2.0.44

Enhancements:

Authors can no longer edit report in pending approval mode (#1084)

Authors can no longer edit report in pending approval mode; only a current approver can edit in pending approval mode.
Closes #968

Also fixes a bug where report (auto)save would sometimes fail, and no error was shown.

Ensure shortNames for tasks are unique (#1085)

Closes #842

Change 'Org' label to 'Organization' (#1086)

Closes #1076

Bug fixes:

Fix display of start date in advanced search (#1103)

The date widget in the advanced search was displaying a day earlier than
the day it should have. Here is why:
moment/moment#3086

Closes #1099

Fix error when going to daily rollup after searching on people by rank (#1100)

We used to get an error when first searching on people by rank and afterwards navigating to the "Daily rollup" or "My reports" page.

Closes #1098

Dependencies upgrades

Bump autobind-decorator from 2.1.0 to 2.2.1 in /client (#1092)

Bump wdio-mocha-framework from 0.6.3 to 0.6.4 in /client (#1095)

Bump copy-webpack-plugin from 4.5.4 to 4.6.0 in /client (#1093)

Bump gradle-docker-plugin from 4.0.3 to 4.0.4 (#1088)

Bump webpack from 4.23.1 to 4.25.1 in /client (#1091)

[Security] Bump stringstream from 0.0.5 to 0.0.6 in /client (#1090)

Bumps stringstream from 0.0.5 to 0.0.6. This update includes security fixes.

Vulnerabilities fixed

Sourced from The Node Security Working Group.

Out-of-bounds Read
stringstream allocates uninitialized Buffers when number is passed in input stream on Node.js 4.x and below

Affected versions: <=0.0.5

Sourced from The Node Security Working Group.

Out-of-bounds Read
stringstream allocates uninitialized Buffers when number is passed in input stream on Node.js 4.x and below

Affected versions: <=0.0.5

Commits

• fee31c5 0.0.6
• 2f4a9d4 Merge pull request #9 from mhart/fix-buffer-constructor-vuln
• afbc744 Ensure data is not a number in Buffer constructor
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge
• @dependabot reopen will reopen this PR if it is closed
• @dependabot ignore this [patch|minor|major] version will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

Finally, you can contact us by mentioning @dependabot.

Bump java-dataloader from 2.2.0 to 2.2.1 (#1087)

Bump graphql-cli from 2.16.7 to 2.17.0 in /client (#1094)