4.1.0

New Features / Under the Hood improvements

• Restore extension SDK and build support (#5851)
• Documentation improvements (#5860), (#5852), (#5912), (#5954)
• Add more tests throughout the codebase (#5837), (#5832), (#5857), (#5864), (#5855), (#5869), (#5871), (#5885), (#5903), (#5879), (#5914), (#5941), (#5957)
• Allow configuration more Linux Audit settings using flags (#5953)
• Add logger_tls_max_lines flag (#5956)
• Add AWS Session Token support (#5944)

Build

• Lots of work on CPack-based packaging (#5809), (#5822), (#5823), (#5827), (#5780), (#5850), (#5843), (#5881), (#5825), (#5940), (#5951), (#5936)
• Lots of work porting Python2 to Python3 (#5846)
• Upgrade OpenSSL to 1.0.2t on all platforms (#5928)
• Use SQLite 3.29.0 on Windows and macOS (#5810)
• Use aws-sdk-cpp source-builds on Windows and macOS (#5889)
• Add various code quality checks and utilities (#5834), (#5730), (#5872)

Harderning

• Restore fuzzing harness and use oss-fuzz (#5844), (#5886), (#5910), (#5915), (#5923), (#5955), (#5963)
• Use newer RapidJSON and switch to safer iterative parsing (#5893), (#5913)

Bug Fixes

• Set Windows MSI ErrorControl to normal instead of critical (#5818)
• Wrap flagfile with quotes for Windows install flag (#5824)
• Improve submodule usages in CMake (#5850), (#5880), (#5892), (#5897), (#5907)
• Improve locking support in internal APIS (#5841), (#5906), (#5943), (#5944)
• Fixes for macOS application layer firewall tables (#5378)
• Fixes within BPF event tables (#5874)
• Refactor and improve PCI device tables on Linux (#5446)
• Implement PID indexing on Windows processes table (#5919)
• Improve WHERE IN() performance (#5924), (#5938)
• Improve the internal HTTP client (#5891), (#5946), (#5947)
• Fix Windows version codename lookup (#5887)

Table Changes

• Added table alf_services to Darwin (Apple OS X) (#5378)
• Added table connectivity to Microsoft Windows (#5500)
• Added table default_environment to Microsoft Windows (#5441)
• Added table windows_security_products to Microsoft Windows (#5479)
• Added column platform_mask (INTEGER_TYPE) to table osquery_info (#5898)