Release: Merge back 2.40.1 into bugfix from: master-into-bugfix/2.40.1-2.41.0-dev

[github-actions]

Release triggered by rossops

[dryrunsecurity]

DryRun Security Summary

The pull request updates the version numbers for the DefectDojo application and its associated Helm chart, which are routine maintenance tasks that typically involve bug fixes, security patches, or minor feature improvements, and the security team should review the changes and perform regression testing to ensure there are no unintended consequences or potential security implications.

Expand for full summary

Summary:

The changes in this pull request are primarily focused on updating the version numbers for the DefectDojo application and its associated Helm chart. The changes do not appear to introduce any obvious security concerns, as they are routine maintenance tasks that typically involve bug fixes, security patches, or minor feature improvements.

However, as an application security engineer, it is important to review any code changes, even minor ones, to ensure that there are no unintended consequences or potential security implications. In this case, the recommended steps include verifying the changes, reviewing the release notes or changelog for the new versions, and performing regression testing to validate that the application continues to function as expected and that no new vulnerabilities have been introduced.

Additionally, the security team should review the dependencies listed in the Helm chart, such as the PostgreSQL and Redis components, to ensure that they are up-to-date and secure. Regularly monitoring the security status of the application's dependencies is a crucial aspect of maintaining the overall security posture.

Files Changed:

1. dojo/__init__.py: This file is the main initialization file for the DefectDojo application. The change in this file is a simple version number update from 2.40.0 to 2.40.1. This type of change is generally low-risk, but it's important to review the release notes or changelog to understand the nature of the changes and perform necessary regression testing.

2. helm/defectdojo/Chart.yaml: This file is the Helm chart for the DefectDojo application. The changes update the version field from 1.6.159-dev to 1.6.160-dev, indicating a version bump for the Helm chart. While this change does not directly impact the security of the application, the security team should review the updated Helm chart version to ensure compatibility with the latest version of the DefectDojo application and check for any known vulnerabilities or security issues associated with the new version.

Code Analysis

We ran 9 analyzers against 2 files and 0 analyzers had findings. 9 analyzers had no findings.

Riskiness

🟢 Risk threshold not exceeded.

View PR in the DryRun Dashboard.