# Releases

## Adding the Dd-Orch Database on Upgrade  
Provisioning the dojodb-ddorch PostgreSQL database and pointing DefectDojo Pro at it on an existing self-hosted installation.

## DefectDojo Pro Changelog  
DefectDojo Changelog

## Open Source Upgrading  
Release specific upgrading instructions

## Upgrading to DefectDojo Version 1.10.x  
security release + breaking changes

## Upgrading to DefectDojo Version 1.11.x  
security release

## Upgrading to DefectDojo Version 1.12.x  
security release

## Upgrading to DefectDojo Version 1.13.x  
hashcode calculation logic has changed

## Upgrading to DefectDojo Version 1.14.x  
hashcode calculation logic has changed

## Upgrading to DefectDojo Version 1.15.x  
hashcode calculation logic has changed

## Upgrading to DefectDojo Version 1.2.2  
multiple instructions

## Upgrading to DefectDojo Version 1.2.3  
multiple instructions

## Upgrading to DefectDojo Version 1.2.4  
multiple instructions

## Upgrading to DefectDojo Version 1.2.8  
multiple instructions

## Upgrading to DefectDojo Version 1.2.9  
multiple instructions

## Upgrading to DefectDojo Version 1.3.1  
multiple instructions

## Upgrading to DefectDojo Version 1.7.0  
multiple instructions

## Upgrading to DefectDojo Version 1.8.0  
fix buildwatson create_endpoint_status

## Upgrading to DefectDojo Version 1.9.3  
security release

## Upgrading to DefectDojo Version 2.0.x  
breaking changes

## Upgrading to DefectDojo Version 2.10.x  
breaking change

## Upgrading to DefectDojo Version 2.12.x  
breaking change

## Upgrading to DefectDojo Version 2.13.x  
instructions for helm chart and others

## Upgrading to DefectDojo Version 2.15.x  
No special instructions.

## Upgrading to DefectDojo Version 2.16.x  
No special instructions.

## Upgrading to DefectDojo Version 2.17.x  
No special instructions.

## Upgrading to DefectDojo Version 2.18.x  
instructions for helm chart

## Upgrading to DefectDojo Version 2.19.x  
breaking change

## Upgrading to DefectDojo Version 2.2.x  
No special instructions.

## Upgrading to DefectDojo Version 2.20.x  
No special instructions.

## Upgrading to DefectDojo Version 2.21.x  
No special instructions.

## Upgrading to DefectDojo Version 2.22.x  
No special instructions.

## Upgrading to DefectDojo Version 2.23.x  
breaking change

## Upgrading to DefectDojo Version 2.24.x  
No special instructions.

## Upgrading to DefectDojo Version 2.25.x  
No special instructions.

## Upgrading to DefectDojo Version 2.26.x  
No special instructions.

## Upgrading to DefectDojo Version 2.27.x  
No special instructions.

## Upgrading to DefectDojo Version 2.28.x  
No special instructions.

## Upgrading to DefectDojo Version 2.29.x  
No special instructions.

## Upgrading to DefectDojo Version 2.3.x  
No special instructions.

## Upgrading to DefectDojo Version 2.30.x  
Breaking Change for Auditlog.

## Upgrading to DefectDojo Version 2.31.x  
breaking change

## Upgrading to DefectDojo Version 2.32.x  
Breaking change for Removal of OpenAPI 2.0 Swagger

## Upgrading to DefectDojo Version 2.33.x  
breaking change

## Upgrading to DefectDojo Version 2.34.x  
Breaking Change for AWS_Scout2.

## Upgrading to DefectDojo Version 2.35.x  
Integrity checker announced

## Upgrading to DefectDojo Version 2.36.x  
Breaking Change for HELM deployments with PostgreSQL

## Upgrading to DefectDojo Version 2.37.x  
Breaking Change for HELM deployments and MySQL / RabbitMQ users

## Upgrading to DefectDojo Version 2.38.x  
Breaking Change for HELM deployments

## Upgrading to DefectDojo Version 2.39.x  
Major upgrade of Postgres 16 to 17

## Upgrading to DefectDojo Version 2.4.x (Security Release)  
security Release

## Upgrading to DefectDojo Version 2.40.x  
Breaking Change for Postgres 12.

## Upgrading to DefectDojo Version 2.41.x  
No special instructions.

## Upgrading to DefectDojo Version 2.42.x  
No special instructions.

## Upgrading to DefectDojo Version 2.43.x  
Disclaimer field renamed/split, removal of `dc-` scripts, audit log updates, and hash codes updates.

## Upgrading to DefectDojo Version 2.44.0  
No special instructions.

## Upgrading to DefectDojo Version 2.44.1  
No special instructions.

## Upgrading to DefectDojo Version 2.45.x  
No special instructions.

## Upgrading to DefectDojo Version 2.46.x  
Tag Formatting Changes + Import Payload Changes

## Upgrading to DefectDojo Version 2.47.x  
Drop support for PostgreSQL-HA in HELM

## Upgrading to DefectDojo Version 2.48.2  
Tag invalid character cleanup

## Upgrading to DefectDojo Version 2.48.x  
Better pushing to JIRA for Finding Groups

## Upgrading to DefectDojo Version 2.49.x  
No special instructions.

## Upgrading to DefectDojo Version 2.5.x  
legacy authorization removed

## Upgrading to DefectDojo Version 2.50.x  
Dropped support for time_zone in System settings.

## Upgrading to DefectDojo Version 2.51.x  
Helm chart changes and Postgres major version updates.

## Upgrading to DefectDojo Version 2.52.x  
Replaced Redis with Valkey & Helm chart changes & MobSF parser merge

## Upgrading to DefectDojo Version 2.53.x  
Helm chart: changes for initializer annotations + Replaced Redis with Valkey + HPA & PDB support + Batch Deduplication

## Upgrading to DefectDojo Version 2.54.3  
Trivy parser deduplication

## Upgrading to DefectDojo Version 2.54.x  
Removal of django-auditlog & Dropped support for DD_PARSER_EXCLUDE & Reimport performance improvements & Removal of Finding Template Matching

## Upgrading to DefectDojo Version 2.55.2  
JIRA Reconciliation now also processes Finding Groups.

## Upgrading to DefectDojo Version 2.55.x  
Authorization related optimizations

## Upgrading to DefectDojo Version 2.56.4  
JFrog Xray API Summary Artifact parser deduplication

## Upgrading to DefectDojo Version 2.56.x  
Deprecation of Questionnaire API Endpoints

## Upgrading to DefectDojo Version 2.57.x  
Deprecation of Credential Manager and Stub Findings

## Upgrading to DefectDojo Version 2.58.x  
Notification .tpl templates relocated under dojo/notifications/

## Upgrading to DefectDojo Version 2.6.x  
No special instructions.

## Upgrading to DefectDojo Version 2.7.x  
breaking change

## Upgrading to DefectDojo Version 2.8.x  
breaking changes

## Upgrading to DefectDojo Version 2.9.x  
breaking change for APIv2

## Upgrading to DefectDojo Version 3.0.100  
Xygeni parser keeps repeated SAST/Secrets occurrences in the same file as distinct findings.

## Upgrading to DefectDojo Version 3.0.200  
Xygeni parser keys SAST/Secrets deduplication on uniqueHash; repeated secrets are aggregated into one finding.

## Upgrading to DefectDojo Version 3.0.x  
Locations and Asset/Organization labels are now enabled by default; Authorized Users panel replaces Members/Groups under legacy authorization; SSO providers move to DefectDojo Pro; removal of Questionnaire API Endpoints, Credential Manager, and Stub Findings; Dependency Check parser no longer emits separate findings for related dependencies; related file paths are now listed in the main finding's description.

## Upgrading to DefectDojo Version 3.1.x  
Blank Finding components are now normalized to NULL so component-less findings group together; JIRA project configurations now support multiple comma-separated components; Tool Configuration credentials are re-encrypted to AES-256-GCM; the JFrog Xray API Summary Artifact parser now sorts impact paths so findings deduplicate consistently across re-imports; a new optional DD_OS_MESSAGE_ENABLED setting controls the open-source promo banner; and a new deduplication execution mode controls how import/reimport deduplication is dispatched.
