{
  "schemaVersion": "1.0",
  "product": "ShakelOps",
  "channel": "stable",
  "latestVersion": "1.2.337",
  "releaseDateUtc": "2026-10-25T04:48:38Z",
  "manualUpgradeOnly": true,
  "package": {
    "fileName": "ShakelOpsInstaller-1.2.337.zip",
    "url": "https://downloads.shakelops.shakel.org/releases/stable/ShakelOpsInstaller-1.2.337.zip",
    "sha256": "f47ec3a4e549e72c704bdd0599bac83c49e658e79b6e5c063c73889e4a129def",
    "sizeBytes": 432135474,
    "contentType": "application/zip"
  },
  "prerequisites": {
    "dotnetHostingBundle": {
      "requiredMajorVersion": 8,
      "recommendedVersion": "8.0.30",
      "fileName": "dotnet-hosting-8.0.30-win.exe",
      "url": "https://downloads.shakelops.shakel.org/prerequisites/dotnet-hosting-8.0.30-win.exe",
      "sha256": "dfdc4325ff85d81e66d45b6f27c36b1cc8e64fb57d72d1e1dcf3429377f23e3f",
      "sizeBytes": 111680928,
      "contentType": "application/vnd.microsoft.portable-executable"
    }
  },
  "gateway": {
    "fileName": "ShakelOps-GW.ova",
    "url": "https://downloads.shakelops.shakel.org/gateway/ShakelOps-GW.ova",
    "sha256": "3a8466f0ca17fdd127c1c1eeddb1456e90869e6017dc27e0d220d056dd0a7f44",
    "sizeBytes": 3828359168,
    "contentType": "application/x-virtualbox-ova"
  },
  "releaseNotes": [
    "Added the Vulnerabilities catalog with PHP2Shell, Log4j/Log4Shell, Spring4Shell, React2Shell, Text4Shell, regreSSHion, PrintNightmare, MS17-010, Heartbleed and XZ Utils checks. Collectors run authenticated read-only commands inside managed servers, without external exploit probes.",
    "Each checker has independent saved results, vendor advisory links, risk explanations and technical scope. Version evidence, incomplete coverage and vendor backports are distinguished from confirmed exploitability.",
    "The catalog shows last-scan date/time and distinct affected-server counts within the viewer's permitted scope, with inconclusive findings shown separately.",
    "Only one vulnerability scan job can run at a time across all checkers. Incompatible operating systems and administratively Offline/Maintenance servers are skipped before collection; historical evidence is preserved.",
    "Vulnerability access uses separate View and Scan permissions plus server resource-role access. Existing non-admin roles are not automatically granted new permissions.",
    "Offboarding's Target username now uses the shared AD user search, including disabled-account labels and workflow-controlled extension-attribute matching. Editing the target clears the selected account and old preview."
  ]
}