Skip to content

Commit a84484b

Browse files
dvarasani-crestdvarasani-crest
authored
chore(release): making a new release v6.0.0 (#898)
### Features * support of CIM v6.0.2 ### BREAKING CHANGES * removed support of cim-field-report generation
2 parents 8375e14 + 40cc9aa commit a84484b

File tree

117 files changed

+3890
-1177
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

117 files changed

+3890
-1177
lines changed

‎.github/workflows/build-test-release.yml

+7-8
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ concurrency:
1515

1616
jobs:
1717
meta:
18-
runs-on: ubuntu-latest
18+
runs-on: ubuntu-22.04
1919
outputs:
2020
matrix_supportedSplunk: ${{ steps.matrix.outputs.supportedSplunk }}
2121
steps:
@@ -25,7 +25,7 @@ jobs:
2525

2626
fossa-scan:
2727
continue-on-error: true
28-
runs-on: ubuntu-latest
28+
runs-on: ubuntu-22.04
2929
steps:
3030
- uses: actions/checkout@v4
3131
- name: run fossa anlyze and create report
@@ -47,13 +47,13 @@ jobs:
4747
FOSSA_API_KEY: ${{ secrets.FOSSA_API_KEY }}
4848

4949
compliance-copyrights:
50-
runs-on: ubuntu-latest
50+
runs-on: ubuntu-22.04
5151
steps:
5252
- uses: actions/checkout@v4
5353
- uses: apache/[email protected]
5454

5555
pre-commit:
56-
runs-on: ubuntu-latest
56+
runs-on: ubuntu-22.04
5757
steps:
5858
- uses: actions/checkout@v4
5959
- uses: actions/setup-python@v5
@@ -67,7 +67,7 @@ jobs:
6767
SEMGREP_KEY: ${{ secrets.SEMGREP_PUBLISH_TOKEN }}
6868

6969
test-splunk-unit:
70-
runs-on: ubuntu-latest
70+
runs-on: ubuntu-22.04
7171
steps:
7272
- uses: actions/checkout@v4
7373
with:
@@ -80,7 +80,7 @@ jobs:
8080
8181
8282
test-splunk-external:
83-
runs-on: ubuntu-latest
83+
runs-on: ubuntu-22.04
8484
needs:
8585
- meta
8686
- pre-commit
@@ -97,7 +97,6 @@ jobs:
9797
submodules: true
9898
- name: Setup for testing
9999
run: |
100-
pip install git+https://github.com/pixelb/crudini
101100
mkdir test-results-${{ matrix.splunk.version }}
102101
- name: Test
103102
run: |
@@ -148,7 +147,7 @@ jobs:
148147
"splunk_setup_fixture",
149148
"splunk_app_req",
150149
"splunk_app_req_broken",
151-
"splunk_cim_model_ipv6_regex",
150+
"splunk_cim_model",
152151
]
153152
steps:
154153
- uses: actions/checkout@v4

‎.licenserc.yaml

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
#
2-
# Copyright 2024 Splunk Inc.
2+
# Copyright 2025 Splunk Inc.
33
#
44
# Licensed under the Apache License, Version 2.0 (the "License");
55
# you may not use this file except in compliance with the License.

‎.pre-commit-config.yaml

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
#
2-
# Copyright 2024 Splunk Inc.
2+
# Copyright 2025 Splunk Inc.
33
#
44
# Licensed under the Apache License, Version 2.0 (the "License");
55
# you may not use this file except in compliance with the License.

‎.releaserc

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
#
2-
# Copyright 2024 Splunk Inc.
2+
# Copyright 2025 Splunk Inc.
33
#
44
# Licensed under the Apache License, Version 2.0 (the "License");
55
# you may not use this file except in compliance with the License.

‎Dockerfile.splunk

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
#
2-
# Copyright 2024 Splunk Inc.
2+
# Copyright 2025 Splunk Inc.
33
#
44
# Licensed under the Apache License, Version 2.0 (the "License");
55
# you may not use this file except in compliance with the License.

‎Dockerfile.tests

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
#
2-
# Copyright 2024 Splunk Inc.
2+
# Copyright 2025 Splunk Inc.
33
#
44
# Licensed under the Apache License, Version 2.0 (the "License");
55
# you may not use this file except in compliance with the License.

‎Dockerfile.uf

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
#
2-
# Copyright 2024 Splunk Inc.
2+
# Copyright 2025 Splunk Inc.
33
#
44
# Licensed under the Apache License, Version 2.0 (the "License");
55
# you may not use this file except in compliance with the License.

‎docker-compose-ci.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
#
2-
# Copyright 2024 Splunk Inc.
2+
# Copyright 2025 Splunk Inc.
33
#
44
# Licensed under the Apache License, Version 2.0 (the "License");
55
# you may not use this file except in compliance with the License.

‎docker-compose.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
#
2-
# Copyright 2024 Splunk Inc.
2+
# Copyright 2025 Splunk Inc.
33
#
44
# Licensed under the Apache License, Version 2.0 (the "License");
55
# you may not use this file except in compliance with the License.

‎docs/release_notes.md

+31
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,31 @@
1+
# Release Notes - Pytest-splunk-addon 6.0.0
2+
3+
## Breaking Changes
4+
- Removed the support of cim-field-report generation.
5+
6+
7+
## New features
8+
9+
- Added support for CIM v6.0.2
10+
- New data models added:
11+
- Data Access
12+
- Database
13+
- Event Signature
14+
- Interprocess Messaging
15+
- Computer Inventory
16+
- JVM
17+
- Performance
18+
- Ticket Management
19+
- Updated fields with expected values and conditions.
20+
- Eg: Added expected values ["critical","high","medium","low","informational"] for severity field in Malware data model.
21+
- For existing data models updated fields to required or optional based on CIM App Jsons.
22+
- Eg: For Alert data model, body field is now marked as optional(as it is deprecated) and description is marked as required which was previously optional.
23+
- So now if addon does not extract the description field for events tagged with Alert data model, then this will lead to failures for tests template: `test_cim_required_fields*` for those samples
24+
- Furthermore, recommended fields have also been added to data models
25+
- Eg: For Data Access fields like object_category and user_name are added as recommended fields.
26+
- Again if the addon does not extract these fields then tests with test template : `test_cim_fields_recommended*` will fail for those samples.
27+
- If the failures for test templates shown above are observed then it is recommended to extract those fields as the updates in all the Data models have been made with guidance of the SMEs.
28+
29+
## Bug fixes
30+
31+
- Fixed the issue with the token replacement for the fields defined under `other_mappings` for the sample event.

‎mkdocs.yml

+2-1
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
#
2-
# Copyright 2024 Splunk Inc.
2+
# Copyright 2025 Splunk Inc.
33
#
44
# Licensed under the Apache License, Version 2.0 (the "License");
55
# you may not use this file except in compliance with the License.
@@ -77,3 +77,4 @@ nav:
7777
- CimComplianceReport: "api_reference/cim_compliance_report.md"
7878
- Contributing: "contributing.md"
7979
- Troubleshooting: "troubleshoot.md"
80+
- Release Notes: "release_notes.md"

‎pyproject.toml

+1-2
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
#
2-
# Copyright 2024 Splunk Inc.
2+
# Copyright 2025 Splunk Inc.
33
#
44
# Licensed under the Apache License, Version 2.0 (the "License");
55
# you may not use this file except in compliance with the License.
@@ -60,7 +60,6 @@ pytest11 = { plugin = "pytest_splunk_addon.plugin", "splunk" = "pytest_splunk_ad
6060

6161
[tool.poetry.scripts]
6262
cim-report = 'pytest_splunk_addon.utilities.junit_parser:main'
63-
cim-field-report = 'pytest_splunk_addon.tools.cim_field_report:main'
6463
sample_splitter = 'pytest_splunk_addon.utilities.sample_splitter:main'
6564

6665
[build-system]

‎pytest-ci.ini

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
#
2-
# Copyright 2024 Splunk Inc.
2+
# Copyright 2025 Splunk Inc.
33
#
44
# Licensed under the Apache License, Version 2.0 (the "License");
55
# you may not use this file except in compliance with the License.

‎pytest.ini

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
#
2-
# Copyright 2024 Splunk Inc.
2+
# Copyright 2025 Splunk Inc.
33
#
44
# Licensed under the Apache License, Version 2.0 (the "License");
55
# you may not use this file except in compliance with the License.

‎pytest_splunk_addon/CIM_Models/__init__.py

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
#
2-
# Copyright 2024 Splunk Inc.
2+
# Copyright 2025 Splunk Inc.
33
#
44
# Licensed under the Apache License, Version 2.0 (the "License");
55
# you may not use this file except in compliance with the License.

0 commit comments

Comments
 (0)