v1.5.3-rc1

New Features

• Add bayesian bucket type (#2290) @seemanne

Improvements

• support for stdin with "cscli decision import" and raw values (#2291) @mmetc
• non-fatal error if some datasource can't be run (i.e. journalctl but systemd is missing) (#2309) @mmetc
• Build with libre2 by default, options for wasm and static; add mk/gmsl (#2295) @mmetc
• send metrics sooner if agents are added/removed (#2296) @mmetc
• append vendor.tgz to each release (#2288) @mmetc
• CI: vagrant configuration for debian 12 (#2285) @LaurenceJJones
• CI: Remove cache entries when closing a PR (#2289) @mmetc
• Update jsonextract.go (#2287) @LaurenceJJones
• Implement "crowdsec -fatal" flag; change help message (#2266) @mmetc
• don't log systemd notification error if not running under systemd (#2274) @mmetc
• build against libre2-dev if found (#2255) @mmetc
• log.Warning if a notification is configured twice (#2240) @mmetc
• CI: publish dev-debian docker image (amd64 only) (#2252) @mmetc
• CI: use hub cli to upload release tar (#2244) @mmetc

Bug Fixes

• rename status to state in fire response (#2313) @blotus
• raise error with invalid 'on_success', 'on_failure' in profile (#2303) @mmetc
• docker: always merge .yaml.local in conf_get() (#2272) @mmetc
• Change api_key encoding to base64 to comply with bcrypt max size (#2302) @mmetc
• fix error message when failing to parse ip address or range (#2292) @mmetc

Chore / Deps

• CI: update ansible tests for re2 (#2318) @mmetc
• errors.Wrap -> fmt.Errorf (#2317) @mmetc
• func tests: install some dependencies from make, log test helpers (#2314) @mmetc
• rename metabase APIClient to avoid confusion (#2305) @mmetc
• CI: Update setup-go action to v4 (with automatic cache) (#2168) @mmetc
• docker: build same re2 version for alpine/debian; bump yq (#2311) @mmetc
• update debian version to have latest systemd (#2304) @he2ss
• CI: build docker version with c++ re2 (static) (#2307) @mmetc
• errors.Wrap -> fmt.Errorf; clean up imports (#2301) @mmetc
• CI: add fedora-37, -38 to vagrant tests (#2299) @mmetc
• update leakybucket readme (#2298) @mmetc
• errors.Wrap -> fmt.Errorf (#2297) @mmetc
• Update go dependencies (#2293) @mmetc
• spellcheck/style leakybucket readme (#2294) @mmetc
• Use go 1.20.5 (#2280) @mmetc
• light pkg/parser cleanup (#2279) @mmetc
• trim pkg/types: move DataSet/GetData to pkg/cwhub, removed unused Clone function (#2271) @mmetc
• add missing import (#2275) @mmetc
• minor refactor to pkg/types, cscli machines (#2270) @mmetc
• Move grok_pattern.go away from pkg/types to reduce bouncer dependencies (#2269) @mmetc
• don't pre-create log files (not required anymore) (#2267) @mmetc
• CI: add tests for metrics configuration (#2251) @mmetc
• CI: refactor makefile for plugins and vendor target (#2256) @mmetc
• update notif threshold test on windows (#2265) @mmetc
• show option -winsvc only under windows (#2258) @mmetc
• CI: make clean -> remove coverage data (#2259) @mmetc
• make: allow using a development version of Go, with a warning (#2260) @mmetc
• gitignore: ignore .vagrant directories (#2262) @mmetc
• default config: simulation off -> false (yaml 1.2) (#2263) @mmetc
• dependencies: replaced function calls to pkg/types, errors.Wrap (#2235) @mmetc
• CI: refactoring pkg/csplugin (#2247) @mmetc
• CI: separate stderr in all func tests (#2250) @mmetc
• update libsystemd in debian docker image (#2245) @he2ss
• types.InSlice() -> slices.Contains() (#2246) @mmetc

Changes

• do not send more than group_threshold alerts at once to a notification plugin (#2264) @mmetc
• cscli: add G (1e9) suffix to metric units (#2254) @mmetc
• allow running rootless docker tests (#2281) @mmetc

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

Installation

Take a look at the installation instructions.