# What changed in cartography > 74 changes in cartography 0.141 to 0.143 from its official release notes, upgrade guides and advisories: 2 breaking, 2 security, 44 new APIs and options. Each one cited. Sources checked 2026-10-21. HTML: https://unstale.sh/pypi/cartography/ To see which of these apply to a repository, run `npx @unstale/cli init` in it. ## cartography 0.143 ### Breaking changes - Malformed timestamps now cause failure instead of being treated as absent. (0.143.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.143.0) ### Security - Adds security review rules for Zoom. (0.143.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.143.0) ### New APIs and options - Adds DISA Okta IDaaS STIG checks. (0.143.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.143.0) - Links ECR images to their source repositories through CodeBuild builds. (0.143.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.143.0) - Cartography now ingests GitHub organization security settings and repository secret scanning. (0.143.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.143.0) - Adds rules for GitHub security configurations. (0.143.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.143.0) - Cartography now ingests installed GitHub Apps and webhooks. (0.143.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.143.0) - Cartography now ingests Okta API token metadata. (0.143.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.143.0) - Cartography now ingests Okta network zones. (0.143.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.143.0) - Cartography now ingests Okta policies and policy rules. (0.143.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.143.0) - Cartography now ingests Okta System Log streams. (0.143.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.143.0) - Cartography now inventories Zoom access and security policies. (0.143.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.143.0) - Cartography now inventories Zoom meeting and recording security. (0.143.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.143.0) ### Behavior and default changes - AWS image provenance now prefers CodeBuild variables, and the build matcher is slimmer. (0.143.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.143.0) ### Fixes and other changes - Prevents truncated vulnerability fetches from mass-deleting findings. (0.143.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.143.0) - Fixes a regression in organizations.sync. (0.143.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.143.0) - GCP sync skips unsupported Vertex AI locations and MethodNotImplemented responses. (0.143.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.143.0) ## cartography 0.142 ### New APIs and options - AWS IAM policies are fetched with GetAccountAuthorizationDetails. (0.142.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.142.0) - AWS Inspector Finding now includes CVSS vectors and scores. (0.142.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.142.0) - Microsoft integration adds delegated Entra authentication. (0.142.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.142.0) - Microsoft integration now ingests Entra user sign-in activity. (0.142.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.142.0) - The Fact anchor check is now exposed as a public API for rule authors. (0.142.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.142.0) - Jira inventory now includes Cloud project access and admin groups. (0.142.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.142.0) - Adds a Microsoft option for selective syncs. (0.142.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.142.0) - Notion integration adds identity and public page inventory. (0.142.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.142.0) - Okta integration adds device ingestion. (0.142.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.142.0) - GitHub ingestion maps SAML identities to canonical users. (0.142.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.142.0) - Zendesk integration adds user and legacy API key inventory. (0.142.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.142.0) - Zoom inventory now includes account users and their assigned plan types. (0.142.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.142.0) ### Behavior and default changes - Slack ingestion now includes accessible private channels. (0.142.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.142.0) - Syft cataloger evidence is now stored on DEPLOYED. (0.142.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.142.0) - load() and load_matchlinks() now accept iterables. (0.142.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.142.0) ### Fixes and other changes - Ingestion skips an unsupported Bedrock Agent region. (0.142.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.142.0) - AWS ingestion supports GovCloud partitions. (0.142.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.142.0) - Azure ingestion supports the azure-mgmt-eventhub 12 model shape. (0.142.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.142.0) - Salesforce ingestion skips connected apps that are inaccessible. (0.142.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.142.0) - ECR image layer sync recovers from expired STS credentials. (0.142.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.142.0) - AWS ingestion preserves ECS inventory after transient regional failures. (0.142.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.142.0) - AWS ingestion avoids false ELBV2 exposure caused by overlapping private IPs. (0.142.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.142.0) - Snowflake ingestion supports inherited grants and corrects collection setup. (0.142.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.142.0) - Netlify membership payloads now unwrap MongoDB extended JSON. (0.142.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.142.0) - Subimage ingestion parses Neo4j users from items payloads. (0.142.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.142.0) - Scaleway ingestion supports the SDK 2.12.0 model and ingests its new security fields. (0.142.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.142.0) ## cartography 0.141 ### Breaking changes - Public parameter catalogs are now opt-in. (0.141.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.141.0) ### Security - Hardens Tenable ingestion and aligns it with conventions. (0.141.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.141.0) ### New APIs and options - Adds AWS Transit Gateway route table ingestion. (0.141.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.141.0) - Cartography can ingest BBOT scan reports. (0.141.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.141.0) - Adds project exclusions for GCP organizations and folders. (0.141.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.141.0) - Adds support for GCP SSL policies. (0.141.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.141.0) - Adds support for GCP target proxies. (0.141.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.141.0) - Adds ingestion of GCP VPC peerings. (0.141.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.141.0) - Adds ingestion of GCP VPN tunnels. (0.141.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.141.0) - Adds a Huntress EDR intel module. (0.141.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.141.0) - Introspection now exposes inherited materialized ontology relationships. (0.141.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.141.0) - Computes internet exposure for Scaleway, Railway, Modal, Netlify, Supabase, Cloudflare, and Vercel. (0.141.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.141.0) - Maps container access to persistent volume claims. (0.141.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.141.0) - Adds ingestion of Kubernetes GPU and persistent storage. (0.141.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.141.0) - Adds a Miradore MDM intel module. (0.141.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.141.0) - Adds an optional extra for the Rust Bolt codec. (0.141.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.141.0) - Adds an Orca Security module. (0.141.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.141.0) - Adds ingestion of Railway deployment source revisions. (0.141.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.141.0) - Models Railway filesystem snapshots. (0.141.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.141.0) - Adds Web Hosting ingestion for Scaleway. (0.141.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.141.0) - Adds a Snowflake intel module. (0.141.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.141.0) - Adds ingestion of Trivy filesystem scan reports. (0.141.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.141.0) - Cartography can ingest zizmor GitHub Actions audit reports. (0.141.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.141.0) ### Performance - Avoids paying the full backoff after dependency graph timeouts recover. (0.141.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.141.0) - Resolves tag digests before fetching container manifests. (0.141.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.141.0) - Adds an index on PackageVersion.name. (0.141.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.141.0) ### Fixes and other changes - Reduces stale analysis windows. (0.141.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.141.0) - Bounds Neo4j transaction memory for the CVE metadata ENRICHES fan-out. (0.141.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.141.0) - Identity fields now uniquely key each fact's query rows. (0.141.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.141.0) - Tolerates transport errors when a bucket's region is unreachable. (0.141.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.141.0) - Handles null reachability in the SCA vulnerability transform. (0.141.0) — [release notes](https://github.com/cartography-cncf/cartography/releases/tag/0.141.0)