2.21.0

Release Summary

• Added unified documentation, model and datacard search, lifecycle compliance reporting, and richer model-card comparisons.
• Hardened archive scanning and tightened authentication and authorisation checks.
• Changed storage and CI/CD deployment behaviour.

New Features

• Added a unified search dialog with category filters, keyboard navigation and documentation heading results (#3882).
• Added lifecycle compliance metrics, including overdue and upcoming reviews, with global and organisation-level views (#4007).
• Added rich model-card comparisons for structured Markdown, including tables, lists, footnotes and media (#4369).

Bug Fixes

• Review dates in the past can now be confirmed, while future dates are limited by the configured maximum review interval (#4053, #4072).

API Changes

• Added lifecycle compliance metrics data covering review counts, due dates and model owners, broken down globally and by organisation (#4007).
• Consolidated Python client entry operations into a shared Entry API, with common creation, retrieval and search methods and shared release operations.

Security Changes

• Archive extraction now blocks path traversal, skips links and special files, limits extracted size and entry count, and rejects unsafe uploads (#4374, #4291).
• Trivy database layers are checksum-verified before extraction, and database updates are staged to avoid replacing existing data on failure (#4034).
• Tightened authentication and authorisation checks (#4249, #4112, #4276).

Deployment and Operations Changes

• Migrated standalone storage from MinIO to SeaweedFS (#3976).
• Reduced Docker image size through build and image changes (#4036).
• Removed the manual AWS and OpenShift build/deploy jobs from GitLab CI.

What's Changed

🏕 Features

• Fix Tab navigation on model card's share button requiring two tab presses by @JRB66955 in #3977
• Chore/dependabot and pinned version SHA improvements by @PE39806 in #3975
• Metrics UI for models with unapproved releases by @ARADDCC002 in #3907
• Feature/bai 2607 restrict creation of um by @ON93754 in #3919
• Refactor frontend release and access request review content by @JR40159 in #3921
• Migrate minio to seaweedfs by @GB907762 in #3976
• Add model mirroring integration tests by @PE39806 in #3974
• Add CLAUDE.md by @PE39806 in #4033
• Added the api for model lifecycle review metrics by @ARADDCC002 in #4005
• Review status is now a calculated property when getting reviews by @ARADDCC002 in #3914
• Fix initial redirect by @GB907762 in #4035
• Model lifecycle metrics UI by @ARADDCC002 in #4007
• Registry action auditing by @JRB66955 in #3864
• Add searchable documentation by @GB907762 in #3882
• Decrease Docker image size by @PE39806 in #4036
• Restrict all access UM to role by @GB907762 in #4048
• Move & extract CI/CD files by @PE39806 in #4050
• Fix backend dev live container reload by @PE39806 in #4052
• Bugfix/resource and audit kinds by @JR40159 in #4051
• Verify pulled Trivy image integrity by @PE39806 in #4034
• Fix registry events handling by @PE39806 in #4057
• Allow users to set lifecycle review dates that are in the past by @PE39806 in #4053
• Improvements to releases with long notes by @ARADDCC002 in #4008
• Fix show more on expandable typography to use webkit clamp instead of string truncation by @GB907762 in #4055
• Fix verical overflow on the header and horizontal on entries by @GB907762 in #4054
• Fix/model card diff by @GB907762 in #4037
• Fix missing UntrustedModel role in getCurrentUser endpoint by @PE39806 in #4077
• Add warning if model state is unset by @JR40159 in #4071
• Fix model schema selected SWR cache mismatch by @PE39806 in #4076
• Frontend polish by @PE39806 in #4078
• De-duplicate frontend components by @PE39806 in #4075
• Feature/bai 2440 draft release implementation by @IR96334 in #3915
• Restrict lifecyle future date by @PE39806 in #4072
• Stroom Config updates by @JRB66955 in #4082
• Add clarity to required field description by @IR96334 in #4089
• Migrate Python dirs to pyroject.toml by @PE39806 in #4081
• add v3 by @ARADDCC013 in #4091
• fix ci autorun by @ARADDCC013 in #4105
• Fix metrics count drift and schema soft-delete miscounting by @PE39806 in #4092
• Switch Python lint & format to ruff by @PE39806 in #4093
• seperate OR to individual if statement by @ARADDCC013 in #4110
• Display schema id in schemas page by @PE39806 in #4108
• Add check to oauth role lookup by @JR40159 in #4112
• feat: add cspell to lint grammar by @evenstensberg in #3917
• Improve typing of coerce functions by @JR40159 in #4104
• Update agents test command to exclude coverage by @PE39806 in #4177
• Chore/update contribution guidance by @JR40159 in #4215
• change bfg download loc by @ARADDCC013 in #4216
• chore: sort pkg.json by @evenstensberg in #4185
• Fix Python downloads with reserved filename characters by @sylvesterkaczmarek in #4214
• remove debug by @ARADDCC013 in #4244
• Fix missing auth check and backwards missing fileIds by @PE39806 in #4249
• Remove added review creation on the review role additions by @GB907762 in #4248
• Standardise test config mock by @PE39806 in #4227
• Fix utils/registryResponse.ts circular dependency tree by @JRB66955 in #4252
• Add consistent border width to prevent text shift by @PE39806 in #4267
• bfg only by @ARADDCC013 in #4270
• Add cross model file removal fix by @GB907762 in #4276
• Fix vulnerability colour. Fix cve table display by @GB907762 in #4298
• Add multiple error to trivy results by @GB907762 in #4299
• ArtefactScan handle tar bomb by @PE39806 in #4291
• Add missing modelId to checkReleaseApproved by @PE39806 in #4347
• Remove CLAUDE.md by @PE39806 in #4368
• Add reusable swap button component for admin schema comparison by @PE39806 in #4371
• De-duplicate Python client by @PE39806 in #4370
• Access request authorisation fixes by @PE39806 in #4251
• STROOM batch size limit by @PE39806 in #4344
• Fix RJSF breaking change defaulting unanswered boolean to false by @PE39806 in #4376
• Correct merge ownership line by @PE39806 in #4382
• Bugfix CVE-2025-4517 by @PE39806 in #4374
• Reduced APIcalls on marketplace by @ARADDCC002 in #4378
• Inline diff on model cards by @GB907762 in #4369
• Update contributors guidance by @PE39806 in #4396

👒 Dependencies

• Bump filelock from 3.32.0 to 3.32.2 in /lib/artefactscan_api by @dependabot[bot] in #3984
• Bump fast-uri from 3.1.4 to 3.1.5 in /frontend by @dependabot[bot] in #3987
• Bump mlflow-skinny from 3.14.0 to 3.15.0 in /lib/python by @dependabot[bot] in #3983
• Bump fastapi from 0.140.8 to 0.141.1 in /lib/artefactscan_api by @dependabot[bot] in #3981
• Bump ipython from 9.15.0 to 9.16.0 in /backend/docs by @dependabot[bot] in #3980
• Bump uvicorn from 0.51.0 to 0.52.0 in /lib/artefactscan_api by @dependabot[bot] in #3985
• Bump postcss and next in /frontend by @dependabot[bot] in #3989
• Bump postcss and next in /lib/landing by @dependabot[bot] in #3988
• Bump lint-staged from 17.2.0 to 17.3.0 by @dependabot[bot] in #3991
• Bump axios from 1.18.1 to 1.19.0 in /frontend by @dependabot[bot] in #3995
• Bump chalk from 5.6.2 to 6.0.0 in /backend by @dependabot[bot] in #3999
• Bump the aws-sdk-stack group in /backend with 5 updates by @dependabot[bot] in #3996
• Bump ubuntu from 4fbb8e6 to 561618e by @dependabot[bot] in #3992
• Bump the node-images group across 3 directories with 1 update by @dependabot[bot] in #3990
• Bump mongodb from 19.1.21 to 19.1.22 in /infrastructure/helm/bailo by @dependabot[bot] in #3986
• Bump @vitejs/plugin-react from 6.0.4 to 6.0.5 in /frontend in the react-stack group by @dependabot[bot] in #3993
• Bump the github-actions group with 2 updates by @dependabot[bot] in #4002
• Bump brace-expansion in /lib/landing by @dependabot[bot] in #4003
• Bump brace-expansion in /frontend by @dependabot[bot] in #4006
• Bump sphinx from 8.2.3 to 9.1.0 in /backend/docs in the sphinx-stack group across 1 directory by @dependabot[bot] in #4001
• Bump js-yaml from 4.3.0 to 4.3.1 in /frontend by @dependabot[bot] in #4009
• Bump mlflow-skinny from 3.15.0 to 3.15.1 in /lib/python by @dependabot[bot] in #4012
• Bump @next/mdx from 16.2.12 to 16.3.0 in /lib/landing in the react-stack group by @dependabot[bot] in #4013
• Bump marlonb/mailcrab from v1.8.0 to v1.9.0 by @dependabot[bot] in #4014
• Bump eslint-config-next from 16.2.12 to 16.3.0 in /lib/landing in the eslint-stack group by @dependabot[bot] in #4015
• Bump swagger-ui-dist from 5.32.11 to 5.32.12 in /lib/landing by @dependabot[bot] in #4016
• Bump the react-stack group in /frontend with 3 updates by @dependabot[bot] in #4017
• Bump markdown-to-jsx from 9.10.1 to 9.10.2 in /frontend in the markdown-stack group by @dependabot[bot] in #4023
• Bump @testing-library/user-event from 14.6.1 to 14.6.3 in /frontend in the testing-stack group by @dependabot[bot] in #4021
• Bump ipython from 9.16.0 to 9.16.1 in /backend/docs by @dependabot[bot] in #4019
• Bump uvicorn from 0.52.0 to 0.52.1 in /lib/artefactscan_api in the server-stack group across 1 directory by @dependabot[bot] in #4011
• Bump the github-actions group with 2 updates by @dependabot[bot] in #4032
• Bump the aws-sdk-stack group in /backend with 6 updates by @dependabot[bot] in #4022
• Bump the eslint-stack group in /frontend with 3 updates by @dependabot[bot] in #4020
• Bump swr from 2.4.2 to 2.5.0 in /frontend by @dependabot[bot] in #4028
• Bump aquasec/trivy from 0.72.0 to 0.73.0 in /lib/artefactscan_api by @dependabot[bot] in #4018
• Bump undici from 8.9.0 to 8.10.0 in /backend by @dependabot[bot] in #4031
• Update Dockerfile.standalone by @PE39806 in #4010
• Bump the aws-sdk-stack group across 1 directory with 2 updates by @dependabot[bot] in #4026
• Bump @types/semver from 7.7.1 to 7.8.0 in /frontend in the types-stack group across 1 directory by @dependabot[bot] in #4024
• Bump @huggingface/hub from 2.14.4 to 2.14.6 in /backend by @dependabot[bot] in #4030
• Bump the eslint-stack group across 1 directory with 3 updates by @dependabot[bot] in #4025
• Bump config from 4.4.2 to 5.0.0 in /backend by @dependabot[bot] in #4029
• Bump marlonb/mailcrab from v1.8.0 to v1.9.0 by @dependabot[bot] in #4045
• Bump chrislusf/seaweedfs from 4.40 to 4.41 by @dependabot[bot] in #4043
• Bump mongodb from 19.1.22 to 19.1.24 in /infrastructure/helm/bailo by @dependabot[bot] in #4046
• Bump pydantic-settings from 2.14.2 to 2.15.0 in /lib/artefactscan_api by @dependabot[bot] in #4041
• Bump the node-images group across 3 directories with 1 update by @dependabot[bot] in #4040
• Bump chrislusf/seaweedfs from 4.40 to 4.41 by @dependabot[bot] in #4038
• Bump python from 57cd7c3 to 229a2c5 in /lib/artefactscan_api in the python-images group across 1 directory by @dependabot[bot] in #4042
• Bump distribution/distribution from 1eda63c to bca2472 by @dependabot[bot] in #4044
• Update flit-core requirement from <4,>=3.4 to >=4.0,<5 in /lib/python by @dependabot[bot] in #4039
• Bump mongodb from 19.1.24 to 19.1.30 in /infrastructure/helm/bailo by @dependabot[bot] in #4069
• Bump filelock from 3.32.2 to 3.32.3 in /lib/artefactscan_api by @dependabot[bot] in #4068
• Bump python from 3.12.13-slim-trixie to 3.12.14-slim-trixie in /lib/artefactscan_api in the python-images group across 1 directory by @dependabot[bot] in #4064
• Bump pre-commit from 4.6.1 to 4.6.2 in /lib/artefactscan_api by @dependabot[bot] in #4066
• Bump pre-commit from 4.6.1 to 4.6.2 in /lib/python by @dependabot[bot] in #4063
• Bump uvicorn from 0.52.1 to 0.52.3 in /lib/artefactscan_api in the server-stack group across 1 directory by @dependabot[bot] in #4065
• Bump pre-commit from 4.6.1 to 4.6.2 in /backend/docs by @dependabot[bot] in #4059
• Bump pylint from 4.0.6 to 4.0.7 in /lib/python by @dependabot[bot] in #4058
• Bump mongodb/mongodb-community-server from 8.3.7-ubi9 to 8.3.7-ubi9 by @dependabot[bot] in #4061
• Bump oras from 0.2.42 to 0.2.43 in /lib/artefactscan_api in the scanning-stack group across 1 directory by @dependabot[bot] in #4062
• Bump aquasec/trivy from 0.73.0 to 0.74.0 in /lib/artefactscan_api by @dependabot[bot] in #4067
• Bump chrislusf/seaweedfs from 4.41 to 4.44 by @dependabot[bot] in #4101
• Bump chrislusf/seaweedfs from 4.41 to 4.44 by @dependabot[bot] in #4096
• Bump mongodb from 19.1.30 to 19.1.36 in /infrastructure/helm/bailo by @dependabot[bot] in #4099
• Bump uvicorn from 0.52.3 to 0.52.4 in /lib/artefactscan_api in the server-stack group across 1 directory by @dependabot[bot] in #4095
• Update setuptools requirement from >=75 to >=84.0.0 in /backend/docs by @dependabot[bot] in #4100
• Bump ubuntu from 561618e to 33ceb71 by @dependabot[bot] in #4098
• Bump the react-stack group in /lib/landing with 2 updates by @dependabot[bot] in #4122
• Bump lint-staged from 17.3.0 to 17.4.1 by @dependabot[bot] in #4121
• Bump swagger-ui-dist from 5.32.12 to 5.32.14 in /lib/landing by @dependabot[bot] in #4127
• Bump filelock from 3.32.3 to 3.32.4 in /lib/artefactscan_api by @dependabot[bot] in #4126
• Bump the react-stack group in /frontend with 13 updates by @dependabot[bot] in #4131
• Bump ruff from 0.16.4 to 0.16.5 in /lib/artefactscan_api by @dependabot[bot] in #4129
• Bump the testing-stack group in /backend with 2 updates by @dependabot[bot] in #4133
• Bump config from 5.0.0 to 5.0.1 in /backend by @dependabot[bot] in #4147
• Bump nodemailer from 9.0.3 to 9.0.6 in /backend by @dependabot[bot] in #4141
• Bump @types/node from 26.1.2 to 26.4.0 in /lib/landing in the types-stack group by @dependabot[bot] in #4125
• Bump tsx from 4.23.5 to 4.23.12 in /backend by @dependabot[bot] in #4146
• Bump uuid from 14.0.1 to 14.0.2 in /frontend by @dependabot[bot] in #4162
• Bump tsx from 4.23.1 to 4.23.12 in /frontend by @dependabot[bot] in #4156
• Bump the types-stack group in /frontend with 2 updates by @dependabot[bot] in #4153
• Bump sharp from 0.35.3 to 0.35.4 in /frontend by @dependabot[bot] in #4164
• Bump pretty-bytes from 7.1.1 to 7.1.2 in /frontend by @dependabot[bot] in #4161
• Bump dorny/paths-filter from 4.0.2 to 4.0.3 by @dependabot[bot] in #4173
• Bump the github-actions group with 3 updates by @dependabot[bot] in #4172
• Bump python from 2c941e8 to e5c9fa2 in /lib/artefactscan_api in the python-images group across 1 directory by @dependabot[bot] in #4158
• Bump mongodb from 19.1.36 to 19.1.37 in /infrastructure/helm/bailo by @dependabot[bot] in #4171
• Bump mlflow-skinny from 3.15.1 to 3.15.2 in /lib/python by @dependabot[bot] in #4167
• Bump ruff from 0.16.4 to 0.16.5 in /lib/python by @dependabot[bot] in #4168
• Bump chrislusf/seaweedfs from 4.44 to 4.45 by @dependabot[bot] in #4165
• Bump dayjs from 1.11.21 to 1.11.23 in /frontend by @dependabot[bot] in #4157
• Bump sanitize-html from 2.17.6 to 2.17.7 in /backend by @dependabot[bot] in #4149
• Bump swiper from 14.0.7 to 14.2.0 in /lib/landing by @dependabot[bot] in #4128
• Bump @uiw/react-md-editor from 4.1.1 to 4.1.2 in /frontend in the markdown-stack group by @dependabot[bot] in #4151
• Bump mongodb/mongodb-community-server from 8.3.7-ubi9 to 8.3.8-ubi9 by @dependabot[bot] in #4166
• Bump uuid from 14.0.1 to 14.0.2 in /backend by @dependabot[bot] in #4152
• Bump swr from 2.5.0 to 2.5.1 in /frontend by @dependabot[bot] in #4163
• Bump the node-images group across 3 directories with 1 update by @dependabot[bot] in #4155
• Bump chrislusf/seaweedfs from 4.44 to 4.45 by @dependabot[bot] in #4160
• Bump ruff from 0.16.4 to 0.16.5 in /backend/docs by @dependabot[bot] in #4169
• Bump the eslint-stack group across 1 directory with 5 updates by @dependabot[bot] in #4138
• Bump the eslint-stack group in /backend with 4 updates by @dependabot[bot] in #4132
• Bump ipython from 9.16.1 to 9.17.0 in /backend/docs by @dependabot[bot] in #4170
• Bump axios from 1.19.0 to 1.20.0 in /frontend by @dependabot[bot] in #4159
• Bump the aws-sdk-stack group across 1 directory with 2 updates by @dependabot[bot] in #4154
• Bump @huggingface/hub from 2.14.6 to 2.16.1 in /backend by @dependabot[bot] in #4150
• Bump the rjsf-stack group in /frontend with 4 updates by @dependabot[bot] in #4148
• Bump morgan from 1.11.0 to 1.12.0 in /backend by @dependabot[bot] in #4142
• Bump content-disposition from 2.0.1 to 3.0.0 in /backend by @dependabot[bot] in #4140
• Bump the types-stack group across 1 directory with 2 updates by @dependabot[bot] in #4139
• Bump the eslint-stack group across 1 directory with 2 updates by @dependabot[bot] in #4124
• Bump the mui-stack group in /frontend with 5 updates by @dependabot[bot] in #4134
• Bump express-rate-limit from 8.6.1 to 8.7.0 in /backend in the express-stack group by @dependabot[bot] in #4136
• Bump browserslist from 4.28.4 to 4.28.8 in /frontend by @dependabot[bot] in #4175
• Bump globals from 17.9.0 to 17.11.0 in /backend by @dependabot[bot] in #4144
• Bump the testing-stack group in /frontend with 5 updates by @dependabot[bot] in #4143
• Bump the mongoose-stack group across 1 directory with 2 updates by @dependabot[bot] in #4135
• Bump the aws-sdk-stack group across 1 directory with 7 updates by @dependabot[bot] in #4130
• Bump the mui-stack group in /lib/landing with 3 updates by @dependabot[bot] in #4123
• Bump browserslist from 4.28.4 to 4.28.8 in /lib/landing by @dependabot[bot] in #4174
• Bump fast-uri in /frontend by @dependabot[bot] in #4179
• Bump qs from 6.15.3 to 6.16.0 in /backend by @dependabot[bot] in #4180
• Bump tar-stream from 3.2.0 to 3.2.1 in /backend by @dependabot[bot] in #4145
• Bump nanoid from 3.3.17 to 3.3.18 in /lib/landing by @dependabot[bot] in #4187
• Bump chrislusf/seaweedfs from 4.45 to 4.46 by @dependabot[bot] in #4193
• Bump filelock from 3.32.4 to 3.32.5 in /lib/artefactscan_api by @dependabot[bot] in #4200
• Bump mongodb from 19.1.37 to 19.1.41 in /infrastructure/helm/bailo by @dependabot[bot] in #4198
• Bump ruff from 0.16.5 to 0.16.6 in /backend/docs by @dependabot[bot] in #4196
• Bump ruff from 0.16.5 to 0.16.6 in /lib/artefactscan_api by @dependabot[bot] in #4197
• Bump ruff from 0.16.5 to 0.16.6 in /lib/python by @dependabot[bot] in #4201
• Bump ipython from 9.17.0 to 9.17.1 in /backend/docs by @dependabot[bot] in #4199
• Bump mlflow-skinny from 3.15.2 to 3.16.0 in /lib/python by @dependabot[bot] in #4195
• Bump mongodb/mongodb-community-server from 8.3.8-ubi9 to 8.3.8-ubi9 by @dependabot[bot] in #4194
• Bump python from e5c9fa2 to 78387bc in /lib/artefactscan_api in the python-images group across 1 directory by @dependabot[bot] in #4202
• Bump chrislusf/seaweedfs from 4.45 to 4.46 by @dependabot[bot] in #4203
• Bump svgo from 4.0.2 to 4.1.0 in /backend by @dependabot[bot] in #4205
• Bump js-yaml from 4.3.1 to 4.3.2 in /backend by @dependabot[bot] in #4210
• Bump sharp from 0.35.3 to 0.35.4 in /lib/landing by @dependabot[bot] in #4211
• Bump js-yaml from 4.3.1 to 4.3.2 in /frontend by @dependabot[bot] in #4212
• Bump nodemailer from 9.0.6 to 9.1.1 in /backend by @dependabot[bot] in #4209
• Bump nanoid from 3.3.17 to 3.3.19 in /frontend by @dependabot[bot] in #4225
• Bump mongodb/mongodb-community-server from 8.3.8-ubi9 to 8.3.11-ubi9 by @dependabot[bot] in #4232
• Bump ubuntu from 33ceb71 to 224a186 by @dependabot[bot] in #4234
• Bump tqdm from 4.70.0 to 4.70.1 in /lib/python by @dependabot[bot] in #4235
• Bump the node-images group across 3 directories with 1 update by @dependabot[bot] in #4231
• Bump ruff from 0.16.6 to 0.16.7 in /lib/python by @dependabot[bot] in #4236
• Bump ruff from 0.16.6 to 0.16.7 in /lib/artefactscan_api by @dependabot[bot] in #4229
• Bump ruff from 0.16.6 to 0.16.7 in /backend/docs by @dependabot[bot] in #4237
• Bump filelock from 3.32.5 to 3.32.6 in /lib/artefactscan_api by @dependabot[bot] in #4228
• Bump mongodb from 19.1.41 to 19.2.1 in /infrastructure/helm/bailo by @dependabot[bot] in #4238
• Bump chrislusf/seaweedfs from 4.46 to 4.47 by @dependabot[bot] in #4230
• Bump chrislusf/seaweedfs from 4.46 to 4.47 by @dependabot[bot] in #4233
• Bump ruff from 0.16.7 to 0.16.8 in /backend/docs by @dependabot[bot] in #4266
• Bump ruff from 0.16.7 to 0.16.8 in /lib/python by @dependabot[bot] in #4265
• Bump mlflow-skinny from 3.16.0 to 3.16.1 in /lib/python by @dependabot[bot] in #4264
• Bump the node-images group across 3 directories with 1 update by @dependabot[bot] in #4258
• Bump marlonb/mailcrab from v1.9.0 to v1.10.0 by @dependabot[bot] in #4261
• Bump ruff from 0.16.7 to 0.16.8 in /lib/artefactscan_api by @dependabot[bot] in #4256
• Bump marlonb/mailcrab from v1.9.0 to v1.10.0 by @dependabot[bot] in #4263
• Bump python from 78387bc to 2f17fc0 in /lib/artefactscan_api in the python-images group across 1 directory by @dependabot[bot] in #4259
• Bump ubuntu from 224a186 to 008173c by @dependabot[bot] in #4260
• Bump uvicorn from 0.52.4 to 0.53.0 in /lib/artefactscan_api in the server-stack group across 1 directory by @dependabot[bot] in #4255
• Bump ip-address from 10.4.0 to 10.7.2 in /backend by @dependabot[bot] in #4278
• Bump undici in /backend by @dependabot[bot] in #4277
• Bump morgan from 1.12.0 to 1.12.1 in /backend by @dependabot[bot] in #4279
• Bump nodemailer from 9.1.1 to 10.0.2 in /backend by @dependabot[bot] in #4280
• Bump python from 2f17fc0 to f77ac9e in /lib/artefactscan_api in the python-images group across 1 directory by @dependabot[bot] in #4287
• Bump ruff from 0.16.8 to 0.16.9 in /lib/python by @dependabot[bot] in #4284
• Bump ruff from 0.16.8 to 0.16.9 in /backend/docs by @dependabot[bot] in #4285
• Bump ruff from 0.16.8 to 0.16.9 in /lib/artefactscan_api by @dependabot[bot] in #4286
• Bump the node-images group across 3 directories with 1 update by @dependabot[bot] in #4282
• Bump mongodb from 19.2.1 to 19.3.1 in /infrastructure/helm/bailo by @dependabot[bot] in #4290
• Bump filelock from 3.32.6 to 4.0.3 in /lib/artefactscan_api by @dependabot[bot] in #4288
• Bump uvicorn from 0.53.0 to 0.54.0 in /lib/artefactscan_api in the server-stack group across 1 directory by @dependabot[bot] in #4283
• Bump brace-expansion in /lib/landing by @dependabot[bot] in #4296
• Bump brace-expansion in /frontend by @dependabot[bot] in #4294
• Bump brace-expansion in /backend by @dependabot[bot] in #4293
• Bump fast-uri in /frontend by @dependabot[bot] in #4295
• Bump undici from 8.9.0 to 8.11.2 in /frontend by @dependabot[bot] in #4292
• Bump nodemailer from 10.0.2 to 10.0.9 in /backend by @dependabot[bot] in #4297
• Bump distribution/distribution from 1eda63c to d106962 by @dependabot[bot] in #4281
• Bump distribution/distribution from bca2472 to d106962 by @dependabot[bot] in #4289
• Bump tsx from 4.23.12 to 4.23.15 in /frontend by @dependabot[bot] in #4336
• Bump sharp from 0.35.4 to 0.35.5 in /frontend by @dependabot[bot] in #4335
• Bump prettier from 3.9.6 to 3.9.9 in /frontend by @dependabot[bot] in #4333
• Bump mjml from 5.4.0 to 5.4.1 in /backend by @dependabot[bot] in #4323
• Bump markdown-to-jsx from 9.10.2 to 9.10.3 in /frontend in the markdown-stack group by @dependabot[bot] in #4324
• Bump prettier from 3.9.6 to 3.9.9 in /backend by @dependabot[bot] in #4325
• Bump chalk from 6.0.0 to 6.0.1 in /backend by @dependabot[bot] in #4326
• Bump tsx from 4.23.12 to 4.23.15 in /backend by @dependabot[bot] in #4327
• Bump globals from 17.11.0 to 17.12.0 in /backend by @dependabot[bot] in #4329
• Bump yargs from 18.1.0 to 18.2.0 in /backend by @dependabot[bot] in #4330
• Bump pretty-bytes from 7.1.2 to 7.2.0 in /frontend by @dependabot[bot] in #4334
• Bump nodemailer from 10.0.9 to 10.0.12 in /backend by @dependabot[bot] in #4321
• Bump the aws-sdk-stack group in /backend with 7 updates by @dependabot[bot] in #4309
• Bump the eslint-stack group in /lib/landing with 2 updates by @dependabot[bot] in #4306
• Bump the react-stack group in /lib/landing with 4 updates by @dependabot[bot] in #4305
• Bump swagger-ui-dist from 5.32.14 to 5.33.0 in /lib/landing by @dependabot[bot] in #4308
• Bump @grpc/grpc-js from 1.14.4 to 1.14.5 in /backend by @dependabot[bot] in #4337
• Bump the rjsf-stack group in /frontend with 4 updates by @dependabot[bot] in #4322
• Bump the aws-sdk-stack group across 1 directory with 2 updates by @dependabot[bot] in #4332
• Bump the eslint-stack group across 1 directory with 5 updates by @dependabot[bot] in #4315
• Bump the github-actions group with 5 updates by @dependabot[bot] in #4331
• Bump prettier from 3.9.6 to 3.9.9 by @dependabot[bot] in #4303
• Bump the eslint-stack group across 1 directory with 4 updates by @dependabot[bot] in #4313
• Bump next from 16.3.3 to 16.3.8 in /frontend by @dependabot[bot] in #4338
• Bump @types/node from 26.4.0 to 26.6.3 in /frontend in the types-stack group across 1 directory by @dependabot[bot] in #4328
• Bump the types-stack group across 1 directory with 2 updates by @dependabot[bot] in #4340
• Bump @types/node from 26.4.0 to 26.6.3 in /lib/landing in the types-stack group across 1 directory by @dependabot[bot] in #4307
• Bump the react-stack group across 1 directory with 5 updates by @dependabot[bot] in #4341
• Bump lint-staged from 17.4.1 to 17.6.0 by @dependabot[bot] in #4301
• Bump the mui-stack group across 1 directory with 2 updates by @dependabot[bot] in #4312
• Bump the testing-stack group across 1 directory with 4 updates by @dependabot[bot] in #4319
• Bump @huggingface/hub from 2.16.1 to 2.17.5 in /backend by @dependabot[bot] in #4320
• Bump cspell from 10.1.1 to 10.3.5 by @dependabot[bot] in #4304
• Bump @cspell/dict-python from 4.4.1 to 4.5.2 by @dependabot[bot] in #4302
• Bump the testing-stack group across 1 directory with 3 updates by @dependabot[bot] in #4314
• Bump mongoose from 9.9.4 to 9.10.2 in /backend in the mongoose-stack group across 1 directory by @dependabot[bot] in #4316
• Bump filelock from 4.0.3 to 4.0.9 in /lib/artefactscan_api by @dependabot[bot] in #4361
• Bump ruff from 0.16.9 to 0.16.10 in /lib/python by @dependabot[bot] in #4357
• Bump ruff from 0.16.9 to 0.16.10 in /backend/docs by @dependabot[bot] in #4356
• Bump pytest-mock from 3.15.1 to 3.16.0 in /lib/python by @dependabot[bot] in #4359
• Bump registry from 3.1.2 to 3.1.2 by @dependabot[bot] in #4349
• Bump registry from 21078ec to ddf7543 by @dependabot[bot] in #4351
• Bump pytest-mock from 3.15.1 to 3.16.0 in /lib/artefactscan_api in the testing-stack group across 1 directory by @dependabot[bot] in #4358
• Bump chrislusf/seaweedfs from 4.47 to 4.48 by @dependabot[bot] in #4350
• Bump aquasec/trivy from 0.74.0 to 0.75.0 in /lib/artefactscan_api by @dependabot[bot] in #4355
• Bump source-map-js from 1.2.1 to 1.2.2 in /frontend by @dependabot[bot] in #4362
• Bump source-map-js from 1.2.1 to 1.2.2 in /backend by @dependabot[bot] in #4363
• Bump proxy-addr from 2.0.7 to 2.0.8 in /backend by @dependabot[bot] in #4365
• Bump fastapi from 0.141.1 to 0.142.2 in /lib/artefactscan_api in the server-stack group across 1 directory by @dependabot[bot] in #4353
• Bump chrislusf/seaweedfs from 4.47 to 4.48 by @dependabot[bot] in #4352
• Bump ruff from 0.16.9 to 0.16.10 in /lib/artefactscan_api by @dependabot[bot] in #4360
• Bump source-map-js from 1.2.1 to 1.2.2 in /lib/landing by @dependabot[bot] in #4364
• Bump handlebars from 4.7.9 to 4.7.10 in /backend by @dependabot[bot] in #4379
• Bump sharp from 0.35.4 to 0.35.5 in /lib/landing by @dependabot[bot] in #4380
• Bump next from 16.3.6 to 16.3.8 in /lib/landing by @dependabot[bot] in #4381
• Bump ubuntu from 008173c to 534baea by @dependabot[bot] in #4389
• Bump filelock from 4.0.9 to 4.1.1 in /lib/artefactscan_api by @dependabot[bot] in #4390
• Bump ruff from 0.16.10 to 0.17.0 in /lib/artefactscan_api by @dependabot[bot] in #4388
• Bump python from 3.12.14-slim-trixie to 3.12.15-slim-trixie in /lib/artefactscan_api in the python-images group across 1 directory by @dependabot[bot] in #4394
• Bump the node-images group across 3 directories with 1 update by @dependabot[bot] in #4392
• Bump ruff from 0.16.10 to 0.17.0 in /lib/python by @dependabot[bot] in #4393
• Bump ruff from 0.16.10 to 0.17.0 in /backend/docs by @dependabot[bot] in #4395
• Bump fastapi from 0.142.2 to 0.143.0 in /lib/artefactscan_api in the server-stack group across 1 directory by @dependabot[bot] in #4391

New Contributors

• @sylvesterkaczmarek made their first contribution in #4214

Full Changelog: 2.20.0...2.21.0