4.0.0 is not released yet. This post lists what is planned for 4.0.0 today and is updated as the release takes shape.
Previous release: Release 3.32.0
What’s New
AI Assistant AI chat inside eramba that works with your data and permissions, and can create or edit items after you approve them. Available in Community too, read only.
Details here: Feature - AI Assistant
Change Management, Reviews and Attestation Approval of changes, scheduled reviews and policy attestation for security policies.
Details here: Feature - Change Management, Reviews and Attestation
Templates Templates for compliance packages, internal controls and security policies. Available in Community too.
Details here: Feature - Compliance, Control and Policies Templates
Login - Internal Migration Login moves to the new engine. Along the way, OAuth login supports other providers besides Google (requested here).
Bugs
| Issue | Summary | Ref. |
|---|---|---|
| ERA-2225 | Optional forced password change at first login | |
| ERA-2194 | Customization: choose the custom field type with icon tiles | |
| ERA-2193 | Customization: “Customize form” link in the Add Item form | |
| ERA-2178 | Activity Log is missing entries for several migrated sections | https://eramba.zendesk.com/agent/tickets/38412 |
| ERA-2149 | Shared item links ignore personal and default view settings | |
| ERA-2130 | Bulk editing Online Assessment Findings to Closed shows a validation error | https://eramba.zendesk.com/agent/tickets/38335 |
| ERA-2108 | Empty Asset Classification fields fail import validation | https://eramba.zendesk.com/agent/tickets/38223 |
| ERA-2091 | Related Documents are not displayed on the policy portal | |
| ERA-2090 | Security Incidents: system fields cannot be customized | https://eramba.zendesk.com/agent/tickets/38038 |
| ERA-2083 | Queue worker sometimes does not pick up email jobs immediately | |
| ERA-2081 | Send notification emails one per recipient instead of all recipients in CC | |
| ERA-2067 | Enforce unique email addresses for non-admin accounts | |
| ERA-2058 | LDAP connectors: fix “In Use” relations and allow deleting stale connectors | https://eramba.zendesk.com/agent/tickets/37814 |
| ERA-2002 | LDAP sync fails silently when one active LDAP group no longer exists | https://eramba.zendesk.com/agent/tickets/37589 |
| ERA-1995 | Enable control design customization in Community Edition | https://discussions.eramba.org/t/bug-controls-in-design-can-not-be-set-in-community-edition/9021 |
| ERA-1963 | SaaS update must invalidate user sessions exactly once per deployment | https://eramba.zendesk.com/agent/tickets/37567 |
| ERA-1960 | Community users have no way to find the latest image tag | |
| ERA-1936 | LDAP bind failure breaks subsequent queue worker jobs | https://eramba.zendesk.com/agent/tickets/37359 |
| ERA-1927 | SMTP STARTTLS must trust private CAs installed in the system CA store | https://eramba.zendesk.com/agent/tickets/37103 |
| ERA-1919 | Automation: increase composer timeout | |
| ERA-1918 | Automation: STDOUT rework for Account Reviews (output size limit) | https://discussions.eramba.org/t/bug-limit-in-stdout-automation/8791 |
| ERA-1805 | Deleting compliance packages runs in the background worker | |
| ERA-1706 | Docker: script to rebuild the app / switch the image | |
| ERA-1636 | Compliance Package notification recipient is missing | |
| ERA-1539 | Internal Controls: current status is not assigned correctly to ad-hoc audits | |
| ERA-1510 | Missing inline field validation for “Specific dates” when saving an Internal Control without audit date | |
| ERA-1451 | Internal Controls import template: support periodicity and automation | |
| ERA-1406 | Tags field removed from old Community installs | |
| ERA-1385 | Handle deletion of items that have related items | |
| ERA-1276 | Policy PDF download shows wrong “Updated by” | |
| ERA-1100 | Missing translations and translation improvements | |
| ERA-1065 | Custom field on the first tab of Compliance Analysis | |
| ERA-1040 | OAuth authentication method for SMTP | |
| ERA-960 | More relative dates in dynamic status conditions | |
| ERA-938 | Misleading wording of dynamic status conditions |