Skip to content

[bot] Merge 26.7 to 26.9 - #1876

Merged
labkey-klum merged 13 commits into
release26.9-SNAPSHOTfrom
26.9_fb_bot_merge_26.7
Sep 1, 2026
Merged

[bot] Merge 26.7 to 26.9#1876
labkey-klum merged 13 commits into
release26.9-SNAPSHOTfrom
26.9_fb_bot_merge_26.7

Conversation

@github-actions

@github-actions github-actions Bot commented Sep 1, 2026

Copy link
Copy Markdown
Contributor

Generated automatically.
Merging changes from: a82c5d5
Approve all matching PRs simultaneously.
Approval will trigger automatic merge.
Verify all PRs before approving: https://internal.labkey.com/Scrumtime/Backlog/harvest-gitOpenPullRequests.view?branch=26.9_fb_bot_merge_26.7

kollil and others added 13 commits August 25, 2026 16:33
Changed the flags for assignment active days from 30 to 180
…#1866)

## Rationale

`ONPRC_EHRTest.testSubmitButtonsDisabledDuringValidation` fails
intermittently on the 26.3 ONPRC EHR suites and is blocking ONPRC work,
so it is being disabled until the assertion can be reworked. The
assertion is racy by construction: `Force Submit` carries `disableOn:
'SEVERE'`, so it is disabled only while validation is in flight and is
re-enabled the instant validation completes. Clicking `More Actions` and
waiting for the Ext menu to render costs a few seconds, which a fast
validation pass beats, and the 10-second wait for the disabled menu item
then can never succeed. Every failure is the same one —
`ONPRC_EHRTest.java:2036` on `Force Submit` — while the sibling checks
pass regardless because `Submit And Reload` and `Submit Final` stay
disabled after validation whenever the form has WARN/ERROR rows.

## Changes

- `@Ignore` on `testSubmitButtonsDisabledDuringValidation`, with the
race recorded in the annotation message and a comment noting that it is
blocking ONPRC work and should be re-enabled once the flakiness is
resolved.
## Rationale

Retires the mergesync and ogasync modules, which are no longer used.
mergesync provided the Merge LIS integration for Clinpath requests;
ogasync ran an OGA grant ETL and had no dependents.

## Changes

- Deletes both modules.
- Removes the Merge integration from the Clinpath labwork request form,
along with its instructions panel.
- Drops the Merge-derived column from the Clinpath requests view and
collapses the request links that filtered on it into a single link.
- Leaves the similarly named billing OGA table and ETL in place; despite
the name they are unrelated to the removed module.
@brentlogan: these changes are an extension to the MHC typing storage
and ETLs. They mostly impact the PRIMe-seq side, but will ultimately
need to be deployed to PRIMe.

Can you confirm what LK version PRIMe is running? I would like to deploy
the PRIMe-seq parts of this first, stage data, and then add the PRIMe
pieces. Because I think you update less frequently, this might just
happen naturally.
Modified Medication Printable online reports to now include qcstate
reporting column
Modified Blood Draw input form to allow users an option to enter
"Additional Services" selections
Stored procedure clean up of single use programs
## Rationale

FinanceNotification.writeResultTable builds the ONPRC charge summary
report by concatenating editor-entered database values (financial
analyst, project, alias/account, OGA project number, category) and their
derived URLs directly into HTML with no escaping. That HTML is rendered
verbatim into the LDK RunNotificationAction admin preview via
HtmlString.unsafe and is also sent as the HTML email body, so a stored
payload in any of those project/alias fields executed in the browser of
any user who previewed the notification or received the email — a stored
XSS with privilege-escalation potential toward admins. This is the ONPRC
counterpart to the BillingNotification fix. DCMFinanceNotification was a
registered subclass that overrode writeResultTable with a near-duplicate
copy of the same unescaped report; rather than carry and fix a second
copy, it is removed entirely.

## Changes

- FinanceNotification: wrap every editor-entered value (financial
analyst, project, account, project number, category) and its derived
href URL in PageFlowUtil.filter in the per-financial-analyst tables, and
filter the top category summary table (url and category), which was
unescaped in this copy; add the org.labkey.api.util.PageFlowUtil import.
- DCMFinanceNotification: remove the class entirely and drop its
NotificationService registration and import from ONPRC_BillingModule.
Added new column called "Source" to the Birth Records report on the
animal history page
@github-actions

github-actions Bot commented Sep 1, 2026

Copy link
Copy Markdown
Contributor Author

ERROR Automatic merge failed!

@github-actions

github-actions Bot commented Sep 1, 2026

Copy link
Copy Markdown
Contributor Author

ERROR Automatic merge failed!

2 similar comments
@github-actions

github-actions Bot commented Sep 1, 2026

Copy link
Copy Markdown
Contributor Author

ERROR Automatic merge failed!

@github-actions

github-actions Bot commented Sep 1, 2026

Copy link
Copy Markdown
Contributor Author

ERROR Automatic merge failed!

@labkey-klum
labkey-klum merged commit 13ba258 into release26.9-SNAPSHOT Sep 1, 2026
8 of 12 checks passed
@labkey-klum
labkey-klum deleted the 26.9_fb_bot_merge_26.7 branch September 1, 2026 19:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

8 participants