update changelog, add changelog link to navbar

[paulOsinski]

Adds Pro release notes for 2.41.3, and adds a 'Changelog' link to the documentation navbar to locate the changelog more easily.

[dryrunsecurity]

DryRun Security Summary

The pull request focuses on documentation and changelog updates for DefectDojo, introducing new features and improvements across the API, Beta UI, and connectors, which should be carefully reviewed for potential security implications.

Expand for full summary

Summary:

The code changes in this pull request are primarily focused on updates to the documentation and changelog for the DefectDojo project. While these changes do not directly introduce any security vulnerabilities, it is important to review them carefully to ensure that they do not expose sensitive information or introduce any unintended security implications.

The notable changes from a security perspective include the addition of a new API endpoint for request/response pairs, improvements to the Findings table in the Beta UI, updates to the deduplication logic in certain tools, the addition of new connector integrations, and the ability to add anonymous questionnaires to an Engagement. These changes should be reviewed to ensure that they are implemented securely and do not introduce any new attack surfaces or vulnerabilities.

Files Changed:

1. docs/config/_default/menus/menus.en.toml: This file has been updated to add a new menu item for the "Changelog" section of the documentation. This change does not directly introduce any security concerns, as it is related to the documentation structure and navigation.

2. docs/content/en/changelog/changelog.md: This file contains the changelog for the DefectDojo Pro (Cloud Version) product. The changes include several new features and improvements across the API, Beta UI, Connectors, Dashboards, and various tools. The security-relevant changes include the addition of a new /request_response_pairs API endpoint, improvements to the Findings table, updates to the deduplication logic in certain tools, the addition of new connector integrations, and the ability to add anonymous questionnaires to an Engagement. These changes should be carefully reviewed to ensure that they are implemented securely and do not introduce any new vulnerabilities or attack vectors.

Code Analysis

We ran 9 analyzers against 2 files and 0 analyzers had findings. 9 analyzers had no findings.

View PR in the DryRun Dashboard.

[mtesauro]

Approved