Osquery Files

What's Changed

Features

• Add table deb_package_files by @zwass in https://github.com/osquery/osquery/pull/8657
• Add system_profiler table for macOS by @zwass in https://github.com/osquery/osquery/pull/8645
• Add version collate to os_version table's version column by @Micah-Kolide in https://github.com/osquery/osquery/pull/8659
• Add entitlements column to macOS signature table by @zwass in https://github.com/osquery/osquery/pull/8666
• Add support for VSCode forks in vscode_extensions by @zwass in https://github.com/osquery/osquery/pull/8664

Bugfixes

• Fix NSInvalidArgumentException when querying connected_displays by @Synse in https://github.com/osquery/osquery/pull/8628
• Fix inconsistent counter resets due to Config::purge() by @skurpad7 in https://github.com/osquery/osquery/pull/8635
• Update linux block_device and disk_encryption source data to simple sysfs implementation by @Micah-Kolide in https://github.com/osquery/osquery/pull/8182
• Fix ATC for open Firefox databases by @zwass in https://github.com/osquery/osquery/pull/8631

Other

• libs: yara: 4.2.3 -> 4.5.4 by @LeSuisse in https://github.com/osquery/osquery/pull/8643
• Upgrading zlib to 1.3.1 by @ksykulev in https://github.com/osquery/osquery/pull/8625
• Fix build for XCode SDK 16.4 by @lucasmrod in https://github.com/osquery/osquery/pull/8640
• Update build instructions for workaround for XCode SDK > 16.3 by @lucasmrod in https://github.com/osquery/osquery/pull/8650
• Add Cursor AI editor configurations by @zwass in https://github.com/osquery/osquery/pull/8656
• Further improvement to Cursor rules by @zwass in https://github.com/osquery/osquery/pull/8662
• Update Windows build instructions by @zwass in https://github.com/osquery/osquery/pull/8661

New Contributors

• @Synse made their first contribution in https://github.com/osquery/osquery/pull/8628
• @skurpad7 made their first contribution in https://github.com/osquery/osquery/pull/8635

Full Changelog: https://github.com/osquery/osquery/compare/5.18.0...5.19.0