From 33817cf73b573d8776cc6fae88118037ff1d22da Mon Sep 17 00:00:00 2001 From: zapbot <12745184+zapbot@users.noreply.github.com> Date: Mon, 13 Jul 2026 17:55:10 +0000 Subject: [PATCH] Release add-on(s) Release the following add-ons: - Active scanner rules (alpha) version 58 - Call Home version 0.23.0 - Forced Browse version 21 - Quick Start version 59 - Script Console version 45.20.0 - Selenium version 15.52.0 - Server-Sent Events version 14 Signed-off-by: zapbot <12745184+zapbot@users.noreply.github.com> --- ZapVersions-2.17.xml | 132 ++++++++++++++++++++++--------------------- ZapVersions-dev.xml | 132 ++++++++++++++++++++++--------------------- 2 files changed, 136 insertions(+), 128 deletions(-) diff --git a/ZapVersions-2.17.xml b/ZapVersions-2.17.xml index c0c47f16..15972498 100644 --- a/ZapVersions-2.17.xml +++ b/ZapVersions-2.17.xml @@ -164,20 +164,19 @@ Active scanner rules (alpha) The alpha status Active Scanner rules ZAP Dev Team - 57 - ascanrulesAlpha-alpha-57.zap + 58 + ascanrulesAlpha-alpha-58.zap alpha <h3>Changed</h3> <ul> -<li>The LDAP Injection scan rule now includes example alert functionality for documentation generation purposes (Issue 6119) and alert references (Issue 7100).</li> -<li>Formatted JavaScript files for consistency.</li> +<li>Maintenance changes.</li> </ul> - https://github.com/zaproxy/zap-extensions/releases/download/ascanrulesAlpha-v57/ascanrulesAlpha-alpha-57.zap - SHA-256:8c6180689ef4edd50a169efca55a1c1bf4a66224fbcc71bd2bf6d61c21938489 + https://github.com/zaproxy/zap-extensions/releases/download/ascanrulesAlpha-v58/ascanrulesAlpha-alpha-58.zap + SHA-256:9cdc660e9ce7f1e5bc2ceb5b64955c0e5b05d61b9014029a3d93cc295ad23be1 https://www.zaproxy.org/docs/desktop/addons/active-scan-rules-alpha/ https://github.com/zaproxy/zap-extensions/ - 2026-05-06 - 400319 + 2026-07-13 + 400230 2.17.0 @@ -421,25 +420,29 @@ Forced Browse Forced browsing of files and directories using code from the OWASP DirBuster tool ZAP Dev Team - 20 - bruteforce-beta-20.zap + 21 + bruteforce-beta-21.zap beta <h3>Changed</h3> <ul> -<li>Update minimum ZAP version to 2.17.0.</li> +<li>Maintenance changes.</li> +</ul> +<h3>Fixed</h3> +<ul> +<li>Bug: tested the wrong condition when detecting &quot;file not found&quot; responses.</li> </ul> - https://github.com/zaproxy/zap-extensions/releases/download/bruteforce-v20/bruteforce-beta-20.zap - SHA-256:c18de61b2d4082aca0e8dc4d916398ddb556179cf2e14caf065fe837713f985c + https://github.com/zaproxy/zap-extensions/releases/download/bruteforce-v21/bruteforce-beta-21.zap + SHA-256:54dfb10a64d35fbb829968f7fe53bff1cf8a30753d3e22b3172e478304facb86 https://www.zaproxy.org/docs/desktop/addons/forced-browse/ https://github.com/zaproxy/zap-extensions/ - 2025-12-15 - 554460 + 2026-07-13 + 555053 2.17.0 commonlib - >= 1.23.0 & < 2.0.0 + >= 1.43.0 & < 2.0.0 @@ -498,19 +501,19 @@ Call Home Handles all of the calls to ZAP services. ZAP Dev Team - 0.22.0 - callhome-release-0.22.0.zap + 0.23.0 + callhome-release-0.23.0.zap release - <h3>Removed</h3> + <h3>Added</h3> <ul> -<li>Stop collecting &quot;stats.auth.detect.session.*&quot;.</li> +<li>SSE stats to telemetry.</li> </ul> - https://github.com/zaproxy/zap-extensions/releases/download/callhome-v0.22.0/callhome-release-0.22.0.zap - SHA-256:85738072438f76b51cd9f45222eb74fb8613adb54e9ca22b5e3b9633b48ee735 + https://github.com/zaproxy/zap-extensions/releases/download/callhome-v0.23.0/callhome-release-0.23.0.zap + SHA-256:eadebd4ae60c1865f6811a276a643ebe954328e2e903447bf460d8b3ef691d7f https://www.zaproxy.org/docs/desktop/addons/call-home/ https://github.com/zaproxy/zap-extensions/ - 2026-06-26 - 326777 + 2026-07-13 + 326771 2.17.0 client @@ -2499,20 +2502,23 @@ but if you encounter problems, please refer to the following. Quick Start Provides a tab which allows you to quickly test a target application ZAP Dev Team - 58 - quickstart-release-58.zap + 59 + quickstart-release-59.zap release - <h3>Changed</h3> + <h3>Added</h3> <ul> -<li>Maintenance changes.</li> -<li>Default to Client Spider for modern apps.</li> +<li>Allow to choose and open the browser directly from the tool bar.</li> +</ul> +<h3>Changed</h3> +<ul> +<li>Depend on newer version of Selenium add-on.</li> </ul> - https://github.com/zaproxy/zap-extensions/releases/download/quickstart-v58/quickstart-release-58.zap - SHA-256:9957563929e243442811940bec35b0986d879ff51b9d85478f7e45cea1fb9ba0 + https://github.com/zaproxy/zap-extensions/releases/download/quickstart-v59/quickstart-release-59.zap + SHA-256:2388858c47aa504b5b4f397405ab46a51d69e3df5e9e3ae0ae2a2b4bb23e690b https://www.zaproxy.org/docs/desktop/addons/quick-start/ https://github.com/zaproxy/zap-extensions/ - 2026-07-06 - 809205 + 2026-07-13 + 805897 2.17.0 @@ -2843,28 +2849,23 @@ but if you encounter problems, please refer to the following. Script Console Supports all JSR 223 scripting languages ZAP Dev Team - 45.19.0 - scripts-release-45.19.0.zap + 45.20.0 + scripts-release-45.20.0.zap release <h3>Added</h3> <ul> -<li>Functionality to store script diagnostics and provides them to Reports. Depends on the database add-on.</li> -<li>The Script Job Run action now supports a <code>failureLevel</code> parameter (<code>info</code>, <code>warning</code>, <code>error</code>) to control the Automation Framework progress level used when a script or chain execution fails (defaults to <code>error</code>).</li> +<li>GUI support for Zest script chains and failure level in the Automation Framework Script job dialog (via the Use Script Chain checkbox, and Chains tab).</li> </ul> <h3>Changed</h3> <ul> <li>Update dependency.</li> -<li>Revised error handling for chained scripts, output is now more detailed/specific.</li> -<li>The Run Script action display for chains in the Automation panel has been updated to display the names of scripts in the chain instead of being blank.</li> -<li>Maintenance changes.</li> -<li>Formatted JavaScript files for consistency.</li> </ul> - https://github.com/zaproxy/zap-extensions/releases/download/scripts-v45.19.0/scripts-release-45.19.0.zap - SHA-256:924868cf71f4e2938d0255ec8e0b39b24d1e46fe9c11d0240d5c666332f51dce + https://github.com/zaproxy/zap-extensions/releases/download/scripts-v45.20.0/scripts-release-45.20.0.zap + SHA-256:7f80df5e1bd692af6827c7d9b950ccda5ef9fd67e641969100d11011f057fe6d https://www.zaproxy.org/docs/desktop/addons/script-console/ https://github.com/zaproxy/zap-extensions/ - 2026-07-06 - 5805972 + 2026-07-13 + 5830265 2.17.0 @@ -2888,19 +2889,19 @@ but if you encounter problems, please refer to the following. Selenium WebDriver provider and includes HtmlUnit browser ZAP Dev Team - 15.51.0 - selenium-release-15.51.0.zap + 15.52.0 + selenium-release-15.52.0.zap release - <h3>Changed</h3> + <h3>Added</h3> <ul> -<li>Update Selenium to version 4.45.0.</li> +<li>Provide icons for the browsers.</li> </ul> - https://github.com/zaproxy/zap-extensions/releases/download/selenium-v15.51.0/selenium-release-15.51.0.zap - SHA-256:54c747a20c5feddc3c9c118486947ccca3bd4393f2e51332d5bb8fc17820dd9a + https://github.com/zaproxy/zap-extensions/releases/download/selenium-v15.52.0/selenium-release-15.52.0.zap + SHA-256:08365af8a52dc996f16e30febe89a24aead043ad0cd9ea2b9d8493fb444ce670 https://www.zaproxy.org/docs/desktop/addons/selenium/ https://github.com/zaproxy/zap-extensions/ - 2026-06-26 - 32868058 + 2026-07-13 + 32875640 2.17.0 @@ -3116,25 +3117,28 @@ but if you encounter problems, please refer to the following. Server-Sent Events Allows you to view Server-Sent Events (SSE) communication. ZAP Dev Team - 13 - sse-alpha-13.zap + 14 + sse-alpha-14.zap alpha - <h3>Changed</h3> + <h3>Added</h3> <ul> -<li>Update minimum ZAP version to 2.15.0.</li> -<li>Maintenance changes.</li> +<li>Stats for event and event streams.</li> +</ul> +<h3>Changed</h3> +<ul> +<li>Update minimum ZAP version to 2.17.0.</li> </ul> <h3>Fixed</h3> <ul> -<li>More gracefully handle missing value for &quot;id&quot; field (Issue 8320)</li> +<li>No longer fire a spurious empty event for a leading blank line (e.g. keep-alive) in an event stream.</li> </ul> - https://github.com/zaproxy/zap-extensions/releases/download/sse-v13/sse-alpha-13.zap - SHA-256:38cf84e00664287e691606f473343ba0c0db0711c4f895312d0d482c3354731b + https://github.com/zaproxy/zap-extensions/releases/download/sse-v14/sse-alpha-14.zap + SHA-256:7de39df7fc85810b977dd2800f58400fa474dd03c693ed62da5058bbfefc3a3f https://www.zaproxy.org/docs/desktop/addons/server-sent-events/ https://github.com/zaproxy/zap-extensions/ - 2024-05-21 - 330079 - 2.15.0 + 2026-07-13 + 331883 + 2.17.0 svndigger diff --git a/ZapVersions-dev.xml b/ZapVersions-dev.xml index 4d9555b2..06263181 100644 --- a/ZapVersions-dev.xml +++ b/ZapVersions-dev.xml @@ -164,20 +164,19 @@ Active scanner rules (alpha) The alpha status Active Scanner rules ZAP Dev Team - 57 - ascanrulesAlpha-alpha-57.zap + 58 + ascanrulesAlpha-alpha-58.zap alpha <h3>Changed</h3> <ul> -<li>The LDAP Injection scan rule now includes example alert functionality for documentation generation purposes (Issue 6119) and alert references (Issue 7100).</li> -<li>Formatted JavaScript files for consistency.</li> +<li>Maintenance changes.</li> </ul> - https://github.com/zaproxy/zap-extensions/releases/download/ascanrulesAlpha-v57/ascanrulesAlpha-alpha-57.zap - SHA-256:8c6180689ef4edd50a169efca55a1c1bf4a66224fbcc71bd2bf6d61c21938489 + https://github.com/zaproxy/zap-extensions/releases/download/ascanrulesAlpha-v58/ascanrulesAlpha-alpha-58.zap + SHA-256:9cdc660e9ce7f1e5bc2ceb5b64955c0e5b05d61b9014029a3d93cc295ad23be1 https://www.zaproxy.org/docs/desktop/addons/active-scan-rules-alpha/ https://github.com/zaproxy/zap-extensions/ - 2026-05-06 - 400319 + 2026-07-13 + 400230 2.17.0 @@ -421,25 +420,29 @@ Forced Browse Forced browsing of files and directories using code from the OWASP DirBuster tool ZAP Dev Team - 20 - bruteforce-beta-20.zap + 21 + bruteforce-beta-21.zap beta <h3>Changed</h3> <ul> -<li>Update minimum ZAP version to 2.17.0.</li> +<li>Maintenance changes.</li> +</ul> +<h3>Fixed</h3> +<ul> +<li>Bug: tested the wrong condition when detecting &quot;file not found&quot; responses.</li> </ul> - https://github.com/zaproxy/zap-extensions/releases/download/bruteforce-v20/bruteforce-beta-20.zap - SHA-256:c18de61b2d4082aca0e8dc4d916398ddb556179cf2e14caf065fe837713f985c + https://github.com/zaproxy/zap-extensions/releases/download/bruteforce-v21/bruteforce-beta-21.zap + SHA-256:54dfb10a64d35fbb829968f7fe53bff1cf8a30753d3e22b3172e478304facb86 https://www.zaproxy.org/docs/desktop/addons/forced-browse/ https://github.com/zaproxy/zap-extensions/ - 2025-12-15 - 554460 + 2026-07-13 + 555053 2.17.0 commonlib - >= 1.23.0 & < 2.0.0 + >= 1.43.0 & < 2.0.0 @@ -498,19 +501,19 @@ Call Home Handles all of the calls to ZAP services. ZAP Dev Team - 0.22.0 - callhome-release-0.22.0.zap + 0.23.0 + callhome-release-0.23.0.zap release - <h3>Removed</h3> + <h3>Added</h3> <ul> -<li>Stop collecting &quot;stats.auth.detect.session.*&quot;.</li> +<li>SSE stats to telemetry.</li> </ul> - https://github.com/zaproxy/zap-extensions/releases/download/callhome-v0.22.0/callhome-release-0.22.0.zap - SHA-256:85738072438f76b51cd9f45222eb74fb8613adb54e9ca22b5e3b9633b48ee735 + https://github.com/zaproxy/zap-extensions/releases/download/callhome-v0.23.0/callhome-release-0.23.0.zap + SHA-256:eadebd4ae60c1865f6811a276a643ebe954328e2e903447bf460d8b3ef691d7f https://www.zaproxy.org/docs/desktop/addons/call-home/ https://github.com/zaproxy/zap-extensions/ - 2026-06-26 - 326777 + 2026-07-13 + 326771 2.17.0 client @@ -2499,20 +2502,23 @@ but if you encounter problems, please refer to the following. Quick Start Provides a tab which allows you to quickly test a target application ZAP Dev Team - 58 - quickstart-release-58.zap + 59 + quickstart-release-59.zap release - <h3>Changed</h3> + <h3>Added</h3> <ul> -<li>Maintenance changes.</li> -<li>Default to Client Spider for modern apps.</li> +<li>Allow to choose and open the browser directly from the tool bar.</li> +</ul> +<h3>Changed</h3> +<ul> +<li>Depend on newer version of Selenium add-on.</li> </ul> - https://github.com/zaproxy/zap-extensions/releases/download/quickstart-v58/quickstart-release-58.zap - SHA-256:9957563929e243442811940bec35b0986d879ff51b9d85478f7e45cea1fb9ba0 + https://github.com/zaproxy/zap-extensions/releases/download/quickstart-v59/quickstart-release-59.zap + SHA-256:2388858c47aa504b5b4f397405ab46a51d69e3df5e9e3ae0ae2a2b4bb23e690b https://www.zaproxy.org/docs/desktop/addons/quick-start/ https://github.com/zaproxy/zap-extensions/ - 2026-07-06 - 809205 + 2026-07-13 + 805897 2.17.0 @@ -2843,28 +2849,23 @@ but if you encounter problems, please refer to the following. Script Console Supports all JSR 223 scripting languages ZAP Dev Team - 45.19.0 - scripts-release-45.19.0.zap + 45.20.0 + scripts-release-45.20.0.zap release <h3>Added</h3> <ul> -<li>Functionality to store script diagnostics and provides them to Reports. Depends on the database add-on.</li> -<li>The Script Job Run action now supports a <code>failureLevel</code> parameter (<code>info</code>, <code>warning</code>, <code>error</code>) to control the Automation Framework progress level used when a script or chain execution fails (defaults to <code>error</code>).</li> +<li>GUI support for Zest script chains and failure level in the Automation Framework Script job dialog (via the Use Script Chain checkbox, and Chains tab).</li> </ul> <h3>Changed</h3> <ul> <li>Update dependency.</li> -<li>Revised error handling for chained scripts, output is now more detailed/specific.</li> -<li>The Run Script action display for chains in the Automation panel has been updated to display the names of scripts in the chain instead of being blank.</li> -<li>Maintenance changes.</li> -<li>Formatted JavaScript files for consistency.</li> </ul> - https://github.com/zaproxy/zap-extensions/releases/download/scripts-v45.19.0/scripts-release-45.19.0.zap - SHA-256:924868cf71f4e2938d0255ec8e0b39b24d1e46fe9c11d0240d5c666332f51dce + https://github.com/zaproxy/zap-extensions/releases/download/scripts-v45.20.0/scripts-release-45.20.0.zap + SHA-256:7f80df5e1bd692af6827c7d9b950ccda5ef9fd67e641969100d11011f057fe6d https://www.zaproxy.org/docs/desktop/addons/script-console/ https://github.com/zaproxy/zap-extensions/ - 2026-07-06 - 5805972 + 2026-07-13 + 5830265 2.17.0 @@ -2888,19 +2889,19 @@ but if you encounter problems, please refer to the following. Selenium WebDriver provider and includes HtmlUnit browser ZAP Dev Team - 15.51.0 - selenium-release-15.51.0.zap + 15.52.0 + selenium-release-15.52.0.zap release - <h3>Changed</h3> + <h3>Added</h3> <ul> -<li>Update Selenium to version 4.45.0.</li> +<li>Provide icons for the browsers.</li> </ul> - https://github.com/zaproxy/zap-extensions/releases/download/selenium-v15.51.0/selenium-release-15.51.0.zap - SHA-256:54c747a20c5feddc3c9c118486947ccca3bd4393f2e51332d5bb8fc17820dd9a + https://github.com/zaproxy/zap-extensions/releases/download/selenium-v15.52.0/selenium-release-15.52.0.zap + SHA-256:08365af8a52dc996f16e30febe89a24aead043ad0cd9ea2b9d8493fb444ce670 https://www.zaproxy.org/docs/desktop/addons/selenium/ https://github.com/zaproxy/zap-extensions/ - 2026-06-26 - 32868058 + 2026-07-13 + 32875640 2.17.0 @@ -3116,25 +3117,28 @@ but if you encounter problems, please refer to the following. Server-Sent Events Allows you to view Server-Sent Events (SSE) communication. ZAP Dev Team - 13 - sse-alpha-13.zap + 14 + sse-alpha-14.zap alpha - <h3>Changed</h3> + <h3>Added</h3> <ul> -<li>Update minimum ZAP version to 2.15.0.</li> -<li>Maintenance changes.</li> +<li>Stats for event and event streams.</li> +</ul> +<h3>Changed</h3> +<ul> +<li>Update minimum ZAP version to 2.17.0.</li> </ul> <h3>Fixed</h3> <ul> -<li>More gracefully handle missing value for &quot;id&quot; field (Issue 8320)</li> +<li>No longer fire a spurious empty event for a leading blank line (e.g. keep-alive) in an event stream.</li> </ul> - https://github.com/zaproxy/zap-extensions/releases/download/sse-v13/sse-alpha-13.zap - SHA-256:38cf84e00664287e691606f473343ba0c0db0711c4f895312d0d482c3354731b + https://github.com/zaproxy/zap-extensions/releases/download/sse-v14/sse-alpha-14.zap + SHA-256:7de39df7fc85810b977dd2800f58400fa474dd03c693ed62da5058bbfefc3a3f https://www.zaproxy.org/docs/desktop/addons/server-sent-events/ https://github.com/zaproxy/zap-extensions/ - 2024-05-21 - 330079 - 2.15.0 + 2026-07-13 + 331883 + 2.17.0 svndigger