-extensions/ - 2024-05-07 - 565159 + 2024-10-07 + 566059 2.15.0 allinonenotes @@ -331,31 +331,29 @@ Automation Framework Automation Framework. ZAP Dev Team - 0.42.0 - automation-beta-0.42.0.zap + 0.43.0 + automation-beta-0.43.0.zap beta - <h3>Added</h3> -<ul> -<li>Allow to configure the structural parameters of a context (Issue 7780).</li> -</ul> -<h3>Fixed</h3> + <h3>Fixed</h3> <ul> -<li>NPE in GUI if the technology was not specified.</li> +<li>Handle exceptions while running jobs.</li> </ul> <h3>Changed</h3> <ul> -<li>Rely on Passive Scanner add-on for the passive scan related jobs (Issue 7959).</li> -</ul> -<h3>Deprecated</h3> +<li>In saved YAML plans: <ul> -<li>The classes of the passive scan related jobs are now deprecated and will be removed in a following release, use the classes from the Passive Scanner add-on instead (Issue 7959).</li> +<li>Fields with default values are omitted.</li> +<li>The &quot;name&quot; and &quot;type&quot; fields are added before other fields.</li> +<li>Values are not quoted unless required.</li> +</ul> +</li> </ul> - https://github.com/zaproxy/zap-extensions/releases/download/automation-v0.42.0/automation-beta-0.42.0.zap - SHA-256:04d36d21f857b4e08dfed785f3b11016fa56521c26d7a8cce38365be930a594e + https://github.com/zaproxy/zap-extensions/releases/download/automation-v0.43.0/automation-beta-0.43.0.zap + SHA-256:d765faa76ccc53a36d3622fea5ac3a12cf42f2c0d6372c692be2afc3abe69626 https://www.zaproxy.org/docs/desktop/addons/automation-framework/ https://github.com/zaproxy/zap-extensions/ - 2024-09-02 - 1774279 + 2024-10-07 + 1770789 2.15.0 @@ -742,23 +740,24 @@ to find and add subdomains to the Sites Tree.</li> Dev Add-on An add-on to help with development of ZAP. ZAP Dev Team - 0.6.0 - dev-alpha-0.6.0.zap + 0.7.0 + dev-alpha-0.7.0.zap alpha <h3>Added</h3> <ul> -<li>Page protected by auth in order to provide a simple test for authenticated spidering.</li> +<li>Extra protected pages to simple-json-cookie to ensure spidering really works.</li> +<li>Sequence performance test.</li> </ul> -<h3>Changed</h3> +<h3>Fixed</h3> <ul> -<li>Update minimum ZAP version to 2.15.0.</li> +<li>Issue where folder level pages without a trailing slash did not link correctly to sub pages.</li> </ul> - https://github.com/zaproxy/zap-extensions/releases/download/dev-v0.6.0/dev-alpha-0.6.0.zap - SHA-256:a0899a42ef4c32a850622df619e23657dc475301246bab2f12713c43b5db9c47 + https://github.com/zaproxy/zap-extensions/releases/download/dev-v0.7.0/dev-alpha-0.7.0.zap + SHA-256:0b2d896a7e089c717faaf126a621c8ceeadc2b0a7d7acb7d5b3698c033957408 https://www.zaproxy.org/docs/desktop/addons/dev-add-on/ https://github.com/zaproxy/zap-extensions/ - 2024-07-22 - 145053 + 2024-10-07 + 152847 2.15.0 @@ -778,24 +777,19 @@ to find and add subdomains to the Sites Tree.</li> Diff Displays a dialog showing the differences between 2 requests or responses. It uses diffutils and diff_match_patch ZAP Dev Team - 15 - diff-beta-15.zap + 16 + diff-beta-16.zap beta - <h3>Added</h3> -<ul> -<li>Support for menu weights (Issue 8369).</li> -</ul> -<h3>Changed</h3> + <h3>Updated</h3> <ul> -<li>Update minimum ZAP version to 2.15.0.</li> -<li>Maintenance changes.</li> +<li>Add-on help content.</li> </ul> - https://github.com/zaproxy/zap-extensions/releases/download/diff-v15/diff-beta-15.zap - SHA-256:de3662b7a840a76a456f942e828695d8f8dfb234f05ad88485d164dfa104df5b + https://github.com/zaproxy/zap-extensions/releases/download/diff-v16/diff-beta-16.zap + SHA-256:36baf1f731573c3ef0d7657403b7d789a4be2fe5ae59f9b18c112726d0c8cc0e https://www.zaproxy.org/docs/desktop/addons/diff/ https://github.com/zaproxy/zap-extensions/ - 2024-05-07 - 289975 + 2024-10-07 + 679075 2.15.0 @@ -982,27 +976,23 @@ to find and add subdomains to the Sites Tree.</li> Import/Export Import and Export functionality ZAP Dev Team & thatsn0tmysite - 0.11.0 - exim-beta-0.11.0.zap + 0.12.0 + exim-beta-0.12.0.zap beta <h3>Changed</h3> <ul> -<li>Leverage Jackson library from the Common Library add-on.</li> -<li>Depend on newer version of Common Library add-on.</li> -<li>Leverage aboutsip's pkts.io library for parsing pcap files and organizing tcp streams</li> -<li>PCAP importing for simple HTTP/1.1 traffic, works for traces with: No duplicates or missing TCP segments, with no missing HTTP responses to HTTP requests, and for HTTP 1.1 only</li> +<li>Improved HTTP 1.1 traffic detection in PCAP files</li> </ul> <h3>Fixed</h3> <ul> -<li>Correctly load Automation Framework template plans.</li> -<li>Base64 decode the response body when importing HARs.</li> +<li>Count invalid messages as tasks done toward progress when importing HARs.</li> </ul> - https://github.com/zaproxy/zap-extensions/releases/download/exim-v0.11.0/exim-beta-0.11.0.zap - SHA-256:973e9b8e23a8b2a76954b239cbd579d0f192ab7c2a174eaca133b6b956d7fe6c + https://github.com/zaproxy/zap-extensions/releases/download/exim-v0.12.0/exim-beta-0.12.0.zap + SHA-256:290a834250748f885ba57f7c54ca662bdc065057341dea2486baba4f9b7379cf https://www.zaproxy.org/docs/desktop/addons/import-export/ https://github.com/zaproxy/zap-extensions/ - 2024-09-24 - 3018127 + 2024-10-07 + 3019308 2.15.0 @@ -1054,24 +1044,20 @@ to find and add subdomains to the Sites Tree.</li> Fuzzer Advanced fuzzer for manual testing ZAP Dev Team - 13.13.0 - fuzz-beta-13.13.0.zap + 13.14.0 + fuzz-beta-13.14.0.zap beta - <h3>Added</h3> -<ul> -<li>Support for menu weights (Issue 8369)</li> -</ul> -<h3>Changed</h3> + <h3>Changed</h3> <ul> -<li>Update minimum ZAP version to 2.15.0.</li> <li>Maintenance changes.</li> +<li>Replace library used for regex payload generation, to address performance and compatibility issues.</li> </ul> - https://github.com/zaproxy/zap-extensions/releases/download/fuzz-v13.13.0/fuzz-beta-13.13.0.zap - SHA-256:b9473bb743d5dd784798da90b4b1734ee3c44b7c56d338282efd077c5d78cdc1 + https://github.com/zaproxy/zap-extensions/releases/download/fuzz-v13.14.0/fuzz-beta-13.14.0.zap + SHA-256:259c116cf914cd20477447251da5da7c11b847b52dd80389c6fa208866851f48 https://www.zaproxy.org/docs/desktop/addons/fuzzer/ https://github.com/zaproxy/zap-extensions/ - 2024-05-07 - 2025709 + 2024-10-07 + 2011237 2.15.0 @@ -2413,19 +2399,19 @@ to find and add subdomains to the Sites Tree.</li> Replacer Easy way to replace strings in requests and responses. ZAP Dev Team - 18 - replacer-release-18.zap + 19 + replacer-release-19.zap release - <h3>Added</h3> + <h3>Changed</h3> <ul> -<li>Rules to disable Caching (Issue 8437).</li> +<li>Update ZAP API endpoint description.</li> </ul> - https://github.com/zaproxy/zap-extensions/releases/download/replacer-v18/replacer-release-18.zap - SHA-256:272783b774888476075ebd362f88bc0b23efa7e39996dbb2a50a8b1ea0a11fcd + https://github.com/zaproxy/zap-extensions/releases/download/replacer-v19/replacer-release-19.zap + SHA-256:82364e97bfbfa4a8ed6ae06f2527b5884138bd8c8da05bf616ae659a6c619bf7 https://www.zaproxy.org/docs/desktop/addons/replacer/ https://github.com/zaproxy/zap-extensions/ - 2024-05-08 - 441462 + 2024-10-07 + 445317 2.15.0 reports @@ -2433,19 +2419,23 @@ to find and add subdomains to the Sites Tree.</li> Report Generation Official ZAP Reports. ZAP Dev Team - 0.33.0 - reports-release-0.33.0.zap + 0.34.0 + reports-release-0.34.0.zap release <h3>Changed</h3> <ul> -<li>Maintenance changes related to Passive Scanner add-on (Issue 7959).</li> +<li>Checkmarx rebrand.</li> +</ul> +<h3>Fixed</h3> +<ul> +<li>An issue where alert details were missing from some Risk and Confidence HTML reports (Issue 8460).</li> </ul> - https://github.com/zaproxy/zap-extensions/releases/download/reports-v0.33.0/reports-release-0.33.0.zap - SHA-256:d8539bcfb21c84209e7dac37affb27fea94f1ea50c695dbe64c1a58ce2ca8fe9 + https://github.com/zaproxy/zap-extensions/releases/download/reports-v0.34.0/reports-release-0.34.0.zap + SHA-256:2326fb78d2fa4e03bcbdc31e872c0800a244a882e40374ab84d1a06ae43e15c1 https://www.zaproxy.org/docs/desktop/addons/report-generation/ https://github.com/zaproxy/zap-extensions/ - 2024-09-02 - 14764675 + 2024-10-07 + 14786287 2.15.0 @@ -2524,19 +2514,20 @@ to find and add subdomains to the Sites Tree.</li> Retire.js Use Retire.js to identify vulnerable or out-dated JavaScript packages. Nikita Mundhada and the ZAP Dev Team - 0.40.0 - retire-release-0.40.0.zap + 0.41.0 + retire-release-0.41.0.zap release <h3>Changed</h3> <ul> +<li>Performance improvements (Issue 8659).</li> <li>Updated with upstream retire.js pattern changes.</li> </ul> - https://github.com/zaproxy/zap-extensions/releases/download/retire-v0.40.0/retire-release-0.40.0.zap - SHA-256:0e6ec29a9c5a16f8ad3ce00a06e989faa2ee0d56b9dc69d312d14c19806c5c4f + https://github.com/zaproxy/zap-extensions/releases/download/retire-v0.41.0/retire-release-0.41.0.zap + SHA-256:3b8ecfc75c520632da8594d4a08791d4e5f0bf07cc81a86deea516228890e8a3 https://www.zaproxy.org/docs/desktop/addons/retire.js/ https://github.com/zaproxy/zap-extensions/ - 2024-09-24 - 991757 + 2024-10-07 + 992367 2.15.0 @@ -2618,19 +2609,21 @@ to find and add subdomains to the Sites Tree.</li> Script Console Supports all JSR 223 scripting languages ZAP Dev Team - 45.6.0 - scripts-release-45.6.0.zap + 45.7.0 + scripts-release-45.7.0.zap release - <h3>Removed</h3> + <h3>Fixed</h3> <ul> -<li>Remove the active and passive script templates, superseded by the ones provided by the GraalVM JavaScript add-on.</li> +<li>Reuse script cache for all passive scan threads to avoid recompilation of Passive Rules scripts.</li> +<li>Address a concurrency issue when using Graal.js Passive Rules scripts as first-class scan rules.</li> +<li>Handle gracefully the inability to force stop the running standalone script in newer Java versions.</li> </ul> - https://github.com/zaproxy/zap-extensions/releases/download/scripts-v45.6.0/scripts-release-45.6.0.zap - SHA-256:952b949a89d876f304fa2292f676330b6460cb5fce3008342ee7275a3d8a5c7a + https://github.com/zaproxy/zap-extensions/releases/download/scripts-v45.7.0/scripts-release-45.7.0.zap + SHA-256:2d19eaadabaa80b1628fec9ff884a92542709f36a3ac339d5ccc259b366b28c7 https://www.zaproxy.org/docs/desktop/addons/script-console/ https://github.com/zaproxy/zap-extensions/ - 2024-09-02 - 5191252 + 2024-10-07 + 5190598 2.15.0 diff --git a/ZapVersions-dev.xml b/ZapVersions-dev.xml index 6fc43618..b2a1e7b5 100644 --- a/ZapVersions-dev.xml +++ b/ZapVersions-dev.xml @@ -78,19 +78,19 @@ Alert Filters Allows you to automate the changing of alert risk levels. ZAP Dev Team - 21 - alertFilters-release-21.zap + 22 + alertFilters-release-22.zap release - <h3>Changed</h3> + <h3>Fixed</h3> <ul> -<li>Update minimum ZAP version to 2.15.0.</li> +<li>Handle deleted alerts gracefully.</li> </ul> - https://github.com/zaproxy/zap-extensions/releases/download/alertFilters-v21/alertFilters-release-21.zap - SHA-256:5d2204e186a0be224cbbec05c900179af630cfb370cbdc206c4895b81cb60936 + https://github.com/zaproxy/zap-extensions/releases/download/alertFilters-v22/alertFilters-release-22.zap + SHA-256:a8036a258f67b9974cb07407e274bb2535e56a78b5b85c51b1ee5e6544e034c9 https://www.zaproxy.org/docs/desktop/addons/alert-filters/ https://github.com/zaproxy/zap-extensions/ - 2024-05-07 - 565159 + 2024-10-07 + 566059 2.15.0 allinonenotes @@ -331,31 +331,29 @@ Automation Framework Automation Framework. ZAP Dev Team - 0.42.0 - automation-beta-0.42.0.zap + 0.43.0 + automation-beta-0.43.0.zap beta - <h3>Added</h3> -<ul> -<li>Allow to configure the structural parameters of a context (Issue 7780).</li> -</ul> -<h3>Fixed</h3> + <h3>Fixed</h3> <ul> -<li>NPE in GUI if the technology was not specified.</li> +<li>Handle exceptions while running jobs.</li> </ul> <h3>Changed</h3> <ul> -<li>Rely on Passive Scanner add-on for the passive scan related jobs (Issue 7959).</li> -</ul> -<h3>Deprecated</h3> +<li>In saved YAML plans: <ul> -<li>The classes of the passive scan related jobs are now deprecated and will be removed in a following release, use the classes from the Passive Scanner add-on instead (Issue 7959).</li> +<li>Fields with default values are omitted.</li> +<li>The &quot;name&quot; and &quot;type&quot; fields are added before other fields.</li> +<li>Values are not quoted unless required.</li> +</ul> +</li> </ul> - https://github.com/zaproxy/zap-extensions/releases/download/automation-v0.42.0/automation-beta-0.42.0.zap - SHA-256:04d36d21f857b4e08dfed785f3b11016fa56521c26d7a8cce38365be930a594e + https://github.com/zaproxy/zap-extensions/releases/download/automation-v0.43.0/automation-beta-0.43.0.zap + SHA-256:d765faa76ccc53a36d3622fea5ac3a12cf42f2c0d6372c692be2afc3abe69626 https://www.zaproxy.org/docs/desktop/addons/automation-framework/ https://github.com/zaproxy/zap-extensions/ - 2024-09-02 - 1774279 + 2024-10-07 + 1770789 2.15.0 @@ -742,23 +740,24 @@ to find and add subdomains to the Sites Tree.</li> Dev Add-on An add-on to help with development of ZAP. ZAP Dev Team - 0.6.0 - dev-alpha-0.6.0.zap + 0.7.0 + dev-alpha-0.7.0.zap alpha <h3>Added</h3> <ul> -<li>Page protected by auth in order to provide a simple test for authenticated spidering.</li> +<li>Extra protected pages to simple-json-cookie to ensure spidering really works.</li> +<li>Sequence performance test.</li> </ul> -<h3>Changed</h3> +<h3>Fixed</h3> <ul> -<li>Update minimum ZAP version to 2.15.0.</li> +<li>Issue where folder level pages without a trailing slash did not link correctly to sub pages.</li> </ul> - https://github.com/zaproxy/zap-extensions/releases/download/dev-v0.6.0/dev-alpha-0.6.0.zap - SHA-256:a0899a42ef4c32a850622df619e23657dc475301246bab2f12713c43b5db9c47 + https://github.com/zaproxy/zap-extensions/releases/download/dev-v0.7.0/dev-alpha-0.7.0.zap + SHA-256:0b2d896a7e089c717faaf126a621c8ceeadc2b0a7d7acb7d5b3698c033957408 https://www.zaproxy.org/docs/desktop/addons/dev-add-on/ https://github.com/zaproxy/zap-extensions/ - 2024-07-22 - 145053 + 2024-10-07 + 152847 2.15.0 @@ -778,24 +777,19 @@ to find and add subdomains to the Sites Tree.</li> Diff Displays a dialog showing the differences between 2 requests or responses. It uses diffutils and diff_match_patch ZAP Dev Team - 15 - diff-beta-15.zap + 16 + diff-beta-16.zap beta - <h3>Added</h3> -<ul> -<li>Support for menu weights (Issue 8369).</li> -</ul> -<h3>Changed</h3> + <h3>Updated</h3> <ul> -<li>Update minimum ZAP version to 2.15.0.</li> -<li>Maintenance changes.</li> +<li>Add-on help content.</li> </ul> - https://github.com/zaproxy/zap-extensions/releases/download/diff-v15/diff-beta-15.zap - SHA-256:de3662b7a840a76a456f942e828695d8f8dfb234f05ad88485d164dfa104df5b + https://github.com/zaproxy/zap-extensions/releases/download/diff-v16/diff-beta-16.zap + SHA-256:36baf1f731573c3ef0d7657403b7d789a4be2fe5ae59f9b18c112726d0c8cc0e https://www.zaproxy.org/docs/desktop/addons/diff/ https://github.com/zaproxy/zap-extensions/ - 2024-05-07 - 289975 + 2024-10-07 + 679075 2.15.0 @@ -982,27 +976,23 @@ to find and add subdomains to the Sites Tree.</li> Import/Export Import and Export functionality ZAP Dev Team & thatsn0tmysite - 0.11.0 - exim-beta-0.11.0.zap + 0.12.0 + exim-beta-0.12.0.zap beta <h3>Changed</h3> <ul> -<li>Leverage Jackson library from the Common Library add-on.</li> -<li>Depend on newer version of Common Library add-on.</li> -<li>Leverage aboutsip's pkts.io library for parsing pcap files and organizing tcp streams</li> -<li>PCAP importing for simple HTTP/1.1 traffic, works for traces with: No duplicates or missing TCP segments, with no missing HTTP responses to HTTP requests, and for HTTP 1.1 only</li> +<li>Improved HTTP 1.1 traffic detection in PCAP files</li> </ul> <h3>Fixed</h3> <ul> -<li>Correctly load Automation Framework template plans.</li> -<li>Base64 decode the response body when importing HARs.</li> +<li>Count invalid messages as tasks done toward progress when importing HARs.</li> </ul> - https://github.com/zaproxy/zap-extensions/releases/download/exim-v0.11.0/exim-beta-0.11.0.zap - SHA-256:973e9b8e23a8b2a76954b239cbd579d0f192ab7c2a174eaca133b6b956d7fe6c + https://github.com/zaproxy/zap-extensions/releases/download/exim-v0.12.0/exim-beta-0.12.0.zap + SHA-256:290a834250748f885ba57f7c54ca662bdc065057341dea2486baba4f9b7379cf https://www.zaproxy.org/docs/desktop/addons/import-export/ https://github.com/zaproxy/zap-extensions/ - 2024-09-24 - 3018127 + 2024-10-07 + 3019308 2.15.0 @@ -1054,24 +1044,20 @@ to find and add subdomains to the Sites Tree.</li> Fuzzer Advanced fuzzer for manual testing ZAP Dev Team - 13.13.0 - fuzz-beta-13.13.0.zap + 13.14.0 + fuzz-beta-13.14.0.zap beta - <h3>Added</h3> -<ul> -<li>Support for menu weights (Issue 8369)</li> -</ul> -<h3>Changed</h3> + <h3>Changed</h3> <ul> -<li>Update minimum ZAP version to 2.15.0.</li> <li>Maintenance changes.</li> +<li>Replace library used for regex payload generation, to address performance and compatibility issues.</li> </ul> - https://github.com/zaproxy/zap-extensions/releases/download/fuzz-v13.13.0/fuzz-beta-13.13.0.zap - SHA-256:b9473bb743d5dd784798da90b4b1734ee3c44b7c56d338282efd077c5d78cdc1 + https://github.com/zaproxy/zap-extensions/releases/download/fuzz-v13.14.0/fuzz-beta-13.14.0.zap + SHA-256:259c116cf914cd20477447251da5da7c11b847b52dd80389c6fa208866851f48 https://www.zaproxy.org/docs/desktop/addons/fuzzer/ https://github.com/zaproxy/zap-extensions/ - 2024-05-07 - 2025709 + 2024-10-07 + 2011237 2.15.0 @@ -2413,19 +2399,19 @@ to find and add subdomains to the Sites Tree.</li> Replacer Easy way to replace strings in requests and responses. ZAP Dev Team - 18 - replacer-release-18.zap + 19 + replacer-release-19.zap release - <h3>Added</h3> + <h3>Changed</h3> <ul> -<li>Rules to disable Caching (Issue 8437).</li> +<li>Update ZAP API endpoint description.</li> </ul> - https://github.com/zaproxy/zap-extensions/releases/download/replacer-v18/replacer-release-18.zap - SHA-256:272783b774888476075ebd362f88bc0b23efa7e39996dbb2a50a8b1ea0a11fcd + https://github.com/zaproxy/zap-extensions/releases/download/replacer-v19/replacer-release-19.zap + SHA-256:82364e97bfbfa4a8ed6ae06f2527b5884138bd8c8da05bf616ae659a6c619bf7 https://www.zaproxy.org/docs/desktop/addons/replacer/ https://github.com/zaproxy/zap-extensions/ - 2024-05-08 - 441462 + 2024-10-07 + 445317 2.15.0 reports @@ -2433,19 +2419,23 @@ to find and add subdomains to the Sites Tree.</li> Report Generation Official ZAP Reports. ZAP Dev Team - 0.33.0 - reports-release-0.33.0.zap + 0.34.0 + reports-release-0.34.0.zap release <h3>Changed</h3> <ul> -<li>Maintenance changes related to Passive Scanner add-on (Issue 7959).</li> +<li>Checkmarx rebrand.</li> +</ul> +<h3>Fixed</h3> +<ul> +<li>An issue where alert details were missing from some Risk and Confidence HTML reports (Issue 8460).</li> </ul> - https://github.com/zaproxy/zap-extensions/releases/download/reports-v0.33.0/reports-release-0.33.0.zap - SHA-256:d8539bcfb21c84209e7dac37affb27fea94f1ea50c695dbe64c1a58ce2ca8fe9 + https://github.com/zaproxy/zap-extensions/releases/download/reports-v0.34.0/reports-release-0.34.0.zap + SHA-256:2326fb78d2fa4e03bcbdc31e872c0800a244a882e40374ab84d1a06ae43e15c1 https://www.zaproxy.org/docs/desktop/addons/report-generation/ https://github.com/zaproxy/zap-extensions/ - 2024-09-02 - 14764675 + 2024-10-07 + 14786287 2.15.0 @@ -2524,19 +2514,20 @@ to find and add subdomains to the Sites Tree.</li> Retire.js Use Retire.js to identify vulnerable or out-dated JavaScript packages. Nikita Mundhada and the ZAP Dev Team - 0.40.0 - retire-release-0.40.0.zap + 0.41.0 + retire-release-0.41.0.zap release <h3>Changed</h3> <ul> +<li>Performance improvements (Issue 8659).</li> <li>Updated with upstream retire.js pattern changes.</li> </ul> - https://github.com/zaproxy/zap-extensions/releases/download/retire-v0.40.0/retire-release-0.40.0.zap - SHA-256:0e6ec29a9c5a16f8ad3ce00a06e989faa2ee0d56b9dc69d312d14c19806c5c4f + https://github.com/zaproxy/zap-extensions/releases/download/retire-v0.41.0/retire-release-0.41.0.zap + SHA-256:3b8ecfc75c520632da8594d4a08791d4e5f0bf07cc81a86deea516228890e8a3 https://www.zaproxy.org/docs/desktop/addons/retire.js/ https://github.com/zaproxy/zap-extensions/ - 2024-09-24 - 991757 + 2024-10-07 + 992367 2.15.0 @@ -2618,19 +2609,21 @@ to find and add subdomains to the Sites Tree.</li> Script Console Supports all JSR 223 scripting languages ZAP Dev Team - 45.6.0 - scripts-release-45.6.0.zap + 45.7.0 + scripts-release-45.7.0.zap release - <h3>Removed</h3> + <h3>Fixed</h3> <ul> -<li>Remove the active and passive script templates, superseded by the ones provided by the GraalVM JavaScript add-on.</li> +<li>Reuse script cache for all passive scan threads to avoid recompilation of Passive Rules scripts.</li> +<li>Address a concurrency issue when using Graal.js Passive Rules scripts as first-class scan rules.</li> +<li>Handle gracefully the inability to force stop the running standalone script in newer Java versions.</li> </ul> - https://github.com/zaproxy/zap-extensions/releases/download/scripts-v45.6.0/scripts-release-45.6.0.zap - SHA-256:952b949a89d876f304fa2292f676330b6460cb5fce3008342ee7275a3d8a5c7a + https://github.com/zaproxy/zap-extensions/releases/download/scripts-v45.7.0/scripts-release-45.7.0.zap + SHA-256:2d19eaadabaa80b1628fec9ff884a92542709f36a3ac339d5ccc259b366b28c7 https://www.zaproxy.org/docs/desktop/addons/script-console/ https://github.com/zaproxy/zap-extensions/ - 2024-09-02 - 5191252 + 2024-10-07 + 5190598 2.15.0