https://beta-docs.defectdojo.com/releases/os_upgrading/Recent content in Open Source Upgrades on DefectDojo DocumentationHugoenCopyright (c) 2020-2025 DefectDojo, Inc.https://beta-docs.defectdojo.com/releases/os_upgrading/upgrading_guide/Mon, 01 Jan 0001 00:00:00 +0000https://beta-docs.defectdojo.com/releases/os_upgrading/upgrading_guide/<h2 id="docker-compose">Docker compose</h2> <p>When you deploy a vanilla docker compose, it will create a persistent volume for your Postgres database. As long as your volume is there, you should not lose any data.</p>https://beta-docs.defectdojo.com/releases/os_upgrading/3.4.300/Mon, 01 Jan 0001 00:00:00 +0000https://beta-docs.defectdojo.com/releases/os_upgrading/3.4.300/<h2 id="the-endpoint-field-of-apiv2endpoint_status">The <code>endpoint</code> field of <code>/api/v2/endpoint_status/</code></h2> <p>With Locations enabled, the <code>endpoint</code> field of <code>/api/v2/endpoint_status/</code> now carries the <code>id</code> that <code>/api/v2/endpoints/</code> lists for the Finding&rsquo;s Asset, the same ID the <code>?endpoint=</code> filter takes. It used to carry the Location&rsquo;s ID, which only matched <code>/api/v2/endpoints/</code> when the two IDs happened to be equal. The Location&rsquo;s ID is still in <code>location_id</code>.</p>https://beta-docs.defectdojo.com/releases/os_upgrading/3.4.200/Mon, 01 Jan 0001 00:00:00 +0000https://beta-docs.defectdojo.com/releases/os_upgrading/3.4.200/<h2 id="defectdojo-pro-the-classic-sidebar-is-removed">DefectDojo Pro: the classic sidebar is removed</h2> <p>The reorganized sidebar is now the only navigation in the DefectDojo Pro UI. The classic sidebar and the <strong>Menu 2.0</strong> toggle on the Feature Flags page are removed. This change applies to DefectDojo Pro only. The open source UI is unaffected.</p>https://beta-docs.defectdojo.com/releases/os_upgrading/3.4.100/Mon, 01 Jan 0001 00:00:00 +0000https://beta-docs.defectdojo.com/releases/os_upgrading/3.4.100/<h2 id="deprecated-api-endpoints-corrected-end-of-life-date">Deprecated API endpoints: corrected end-of-life date</h2> <p>The deprecated Tool Type, Tool Configuration, and API Scan Configuration API endpoints send a corrected end-of-life date. They now send <code>X-End-Of-Life-Date: 2026-11-02T00:00:00</code>, the actual 3.5.0 release day. The earlier value was <code>2026-11-01T00:00:00</code>, one day off.</p>https://beta-docs.defectdojo.com/releases/os_upgrading/3.5/Mon, 01 Jan 0001 00:00:00 +0000https://beta-docs.defectdojo.com/releases/os_upgrading/3.5/<p>There are no special instructions for upgrading to 3.5.x beyond the API change below. Check the <a href="https://github.com/DefectDojo/django-DefectDojo/releases/tag/3.5.0">Release Notes</a> for the contents of the release.</p>https://beta-docs.defectdojo.com/releases/os_upgrading/3.3.200/Mon, 01 Jan 0001 00:00:00 +0000https://beta-docs.defectdojo.com/releases/os_upgrading/3.3.200/<h2 id="feature-flags-toggles-reach-the-classic-ui-and-apiv2-after-a-restart-defectdojo-pro">Feature Flags toggles reach the Classic UI and <code>/api/v2</code> after a restart (DefectDojo Pro)</h2> <p>Two features on the <strong>Settings &gt; Feature Flags</strong> page, <strong>Locations</strong> and <strong>Organization / Asset Relabeling</strong>, have parts that are decided when DefectDojo starts: the Classic UI pages and labels, the <code>/api/v2</code> endpoint and location routes, and the <code>/api/v3/</code> API. Both carry a <strong>Restart Recommended</strong> tag for that reason.</p>https://beta-docs.defectdojo.com/releases/os_upgrading/3.4/Mon, 01 Jan 0001 00:00:00 +0000https://beta-docs.defectdojo.com/releases/os_upgrading/3.4/<p>There are no special instructions for upgrading to 3.4.x. Check the <a href="https://github.com/DefectDojo/django-DefectDojo/releases/tag/3.4.0">Release Notes</a> for the contents of the release.</p>https://beta-docs.defectdojo.com/releases/os_upgrading/3.2.200/Mon, 01 Jan 0001 00:00:00 +0000https://beta-docs.defectdojo.com/releases/os_upgrading/3.2.200/<h2 id="locations-is-now-a-self-service-toggle-defectdojo-pro">Locations is now a self-service toggle (DefectDojo Pro)</h2> <p>In DefectDojo Pro, <strong>Locations</strong> moves from an environment-managed setting to a <strong>database-backed toggle</strong> on the <strong>Settings &gt; Feature Flags</strong> page. You no longer need a deployment change or a Support request to turn it on: the toggle drives the Pro UI and the import pipeline live, with no restart.</p>https://beta-docs.defectdojo.com/releases/os_upgrading/3.2.100/Mon, 01 Jan 0001 00:00:00 +0000https://beta-docs.defectdojo.com/releases/os_upgrading/3.2.100/<h2 id="private-notes-are-now-limited-to-their-author">Private notes are now limited to their author</h2> <p>Before 3.2.100, a note marked <strong>Private</strong> was still served to every user who could view the object it was attached to. The flag changed how the note was labelled, not who received it.</p>https://beta-docs.defectdojo.com/releases/os_upgrading/3.3/Mon, 01 Jan 0001 00:00:00 +0000https://beta-docs.defectdojo.com/releases/os_upgrading/3.3/<h2 id="deduplication-identity-changes">Deduplication identity changes</h2> <p>Three scan types gain <code>HASHCODE_FIELDS_PER_SCANNER</code> registrations in this release. A registration changes how <code>hash_code</code> is computed, so findings imported by these parsers before the upgrade carry a hash that no longer matches what an import computes after it. Left alone, the next re-import of an unchanged report would treat every affected finding as new, close the stored one as absent, and recreate it, detaching false positive history and risk acceptances along the way.</p>