Skip to content

Timesketch

v20260617 Breaking

This release includes 1 breaking change for platform teams planning a safe upgrade.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

analysis dfir forensics security timeline

Summary

AI summary

Updates deps, api, and Dependency across a mixed release.

Full changelog

[!Note]

⚠️ Wildcard Search Bug

The previous release 20260611 contained a bug in the wildcard search implementation. Please upgrade to this version if you want to use the wildcard search feature.

⚠️ OpenSearch Version

If using OpenSearch >= 3.x please ensure to upgrade to min 3.7.0 before upgrading to this Timesketch release.

What's Changed

  • Fix global search in wildcard search mode and expand boolean logic E2E tests by @jkppr in https://github.com/google/timesketch/pull/3846
  • Move OpenTelemetry guide by @jkppr in https://github.com/google/timesketch/pull/3843
  • api: enforce cross-sketch ownership on event fact conclusions by @adilburaksen in https://github.com/google/timesketch/pull/3844
  • Optimize E2E Test Suite Execution Time by @jkppr in https://github.com/google/timesketch/pull/3851
  • build(deps): bump pyjwt from 2.12.0 to 2.13.0 in the pip group across 1 directory by @dependabot[bot] in https://github.com/google/timesketch/pull/3847
  • build(deps): bump cryptography from 46.0.7 to 48.0.1 in the pip group across 1 directory by @dependabot[bot] in https://github.com/google/timesketch/pull/3850
  • build(deps): bump the npm_and_yarn group across 1 directory with 3 updates by @dependabot[bot] in https://github.com/google/timesketch/pull/3848
  • build(deps): bump the npm_and_yarn group across 1 directory with 5 updates by @dependabot[bot] in https://github.com/google/timesketch/pull/3849
  • build(deps): bump launch-editor from 2.12.0 to 2.14.1 in /timesketch/frontend-ng in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/google/timesketch/pull/3852
  • Dependency: Upgrade to Node 24 by @jkppr in https://github.com/google/timesketch/pull/3853
  • Improve wildcard search guidance, error handling, and event detail formatting by @jkppr in https://github.com/google/timesketch/pull/3854

Full Changelog: https://github.com/google/timesketch/compare/20260611...20260617

Breaking Changes

  • api: enforce cross-sketch ownership on event fact conclusions

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Timesketch

Get notified when new releases ship.

Sign up free

About Timesketch

Collaborative forensic timeline analysis

All releases →

Related context

Earlier breaking changes

  • v20260611 Minimum OpenSearch version raised to 2.19.5 for wildcard field support; migration required.
  • v20260611 Base Docker image upgraded to Ubuntu 26.04; migration required for custom deployments.

Beta — feedback welcome: [email protected]