DefectDojo Documentation

Open Source Upgrading

Mon, 01 Jan 0001 00:00:00 +0000

Docker compose

When you deploy a vanilla docker compose, it will create a persistent volume for your Postgres database. As long as your volume is there, you should not lose any data.

Upgrading to DefectDojo Version 3.4.300

Mon, 01 Jan 0001 00:00:00 +0000

The `endpoint` field of `/api/v2/endpoint_status/`

With Locations enabled, the endpoint field of /api/v2/endpoint_status/ now carries the id that /api/v2/endpoints/ lists for the Finding’s Asset, the same ID the ?endpoint= filter takes. It used to carry the Location’s ID, which only matched /api/v2/endpoints/ when the two IDs happened to be equal. The Location’s ID is still in location_id.

Upgrading to DefectDojo Version 3.4.200

Mon, 01 Jan 0001 00:00:00 +0000

The reorganized sidebar is now the only navigation in the DefectDojo Pro UI. The classic sidebar and the Menu 2.0 toggle on the Feature Flags page are removed. This change applies to DefectDojo Pro only. The open source UI is unaffected.

Upgrading to DefectDojo Version 3.4.100

Mon, 01 Jan 0001 00:00:00 +0000

Deprecated API endpoints: corrected end-of-life date

The deprecated Tool Type, Tool Configuration, and API Scan Configuration API endpoints send a corrected end-of-life date. They now send X-End-Of-Life-Date: 2026-11-02T00:00:00, the actual 3.5.0 release day. The earlier value was 2026-11-01T00:00:00, one day off.

Upgrading to DefectDojo Version 3.5.x

Mon, 01 Jan 0001 00:00:00 +0000

There are no special instructions for upgrading to 3.5.x beyond the API change below. Check the Release Notes for the contents of the release.

Adding the Webhook Gateway on Upgrade

Mon, 01 Jan 0001 00:00:00 +0000

DefectDojo Pro can put a webhook gateway in front of Triage Engine webhook receivers, the URLs Jira and other tools post to for two-way sync. The gateway stores each webhook and answers the sender before DefectDojo is involved, then delivers it with retries, so a DefectDojo restart or short outage loses nothing.

Upgrading to DefectDojo Version 3.3.200

Mon, 01 Jan 0001 00:00:00 +0000

Feature Flags toggles reach the Classic UI and `/api/v2` after a restart (DefectDojo Pro)

Two features on the Settings > Feature Flags page, Locations and Organization / Asset Relabeling, have parts that are decided when DefectDojo starts: the Classic UI pages and labels, the /api/v2 endpoint and location routes, and the /api/v3/ API. Both carry a Restart Recommended tag for that reason.

Upgrading to DefectDojo Version 3.4.x

Mon, 01 Jan 0001 00:00:00 +0000

There are no special instructions for upgrading to 3.4.x. Check the Release Notes for the contents of the release.

Upgrading to DefectDojo Version 3.2.200

Mon, 01 Jan 0001 00:00:00 +0000

Locations is now a self-service toggle (DefectDojo Pro)

In DefectDojo Pro, Locations moves from an environment-managed setting to a database-backed toggle on the Settings > Feature Flags page. You no longer need a deployment change or a Support request to turn it on: the toggle drives the Pro UI and the import pipeline live, with no restart.

Upgrading to DefectDojo Version 3.2.100

Mon, 01 Jan 0001 00:00:00 +0000

Private notes are now limited to their author

Before 3.2.100, a note marked Private was still served to every user who could view the object it was attached to. The flag changed how the note was labelled, not who received it.

DefectDojo Documentation

Open Source Upgrading

Docker compose

Upgrading to DefectDojo Version 3.4.300

The endpoint field of /api/v2/endpoint_status/

Upgrading to DefectDojo Version 3.4.200

DefectDojo Pro: the classic sidebar is removed

Upgrading to DefectDojo Version 3.4.100

Deprecated API endpoints: corrected end-of-life date

Upgrading to DefectDojo Version 3.5.x

Adding the Webhook Gateway on Upgrade

Upgrading to DefectDojo Version 3.3.200

Feature Flags toggles reach the Classic UI and /api/v2 after a restart (DefectDojo Pro)

Upgrading to DefectDojo Version 3.4.x

Upgrading to DefectDojo Version 3.2.200

Locations is now a self-service toggle (DefectDojo Pro)

Upgrading to DefectDojo Version 3.2.100

Private notes are now limited to their author

The `endpoint` field of `/api/v2/endpoint_status/`

Feature Flags toggles reach the Classic UI and `/api/v2` after a restart (DefectDojo Pro)