What's Changed
- fix: verify database schema at startup and fail loudly on missing tables/columns by @tamassoltesz in #1387
- fix: Fix config updates for CUDs that have multiple tenants by @bcbogdan in #1384
- fix: bulk import no longer borrows from the live connection pool by @tamassoltesz in #1385
- test: reproduce duplicate access token signing keys on concurrent rotation by @mchoopani in #1389
- feat: single-flight signing key cache refresh - readers serve stale during rotation by @tamassoltesz in #1398
- fix: update OTel javaagent to 2.29.0 and pin httpclient5/httpcore5 to CVE-fixed versions by @tamassoltesz in #1406
- fix: SAML login redirect uses & when the IdP SSO URL already has a query string by @tamassoltesz in #1412
- fix: enforce dashboard session expiry at verification time (GHSA-w9fp-wv6g-pqv8) by @tamassoltesz in #1409
- ci: automate migration-script awareness at core releases by @tamassoltesz in #1383
- fix: session refresh never holds two DB connections at once by @tamassoltesz in #1413
- fix: upgrade embedded Tomcat 11.0.22 -> 11.0.25 for critical CVEs by @tamassoltesz in #1416
- ci: use BACKEND_APIS_PR_KEY for the backend-apis migration PR job by @tamassoltesz in #1417
- ci: fix backend-apis release branch + make GitHub release creation idempotent by @tamassoltesz in #1418
New Contributors
- @mchoopani made their first contribution in #1389
Full Changelog: v12.1.1...v12.2.0
Contributors
bcbogdan, tamassoltesz, and mchoopani