release v10.8.6

.github/workflows/v10-principal-multi-env.yml

@@ -85,7 +85,7 @@ jobs:
           GOOS=windows GOARCH=amd64 go build -o utmstack_agent_service.exe -v .
           GOOS=windows GOARCH=arm64 go build -o utmstack_agent_service_arm64.exe -v .
 
-          if [[ {{ needs.setup_deployment.outputs.tag }} != "v10-dev" ]]; then
+          if [[ ${{ needs.setup_deployment.outputs.tag }} != "v10-dev" ]]; then
             echo "Signing Windows Agent..."
             FILES_TO_SIGN=("utmstack_agent_service.exe" "utmstack_agent_service_arm64.exe")
             for file in "${FILES_TO_SIGN[@]}"; do

.github/workflows/v11-principal-production-deployment.yml

@@ -54,7 +54,6 @@ jobs:
       version_tag: ${{ github.event.inputs.version_tag }}
       event_processor_tag: ${{ github.event.inputs.event_processor_tag }}
       environment: prod
-      ghcr_token: ${{ secrets.GITHUB_TOKEN }}
     secrets:
       AGENT_SECRET_PREFIX: ${{ secrets.AGENT_SECRET_PREFIX }}
       SIGNER_TOKEN: ${{ secrets.SIGNER_TOKEN }}

CHANGELOG.md

@@ -1,4 +1,4 @@
-# UTMStack 10.8.5 Release Notes
+# UTMStack 10.8.6 Release Notes
 
 - Expanded the exclusion dictionary for malicious IP connection logs to reduce false positives.
-- Automatically close alerts with SOC-AI when the feature is enabled.
+- Added support for older Linux versions (RedHat 7, RedHat 8, Ubuntu 20.04).

correlation/ti/ti.go

@@ -38,6 +38,9 @@ func blocked(log string) bool {
 		"deny",
 		"timeout",
 		"closed",
+		"close",
+		"client-rst",
+		"server-rst",
 	}
 
 	for _, e := range exclusionList {

version.yml

@@ -1 +1 @@
-version: 10.8.5
+version: 10.8.6