OpenC3 COSMOS Core 7.4.1 - Bug fixes and package updates

Welcome to OpenC3 COSMOS Core 7.4.1! We've upgraded our Debian base containers to trixie 13.7 to close a number of CVEs. We've also added Trivy scanning to our UBI images and upgraded those to close CVEs. We now detect 0 unfixed vulnerabilities at the exact time of this release! Please note that CVE reporting and patching is an endless ongoing process which we are continually monitoring and addressing. All the more reason to go with COSMOS as your Test / Operations platform so you don't have to worry about CVEs!

This will probably be our last release before our Space Software Summit on Oct 5-7. The next release will be 7.5.0 as we add in more performance related enhancements. We're also already preparing ideas and issues for COSMOS 8. Finally if you haven't checked out the OpenC3 Store make sure to check out all the new additions!

Migration Notes

With the addition of the compose.override.yaml and .env.local (first in 7.3.0) you should move all of your compose.yaml and .env updates into these new files. Rename your existing compose.yaml to compose.override.yaml and .env to .env.local. Get the newly released compose.yaml and .env files from the release. Then diff with these files to determine your project specific modifications and remove any defaults or other settings that you're not explicitly overriding. This will make upgrading much easier going forward because you don't have to sync with our defaults.

🛑 Breaking Changes from 6.x

• S3 Backend Migration: Migrated from MINIO to versitygw.
  • See the Migration Guide for details.

See the COSMOS 7.0.0 release notes for all the amazing new features in COSMOS 7!

🛠 Enhancements

• Telemetry Viewer screens now immediately update instead of waiting for polling period to elapse
• Podman docs have been updated
• Restore StopScript and SkipScript exception names in Python
• Telemetry Grapher now has scatter plot support
• [Enterprise] View-only users have the Send button disabled in Command Sender

🪲 Bug Fixes

• XtceParser now properly returns the command and telemetry ID lookup hashes for XTCE-defined packets
• Fix AttributeError when using the Python http_client_interface.py
• Pass an explicit read timeout to the underlying transport layer. This prevented read timeouts of greater than 60s from being honored.
• Python had inverted logic for the allow_empty_data check in Protocol.read_data
• Fixed Python get_tlm_values to pass limits to the CvtModel to remove errors
• Increase max_message_size and ws_max_pending_size in script runner API
• Fix Table Manager table_create_report to actually output report
• [Enterprise] Autonomic now allows a reaction to use the same trigger name in two groups
• [Enterprise] Instantiate router only after auth is ready to prevent redirect loop

What's Changed

• fix(release): stop the release from force pushing a diverged main by @jmthomas in #3858
• build(justfile): add module hierarchy and unified check recipe by @mcosgriff in #3806
• build(deps): Bump the github-actions group with 3 updates by @dependabot[bot] in #3849
• build(deps): Bump actions/cache from 4.3.0 to 6.1.0 by @dependabot[bot] in #3851
• Make screens immediately update before polling period elapses by @ryanmelt in #3862
• Add REVIEW.md by @ryanmelt in #3863
• remove ineffective cache mount lines by @EmilyRagan in #3840
• [Bug] XTCE Patch by @clayandgen in #3866
• 100ms is not necessarily enough time to process packet in CI by @EmilyRagan in #3867
• [Bug] HTTP Client Python by @clayandgen in #3877
• Address CVEs (debian, anycable, resolv) by @jmthomas in #3871
• fix(autonomic): allow a reaction to use the same trigger name in two groups by @jmthomas in #3878
• build(deps): Bump the github-actions group with 3 updates by @dependabot[bot] in #3880
• Address UBI image CVEs (ruby 3.4.10, poetry build context) by @jmthomas in #3875
• Update podman docs by @calmonroe in #3870
• ci(python): add advisory ty type checking with SARIF reporting by @mcosgriff in #3752
• fix(python): restore StopScript and SkipScript exception names by @mcosgriff in #3890
• test(python): stop template protocol timing tests flaking on CI by @EmilyRagan in #3888
• build(deps): Bump the github-actions group with 4 updates by @dependabot[bot] in #3895
• CI updates by @EmilyRagan in #3865
• fix(json-api): set an explicit read timeout instead of nil by @jmthomas in #3868
• Publish CVEs by @jmthomas in #3900
• feat(TlmGrapher): Add scatter plot draw option by @ryan-pratt in #3859
• feat(cmdsender): Viewers cannot send commands by @clayandgen in #3907
• fix(python): invert allow_empty_data check in Protocol.read_data by @jmthomas in #3898
• ci(trivy): run the scan on every pull request again by @jmthomas in #3910
• mirror script changes in cosmos-enterprise by @calmonroe in #3873
• ci(trivy): scan the UBI images by @jmthomas in #3911
• Fix python get_tlm_values and queries with all None by @ryanmelt in #3861
• Increase max_message_size and ws_max_pending_size in script runner API by @jalexanderqed in #3905
• Instantiate router only after auth is ready by @jmthomas in #3916
• fix(tables): write table_create_report output to the target by @jmthomas in #3914
• Bump dependencies by @jmthomas in #3917

New Contributors

• @jalexanderqed made their first contribution in #3905

Full Changelog: v7.4.0...v7.4.1