chore(deps): update opencti/connector-dogesec-siemrules docker tag to v6.9.29 (master)

[renovate]

This PR contains the following updates:

Package	Update	Change
opencti/connector-dogesec-siemrules	minor	6.7.7 → 6.9.29

---

Release Notes

OpenCTI-Platform/connectors (opencti/connector-dogesec-siemrules)

v6.9.29: Version 6.9.29

Compare Source

enhancement

• [ci] Add parameters to set the base branch (#​5959) by @​jabesq in #​6087

Full Changelog: 6.9.28...6.9.29

v6.9.28: Version 6.9.28

Compare Source

No changelog for this release.

Full Changelog: 6.9.27...6.9.28

v6.9.27: Version 6.9.27

Compare Source

No changelog for this release.

Pull Requests:

• [ShadowServer] Replace pandas DataFrame with csv for markdown and CSV… by @​jabesq in #​5968

Full Changelog: 6.9.26...6.9.27

v6.9.26: Version 6.9.26

Compare Source

No changelog for this release.

Full Changelog: 6.9.25...6.9.26

v6.9.25: Version 6.9.25

Compare Source

No changelog for this release.

Full Changelog: 6.9.24...6.9.25

v6.9.24: Version 6.9.24

Compare Source

No changelog for this release.

Full Changelog: 6.9.23...6.9.24

v6.9.23: Version 6.9.23

Compare Source

Bug Fixes:

• #​5863 Backport fix for "[MISP] Re-ingesting same Event again" onto 6.9.x

Full Changelog: 6.9.22...6.9.23

v6.9.22: Version 6.9.22

Compare Source

Enhancements:

• #​5820 [DigintLab-DEP] Skip empty "victim" and allow incident data updates
• #​5819 [IBM XTI] Upgrade to latest OpenCTI version
• #​5817 [vmray-platform] Add incremental ingestion and retry mechanism
• #​5816 [cve] Add CWE support when parsing CVEs from NVD

Bug Fixes:

• #​5818 [recorded-future] Connector generates millions of Notes, causing RabbitMQ queue saturation

Pull Requests:

• [cve] Add CWE support by @​jwil32 in #​5733
• [vmray-platform] Add incremental ingestion and retry mechanism by @​moin-loginsoft in #​5784
• [IBM XTI] Upgrade to latest OpenCTI version by @​awarrier99 in #​5621
• [DigintLab-DEP] enh: skip empty "victim" and allow incident data updates by @​notdodo in #​5767
• [Recorded-Future] Fix the generate ID for the notes by @​Megafredo in #​5821
• Update dependency dateparser to v1.3.0 by @​renovate[bot] in #​5832
• Update dependency black to v25.12.0 by @​renovate[bot] in #​5831

Full Changelog: 6.9.21...6.9.22

v6.9.21: Version 6.9.21

Compare Source

Enhancements:

• #​5790 [Google TI] Optimize API calls by setting explicit pagination limit on relationship queries
• #​5754 [Crowdstrike] Model CrowdStrike malware “variant-of” and “next_stage_of” relationships into OpenCTI
• #​5187 [montysecurity-c2-tracker] Create connector
• #​4845 [TheHive] Add support for TheHive case attachments

Bug Fixes:

• #​5806 [import-file] fix value of CONNECTOR_VALIDATE_BEFORE_IMPORT in README
• #​5387 [FEEDLY] Make the FEEDLY_STREAM_IDS mandatory

Pull Requests:

• [Google TI] Optimize API calls by setting explicit pagination limit on relationship queries by @​romain-filigran in #​5791
• [import-file] fix value of CONNECTOR_VALIDATE_BEFORE_IMPORT in README by @​axelfahy in #​5689
• [TheHive] Add support for TheHive case attachments by @​MohamedMerimi in #​4765
• [crowdstrike] Create relationships from 'variant_of' and 'next_stage_of' fields by @​Powlinett in #​5771
• [monty security c2 tracker] create the connector by @​maximerafaillac in #​5741
• [Feedly]Make FEEDLY_STREAM_IDS setting mandatory (#​5387) by @​jabesq in #​5808
• [google-ti-feeds] Optimize API calls by setting explicit pagination limit on relationship queries - V2 by @​romain-filigran in #​5811

Full Changelog: 6.9.20...6.9.21

v6.9.20: Version 6.9.20

Compare Source

No changelog for this release.

Full Changelog: 6.9.19...6.9.20

v6.9.19: Version 6.9.19

Compare Source

Enhancements:

• #​5547 [team-cymru-scout-search] Verify + add connector in the catalog

Bug Fixes:

• #​5802 [Cybersixgill] Li 410 open cti darkfeed connector issue

Pull Requests:

• Update dependency pre-commit to ~=4.5.1 by @​renovate[bot] in #​5703
• Update dependency playwright to v1.58.0 by @​renovate[bot] in #​5702
• [Cybersixgill] Li 410 open cti darkfeed connector issue by @​syed-loginsoft in #​5449
• [team-cymru-scout-search] Verify + add connector in the catalog by @​throuxel in #​5726
• Feat/5546 verify team cymru scout by @​ncarenton in #​5757

New Contributors:

• @​syed-loginsoft made their first contribution in #​5449

Full Changelog: 6.9.18...6.9.19

v6.9.18: Version 6.9.18

Compare Source

Enhancements:

• #​5769 [VulnCheck] Add attack patterns, courses of action, all CVSS version, labels and more
• #​5753 [Crowdstrike] Model CrowdStrike malware capabilities as OpenCTI malware types
• #​5629 [Virustotal-livehunt-notification] Add TLP marking
• #​5234 [shadowserver] Migrate connector to be connector manager supported
• #​2003 [crowdstrike] Add function to import malware families

Bug Fixes:

• #​5780 [Google ti feeds] Failed tests
• #​5777 [Google TI] Indicator scores from GTI assessment are not correctly mapped
• #​5756 [misp-intel] IOCs not being published
• #​5716 [MISP] Connector hangs indefinitely when MISP instance is unreachable
• #​5658 [Recorded Future Enrichment] Incorrect documentation

Pull Requests:

• [Recorded future enrichment] fix incorrect documentation by @​Ninoxe in #​5760
• [VulnCheck] Add attack patterns, courses of action, all CVSS version, labels and more by @​maddawik in #​4796
• [MISP] Add timeout settings for MISP requests by @​jabesq in #​5761
• [virustotal-livehunt-notification] Add TLP markings to the entities by @​jabesq in #​5738
• [misp-intel] Fix publication (#​5756) by @​SamuelHassine in #​5774
• [URLHaus] docs: Fix Urlhaus URL in manifest json by @​maximerafaillac in #​5770
• [ci] Add automation to add new issues/PRs to project (#​5727) by @​ncarenton in #​5747
• [Google TI] Indicator scores from GTI assessment are not correctly mapped by @​romain-filigran in #​5779
• [Google ti feeds] fix tests and add condition in get_score function by @​Ninoxe in #​5781
• [crowdstrike] Add function to import malware families (#​2003) by @​Kakudou in #​5223
• [crowdstrike] Map capabilities to malware_types by @​Powlinett in #​5763
• [shadowserver] Update connector to be "manager_supported" by @​Powlinett in #​5679

Full Changelog: 6.9.17...6.9.18

v6.9.17: Version 6.9.17

Compare Source

Enhancements:

• #​5742 [virustotal] Display VirusTotal enrichment results for "undetected" observables
• #​5734 [ismalicious] New enrichment integration for 'IsMalicious'
• #​5242 [mitre-atlas] Migrate connector to be connector manager supported
• #​5240 [valhalla] Migrate connector to be connector manager supported
• #​5236 [microsoft-sentinel-incidents] Migrate connector to be connector manager supported
• #​5232 [red-flag-domains] Migrate connector to be connector manager supported
• #​5216 [dnstwist] Migrate connector to be connector manager supported
• #​5036 [crowdstrike] Add function to import vulnerabilities
• #​4584 New Splunk App "OpenCTI for Splunk Enterprise"
• #​4134 [virusTotal] Add 'suspicious' and 'undetected' findings to enrichment note
• #​2263 [Hygiene] Support CIDR and Partial Domains

Bug Fixes:

• #​5713 [RecordedFuture] Connector does not post state in run_and_terminate mode
• #​5706 [MISP Feed] connector is putting 1 operation at each run despite nothing to process
• #​5688 [sekoia.io] Duplicate calls to identities
• #​4886 [MISP] All original tags as set as labels if MISP_KEEP_ORIGINAL_TAGS_AS_LABEL env var is empty

Pull Requests:

• [recorded-future] ensure all threads end before returning by @​throuxel in #​5721
• [red-flag-domains] Update connector to be "manager_supported" by @​jabesq in #​5661
• [ismalicious] New enrichment integration for 'IsMalicious' by @​hexablob in #​5481
• [dnstwist] Update connector to be "manager supported" by @​Powlinett in #​5650
• [microsoft-sentinel-incidents] Update connector to be "manager_supported" by @​jabesq in #​5640
• [misp] remove backward-compat workaround for original_tags_to_keep_as_labels by @​ncarenton in #​5705
• [SEKOIA.IO] update cache system in Sekoia connector by @​mchupeau-sk in #​5367
• [mitre-atlas] Update connector to be "manager_supported" by @​jabesq in #​5643
• [crowdstrike] Add function to import vulnerabilities (#​5036) by @​Kakudou in #​5224
• [virustotal] Improve VT enrichment note by processing any results by @​romain-filigran in #​5748
• [misp-feed] Stop creating unnecessary work when there is nothing to process. by @​jabesq in #​5715
• [valhalla] Update connector to be "manager_supported" (#​5240) by @​jabesq in #​5682
• [crowdstrike] fix _create_vulnerability by @​throuxel in #​5755
• [Doc] improve Hygiene documentation by @​romain-filigran in #​5697
• [ismalicious] Add logo and update supported version for isMalicious connector by @​romain-filigran in #​5735
• [urlscan-enrichment] Improve URLScan connector documentation to include the correct scope by @​romain-filigran in #​5744

New Contributors:

• @​hexablob made their first contribution in #​5481

Full Changelog: 6.9.16...6.9.17

v6.9.16: Version 6.9.16

Compare Source

Enhancements:

• #​5245 [urlhaus-recent-payloads] Migrate connector to be connector manager supported
• #​5239 [wiz-cloud-landscape] Migrate connector to be connector manager supported
• #​5233 [malwarebazaar-recent-addtions] Migrate connector to be connector manager supported

Pull Requests:

• [orange-cyberdefense-enrichment-v3] new internal-enrichment connector by @​ocd-acauchy in #​5624
• [orange-cyberdefense-v3] new external-import connector to replace the current one by @​ocd-acauchy in #​5623
• [Sekoia] Rollback Sekoia README documentation by @​helene-nguyen in #​5709
• [urlhaus-recent-payloads] Update connector to be "manager_supported" by @​throuxel in #​5687
• [wiz] Update connector to be "manager_supported" by @​throuxel in #​5683
• [malwarebazaar-recent-additions] Update connector to be "manager_supported" by @​throuxel in #​5678

Full Changelog: 6.9.15...6.9.16

v6.9.15: Version 6.9.15

Compare Source

Enhancements:

• #​4733 [MISP] Migrate connector to be connector manager supported

Bug Fixes:

• #​5694 [crowdstrike] Remove NVD external reference when ingesting a Vulnerability from Crowdstrike Feed
• #​5452 MISP connector only imports small set of data / small timerange

Pull Requests:

• [ci] Automate the verification about signed commit in PRs. (#​4802) by @​mariot in #​5318
• [MISP] Fix unsupported type for MISP_REPORT_DESCRIPTION_ATTRIBUTE_FILTERS variable by @​helene-nguyen in #​5660
• [misp] Stop skipping events not processed yet by @​Powlinett in #​5700
• [MISP]: set manager_supported to true by @​mariot in #​5468

Full Changelog: 6.9.14...6.9.15

v6.9.14: Version 6.9.14

Compare Source

Bug Fixes:

• #​5701 [import-file-yara] Exception when importing a YARA rule without metadata
• #​5695 [cpe] Previous "NIST_API_KEY" variable is not working anymore preventing the connector to start
• #​5360 [crowdstrike] Missing relationship between Indicator and Vulnerability

Pull Requests:

• [cpe]: Reinstate NIST_API_KEY as a deprecated variable by @​jabesq in #​5696
• [crowdstrike] Missing relationship between Indicator and Vulnerability #​5360 by @​Kakudou in #​5681
• [import-file-yara] avoid crashing if no metadata by @​axelfahy in #​5699

Full Changelog: 6.9.13...6.9.14

v6.9.13: Version 6.9.13

Compare Source

Enhancements:

• #​5208 [recorded-future] Support ingestion of "Vulnerability Risk List"
• #​3732 [Recorded Future] Optimizing Risk List ingestion

Pull Requests:

• [Recorded Future] Support ingestion of "Vulnerability Risk List" by @​Lhorus6 in #​5622
• [cpe] Update connector to be "manager_supported" by @​jabesq in #​5649
• [cpe] Remove unwanted line in dockerfile by @​jabesq in #​5691

Full Changelog: 6.9.12...6.9.13

v6.9.12: Version 6.9.12

Compare Source

Enhancements:

• #​5237 [malwarebazaar] Migrate connector to be connector manager supported
• #​5235 [recordedfuture-enrichment] Migrate connector to be connector manager supported
• #​4868 [crowdstrike] Retrieve and model malware associated to threat actors

Bug Fixes:

• #​5359 [crowdstrike] Remove inferred relationships created through Indicator associations
• #​5358 [crowdstrike] Indicator "kill chains" incorrectly propagated to related "Malware"

Pull Requests:

• fix: Remove bad sub-module in external-import/echocti/connectors by @​jabesq in #​5676
• [crowdstrike] kill chains incorrectly propagated to malware #​5358 by @​Kakudou in #​5614
• [crowdstrike] Retrieve and model malware associated to threat actors (#​4868) by @​Kakudou in #​5222
• [recordedfuture-enrichment] Update connector to be "manager_supported" by @​throuxel in #​5646
• [crowdstrike] remove inferred relation created through indicator #​5359 by @​Kakudou in #​5616
• [malwarebazaar] Update connector to be "manager_supported" by @​throuxel in #​5642
• [Hub] Update README to point to the new OpenCTI Integrations Library by @​romain-filigran in #​5680
• [Import-Document] revert "Add support for extracting phone numbers, MEI, ICCID, and IMSI" (#​3182) by @​labo-flg in #​5684

Full Changelog: 6.9.11...6.9.12

---

Configuration

📅 Schedule: (in timezone Europe/Paris)

• Branch creation
  • "after 10pm every weekday,every weekend,before 5am every weekday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[Copilot]

Pull request overview

This PR updates the external-import/dogesec-siemrules connector’s Docker Compose configuration to run a newer published container image, keeping the local deployment aligned with the current connector release stream.

Changes:

• Bump opencti/connector-dogesec-siemrules image tag from 6.7.7 to 6.9.29 in the connector’s docker-compose.yml.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (6.9.29). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.