LORIS Release 29.0.1

[driusan]

This fixes a number of issues such as missing translations that were found after the release of LORIS v29.0.0. In addition to this, it fixes a number of security issues that were reported and incorporates all fixes from LORIS v28.0.3.

Users are strongly recommended to upgrade. For details on the security fixes in this release see:

GHSA-cxv9-vq96-c44g
https://github.com/aces/Loris/security/advisories/GHSA-7qp4-46qh-3vrw
GHSA-7q8g-g764-4286
GHSA-gc8r-37wr-jch6
https://github.com/aces/Loris/security/advisories/GHSA-73xp-5fqj-8g93
GHSA-vfwx-wj8q-fp58
GHSA-q57f-8r6c-rj4c
GHSA-wx4f-w3wh-2hwg
GHSA-mhmh-hq54-22h6
GHSA-vwrg-x293-r7g3
GHSA-6pwq-62xc-g39j

Non-security related changes included in this release are:

What's Changed

• [statistics] Update Visit label and French translation by @HachemJ in [statistics] Update Visit label and French translation #11134
• [configuration] Add missing French translation for pop up's title by @HachemJ in [configuration] Add missing French translation for pop up's title #11103
• [imaging_uploader] Fix outdated SQL query in TestPlan after CandID to CandidateID refactor by @HachemJ in [imaging_uploader] Fix outdated SQL query in TestPlan after CandID to CandidateID refactor #11180
• [acknowledgements] Remove logic preventing end_date field to save by @shonibare in [acknowledgements] Remove logic preventing end_date field to save #10981
• [instrument_builder] Translate 'Browse' button in French by @HachemJ in [instrument_builder] Translate 'Browse' button in French #11143
• [examiner] Missing certification status options translations by @HachemJ in [examiner] Missing certification status options translations #11153
• [raisinbread] Synchronize raisinbread exports by @HachemJ in [raisinbread] Synchronize raisinbread exports #11118
• [dataquery] Fetch accessible instruments in a single query in the dictionary module by @HenriRabalais in [dataquery] Fetch accessible instruments in a single query in the dictionary module #11167
• [dataquery] Loading, empty and failed all look the same by @HenriRabalais in [dataquery] Loading, empty and failed all look the same #11192
• [dictionary] Translate filter categories except for instruments by @HachemJ in [dictionary] Translate filter categories except for instruments #11149
• [dataquery] Dedup recent queries by content so "No run time" eliminates duplicates by @HenriRabalais in [dataquery] Dedup recent queries by content so "No run time" eliminates duplicates #10980
• [media] Fix multilingual visits filter by @HachemJ in [media] Fix multilingual visits filter #11129
• [genomic_browser] PSCID links contain 4 leading zeros (using CandID padding instead of DCCID standard length) [genomic_browser] PSCID links contain 4 leading zeros (using CandID padding instead of DCCID standard length) #11054 -fix by @kongtiaowang in [genomic_browser] PSCID links contain 4 leading zeros (using CandID padding instead of DCCID standard length) #11054 -fix #11077
• [SQL] 9999-99-99.sql add missing tables by @kongtiaowang in [SQL] 9999-99-99.sql add missing tables  #11243
• [biobank] [dataquery] Add missing translations for query engine items descriptions by @HachemJ in [biobank] [dataquery] Add missing translations for query engine items descriptions #11173
• [candidate_parameters] Fixed broken Family Information tab (add, render and delete) by @HachemJ in [candidate_parameters] Fixed broken Family Information tab (add, render and delete) #10514
• [data_release] Fixed delete files issue if language selected is not English by @fias06 in [data_release] Fixed delete files issue if language selected is not English #10994
• [candidate_parameters] [dataquery] Add missing translations for query engine items descriptions by @HachemJ in [candidate_parameters] [dataquery] Add missing translations for query engine items descriptions #11174
• [dataquery] Fix multilingual date formatting bug by @HachemJ in [dataquery] Fix multilingual date formatting bug #11120
• Fix SQL injection in biobank DAO selectInstances and cascade update by @HenriRabalais in Fix SQL injection in biobank DAO selectInstances and cascade update #10676
• [dataquery] Clear operator when the filter field changes by @HenriRabalais in [dataquery] Clear operator when the filter field changes #11031
• [dataquery] Replaying a large query run times out by @HenriRabalais in [dataquery] Replaying a large query run times out #11191
• [DataTable] Re-add fix to multiselects with commas to V27 by @victori444 in [DataTable] Re-add fix to multiselects with commas to V27 #11293

Full Changelog: v29.0.0...v29.0.1

---

This discussion was created from the release LORIS Release 29.0.1.