v0.7.2

Another predominantly bug fix and QoL release, closing a low risk but easy-to-exploit bug whereby an authenticated user could update the data blocks on another users's sample without explicitly having permissions, provided they had the full item and block IDs; although this is difficult for them to achieve, they may have them lying around after having permissions that were then removed. The fix entirely solves the issue and does not require any migration.

On a more pleasant note, the release also includes some niceties:

• An export progress bar for long running ELN exports.
• Installation documentation improvements.
• Improvements to group searching.

What's Changed

• Improvements to ELN export: capture other file reprs and report progress to UI by @ml-evs in #1801
• Improvements to substance info display (rounding, toggle and styling) by @jdbocarsly in #1836
• Fixes events from bokeh route to fire by @be-smith in #1853
• remove 'only' from SampleTable e2e tests, ensuring all tests run by @jdbocarsly in #1830
• Add support for nmrglue < 0.12 with import guard on jeol reader by @ml-evs in #1855
• Remove mentions of Jest in documentation and add component test runner by @ml-evs in #1856
• Fix bug where only admins could be set as managers by @jdbocarsly in #1829
• Use native bokeh objects in callbacks rather than relying on window.event by @be-smith in #1835
• Fixes error in MS block where multiple chanels aren't plotted as separate panels by @be-smith in #1883
• Improve install docs for node, Python and MongoDB by @ml-evs in #1903
• Add some notes and more rules to AGENTS.md by @ml-evs in #1871
• Fix group search + group row unclickable by @jbouquiaux in #1909
• Lower erroneously open permissions of block updates if IDs are known by @ml-evs in #1918

New Contributors

• @jbouquiaux made their first contribution in #1909

Full Changelog: v0.7.1...v0.7.2