What's Changed

Other Changes

• fix: segfault in template caching logic by @dwisiswant0 in #6421

Full Changelog: v3.4.9...v3.4.10

What's Changed

Other Changes

• feat: fixed output event for skipped hosts by @Ice3man543 in #6415

Full Changelog: v3.4.8...v3.4.9

What's Changed

Features & Improvements

• Remove singletons from Nuclei engine (continuation of #6210) (#6296) by @hdm
• Address race conditions in http.Request and MemGuardian (#6321) by @hdm
• Support concurrent Nuclei engines in the same process (#6322) by @hdm
• feat: log event for template host skipped during scanning (#6324) by @Ice3man543
• feat(code): log unavailable engines as error while validating (#6326) by @dwisiswant0
• Bump github.com/bytedance/sonic to v1.14.0 for Go 1.25 compatibility (#6348) by @stefanb
• feat: loading templates performance improvements (#6364) by @Ice3man543
• feat(fuzz): evaluate variables (#6358) by @dwisiswant0
• Enable templates for template listing and displaying (#6343) by @dogancanbakir
• Refactor: use maps.Copy for cleaner map handling (#6283) by @gopherorg

🐞 Bug Fixes

• Fix headless: variables now available in headless templates (#6301) by @alban-stourbe-wmx
• Fix lib: scans not stopping on context cancellation (#6310) by @dwisiswant0
• Fix panic from uninitialized colorizer (#6315) by @josedh
• Fix to preserve original transport for linear HTTP client (#6357) by @Ice3man543
• Fix offlinehttp: replace "-" with "_" in headers for DSL variables (#6363) by @Isaac0616
• Fix(events): correct JSON encoder type in ScanStatsWorker (#6366) by @dwisiswant0
• Fix: prevent nil pointer panic in WAF detector (#6368) by @knakul853
• Fix headless: merge extra headers (#6376) by @ysokolovsky
• Fix: prevent unnecessary template updates (#6379) by @dwisiswant0

🔨 Maintenance

• chore(deps): bump the modules group with 3 updates (#6305) by @dependabot[bot]
• chore(config): remove deprecated code and calls (#6311) by @dwisiswant0
• build(docker): bump builder image golang:1.23-alpine → golang:1.24-alpine (#6316) by @dwisiswant0
• chore: fix inconsistent function name in comment (#6338) by @jishudashen
• build(make): update template-validate commands (#6385) by @dwisiswant0
• chore(deps): bump go_modules group with 2 updates (#6388) by @dependabot[bot]
• ci(tests): migrate to golangci-lint v2 (#6380) by @dwisiswant0

New Contributors

• @josedh made their first contribution in #6315
• @hdm made their first contribution in #6296
• @gopherorg made their first contribution in #6283
• @jishudashen made their first contribution in #6338
• @stefanb made their first contribution in #6348
• @Isaac0616 made their first contribution in #6363
• @ysokolovsky made their first contribution in #6376

Full Changelog: v3.4.7...v3.4.8

What's Changed

Other Changes

• Fixed issue with go install (github.com/zmap/zgrab2 v0.2.0 => v0.1.8) by @dwisiswant0 in #6295

Full Changelog: v3.4.6...v3.4.7

What's Changed

• Fixed context leak in flow by @tarunKoyalwar in #6282

Other Changes

• fixed log level mismatch by @knakul853 in #6271
• fixed hex dump issue by @knakul853 in #6273
• fix(headless): incorrect last navigated URL by @dwisiswant0 in #6278
• refactor: use the built-in max/min to simplify the code by @xiaoxiangirl in #6272
• test(nuclei): adds multiproto benchmark test by @dwisiswant0 in #6270
• chore: update goreleaser configurations by @emmanuel-ferdman in #6280
• fix(documentation): remove extra HTML table wrappers and periods in Korean README by @1223v in #6287
• build: bump all direct modules by @dwisiswant0 in #6290

New Contributors

• @xiaoxiangirl made their first contribution in #6272
• @emmanuel-ferdman made their first contribution in #6280
• @1223v made their first contribution in #6287

Full Changelog: v3.4.5...v3.4.6

What’s Changed

Bug Fixes

• Fix memory blowup in multi-protocol templates by @dwisiswant0 #6258
• Fix JSON unmarshalling for dynamic auth type in authx by @dwisiswant0 #6268
• Use proxy settings in DNS and SSL templates by @ShubhamRasal #6255
• Fix ingress template in Helm chart by @23kbps #6206
• Improve headless engine startup and shutdown stability by @fourcube #6222
• Fix missing symbol in README documentation by @Jarro01X #6242

Enhancements

• Headless: Store responses for better debugging and analysis by @dwisiswant0 #6247
• Feature: Add EnableMatcherStatus to configure matcher behavior (SDK) by @egru #6191

Refactoring & Maintenance

• Increase file descriptor limits for better performance under load by @knakul853 #6230
• Refactor: simplify code using slices.Contains by @tongjicoder #6243
• Bump DSL package version by @dogancanbakir #6245
• CI: Add stale issue workflow to improve repo hygiene by @dwisiswant0 #6233

New Contributors

• @fourcube made their first contribution in #6222
• @23kbps made their first contribution in #6206
• @tongjicoder made their first contribution in #6243
• @egru made their first contribution in #6191

Full Changelog: v3.4.4...v3.4.5

What's Changed

• Fixed issue with tls connection when socks proxied connection by @circleous in #6218
• Fixed nil schema panic & schema values by @dwisiswant0 in #6228

New Contributors

• @proabiral made their first contribution in #6223
• @circleous made their first contribution in #6218

Full Changelog: v3.4.3...v3.4.4

What's Changed

• Fixed issue with max-host-error tracking logic by @Ice3man543 in #6193
• Fixed issue with stats counter tracking by @Ice3man543 in #6193
• Fixed issue to respect proxy for auto http probe by @dwisiswant0 in #6138
• Fixed issue in offlinehttp extractor without part to body like requests by @Marmelatze in #6167
• Fixed issue with unresolved interactsh-url for JS templates by @dogancanbakir in #6088
• Addded support for SupportedLDAPVersion in JS template by @pussycat0x in #6202
• Added support to mssql for execute query in JS template by @Ice3man543 in #6200
• Added verbose output in case of -duc by @dogancanbakir in #6195

New Contributors

• @pussycat0x made their first contribution in #6202

Full Changelog: v3.4.2...v3.4.3

What's Changed

🎉 New Features

• Added bearer support to Jira reporting for self-hosted environments by @Ice3man543 in #6145

🐞 Bug Fixes

• Fixed call to errors.Wrap to use the correct error variable by @alingse in #6127

Other Changes

• Various improvements to the GitHub Actions by @dwisiswant0, including:
  • Removal of i386 Docker manifest due to lack of 32-bit support #6134
  • Addition of Docker manifests #6125
  • Use of composite action for compatibility checks #6139
  • Addition of setup-python steps for tests #6154

New Contributors

• @alingse made their first contribution in #6127

Full Changelog: v3.4.1...v3.4.2

What's Changed

Other Changes

• Updated Docker image templates to fix release issues by @dwisiswant0 in #6119

Full Changelog: v3.4.0...v3.4.1