v0.22.0

Added

• feat(dependencies): Add Flask to 3.0.2
• feat(dependencies): Upgrade api4jenkins to 2.0.3
• feat(dependencies): Upgrade certifi to 2024.2.2
• feat(dependencies): Upgrade datadog-api-client to 2.22.0
• feat(dependencies): Upgrade dnspython to 2.6.0
• feat(dependencies): Upgrade Flask-Migrate to 4.0.5
• feat(dependencies): Upgrade Flask-SQLAlchemy to 3.1.1
• feat(dependencies): Upgrade Flask-WTF to 1.2.1
• feat(dependencies): Upgrade greenlet to 3.0.3
• feat(dependencies): Upgrade redis to 5.0.1
• feat(dependencies): Upgrade Werkzeug to 3.0.1
• feat(dependencies): Upgrade WTForms to 3.1.2
• feat(dependencies): Upgrade SQLAlchemy to 2.0.27
• feat(dependencies): Upgrade Jinja2 to 3.1.3
• feat(dependencies): Upgrade lxml to 5.1.0
• feat(dependencies): Upgrade Markdown to 3.5.2
• feat(dependencies): Upgrade MarkupSafe to `2.1.5
• feat(dependencies): Upgrade icalendar to 5.0.11

Fixed

• fix(imports): Replace flask.Markup by markupsafe.Markup
• fix(imports): Replace pkg_resources.parse_version by packaging.version.parse
• ci(jenkins): Fix Jenkins integration tests

Security Fix

Vulnerability ID	Severity	Package
CVE-2023-5363	HIGH	libcrypto3
CVE-2023-5678	MEDIUM	libcrypto3
CVE-2023-6129	MEDIUM	libcrypto3
CVE-2023-6237	MEDIUM	libcrypto3
CVE-2024-0727	MEDIUM	libcrypto3
CVE-2023-52425	HIGH	libexpat
CVE-2023-52426	MEDIUM	libexpat
CVE-2023-5363	HIGH	libssl3
CVE-2023-5678	MEDIUM	libssl3
CVE-2023-6129	MEDIUM	libssl3
CVE-2023-6237	MEDIUM	libssl3
CVE-2024-0727	MEDIUM	libssl3
CVE-2023-7104	HIGH	sqlite-libs
CVE-2024-22195	MEDIUM	Jinja2
CVE-2023-46136	MEDIUM	Werkzeug
CVE-2023-5752	MEDIUM	pip
CVE-2023-43804	MEDIUM	urllib3
CVE-2023-45803	MEDIUM	urllib3

v0.21.5

Security Fix

Vulnerability ID	Severity	Package
CVE-2023-37920	HIGH	certifi
CVE-2023-2975	MEDIUM	libcrypto3
CVE-2023-3446	MEDIUM	libcrypto3
CVE-2023-3817	MEDIUM	libcrypto3
CVE-2023-2975	MEDIUM	libssl3
CVE-2023-3446	MEDIUM	libssl3
CVE-2023-3817	MEDIUM	libssl3

v0.21.4

Added

• doc: Add documentation on where to find security related informations (#181) (!152)
• style: Add new summer theme (!153)

Security Fix

Vulnerability ID	Severity	Package
CVE-2023-2650	HIGH	libcrypto3
CVE-2023-2650	HIGH	libssl3
CVE-2023-32681	MEDIUM	requests

v0.21.3

Security Fix

Vulnerability ID	Severity	Package
CVE-2023-1255	MEDIUM	libcrypto3
CVE-2023-1255	MEDIUM	libssl3
CVE-2023-30861	HIGH	Flask

Fixed

• ci: Update Container scanning variables

v0.21.2

Fixed

• fix(doc): Configure site_url to fix sitemap.xml generation
• fix(scheduler): Disable scheduled tasks in integrations and tests (!149)
• ci: Update Kubernetes versions checks (!150)

v0.21.1

Fixed

• fix(hello): Add missing features stats and openid (!145)

v0.20.1

Fixed

• cve(CVE-2022-1304): e2fsprogs: out-of-bounds read/write via crafted filesystem
• cve(CVE-2023-0464): openssl: Denial of service by excessive resource usage in verifying X509 policy
• cve(CVE-2023-28858, CVE-2023-28859): redis: Async command information disclosure
• cve(other): CVE-2023-0465, CVE-2023-0466

v0.21.0

Added

• feat(version): Make the application self aware of its version (#173) (!142)
  • Display the current version of the application in the About page
  • New endpoint to query the application version /health/version
  • Automatically search for new version and display the current status in About page
• ci(version): Verify that the version has been updated in tag pipeline (#173) (!142)

Fixed

• doc(API): Correct documented endpoint for creating resources (#176) (!139)
• fix(openapi): Add missing announcement_api permission on token creation schema (#177) (!140)
• fix(style): Prevent word break on <code> content in tables (#174) (!141)
• fix(translation.fr): Update date translation in announcement (#179) (!143)

v0.20.0

Added

• feat(style): Add resources icons in list headers (#168) (!135)
• feat(auth): Add support for SSO authentication (#161) (!136)
• feat(notify/maintenance): Add .ics calendar file on Maintenance notification email (#170) (!138)

Changed

• change(maintenance): Update the content-type of the calendar file for application/ics (!138)

Fixed

• fix: Typo issues in README.md (#171) (!137)

v0.19.0

Added

• feat(announcement): Add support for Announcements (#165) (!127)
• feat(markdown): Add support for Markdown syntaxe in resources description (!130)
• feat(forms.*): Add placeholder in forms textarea inputs (!131)

Fixed

• fix(mail): Simplify CSS in mail notification (#166) (!126)
• fix(mail): Remove default trailing space in mail object prefix (!128)
• fix(docs): Missing Maintenance status in API documentation (!129)
• fix(database): Fix SQLAlchemy deprecation warnings (#167) (!132)
• fix(ci): Fix DAST_API in CI (!133)