Skip to content

v3.4 Release Notes

This document describes all new features and changes in the release. The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

Release Overview

The functionality of this app has been moved to Nautobot as of version 3.0.0. The 3.4.x release of this app will continue to support Nautobot v2.4.x and will be maintained for security and critical bug fixes only. All new feature requests for data validation should go directly to Nautobot.

  • Fixed Python 3.12 compatibility issues.
  • Changed minimum Nautobot version to 2.4.20.
  • Dropped support for Python 3.9.

v3.4.1 (2026-10-13)

Security

  • GHSA-59j7-mhqh-vq5w - Added a timeout to regular expression evaluation in the data validation engine, to protect against denial of service (REDoS) due to an overly-complex or maliciously crafted regular expression.
  • GHSA-x5gx-4x5h-3rp5 - Stopped the data being validated from influencing the structure of a RegularExpressionValidationRule regular expression that uses Jinja2 context processing, to protect against bypass of a validation rule.

Changed

  • GHSA-x5gx-4x5h-3rp5 - Values interpolated into a RegularExpressionValidationRule regular expression via Jinja2 context processing are now escaped and treated as literal text, so that the data being validated can no longer alter the structure of the pattern. Rules that deliberately drew regular expression syntax from a field value will no longer behave the same way.

Dependencies

  • GHSA-59j7-mhqh-vq5w - Added regex as an explicit dependency to support time-bounded evaluation of regular expressions.

Housekeeping

  • Rebaked from the cookie nautobot-app-v2.7.2.
  • Rebaked from the cookie nautobot-app-v2.7.3.

v3.4.0 (2025-12-05)

Fixed

  • #204 - Fixed Python 3.12 compatibility issues.
  • #218 - Updated rendering of boolean fields in rule tables to match the Nautobot standard.

Documentation

  • #207 - Added Analytics GTM template override only to the public ReadTheDocs build.

Housekeeping

  • Rebaked from the cookie nautobot-app-v2.7.0.
  • Rebaked from the cookie nautobot-app-v2.7.1.