LORIS Release v23.0.10

This release fixes a bug where the examiner dropdown was not including the empty option for instrument data entry, causing the first alphabetical examiner to be selected by default.

For more information see

• [NDB_BVL_Instrument] Add null value to examiner array #7847

LORIS Release v23.0.9

This release fixes a bug in JSON data instruments saving functionality.

For more information about the bug, navigate to the pull request below:

• [NDB_BVL_Instrument] JSON Data support fix DECS field #7819

LORIS Release v23.0.8

LORIS Release v23.0.7 was incorrectly tagged from the wrong branch. This tags a new v23.0.8 release with the changes that were supposed to be in v23.0.7. Do not use v23.0.7.

The changes since v23.0.6 are:

What's Changed

• [LINST] Fixed default date field null error by @ridz1208 in #7559
• [imaging_browser] Escape the header table in view session page by @driusan in #7552
• [Ci] Fix Build on v23 branch by @driusan in #7580
• [Security] Add 2 more Content-Security-Policy options by @driusan in #7579
• [user_accounts] Use userID to update examiners table by @CamilleBeau in #7462

Full Changelog: v23.0.6...v23.0.8

LORIS Release v23.0.7 -- DO NOT USE. SEE v23.0.8.

This release fixes the ability to build LORIS, after a change to npm started causing a linting error. It also fixes some security issues and includes a fix for LINST instruments.

• [LINST] Fixed default date field null error (#7559)
• [imaging_browser] Escape the header table in view session page (#7552)
• [CI] Fix Build on v23 branch (#7580)
• [Security] Add 2 more Content-Security-Policy options (#7579)

LORIS Release v23.0.6

This bugfix release includes all bug fixes since the 23.0.5 release.

For a full list of changes follow this link

Noteworthy changes:

[Security] Fix SameSite cookie CSRF protection #7539
[publication] Lead investigator issue when multiple collaborators share the same name or email #7471

LORIS Release v23.0.5

This bugfix release includes all bug fixes since the 23.0.4 release.

For a full list of changes follow this link

Noteworthy changes:

• [Publication] Set Content-Type for ajax responses. This could lead to an XSS attack if a user is tricked into directly accessing an ajax endpoint. The frontend was not directly vulnerable. (#7532)
• [Configuration] Fix saving of values when no previous value present (#7507)
• [Raisinbread] Fixing help_editor module to display RB instrument instructions (#6907)
• [Config] assign user creating project to a newly created project (#7505)
• [Filter] Fix Menu Filter logic to use exact match for "Sex" fields (#7498)

DOI Test Release

This was for the purpose of linking to Zenodo, but not really to be used as a release version for public consumption. Please use a numbered release.

LORIS Release v23.0.4

This bugfix release includes all bug fixes since the 23.0.3 release.

For the full list of changes follow this link.

Noteworthy changes:

• [survey_accounts] Remove Email column from SurveyAccountsProvisioner (#7452)
• [FilterableDataTable] Fix behaviour of grouped fields with multi-select filters (#7453)
• [Instrument] Add support for jsonData instrument in clearInstrument function (#7484)
• [Instrument API] expand saving functionality to include Candidate age calculations and scoring (#7485)
• [User] Replace GROUP_CONCAT with implode to bypass length limitations of group_concat (#7486)

LORIS Release v23.0.3

This bugfix release includes all changes from the 22.0.4 release as well as some added bugfixes for the 23.0.2 release.

For the full list of changes follow this link.

Noteworthy changes:

• [Battery] Add missing instruments to a battery when survey instruments are already populated instead of throwing an error #7163
• [Document_repository] Fix for contents displayed at root #7233
• [Filters] Fix Query Param Filtering Bug #7245
• [Instrument_builder] Fix Date element corruption in LINST files when load/saving #7247
• [Instrument] Fix form freeze for completed instruments #7344

Notes for release:

• If upgrading from 23.0.2 to 23.0.3 make sure to run the SQL patch removing the Email column from the participant_accounts table and the corresponding history entries (see #7248 for more details)
• The bugfix for populating the userId field of instrument tables (#7252) includes a back population script for all userIDs not saved in the instrument tables since this bug appeared. This script will search through the history log to retrospectively populate the userID field. It's important to note that, depending on the size of your database and history table, the script can take over 15 hours to run.

Caveat for projects:
Make sure to run the following scripts in order to remove special characters from links and ensure they are downloadable.

• tools/single_use/Cleanup_Special_Chars_Media.php (see #7386)
• tools/single_use/Cleanup_Special_Chars_Document_Repository.php (see #7428)

LORIS Release v22.0.4

This incorporated v21.0.7 into the v22 release series in order to remove all traces of email addresses from the survey module.

Updating the code will remove it from the frontend, but users must manually source the patch SQL/Archive/21.0/Cleanup/2020-12-18-Remove_survey_emails.sql to remove the data from the backend.