v1.9.4

What's Changed

Features

Windows watchdog

• refactor power_event_watcher for configurable subscriber behavior by @zackattack01 in #1764
• windows restart service by @zackattack01 in #1681
• watchdog installation path updates by @zackattack01 in #1787

Kolide ATC

• Store configuration for Kolide custom ATC tables by @RebeccaMahany in #1761
• [KATC] Prepare ee/indexeddb for use in KATC tables by @RebeccaMahany in #1767
• [Kolide ATC] Construct KATC tables and add support for Firefox extension data by @RebeccaMahany in #1763
• [KATC] Add snake case row transform step by @RebeccaMahany in #1765
• [KATC] Backfill tests by @RebeccaMahany in #1766
• [KATC] Add support for .indexeddb.leveldb files by @RebeccaMahany in #1769
• [KATC] Update config schema, including overlays by @RebeccaMahany in #1772
• Handle booleans when deserializing firefox extension data by @RebeccaMahany in #1777
• [KATC] Set immutable option when opening sqlite db by @RebeccaMahany in #1781
• [KATC] Do not allow indexeddb row data to be overwritten by @RebeccaMahany in #1785
• [KATC/IndexedDB] Handle padding after property name by @RebeccaMahany in #1786

Action to force full control data fetch

• Add new action type force_full_control_data_fetch by @RebeccaMahany in #1779

Bug fixes

• Try both --output=json and --json=short when running loginctl list-sessions output by @RebeccaMahany in #1759
• check for dbus channel open and fix initialActorError logging by @zackattack01 in #1774
• Prevent osquery instance restarts while instance is still launching by @RebeccaMahany in #1778
• Don't store hashes for unknown subsystems by @RebeccaMahany in #1780
• Check for known subsystem against consumers and subscribers by @RebeccaMahany in #1782
• Add new values to kolide_remotectl by @Micah-Kolide in #1783

Build/CI

• Remove soon-to-be deprecated macos-11 runner and add macos-14 by @RebeccaMahany in #1760
• Reenable sloglint now that golangci-lint includes sloglint 0.7.1 by @RebeccaMahany in #1733
• Upgrade actions to versions that run on node20 by @RebeccaMahany in #1771

General

• remove extra line by @James-Pickett in #1757
• Bump golang.org/x/image from 0.10.0 to 0.18.0 by @dependabot in #1762

Full Changelog: v1.8.1...v1.9.4