pypi / cartography

cartography

What changed in cartography 0.141 to 0.143, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-21.

2 breaking2 security44 new APIs and options3 performance4 behavior and defaults19 fixes and other

See which of these apply to your code, ranked, in your agent:

npx @unstale/cli init

cartography 0.14317 changes

Malformed timestamps now cause failure instead of being treated as absent.
0.143.0release notes

Adds DISA Okta IDaaS STIG checks.
0.143.0release notes
Links ECR images to their source repositories through CodeBuild builds.
0.143.0release notes
Cartography now ingests GitHub organization security settings and repository secret scanning.
0.143.0release notes
Adds rules for GitHub security configurations.
0.143.0release notes
Cartography now ingests installed GitHub Apps and webhooks.
0.143.0release notes
Cartography now ingests Okta API token metadata.
0.143.0release notes
Cartography now ingests Okta network zones.
0.143.0release notes
Cartography now ingests Okta policies and policy rules.
0.143.0release notes
Cartography now ingests Okta System Log streams.
0.143.0release notes
Cartography now inventories Zoom access and security policies.
0.143.0release notes
Cartography now inventories Zoom meeting and recording security.
0.143.0release notes

AWS image provenance now prefers CodeBuild variables, and the build matcher is slimmer.
0.143.0release notes

Prevents truncated vulnerability fetches from mass-deleting findings.
0.143.0release notes
Fixes a regression in organizations.sync.
0.143.0release notes
GCP sync skips unsupported Vertex AI locations and MethodNotImplemented responses.
0.143.0release notes

AWS IAM policies are fetched with GetAccountAuthorizationDetails.
0.142.0release notes
AWS Inspector Finding now includes CVSS vectors and scores.
0.142.0release notes
Microsoft integration adds delegated Entra authentication.
0.142.0release notes
Microsoft integration now ingests Entra user sign-in activity.
0.142.0release notes
The Fact anchor check is now exposed as a public API for rule authors.
0.142.0release notes
Jira inventory now includes Cloud project access and admin groups.
0.142.0release notes
Adds a Microsoft option for selective syncs.
0.142.0release notes
Notion integration adds identity and public page inventory.
0.142.0release notes
Okta integration adds device ingestion.
0.142.0release notes
GitHub ingestion maps SAML identities to canonical users.
0.142.0release notes
Zendesk integration adds user and legacy API key inventory.
0.142.0release notes
Zoom inventory now includes account users and their assigned plan types.
0.142.0release notes

Ingestion skips an unsupported Bedrock Agent region.
0.142.0release notes
AWS ingestion supports GovCloud partitions.
0.142.0release notes
Azure ingestion supports the azure-mgmt-eventhub 12 model shape.
0.142.0release notes
Salesforce ingestion skips connected apps that are inaccessible.
0.142.0release notes
ECR image layer sync recovers from expired STS credentials.
0.142.0release notes
AWS ingestion preserves ECS inventory after transient regional failures.
0.142.0release notes
AWS ingestion avoids false ELBV2 exposure caused by overlapping private IPs.
0.142.0release notes
Snowflake ingestion supports inherited grants and corrects collection setup.
0.142.0release notes
Netlify membership payloads now unwrap MongoDB extended JSON.
0.142.0release notes
Subimage ingestion parses Neo4j users from items payloads.
0.142.0release notes
Scaleway ingestion supports the SDK 2.12.0 model and ingests its new security fields.
0.142.0release notes

Adds AWS Transit Gateway route table ingestion.
0.141.0release notes
Cartography can ingest BBOT scan reports.
0.141.0release notes
Adds project exclusions for GCP organizations and folders.
0.141.0release notes
Adds support for GCP SSL policies.
0.141.0release notes
Adds support for GCP target proxies.
0.141.0release notes
Adds ingestion of GCP VPC peerings.
0.141.0release notes
Adds ingestion of GCP VPN tunnels.
0.141.0release notes
Adds a Huntress EDR intel module.
0.141.0release notes
Introspection now exposes inherited materialized ontology relationships.
0.141.0release notes
Computes internet exposure for Scaleway, Railway, Modal, Netlify, Supabase, Cloudflare, and Vercel.
0.141.0release notes
Maps container access to persistent volume claims.
0.141.0release notes
Adds ingestion of Kubernetes GPU and persistent storage.
0.141.0release notes
Adds a Miradore MDM intel module.
0.141.0release notes
Adds an optional extra for the Rust Bolt codec.
0.141.0release notes
Adds an Orca Security module.
0.141.0release notes
Adds ingestion of Railway deployment source revisions.
0.141.0release notes
Models Railway filesystem snapshots.
0.141.0release notes
Adds Web Hosting ingestion for Scaleway.
0.141.0release notes
Adds a Snowflake intel module.
0.141.0release notes
Adds ingestion of Trivy filesystem scan reports.
0.141.0release notes
Cartography can ingest zizmor GitHub Actions audit reports.
0.141.0release notes

Avoids paying the full backoff after dependency graph timeouts recover.
0.141.0release notes
Resolves tag digests before fetching container manifests.
0.141.0release notes
Adds an index on PackageVersion.name.
0.141.0release notes

Reduces stale analysis windows.
0.141.0release notes
Bounds Neo4j transaction memory for the CVE metadata ENRICHES fan-out.
0.141.0release notes
Identity fields now uniquely key each fact's query rows.
0.141.0release notes
Tolerates transport errors when a bucket's region is unreachable.
0.141.0release notes
Handles null reachability in the SCA vulnerability transform.
0.141.0release notes