Skip to content

Release: Merge release into master from: release/2.55.4#14371

Merged
rossops merged 10 commits into
masterfrom
release/2.55.4
Feb 23, 2026
Merged

Release: Merge release into master from: release/2.55.4#14371
rossops merged 10 commits into
masterfrom
release/2.55.4

Conversation

@github-actions
Copy link
Copy Markdown
Contributor

Release triggered by rossops

DefectDojo release bot and others added 10 commits February 17, 2026 18:40
….56.0-dev

Release: Merge back 2.55.3 into bugfix from: master-into-bugfix/2.55.3-2.56.0-dev
Co-authored-by: Matt Tesauro <mtesauro@gmail.com>
…after (#14364)

Add release-helm-chart as a dependency for release-drafter so the Helm
chart is always uploaded to the release first. This prevents race
conditions where release-drafter could create the release before the
helm chart job, causing softprops/action-gh-release to fail with
'already_exists' and the helm chart to be missing from the release.

Fixes #14337
Add early return in chunk_endpoints_and_disperse and chunk_locations_and_disperse
when the endpoint/location list is empty. Many parsers (e.g. Bandit) set file_path
but leave unsaved_endpoints/unsaved_locations empty, causing ~214 no-op Celery
tasks per import. This optimization avoids unnecessary task creation, serialization,
and execution.
* Fix database data loss after docker compose down (fixes #14358)

PostgreSQL 18 changed the default PGDATA path from /var/lib/postgresql/data
to /var/lib/postgresql/18/docker. The volume was mounted at the old path,
so data was stored in the container's ephemeral layer instead. Setting
PGDATA explicitly ensures data persists in the volume.

* Add upgrade note about PGDATA data loss bug fixed in 2.55.4

PostgreSQL 18 changed its default PGDATA path, causing data to be
written to the container's ephemeral layer instead of the Docker volume.

* simplify
…4350)

Using findings.only("id") while select_related traversal was still
active on the queryset caused a FieldError. Clear both select_related
and prefetch_related before calling only("id") so the async dispatch
path works regardless of how the queryset was constructed.

Also switch --dedupe_batch_mode from store_true to BooleanOptionalAction
so the flag can be explicitly disabled with --no-dedupe_batch_mode.

Co-authored-by: Ross E Esposito <ross@defectdojo.com>
@rossops rossops closed this Feb 23, 2026
@rossops rossops reopened this Feb 23, 2026
@rossops rossops merged commit e4df9d9 into master Feb 23, 2026
147 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants