Skip to content

feat: Upgrade to pySigma v1.0.0 - #28

Merged
suryamajhi merged 1 commit into
logpoint:mainfrom
vl43den:pysigma-v1-upgrade
Feb 20, 2026
Merged

suryamajhi merged 1 commit into
logpoint:mainfrom
vl43den:pysigma-v1-upgrade

Conversation

@vl43den

@vl43den vl43den commented Dec 29, 2025 •

Copy link
Copy Markdown
Contributor

Description

This PR upgrades the backend to support pySigma v1.0.0.

Tested locally: all existing tests pass. Based on current main (including #23 and #26). This upgrade enables proper snake_case field mapping using the new FieldFunctionTransformation API (pySigma#309).

Note: This is the first of two PRs, split per @suryamajhi feedback on #27. The Linux pipeline will follow in a separate PR after the upgrade can be merged.

Changes

Dependency Updates

  • Upgraded pySigma from 0.11.23 to 1.0.0
  • Minimum Python version changed from 3.9 to 3.10
  • Updated poetry.lock
  • Removed Python 3.9 from CI test matrix

Code Refactoring

  • Replaced custom SnakeCaseMappingTransformation class with pySigma's built-in FieldFunctionTransformation
  • Refactored windows.py, azure.py, and m365.py pipelines

Files Changed

File Change
pyproject.toml Updated dependencies
poetry.lock Regenerated
.github/workflows/test.yml Removed Python 3.9
sigma/pipelines/logpoint/windows.py Refactored to use FieldFunctionTransformation
sigma/pipelines/logpoint/azure.py Refactored to use FieldFunctionTransformation
sigma/pipelines/logpoint/m365.py Refactored to use FieldFunctionTransformation

Breaking Change

  • Minimum Python version is now 3.10 (Python 3.9 support dropped)

- Update pySigma dependency from ^0.11.23 to ^1.0.0
- Bump minimum Python version from 3.9 to 3.10
- Refactor pipelines to use FieldFunctionTransformation (new pySigma API)
  - Remove custom SnakeCaseMappingTransformation class from windows.py
  - Replace with built-in FieldFunctionTransformation in windows.py, azure.py, m365.py
- Update CI workflow to test Python 3.10, 3.11, 3.12

@suryamajhi suryamajhi left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good. Thank you for the contribution.

@suryamajhi
suryamajhi merged commit e1ebff1 into logpoint:main Feb 20, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants