Release: Merge back 2.45.0 into dev from: master-into-dev/2.45.0-2.46.0-dev

[github-actions]

Release triggered by Maffooch

[dryrunsecurity]

DryRun Security Summary

The text summarizes security findings in the DefectDojo project, including dependency management risks, information disclosure issues, image reference vulnerabilities, and a new global code review rule, with no critical vulnerabilities detected.

Expand for full summary

Summary: The provided summaries cover various documentation and configuration updates for the DefectDojo project, primarily focusing on version increments, documentation changes, and user management features.

Security Findings:

1. Dependency Management Risk in components/package.json

   • External dependencies sourced from GitHub using wildcard versions (#*)
   • Risk: Potential introduction of unvetted dependency versions

2. Information Disclosure in .github/pr-reminder.py

   • Exposed personal email address ([email protected])
   • Risk: Potential privacy and information leakage

3. Image Reference Security in docs/content/en/customize_dojo/user_management/pro_permissions_overhaul.md

   • External image path reference
   • Potential risk of inadvertent information disclosure through UI images

4. CODEOWNERS Global Review Rule

   • Added global review rule (* @Maffooch @mtesauro)
   • Potential security improvement by ensuring all code changes are reviewed

No critical or high-severity vulnerabilities were identified in these patches.

View PR in the DryRun Dashboard.