Add 11.38 release notes

New week. New release

Signed-off-by: Tim Smith <[email protected]>

.github/actions/spelling/expect.txt

@@ -106,13 +106,15 @@ Dlp
 dlq
 dmark
 Drack
+eaa
 eae
 Ecn
 eddqq
 EDE
 efbe
 efc
 efcfc
+efd
 efi
 Ehd
 eig
@@ -237,6 +239,7 @@ mysystem
 mytarget
 myuser
 nameterraform
+nametest
 natgateway
 NDdh
 NDgz

.github/actions/spelling/line_forbidden.patterns

@@ -106,6 +106,18 @@
 # Product Names
 #
 
+# s.b. OpenLDAP
+\bOpen LDAP\b
+
+# s.b. WebSphere
+\bWebsphere\b
+
+# s.b. JBoss
+\bJboss\b
+
+# s.b. WildFly
+\bWildfly\b
+
 # s.b. DigiCert
 \bDigicert\b
 

releases/2025-01-21-mondoo-11.38-is-out.md

@@ -0,0 +1,60 @@
+---
+slug: mondoo-11.38-is-out/
+title: Mondoo 11.38 is out!
+description: Announcing the 11.38 release of Mondoo with FOO, BAR, BAZ, and more!
+authors: [tim]
+image: DEETS
+tags: [release, mondoo]
+---
+
+## 🥳 Mondoo 11.38 is out! This release includes FOO, BAR, BAZ, and more!
+
+Get this release: [Installation Docs](https://mondoo.com/docs/cnspec/) | [Package Downloads](https://releases.mondoo.com/cnspec/) | [Docker Container](https://hub.docker.com/r/mondoo/cnspec)
+
+---
+
+## 🎉 NEW FEATURES
+
+### Workspaces filters using asset technology
+
+DEETS
+
+## 🧹 IMPROVEMENTS
+
+### Quickly jump to integrations from an asset
+
+https://github.com/mondoohq/console/pull/5401
+
+### Resource updates
+
+#### microsoft.application
+
+Query Microsoft 365 applications by ID or name:
+
+```coffee
+microsoft.application(id: "2efd0330-112c-4971-ab20-eaa54c.....") { * }
+microsoft.application(name: "nametest") { * }
+```
+
+#### terraform.plan
+
+- New `applyable` field
+- New `errored` field
+- New `variables` field using the new `terraform.plan.variable` resource
+
+## 🐛 BUG FIXES AND UPDATES
+
+- Update the integration name in the asset configuration section to be a link.
+- Include additional information on the query when cnquery/cnspec fail to compile a query.
+- Display policies name in check exceptions.
+- Display correct keyboard navigation tips in the workspaces asset selection filter menus.
+- Improve rendering of the workspace asset selection process.
+- Allow organization and space IDs to start with a number and be up to 50 characters in length.
+- Update the "Ensure that 'Java version' is currently supported" check in the CIS Azure Foundations policy to support LTS releases of Java 17 and 11.
+- Fix CIS GitLab Level 2 policy applying to non-GitLab assets.
+- Improve error messages when data export integrations fail.
+- Ensure `gcp.project.cloudRun.services` fetches data from all available regions.
+- Fix failures fetching the `traffic` field in the `gcp.project.cloudRun.services` resource.
+- Improve the reliability of the CIS Azure Foundations policy's "Ensure IAM policies that allow full "*:*" administrative privileges are not attached" check.
+- Improve rendering of remediation steps in the Mondoo AWS Security policy.
+- Allow excluding users from the Mondoo Linux Security policy's "Ensure SSH Idle Timeout Interval is configured" check using a property.

yarn.lock

@@ -2414,9 +2414,9 @@
     "@types/node" "*"
 
 "@types/node@*":
-  version "22.10.7"
-  resolved "https://registry.yarnpkg.com/@types/node/-/node-22.10.7.tgz#14a1ca33fd0ebdd9d63593ed8d3fbc882a6d28d7"
-  integrity sha512-V09KvXxFiutGp6B7XkpaDXlNadZxrzajcY50EuoLIpQ6WWYCSvf19lVIazzfIzQvhUN2HjX12spLojTnhuKlGg==
+  version "22.10.10"
+  resolved "https://registry.yarnpkg.com/@types/node/-/node-22.10.10.tgz#85fe89f8bf459dc57dfef1689bd5b52ad1af07e6"
+  integrity sha512-X47y/mPNzxviAGY5TcYPtYL8JsY3kAq2n8fMmKoRCxq/c4v4pyGNCzM2R6+M5/umG4ZfHuT+sgqDYqWc9rJ6ww==
   dependencies:
     undici-types "~6.20.0"
 
@@ -2479,9 +2479,9 @@
     "@types/react" "*"
 
 "@types/react@*", "@types/react@^19.0.7":
-  version "19.0.7"
-  resolved "https://registry.yarnpkg.com/@types/react/-/react-19.0.7.tgz#c451968b999d1cb2d9207dc5ff56496164cf511d"
-  integrity sha512-MoFsEJKkAtZCrC1r6CM8U22GzhG7u2Wir8ons/aCKH6MBdD1ibV24zOSSkdZVUKqN5i396zG5VKLYZ3yaUZdLA==
+  version "19.0.8"
+  resolved "https://registry.yarnpkg.com/@types/react/-/react-19.0.8.tgz#7098e6159f2a61e4f4cef2c1223c044a9bec590e"
+  integrity sha512-9P/o1IGdfmQxrujGbIMDyYaaCykhLKc0NGCtYcECNUr9UAaDe4gwvV9bR6tvd5Br1SG0j+PBpbKr2UYY8CwqSw==
   dependencies:
     csstype "^3.0.2"
 
@@ -2539,9 +2539,9 @@
   integrity sha512-CmBKiL6NNo/OqgmMn95Fk9Whlp2mtvIv+KNpQKN2F4SjvrEesubTRWGYSg+BnWZOnlCaSTU1sMpsBOzgbYhnsA==
 
 "@types/ws@^8.5.5":
-  version "8.5.13"
-  resolved "https://registry.yarnpkg.com/@types/ws/-/ws-8.5.13.tgz#6414c280875e2691d0d1e080b05addbf5cb91e20"
-  integrity sha512-osM/gWBTPKgHV8XkTunnegTRIsvF6owmf5w+JtAfOw472dptdm0dlGv4xCt6GwQRcC2XVOvvRE/0bAoQcL2QkA==
+  version "8.5.14"
+  resolved "https://registry.yarnpkg.com/@types/ws/-/ws-8.5.14.tgz#93d44b268c9127d96026cf44353725dd9b6c3c21"
+  integrity sha512-bd/YFLW+URhBzMXurx7lWByOu+xzU9+kb3RboOteXYDfW+tr+JZa99OyNmPINEGB/ahzKrEuc8rcv4gnpJmxTw==
   dependencies:
     "@types/node" "*"
 
@@ -2558,9 +2558,9 @@
     "@types/yargs-parser" "*"
 
 "@ungap/structured-clone@^1.0.0":
-  version "1.2.1"
-  resolved "https://registry.yarnpkg.com/@ungap/structured-clone/-/structured-clone-1.2.1.tgz#28fa185f67daaf7b7a1a8c1d445132c5d979f8bd"
-  integrity sha512-fEzPV3hSkSMltkw152tJKNARhOupqbH96MZWyRjNaYZOMIzbrTeQDG+MTc6Mr2pgzFQzFxAfmhGDNP5QK++2ZA==
+  version "1.3.0"
+  resolved "https://registry.yarnpkg.com/@ungap/structured-clone/-/structured-clone-1.3.0.tgz#d06bbb384ebcf6c505fde1c3d0ed4ddffe0aaff8"
+  integrity sha512-WmoN8qaIAo7WTYWbAZuG8PYEhn5fkz7dZrqTBZ7dtt//lL2Gwms1IcnQ5yHqjDfX8Ft5j4YzDM23f87zBfDe9g==
 
 "@webassemblyjs/[email protected]", "@webassemblyjs/ast@^1.14.1":
   version "1.14.1"
@@ -3966,9 +3966,9 @@ [email protected]:
   integrity sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow==
 
 electron-to-chromium@^1.5.73:
-  version "1.5.85"
-  resolved "https://registry.yarnpkg.com/electron-to-chromium/-/electron-to-chromium-1.5.85.tgz#07e8d80f5a05268b891e5366bf4f3ba91dfd6d0c"
-  integrity sha512-UgTI7ZHxtSjOUwV0vZLpqT604U1Z8L3bq8mAtAKtuRPlMZ/6dLFMYgYnLdXSi/urbVTP2ykDb9EDDUrdIzw4Qg==
+  version "1.5.87"
+  resolved "https://registry.yarnpkg.com/electron-to-chromium/-/electron-to-chromium-1.5.87.tgz#3a89bec85e43a8b32445ec938228e4ec982e0f79"
+  integrity sha512-mPFwmEWmRivw2F8x3w3l2m6htAUN97Gy0kwpO++2m9iT1Gt8RCFVUfv9U/sIbHJ6rY4P6/ooqFL/eL7ock+pPg==
 
 emoji-regex@^8.0.0:
   version "8.0.0"