4.23.0

What's Changed

• chore(deps): Configure dependabot to group PRs and update GHA by @effigies in #3002
• chore(deps): Fix dependabot config by @effigies in #3005
• chore(deps): Bump the actions-infrastructure group with 3 updates by @dependabot in #3006
• feat(app): Disable derivatives tab if ToS not accepted by @effigies in #2994
• chore(deps): Bump codecov/codecov-action from 3 to 4 by @dependabot in #3007
• fix(app): Show file metadata for schema validator issues by @nellh in #2996
• fix(app): Update to React 18 and replace jsx-to-markdown with react-markdown by @nellh in #3009
• chore(deps): Bump the pipenv group in /services/datalad with 11 updates by @dependabot in #3010
• Add 30 second timeout to dataset resolver by @nellh in #3012
• fix(app): Restrict data table date display to four common formats by @nellh in #3014
• chore(deps): Bump follow-redirects from 1.15.4 to 1.15.6 by @dependabot in #3016
• Deno command line tools by @nellh in #3017

Full Changelog: v4.22.0...v4.23.0

4.22.0

What's Changed

• chore(deps-dev): Bump vite from 4.4.12 to 4.5.2 in /packages/openneuro-app by @dependabot in #2980
• fix(app): Use our own Markdown component that sanitizes HTML following GitHub-like rules by @nellh in #2982
• deps(worker): Update to git-annex 10.20230926 by @nellh in #2983
• chore(deps-dev): Bump vite from 4.4.12 to 4.5.2 by @dependabot in #2974
• Fix a link to openneuro-cli by @yarikoptic in #2989
• fix(app): Raise preference for exact matches of accession numbers when searching for keywords above other fields by @nellh in #2991
• feat(app): Add a quick shortcut for accession number -> dataset page to homepage by @nellh in #2990
• [ENH] Add link to external participant level search to filters block by @surchs in #2988
• fix(app): Add aria-role to accordion tab and test for Neurobagel component by @nellh in #2993
• FIX: Display metadata lists as unordered lists by @effigies in #2985

New Contributors

• @surchs made their first contribution in #2988

Full Changelog: v4.21.3...v4.22.0

4.21.2

What's Changed

• Improve handling of file requests during worker restarts by @nellh in #2960
• Test fixes for date instability by @nellh in #2966
• fix(worker): Add test and character set detection for non-utf8 files by @nellh in #2965
• fix(api): Prevent crash when tree is requested with no children by @nellh in #2964

Full Changelog: v4.21.1...v4.21.2

v4.21.1

What's Changed

• fix(app): Prevent crash when top datasets query returns no datasets by @nellh in #2957
• fix(server): Configure Elastic APM with an API key by @nellh in #2958
• Fix API crash caused by socket closed errors by @nellh in #2959

Full Changelog: v4.21.0...v4.21.1

4.21.0

What's Changed

• fix(worker): Handle missing snapshot trees better by @nellh in #2913
• fix(worker): Don't throw KeyError when auth token is missing 'name' field by @nellh in #2914
• chore(server): Cleanup unused GraphQL subscriptions by @nellh in #2930
• Fixes search by sex not catching 'M' and 'F' in participants.tsv by @ehavener in #2932
• ci: Run coverage with GitHub actions by @nellh in #2933
• chore(deps): Bump @babel/traverse from 7.22.17 to 7.23.2 by @dependabot in #2929
• chore(deps): Bump get-func-name from 2.0.0 to 2.0.2 by @dependabot in #2915
• chore: Update to GraphQL 16.8.1 by @nellh in #2934
• chore(deps-dev): Bump cryptography from 41.0.3 to 41.0.4 in /services/datalad by @dependabot in #2901
• Migrate server code to TypeScript by @nellh in #2931
• fix(cli): Prevent commander parsing from overriding git-annex-remote-openneuro by @nellh in #2939
• Support podman for local dev environments by @nellh in #2942
• fix(server): Allow /api in addition to /crn for API requests by @nellh in #2943
• chore(deps): Bump axios from 1.5.0 to 1.6.1 by @dependabot in #2941
• feat(dataset): Annex TSV files in phenotype directory by @effigies in #2940
• fix(server): Allow authorization bearer token header for API access by @nellh in #2944
• Fix git-annex access issues for CLI by @nellh in #2945
• chore(deps): Bump @adobe/css-tools from 4.3.1 to 4.3.2 by @dependabot in #2950
• chore(deps-dev): Bump cryptography from 41.0.4 to 41.0.6 in /services/datalad by @dependabot in #2948
• Add clickthrough agreement for downloads by @nellh in #2947
• chore(deps): Bump urllib3 from 1.26.16 to 1.26.18 in /services/datalad by @dependabot in #2927
• deps(worker): Update lockfile Python deps by @nellh in #2952
• chore(deps-dev): Bump vite from 4.4.9 to 4.4.12 by @dependabot in #2953
• Helm configuration fixes for ElasticSearch 8.0 by @nellh in #2954
• deps(elasticsearch): Update NodeJS elasticsearch clients to 8.10.0 by @nellh in #2955

New Contributors

• @ehavener made their first contribution in #2932

Full Changelog: v4.20.2...v4.21.0

4.20.4

• Fix CLI git-annex-remote-openneuro failing to run when set as the program name.

4.20.2

• Roll back bids-validator to 1.10.0 for server side validation

4.20.1

What's Changed

• fix(cli): Rollback bids-validator version by @nellh in #2905
• fix(app): Disable unused graphql-subscriptions on the client by @nellh in #2904
• fix(worker): Return 404 for missing datasets on draft or snapshot API calls by @nellh in #2912

Full Changelog: v4.20.0...v4.20.1

4.20.0

What's Changed

The headline feature for this release is support for common derivatives uploads via the website (CLI support will be in an upcoming release).

• chore(deps): Bump cryptography from 40.0.1 to 41.0.2 in /services/datalad by @dependabot in #2855
• chore(deps): Bump semver from 5.7.1 to 5.7.2 by @dependabot in #2850
• chore(deps): Bump semver from 7.3.7 to 7.5.4 in /services/datalad by @dependabot in #2851
• fix(app): Rename mock-content to content by @nellh in #2852
• DOC: Update docs to be more user-facing by @effigies in #2853
• Fix typos detected by codespell by @effigies in #2854
• refactor(app): Replace FAQ with documentation link and redirect by @nellh in #2856
• chore(deps): Bump mongoose from 6.2.3 to 6.11.3 by @dependabot in #2857
• refactor(server): Migrate summary and permission resolvers to TypeScript by @nellh in #2858
• reactor(app): Drop react-virtualized in favor of react-table by @nellh in #2859
• fix typo by @da5nsy in #2862
• chore(deps): Bump word-wrap from 1.2.3 to 1.2.5 by @dependabot in #2864
• chore(deps): Bump certifi from 2023.5.7 to 2023.7.22 in /services/datalad by @dependabot in #2865
• chore(deps-dev): Bump cryptography from 41.0.2 to 41.0.3 in /services/datalad by @dependabot in #2867
• fix(scripts): Use command line authentication with s3-delete-all-versions script by @nellh in #2870
• All public dataset metadata page by @nellh in #2863
• fix(app): Prevent TextInput crash when value is undefined by @nellh in #2871
• deps: Update to Node 18.17.1 by @nellh in #2876
• chore(deps): Bump @adobe/css-tools from 4.0.1 to 4.3.1 by @dependabot in #2877
• chore(deps): Bump gitpython from 3.1.31 to 3.1.32 in /services/datalad by @dependabot in #2872
• fix(server): Set 4MB high water mark for streaming file responses by @nellh in #2878
• Apollo Server 4 Update by @nellh in #2866
• chore(deps): Bump @apollo/server from 4.8.1 to 4.9.3 in /packages/openneuro-server by @dependabot in #2885
• chore(deps): Bump gitpython from 3.1.32 to 3.1.34 in /services/datalad by @dependabot in #2884
• Update to yarn 3.6.3 by @nellh in #2887
• fix: TypeScript upgrade build fixes for 5.1.0 by @nellh in #2888
• Update to Vite 4.4.9 by @nellh in #2890
• fix: Revert Node.js containers to bullseye (libssl fixes) by @nellh in #2891
• fix(worker): Update to Python 3.11 by @nellh in #2892
• Enable schema validator for worker validation by @nellh in #2894
• chore(deps): Bump @xmldom/xmldom from 0.7.5 to 0.7.13 in /services/datalad by @dependabot in #2893
• deps: Update to bids-validator@1.13.0 by @nellh in #2895
• Enable schema validator for derivative datasets on client side uploads by @nellh in #2897
• feat(api): Return schema validator output for derivative datasets by @nellh in #2896
• deps(server): Drop moment.js in favor of date-fns by @nellh in #2898
• docs: Add steps to setup Kubernetes auth for existing clusters by @nellh in #2899

New Contributors

• @da5nsy made their first contribution in #2862

Full Changelog: v4.19.2...v4.20.0

v4.19.3

• fix(app): Prevent TextInput crash when value is undefined

Full Changelog: v4.19.2...v4.19.3