Wazuh v5.0.0-beta5

What's Changed

• fix(ci): correct S3 artifact run directory layout for 4.14.7 by @jr0me in https://github.com/wazuh/wazuh/pull/37377
• Lower log level of transient cluster failures by @ignaciogalle12git in https://github.com/wazuh/wazuh/pull/37338
• Fix github actions shell by @Miguevrgo in https://github.com/wazuh/wazuh/pull/37355
• SCA Policy Adjustments by @Johnng007 in https://github.com/wazuh/wazuh/pull/37385
• Bump 4.14.8 branch by @wazuhci in https://github.com/wazuh/wazuh/pull/37404
• fix(ci): grant OIDC to Coverity S3 jobs by @jr0me in https://github.com/wazuh/wazuh/pull/37406
• Remove unnused assignment for bpf object by @Miguevrgo in https://github.com/wazuh/wazuh/pull/37424
• Fix changelog workflow by @TomasTurina in https://github.com/wazuh/wazuh/pull/37431
• Preserve original scan_day/scan_time strings in syscheck config by @lchico in https://github.com/wazuh/wazuh/pull/37412
• Multi SCA, Decoder and Rule fixes by @Johnng007 in https://github.com/wazuh/wazuh/pull/37434
• Improve API authentication stability and resource limits by @jepalfer in https://github.com/wazuh/wazuh/pull/37034
• Bump 4.14.7 branch by @wazuhci in https://github.com/wazuh/wazuh/pull/37523
• Update CHANGELOG for v4.14.7 by @vikman90 in https://github.com/wazuh/wazuh/pull/37536
• Adjusted file sizes in the check files by @MarcelKemp in https://github.com/wazuh/wazuh/pull/37544
• Compilation error in HP-UX arch by @fcontrerasc in https://github.com/wazuh/wazuh/pull/37545
• Maintain crypto_method on keystore rebuild by @jpcerrone in https://github.com/wazuh/wazuh/pull/37524
• Merge 4.14.7 into 4.14.8 by @vikman90 in https://github.com/wazuh/wazuh/pull/37679
• Fix RBAC permission bypass in GET /security/actions and /security/resources by @vikman90 in https://github.com/wazuh/wazuh/pull/37678
• Validate destination paths when uploading list, rule, and decoder files by @vikman90 in https://github.com/wazuh/wazuh/pull/37691
• Prevent cluster worker from overwriting protected master files by @vikman90 in https://github.com/wazuh/wazuh/pull/37694
• Improve access control on the agent active-configuration endpoint by @vikman90 in https://github.com/wazuh/wazuh/pull/37716
• Fix typo in SCA rules by @Miguevrgo in https://github.com/wazuh/wazuh/pull/37652
• Prevent race condition in Windows RSA key container initialization (randombytes) by @MarcelKemp in https://github.com/wazuh/wazuh/pull/37701
• Limit node expansion in yaml2json by @vikman90 in https://github.com/wazuh/wazuh/pull/37725
• Reorder revoke-token from API integration test by @Antoniogm03 in https://github.com/wazuh/wazuh/pull/37696
• Fix benchmark test_cluster_error_logs test by @jepalfer in https://github.com/wazuh/wazuh/pull/37425
• Correct EnableMulticast expected value in Windows LLMNR checks by @Darioortegaleyva in https://github.com/wazuh/wazuh/pull/37765
• Prevent spurious CRITICAL (1211) queue error during rootcheck/FIM shutdown on WPK upgrade by @Darioortegaleyva in https://github.com/wazuh/wazuh/pull/37715
• Add sshd-session/sshd-auth to default macOS ULS query by @Darioortegaleyva in https://github.com/wazuh/wazuh/pull/37769
• Remove multiple warning messages for each unathorized shared policy by @Miguevrgo in https://github.com/wazuh/wazuh/pull/37741
• Fix typo in SCA rules by @Miguevrgo in https://github.com/wazuh/wazuh/pull/37770
• Restore legacy 5.0 deprecation notes and update wm_control migration by @cborla in https://github.com/wazuh/wazuh/pull/37829
• Fix analysisd deadlock on AR send when the queue is not drained by @ignaciogalle12git in https://github.com/wazuh/wazuh/pull/37764
• Disable OpenSSL runtime CPU probing in Python daemon wrappers by @jotacarma90 in https://github.com/wazuh/wazuh/pull/37773
• Disable OpenSSL runtime CPU probing in Python daemon wrappers by @jotacarma90 in https://github.com/wazuh/wazuh/pull/37839
• Expose audit_uid, audit_gid and effective_uid in eBPF whodata provider by @Darioortegaleyva in https://github.com/wazuh/wazuh/pull/37060
• Fix flaky Windows syscollector test by @rjcausarano in https://github.com/wazuh/wazuh/pull/37842
• Reject upgrade commands from the agent channel in wazuh-analysisd by @vikman90 in https://github.com/wazuh/wazuh/pull/37745
• initializeContext thread-safe with std::call_once by @hernanvalenzuela in https://github.com/wazuh/wazuh/pull/37768
• Bump 5.0.0 branch by @wazuhci in https://github.com/wazuh/wazuh/pull/37916
• Validate destination paths when deleting rule and decoder files by @vikman90 in https://github.com/wazuh/wazuh/pull/37838
• Make sure dbs are fully closed before stop() returns (sca, syscollector, agent-info) by @jpcerrone in https://github.com/wazuh/wazuh/pull/37841
• Use DisplayName and python.exe version for Microsoft Store packages by @Darioortegaleyva in https://github.com/wazuh/wazuh/pull/37441
• Fix analysisd flaky test by @jepalfer in https://github.com/wazuh/wazuh/pull/37754
• Migrate AWS integration tests to OIDC authentication and pre-existing VPC [5.0.0] by @Darioortegaleyva in https://github.com/wazuh/wazuh/pull/36796
• Migrate AWS integration tests to OIDC authentication and pre-existing VPC [4.14.7] by @Darioortegaleyva in https://github.com/wazuh/wazuh/pull/36798
• Update MITRE mapping in Microsoft Graph rules by @AwwalQuan in https://github.com/wazuh/wazuh/pull/37950
• Validate read path in CDB list file retrieval by @vikman90 in https://github.com/wazuh/wazuh/pull/37901
• Merge 4.14.7 into 4.14.8 by @jotacarma90 in https://github.com/wazuh/wazuh/pull/37971
• Provide local TZDB for integration tests by @jam300 in https://github.com/wazuh/wazuh/pull/37941
• Explicit use of jemalloc on daemons by @NahuFigueroa97 in https://github.com/wazuh/wazuh/pull/37708
• Fix flaky content manager component tests caused by a race in the fake server startup by @jotacarma90 in https://github.com/wazuh/wazuh/pull/37902
• Merge 4.14.8 into 5.0.0 by @jotacarma90 in https://github.com/wazuh/wazuh/pull/37973
• Fix WM_MAX_WAITunit comment modified (milliseconds -> microseconds) by @hernanvalenzuela in https://github.com/wazuh/wazuh/pull/37977
• Fix Windows agent Event-handle leak from per-cycle COM init in syscollector hotfixes collector by @nbertoldo in https://github.com/wazuh/wazuh/pull/37982
• Downgrade benign syscollector shutdown-timeout log by @anromerom in https://github.com/wazuh/wazuh/pull/37918
• Discard_regex values containing a space break argument parsing by @jepalfer in https://github.com/wazuh/wazuh/pull/37929
• Decouple authd use_password invalid test from the manager restart return code by @ignaciogalle12git in https://github.com/wazuh/wazuh/pull/37930
• Prevent empty string version from being stored for agents by @Antoniogm03 in https://github.com/wazuh/wazuh/pull/37934
• Fix compilation with newer GCC: missing cstdint includes in versionMatcher headers by @Antoniogm03 in https://github.com/wazuh/wazuh/pull/37951
• Reliably start workload daemons on install and shared-config reload by @Darioortegaleyva in https://github.com/wazuh/wazuh/pull/37999
• Cap engine unit-test build parallelism to prevent OOM by @jotacarma90 in https://github.com/wazuh/wazuh/pull/37955
• agent-info: propagate manager cluster_name change to connected agents by @MAnDumu in https://github.com/wazuh/wazuh/pull/37753
• fim_scan_mutex critical section extended to held through the post-transaction sync writes by @hernanvalenzuela in https://github.com/wazuh/wazuh/pull/37840
• Resolve Coverity findings for 5.0.0 Beta 4 - Agent by @nbertoldo in https://github.com/wazuh/wazuh/pull/38009
• Keep package_installed as a string through dbsync, convert to epoch only in the ECS event by @cborla in https://github.com/wazuh/wazuh/pull/38027
• fix default macOS group_description by @cborla in https://github.com/wazuh/wazuh/pull/38019
• Prevent exiting Wazuh-DB worker when oversized message arrives. by @MiguelazoDS in https://github.com/wazuh/wazuh/pull/37850
• Stop the deferred sync-flag update from inserting partial rows by @Miguevrgo in https://github.com/wazuh/wazuh/pull/38045
• Notify pause() waiters on Syscollector shutdown by @hernanvalenzuela in https://github.com/wazuh/wazuh/pull/38050
• Skip feed-update vulnerability scan for agents without package inventory by @jotacarma90 in https://github.com/wazuh/wazuh/pull/38074
• Classify SCA policy remoteness by activation source, not file path by @vikman90 in https://github.com/wazuh/wazuh/pull/37953
• Merge 4.14.8 into 5.0.0 by @TomasTurina in https://github.com/wazuh/wazuh/pull/38094
• Reject undersized legacy-format agent messages in wazuh-remoted by @vikman90 in https://github.com/wazuh/wazuh/pull/38099
• Remove WMI dependancy when installing msi packages by @rjcausarano in https://github.com/wazuh/wazuh/pull/38059
• Fix macos drain autoreleased OD objects in genAccountPolicyData by @cborla in https://github.com/wazuh/wazuh/pull/38118
• Initialize primitive members in parsec::Trace and base::result::Result by @Antoniogm03 in https://github.com/wazuh/wazuh/pull/37998
• Fix resource leaks when upgrade command params carry duplicate keys by @ignaciogalle12git in https://github.com/wazuh/wazuh/pull/38004
• Fix out-of-bounds read in logpar group end-token resolution (CID 558406) by @ignaciogalle12git in https://github.com/wazuh/wazuh/pull/37995
• Render each changelog block as a table by @jotacarma90 in https://github.com/wazuh/wazuh/pull/38076
• Remove startup deprecation warning from agent_upgrade by @jotacarma90 in https://github.com/wazuh/wazuh/pull/38085
• Exclude monotonic counters from syscollector dbsync diff/checksum by @lchico in https://github.com/wazuh/wazuh/pull/38057
• Improve login attempt limiting under concurrent requests by @vikman90 in https://github.com/wazuh/wazuh/pull/38135
• Fix out-of-bounds write when generating FIM alerts in wazuh-analysisd by @vikman90 in https://github.com/wazuh/wazuh/pull/38145
• Close the SCA DBSync connection on module stop by @nbertoldo in https://github.com/wazuh/wazuh/pull/38093
• Do not unwind wazuh-syscheckd while the FIM threads are still running by @Miguevrgo in https://github.com/wazuh/wazuh/pull/38131
• Enforce PCI DSS 12-character minimum for API user passwords and adapt affected tests by @ignaciogalle12git in https://github.com/wazuh/wazuh/pull/37952
• Enforce password validation for empty passwords in update_user by @vikman90 in https://github.com/wazuh/wazuh/pull/38180
• Revert test/lint workflows from CodeBuild to GitHub-hosted runners by @lchico in https://github.com/wazuh/wazuh/pull/38188
• Bump 4.14.9 branch by @wazuhci in https://github.com/wazuh/wazuh/pull/38210
• Enforce token revocation for run_as (authorization-context) API sessions by @vikman90 in https://github.com/wazuh/wazuh/pull/38193
• Fix wildcard matching in the installed-files check by @vikman90 in https://github.com/wazuh/wazuh/pull/38213
• Prevent orphaned S3 artifacts and false-positive collisions in AWS integration tests [5.0.0] by @Darioortegaleyva in https://github.com/wazuh/wazuh/pull/38104
• Prevent orphaned S3 artifacts and false-positive collisions in AWS integration tests [4.14.8] by @Darioortegaleyva in https://github.com/wazuh/wazuh/pull/38105
• join module worker thread in stop_wmodules() before reporting stopped by @hernanvalenzuela in https://github.com/wazuh/wazuh/pull/38151
• Report macOS 26 and 27 release codenames by @anromerom in https://github.com/wazuh/wazuh/pull/38187
• Validate CDB list paths in list-retrieval and delete cluster callables by @vikman90 in https://github.com/wazuh/wazuh/pull/38214
• Skip 4.x CI checks on draft pull requests by @vikman90 in https://github.com/wazuh/wazuh/pull/38240
• Fix remote-command configuration validation by @vikman90 in https://github.com/wazuh/wazuh/pull/38239
• Fix bad formatted vulnerability scanner database workflow by @jotacarma90 in https://github.com/wazuh/wazuh/pull/38236
• Revert agent workflows to GitHub runners 4x by @lchico in https://github.com/wazuh/wazuh/pull/38223
• Merge 4.14.8 into 4.14.9 by @jotacarma90 in https://github.com/wazuh/wazuh/pull/38257
• Migrate the agent package-build workflows to GitHub-hosted runners by @nbertoldo in https://github.com/wazuh/wazuh/pull/38225
• Release Windows hotfixes' per-thread COM context on the calling thread instead of at thread exit by @lchico in https://github.com/wazuh/wazuh/pull/38258
• Merge 4.14.9 into 5.0.0 by @jotacarma90 in https://github.com/wazuh/wazuh/pull/38259
• Perpended string "data." in field names removed from FortiAuth rules and decoders by @AwwalQuan in https://github.com/wazuh/wazuh/pull/38195
• Migrate candidate workers from AWS to Github-hosted runners by @jepalfer in https://github.com/wazuh/wazuh/pull/38233
• Remove stale EC2-timing exclusion in syscollector-rtr by @lchico in https://github.com/wazuh/wazuh/pull/38271
• Silence GMock warnings for releaseThreadResources() in syscollector tests by @hernanvalenzuela in https://github.com/wazuh/wazuh/pull/38307
• Reject symlinks when writing files staged under the incoming directory by @cborla in https://github.com/wazuh/wazuh/pull/38267
• Validate read paths in group configuration and daemon stats retrieval by @vikman90 in https://github.com/wazuh/wazuh/pull/38339
• Fix Windows agent crash on reconnection when the manager rejects its key by @anromerom in https://github.com/wazuh/wazuh/pull/38312
• Windows agent: safer MSI upgrade under a pending system restart by @vikman90 in https://github.com/wazuh/wazuh/pull/38277
• Add sccache compilation caching to the legacy unit tests and syscollector RTR workflows by @jotacarma90 in https://github.com/wazuh/wazuh/pull/38343
• Prevent Windows agent crash when promoting FIM registry rows whose configuration was removed by @nbertoldo in https://github.com/wazuh/wazuh/pull/38350
• Port deferred 4.14.7 cluster security fixes to 5.0.0 (confinement, decompression cap, config masking) by @jotacarma90 in https://github.com/wazuh/wazuh/pull/38374
• Merge 4.14.8 into 4.14.9 by @jotacarma90 in https://github.com/wazuh/wazuh/pull/38387
• Improve translation mechanism by @MiguelazoDS in https://github.com/wazuh/wazuh/pull/35350
• Merge 4.14.9 into 5.0.0 by @jotacarma90 in https://github.com/wazuh/wazuh/pull/38391
• Introduce HTTPS-based agent-manager communication protocol by @TomasTurina in https://github.com/wazuh/wazuh/pull/38394
• fix(sync-protocol): publish agent metadata in test tool to stop RTR hang by @Nicogp in https://github.com/wazuh/wazuh/pull/38402
• Fix documentation build failure due to missing manager coordinator migration guide by @jotacarma90 in https://github.com/wazuh/wazuh/pull/38411
• Suppress StarletteDeprecationWarning for cluster_control and all framework CLI tools by @jotacarma90 in https://github.com/wazuh/wazuh/pull/38412
• Prevent the agent from stopping Active Response when too many commands are defined by @vikman90 in https://github.com/wazuh/wazuh/pull/38410
• Retire the three dead remoted counters and fix the endpoint that serves them by @ignaciogalle12git in https://github.com/wazuh/wazuh/pull/38319
• Stop broadcasting token revocation to worker nodes by @jotacarma90 in https://github.com/wazuh/wazuh/pull/38429
• Fix timeout waiting for SCA to complete shutdown by @Miguevrgo in https://github.com/wazuh/wazuh/pull/38424
• Fix WPK agent upgrade silently failing on systems without the find binary by @Darioortegaleyva in https://github.com/wazuh/wazuh/pull/38431
• Correct documentation inaccuracies and update GeoIP manifest URL by @TomasTurina in https://github.com/wazuh/wazuh/pull/38433
• Backport: Free rpm macro context to stop unbounded growth by @anromerom in https://github.com/wazuh/wazuh/pull/38366
• Resolve group names once per scan instead of once per user and group by @anromerom in https://github.com/wazuh/wazuh/pull/38395
• Bound the control message copy to the source string length in remoted by @vikman90 in https://github.com/wazuh/wazuh/pull/38427
• Close idle pre-authentication connections in the cluster server by @vikman90 in https://github.com/wazuh/wazuh/pull/38449
• Restrict wazuh-manager-apid status reporting to master nodes by @ignaciogalle12git in https://github.com/wazuh/wazuh/pull/38413
• Allow skipping the manager connectivity check during WPK upgrade for testing by @Darioortegaleyva in https://github.com/wazuh/wazuh/pull/38453
• Fix workflow syntax and S3 upload call in VD Scanner tools Delivery by @jotacarma90 in https://github.com/wazuh/wazuh/pull/38455
• Change Warning message to Info for client buffer config by @Miguevrgo in https://github.com/wazuh/wazuh/pull/38459
• Detect and recover from silently half-closed TCP connections by @cborla in https://github.com/wazuh/wazuh/pull/38401
• Unify the manager's HTTP-over-UDS servers on a shared transport (uds_http_server) by @juliancnn in https://github.com/wazuh/wazuh/pull/38404
• Enable zstd compression by default on the agent by @jpcerrone in https://github.com/wazuh/wazuh/pull/38441
• Fix all 16 Coverity findings from 5.0.0-HTTPS validation scan by @rjcausarano in https://github.com/wazuh/wazuh/pull/38397
• Report disabled root decoder during policy promotion by @jam300 in https://github.com/wazuh/wazuh/pull/38317
• Own the systemd D-Bus connection so the services collector recovers after a bus restart by @anromerom in https://github.com/wazuh/wazuh/pull/38392
• Added ssl and batch block to agent's configuration report by @fcontrerasc in https://github.com/wazuh/wazuh/pull/38417
• Windows agent HTTPS 401 clock-skew by @Nicogp in https://github.com/wazuh/wazuh/pull/38440
• Gate 4.x-specific remoted subsystems behind the legacy configuration block by @Antoniogm03 in https://github.com/wazuh/wazuh/pull/38344
• Persist the agent version at startup and stop throttling the first host-carrying notify by @jotacarma90 in https://github.com/wazuh/wazuh/pull/38461
• Resolve the audited path for single-item whodata events and restore the FIM whodata integration tests by @Miguevrgo in https://github.com/wazuh/wazuh/pull/38425
• Agent and manager default connection timing parameters by @jepalfer in https://github.com/wazuh/wazuh/pull/38338
• Move the 4.14.8 server workflows to GitHub-hosted runners and add sccache compilation caching by @jotacarma90 in https://github.com/wazuh/wazuh/pull/38460
• Scanhotfixes wmi timeout by @lchico in https://github.com/wazuh/wazuh/pull/38463
• Enforce client.keys source address and harden HTTPS config validation in remoted by @jotacarma90 in https://github.com/wazuh/wazuh/pull/38432
• fix compression agent configuration by @rovogel in https://github.com/wazuh/wazuh/pull/38471
• Fixed the parameter for debug symbols used in package generation by @MarcelKemp in https://github.com/wazuh/wazuh/pull/38484
• Address first-party Coverity findings by @rjcausarano in https://github.com/wazuh/wazuh/pull/38466
• Support static IP agent registration in HTTPS remoted by @NahuFigueroa97 in https://github.com/wazuh/wazuh/pull/38446
• Make module stop() callbacks signal-only so modules do not deadlock each other on shutdown by @nbertoldo in https://github.com/wazuh/wazuh/pull/38444
• Add HTTPS agent enrollment endpoint (POST /enroll) bridging to authd by @TomasTurina in https://github.com/wazuh/wazuh/pull/38485
• wazuh-manager: Improve inv sync and remoted stats by @juliancnn in https://github.com/wazuh/wazuh/pull/38468
• Bound Snort full record appends to the available buffer space by @vikman90 in https://github.com/wazuh/wazuh/pull/38472
• Bump 5.0.0 branch by @wazuhci in https://github.com/wazuh/wazuh/pull/38503
• Close the FIM synchronization database before reporting SERVICE_STOPPED on Windows by @Miguevrgo in https://github.com/wazuh/wazuh/pull/38235
• Avoid holding exec_sock_mutex while connecting to the exec queue by @jotacarma90 in https://github.com/wazuh/wazuh/pull/38510
• Quote interpolated paths before passing them to the shell in the engine tools by @vikman90 in https://github.com/wazuh/wazuh/pull/38473
• Wait out transient SQLite locks instead of failing agent startup by @lchico in https://github.com/wazuh/wazuh/pull/38500
• Fix world-writable bundled Python files introduced by the DEB permission restoration script by @jotacarma90 in https://github.com/wazuh/wazuh/pull/38515
• Merge 4.14.8 into 4.14.9 by @jotacarma90 in https://github.com/wazuh/wazuh/pull/38523
• Agent-side enrollment over HTTPS: consume the new POST /enroll endpoint, retire the legacy 1515 protocol by @Nicogp in https://github.com/wazuh/wazuh/pull/38470
• Fix Windows module threads created after shutdown by @jr0me in https://github.com/wazuh/wazuh/pull/38469
• Migrate wazuh_db HTTP API from httpsrv to uds_http_server by @TomasTurina in https://github.com/wazuh/wazuh/pull/38532
• Reduce wazuh-agentd resident memory and per-request signing cost by @anromerom in https://github.com/wazuh/wazuh/pull/38531
• Merge 4.14.9 into 5.0.0 by @jotacarma90 in https://github.com/wazuh/wazuh/pull/38528
• Fix memory leak in the analysisd JSON decoder when an event repeats a field by @vikman90 in https://github.com/wazuh/wazuh/pull/38548
• syscollector normalizer: stop erasing while iterating in removeExcluded() (4.14.9) by @Miguevrgo in https://github.com/wazuh/wazuh/pull/38340
• Handle Windows event field names as literal JSON keys by @vikman90 in https://github.com/wazuh/wazuh/pull/38512
• Stop serving the OpenAPI spec unauthenticated at /openapi.json by @jotacarma90 in https://github.com/wazuh/wazuh/pull/38552
• Fix missing package-installed events after agent restarts by @hernanvalenzuela in https://github.com/wazuh/wazuh/pull/38533
• Correct the HTTPS agent-manager protocol documentation and the contract mismatches it exposed by @TomasTurina in https://github.com/wazuh/wazuh/pull/38556
• Raise the number of Active Response commands the agent can load by @vikman90 in https://github.com/wazuh/wazuh/pull/38509
• Allow skipping the manager connectivity check during Windows WPK upgrade for testing by @Darioortegaleyva in https://github.com/wazuh/wazuh/pull/38562
• Allow enrolling an agent whose name matches the manager hostname over the local socket by @jotacarma90 in https://github.com/wazuh/wazuh/pull/38569
• Rename the agent's connection block to <agent><manager> by @fcontrerasc in https://github.com/wazuh/wazuh/pull/38501
• Harden indexer communication timeouts by @LucioDonda in https://github.com/wazuh/wazuh/pull/38467
• Implement parallel Vulnerability Detector scans by @matigarciadev in https://github.com/wazuh/wazuh/pull/38487
• Unblock enrollments when agent deletion pipeline stalls by @NahuFigueroa97 in https://github.com/wazuh/wazuh/pull/38554
• Enhancement/38491 remoted global prefix by @juliancnn in https://github.com/wazuh/wazuh/pull/38542
• Probe the audisp plugin configuration instead of trusting the audit version by @nbertoldo in https://github.com/wazuh/wazuh/pull/38555
• Integrate endpoint prefix configuration for agent by @rovogel in https://github.com/wazuh/wazuh/pull/38559
• Pin the Azure Graph pagination URL to the Microsoft Graph endpoint by @vikman90 in https://github.com/wazuh/wazuh/pull/38594
• fix(api): bound search length and harden wazuh-db error handling by @MiguelazoDS in https://github.com/wazuh/wazuh/pull/38583
• Reject symlinks when reading and staging files during agent upgrade by @hernanvalenzuela in https://github.com/wazuh/wazuh/pull/38493
• Rename every manager Unix socket to a single standard and gather them in one directory by @ignaciogalle12git in https://github.com/wazuh/wazuh/pull/38551
• Agent-side: new verification_mode=system to validate the manager's certificate against the OS CA store by @jr0me in https://github.com/wazuh/wazuh/pull/38539
• Ignore obsolete 4.x configuration elements instead of rejecting them by @TomasTurina in https://github.com/wazuh/wazuh/pull/38604
• Log transport-level errors by @jpcerrone in https://github.com/wazuh/wazuh/pull/38535
• Log an expected shutdown-time DBSync miss at DEBUG instead of WARNING by @lchico in https://github.com/wazuh/wazuh/pull/38598
• Report local sync intake unreachable as deferred instead of a hard failure by @hernanvalenzuela in https://github.com/wazuh/wazuh/pull/38581
• Set default prefix value when installing agent by @rovogel in https://github.com/wazuh/wazuh/pull/38614
• Restore username validation in the active response framework by @vikman90 in https://github.com/wazuh/wazuh/pull/38597
• Fix false positives for Debian backports packages in Vulnerability Detection by @jotacarma90 in https://github.com/wazuh/wazuh/pull/38474
• Fix out-of-bounds read when a quoted CSV/DSV field ends the input by @vikman90 in https://github.com/wazuh/wazuh/pull/38634
• AWS integration tests: isolate concurrent runs on the shared bucket with a per-run S3 namespace (GITHUB_RUN_ID) [4.14.8] by @Darioortegaleyva in https://github.com/wazuh/wazuh/pull/38254
• AWS integration tests: isolate concurrent runs on the shared bucket with a per-run S3 namespace (GITHUB_RUN_ID) [5.0.0] by @Darioortegaleyva in https://github.com/wazuh/wazuh/pull/38253
• Use posix-flavour MinGW C compiler for the winagent CMake build by @Miguevrgo in https://github.com/wazuh/wazuh/pull/38653
• fix(sca): align SCA policy checks with documented HIPAA mappings by @AwwalQuan in https://github.com/wazuh/wazuh/pull/38646
• Fix stateful DELETE events being dropped for files first seen via realtime/whodata by @MAnDumu in https://github.com/wazuh/wazuh/pull/38537
• remoted: authenticate agents and enrollment with JWT bearer profiles (wazuh-agent+jwt / wazuh-enroll+jwt) by @juliancnn in https://github.com/wazuh/wazuh/pull/38602
• Remove leftover Login Item configuration by @rjcausarano in https://github.com/wazuh/wazuh/pull/38613
• Improve Auth and Inventory-sync documentation by @NahuFigueroa97 in https://github.com/wazuh/wazuh/pull/38612
• Accept any identifier format for content resources by @vikman90 in https://github.com/wazuh/wazuh/pull/38654
• Replace order-preserving std::vector::erase with swap-and-pop where element order doesn't matter by @matigarciadev in https://github.com/wazuh/wazuh/pull/38584
• Verify the Fluentd server identity in the fluent-forward module by @vikman90 in https://github.com/wazuh/wazuh/pull/38686
• Document that agent and manager only share a host when both are 5.x by @jotacarma90 in https://github.com/wazuh/wazuh/pull/38691
• Fix deletion of agent config and stats by @TomasTurina in https://github.com/wazuh/wazuh/pull/38671
• Add agent.config_token to the /control notify response by @TomasTurina in https://github.com/wazuh/wazuh/pull/38676
• Demote agent-lifecycle logs to debug and report global_prefix in getRemoteConfig by @TomasTurina in https://github.com/wazuh/wazuh/pull/38698
• Stop losing legacy remote_upgrade tasks by @Antoniogm03 in https://github.com/wazuh/wazuh/pull/38641
• Sync the VD inventory when the manager reports no feed offset by @jepalfer in https://github.com/wazuh/wazuh/pull/38656
• Fix startup reporting, control-plane error propagation, option validation and inventory-sync bounds by @ignaciogalle12git in https://github.com/wazuh/wazuh/pull/38628
• Merge 4.14.8 into 4.14.9 by @jotacarma90 in https://github.com/wazuh/wazuh/pull/38707
• JWT several fixes by @NahuFigueroa97 in https://github.com/wazuh/wazuh/pull/38699
• Review manager logging by @matigarciadev in https://github.com/wazuh/wazuh/pull/38670
• API endpoint to trigger on-demand Vulnerability scans. by @MiguelazoDS in https://github.com/wazuh/wazuh/pull/38619
• Unify the manager address, port and prefix into a single by @rovogel in https://github.com/wazuh/wazuh/pull/38703
• Restore client buffer deprecation info on 5x by @Miguevrgo in https://github.com/wazuh/wazuh/pull/38721
• Merge 4.14.9 into 5.0.0 by @jotacarma90 in https://github.com/wazuh/wazuh/pull/38709
• WPK upgrade: manager reachability check falls back to TCP only on TLS 1.3 mismatch by @Darioortegaleyva in https://github.com/wazuh/wazuh/pull/38647
• fix(remoted): log authd.pass wait as DEBUG while a worker is joining by @MiguelazoDS in https://github.com/wazuh/wazuh/pull/38682
• Fixed two checks with bugs in Amazon Linux 2023 by @IsExec in https://github.com/wazuh/wazuh/pull/38736
• Recover a re-enrolled agent's data instead of waiting for a checksum mismatch by @nbertoldo in https://github.com/wazuh/wazuh/pull/38623
• Stabilize flaky Windows FIM integration tests with teardown retries by @MAnDumu in https://github.com/wazuh/wazuh/pull/38680
• Drop netstat and last from the default command-monitoring template by @hernanvalenzuela in https://github.com/wazuh/wazuh/pull/38710
• Apply manager-not-ready tolerance to the pre-sync DataClean by @MAnDumu in https://github.com/wazuh/wazuh/pull/38606
• Add consumer-level test coverage for SyncModuleResult classification flags by @hernanvalenzuela in https://github.com/wazuh/wazuh/pull/38672
• Enhancement/38296 indexer connector staging sync by @LucioDonda in https://github.com/wazuh/wazuh/pull/38620
• Bump 5.0.0 branch by @wazuhci in https://github.com/wazuh/wazuh/pull/38761

Full Changelog: https://github.com/wazuh/wazuh/compare/v5.0.0-beta4...v5.0.0-beta5