Skip to content

0.6.7

Choose a tag to compare

@github-actions github-actions released this 01 May 22:53
· 280 commits to main since this release

NEW Added virtual tables allowing for indexes to be accessible as one giant table instead of many small ones

  • gufi_vt_* (gufi_vt_treesummary, gufi_vt_summary, gufi_vt_entries, gufi_vt_pentries, gufi_vt_vrsummary, and gufi_vt_vrpentries)
    • Fixed schemas
    • Can query directly
    • Testing with SQLAlchemy and PugSQL
      • GUFI can now be queried by tools that use SQLAlchemy
  • gufi_vt
    • User defined schema
    • Requires CREATE VIRTUAL TABLE before querying
    • Testing with gufi_sqlite3
  • Added -u flag to gufi_query to support virtual tables

NEW Added virtual table run_vt allowing for arbitrary commands to be run with popen(3) and the results used as a SQLite 3 table.

  • Requires CREATE VIRTUAL TABLE before querying

NEW UDFs for running arbitrary commands with popen(3) and get stdout as a single SQL value

  • strop - return the first line of the output
  • intop - expects to find an integer at the start of the first line of output
  • blobop - return all of the output

NEW Query Replacement in gufi_query -T, -S, and -E

  • % Formatting
    • Replace appearances of %n, %i , and %s, with the current directory name, the current directory path, and the source prefix (requires -p), respectively
  • User Strings
    • Store SQL values using the setstr('key', value) function and retrieve them in a later query with {key}
    • Per-thread state

NEW AI Capabilities

querydbs

  • Changed from C to Python wrapper around gufi_sqlite3

Miscellaneous

  • C11 support is now required
  • CMake minimum version is now 3.16.0
    • Updated GitHub Actions Older CMake build
  • Completely removed -i and -t flags
  • SQLite 3 is now built with FTS5
    • Users should delete previous sqlite3 build and install, and rebuild
  • Updated sqlite3-pcre entry point to sqlite3_pcre2_init
    • Users should delete previous sqlite3-pcre build and install, and rebuild
  • Updated min/max level to be closer to how find(1) works
  • Removed test macros OPENDB, ADDQUERYFUNCS, SQL_EXEC
  • NEW thread_id UDF
  • Optional bash completion script install
    • enabled by default; Run cmake -DBASH_COMPLETION=Off to disable
  • LaTeX documentation updates
  • Previously installed jemalloc can now be used if found

GitHub Actions

  • Fixed macOS tests
    • Previously was building but not running tests
      • Regression test scripts updates
      • Removed macOS version of copyfd - now using generic version
  • Fixed cygwin build
    • Test source tree needed permissions explicitly set
  • Added Alpine Linux Edge
  • Added cmake --install and make install tests
  • Removed Ubuntu 20.04 build