Defect Dojo 2.56.2 Released with Performance Improvements, Bug Fixes, and API Enhancements

Valentijn S. · 2026-03-16T16:18:33.635Z

Defect Dojo 2.56.2 🌈 (https://github.com/DefectDojo/django-DefectDojo/releases/tag/2.56.2) was just released: Please consult the Upgrade notes in the documentation (https://docs.defectdojo.com/releases/os_upgrading/upgrading_guide/) for specific instructions for this release, and general upgrade instructions. Below is an automatically generated list of all PRs merged since the previous release. Changes since 2.56.1 • Update PR template to reflect Ruff code compliance @valentijnscholten (https://github.com/valentijnscholten) (#14507 (https://github.com/DefectDojo/django-DefectDojo/pull/14507)) • Locations V3: add import performance test and autocorrect counts @valentijnscholten (https://github.com/valentijnscholten) (#14501 (https://github.com/DefectDojo/django-DefectDojo/pull/14501)) • docs: document BuildKit as a prerequisite for Docker Compose builds @valentijnscholten (https://github.com/valentijnscholten) (#14503 (https://github.com/DefectDojo/django-DefectDojo/pull/14503)) • chore: normalize line endings to LF (CRLF -> LF) @valentijnscholten (https://github.com/valentijnscholten) (#14515 (https://github.com/DefectDojo/django-DefectDojo/pull/14515)) • [docs] march pro changelog, Iriusrisk Connector documentation @paulOsinski (https://github.com/paulOsinski) (#14499 (https://github.com/DefectDojo/django-DefectDojo/pull/14499)) • prefetching locations when building dedupe candidate scope queryset @dogboat (https://github.com/dogboat) (#14483 (https://github.com/DefectDojo/django-DefectDojo/pull/14483)) • remove libtiff install from Dockerfiles @dogboat (https://github.com/dogboat) (#14485 (https://github.com/DefectDojo/django-DefectDojo/pull/14485)) • fix: risk acceptance proof download throws 500 @valentijnscholten (https://github.com/valentijnscholten) (#14478 (https://github.com/DefectDojo/django-DefectDojo/pull/14478)) • bugfix(metrics): closed findings counter always shows 0 when no new findings are imported @vvpoglazov (https://github.com/vvpoglazov) (#14464 (https://github.com/DefectDojo/django-DefectDojo/pull/14464)) • fix(tests): prevent tag inheritance tests from polluting dev Celery queue @valentijnscholten (https://github.com/valentijnscholten) (#14493 (https://github.com/DefectDojo/django-DefectDojo/pull/14493)) • fix: endpoints not removable from finding via Edit Finding form @valentijnscholten (https://github.com/valentijnscholten) (#14460 (https://github.com/DefectDojo/django-DefectDojo/pull/14460)) • [docs] append "pro" and "open source" to article names @paulOsinski (https://github.com/paulOsinski) (#14432 (https://github.com/DefectDojo/django-DefectDojo/pull/14432)) • feat: run single integration tests from dev mode @valentijnscholten (https://github.com/valentijnscholten) (#14486 (https://github.com/DefectDojo/django-DefectDojo/pull/14486)) • add lychee: ci test for 404s in docs @paulOsinski (https://github.com/paulOsinski) (#14440 (https://github.com/DefectDojo/django-DefectDojo/pull/14440)) • chore: add .gitattributes to enforce LF line endings @valentijnscholten (https://github.com/valentijnscholten) (#14448 (https://github.com/DefectDojo/django-DefectDojo/pull/14448)) • Run dependabot so it doesnt interfere with release ops @rossops (https://github.com/rossops) (#14477 (https://github.com/DefectDojo/django-DefectDojo/pull/14477)) 🚩 Database migration • Notifications: Clean up duplicate system notification entries @Maffooch (https://github.com/Maffooch) (#14488 (https://github.com/DefectDojo/django-DefectDojo/pull/14488)) 🚀 API features and enhancements • Enhance engagement close/reopen actions with permission checks @Maffooch (https://github.com/Maffooch) (#14517 (https://github.com/DefectDojo/django-DefectDojo/pull/14517)) • Add authorization check to link_engagement action @Maffooch (https://github.com/Maffooch) (#14504 (https://github.com/DefectDojo/django-DefectDojo/pull/14504)) • feat: allow sorting endpoints by active findings count @valentijnscholten (https://github.com/valentijnscholten) (#14462 (https://github.com/DefectDojo/django-DefectDojo/pull/14462)) • api: load jira custom_fields as json @paulOsinski (https://github.com/paulOsinski) (#14494 (https://github.com/DefectDojo/django-DefectDojo/pull/14494)) • add notes endpoint to RiskAcceptanceViewSet @paulOsinski (https://github.com/paulOsinski) (#14487 (https://github.com/DefectDojo/django-DefectDojo/pull/14487)) 🖌️ Updates in UI • Fix finding title HTML encoding inconsistency in All Findings view fi… @tejas0077 (https://github.com/tejas0077) (#14524 (https://github.com/DefectDojo/django-DefectDojo/pull/14524)) • feat: allow sorting endpoints by active findings count @valentijnscholten (https://github.com/valentijnscholten) (#14462 (https://github.com/DefectDojo/django-DefectDojo/pull/14462)) • fix: wrap markdown_styles in CSSSanitizer for bleach.clean() @valentijnscholten (https://github.com/valentijnscholten) (#14479 (https://github.com/DefectDojo/django-DefectDojo/pull/14479)) • feat: add additional_banners support to base template @Maffooch (https://github.com/Maffooch) (#14492 (https://github.com/DefectDojo/django-DefectDojo/pull/14492)) • feat: add Remove from Finding bulk action on View Finding page @valentijnscholten (https://github.com/valentijnscholten) (#14461 (https://github.com/DefectDojo/django-DefectDojo/pull/14461)) 🧰 Maintenance • chore(deps): bump pyjwt from 2.11.0 to 2.12.0 @dependabot (https://github.com/dependabot) (#14518 (https://github.com/DefectDojo/django-DefectDojo/pull/14518)) • chore(deps): bump pdfmake from 0.3.5 to 0.3.6 in /components @dependabot (https://github.com/dependabot) (#14495 (https://github.com/DefectDojo/django-DefectDojo/pull/14495)) Visit the release page (https://github.com/DefectDojo/django-DefectDojo/releases/tag/2.56.2) to download them.

Valentijn S.

·Mar 16, 2026 04:18 PM·

Defect Dojo 2.56.2 🌈 was just released: Please consult the Upgrade notes in the documentation for specific instructions for this release, and general upgrade instructions. Below is an automatically generated list of all PRs merged since the previous release. Changes since 2.56.1

Update PR template to reflect Ruff code compliance @valentijnscholten (#14507)
Locations V3: add import performance test and autocorrect counts @valentijnscholten (#14501)
docs: document BuildKit as a prerequisite for Docker Compose builds @valentijnscholten (#14503)
chore: normalize line endings to LF (CRLF -> LF) @valentijnscholten (#14515)
[docs] march pro changelog, Iriusrisk Connector documentation @paulOsinski (#14499)
prefetching locations when building dedupe candidate scope queryset @dogboat (#14483)
remove libtiff install from Dockerfiles @dogboat (#14485)
fix: risk acceptance proof download throws 500 @valentijnscholten (#14478)
bugfix(metrics): closed findings counter always shows 0 when no new findings are imported @vvpoglazov (#14464)
fix(tests): prevent tag inheritance tests from polluting dev Celery queue @valentijnscholten (#14493)
fix: endpoints not removable from finding via Edit Finding form @valentijnscholten (#14460)
[docs] append "pro" and "open source" to article names @paulOsinski (#14432)
feat: run single integration tests from dev mode @valentijnscholten (#14486)
add lychee: ci test for 404s in docs @paulOsinski (#14440)
chore: add .gitattributes to enforce LF line endings @valentijnscholten (#14448)
Run dependabot so it doesnt interfere with release ops @rossops (#14477)

🚩 Database migration

Notifications: Clean up duplicate system notification entries @Maffooch (#14488)

🚀 API features and enhancements

Enhance engagement close/reopen actions with permission checks @Maffooch (#14517)
Add authorization check to link_engagement action @Maffooch (#14504)
feat: allow sorting endpoints by active findings count @valentijnscholten (#14462)
api: load jira custom_fields as json @paulOsinski (#14494)
add notes endpoint to RiskAcceptanceViewSet @paulOsinski (#14487)

🖌️ Updates in UI

Fix finding title HTML encoding inconsistency in All Findings view fi… @tejas0077 (#14524)
feat: allow sorting endpoints by active findings count @valentijnscholten (#14462)
fix: wrap markdown_styles in CSSSanitizer for bleach.clean() @valentijnscholten (#14479)
feat: add additional_banners support to base template @Maffooch (#14492)
feat: add Remove from Finding bulk action on View Finding page @valentijnscholten (#14461)

🧰 Maintenance

chore(deps): bump pyjwt from 2.11.0 to 2.12.0 @dependabot (#14518)
chore(deps): bump pdfmake from 0.3.5 to 0.3.6 in /components @dependabot (#14495)

Visit the release page to download them.

🙌1