Features

Deprecate old cve scanners. vulners_scanner.py is the only officially supported cve scanner at this time.
Masking support for nebula data. This way you can collect environment variables and similar, but use regex to mask known secret formats to prevent secrets from getting into splunk/logstash.
New sphinx-built docs
Support for docker-built windows packages
Change the timestamp in hubble logs in splunk to epoch time
Add hubble version to grains
Refactor vulners scanner to use vulners library
Add min_splay support to scheduler
Add ability to modify console logger options

Fixes

Fix regression in nova (hubble.py) imports that prevented audits from being run
Stop hubble when package is uninstalled
Dockerfile-based packaging fixes for Windows
Removed hangtime wrapper from windows, as we can't use signals there.
Fix hubble --version when the hubble daemon is running
Disable potentially-problematic queries in osquery containing ATTACH or CURL
Write the pidfile once per minute for the running daemon in an attempt to prevent it from being lost (should improve restart success rate)