v26.10.01

Previous Release Notes: v26.10.00

SECURITY

• [SECURITY] [Bugfix:Submission] Verify caller on active version change (#13469)

SYSADMIN ACTION

• [SYSADMIN ACTION][Bugfix:System] Filter websocket cookies (#13393)

• [SYSADMIN ACTION][Bugfix:System] Turn off FastCGI connection reuse (#13475)

  Please see the release notes:
  https://submitty.org/sysadmin/installation/version_notes/v26.10.01

FEATURE / ENHANCEMENT

• [Feature:TAGrading] Sticky rubric header (#13336)
• [Feature:TAGrading] Unify peer grading tabs (#13467)

BUGFIX

• [Bugfix:Forum] Update empty thread list (#13383)
• [Bugfix:Notifications] Grade inquiry icon (#13453)
• [Bugfix:System] Move large cookies to web storage (#13392)
• [Bugfix:System] install modifies file perms on host repo (#13472)
• [Bugfix:System] rsync .setup/data to worker machines (#13479)
• [Bugfix:TAGrading] Skip withdrawn in navigation (#13388)

SUPPORTING REPOSITORIES & VENDOR PACKAGES

• [Dependency] Bump @codemirror/view from 6.43.11 to 6.43.13 in /site (#13421)
• [Dependency] Bump doctrine/orm from 3.7.0 to 3.7.2 in /site (#13418)
• [Dependency] Bump onnx from 1.22.0 to 1.23.1 in /.setup/pip (#13441)
• [Dependency] Bump vue from 3.5.42 to 3.5.43 in /site (#13446)
• [DevDependency] Bump eslint from 10.10.0 to 10.12.0 in /site (#13427)
• [DevDependency] Bump jest from 30.5.1 to 30.5.2 in /site (#13436)
• [DevDependency] Bump vite from 8.2.2 to 8.3.1 in /site (#13424)