Release v1.13.0

Improvements

• Improved error reporting for partially corrupted EVTX files while preserving successfully recovered records.
• Continue processing remaining EVTX files when individual inputs are missing, unreadable, or corrupted.
• Report input and parsing failures to stderr and return a non-zero exit code, even with --quiet.
• Prevent duplicate processing of input files by resolving and deduplicating paths.
• Added atomic JSON, JSONL, and NDJSON exports using temporary files to prevent incomplete output from overwriting existing files.
• Improved timestamp shifting with --datasetdate, including UTC handling, negative offsets, timezone-aware timestamps, and subsecond precision.
• Added PartialExtractionError with detailed diagnostics for Python API users. The evtx2json() API also exposes recovered records through the exception.
• Added strict validation for chunk sizes and timestamp shift arguments.
• Improved resource cleanup for parsers, generators, and Elasticsearch connections when errors occur.

Dependency Updates

• Updated evtx from 0.11.1 to 0.13.1.
• Updated elasticsearch from 9.4.1 to 9.5.1.
• Updated orjson from 3.11.9 to 3.13.0.
• Updated urllib3, tqdm, and development dependencies.

Development

• Added Python 3.14 to the CI test matrix.
• Updated development containers to Python 3.14 and Elasticsearch/Kibana 9.5.1.
• Updated GitHub Actions workflows and adopted locked dependency installation with uv.
• Updated bundled third-party license notices.

Full Changelog: v1.12.0...v1.13.0

Release v1.12.0

This release was automatically created by GitHub Actions.

Release v1.11.3

This release was automatically created by GitHub Actions.

Release v1.11.1

This release was automatically created by GitHub Actions.

Release v1.11.0

This release was automatically created by GitHub Actions.

Full Changelog: v1.10.0...v1.11.0

Highlights

• Add streaming JSONL/NDJSON output to all *2json commands.
• Keep JSON as the default output format for backward
  compatibility.
• Add consistent Elasticsearch TLS options, including --ca- certs and
  --no-verify-certs.
• Improve bulk indexing failure handling and resource cleanup.
• Protect forensic input files from accidental overwrite.
• Align CLI validation, progress messages, and exit behavior.
• Improve prefetch multiprocessing memory usage.
• Update README files, CI workflows, dependency locks, and
  contract tests.
• Polish English CLI messages and documentation.

The four repositories remain independently maintained without introducing a shared runtime library.

Release v1.10.0

Changes

This release improves processing stability, resource handling, and Elasticsearch connection configuration.

• Improved chunked and multiprocessing EVTX processing
• Improved output consistency when using multiprocessing
• Improved timestamp and dataset date handling
• Improved Elasticsearch authentication and TLS verification options
• Improved file handle cleanup for CLI and Python API usage
• Improved CLI input validation
• Reduced internal serialization overhead
• Minor internal cleanup and refactoring

Release v1.9.0

This release was automatically created by GitHub Actions.

Release v1.8.0

This release was automatically created by GitHub Actions.

Release v1.7.6

This release was automatically created by GitHub Actions.

Release v1.6.1

This release was automatically created by GitHub Actions.