v2.9.0

Dynamic Roles

You might have noticed that the two roles of Model Senior Responsible Officer and Model Technical Reviewer were previously hard-coded in Bailo, this meant that if you wanted to use your own different roles you would have had to changed it manually in the code, but this is no longer the case. Roles can be added by admins on a new Review Roles page (which can be found on the side navigation menu).

Roles are assigned to individual schemas, so once a role has been created, all you need to do is go to the schemas page in the admin section and click on the actions menu, and select Update review roles.

Default Roles

Before starting up the application, you will need to make sure that the defaultReviewRoles property in your config is set up correctly. By default, we have added the previously hard-coded roles of Model Senior Responsible Officer and Model Technical Reviewer there, so if your roles have not changed, you will not notice any change. Once set up, these default roles will automatically be added to the schema. The config is as follows:

{
  name: string // This is the name of the role that will be visible to the users
  shortName: string // This acts as a unique ID, and is not visible to the users
  description: string
  kind: string // For now, all dynamic roles are set to "review"
}

Once your config is set up with whatever roles you want, you can update the defaultSchemas property in your config, and update the reviewRoles array. Remember to use the shortName property that matches your default review roles.

After start-up, you should see that your schemas will have those roles assigned to them.

API Changes

Three new end points have been created for managing roles

GET /api/v2/review/roles Retrieves a list of review roles. An optional query string of schemaId can be passed in to limit the roles to only those on a specified schema.
POST /api/v2/review/role For creating new roles.
DELETE /api/v2/review/role/<reviewRoleShortName> Deletes a review role using the shortName property.

Other Changes

🏕 Features

• Added search by state filter to marketplace by @IR96334 in #2457
• Add and improve bailo core docs by @PE39806 in #2456
• Collapse Dockerfile.dev into single Dockerfile per service by @GCHQDeveloper36 in #2447
• Use UI config for registry host by @JR40159 in #2465
• Semvers now display in correct order and latest release is fixed by @IR96334 in #2467
• Added a11y compliance to sidenav and announcement by @IR96334 in #2468
• aria-related changes alongside bugfixes by @IR96334 in #2470
• New colour for warning theme by @IR96334 in #2473
• Bai 1800 a11y add token by @IR96334 in #2471
• Release review with incorrect semver causes hang by @PE39806 in #2482
• Add and improve python helper docstrings by @PE39806 in #2483
• fixed some small styling issues with state and org by @ARADDCC002 in #2481
• Delete avScans when a File is deleted by @PE39806 in #2484
• Improve API POST /api/v2/model/{modelId}/export/s3 endpoint time by @PE39806 in #2488
• Skip uploading an already complete file when importing a mirrored model by @PE39806 in #2486
• added a check for the file display menu to only appear if it has options by @ARADDCC002 in #2490
• fixed a bug where failed scans would display as passed by @ARADDCC002 in #2489
• Add release review information to model card export by @JRB66955 in #2469
• Add review role to schemas by @ARADDCC002 in #2344

👒 Dependencies

• Bump node from 24.4.0-alpine to 24.4.1-alpine in /frontend by @dependabot[bot] in #2458
• Bump node from 24.4.0-alpine to 24.4.1-alpine in /backend by @dependabot[bot] in #2459
• Bump form-data from 4.0.2 to 4.0.4 in /frontend by @dependabot[bot] in #2466
• Build modelscan production image differently by @GCHQDeveloper36 in #2445
• Bump bitnami/mongodb from 7.0.15 to 8.0.11 in /infrastructure/helm/bailo by @dependabot[bot] in #2464
• Bump minio from ~14.2.1 to 17.0.9 in /infrastructure/helm/bailo by @dependabot[bot] in #2418
• Bump bitnami/minio from 2025.5.24 to 2025.7.18 in /infrastructure/helm/bailo by @dependabot[bot] in #2462
• Bump bitnami/minio from 2025.5.24 to 2025.7.18 by @dependabot[bot] in #2460
• Bump bitnami/mongodb from 7.0.15 to 8.0.11 by @dependabot[bot] in #2461
• Bump mongodb from ~15.1.7 to 16.5.32 in /infrastructure/helm/bailo by @dependabot[bot] in #2463
• Bump axios from 1.10.0 to 1.11.0 in /frontend by @dependabot[bot] in #2472
• Bump mongodb from 16.5.32 to 16.5.33 in /infrastructure/helm/bailo by @dependabot[bot] in #2474
• Bump bitnami/minio from 2025.7.18 to 2025.7.23 in /infrastructure/helm/bailo by @dependabot[bot] in #2475
• Bump mlflow-skinny[mlserver] from 3.1.1 to 3.1.4 in /lib/python by @dependabot[bot] in #2478
• Bump minio from 17.0.9 to 17.0.16 in /infrastructure/helm/bailo by @dependabot[bot] in #2476
• Bump bitnami/mongodb from 8.0.11 to 8.0.12 in /infrastructure/helm/bailo by @dependabot[bot] in #2477
• Bump bitnami/mongodb from 8.0.11 to 8.0.12 by @dependabot[bot] in #2479
• Bump bitnami/minio from 2025.7.18 to 2025.7.23 by @dependabot[bot] in #2480
• Bump the opentelemetry group in /backend with 3 updates by @dependabot[bot] in #2492
• Bump the eslint group in /backend with 4 updates by @dependabot[bot] in #2493
• Bump nodemailer from 7.0.4 to 7.0.5 in /backend by @dependabot[bot] in #2503
• Bump @faker-js/faker from 9.8.0 to 9.9.0 in /backend by @dependabot[bot] in #2501
• Bump @types/shelljs from 0.8.16 to 0.8.17 in /backend by @dependabot[bot] in #2504
• Bump typescript from 5.8.3 to 5.9.2 in /lib/landing by @dependabot[bot] in #2510

Full Changelog: v2.8.1...v2.9.0