Repository navigation
1.1.0
Bloom PLM v1.1.0
This release adds Cloudron packaging
and first-run setup, inline artefact tagging in documents, campaign/suite
topology, and Jira alongside GitHub and GitLab — with faster traceability and
project screens.
Added
- Cloudron package — runs under Cloudron's read-only root filesystem with data and generated secrets in
/app/data; PostgreSQL and local-storage addons, optional mail;minBoxVersion9.1.0; CI smoke-tests the image against the Cloudron contract. - First-run setup —
GET /api/setup/statusandPOST /api/setupcreate the first administrator (409 once any user exists); a confirmation email is sent best-effort. - Inline artefact tags —
#in a document body searches the project's artefacts and inserts a link (stored as areferenceslink), visible in backlinks, the topology and the registry; excluded from coverage and traceability. Available in requirements, designs, risks, change requests, test concepts and the four document kinds. - Topology membership — campaign → suite (
relates_to) and suite/campaign → test case (contains) are drawn in the project topology. - Jira integration alongside GitHub and GitLab — mandatory HMAC verification when a webhook secret is set, single-use delivery ids, credentials encrypted at rest; issues match by status category; outbound status changes apply as transitions.
- Results sync reports the campaigns and test suites it reached, each with id, public id, name and page URL.
- Change requests track an external issue in any supported tracker and record sync attempts.
- Next document id —
GET /api/projects/{project_ref}/next-doc-id/{type_code}; doc-type summaries and navigable relationships from a document into the filtered registry. - Release pipeline — tested images promoted by digest to
v1.1.0/1.1.0/1.1/1/stable; published versions are never overwritten; an SBOM is attached.
Changed
- A document's links collapse to per-role counts past twenty.
- The traceability matrix is paginated; its Test Cases and Test Runs columns are removed.
- Artefact identifiers are no longer capped at 999.
- Listing projects counts every project in one pass;
artefact_linksanddefectsare indexed onproject_id; per-id lookups are batched. - The third role reads "Reviewer" in the interface (the stored value stays
external). - Transactional mail uses Bloom's own colours; the frontend is split by route.
- Coverage measures threads and greenlets; the CI gate is 78%.
- Dependency updates — React 19, React Router 8, Node 24, and pinned backend dependencies; the audit carries no exception.
Fixed
- Constraint violations answer 409/422 with the request id; unhandled errors return the request id.
- The links panel shows only relationships the open artefact is one end of; a campaign no longer shows its test cases' links as its own.
- An unreachable issue tracker answers 502 or 504.
- Deleting a user removes its memberships, notifications, import attempts, service credentials, defect assignments and attachment uploads.
- Requirements and test cases accept and return their editor body; the create screen shows the identifier the server will assign.
- The application shell stays mounted while a lazy page loads.
- Cloudron mail uses the STARTTLS port; delivery failures return 503 naming host, port and TLS mode.
Security
@tiptap/*raised past GHSA-cp6q-959q-f8rh; vitest pinned past GHSA-82fw-gwwq-j7x9.
Full changelog: https://github.com/MbedLabs/bloom/blob/main/docs/CHANGELOG.md