# osquery 5.19.0

- Product: osquery (https://whatsnew.fyi/product/osquery)
- Vendor: osquery
- Date: 2025-08-13
- Version: 5.19.0
- Original notes: https://github.com/osquery/osquery/releases/tag/5.19.0
- Permalink: https://whatsnew.fyi/product/osquery/releases/5.19.0

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **added** — Add table deb_package_files
- **added** — Add system_profiler table for macOS
- **added** — Add version collate to os_version table's version column
- **added** — Add entitlements column to macOS signature table
- **added** — Add support for VSCode forks in vscode_extensions
- **fixed** — Fix NSInvalidArgumentException when querying connected_displays
- **fixed** — Fix inconsistent counter resets due to Config::purge()
- **changed** — Update linux block_device and disk_encryption source data to simple sysfs implementation
- **fixed** — Fix ATC for open Firefox databases
- **changed** — Update yara from 4.2.3 to 4.5.4
- **changed** — Upgrade zlib to 1.3.1
- **fixed** — Fix build for XCode SDK 16.4

##### What's Changed

###### Features
* Add table `deb_package_files` by @zwass in https://github.com/osquery/osquery/pull/8657
* Add `system_profiler` table for macOS by @zwass in https://github.com/osquery/osquery/pull/8645
* Add version collate to `os_version` table's `version` column by @Micah-Kolide in https://github.com/osquery/osquery/pull/8659
* Add `entitlements` column to macOS `signature` table by @zwass in https://github.com/osquery/osquery/pull/8666
* Add support for VSCode forks in `vscode_extensions` by @zwass in https://github.com/osquery/osquery/pull/8664

###### Bugfixes
* Fix `NSInvalidArgumentException` when querying `connected_displays` by @Synse in https://github.com/osquery/osquery/pull/8628
* Fix inconsistent counter resets due to `Config::purge()` by @skurpad7 in https://github.com/osquery/osquery/pull/8635
* Update linux `block_device` and `disk_encryption` source data to simple sysfs implementation by @Micah-Kolide in https://github.com/osquery/osquery/pull/8182
* Fix ATC for open Firefox databases by @zwass in https://github.com/osquery/osquery/pull/8631

###### Other
* libs: yara: 4.2.3 -> 4.5.4 by @LeSuisse in https://github.com/osquery/osquery/pull/8643
* Upgrading zlib to 1.3.1 by @ksykulev in https://github.com/osquery/osquery/pull/8625
* Fix build for XCode SDK 16.4 by @lucasmrod in https://github.com/osquery/osquery/pull/8640
* Update build instructions for workaround for XCode SDK > 16.3 by @lucasmrod in https://github.com/osquery/osquery/pull/8650
* Add Cursor AI editor configurations by @zwass in https://github.com/osquery/osquery/pull/8656
* Further improvement to Cursor rules by @zwass in https://github.com/osquery/osquery/pull/8662
* Update Windows build instructions by @zwass in https://github.com/osquery/osquery/pull/8661

##### New Contributors
* @Synse made their first contribution in https://github.com/osquery/osquery/pull/8628
* @skurpad7 made their first contribution in https://github.com/osquery/osquery/pull/8635

**Full Changelog**: https://github.com/osquery/osquery/compare/5.18.0...5.19.0