Skip to content

1.1.0

Choose a tag to compare

@elomariamin elomariamin released this 21 Sep 16:53
· 204 commits to main since this release
83096f1

Bloom PLM v1.1.0

This release adds Cloudron packaging
and first-run setup, inline artefact tagging in documents, campaign/suite
topology, and Jira alongside GitHub and GitLab — with faster traceability and
project screens.

Added

  • Cloudron package — runs under Cloudron's read-only root filesystem with data and generated secrets in /app/data; PostgreSQL and local-storage addons, optional mail; minBoxVersion 9.1.0; CI smoke-tests the image against the Cloudron contract.
  • First-run setup — GET /api/setup/status and POST /api/setup create the first administrator (409 once any user exists); a confirmation email is sent best-effort.
  • Inline artefact tags — # in a document body searches the project's artefacts and inserts a link (stored as a references link), visible in backlinks, the topology and the registry; excluded from coverage and traceability. Available in requirements, designs, risks, change requests, test concepts and the four document kinds.
  • Topology membership — campaign → suite (relates_to) and suite/campaign → test case (contains) are drawn in the project topology.
  • Jira integration alongside GitHub and GitLab — mandatory HMAC verification when a webhook secret is set, single-use delivery ids, credentials encrypted at rest; issues match by status category; outbound status changes apply as transitions.
  • Results sync reports the campaigns and test suites it reached, each with id, public id, name and page URL.
  • Change requests track an external issue in any supported tracker and record sync attempts.
  • Next document id — GET /api/projects/{project_ref}/next-doc-id/{type_code}; doc-type summaries and navigable relationships from a document into the filtered registry.
  • Release pipeline — tested images promoted by digest to v1.1.0/1.1.0/1.1/1/stable; published versions are never overwritten; an SBOM is attached.

Changed

  • A document's links collapse to per-role counts past twenty.
  • The traceability matrix is paginated; its Test Cases and Test Runs columns are removed.
  • Artefact identifiers are no longer capped at 999.
  • Listing projects counts every project in one pass; artefact_links and defects are indexed on project_id; per-id lookups are batched.
  • The third role reads "Reviewer" in the interface (the stored value stays external).
  • Transactional mail uses Bloom's own colours; the frontend is split by route.
  • Coverage measures threads and greenlets; the CI gate is 78%.
  • Dependency updates — React 19, React Router 8, Node 24, and pinned backend dependencies; the audit carries no exception.

Fixed

  • Constraint violations answer 409/422 with the request id; unhandled errors return the request id.
  • The links panel shows only relationships the open artefact is one end of; a campaign no longer shows its test cases' links as its own.
  • An unreachable issue tracker answers 502 or 504.
  • Deleting a user removes its memberships, notifications, import attempts, service credentials, defect assignments and attachment uploads.
  • Requirements and test cases accept and return their editor body; the create screen shows the identifier the server will assign.
  • The application shell stays mounted while a lazy page loads.
  • Cloudron mail uses the STARTTLS port; delivery failures return 503 naming host, port and TLS mode.

Security

Full changelog: https://github.com/MbedLabs/bloom/blob/main/docs/CHANGELOG.md