What's Changed

• [Swarming] [Refactor] Swarming Job check ignores feature flag by @IvanBM18 in #5504
• [Logs] Adding debug logs for Swarming & Android by @IvanBM18 in #5461
• Add test to detect imports of excluded modules by @brun0-matheus in #5502
• Re-add clusterfuzz team as codeowner of some files by @PauloVLB in #5522
• Fall back to Chromium's GitHub mirror for install-build-deps.py by @PauloVLB in #5510
• Add output_dir arg to download_fuzzer_config script by @dylanjew in #5430
• Add local config download script to chrome owned files by @dylanjew in #5523
• [Better Tests] Support custom host in compute_metadata by @IvanBM18 in #5479
• [Better Tests] Add GCE metadata emulator worker/uworker configs by @IvanBM18 in #5485
• [Better Tests] Adds the GCE metadata fake by @IvanBM18 in #5480
• [Better Tests] Integration tests for the GCE metadata fake by @IvanBM18 in #5486
• [Better Tests] Add error injection and runtime overrides for GCE metadata fake values by @IvanBM18 in #5481

New Contributors

• @brun0-matheus made their first contribution in #5502

Full Changelog: v2.43.0...v2.44.0

1.6.0 (2026-10-07)

Features

• judge: per-criterion verdicts, fail-condition polarity and provider compatibility (#1006) (0698d00)
• voice/twilio: a-leg external-number dialing for TwilioAgentAdapter (#982) (29dea33)

Bug Fixes

• voice: end the ElevenLabs agent turn when its audio stops (#1013) (e6335ed)

What's Changed

• Fix Sumo Logic detector ignoring configured verifier endpoints by @unsmith in #5395
• Add OAuth2 (ROPC) auth for verification requests by @unsmith in #5392

Full Changelog: v3.98.1...v3.99.0

What's Changed

• Add postman source documentation by @kashifkhan0771 in #5389
• Add a TruffleHog dectector for Kong Konnect Platform by @mrwanny in #5305
• Add api_timeout_seconds to Gerrit source proto by @kashifkhan0771 in #5394

New Contributors

• @mrwanny made their first contribution in #5305

Full Changelog: v3.98.0...v3.98.1

Fixes #6137

What's Changed

• Int 595 verify asymmetry by @shahzadhaider1 in #5261
• return error body for fetchBearerToken by @jordanTunstill in #5301
• Update module github.com/charmbracelet/bubbletea to v1.3.10 by @renovate[bot] in #5281
• Update github.com/trufflesecurity/ldap-verify digest to 3142cc9 by @renovate[bot] in #5280
• [INT-1086] Don't reuse maps; editing them afterwards edits them for all results by @camgunz in #5351
• [INT-1091] Treat Square 403 as verified on INSUFFICIENT_SCOPES by @MuneebUllahKhan222 in #5367
• feat: add --no-ignore-tag to report secrets on trufflehog:ignore lines by @thiswillnevermatch in #5293
• Fix failing TestGHCRListImages test in CI by @MuneebUllahKhan222 in #5368
• Revert duplicate --no-ignore-tag changes from #5293 by @shahzadhaider1 in #5369
• Show progress inside S3 buckets by @shahzadhaider1 in #5330
• fix(output): escape special characters in --github-actions output by @kenanyararbas in #5353
• fix(detectors): remove stray fmt.Printf in portainertoken by @Gracy769 in #5334
• resolve race condition in result deduplication cache by @kvnphvm in #5359
• added entropy filter and improved verification for gitlab v2/v3 by @jordanTunstill in #5358
• Update Okta domain pat to account for mil and fedramp by @kvnphvm in #5355
• Corpora bench reports clean when a detector produces zero matches on both sides by @kvnphvm in #5357
• Add huggingface source documentation by @kashifkhan0771 in #5373
• Add Gitlab source documentation by @kashifkhan0771 in #5371
• Add Github source documentation by @kashifkhan0771 in #5370
• fix(detectors/auth0oauth): match Auth0 Private Cloud auth0app.com domains by @saghaulor in #5354
• List only the include prefixes in S3 scans by @shahzadhaider1 in #5377
• fix(github): switch back to fetching access token through apiClient, by @mariduv in #5380
• Fix NetSuite detector running out of memory on dense input by @shahzadhaider1 in #5383
• Add Jenkins source documentation by @kashifkhan0771 in #5388
• docs: point five internal links at files that exist by @CalvinTjoaquinn in #5375
• Add pkg/ssrf shared egress guard; use it for WithNoLocalIP and analyzer clients by @bill-rich in #5288

New Contributors

• @thiswillnevermatch made their first contribution in #5293
• @kenanyararbas made their first contribution in #5353
• @Gracy769 made their first contribution in #5334
• @CalvinTjoaquinn made their first contribution in #5375

Full Changelog: v3.97.9...v3.98.0

fix(chart): update container plugin to 0.7.5

Signed-off-by: Leonardo Grasso <me@leonardograsso.com>

Brings the IP back to a size you can read at a glance, and the buttons back into a row.

Fixed

• Home: the IP is big again and the buttons are back in a row. In 3.8.3 the IP shrank to small text in a line of facts and the buttons moved into a column, which testers found awkward to use. The IP now has its own panel on the right in large type, with the copy button, uptime, exit and the tunnel check, and Connect/Disconnect, New Identity and Refresh IP sit in a row under the status again, like before. What the status says stays the 3.8.3 way, so it still tells you whether you are actually protected instead of repeating the last message. In a narrow window the IP panel moves under the status instead of squeezing it.

Downloads

Co-authored-by: repo-trivy-write-33ed3c[bot] <283413663+repo-trivy-write-33ed3c[bot]@users.noreply.github.com>

What's Changed

• [macOS/ARM64] Add pip req arm64 by @JuanMBriones in #5500
• Use trusted_agreement_signed for testcase trust by @PauloVLB in #5488
• Don't leave empty files after failed signed URL downloads by @dylanjew in #5491
• Preserve data bundle file paths when downloading via signed URLs by @dylanjew in #5492
• Escape Windows filenames and handle cases-sensitive dupes by @dylanjew in #5494
• Show the remove-duplicate button to non-admins as disabled by @atty57 in #5503
• Fix radamsa binary for ARM64 by @JuanMBriones in #5463

New Contributors

• @atty57 made their first contribution in #5503

Full Changelog: v2.42.0...v2.43.0

What's Changed

• Bump 4.14.9 branch by @wazuhci in #38210
• Merge 4.14.8 into 4.14.9 by @jotacarma90 in #38257
• Reject symlinks when writing files staged under the incoming directory by @cborla in #38267
• Windows agent: safer MSI upgrade under a pending system restart by @vikman90 in #38277
• Merge 4.14.8 into 4.14.9 by @jotacarma90 in #38387
• Prevent the agent from stopping Active Response when too many commands are defined by @vikman90 in #38410
• Fix WPK agent upgrade silently failing on systems without the find binary by @Darioortegaleyva in #38431
• Backport: Free rpm macro context to stop unbounded growth by @anromerom in #38366
• Resolve group names once per scan instead of once per user and group by @anromerom in #38395
• Bound the control message copy to the source string length in remoted by @vikman90 in #38427
• Close idle pre-authentication connections in the cluster server by @vikman90 in #38449
• Detect and recover from silently half-closed TCP connections by @cborla in #38401
• Own the systemd D-Bus connection so the services collector recovers after a bus restart by @anromerom in #38392
• Bound Snort full record appends to the available buffer space by @vikman90 in #38472
• Merge 4.14.8 into 4.14.9 by @jotacarma90 in #38523
• Fix memory leak in the analysisd JSON decoder when an event repeats a field by @vikman90 in #38548
• syscollector normalizer: stop erasing while iterating in removeExcluded() (4.14.9) by @Miguevrgo in #38340
• Raise the number of Active Response commands the agent can load by @vikman90 in #38509
• Pin the Azure Graph pagination URL to the Microsoft Graph endpoint by @vikman90 in #38594
• Reject symlinks when reading and staging files during agent upgrade by @hernanvalenzuela in #38493
• Fix false positives for Debian backports packages in Vulnerability Detection by @jotacarma90 in #38474
• Remove leftover Login Item configuration by @rjcausarano in #38613
• Verify the Fluentd server identity in the fluent-forward module by @vikman90 in #38686
• Merge 4.14.8 into 4.14.9 by @jotacarma90 in #38707
• Make the OS_StrBreak() loop guard underflow-safe when the part count is zero by @vikman90 in #38625
• Sanitize the Fluentd server strings written to the log by @vikman90 in #38692
• Validate API pagination URLs before following them by @vikman90 in #38688
• Prevent Linux audit plugin starvation when the Wazuh agent starts during a manager outage by @Darioortegaleyva in #38382
• Backport: Fixed the parameter for debug symbols used in package generation by @MarcelKemp in #38702
• Align the API force parameter with its OpenAPI schema by @vikman90 in #38804
• Fix correctness defects in the active response username handling by @vikman90 in #38637
• Return failure when disable-account cannot run by @vikman90 in #38645
• Removing dead arm for ebpf and fixing memory leak by @Miguevrgo in #38545
• Enable compiler hardening flags on agent binaries by @Miguevrgo in #38571
• Fix gcloud wodle hiding missing-dependency errors behind AttributeError by @Darioortegaleyva in #38856
• Escape control characters in the API access log path by @jotacarma90 in #38894
• Modify Multiple Checks to Fix Deprecated commands in Apple macOS 26.0 SCA file by @IsExec in #38669
• Merge 4.14.8 into 4.14.9 by @TomasTurina in #38946
• Fix process inventory name truncated to fifteen characters by @Darioortegaleyva in #38969
• Fix false-pass on CIS Amazon Linux 2023 minimum password-change-days check by @Darioortegaleyva in #39047
• Report per-user is_remote in the users inventory and recover two /etc/shadow fields by @nbertoldo in #39010
• Fix gcloud: defer bucket/pubsub imports to isolate broken deps by @MAnDumu in #38868
• monitor /private/etc instead of the /etc symlink in the macOS default config by @hernanvalenzuela in #39149
• Update embedded CPython to 3.10.21 and refresh Python dependencies by @TomasTurina in #39148
• Validate active response usernames against an allowlist by @vikman90 in #38651
• Merge 4.14.8 into 4.14.9 by @jotacarma90 in #39208
• SELinux permissive-mode SCA checks false-failing on compliant hosts by @Darioortegaleyva in #39166
• Protect real secret paths in the default agent FIM nodiff list (4.14.9) by @Darioortegaleyva in #39124
• Correct devtmpfs detection in fim filesystem skip by @Darioortegaleyva in #38627
• Fix missing FIM inventory for files with non-ANSI names on Windows by @Darioortegaleyva in #38301
• Fix agent crash from unlocked reads of the FIM directories list on the whodata thread by @Darioortegaleyva in #39207
• Fix gcp: surface the gcloud wodle's raw output on undiagnosable failures by @MAnDumu in #38943
• Fix sca: restore line structure to CIS AL2023 remediation scripts by @MAnDumu in #39073
• Stop the default Windows System32 restrict list from being replaced by a duplicate by @MAnDumu in #39222
• Filter DEAD_PROCESS utmpx entries out of macOS logged-in users provider by @rjcausarano in #39313
• Add us-gov-east-1 and us-gov-west-1 regions to the AWS wodle by @Miguevrgo in #39401
• Compare port objects directly when deduplicating macOS ports by @Miguevrgo in #39324
• Report password status and hash algorithm in the macOS users inventory by @nbertoldo in #39356
• Resolve group-based sudo grants in the users inventory instead of matching sudoers headers by substring by @lchico in #39368
• Prevent the macOS agent from shipping empty ossec.log/ossec.json placeholders by @hernanvalenzuela in #39152
• Merge 4.14.8 into 4.14.9 by @jotacarma90 in #39441
• Report reclaimable memory as available in macOS RAM inventory by @anromerom in #39371
• Compute login_status from any matched session, not just the last one (macOS, Linux, Windows) by @rjcausarano in #39369
• Take macOS process names from the executable path instead of the truncated pbi_name field by @lchico in #39422
• Report an unavailable CPU speed as unavailable on Apple Silicon macOS by @anromerom in #39418
• Substitute wazuh-db query parameters in a single pass by @jotacarma90 in #39494
• Bound the Store app version string to the length VerQueryValueA returns by @lchico in #39467
• Address Coverity findings CID 1678717 and CID 1678718 by @hernanvalenzuela in #39425
• Report SUSE Linux Enterprise service packs in dotted notation by @anromerom in #39524
• Ignore the eBPF whodata provider option on Windows by @Miguevrgo in #39479
• Fix nologin regex error in Ubuntu and Debian by @IsExec in #39474
• Fix macOS syscollector process and port inventory truncation by @MAnDumu in #39146
• Fix broken checks with command wrapper in multiple SCA files by @IsExec in #38679
• Re-own ossec-era files on macOS before removing the legacy accounts by @Miguevrgo in #39398
• Cache identity lookups in the eBPF whodata consumer by @Miguevrgo in #39508
• Indexer connector silent divergence by @MiguelazoDS in #39041
• Make the run_as auth-context payload limit configurable by @MiguelazoDS in #39471
• Logcollector: silence false error on macOS log stream graceful shutdown by @Darioortegaleyva in #38767
• fix: keep macOS queue/sockets at 770 in the package postinstall by @Miguevrgo in #39399
• Resolve the security_inode_setattr dentry argument without the kernel version by @Miguevrgo in #39570
• Vulnerability scanner stops processing inventory events while the CTI feed applies a backlog of offsets by @jepalfer in #39478
• Fix agent-000 config test and DELETE endpoints 401 retries by @jepalfer in #39549
• Pre-authentication enrolment denial: idle TCP connections exhaust authd's 1000-slot pool and are never reclaimed by @jepalfer in #39539
• Build the libbpf-bootstrap precompiled with Zig by @Miguevrgo in #39604
• Allow FIM eBPF whodata on capable kernels older than 5.8 by @Miguevrgo in #39600
• Add a real -Stage parameter to generate_wazuh_msi.ps1 (4.14.9) by @Darioortegaleyva in #39229
• Open agent upgrade staging files without openat() on HP-UX by @lchico in #39719
• Fix the Windows agent CA check on clean hosts and default to the Azure signing root (4.14.9) by @Darioortegaleyva in #39603
• Resolve the FIM eBPF kprobe paths from the mount claimed for write by @Miguevrgo in #39708
• Refresh Linux agent checkfiles sizes for 4.14.9 by @Miguevrgo in #39749
• Backport authd key-indexing fix and log silent VD report delivery failures by @MiguelazoDS in #39651
• Windows agent MSI: only block on pending restart operations that affect the agent by @Darioortegaleyva in #39746
• Bump 4.14.9 branch by @wazuhci in #39811
• Add CHANGELOG entry for the narrowed Windows agent MSI pending-restart check by @Darioortegaleyva in #39806
• Replace private repository links in the changelog with the public pull requests by @jotacarma90 in #39821

Full Changelog: v4.14.8...v4.14.9-rc1

Fixes the Linux window buttons and a few rough edges the AppImage catalog's test turned up, and makes the AppImage update itself.

Fixed

• Linux: the window buttons no longer show as empty boxes. Minimize, maximize and close were drawn with an icon font that only exists on Windows, so on Linux they came out as three "missing glyph" boxes. Outside Windows they are now drawn as vector icons; Windows keeps its native ones.
• The status on Home shrinks to fit instead of being cut off. In a small window, or with a long translation, it read "Discon...".
• The Proxy Mode hints no longer mention Windows on Linux and macOS. They now talk about the system proxy settings.
• Background lookups no longer take over Home's Latest line. Refreshing the public relay list or looking up your IP fails harmlessly when you are offline, but it showed up in red as the headline event. It is still in Logs.
• The repository's LICENSE now holds the full GPL-3.0 text. It only contained the short "version 3 or later" notice, so GitHub, and with it the AppImage catalog, could not tell which license OnionHop uses. The terms are unchanged.

Added

• The AppImage can update itself. It now carries update information for AppImageUpdate and similar tools, with a .zsync file published next to it in each release, so an update only downloads the parts that changed. It is also built with the static AppImage runtime, so it no longer needs libfuse2 installed.

Downloads

Checks that TUN/VPN mode really carries your traffic (#83), fixes a kill switch that switched itself off, and brings a redesigned Home page (#73).

Fixed

• TUN/VPN mode now checks that the tunnel really carries your traffic (#83). The IP on Home was always fetched through Tor's own SOCKS port, so it showed a Tor exit whenever Tor was running, even if the tunnel carried nothing at all. A user saw "all traffic via Tor" next to a Tor IP while Firefox reported their real one. Full-tunnel sessions now also make a fresh connection the way any other program would and compare its public IP with the one seen before connecting. If it comes out with your real address, Home turns red with "Not protected" and says what to do. When the check passes, Home shows "Tunnel verified". If you have routing rules that send some sites, countries or categories around Tor, a direct answer may simply be one of them, so that case is logged as inconclusive instead of raising the alarm.
• On connect, TUN/VPN mode now warns that programs already online can keep their old connections outside Tor. Windows keeps a connection on the network adapter it started on, and browsers hold connections to sites open for minutes, so reloading an IP check page right after connecting can show your real address even though everything new goes through the tunnel. Restart your browser after connecting.
• The kill switch no longer switches itself off seconds after it fires. When the tunnel died with the kill switch on, OnionHop blocked all traffic and then went straight into its normal automatic disconnect, which removed the block again. Traffic went back out on your real connection without you doing anything, which is the one thing a kill switch exists to prevent. The block now stays until you decide to end it: press Restore internet on Home, or connect again. It also fires when Tor or Arti stops unexpectedly, it is still there (and shown) if you restart OnionHop, and Home says plainly that traffic is blocked instead of "Disconnected".
• The kill switch can be turned on again. Its switch lived on the old Home page and was lost in the V3 redesign while the setting kept working: anyone who had it on kept it without seeing it, and nobody else could turn it on. It is back under Settings > Advanced > TUN engine.
• Proxy Mode now notices when something resets the system proxy, and puts it back. Proxy Mode only protects traffic while the Windows proxy setting points at Tor, but that was never re-checked. When Windows, another VPN, a cleanup tool or a browser reset it mid-session, the System proxy switch still read ON while traffic went out directly. It is now re-checked every 15 seconds while connected and restored, with a log line saying so. A proxy that belongs to another program is never overwritten; that case is reported instead.
• Downloaded Tor and tunnel components are checked before they are used. sing-box, xray and wintun are checked against SHA-256 hashes pinned in the app, and the Tor Expert Bundle against the checksum the Tor Project publishes beside it. A download that does not match is deleted and never run. The tunnel cores are also pinned to the versions OnionHop ships and is tested with, instead of whatever was newest on GitHub. These downloads only happen when a bundled component is missing.
• Logs no longer contain your real IP, your plain bridges or your Windows account name. People paste these logs into public issues. Your IP is shortened to the network part (for example 91.236.x.x), plain (vanilla) bridges are logged as their address only, and your user folder shows as %USERPROFILE%.
• Switches that don't apply now look it. A disabled switch looked exactly like a working one, so in full-tunnel mode the split tunneling switches read "on" and ignored every click. They are now faded. Block UDP traffic only ever did anything with split tunneling (full tunnel never lets UDP out), so it is only available there and says so.
• Onion services. The fields for a new service have labels now: three of the four start with a value, so their placeholders never showed and the row read "80, 127.0.0.1, 80" with nothing saying which port was which. The on/off button is a switch, and the section's messages are translated.
• Settings. The Bridge type list could come up empty. Two settings showed another setting's description, and three described working features as coming later. The connection timeout explanation was cut off inside its text box. The Snowflake volunteer section told people to build the proxy with a developer script, although it ships with the app.
• The bridge "last updated" time no longer shows a Solar Hijri date in an English interface on Persian-locale Windows.
• Translations. 22 settings that were still English in every other language are translated. German and French texts that had lost their umlauts and accents are fixed, and a stray letter from another script inside a Kurdish word is gone.

Added

• Redesigned Home page (#73), based on the proposal by @alirezafarvardin. The status now answers one question, "am I protected", in a word or two ("Connected", "Connecting", "Disconnected", "Not protected") with one plain sentence underneath. That sentence is worked out from what is actually happening, so it can no longer contradict the controls: before, switching the system proxy on after connecting left the button reading ON next to a headline saying the system proxy was off.
  • While connecting you see Tor's live progress, and a new Latest line shows the most recent meaningful event with a shortcut to Logs.
  • The Mode choice explains itself where you make it (Proxy Mode only covers apps that follow the Windows proxy setting, TUN/VPN mode covers every app) and is locked during a session.
  • The System proxy switch sits with the mode it belongs to and only appears where it does anything.
  • Four compact figures replace the large speed bars: downloaded, uploaded, circuits built and identity changes, with live speeds.
  • Update bridges and the last update time moved to Settings, Bridges. A More settings link on Home goes straight there.

Downloads

What's Changed

• Fix typo in missing signed URL log by @dylanjew in #5490
• Ensure rss_limit_mb is set to 0 for all Chromium/Google tasks by @tbantikyan in #5466
• Rename get_cpu_arch to get_target_cpu_arch by @JuanMBriones in #5464
• Respect exclude patterns in reproducibility test by @emaxx-google in #5471
• [macOS/ARM64] Add llvm-symbolizer binary for macOS ARM64 bots by @JuanMBriones in #5499
• [Better Tests] Adds new test dependencies by @IvanBM18 in #5475
• [Swarming] Reconsiders swarming tasks for remote execution by @IvanBM18 in #5476
• [Scheduling][Swarming] Retries tasks only on meant platform by @IvanBM18 in #5495

New Contributors

• @emaxx-google made their first contribution in #5471

Full Changelog: v2.41.2...v2.42.0