v0.39.0

0.39.0 (2026-07-03)

Features

• vulnerability: add status field + carry-over across re-scans (#1209) (0d7bf7d)

Bug Fixes

• cli: missing "help" field in option raises ValueError (#1230) (74a6b39)
• config: SECATOR_ADDONS_* invalid key override breaks Secator totally (#1205) (2164993)
• dynamic task import order causing SyntaxError with external tasks (#1213) (0e2fcd6)
• exporters: add runner warnings to report (#1228) (1734f6b)
• output: display full node id instead of task name (#1227) (e26f394)
• output: Vulnerability colors display by severity, show tags for Tag (#1229) (6ad35e3)
• runner: remove getstate/setstate, load driver hooks at init (#1267) (2c6d2e8)
• tests: coverage report NoSource failure on main (#1270) (8b3a2a3)

Performance Improvements

• output-types: cache keys() + O(1) deduplicate membership check (#1220) (7a956e9)

v0.38.0

0.38.0 (2026-06-19)

Features

• routing: allow tasks.overrides.<task>.profile to re-route static-profile tasks (#1200) (1d41063)

Bug Fixes

• jswhois: add --force option, always (#1195) (4e495a6)
• katana: use extra_large profile for headless crawls (#1198) (d92e80c)
• nmap: repair truncated XML on timeout + per-task max timeout (#1196) (36b8719)
• test pollution bug (29ee62f)

v0.37.1

0.37.1 (2026-06-18)

Bug Fixes

• ffuf: guard against missing has_fuzz_keyword attribute (#1193) (10809f8)

v0.37.0

0.37.0 (2026-06-17)

Features

• make the api driver work end-to-end in the CLI (queries, workspaces, operators) (#1181) (d075115)

Bug Fixes

• tty: rare issue with tty (#1184) (4dd45e6)

v0.36.4

0.36.4 (2026-06-16)

Bug Fixes

• mongodb: warn instead of crashing on DocumentTooLarge (#1186) (cb6a899)
• query: bare type.field resolves to a boolean match (field == True) (#1185) (b9106fb)
• stop a workflow inheriting a sibling workflow's errors (#1182) (5fd5a89)

v0.36.3

0.36.3 (2026-06-15)

Bug Fixes

• restore on_end hooks for chunk-parent tasks on unpickle (#1180) (5c92833)
• wpscan: add --no-update and --update flags (#1177) (36a1966)

v0.36.2

0.36.2 (2026-06-15)

Bug Fixes

• chain: keep non-persisted outputs (Target/Info) through the Celery chain so subdomains feed host_recon with MongoDB (#1174) (b6f0380)

v0.36.1

0.36.1 (2026-06-15)

Bug Fixes

• driver: order drivers by priority so mongodb prevails over api (#1172) (edb0dcf)

v0.36.0

0.36.0 (2026-06-11)

Features

• driver: proper support for all backends in CLI commands (r list, r info, query, ...) (#1164) (782361d)

Bug Fixes

• cli: put loader success messages in debug instead of console.print (#1169) (2061a29)
• exporters: add jsonl exporter, fix json and csv exports (#1166) (d5e4d6e)
• nuclei: uppercase CVE id (#1168) (a04e152)

Documentation

• add workspaces to cheatsheet (#1171) (183f671)
• better README for queries (#1170) (a72f3be)

v0.35.0

0.35.0 (2026-06-10)

Features

• cli: dynamic install addons (#1144) (5f0de13)
• cli: improve r show --format with \n, Markdown, and file templates (#1065) (d80ccd5)
• cli: improve report/workspace/profile commands and ai setup (#1140) (eabdd5c)
• cli: saved queries and secator query command (#1139) (047aa04)
• profile: support workspace, drivers and exporters in profiles (#1137) (df04797)
• query: add --limit / -l option to secator r show (#1151) (a0da3c6)
• sqlite: add SQLite query driver + backend (mongodb parity) (#1163) (fe9680d)
• workspace: add automatic workspace routing (#1158) (307eeb3)
• workspace: default profile per workspace (#1132) (b38e52d)

Bug Fixes

• ai: handle OutputType objects from query results (#1152) (8a41028)
• ai: yield Error for connection failures and use config context_window fallback (#1119) (5484d22)
• cli: add 'in' operator to query language (#1037) (f3b752c)
• cli: remove piped output behavior from 'secator r list' (#1149) (5e0dd75)
• cli: sanitize workspace name in report info path construction (#1146) (866ea4d)
• cli: show _path and task source in secator r info errors/warnings (#1155) (0b4942d)
• config: rename workspace config key to workspaces (#1162) (55a650e)
• query: validate output type fields and warn on unknown fields (#1159) (56388a2)
• revert "fix(runner): show task source name even when output is piped" (#1136) (63280eb)
• sqlite: remove sqlite addon as it's in std library (7f249fe)
• test: remove sqlite addon enabled check (df93876)

Documentation

• update CLAUDE.md (#1142) (a368160)