## projectdiscovery/nuclei — v3.8.0…v3.9.0

_85 commits._

### Features
- **Merge pull request #7388 from projectdiscovery/dwisiswant0/feat/js/add-wmi-tsch-scmr-and-dcom-helper-modules** (ce28f20)
- **feat(sdk): mirror -config, -report-config, -dashboard for SDK callers** (f3308fa)
- **feat(js): add wmi, tsch, scmr, and dcom helper modules** (65d08b3)

### Fixes
- **fix(loader): warn when templates are excluded by .nuclei-ignore tags (#7452)** (85e218a)
- **fix(templates): reject unknown fields when loading JSON templates (#7453)** (da1212c)
- **fix(js): probe SMBv1 support after SMB2 negotiation (#7430)** (bbc010b)
- **fix(telnetmini): replace len<12 guard with len<48 to prevent slice-bounds panic on truncated NTLM challenge** (1aff867)
- **fix(js): abandon runtimes that outlive interrupt grace period (#7378)** (fa73d2e)
- **Merge pull request #7419 from projectdiscovery/fix-memogen** (7ee7cca)
- **fix memogen context skip and scope workflow to upstream repo** (fe70a10)
- **Merge pull request #7410 from akhilesharora/fix/raw-query-auth-strategy** (ca0c237)
- **fix(http/raw): persist QueryAuthStrategy params in ApplyAuthStrategy** (33066e8)
- **Merge pull request #7397 from projectdiscovery/dwisiswant0/fix/expressions/prefer-exact-placeholders-over-exprs** (0cc660c)
- **fix(runner): suppress redundant "upload disabled" warning on default scans** (f2c95ef)
- **fix(reporting/gitlab): bump client-go to v1.9.1, widen IDs to int64** (ddcae35)
- **fix(runner): restore nolint on deprecated ZTLS flag binding** (642887e)
- **fix(expressions): prefer exact placeholders over exprs** (b4a9e0a)
- **Merge pull request #7383 from projectdiscovery/dwisiswant0/fix/workflow/propagate-context-to-child-race-steps** (397ffaa)
- **Merge pull request #7322 from projectdiscovery/dwisiswant0/fix/interactsh/serialize-InternalEvent-access** (89d0e65)
- **fix(workflow): propagate context to child & race steps** (805bcfe)
- **fix(runner): write unsigned-templates WRN to stderr** (1f8dd03)
- **fix lint** (7926e22)
- **fix lint** (10831d6)
- **Merge pull request #7361 from projectdiscovery/fix/jira-close-transition-target-status** (b99ce57)
- **fix(reporting/jira): match status-not against transition target status name** (cd1bfe8)
- **fix comment, add [ to pattern, add thread-safe disclaimed even though modifying filter was always not-thread safe** (ad91d5d)
- **fix(interactsh): serialize `InternalEvent` access** (68e49a7)

### Backend
- **Merge pull request #7444 from projectdiscovery/dev** (ffbb05b)
- **bump version** (7414bcb)
- **Merge pull request #7440 from projectdiscovery/dependabot/github_actions/dev/workflows-c303e18619** (1c96129)
- **Merge pull request #7425 from tejgokani/test/telnetmini-coverage** (0bc707a)
- **downgrading gologger** (840c0ff)
- **Merge pull request #7414 from projectdiscovery/chore/deps-bump-and-govaluate-switch** (9330f01)
- **Merge pull request #7393 from projectdiscovery/sdk-upload** (76bf0f3)
- **extending tests** (d68a5ea)
- **Merge pull request #7405 from gugacyber/dev** (be35ec6)
- **docs general upadte** (6c1bf80)
- **use local samba endpoint** (5675f51)
- **revert(sdk): keep CLI untouched, restore original PDCP disabled message** (f783605)
- **Merge branch 'dev' into sdk-upload** (fbf7d00)
- **Merge pull request #7398 from projectdiscovery/gitlab-tracker-v1** (7bded8a)
- **adding protocols redirect (#7296)** (ed7cec5)
- **Merge pull request #7356 from projectdiscovery/feat-impacket** (54f002d)
- **Merge pull request #7379 from projectdiscovery/bugfix-7374-dns-vars** (7148ff9)
- **fixing dns vars** (637036e)
- **Merge pull request #7340 from mikhail5555/feature/improved-filter-performance** (a3c07e3)
- **finalizing** (86cc092)
- **Merge pull request #7354 from projectdiscovery/dependabot/github_actions/dev/workflows-b745ac94e4** (a3b9a47)
- **remove unnecessary or misleading comments from bench** (ec5f650)
- **split exact matches and pattern matches for increased performance during lookup** (643a64c)

### Tests
- **test(telnetmini): address CodeRabbit review — add 48-byte boundary test and clean up wrong-type input** (7910526)
- **test(sdk): drop DisableUpdateCheck() from new lib/config_test.go** (d5d9eed)
- **test(expressions): add TestEvaluateHyphenatedPlaceholderNames** (4f3e77f)
- **test(js): add goexec tests** (ce50479)
- **test(workflow): added unit tests for parent-to-child** (3e996eb)

### Docs
- **docs: fix broken cloud scanning link (#7413)** (efcf23c)
- **docs(pt-br): update README_PT-BR.md to reflect current project description and features** (d56f5a7)
- **docs(runner): tighten SetupPDCPUpload disabled-branch comment to one line** (0fc90a6)
- **docs(sdk): trim PR comments, fix two review nits** (44c63a8)
- **docs: update syntax & JSON schema 🤖** (2da8669)

### Chore
- **chore(deps): bump the modules group with 4 updates (#7450)** (16743c6)
- **refactor(js): centralize runtime session handling (#7449)** (f44027e)
- **chore(deps): bump crate-ci/typos in the workflows group (#7451)** (6b4b2d8)
- **refactor: use path-aware filesystem containment checks (#7420)** (20cbf0b)
- **chore(deps): drop docker/docker by bumping gozero and testcontainers (#7447)** (ca22175)
- **chore(deps): bump the modules group with 7 updates (#7439)** (b625d9a)
- **chore(deps): bump crate-ci/typos in the workflows group** (2376f60)
- **chore(deps): bump crate-ci/typos in the workflows group (#7424)** (3684849)
- **chore(deps): bump the modules group with 13 updates (#7423)** (408ebe1)
- **chore(deps): bump github.com/go-git/go-git/v5 (#7416)** (28752a7)
- **chore(deps): bump pdsec modules; switch to projectdiscovery/govaluate and aurora v4** (1ec64a3)
- **chore(deps): bump crate-ci/typos in the workflows group (#7412)** (b50980c)
- **refactor(sdk): replace goflags overlay with RuntimeConfig struct** (609cf3d)
- **refactor(sdk): dedupe config loaders, drop threadSafePerScan mode** (db15637)
- **chore(deps): bump github.com/go-git/go-git/v5 (#7394)** (d65c795)
- **chore: bump github.com/RedTeamPentesting/adauth v0.5.0 => v0.5.4-0.20260511073005-3d18e8a5a687** (940ca60)
- **chore(deps): bump crate-ci/typos in the workflows group (#7392)** (0a7100b)
- **chore(deps): bump the modules group across 1 directory with 4 updates (#7372)** (bdf7500)
- **chore(deps): bump crate-ci/typos in the workflows group (#7373)** (a4da890)
- **chore(deps): bump the modules group with 7 updates (#7366)** (b638576)
- **chore(deps): bump go.opentelemetry.io/otel (#7362)** (5450b03)
- **chore(deps): bump github.com/Azure/go-ntlmssp (#7359)** (e1f09e9)
- **chore(deps): bump the modules group with 3 updates (#7353)** (ad4f3ff)
- **chore(deps): bump crate-ci/typos in the workflows group** (c68d88d)
- **chore(deps): bump github.com/go-git/go-git/v5 (#7350)** (3a2ab5c)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/projectdiscovery/nuclei?utm_source=github-action)._