3.17.0

Note

Please note that we skipped version 3.16.0. That means the previous version before this version is 3.15.6.

Important

This version upgrades a dependency, react-pdf, in order to mitigate a security vulnerability in a transitive dependency. The Aleph UI uses react-pdf to render PDF previews. We recommend that you update Aleph instances that you operate to the latest patched releases.

What's Changed

• Remove ignored versions from Dependabot config by @tillprochaska in #3400
• Do not trigger UI workflow when Python dependencies are updated by @tillprochaska in #3396
• Set up grouped Dependabot updates by @tillprochaska in #3401
• Fix Dependabot group pattern by @tillprochaska in #3488
• Bump @babel/traverse from 7.22.8 to 7.23.2 in /docs by @dependabot in #3411
• Bump yaml from 2.3.2 to 2.3.4 in /ui by @dependabot in #3480
• Bump react-router-dom from 6.16.0 to 6.18.0 in /ui by @dependabot in #3436
• Bump react-countup from 6.4.2 to 6.5.0 in /ui by @dependabot in #3445
• Bump undici from 5.22.1 to 5.26.3 in /docs by @dependabot in #3408
• Bump @alephdata/followthemoney from 3.5.4 to 3.5.5 in /ui by @dependabot in #3467
• Fix data access form link in terms by @tillprochaska in #3416
• Suggest alephclient for uploading lots of files instead of UI by @stchris in #3483
• Add worker scaling docs by @stchris in #3492
• Explicitly disable servicelayer worker threads in Helm chart & env by @stchris in #3491
• Update K8s example by @tillprochaska in #3493
• Update translations by @stchris in #3497
• Update playwright to 1.40 by @stchris in #3498
• Add cleaned option by @ksotik in #3234
• Fix formatting by @stchris in #3526
• added ignored settings test by @brassy-endomorph in #3379
• Don't tag images starting with test- as latest by @stchris in #3525
• Don't push helm charts prefixed test- by @stchris in #3528
• chore: dependabot: group dev dependency bumps by @stchris in #3531
• Bump ruff from 0.0.292 to 0.1.6 by @dependabot in #3499
• Bump the dev-dependencies group with 2 updates by @dependabot in #3534
• Add linter run to PR checks by @stchris in #3548
• Update faker requirement from <8.0.0,>=5.6.0 to >=5.6.0,<23.0.0 by @dependabot in #3559
• Bump apispec from 6.3.0 to 6.3.1 by @dependabot in #3557
• Bump the dev-dependencies group with 1 update by @dependabot in #3556
• Bump authlib from 0.15.5 to 1.3.0 by @dependabot in #3541
• Bump alembic from 1.12.0 to 1.13.1 by @dependabot in #3536
• Bump python-frontmatter from 1.0.0 to 1.0.1 by @dependabot in #3509
• Bump marshmallow from 2.19.2 to 3.20.1 by @dependabot in #3468
• Bump jsonschema from 4.19.1 to 4.20.0 by @dependabot in #3505
• Bump blinker from 1.6.2 to 1.7.0 by @dependabot in #3464
• Bump normality from 2.4.0 to 2.5.0 by @dependabot in #3456
• Bump flask-babel from 3.1.0 to 4.0.0 by @dependabot in #3460
• Replace MinIO Helm chart with chart maintained by Bitnami by @tillprochaska in #3567
• Metrics by @tillprochaska in #3216
• Stringify sanitized HTML as HTML (not XML) by @tillprochaska in #3575
• Don't rename existing collections when running crawldir by @adryd325 in #3573
• Don't override collection label when running crawldir several times by @stchris in #3579
• Fix instructions on how to enable Prometheus in local Kubernetes cluster by @tillprochaska in #3580
• Fix link target in user guide by @tillprochaska in #3607
• Fix default Dockerfile command by @tillprochaska in #3608
• Document how to enable postgres query logging by @stchris in #3616
• docs: update memorious link by @DavidLemayian in #3639
• Update documentation on user registrations on aleph.occrp.org by @tillprochaska in #3643
• Fix documentation links by @tillprochaska in #3667
• Change label for email address facets and statistics to remove ambiguity by @tillprochaska in #3671
• Use pytest instead of 👃 by @stchris in #3673
• Bump playwright/python from v1.41.0-focal to v1.42.0-focal in /e2e by @dependabot in #3660
• Bump the dev-dependencies group with 4 updates by @dependabot in #3678
• Remove references to convert-document by @friendly-wolfbat in #3681
• Temporarily roll back changes to Docker Compose config by @tillprochaska in #3683
• Keep Playwright versions in sync by @stchris in #3687
• Add playwright version build arg to run step by @stchris in #3699
• Playwright fixes (cherry-picked from develop) by @stchris in #3700
• Fix broken link in docs by @stchris in #3701
• Bump sentry-sdk[flask] from 1.31.0 to 2.0.1 by @dependabot in #3714
• Bump the dev-dependencies group across 1 directory with 3 updates by @dependabot in #3713
• Bump jsonschema from 4.20.0 to 4.22.0 by @dependabot in #3712
• Update index.mdx by @vsessink in #3706
• Bump marshmallow from 3.20.1 to 3.21.1 by @dependabot in #3651
• Bump followthemoney-store[postgresql] from 3.0.6 to 3.1.0 by @dependabot in #3652
• Bump flask-migrate from 4.0.5 to 4.0.7 by @dependabot in #3645
• Bump python-frontmatter from 1.0.1 to 1.1.0 by @dependabot in #3598
• Bump blinker from 1.7.0 to 1.8.1 by @dependabot in #3711
• Bump followthemoney from 3.5.8 to 3.5.9 by @dependabot in #3604
• Update faker requirement from <23.0.0,>=5.6.0 to >=5.6.0,<26.0.0 by @dependabot in #3709
• Bump react-pdf from 5.7.2 to 7.7.3

New Contributors

• @ksotik made their first contribution in #3234
• @adryd325 made their first contribution in #3573
• @friendly-wolfbat made their first contribution in #3681
• @vsessink made their first contribution in #3706

Full Changelog: 3.15.6...3.17.0