v2.16.0

What's Changed

🏕 Features

• Add automatic PR labelling based on directory structure by @PE39806 in #3196
• Circular authentication import bugfix by @PE39806 in #3195
• Add image scanning endpoint to modelscan by @GB907762 in #3149
• various styling changes to settings page of entries by @ARADDCC002 in #3197
• Reorder and add to vscode extensions by @PE39806 in #3200
• Add missing comma to bailo.configmap.yaml by @PE39806 in #3207
• Remove deprecated isNativeError by @PE39806 in #3208
• Fix runAsNonRoot deployment failures by aligning container users and Helm config by @PE39806 in #3199
• Frontend changes editable mirrored cards by @ARADDCC002 in #3054
• Correct Labeler branch config by @PE39806 in #3198
• Amend labeller config to avoid failed job on PR from forks by @GCHQDeveloper36 in #3214
• Ensure Promise.reject is a properly typed Error by @PE39806 in #3216
• Fix navbar by @GB907762 in #3209
• Fix race condition in model deletion by @JR40159 in #3211
• Improve logs for supporters by @JR40159 in #3213
• Enable soft deletion of Mirrored Models with files by @PE39806 in #3226
• Feature/update husky check list by @ON93754 in #3210
• Add editable mirrored models to python by @GB907762 in #3227
• Bai 2223 generalise scanners away from security by @IR96334 in #3139
• added a readme for the landing page by @ARADDCC002 in #3231
• Rename modelscan to artefactscan by @JRB66955 in #3212
• Feature/bai 2219 implement user escalation by @ON93754 in #3201
• Migrate to pino logging by @GB907762 in #3232
• fixed an issue whereby you could not select older model card reviisions by @ARADDCC002 in #3275
• Bai 2203 rerun filescan bug by @IR96334 in #3279
• Improve .dockerignores and bump Dockerfile.standalone packages by @PE39806 in #3281
• Added documentation for model mirroring by @ARADDCC002 in #3288
• Fixed tooltip by @IR96334 in #3294
• Enable Trivy Oras client configuration and custom CA support for ArtefactScan by @PE39806 in #3278
• Fix file aggregate query by @GB907762 in #3321
• Changed order of backend routes middleware initialisation by @ARADDCC002 in #3327
• Change python docs styling to be closer to main app by @PE39806 in #3331
• Feature/bai 2314 implement new mongo collection by @ON93754 in #3287
• Add restoreSoftDeletedImage function by @PE39806 in #3334
• Add file hard deletion by @PE39806 in #3332
• Use pipeline instead of .pipe by @GB907762 in #3328
• Bai 2177 frontend soft model delete e2e test by @IR96334 in #3325
• Feature/bai 2287 implement scheduling service by @ON93754 in #3313
• STROOM audit implementation by @JRB66955 in #3324
• Create Trivy connector and endpoint by @PE39806 in #3276
• Fix model scope matching by @GB907762 in #3345
• Implement automated trigger for Trivy image scan by @PE39806 in #3329
• Create deletions docs by @PE39806 in #3355
• Add deleteRegistryImage script and add defensive programming by @PE39806 in #3353
• Update ArtefactScan docs by @PE39806 in #3372
• Image vulnerability report page by @ARADDCC002 in #3330
• Automated image scan via backend API by @PE39806 in #3362
• Check for URL encoding in collaborators.entities when using patchModel by @IR96334 in #3356
• Fix helm port name too long by @PE39806 in #3376
• Add DB lock to ArtefactScan Trivy by @PE39806 in #3375
• Rename zod consts to ...Schema and ts types to exclude ...Schema by @PE39806 in #3400
• moved each image tag display to its own component by @ARADDCC002 in #3403
• Update local dev to have core services by @JR40159 in #3043
• Additional XML Stroom Config by @JRB66955 in #3409
• Assorted scanning improvements by @PE39806 in #3404
• Don't cache file download requests by @JR40159 in #3454
• Remove duplicate state and Improve EntryAccessInput by @JR40159 in #3371
• Improve registryAuth logic by @PE39806 in #3350

👒 Dependencies

• Bump tqdm from 4.67.2 to 4.67.3 in /lib/python by @dependabot[bot] in #3203
• Bump mongodb/mongodb-community-server from 8.2.3-ubi9 to 8.2.4-ubi9 by @dependabot[bot] in #3204
• Bump fastapi[standard-no-fastapi-cloud-cli] from 0.128.0 to 0.128.5 in /lib/modelscan_api by @dependabot[bot] in #3202
• Bump mongodb from 18.3.0 to 18.4.4 in /infrastructure/helm/bailo by @dependabot[bot] in #3205
• Bump axios from 1.13.4 to 1.13.5 in /frontend by @dependabot[bot] in #3206
• Bump qs from 6.14.1 to 6.14.2 in /backend by @dependabot[bot] in #3218
• Bump qs from 6.14.1 to 6.14.2 in /frontend by @dependabot[bot] in #3217
• Bump mongodb from 18.4.4 to 18.4.8 in /infrastructure/helm/bailo by @dependabot[bot] in #3225
• Bump mongodb/mongodb-community-server from 8.2.4-ubi9 to 8.2.5-ubi9 by @dependabot[bot] in #3224
• Bump fastapi[standard-no-fastapi-cloud-cli] from 0.128.5 to 0.129.0 in /lib/modelscan_api by @dependabot[bot] in #3223
• Bump node from 24.13.0-alpine to 24.13.1-alpine in /frontend by @dependabot[bot] in #3221
• Bump pydantic-settings from 2.12.0 to 2.13.0 in /lib/modelscan_api by @dependabot[bot] in #3222
• Bump oras from 0.2.38 to 0.2.39 in /lib/modelscan_api by @dependabot[bot] in #3220
• Bump node from 24.13.0-alpine to 24.13.1-alpine in /backend by @dependabot[bot] in #3219
• Bump fast-xml-parser and @aws-sdk/xml-builder in /backend by @dependabot[bot] in #3228
• Bump systeminformation from 5.30.7 to 5.31.1 in /frontend by @dependabot[bot] in #3229
• Bump swiper from 8.4.7 to 12.1.2 in /lib/landing by @dependabot[bot] in #3230
• Bump ajv from 6.12.6 to 6.14.0 in /frontend by @dependabot[bot] in #3233
• Bump uvicorn from 0.40.0 to 0.41.0 in /lib/artefactscan_api by @dependabot[bot] in #3243
• Bump @types/node from 24.10.9 to 24.10.13 in /lib/landing by @dependabot[bot] in #3246
• Bump mlflow-skinny[mlserver] from 3.9.0 to 3.10.0 in /lib/python by @dependabot[bot] in #3241
• Bump the mui-stack group in /frontend with 4 updates by @dependabot[bot] in #3240
• Bump pydantic-settings from 2.13.0 to 2.13.1 in /lib/artefactscan_api by @dependabot[bot] in #3237
• Bump pylint from 4.0.4 to 4.0.5 in /lib/python by @dependabot[bot] in #3236
• Bump the mui-stack group in /lib/landing with 3 updates by @dependabot[bot] in #3234
• Bump fastapi[standard-no-fastapi-cloud-cli] from 0.129.0 to 0.131.0 in /lib/artefactscan_api by @dependabot[bot] in #3239
• Bump semver from 7.7.3 to 7.7.4 in /frontend by @dependabot[bot] in #3255
• Bump jsrsasign from 11.1.0 to 11.1.1 in /backend by @dependabot[bot] in #3268
• Bump nodemon from 3.1.11 to 3.1.14 in /backend by @dependabot[bot] in #3260
• Bump @types/node from 24.10.10 to 24.10.13 in /backend by @dependabot[bot] in #3262
• Bump oras from 0.2.39 to 0.2.41 in /lib/artefactscan_api by @dependabot[bot] in #3244
• Bump mongodb from 18.4.8 to 18.6.0 in /infrastructure/helm/bailo by @dependabot[bot] in #3247
• Bump the aws-sdk-stack group in /backend with 6 updates by @dependabot[bot] in #3253
• Bump @vitejs/plugin-react from 5.1.3 to 5.1.4 in /frontend by @dependabot[bot] in #3256
• Bump qs from 6.14.2 to 6.15.0 in /backend by @dependabot[bot] in #3265
• Bump @types/node from 24.10.9 to 24.10.13 in /frontend by @dependabot[bot] in #3261
• Bump @types/react from 19.2.10 to 19.2.14 in /lib/landing by @dependabot[bot] in #3245
• Bump the testing-stack group in /frontend with 2 updates by @dependabot[bot] in #3250
• Bump @vercel/otel from 2.1.0 to 2.1.1 in /frontend in the opentelemetry-stack group by @dependabot[bot] in #3252
• Bump the opentelemetry-stack group across 1 directory with 5 updates by @dependabot[bot] in #3277
• Bump undici from 7.20.0 to 7.22.0 in /backend by @dependabot[bot] in #3271
• Bump react-to-print from 3.2.0 to 3.3.0 in /frontend by @dependabot[bot] in #3257
• Bump the rjsf-stack group in /frontend with 4 updates by @dependabot[bot] in #3251
• Bump @types/react from 19.2.10 to 19.2.14 in /frontend by @dependabot[bot] in #3259
• Bump semver from 7.7.3 to 7.7.4 in /backend by @dependabot[bot] in #3266
• Bump @huggingface/hub from 2.8.1 to 2.10.3 in /backend by @dependabot[bot] in #3272
• Bump vite-tsconfig-paths from 6.0.5 to 6.1.1 in /frontend in the typescript-stack group by @dependabot[bot] in #3249
• Bump vite-tsconfig-paths from 6.0.5 to 6.1.1 in /backend in the typescript-stack group by @dependabot[bot] in #3242
• Bump nodemailer from 7.0.13 to 8.0.1 in /backend by @dependabot[bot] in #3270
• Bump markdown-to-jsx from 9.6.1 to 9.7.6 in /frontend in the markdown-stack group by @dependabot[bot] in #3254
• Bump fastapi[standard-no-fastapi-cloud-cli] from 0.131.0 to 0.133.0 in /lib/artefactscan_api by @dependabot[bot] in #3280
• Bump bn.js from 4.12.2 to 4.12.3 in /backend by @dependabot[bot] in #3282
• Bump minimatch from 3.1.2 to 3.1.4 in /backend by @dependabot[bot] in #3283
• Bump the eslint-stack group in /backend with 3 updates by @dependabot[bot] in #3235
• Bump eslint from 9.39.2 to 10.0.1 in /lib/landing in the eslint-stack group by @dependabot[bot] in #3238
• Bump basic-ftp from 5.0.5 to 5.2.0 in /backend by @dependabot[bot] in #3289
• Bump rollup from 4.52.4 to 4.59.0 in /backend by @dependabot[bot] in #3291
• Bump rollup from 4.57.1 to 4.59.0 in /frontend by @dependabot[bot] in #3290
• Bump systeminformation and @opentelemetry/host-metrics in /backend by @dependabot[bot] in #3292
• Bump config from 4.2.0 to 4.4.0 in /backend by @dependabot[bot] in #3273
• Bump mongodb from 6.21.0 to 7.1.0 in /backend by @dependabot[bot] in #3274
• Bump minimatch in /lib/landing by @dependabot[bot] in #3296
• Bump minimatch from 3.1.2 to 3.1.5 in /frontend by @dependabot[bot] in #3295
• Bump @types/node from 24.10.14 to 24.11.0 in /backend by @dependabot[bot] in #3310
• Bump tar-stream from 3.1.7 to 3.1.8 in /backend by @dependabot[bot] in #3307
• Bump the aws-sdk-stack group in /backend with 5 updates by @dependabot[bot] in #3306
• Bump @types/node from 24.10.13 to 24.11.0 in /frontend by @dependabot[bot] in #3305
• Bump axios from 1.13.5 to 1.13.6 in /frontend by @dependabot[bot] in #3303
• Bump cypress from 15.10.0 to 15.11.0 in /frontend in the testing-stack group by @dependabot[bot] in #3302
• Bump swr from 2.4.0 to 2.4.1 in /frontend by @dependabot[bot] in #3304
• Bump @types/node from 24.10.13 to 24.11.0 in /lib/landing by @dependabot[bot] in #3300
• Bump lint-staged from 16.2.7 to 16.3.1 by @dependabot[bot] in #3297
• Bump eslint from 10.0.1 to 10.0.2 in /lib/landing in the eslint-stack group by @dependabot[bot] in #3299
• Bump actions/upload-artifact from 6 to 7 by @dependabot[bot] in #3312
• Bump actions/download-artifact from 7 to 8 by @dependabot[bot] in #3311
• Bump @types/supertest from 6.0.3 to 7.2.0 in /backend by @dependabot[bot] in #3309
• Bump pino-opentelemetry-transport from 2.0.0 to 3.0.0 in /backend by @dependabot[bot] in #3308
• Bump @eslint/js from 9.39.3 to 10.0.1 in /backend in the eslint-stack group by @dependabot[bot] in #3298
• Bump pytest-github-actions-annotate-failures from 0.3.0 to 0.4.0 in /lib/python by @dependabot[bot] in #3318
• Bump mongodb from 18.6.0 to 18.6.1 in /infrastructure/helm/bailo by @dependabot[bot] in #3320
• Bump node from 24.13.1-alpine to 24.14.0-alpine in /backend by @dependabot[bot] in #3317
• Bump node from 24.13.1-alpine to 24.14.0-alpine in /frontend by @dependabot[bot] in #3319
• Bump tarampampam/webhook-tester from 2.2.5 to 2.2.6 by @dependabot[bot] in #3314
• Bump pytest-github-actions-annotate-failures from 0.3.0 to 0.4.0 in /lib/artefactscan_api by @dependabot[bot] in #3316
• Bump fastapi[standard-no-fastapi-cloud-cli] from 0.133.0 to 0.135.1 in /lib/artefactscan_api by @dependabot[bot] in #3315
• Bump svgo from 4.0.0 to 4.0.1 in /backend by @dependabot[bot] in #3326
• Bump fast-xml-parser and @aws-sdk/xml-builder in /backend by @dependabot[bot] in #3333
• Bump oras from 0.2.41 to 0.2.42 in /lib/artefactscan_api by @dependabot[bot] in #3336
• Bump mlflow-skinny[mlserver] from 3.10.0 to 3.10.1 in /lib/python by @dependabot[bot] in #3337
• Bump ipython from 9.10.0 to 9.11.0 in /backend/docs by @dependabot[bot] in #3338
• Bump black from 26.1.0 to 26.3.0 in /lib/artefactscan_api by @dependabot[bot] in #3335
• Bump black from 26.1.0 to 26.3.0 in /lib/python by @dependabot[bot] in #3339
• Bump python from 3.12.12-slim-bookworm to 3.12.13-slim-bookworm in /lib/artefactscan_api by @dependabot[bot] in #3340
• Bump undici in /backend by @dependabot[bot] in #3343
• Bump undici from 7.22.0 to 7.24.1 in /frontend by @dependabot[bot] in #3344
• Bump black from 26.3.0 to 26.3.1 in /lib/artefactscan_api by @dependabot[bot] in #3342
• Bump js-yaml and xmlbuilder2 in /backend by @dependabot[bot] in #3346
• Bump black from 26.3.0 to 26.3.1 in /lib/python by @dependabot[bot] in #3348
• Bump uvicorn from 0.41.0 to 0.42.0 in /lib/artefactscan_api by @dependabot[bot] in #3347
• Bump mongodb from 18.6.1 to 18.6.11 in /infrastructure/helm/bailo by @dependabot[bot] in #3349
• Bump next from 16.1.6 to 16.1.7 in /lib/landing by @dependabot[bot] in #3352
• Bump next from 16.1.6 to 16.1.7 in /frontend by @dependabot[bot] in #3351
• Workaround dependabot to include trivy image by @PE39806 in #3354
• Bump flatted from 3.3.3 to 3.4.2 in /backend by @dependabot[bot] in #3359
• Bump flatted from 3.3.3 to 3.4.2 in /frontend by @dependabot[bot] in #3358
• Bump flatted from 3.3.3 to 3.4.2 in /lib/landing by @dependabot[bot] in #3357
• Bump aquasec/trivy from 0.69.1 to 0.69.3 in /lib/artefactscan_api by @dependabot[bot] in #3366
• Bump fastapi[standard-no-fastapi-cloud-cli] from 0.135.1 to 0.135.2 in /lib/artefactscan_api by @dependabot[bot] in #3363
• Bump marlonb/mailcrab from v1.6.4 to v1.6.5 by @dependabot[bot] in #3364
• Bump mongodb/mongodb-community-server from 8.2.5-ubi9 to 8.2.6-ubi9 by @dependabot[bot] in #3365
• Bump pytest-cov from 7.0.0 to 7.1.0 in /lib/python by @dependabot[bot] in #3367
• Bump mongodb from 18.6.11 to 18.6.20 in /infrastructure/helm/bailo by @dependabot[bot] in #3368
• Bump fast-xml-parser and @aws-sdk/xml-builder in /backend by @dependabot[bot] in #3370
• Bump marlonb/mailcrab from v1.6.4 to 1.6.5 in /infrastructure/helm/bailo by @dependabot[bot] in #3369
• Bump picomatch in /frontend by @dependabot[bot] in #3383
• Bump picomatch from 2.3.1 to 2.3.2 by @dependabot[bot] in #3382
• Bump picomatch in /backend by @dependabot[bot] in #3381
• Bump picomatch in /lib/landing by @dependabot[bot] in #3379
• Bump yaml from 1.10.2 to 1.10.3 in /frontend by @dependabot[bot] in #3377
• Bump requests from 2.32.5 to 2.33.0 in /lib/python by @dependabot[bot] in #3380
• Bump yaml from 1.10.2 to 1.10.3 in /lib/landing by @dependabot[bot] in #3378
• Bump yaml from 2.8.2 to 2.8.3 in /backend by @dependabot[bot] in #3399
• Bump undici from 7.24.1 to 7.24.6 in /backend by @dependabot[bot] in #3392
• Bump @types/node from 24.11.0 to 24.12.0 in /backend by @dependabot[bot] in #3390
• Bump mongodb from 7.1.0 to 7.1.1 in /backend by @dependabot[bot] in #3389
• Bump the aws-sdk-stack group in /backend with 6 updates by @dependabot[bot] in #3387
• Bump @types/config from 3.3.5 to 4.4.0 in /backend by @dependabot[bot] in #3398
• Bump the opentelemetry-stack group in /backend with 4 updates by @dependabot[bot] in #3388
• Bump nodemailer from 8.0.1 to 8.0.4 in /backend by @dependabot[bot] in #3394
• Bump nanoid from 5.1.6 to 5.1.7 in /backend by @dependabot[bot] in #3393
• Bump mjml from 5.0.0-alpha.8 to 5.0.0-beta.2 in /backend by @dependabot[bot] in #3396
• Bump @huggingface/hub from 2.10.4 to 2.11.0 in /backend by @dependabot[bot] in #3391
• Bump proxy-agent from 6.5.0 to 7.0.0 in /backend by @dependabot[bot] in #3397
• Bump the eslint-stack group in /backend with 4 updates by @dependabot[bot] in #3384
• Bump brace-expansion from 1.1.12 to 1.1.13 in /backend by @dependabot[bot] in #3401
• Bump path-to-regexp from 8.3.0 to 8.4.0 in /backend by @dependabot[bot] in #3402
• Bump node from 24.14.0-alpine to 24.14.1-alpine in /frontend by @dependabot[bot] in #3408
• Bump node from 24.14.0-alpine to 24.14.1-alpine in /backend by @dependabot[bot] in #3407
• Bump requests from 2.33.0 to 2.33.1 in /lib/python by @dependabot[bot] in #3406
• Bump ipython from 9.11.0 to 9.12.0 in /backend/docs by @dependabot[bot] in #3405
• Bump the mui-stack group in /lib/landing with 3 updates by @dependabot[bot] in #3415
• Bump @types/node from 24.11.0 to 24.12.0 in /lib/landing by @dependabot[bot] in #3420
• Bump lint-staged from 16.3.1 to 16.4.0 by @dependabot[bot] in #3411
• Bump the eslint-stack group in /backend with 2 updates by @dependabot[bot] in #3412
• Bump the react-stack group in /frontend with 5 updates by @dependabot[bot] in #3416
• Bump swiper from 12.1.2 to 12.1.3 in /lib/landing by @dependabot[bot] in #3421
• Bump axe-core from 4.11.1 to 4.11.2 in /frontend by @dependabot[bot] in #3430
• Bump dayjs from 1.11.19 to 1.11.20 in /frontend by @dependabot[bot] in #3431
• Bump undici from 7.24.6 to 7.24.7 in /backend by @dependabot[bot] in #3425
• Bump docker/build-push-action from 6 to 7 by @dependabot[bot] in #3439
• Bump docker/login-action from 3 to 4 by @dependabot[bot] in #3437
• Bump @types/node from 24.11.0 to 24.12.0 in /frontend by @dependabot[bot] in #3433
• Bump the rjsf-stack group across 1 directory with 4 updates by @dependabot[bot] in #3428
• Bump vite from 7.3.1 to 7.3.2 in /frontend by @dependabot[bot] in #3446
• Bump vite from 7.3.1 to 7.3.2 in /backend by @dependabot[bot] in #3445
• Bump lodash-es from 4.17.23 to 4.18.1 in /backend by @dependabot[bot] in #3442
• Bump lodash from 4.17.23 to 4.18.1 in /frontend by @dependabot[bot] in #3443
• Bump actions/configure-pages from 5 to 6 by @dependabot[bot] in #3438
• Bump docker/setup-buildx-action from 3 to 4 by @dependabot[bot] in #3436
• Bump axios from 1.13.6 to 1.14.0 in /frontend by @dependabot[bot] in #3432
• Bump lodash-es from 4.17.23 to 4.18.1 in /frontend by @dependabot[bot] in #3441
• Bump the testing-stack group across 1 directory with 3 updates by @dependabot[bot] in #3427
• Bump actions/deploy-pages from 4 to 5 by @dependabot[bot] in #3440
• Bump lodash from 4.17.23 to 4.18.1 in /backend by @dependabot[bot] in #3444
• Bump the markdown-stack group across 1 directory with 3 updates by @dependabot[bot] in #3429
• Bump the aws-sdk-stack group in /backend with 6 updates by @dependabot[bot] in #3422
• Bump the eslint-stack group across 1 directory with 2 updates by @dependabot[bot] in #3417
• Bump mongodb from 18.6.20 to 18.6.21 in /infrastructure/helm/bailo by @dependabot[bot] in #3452
• Bump registry from 3.0.0 to 3.1.0 in /infrastructure/helm/bailo by @dependabot[bot] in #3453
• Bump registry from 3.0.0 to 3.1.0 by @dependabot[bot] in #3451
• Bump fastapi from 0.135.2 to 0.135.3 in /lib/artefactscan_api by @dependabot[bot] in #3450
• Bump uvicorn from 0.42.0 to 0.44.0 in /lib/artefactscan_api by @dependabot[bot] in #3449
• Bump react-diff-viewer-continued from 4.0.6 to 4.2.0 in /frontend by @dependabot[bot] in #3435
• Bump python-multipart from 0.0.22 to 0.0.24 in /lib/artefactscan_api by @dependabot[bot] in #3448
• Bump @vitejs/plugin-react from 5.1.4 to 6.0.1 in /frontend by @dependabot[bot] in #3434
• Bump proxy-agent from 7.0.0 to 8.0.0 in /backend by @dependabot[bot] in #3426
• Bump typescript from 5.9.3 to 6.0.2 in /lib/landing in the typescript-stack group across 1 directory by @dependabot[bot] in #3418
• Bump the react-stack group across 1 directory with 2 updates by @dependabot[bot] in #3414
• Bump typescript from 5.9.3 to 6.0.2 in /backend in the typescript-stack group across 1 directory by @dependabot[bot] in #3413
• Bump basic-ftp from 5.2.0 to 5.2.1 in /backend by @dependabot[bot] in #3457
• Bump nodemailer from 8.0.4 to 8.0.5 in /backend by @dependabot[bot] in #3458
• Bump axios from 1.14.0 to 1.15.0 in /frontend by @dependabot[bot] in #3461
• Bump the mui-stack group across 1 directory with 3 updates by @dependabot[bot] in #3419
• Bump next from 16.2.2 to 16.2.3 in /lib/landing by @dependabot[bot] in #3464
• Bump basic-ftp from 5.2.1 to 5.2.2 in /backend by @dependabot[bot] in #3463
• Bump next from 16.2.2 to 16.2.3 in /frontend by @dependabot[bot] in #3465

Full Changelog: 2.15.0...2.16.0