chiefonboarding/ChiefOnboarding v2.3.0

on GitHub

** PLEASE TAKE A BACKUP BEFORE RUNNING THIS UPGRADE. THIS IS A MAJOR UPDATE **

In short: Django and Python upgrades (Django 4.2 -> 5.2 and Python 3.11 -> 3.13), as well as the migration of the auth system to allauth to support more OIDC providers.

BREAKING CHANGES:

• If you are using Google SSO, then you should set the keys in your environment variables:
  • ALLOW_GOOGLE_SSO to True (default is False)
  • GOOGLE_SSO_CLIENT_ID
  • GOOGLE_SSO_SECRET
    This used to be a config in the settings of the app.
• If you only want to allow to login through SSO, then you should set ALLOW_LOGIN_WITH_CREDENTIALS to False (default True). This used to be a dashboard setting.
• If you want to auto create users through SSO, then you should set SSO_AUTO_CREATE_USE to True (default False).
• OIDC_ROLE_UPDATING is removed and temporarily not supported. Roles will not update once set.
• OIDC_ROLE_PATH_IN_RETURN default is now set to an empty string instead of zoneinfo.
• OIDC_LOGIN_DISPLAY has been removed. Please use the new OIDC settings from the docs.
• OIDC_CLIENT_ID has been removed. Please use the new OIDC settings from the docs.
• OIDC_CLIENT_SECRET has been removed. Please use the new OIDC settings from the docs.
• OIDC_AUTHORIZATION_URL has been removed. Please use the new OIDC settings from the docs.
• OIDC_TOKEN_URL has been removed. Please use the new OIDC settings from the docs.
• OIDC_USERINFO_URL has been removed. Please use the new OIDC settings from the docs.
• OIDC_SCOPES has been removed. Please use the new OIDC settings from the docs.
• OIDC_LOGOUT_URL has been removed. Please use the new OIDC settings from the docs.
• OIDC_FORCE_AUTHN has been removed. Please use the new OIDC settings from the docs.

What's Changed

• Update dependencies by @GDay in #554
• Fix table overflow issue on admin task pages by @GDay in #556
• Fix missing Japanese and Czech welcome messages by @GDay in #555
• Fix to do items not correctly sorted for new hire by @GDay in #557
• Add patch method to execute and revoke by @GDay in #559
• Add ipware for correctly blocking users when behind proxy by @GDay in #560
• Add makefile by @GDay in #562
• Fix responsiveness issues by @GDay in #563
• Add view button on new hire admin tasks and fix layout by @GDay in #567
• Update dependencies Sept 2025 by @GDay in #569
• Updated theme by @GDay in #568
• Fix deprecation warnings by @GDay in #570
• Implement allauth by @GDay in #387
• Fix password recovery mail by @GDay in #574
• Rename manager perm mixin by @GDay in #575
• Remove docker compose version by @GDay in #576
• Configure paginate by by @GDay in #577
• Switch from runtime.txt to .python-version by @edmorley in #578

New Contributors

• @edmorley made their first contribution in #578

Full Changelog: v2.2.7...v2.3.0