Synapse v2.160.0

Automatic Migrations

• Update inet:ipv6 nodes to set their :type and :scope properties.
  (#3498 <https://github.com/vertexproject/synapse/pull/3498>_)
• Update existing layer push and layer pull configurations to set the default
  chunk size and queue size values on them.
  (#3480 <https://github.com/vertexproject/synapse/pull/3480>_)
• See :ref:datamigration for more information about automatic migrations.

Model Changes

• Updates to the infotech, ou, and risk models.
  (#3501 <https://github.com/vertexproject/synapse/pull/3501>)
  (#3504 <https://github.com/vertexproject/synapse/pull/3504>)

  New Properties

  risk:vuln
  The form had the following properties added to it:

  severity
  The severity of the vulnerability.

  priority
  The priority of the vulnerability.

  inet:ipv6
  The form had the following properties added to it:

  type
  The type of IP address (e.g., private, multicast, etc.).

  scope
  The IPv6 scope of the address (e.g., global, link-local, etc.).

  Updated Types

  it:exec:proc
  This now inherits the it:host:activity interface.

  it:exec:thread
  This now inherits the it:host:activity interface.

  it:exec:loadlib
  This now inherits the it:host:activity interface.

  it:exec:mmap
  This now inherits the it:host:activity interface.

  it:exec:mutex
  This now inherits the it:host:activity interface.

  it:exec:pipe
  This now inherits the it:host:activity interface.

  it:exec:url
  This now inherits the it:host:activity interface.

  it:exec:bind
  This now inherits the it:host:activity interface.

  it:exec:file:add
  This now inherits the it:host:activity interface.

  it:exec:file:read
  This now inherits the it:host:activity interface.

  it:exec:file:write
  This now inherits the it:host:activity interface.

  it:exec:file:del
  This now inherits the it:host:activity interface.

  it:exec:reg:get
  This now inherits the it:host:activity interface.

  it:exec:reg:set
  This now inherits the it:host:activity interface.

  it:exec:reg:del
  This now inherits the it:host:activity interface.

Features and Enhancements

• Add tab completion of commands, forms, properties, tags, and $lib.
  functions the Storm CLI tool.
  (#3493 <https://github.com/vertexproject/synapse/pull/3493>)
  (#3507 <https://github.com/vertexproject/synapse/pull/3507>)
• Add node.set.<form>.<prop> and node.del.<form>.<prop> permissions
  conventions to the Cortex for property sets and deletes.
  (#3505 <https://github.com/vertexproject/synapse/pull/3505>_)
• Add experimental support for Storm query offloading to the Cortex. This can
  be used to offload Storm queries to an AHA service pool. This can be
  configured with the storm:pool option on the Cortex.
  (#3452 <https://github.com/vertexproject/synapse/pull/3452>)
  (#3513 <https://github.com/vertexproject/synapse/pull/3513>)
• Add a --deledges option to the delnode command. This deletes the N2
  edges for a node before deleting the node.
  (#3503 <https://github.com/vertexproject/synapse/pull/3503>_)
• When creating layer push or pull configurations, the chunk size and queue
  size can now be set.
  (#3480 <https://github.com/vertexproject/synapse/pull/3480>_)
• Add a cell.hasHttpSess() API to check if a given Cell has a known HTTP
  session.
  (#3485 <https://github.com/vertexproject/synapse/pull/3485>_)
• Fire a core:pkg:onload:complete event when a Storm package onload
  handler is completed. This can be used when writing unit tests for Rapid
  Power-ups.
  (#3497 <https://github.com/vertexproject/synapse/pull/3497>_)

Bugfixes

• Remove dataname index entries when removing all nodedata from a node.
  (#3499 <https://github.com/vertexproject/synapse/pull/3499>_)
• Fix an issue with tagprops not being correctly returned in
  $node.getByLayer().
  (#3500 <https://github.com/vertexproject/synapse/pull/3500>_)
• Fix an issue with the edges.del command when using the --n2 option.
  This now behaves correctly when the N1 node does not exist.
  (#3506 <https://github.com/vertexproject/synapse/pull/3506>_)
• Fix an issue with duplicate properties being tracked in the property type
  map of the data model. This could have resulted in multiple nodes being
  lifted with interface properties.
  (#3512 <https://github.com/vertexproject/synapse/pull/3512>_)

Improved Documentation

• Update Storm filter documentation. Additional information about tag globbing
  and interval filtering has been included.
  (#3489 <https://github.com/vertexproject/synapse/pull/3489>_)

For complete changelog entries, see the following https://synapse.docs.vertex.link/en/latest/synapse/changelog.html

Synapse v2.159.0

Automatic Migrations

• Update any extended model elements which used the taxonomy interface
  to now use the meta:taxonomy interface.
  (#3334 <https://github.com/vertexproject/synapse/pull/3334>_)
• See :ref:datamigration for more information about automatic migrations.

Features and Enhancements

• Add support for lifting, pivoting, and filtering using wildcards, lists,
  variables, and interfaces as form and property names.
  (#3334 <https://github.com/vertexproject/synapse/pull/3334>_)
• Migrate the name of the taxonomy interface to meta:taxonomy.
  (#3334 <https://github.com/vertexproject/synapse/pull/3334>_)
• Update the pinned version of the lark library to 1.1.9 for
  compatibility with Python 3.11.7.
  (#3488 <https://github.com/vertexproject/synapse/pull/3488>_)

Bugfixes

• Prevent re-adding extended model elements in Nexus handlers.
  (#3486 <https://github.com/vertexproject/synapse/pull/3486>_)
• Add missing permissions checks on the $lib.axon.urlfile() API. This now
  requires the node.add.file:bytes and node.add.inet:urlfile
  permissions.
  (#3490 <https://github.com/vertexproject/synapse/pull/3490>_)
• Fix the permission checking for Vaults to check the Storm runtime asroot
  status.
  (#3492 <https://github.com/vertexproject/synapse/pull/3492>_)
• Fix an issue with $lib.stix.import.ingest() not converting bundle
  to a dictionary.
  (#3495 <https://github.com/vertexproject/synapse/pull/3495>_)

Improved Documentation

• Add documentation for the reverse keyword.
  (#3487 <https://github.com/vertexproject/synapse/pull/3487>_)
• Clarify the use of the "try" operator ( +? ) in edit operations.
  (#3482 <https://github.com/vertexproject/synapse/pull/3482>)
  (#3487 <https://github.com/vertexproject/synapse/pull/3487>)
• Update Storm lift documentation to add additional examples and clarify
  existing documentation.
  (#3487 <https://github.com/vertexproject/synapse/pull/3487>_)
• Update Storm data modification documentation to add additional examples and
  clarify existing documentation.
  (#3482 <https://github.com/vertexproject/synapse/pull/3482>_)

For complete changelog entries, see the following https://synapse.docs.vertex.link/en/latest/synapse/changelog.html

Synapse v2.158.0

Features and Enhancements

• Update the allowed versions of thefastjsonschema, idna, pygments,
  and aiosmtplib libraries.
  (#3478 <https://github.com/vertexproject/synapse/pull/3478>_)

Bugfixes

• Fix a bug where the role:add and user:add Nexus handlers could raise
  an exception when being called by a service mirror.
  (#3483 <https://github.com/vertexproject/synapse/pull/3483>_)

Improved Documentation

• Update the Storm command reference guide.
  (#3481 <https://github.com/vertexproject/synapse/pull/3481>_)
• Update the Synapse glossary.
  (#3481 <https://github.com/vertexproject/synapse/pull/3481>_)

For complete changelog entries, see the following https://synapse.docs.vertex.link/en/latest/synapse/changelog.html

Synapse v2.157.0

Features and Enhancements

• Added vaults feature for storing and sharing secret values (such as API
  keys) and associated configuration settings. Vaults can be shared with and
  used by another user without them being able to see the enclosed secret
  values.
  (#3319 <https://github.com/vertexproject/synapse/pull/3319>)
  (#3461 <https://github.com/vertexproject/synapse/pull/3461>)
• Added Storm commands to interact with vaults: vaults.*.
  (#3319 <https://github.com/vertexproject/synapse/pull/3319>_)
• Added Storm library to interact with vaults: $lib.vaults.*.
  (#3319 <https://github.com/vertexproject/synapse/pull/3319>_)
• Add merge request voting and history tracking for full View merges.
  (#3466 <https://github.com/vertexproject/synapse/pull/3466>)
  (#3473 <https://github.com/vertexproject/synapse/pull/3473>)
  (#3475 <https://github.com/vertexproject/synapse/pull/3475>_)
• Add service pooling support to AHA. This allows for dynamic service
  topologies and distributed Telepath API calls.
  (#3353 <https://github.com/vertexproject/synapse/pull/3353>)
  (#3477 <https://github.com/vertexproject/synapse/pull/3477>)
• Add user managed API keys that can be used to access HTTP API endpoints.
  (#3470 <https://github.com/vertexproject/synapse/pull/3470>_)
• Added an --optsfile option to the Storm CLI tool. This can be used to
  specify opts to the CLI tool via YAML. See :ref:dev_storm_opts for
  details about available options.
  (#3468 <https://github.com/vertexproject/synapse/pull/3468>_)
• Cron status changes are now persisted through the Nexus.
  (#3460 <https://github.com/vertexproject/synapse/pull/3460>_)
• Add a show:storage option to the Storm runtime opts to include the
  storage node data in the node message.
  (#3471 <https://github.com/vertexproject/synapse/pull/3471>_)

Bugfixes

• Log a warning message when calling the Python User.pack(packroles=True)
  method when a user role is missing from the Auth subsystem. A missing
  role previously caused an AttributeError exception.
  (#3469 <https://github.com/vertexproject/synapse/pull/3469>_)
• Ensure the Nexus view:detach event is idempotent.
  (#3474 <https://github.com/vertexproject/synapse/pull/3474>_)
• Fix an issue where Storm subqueries containing non-runtsafe values could
  potentially not execute.
  (#3443 <https://github.com/vertexproject/synapse/pull/3443>_)

For complete changelog entries, see the following https://synapse.docs.vertex.link/en/latest/synapse/changelog.html

Synapse v2.156.0

Model Changes

• Updates to the infotech, ou, and risk models.
  (#3436 <https://github.com/vertexproject/synapse/pull/3436>)
  (#3438 <https://github.com/vertexproject/synapse/pull/3438>)
  (#3446 <https://github.com/vertexproject/synapse/pull/3447>)
  (#3447 <https://github.com/vertexproject/synapse/pull/3447>)

  New Properties

  it:av:scan:result
  The form had the following properties added to it:

  ``target:ipv4``
    The IPv4 address that was scanned to produce the result.
  
  ``target:ipv6``
    The IPv6 address that was scanned to produce the result.
  

  ou:campaign
  The form had the following property added to it:

  mitre:attack:campaign
  A mapping to a Mitre ATT&CK campaign if applicable.

  risk:vuln
  The form had the following property added to it:

  id
  An identifier for the vulnerability.

  New Forms

  it:mitre:attack:campaign
  A Mitre ATT&CK Campaign ID.

  risk:technique:masquerade
  Represents the assessment that a node is designed to resemble another
  in order to mislead.

  Updated Types

  it:os:windows:sid
  The regular expression used to validate the SID has been updated
  to allow modeling well-known SID values.

Features and Enhancements

• Add an empty keyword to Storm to conditionally execute queries when
  there are no nodes in the pipeline.
  (#3434 <https://github.com/vertexproject/synapse/pull/3434>_)
• Add Storm APIs for getting property counts for a given layer or
  view.. These APIs are getPropCount(), getPropArrayCount(),
  getTagPropCount().
  (#3435 <https://github.com/vertexproject/synapse/pull/3435>_)
• Add a new permission, view.fork, which can be used to control access
  for forking a view. This permission defaults to being allowed.
  (#3437 <https://github.com/vertexproject/synapse/pull/3437>_)
• Add Storm operators to allow pivoting and joining across light edges. The
  following examples show pivoting across refs edges and joining the
  destination nodes with the inbound nodes: -(refs)+> and <+(refs)-.
  (#3441 <https://github.com/vertexproject/synapse/pull/3441>_)
• Add Storm operators to do pivot out and join ( --+> ) and pivot in
  and join ( <+--) operations across light edges.
  (#3441 <https://github.com/vertexproject/synapse/pull/3441>)
  (#3442 <https://github.com/vertexproject/synapse/pull/3442>)
• Storm subqueries used to assign a value now always run.
  (#3445 <https://github.com/vertexproject/synapse/pull/3445>_)
• Non-runtsafe try...catch blocks in Storm now run when there are no
  inbound nodes.
  (#3445 <https://github.com/vertexproject/synapse/pull/3445>_)
• The Storm API $lib.storm.eval() now logs its text argument to the
  synapse.storm logger.
  (#3448 <https://github.com/vertexproject/synapse/pull/3448>_)
• Add a --by-name argument to the Storm stats.countby command. This
  can be used to sort the results by name instead of count.
  (#3450 <https://github.com/vertexproject/synapse/pull/3450>_)
• Add a new Storm API $lib.gis.bbox() to allow computing geospatial
  bounding boxes.
  (#3455 <https://github.com/vertexproject/synapse/pull/3455>_)

Bugfixes

• Prevent recursion errors in inet:fqdn onset handlers.
  (#3433 <https://github.com/vertexproject/synapse/pull/3433>_)
• When dereferencing a list or dictionary object off of a Node in Storm, the
  returned value is now a copy of the value. This avoids the situation where
  modifying the deferenced value appeared to alter the node but did not
  actually result in any edits to the underlying data.
  (#3439 <https://github.com/vertexproject/synapse/pull/3439>_)
• Add a missing sub-query example to Storm for loop documentation.
  (#3451 <https://github.com/vertexproject/synapse/pull/3451>_)
• Fix an issue where attempting to norm an IPv4 with an invalid netmask
  would raise a Python error.
  (#3459 <https://github.com/vertexproject/synapse/pull/3459>_)

Deprecations

• Deprecated Cortex and splice related APIs which were marked for removal
  after 2023-10-01 have been removed. The list of these APIs can be found
  at :ref:changelog-depr-20231001. These additional splice related changes
  have also been made:

  The HTTP API /api/v1/storm now sets the default editformat opt
  value to nodeedits. Previously this API produced splice changes by
  default.

  The synapse.tools.cmdr storm command no longer displays splices.

  The synapse.tools.cmdr log command no longer records splices.

  The synapse.tools.csvtool tool no longer records or displays splices.

  The synapse.tools.feed tool no longer supports splices or nodeedits as
  input and the splice documentation example has been removed.

  (#3449 <https://github.com/vertexproject/synapse/pull/3449>_)

• The deprecated function synapse.common.aclosing() has been removed.
  (#3449 <https://github.com/vertexproject/synapse/pull/3449>_)

• Provisioning a Synapse service with AHA now always updates the local CA
  certificate and generates new host and user certificates for the service.
  Previously these would not be regenerated if the CA or service names did
  not change.
  (#3457 <https://github.com/vertexproject/synapse/pull/3457>_)

For complete changelog entries, see the following https://synapse.docs.vertex.link/en/latest/synapse/changelog.html

Synapse v2.155.0

Model Changes

• Updates to the infotech, proj, and risk models.
  (#3422 <https://github.com/vertexproject/synapse/pull/3422>_)

  New Properties

  proj:ticket
  The form had the following property added to it:

  ext:assignee
  Ticket assignee contact information from an external system.

  risk:alert
  The form had the following property added to it:

  severity
  A severity rank for the alert.

  it:exec:query
  The form had the following property added to it:

  offset
  The offset of the last record consumed from the query.

  New Forms

  it:av:scan:result
  The result of running an antivirus scanner.

  Updated Properties

  risk:alert
  The form had the following properties updated on it:

  priority
  The type of this property has been changed from an int to
  meta:priority.

  risk:attack
  The form had the following properties updated on it:

  severity
  The type of this property has been changed from an int to
  meta:severity.

  risk:compromise
  The form had the following properties updated on it:

  severity
  The type of this property has been changed from an int to
  meta:severity.

  Deprecated Forms

  The following forms have been marked as deprecated:

  it:av:sig
  Please use it:av:scan:result.

  it:av:filehit
  Please use it:av:scan:result.

  it:av:prochit
  Please use it:av:scan:result.

Features and Enhancements

• Add a detach() method to the Storm view object. This will detach a
  forked View from its parent.
  (#3323 <https://github.com/vertexproject/synapse/pull/3323>_)
• Change the method used to generate the took value in the Storm fini
  message to use a monotonic clock.
  (#3325 <https://github.com/vertexproject/synapse/pull/3325>_)
• Performing an invalid "pivot in" operation with a form target
  (<- some:form) now raises a StormRuntimeError instead of silently
  doing nothing.
  (#3326 <https://github.com/vertexproject/synapse/pull/3326>_)
• Allow relative properties on the right hand side of a filter operation
  when using Storm expression syntax.
  (#3324 <https://github.com/vertexproject/synapse/pull/3324>_)
• Add an /api/v1/logout method on the Cell to allow HTTPS users to logout
  of their sessions.
  (#3430 <https://github.com/vertexproject/synapse/pull/3430>_)
• Allow taxonomy prefix lift and filter operations to work with taxon parts.
  (#3329 <https://github.com/vertexproject/synapse/pull/3329>_)
• Update the allowed versions of the cbor2, pycryptodome,
  pygments, vcrpy, and xxhash libraries. Update the pinned version
  of the lark library.
  (#3418 <https://github.com/vertexproject/synapse/pull/3418>_)

Bugfixes

• Fix a performance regression in graph projection for computing large graphs
  in Storm.
  (#3375 <https://github.com/vertexproject/synapse/pull/3375>_)
• Fix a conflict between Storm $lib.inet.http functions and vcrpy
  where json and data args shouldn't be passed together.
  (#3428 <https://github.com/vertexproject/synapse/pull/3428>_)

Improved Documentation

• Fix an error in the Cortex mirror deployment guide. The example
  docker-compose.yaml was missing the environment variables for
  SYN_CORTEX_AXON and SYN_CORTEX_JSONSTOR.
  (#3430 <https://github.com/vertexproject/synapse/pull/3430>_)

For complete changelog entries, see the following https://synapse.docs.vertex.link/en/latest/synapse/changelog.html

Synapse v2.154.1

This release is for updating the version of the cryptography package in
Synapse containers to 41.0.5.

For complete changelog entries, see the following https://synapse.docs.vertex.link/en/latest/synapse/changelog.html

Synapse v2.154.0

Automatic Migrations

• Update the inet:ipv4:type value for RFC6598 addresses to shared.
  (#3410 <https://github.com/vertexproject/synapse/pull/3410>_)
• See :ref:datamigration for more information about automatic migrations.

Model Changes

• Update to the inet and ou models.

  (#3406 <https://github.com/vertexproject/synapse/pull/3406>)
  (#3407 <https://github.com/vertexproject/synapse/pull/3407>)
  (#3410 <https://github.com/vertexproject/synapse/pull/3410>)
  (#3416 <https://github.com/vertexproject/synapse/pull/3416>)

  Updated Types

  inet:ipv4
  RFC6598 addresses now have a :type property value of shared.

  inet:url
  Accept Microsoft URLPrefix strings with a strong wildcard host value.

  Add a check to prevent creating inet:url nodes with an empty host
  and path part, such as inet:url=file://''.

  New Properties

  ou:org
  The form had the following property added to it:

  tag
  A base tag used to encode assessments made by the organization.

  risk:compromise
  The form had the following properties added to it:

  ext:id
  An external unique ID for the compromise.

  url
  A URL which documents the compromise.

  risk:alert
  The form had the following property added to it:

  host
  The host which generated the alert.

  New Forms

  ou:requirement
  A specific requirement.

  risk:leak
  An event where information was disclosed without permission.

  risk:leak:type:taxonomy
  A taxonomy of leak event types

  risk:extortion
  An event where an attacker attempted to extort a victim.

  risk:extortion:type:taxonomy
  A taxonomy of extortion event types.

  Light Edges

  leaked
  When used with a risk:leak node, the edge indicates the leak included
  the disclosure of the target node.

  leveraged
  When used with a risk:extortion node, the edge indicates the extortion
  event was based on attacker access to the target node.

  meets
  When used with a ou:requirement node, the edge indicates the
  requirement was met by the source node.

Features and Enhancements

• Add edge:add and edge:del as trigger conditions. These trigger when
  light edges are added or removed from a node.
  (#3389 <https://github.com/vertexproject/synapse/pull/3389>_)
• Storm lift and filter operations using regular expressions (~=) are now
  case insensitive by default.
  (#3403 <https://github.com/vertexproject/synapse/pull/3403>_)
• Add a unique() method to the Storm list object. This returns a new
  list with only unique elements in it.
  (#3415 <https://github.com/vertexproject/synapse/pull/3415>_)
• Add support for synapse.tools.autodoc to generate documentation for
  API definitions declared in Storm packages.
  (#3382 <https://github.com/vertexproject/synapse/pull/3382>_)
• A review of Storm library functions was performed and all readonly safe
  functions have been marked for execution in a readonly Storm runtime.
  (#3402 <https://github.com/vertexproject/synapse/pull/3402>_)
• Allow setting the layers on a root View with forks.
  (#3413 <https://github.com/vertexproject/synapse/pull/3413>_)

Bugfixes

• Per-node Storm variables are now passed into subquery assignment
  expressions.
  (#3405 <https://github.com/vertexproject/synapse/pull/3405>_)
• Fix an issue with Storm Dmon hive storage being opened too late in the
  Cortex startup sequence.
  (#3411 <https://github.com/vertexproject/synapse/pull/3411>_)
• Remove a check when deleting tags from a node which prevented tag deletion
  from a node when the root tag was deleted in a parent view.
  (#3408 <https://github.com/vertexproject/synapse/pull/3408>_)

For complete changelog entries, see the following https://synapse.docs.vertex.link/en/latest/synapse/changelog.html

Synapse v2.153.0

Model Changes

• Update to the inet and ou models.

  (#3393 <https://github.com/vertexproject/synapse/pull/3393>)
  (#3396 <https://github.com/vertexproject/synapse/pull/3396>)

  Deprecated Properties

  inet:web:acct
  The inet:web:acct form had the following properties marked as deprecated:

  • name:en
  • realname:en

  inet:web:group
  The inet:web:group form had the following property marked as deprecated:

  • name:en

  ou:industry
  The ou:industry form had the following property marked as deprecated:

  • subs

Features and Enhancements

• Add a new Storm API, $lib.cortex.httpapi, for creating and managing
  Extended HTTP API endpoints. These Cortex HTTP API endpoints allow a user to
  create custom responses via Storm. Documentation for this feature can be
  found at :ref:devops-svc-cortex-ext-http.
  (#3366 <https://github.com/vertexproject/synapse/pull/3366>_)
• Add a new Storm API, $lib.iters.zip(), to iterate over sequences of
  items together.
  (#3392 <https://github.com/vertexproject/synapse/pull/3392>)
  (#3398 <https://github.com/vertexproject/synapse/pull/3398>)
• Add a Storm command stats.countby to tally occurrences of values and
  display a barchart representing the values.
  (#3385 <https://github.com/vertexproject/synapse/pull/3385>_)
• Update the Storm command auth.user.mod to allow setting a user as admin
  on a specific auth gate.
  (#3391 <https://github.com/vertexproject/synapse/pull/3391>_)
• The proxy argument to $lib.inet.http.*, $lib.axon.wget(),
  $lib.axon.urlfile(), and $lib.axon.wput() APIs is now gated behind
  the permission storm.lib.inet.http.proxy. Previously this required
  admin permission to utilize.
  (#3397 <https://github.com/vertexproject/synapse/pull/3397>_)
• Add an errors parameter to $lib.axon.readlines(),
  $lib.axon.csvrows(), and $lib.axon.jsonlines(). This parameter
  defaults to ignore to ignore any decoding errors that are encountered
  when decoding text.
  (#3395 <https://github.com/vertexproject/synapse/pull/3395>_)
• Lower the maximum allowed version of the pyopenssl library.
  (#3399 <https://github.com/vertexproject/synapse/pull/3399>_)

Bugfixes

• Fix a bug in the Cortex.syncLayersEvents() and
  Cortex.syncIndexEvents() APIs which caused layers to stop sending their
  node edits under certain conditions.
  (#3394 <https://github.com/vertexproject/synapse/pull/3394>_)
• Storm now raises a BadSyntaxError when attempting to filter by wildcard
  tags or tagprops when a value is specified for the filter.
  (#3373 <https://github.com/vertexproject/synapse/pull/3373>_)

For complete changelog entries, see the following https://synapse.docs.vertex.link/en/latest/synapse/changelog.html

Synapse v2.152.0

Model Changes

• Update to the biz, crypto, geo, it, mat, media,
  and risk models.

  (#3341 <https://github.com/vertexproject/synapse/pull/3341>)
  (#3377 <https://github.com/vertexproject/synapse/pull/3377>)
  (#3376 <https://github.com/vertexproject/synapse/pull/3376>)
  (#3381 <https://github.com/vertexproject/synapse/pull/3381>)

  Updated Interfaces

  crypto:smart:effect
  Add a doc value to the interface.

  it:host:activity
  Add a doc value to the interface.

  taxonomy
  Add a doc value to the interface.

  Updated Types

  time
  The time type now recognizes RFC822 formatted time strings.

  biz:service:type:taxonomy
  The taxonomy interface has been added to the type.

  geo:place:taxonomy
  The taxonomy interface has been added to the type.

  it:log:event:type:taxonomy
  The taxonomy interface has been added to the type.

  it:prod:soft:taxonomy
  The taxonomy interface has been added to the type.

  mat:type
  The taxonomy interface has been added to the type.

  media:news:taxonomy
  The taxonomy interface has been added to the type.

  risk:alert:taxonomy
  The taxonomy interface has been added to the type.

  risk:alert:verdict:taxonomy
  The taxonomy interface has been added to the type.

  risk:threat:type:taxonomy
  The taxonomy interface has been added to the type.

  New Forms

  it:dev:repo:label
  A developer selected label.

  it:dev:repo:issue:label
  A label applied to a repository issue.

Features and Enhancements

• Update the Storm string repr for $lib.null and $lib.undef values to
  $lib.null and $lib.undef. Previously these printed None and an
  opaque Python object repr.
  (#3361 <https://github.com/vertexproject/synapse/pull/3361>_)
• The synapse.tools.aha.list CLI tool now checks if it is connected to an
  Aha server prior to enumerating Aha services.
  (#3371 <https://github.com/vertexproject/synapse/pull/3371>_)

Bugfixes

• Update the file:path support for scrape related APIs to address an
  issue when matching against Linux style paths.
  (#3378 <https://github.com/vertexproject/synapse/pull/3378>_)
• Update the hex type to zeropad strings prior to checking their
  validity.
  (#3387 <https://github.com/vertexproject/synapse/pull/3387>_)
• Update the yaml.CSafeLoader check to not require the class to be
  available.
  (#3386 <https://github.com/vertexproject/synapse/pull/3386>_)

Improved Documentation

• Update the documentation for the Storm view.exec command to explain the
  separation of events and nodes between the parent and sub-runtimes.
  (#3379 <https://github.com/vertexproject/synapse/pull/3379>_)

For complete changelog entries, see the following https://synapse.docs.vertex.link/en/latest/synapse/changelog.html