diff --git a/ZapVersions-2.17.xml b/ZapVersions-2.17.xml index 20a4bc21..cf7fca8f 100644 --- a/ZapVersions-2.17.xml +++ b/ZapVersions-2.17.xml @@ -260,35 +260,40 @@ Authentication Helper Helps identify and set up authentication handling ZAP Dev Team - 0.41.0 - authhelper-beta-0.41.0.zap + 0.42.0 + authhelper-beta-0.42.0.zap beta <h3>Added</h3> <ul> -<li>Automation Framework <code>diagnostics</code> job to start and stop plan-level recording of authentication related diagnostics.</li> +<li>A toolbar button to the Authentication Diagnostics screenshots tab, to toggle screenshots between full size and scaled to fit the window.</li> +<li>Use the HTTP method for the verification configuration (on newer ZAP versions).</li> </ul> <h3>Changed</h3> <ul> -<li>Update dependency.</li> -<li>Include the Zest statement index in the authentication diagnostics' steps.</li> -<li>Include Origin header when doing authentication verification.</li> +<li>Depend on newer Common Library add-on.</li> +<li>Tag diagnostic HTTP messages with an internal ID, to make it easier to cross reference them.</li> +<li>Obtain the minimal authentication diagnostics when aborting the authentication.</li> +<li>Authentication report: include summary with connection success and failure counts.</li> +<li>Include Accept, Accept-Language, Connection, and User-Agent headers when doing authentication verification.</li> +<li>Ignore commented Zest statements when collecting authentication diagnostics.</li> </ul> <h3>Fixed</h3> <ul> -<li>Handle exception while extracting session tokens.</li> +<li>Do not wait when getting the element for a screenshot diagnostic step to not add unnecessary delays.</li> +<li>Performance issue checking for where cookie values were set during authentication.</li> </ul> - https://github.com/zaproxy/zap-extensions/releases/download/authhelper-v0.41.0/authhelper-beta-0.41.0.zap - SHA-256:a035ffc7dcf3f36147e267c77292b51920253bd30282c472bd078250b031acc4 + https://github.com/zaproxy/zap-extensions/releases/download/authhelper-v0.42.0/authhelper-beta-0.42.0.zap + SHA-256:356e0df57e2231fcd835448e01dc7c65b44d0be6913ac73ef654edde8688e655 https://www.zaproxy.org/docs/desktop/addons/authentication-helper/ https://github.com/zaproxy/zap-extensions/ - 2026-08-07 - 1569387 + 2026-08-26 + 1624615 2.17.0 commonlib - >= 1.35.0 & < 2.0.0 + >= 1.44.0 & < 2.0.0 database @@ -578,25 +583,24 @@ Common Library A common library, for use by other add-ons. ZAP Dev Team - 1.43.0 - commonlib-release-1.43.0.zap + 1.44.0 + commonlib-release-1.44.0.zap release <h3>Added</h3> <ul> -<li>UriUtils class for standardising URI checking.</li> +<li>Add standard header for other add-ons to use.</li> </ul> <h3>Changed</h3> <ul> <li>Update dependencies.</li> -<li>Updated Bank Identification Number data from a new source (https://github.com/venelinkochev/bin-list-data/).</li> -<li>Added help page documenting the BIN list data and how it is used by scan rules.</li> +<li>Update alert tag URLs to avoid redirects.</li> </ul> - https://github.com/zaproxy/zap-extensions/releases/download/commonlib-v1.43.0/commonlib-release-1.43.0.zap - SHA-256:f1c46d6c65434a2a54307065b558a87121eaa5b9b6bc6cfb10bf230b6335d1f5 + https://github.com/zaproxy/zap-extensions/releases/download/commonlib-v1.44.0/commonlib-release-1.44.0.zap + SHA-256:6450205e07248c20e9c8de185268cf1cd571f3cec7f7c0e5d10178b2126834f9 https://www.zaproxy.org/docs/desktop/addons/common-library/ https://github.com/zaproxy/zap-extensions/ - 2026-07-14 - 11694160 + 2026-08-26 + 11720477 2.17.0 communityScripts @@ -2002,24 +2006,19 @@ but if you encounter problems, please refer to the following. MCP Integration An add-on that integrates MCP in ZAP. ZAP Dev Team - 0.3.0 - mcp-alpha-0.3.0.zap + 0.4.0 + mcp-alpha-0.4.0.zap alpha - <h3>Added</h3> -<ul> -<li><code>zap_list_resources</code> and <code>zap_read_resource</code> tools for clients that only support tools (e.g. the LLM bridge).</li> -<li><code>zap_get_history</code> tool to fetch selected history fields with body paging via <code>body_offset</code> / <code>max_body_chars</code>.</li> -</ul> -<h3>Changed</h3> + <h3>Fixed</h3> <ul> -<li>Maintenance changes.</li> +<li>Allow MCP security key to be copied (Issue #9432)</li> </ul> - https://github.com/zaproxy/zap-extensions/releases/download/mcp-v0.3.0/mcp-alpha-0.3.0.zap - SHA-256:b4b5f20faf6b7974cf58c03b8ad10a0fa13a8da2a8ac2a80a49cd80cf857600f + https://github.com/zaproxy/zap-extensions/releases/download/mcp-v0.4.0/mcp-alpha-0.4.0.zap + SHA-256:4aef855074cdc1e19bc40d281fa52d72d8f73a249d4cada73c0aab808f4d12c0 https://www.zaproxy.org/docs/desktop/addons/mcp-integration/ https://github.com/zaproxy/zap-extensions/ - 2026-08-07 - 826131 + 2026-08-26 + 877974 2.17.0 diff --git a/ZapVersions-dev.xml b/ZapVersions-dev.xml index 0937e23d..0a3c4fb9 100644 --- a/ZapVersions-dev.xml +++ b/ZapVersions-dev.xml @@ -260,35 +260,40 @@ Authentication Helper Helps identify and set up authentication handling ZAP Dev Team - 0.41.0 - authhelper-beta-0.41.0.zap + 0.42.0 + authhelper-beta-0.42.0.zap beta <h3>Added</h3> <ul> -<li>Automation Framework <code>diagnostics</code> job to start and stop plan-level recording of authentication related diagnostics.</li> +<li>A toolbar button to the Authentication Diagnostics screenshots tab, to toggle screenshots between full size and scaled to fit the window.</li> +<li>Use the HTTP method for the verification configuration (on newer ZAP versions).</li> </ul> <h3>Changed</h3> <ul> -<li>Update dependency.</li> -<li>Include the Zest statement index in the authentication diagnostics' steps.</li> -<li>Include Origin header when doing authentication verification.</li> +<li>Depend on newer Common Library add-on.</li> +<li>Tag diagnostic HTTP messages with an internal ID, to make it easier to cross reference them.</li> +<li>Obtain the minimal authentication diagnostics when aborting the authentication.</li> +<li>Authentication report: include summary with connection success and failure counts.</li> +<li>Include Accept, Accept-Language, Connection, and User-Agent headers when doing authentication verification.</li> +<li>Ignore commented Zest statements when collecting authentication diagnostics.</li> </ul> <h3>Fixed</h3> <ul> -<li>Handle exception while extracting session tokens.</li> +<li>Do not wait when getting the element for a screenshot diagnostic step to not add unnecessary delays.</li> +<li>Performance issue checking for where cookie values were set during authentication.</li> </ul> - https://github.com/zaproxy/zap-extensions/releases/download/authhelper-v0.41.0/authhelper-beta-0.41.0.zap - SHA-256:a035ffc7dcf3f36147e267c77292b51920253bd30282c472bd078250b031acc4 + https://github.com/zaproxy/zap-extensions/releases/download/authhelper-v0.42.0/authhelper-beta-0.42.0.zap + SHA-256:356e0df57e2231fcd835448e01dc7c65b44d0be6913ac73ef654edde8688e655 https://www.zaproxy.org/docs/desktop/addons/authentication-helper/ https://github.com/zaproxy/zap-extensions/ - 2026-08-07 - 1569387 + 2026-08-26 + 1624615 2.17.0 commonlib - >= 1.35.0 & < 2.0.0 + >= 1.44.0 & < 2.0.0 database @@ -578,25 +583,24 @@ Common Library A common library, for use by other add-ons. ZAP Dev Team - 1.43.0 - commonlib-release-1.43.0.zap + 1.44.0 + commonlib-release-1.44.0.zap release <h3>Added</h3> <ul> -<li>UriUtils class for standardising URI checking.</li> +<li>Add standard header for other add-ons to use.</li> </ul> <h3>Changed</h3> <ul> <li>Update dependencies.</li> -<li>Updated Bank Identification Number data from a new source (https://github.com/venelinkochev/bin-list-data/).</li> -<li>Added help page documenting the BIN list data and how it is used by scan rules.</li> +<li>Update alert tag URLs to avoid redirects.</li> </ul> - https://github.com/zaproxy/zap-extensions/releases/download/commonlib-v1.43.0/commonlib-release-1.43.0.zap - SHA-256:f1c46d6c65434a2a54307065b558a87121eaa5b9b6bc6cfb10bf230b6335d1f5 + https://github.com/zaproxy/zap-extensions/releases/download/commonlib-v1.44.0/commonlib-release-1.44.0.zap + SHA-256:6450205e07248c20e9c8de185268cf1cd571f3cec7f7c0e5d10178b2126834f9 https://www.zaproxy.org/docs/desktop/addons/common-library/ https://github.com/zaproxy/zap-extensions/ - 2026-07-14 - 11694160 + 2026-08-26 + 11720477 2.17.0 communityScripts @@ -2002,24 +2006,19 @@ but if you encounter problems, please refer to the following. MCP Integration An add-on that integrates MCP in ZAP. ZAP Dev Team - 0.3.0 - mcp-alpha-0.3.0.zap + 0.4.0 + mcp-alpha-0.4.0.zap alpha - <h3>Added</h3> -<ul> -<li><code>zap_list_resources</code> and <code>zap_read_resource</code> tools for clients that only support tools (e.g. the LLM bridge).</li> -<li><code>zap_get_history</code> tool to fetch selected history fields with body paging via <code>body_offset</code> / <code>max_body_chars</code>.</li> -</ul> -<h3>Changed</h3> + <h3>Fixed</h3> <ul> -<li>Maintenance changes.</li> +<li>Allow MCP security key to be copied (Issue #9432)</li> </ul> - https://github.com/zaproxy/zap-extensions/releases/download/mcp-v0.3.0/mcp-alpha-0.3.0.zap - SHA-256:b4b5f20faf6b7974cf58c03b8ad10a0fa13a8da2a8ac2a80a49cd80cf857600f + https://github.com/zaproxy/zap-extensions/releases/download/mcp-v0.4.0/mcp-alpha-0.4.0.zap + SHA-256:4aef855074cdc1e19bc40d281fa52d72d8f73a249d4cada73c0aab808f4d12c0 https://www.zaproxy.org/docs/desktop/addons/mcp-integration/ https://github.com/zaproxy/zap-extensions/ - 2026-08-07 - 826131 + 2026-08-26 + 877974 2.17.0