microsoft/AzureTRE v0.29.1

0.29.1

on GitHub

BREAKING CHANGES

None.

ENHANCEMENTS:

• Add skip_deployment to the /test and /test-extended PR bot commands to run tests against an existing validation environment. (#4947)
• Expand Dependabot Docker scanning from the repository root to subdirectories. (#5047)
• Enable Dependabot security updates for npm dependencies in .github/scripts. (#5046)
• Update case-study documentation by removing an obsolete entry and adding Oxford University Hospitals/TVS SDE and UNC Health SHIRE case studies. (#5072)

BUG FIXES:

• Defer scheduled CI environment cleanup while other GitHub Actions runs are active or queued, including PR tests started by comments. (devops 0.6.5) (#5087)
• Patch brace-expansion, fast-uri, immutable, js-yaml, nanoid, and postcss in the UI dependencies. (#5056)
• Bump aiohttp from 3.14.1 to 3.14.3 in api_app, resource_processor, and the CLI requirements and package metadata. (#5045, #5062)
• Pin the API Starlette dependency to 1.6.0 and align the end-to-end test dependency. (API 0.26.10) (#5043)
• Keep Airlock and user-assignment navigation within the workspace when a child panel is already open. (#5082)
• Update React Router to 7.18.4 to address routing security advisories and add navigation regression tests. (#5081)
• Patch fast-uri to 3.1.6 in the UI form validator and add URI and resource-form regression tests. (#5080)
• Patch js-yaml, browserslist, baseline-browser-mapping, @humanfs/node and brace-expansion in the UI build and lint dependencies. (#5079)
• Update the UI Vitest packages to 4.1.11 to fix redirect mock file access outside permitted paths. (#5078)
• Add bx-msedge.net. and vsassets.io. to the default DNS allowlist. Allow Nexus downloads from *.gallery.vsassets.io and *.gallerycdn.vsassets.io when DNS security policy is enabled. (core 0.16.18, tre-shared-service-sonatype-nexus 3.10.3) (#5071)
• Fix vulnerable GitHub script dependencies with compatible patched versions, add regression tests, and run the helper suite in CI. (#5064)
• Configure the default pytest-asyncio fixture loop scope to function to remove the deprecation warning. (#5055)
• Fix pytest deprecation warnings in API test fixtures. (#5069)
• Fix Service Bus client lifecycle management in the API and resource processor to prevent connection socket and AMQP channel leaks. Close credentials on errors and handle cancellation and retry delays. (#4930)

COMPONENTS:

Full Changelog: v0.29.0...v0.29.1