Upgrading

Release specific upgrading instructions

Docker-compose

When you deploy a vanilla docker-compose, it will create a persistent volume for your MySQL database. As long as your volume is there, you should not lose any data.

Using docker images provided in DockerHub

The generic upgrade method for docker-compose are as follows:

  • Pull the latest version

    docker pull defectdojo/defectdojo-django:latest
    docker pull defectdojo/defectdojo-nginx:latest
    
  • If you would like to use a version other than the latest, specify the version (tag) you want to upgrade to:

    docker pull defectdojo/defectdojo-django:1.10.2
    docker pull defectdojo/defectdojo-nginx:1.10.2
    
  • If you would like to use alpine based images, you specify the version (tag) you want to upgrade to:

    docker pull defectdojo/defectdojo-django:1.10.2-alpine
    docker pull defectdojo/defectdojo-nginx:1.10.2-alpine
    
  • Go to the directory where your docker-compose.yml file lives

  • Stop DefectDojo: ./dc-stop.sh

  • Re-start DefectDojo, allowing for container recreation: ./dc-up-d.sh

  • Database migrations will be run automatically by the initializer. Check the output via docker-compose logs initializer or relevant k8s command

  • If you have the initializer disabled (or if you want to be on the safe side), run the migration command: docker-compose exec uwsgi /bin/bash -c "python manage.py migrate"

Building your local images

If you build your images locally and do not use the ones from DockerHub, the instructions are the same, with the caveat that you must build your images first.

  • Pull the latest DefectDojo changes

    git fetch
    git pull
    git merge origin/master
    

Then replace the first step of the above generic upgrade method for docker-compose with: docker-compose build

godojo installations

If you have installed DefectDojo on “iron” and wish to upgrade the installation, please see the instructions in the repo.

Upgrade notes for each release


Upgrading to DefectDojo Version 2.34.x

Breaking Change for AWS_Scout2.

Upgrading to DefectDojo Version 2.33.x

breaking change

Upgrading to DefectDojo Version 2.32.x

Breaking change for Removal of OpenAPI 2.0 Swagger

Upgrading to DefectDojo Version 2.31.x

breaking change

Upgrading to DefectDojo Version 2.30.x

Breaking Change for Auditlog.

Upgrading to DefectDojo Version 2.29.x

No special instructions.

Upgrading to DefectDojo Version 2.28.x

No special instructions.

Upgrading to DefectDojo Version 2.27.x

No special instructions.

Upgrading to DefectDojo Version 2.26.x

No special instructions.

Upgrading to DefectDojo Version 2.25.x

No special instructions.

Upgrading to DefectDojo Version 2.24.x

No special instructions.

Upgrading to DefectDojo Version 2.23.x

breaking change

Upgrading to DefectDojo Version 2.22.x

No special instructions.

Upgrading to DefectDojo Version 2.21.x

No special instructions.

Upgrading to DefectDojo Version 2.20.x

No special instructions.

Upgrading to DefectDojo Version 2.19.x

breaking change

Upgrading to DefectDojo Version 2.18.x

instructions for helm chart

Upgrading to DefectDojo Version 2.17.x

No special instructions.

Upgrading to DefectDojo Version 2.16.x

No special instructions.

Upgrading to DefectDojo Version 2.15.x

No special instructions.

Upgrading to DefectDojo Version 2.13.x

instructions for helm chart and others

Upgrading to DefectDojo Version 2.12.x

breaking change

Upgrading to DefectDojo Version 2.10.x

breaking change

Upgrading to DefectDojo Version 2.9.x

breaking change for APIv2

Upgrading to DefectDojo Version 2.8.x

breaking changes

Upgrading to DefectDojo Version 2.7.x

breaking change

Upgrading to DefectDojo Version 2.6.x

No special instructions.

Upgrading to DefectDojo Version 2.5.x

legacy authorization removed

Upgrading to DefectDojo Version 2.4.x (Security Release)

security Release

Upgrading to DefectDojo Version 2.3.x

No special instructions.

Upgrading to DefectDojo Version 2.2.x

No special instructions.

Upgrading to DefectDojo Version 2.0.x

breaking changes

Upgrading to DefectDojo Version 1.15.x

hashcode calculation logic has changed

Upgrading to DefectDojo Version 1.14.x

hashcode calculation logic has changed

Upgrading to DefectDojo Version 1.13.x

hashcode calculation logic has changed

Upgrading to DefectDojo Version 1.12.x

security release

Upgrading to DefectDojo Version 1.11.x

security release

Upgrading to DefectDojo Version 1.10.x

security release + breaking changes

Upgrading to DefectDojo Version 1.9.3

security release

Upgrading to DefectDojo Version 1.8.0

fix buildwatson create_endpoint_status

Upgrading to DefectDojo Version 1.7.0

multiple instructions

Upgrading to DefectDojo Version 1.3.1

multiple instructions

Upgrading to DefectDojo Version 1.2.9

multiple instructions

Upgrading to DefectDojo Version 1.2.8

multiple instructions

Upgrading to DefectDojo Version 1.2.4

multiple instructions

Upgrading to DefectDojo Version 1.2.3

multiple instructions

Upgrading to DefectDojo Version 1.2.2

multiple instructions

Last modified November 20, 2023: Docs: Split upgrade notes (#8983) (2abc29f30)