Release/v10.8.5 (#1283)

* increase blocklist for maliciuos ip alert

* Update version and changelog

* trigger actions

* replace npm install with npm ci for consistent dependency installation

* replace npm ci with npm install in Docker frontend build process

---------

Co-authored-by: Jose Angel Sanchez Velazquez <sanchezvelazquezjoseangel@gmail.com>
Co-authored-by: Manuel Abascal <mjabascal10@gmail.com>

Author: 3 people

CHANGELOG.md

@@ -1,3 +1,4 @@
-# UTMStack 10.8.4 Release Notes
+# UTMStack 10.8.5 Release Notes
 
-- Enhanced security and compliance by upgrading several internal components—most notably the update server—to exclusively support TLS 1.3.
+- Expanded the exclusion dictionary for malicious IP connection logs to reduce false positives.
+- Automatically close alerts with SOC-AI when the feature is enabled.

correlation/ti/ti.go

@@ -1,14 +1,15 @@
 package ti
 
 import (
-	"github.com/tidwall/gjson"
-	"github.com/utmstack/UTMStack/correlation/correlation"
-	"github.com/utmstack/UTMStack/correlation/utils"
 	"net"
 	"runtime"
 	"strings"
 	"sync"
 	"time"
+
+	"github.com/tidwall/gjson"
+	"github.com/utmstack/UTMStack/correlation/correlation"
+	"github.com/utmstack/UTMStack/correlation/utils"
 )
 
 type Cache map[string]bool
@@ -35,6 +36,8 @@ func blocked(log string) bool {
 		"drop",
 		"reject",
 		"deny",
+		"timeout",
+		"closed",
 	}
 
 	for _, e := range exclusionList {

version.yml

@@ -1 +1 @@
-version: 10.8.4
+version: 10.8.5