Skip to content

Releases: HumanSignal/label-studio

1.12.0

18 Apr 16:36
b2fb581
Compare
Choose a tag to compare

🌟 What's New

🎉 New Features

🚀 Improved Machine Learning & LLM integrations

This release streamlines the way ML models and LLMs are connected to Label Studio with a focus on security and simplified user experience. (#5570)

Using the powerful ML backend integration, users can add models and customize automated workflows for:

  • Pre-labeling: Letting ML/AI models predict labels autonomously, which can then be reviewed by human annotators.
  • Interactive labeling: An automated process that applies initial labels to data, which are then refined through manual review, enhancing the efficiency and accuracy of data annotation for machine learning models.
  • Model evaluation and fine-tuning: Used in models like the Segment Anything Model (SAM), involves a human-in-the-loop approach where the model provides initial predictions or annotations, and a human annotator interacts directly with these predictions to correct or refine them.

Label Studio users can add custom models, or reference a new examples library to connect popular models, including Segment Anything, OpenAI, GroundingDINO, select Hugging Face models, Tesseract, and more.

Updates to the ML backend integration in this release include:

  • New support for basic auth, which means users can now connect to hosted ML backends that require a password.
  • The ability to specify additional parameters to pass to the model, which means users can now easily connect to Azure-hosted OpenAI in addition to OpenAI and popular ML models.
  • An improved UI and simplified project settings, including:
    • A new Predictions section under the Annotation page of the project settings makes it easier select whether you want to use predictions or a model in your annotation workflow.
    • A new Predictions page, where you can easily upload and manage predictions.
    • Removed obsolete settings that are no longer compatible (for example, auto-updating version).
    • Fixed various usability issues related to the annotation experience with a model connected. (#5621), (#5677), (#5678), (#5697)

For more information, see Integrate Label Studio into your machine learning pipeline.

screenshot of the Connect Model window

Screenshot of connected model

✂️ Remove Duplicated Tasks action

There is a new Remove Duplicated Tasks action available from the Data Manager. This action had previously only been available as an experimental feature. (#5572)

When you use this action, annotations from duplicated tasks are consolidated into one task (the first task found among the duplicated tasks).

Remove duplicated tasks option

🔄 Reset Cache action

There is a new Reset Cache action available from project settings under the Danger Zone section. You can use this action to reset and recalculate the labeling cache.

This action is particularly useful for situations in which you are attempting to modify the labeling configuration and you receive a validation error pointing to non-existent labels or drafts. (#5432)

Reset Cache

✅ Enhancements

  • Added support for X-Api-Key: <token> as an alternative to Authentication: Token <token>. This will make it easier to use API keys when integrating with cloud-based services. Special thanks to community member @mc-lp for making this feature request. (#5562)

  • Made several updates to the UI to improve performance and user experience, including:

    • Better formatting for longer text strings when using the grid view in the Data Manager. (#5369)

    • When applying regions to text spans, that text will appear next to region when listed in the Regions pane of the labeling interface. (#5323)

🐞 Bug Fixes

  • Fixed an issue where users could not submit annotations if the labeling configuration included the TextArea tag with the required and skipDuplicates parameters.  (#5490)

  • Fixed an issue where an empty draft was created every time a user click View all annotations. (#5417)

  • Fixed an issue with duplicate default hotkeys when working with multi-image segmentation. (#5297)

  • Fixed an issue where the Data Manager was not displaying false or 0 values as expected. (#5367)

  • Fixed an issue with the Number tag where toName was not validated. (#5408)

  • Fixed an issue with the Number tag in which the max constraint was not working. (#5220)

  • Fixed an issue where users could not use the Magic Wand tool with image preloading enabled. (#5385)

  • Fixed an issue where users were not shown a confirmation message after clicking Submit and exit in the label stream. (#5362)

  • Fixed an issue where the text next to the project pagination drop-down was not displaying properly. (#5363)

  • Fixed an issue where the toolbar in the labeling interface wasn’t properly positioned. (#5448)

  • Fixed an issue where Google Cloud Logging was not working due to a missing dependency. Special thanks to community member @tsr10 for reporting this issue.  (#5605)

  • Fixed an issue where imports were failing in cases where a user switched between organizations. (#5603)

  • Fixed an issue where users where seeing an n is not a function error when using a when configuring project settings. (#5449)

  • Fixed an issue where /api/version was not reporting all updates. (#5535)

🤩 Contributors

Full Changelog: tags/1.11.0...1.12.0
This changelog was updated in response to a push of b2fb581 Workflow run

Jira Release not found
Aha! Release 1.12.0
Release Notes are generated based on git log: No tasks found in Task Tracker.

Turned off Feature Flags (83)
Read more

1.11.0

30 Jan 16:44
a9766f0
Compare
Choose a tag to compare

🌟 What's New

🎉 New Features

Consolidated Label Studio Codebase

This release introduces a simplified Label Studio repository structure.

Previously, the Label Studio frontend and Data Manager codebases were each located in a separate repository: label-studio-frontend and dm2. Starting with this release, the Label Studio Frontend and Data Manager code will be updated and maintained in the main label-studio repository.

The Label Studio Frontend code is now located in the label-studio repository under web/libs/editor, and the Data Manager code can be found under web/libs/datamanager. For more information, see our contributing guide.

This consolidated codebase has many benefits, including streamlined and simplified workflows, increased efficiency when performing cross-component changes, and improved navigation. Most importantly, a unified codebase will make it easier for our Open Source community to navigate and understand the Label Studio code architecture, lowering the barrier to entry for new contributors. (#5154)

🔐 Security

  • This release includes several measures to increase SSRF protection (#5316), which address CVE-2023-47116 (#5316):
    • When SSRF_PROTECTION_ENABLED is set to true (note that it defaults to false), our new default is to ban all IPs within reserved blocks, for both IPv4 and IPv6.
    • We are introducing two new environment variables, to be used in conjunction with SSRF_PROTECTION_ENABLED=true:
      USER_ADDITIONAL_BANNED_SUBNETS — Use this to specify additional IP addresses or CIDR blocks to ban from server-side requests (e.g. the URL-based file uploader).
      USE_DEFAULT_BANNED_SUBNETS — This is set to True by default. If you would like to have full control over banned subnets, you can set this to False and use USER_ADDITIONAL_BANNED_SUBNETS to specify all the IP addresses / CIDR blocks you’d like to disallow instead.
    • We have also improved our error messages to make it clearer when an action is being blocked due to SSRF protections.
  • Implemented comprehensive HTML sanitization to safeguard against vulnerabilities and ensure a secure user experience. This addresses CVE-2024-26152. (#5232)
  • Addressed several vulnerabilities found in the npm-axios package. (#5229)

🐞 Bug Fixes

  • Fixed an issue where Label Studio crashed when configuring multiple hotkeys using the hotkey="," format. (#5240)
  • Fixed an issue where credential validation was failing in the Label Studio interface for cloud storages configured using SDK. (#5228)
  • Fixed an issue where cancelled and updated annotations were not recalculating is_labeled and other counters. (#4472)
  • Fixed an issue where annotation drafts were not changing when switching to view all mode. (#5141)
  • Fixed an issue where users would encounter an error when using the Storage filename filter in the Data Manager. (#5289)
  • Fixed an issue where users were unable to use the View all annotations option when the project included images that had an empty URL. (#5245)
  • Fixed an issue where relations were not displayed if they were added by a user while reviewing a task. (#5140)
  • Fixed an issue where users were seeing the Comments tab (an Enterprise-only feature) when resizing their screen. (#5230)

🤩 Contributors

1.10.1

04 Jan 20:41
d7ca8b7
Compare
Choose a tag to compare

🔐 Security

  • Addressed CVE-2024-23633 by setting a sandbox CSP header on the /data/upload/ endpoint (#5137).
  • Fixed an issue with HTML sanitization to address a vulnerability identified by CodeQL. (#5206, #5122)
  • Improved security for org invite links. (#5136)

🐞 Bug Fixes

  • Fixed an issue where the Auto accept annotation suggestions toggle was not working as expected in some situations. (#4963)
  • Fixed an issue with relation positions in multi-image segmentation. (#5117)
  • Fixed an issue where users were unable to edit polygon points. (#5097)
  • Fixed an issue with wrong position of brushstroke highlighted on hover. (#5093)

🤩 Contributors

Full Changelog: tags/1.10.0.post0...1.10.1
This changelog was updated in response to a push of d7ca8b7 Workflow run

Jira Release not found
Aha! Release 1.10.1
Release Notes are generated based on git log: No tasks found in Task Tracker.

Turned off Feature Flags (100)
Read more

1.10.0.post0

08 Dec 21:42
Compare
Choose a tag to compare

⏩ Issues when upgrading Label Studio versions

  • Fix migration issue that prevented upgrading Label Studio deployment with Prediction records from <1.9.0 to >=1.9.0 (#5156)
  • Fix migration issue that prevented upgrading Label Studio from 1.5.0 to 1.10.0 (#5157)

🤩 Contributors

@leonlowitzki
@jombooth

Full Changelog: tags/1.10.0...1.10.0.post0
This changelog was updated in response to a push of dbd8ddd Workflow run

Jira Release not found
Aha! Release 1.10.0.post0
Release Notes are generated based on git log: No tasks found in Task Tracker.

Turned off Feature Flags (99)
Read more

1.10.0

30 Nov 16:55
d451ae8
Compare
Choose a tag to compare

🌟 What's New

🎉 New Features

📃 External Taxonomy - Beta 🧪

This release introduces the ability to load an external taxonomy into your labeling configuration. The mechanism for this is a new apiUrl parameter on the Taxonomy tag, which allows you to load your taxonomy from an external JSON-formatted file. Previously, you had to use Choice tags to manually define your taxonomy within the labeling configuration.

This feature provides multiple benefits, including:

  • Performance - Significant performance improvements for large taxonomies.
  • Usability and standardization - With JSON formatting and the ability to manage taxonomies in your editor of choice, external taxonomies are easier to organize and update.
  • Security - You can now securely store taxonomies outside of Label Studio.

For more information, see the Taxonomy template and Taxonomy tag.

taxonomy1

💪 Enhancements

  • We’ve made some changes that, going forward, will make Label Studio much easier to install. To accomplish this, we've moved to Poetry for dependency management, and loosened certain dependency version constraints in pyproject.toml. (#5047, #5021, #4888)

  • You can now expand and collapse Ranker items for easier management and rearrangement. (#5016)

    Animated gif demonstrating ranker collapse

  • Updated the font and spacing for the Submit and Exit button to match Label Studio UI styling guidelines. (#5007)

🔐 Security

  • Patched an ORM leak vulnerability. (#5012)

  • Due to an XSS vulnerability, we previously added a requirement that users must log in to view the Label Studio API doc reference and Swagger. You can now view the API docs without logging in. However, the Swagger version is still only available to logged in users. (#4931)

  • Upgraded urllib3 to 1.26.18 to address CVE-2023-45803, and Django to 3.2.23 to address CVE-2023-46695. (#5047)

🐞 Bug Fixes

  • Fixed an issue where users were directed to the Data Manager page after clicking Submit and Exit or Update and Exit. Instead, users will now be directed to the Projects page. (#4981)

  • Fixed an issue where the Draft saved successfully message was appearing when it wasn’t needed. (#4917)

  • Fixed an issue where the crosshair parameter was not working. (#5040)

  • Fixed an issue with zoom performance in certain Image Segmentation use cases. (#4800)

  • Fixed a sync error when importing large amounts of tasks from Azure storage. (#4950)

  • Fixed an issue where PATCH api/tasks/<id> was returning an error. (#4925)

  • Fixed an issue where code was unnecessarily executing when contextual scrolling was disabled. (#4651)

  • Fixed an issue where a labeling configuration validation error was not using the correct styling. (#4949)

  • Fixed an issue where predictions were not appearing in the Label Stream after upgrading Label Studio. Special thanks to community members @davidblom603 and @WillieMaddox for reporting this issue. (#5105)

  • Fixed an issue with the wrong position of brushstroke highlighted on hover. (#5114)

  • Fixed an issue where users were unable to edit polygon points. (#5110)

🤩 Contributors

Full Changelog: tags/1.9.2.post0...1.10.0
This changelog was updated in response to a push of d451ae8 Workflow run

Jira Release not found
Aha! Release 1.10.0
Release Notes are generated based on git log: No tasks found in Task Tracker.

Turned off Feature Flags (98)
Read more

1.9.2.post0

08 Nov 19:46
Compare
Choose a tag to compare

Security

  • Fix ORM Leak security vulnerability in Label Studio (CVE-2023-47117). This vulnerability inadvertently made it possible to leak certain secrets from the database via the task filtering endpoint powering Data Manager. We strongly recommend upgrading to this new version, and would like to thank @alex-elttam for identifying this issue in Label Studio.

Breaking changes

  • In general, task filtering expressions that depend on foreign keys will no longer be allowed in this and future versions of Label Studio. However, individual expressions leveraging foreign key relationships (that is, filters containing __, as in updated_by__active_organization) may be allowlisted via the environment variable DATA_MANAGER_FILTER_ALLOWLIST, which accepts a comma-separated list of task filters.

Full Changelog: tags/1.9.2...1.9.2.post0
This changelog was updated in response to a push of f931d9d Workflow run

Jira Release not found
Aha! Release 1.9.2.post0
Release Notes are generated based on git log: No tasks found in Task Tracker.

Turned off Feature Flags (98)
Read more

1.9.2

07 Nov 22:05
de252f5
Compare
Choose a tag to compare

What's New

Enhancements

  • Added a new legacy parameter to the Taxonomy tag. This will allow users to continue to access the legacy version of Taxonomy after upcoming feature work is completed. (#4884)
  • Added support for AWS Signature Version 4 query parameters. Special thanks to community member @darthhexx for their contribution. (#4928)

Breaking Changes

  • This release adds a deployment-wide VERIFY_SSL_CERTS setting that defaults to true. Customers who are loading data (e.g. uploading tasks) from https URLs without verifiable SSL certificates must set VERIFY_SSL_CERTS to false in their environment variables before deploying Label Studio 1.9.2+. (#4862)
  • Add WINDOWS_SQLITE_BINARY_HOST_PREFIX environment variable to support hosting SQLite binaries on a server other than sqlite.org, for Windows deployments running Python 3.8 only. (#4862)

Security

  • Fixed an XSS vulnerability with certain error pages. (#4926)
  • Fixed an XSS vulnerability related to file extensions for avatars. This change addresses CVE-2023-47115. (#4818)
  • Fixed an SSRF DNS rebinding issue. (#4828)

Bug Fixes

  • Fixed an issue where users would see a run time error seen when creating or syncing Azure blob storage. (#4905)
  • Fixed an issue where tasks created through source storage were not triggering webhooks. (#4845)

Contributors

New Contributors

Contributors

Full Changelog: tags/1.9.1.post0...1.9.2
This changelog was updated in response to a push of de252f5 Workflow run

Jira Release not found
Aha! Release 1.9.2
Release Notes are generated based on git log: No tasks found in Task Tracker.

Turned off Feature Flags (93)
Read more

1.9.1.post0

13 Oct 18:58
Compare
Choose a tag to compare

Security

Full Changelog: tags/1.9.1...1.9.1.post0
This changelog was updated in response to a push of 521e5ca Workflow run

Jira Release not found
Aha! Release 1.9.1.post0
Release Notes are generated based on git log: No tasks found in Task Tracker.

Turned off Feature Flags (94)
Read more

1.9.1

10 Oct 17:33
Compare
Choose a tag to compare

What's New

Enhancements

  • The Keypoint, KeyPointLabels, Polygon, and PolygonLabels tags all support a new snap parameter for use in Image Segmentation labeling. When snap="pixel" is enabled, the (x, y) coordinates of each point are rounded to the pixel size. This enhancement will help ensure precise and uniform coordinates within images. For polygons, points are snapped to the pixel edge. For example, given a polygon point with the coordinates (0.25, 0.25), your resultant coordinates would snap to the edge of the pixel at (0,0). For keypoints, points are snapped to the pixel center. For example, given a keypoint with the coordinates (0.25, 0.25), your resultant coordinates would snap to the center of the pixel at (0.5,0.5). (#4682)

  • When reviewing video in Outliner, if you click on a marked region, the video playback will automatically jump to the selected region. Previously, users had to manually scroll to the starting point. This change will make it easier to quickly view and edit video segments. (#4797)

Bug Fixes

  • Fixed an issue where pressing Ctrl + or Ctrl - (Windows) or Cmd + or Cmd - (Mac) was not zooming in/out on images as expected. (#4784)

  • Fixed an issue where the number of drafts displayed in the project summary was not updated when drafts were submitted as annotations. (#4772)

  • Fixed and issue where, in certain contexts, labeling instructions were displayed in raw HTML. (#4779)

  • Fixed an issue that would cause a blank draft to be created when using hot-keyed annotation submit. (#4834)

  • Fixed an issue that occurred after project creation in which users were prevented from moving forward if changes were made in the template preview. (#4835)

  • Fixed an issue where users were unable to navigate through their task list after saving a draft. (#4823)

  • Fixed several issues with how annotation drafts were handled. Users will now see a more descriptive error message when trying to update a labeling configuration that is still being used in annotations or in drafts. Also, when using the Data Manager to delete all annotations, this will also delete all task drafts and annotation drafts. (#4802)

  • Fixed drf-yasg dependency issue that was blocking our ability to publish Label Studio to PyPi. (#4837)

  • Fixed an issue where blank drafts were being created when annotations were submitted. (#4796)

Contributors

@juliosgarbi
@hlomzik
@Gondragos
@triklozoid
@bmartel
@jombooth
@wesleylima

Full Changelog: tags/1.9.0...1.9.1
This changelog was updated in response to a push of a39f614 Workflow run

Jira Release not found
Aha! Release 1.9.1
Release Notes are generated based on git log: No tasks found in Task Tracker.

Turned off Feature Flags (94)
Read more

1.9.0

27 Sep 23:48
Compare
Choose a tag to compare

What's New

New Features

  • When working with the labeling configuration code editor, you will now see an autocomplete prompt that lists and defines possible tags and parameters. For more information, see Code view autocomplete. ( #4589)

Enhancements

  • Added server-side encryption for target storage. (#4180)
  • Deactivated user pages will now include contact information. (#4637)
  • Removed unnecessary queries to improve performance in POST /api/tasks/ID/annotations. (#4608)
  • Improved performance of prediction counter calculations, leading to faster response times for project pages and stats calculations. (#4629)
  • The Conversational Analysis template now includes contextual scrolling by default. (#4675)
  • All code files now use the blue formatting convention. (#4750)
  • Added Ruff linter. (#4660)

Bug Fixes

  • Fixed an issue where when saving a labeling configuration, users were redirected to the Data Manager. (#4601)
  • Fixed a regression in which users were limited to uploading 100 files. Special thanks to community member @htdung167 for identifying this issue. (#4726)
  • Fixed an issue where is_labeled was not calculated accurately. (#4517)
  • Fixed a performance issue when using mouse clicks to interact with OCR regions that have large numbers (>50) of bounding boxes. (#4609)
  • Fixed an issue where attempting to access AWS target storage resulted in a 403 error. This was fixed by allowing prefix-level bucket access. (#4759)
  • Fixed an issue with the RichText tag in non-Chromium browsers. (#4684)
  • Fixed an issue where the splitchannel audio option was not rendering correctly. (#4641)
  • Fixed an issue where custom weights were resetting to 100 after any updates to the labeling interface. (#4611)
  • Fixed an issue causing deadlocked tasks during import. (#4676)
  • Fixed an issue causing database deadlocks and added logging for debugging purposes. (#4603)
  • Fixed an issue caused by double-encoding that prevented users from accessing password-protected file-proxy URLs. (#4663)
  • Fixed various issues related to the taxonomy tag, including support for the alias parameter in the results, support for the hint attribute, and adjustable drop-down menu sizing. (#4740)
  • Fixed an issue with feature flags so that they are now tied to user emails. (#4647)
  • Fixed an issue in which a feature flag was improperly hard-coded. (#4704)
  • Fixed an issue where the STORAGE_IN_PROGRESS_TIMER environment variable was a string when a float was expected. (#4631)
  • Fixed an issue where pressing the Escape key closes the Create Project modal rather than just closing the code autocomplete pop-up. (#4692)

Contributors