- add success criteria to a11y findings
- wrong instance count on zap alert titles
- separate anchors between suppressed and unsuppressed
- usability improvements to the report result content display
- make urls wrap in report headers
- URLs should wrap on the report index page
- show report types even when filtered
- regenerate lockfile, remove some overrides
- don't audit devDependencies
- add more references to a11y scan findings using ACT ids
- add act id mapping
- UX improvements for findings with multiple match criteria
- update rule suppression related to search.gov and dap
- usability improvements to reports
- improve display of pages-suppressed rules in report config settings
- Site builds polling to use doc visibilityState #4591
- use serialized site reponse to fix build preview link
- restore the ability to rebuild failed latest branches
- Auto refresh site builds statuses
- admin: Add edit functionality to site build task run day
- admin: Add runDay input to manage build tasks
- Add in app report rendering
- add build scans page (#4539)
- style build scan config (#4261)
- API should only update a site build tasks metadata rules
- API build tasks report logging
- rule match should be an array
- add dap rule suppressions
- update suppression language to allow for more forms of suppressed rules
- Improve build task dev experience
- swap experiment icon for report icon in report button
- Upgrade dependency axios to v1.7.5
- fix missing data from zap findings
- add test for previous bug
- unvendor the node modules
- add build scan config (#4261)
- ci: fix production release step
- ci: ci update, use pipeline-tasks, boot, multi-env
- Only encrypt site build param values based on defined keys
- reorder session auth logic, handle redirect to prevent unhandled 500 errors
- admin: Show UAAIdentity ID in Admin User page (#4501)
- send 401 response for bad auth callback (#4512)
- remove metrics, update yarn.lock
- deps: bump the npm_and_yarn group across 2 directories with 2 updates
- ci: Add necessary pipeline OCI image resources to staging and prod
- yarn.lock regeneration
- wait for db port on ci tests
- Add build metrics query examples (#4500)
- harden docker in docker use
- Encrypt build task CF task param values #4509
- update release script
- Update metrics app dependencies (#4419)
- Increase prod queue concurrencies to max 10
- Remove decommissioned site build queue related to pages-builder
- Encrypt site build params #4464
- use hardened postgres
- update the memory and disk settings for large containers
- build metrics API (#4328)
- use nested merge for build metrics
- Send sandbox reminders to UAA email address (#4425)
- release build scans in production
- container hardening
- docs: Add documentation for working with and creating queues
- Refactor build task queue job processor
- Refactor site build queue and worker
- add build task cancelled state
- for build task targets, use domain for production branch urls
- Revamp build scan display per #4446
- Add concurrency and polling to build task queue worker
- add build scan priority (#4476)
- admin: add extra information for testing scans
- import Event model for logout error logging
- prevent restarting build tasks, use enum, add test
- Add frontend conventions to DEVELOPMENT.md
- Show last signin instead of last update in organization users list
- Allow organization managers to resend invitations (#4371)
- add accessibility scan (#4410)
- update email layouts with new template (#4373)
- add uswds identifier (#4413)
- admin: add limited ability to register build tasks to a site
- Update email invites based on user UAA origin #4370
- Fetch error for old build logs based on build details
- resolve two async/await errors
- Fix skipped heading levels in user settings page (#4396)
- Fix skipped heading levels in sites list (#4396)
- Add row header to published files table (#4397)
- update reauthenication logic
- update build task status logic (#4404)
- Add message explaining that build logs are deleted after 180 days. (#4379)
- Make invitation URL copyable (#4108)
- vendor node dependencies
- ci: use hardened node image, update playwright docs
- try separate table dropping for user report test
- update webpack and associated dependencies
- Update passport deps and remove deprecated GH auth
- update axios, remove unnecessary tests
- ci: add hardened playwright, registry-image, general-task
- update developer documentation about commit patterns
- Simplify add org member form
- Remove Github username from invite #4369
- ops: Add invite flowchart to docs
- ci: Remove erroneous container params in stage/prod
- ci: Run db migrations in CI task container with SSL #4354
- Update resource types to use hardened images
- Run build log archive job in dev and staging as well #4367
- Add Dev and Staging section to OPERATIONS.md, starting with manual migrations #4366
- Make Build a paranoid model (enable soft deletion) #4366
- Remove isActive from User #4338
- Fix build task feature flag
- reimplement build task feature flag handling
- add build task ui (#4171)
- admin: Add active users report #4313
- don't throw if user isn't present on build
- catch the InvalidRange v3 error, don't fail the last build log fetch
- Check buildShaLink args if null on site build logs page
- add e2e tests in staging, build env vars to build step
- Await createUAAIdentity in admin user API tests
- Explicitly truncate UAAIdentity after admin user API tests
- Add global Sequelize hook to make count behavior consistent with find.
- Update CommitSummary commponent data fetch to useState
- correct staging e2e pipeline
- Upgrade local and CI to Postgres v15
- update depedencies
- Fix syntax error and remove outdated setup step from developer documentation
- transform AWS SDK Readable to string
- Add queue name for site build and build task queues
- Remove bull to complete bullmq transition
- upgrade major deps from audit
- update dependencies, minor patch bumps for pages core and admin client
- Auto rotate site bucket keys #153
- add owasp zap scan task type migration (#4260)
- call correct fetchUser function on github auth (#4301)
- ci: Update ci staging audit src
- Make site uploaded files page work properly for sites without previews
- Add length limit validation before branch name regex
- correct audit in staging, prod ci
- add yarn audit to ci (#4250)
- security/dependency updates
- add initial playwright implementation (#4102)
- add small adjustment to dev env setting
- Upgrade to AWS SDK V3 (#3989)
- update slack release notes format and bump pattern matcher
- Fixes domain checkProvisionStatus with new CF api response
- Refine site repo migration docs
- implement build task runners, call CF API directly (#4259)
- add build task queue and example worker (#4248)
- add build task router and controller (#4169)
- add DB models to support build task feature (#4184)
- Allow users to create custom domains to prepare launch
- Admin UI for updated site branch configs and domains
- Improve name and path and update published sites report
- Update deps using json5 #4249
- Update CF API to V3 #4112
- update uaa war release download location
- use correct path for release notes
- Update pages production app to 4 instance with 512mb
- Added site custom domains page | Updated domain model and admin | #4199
- Site serializer domain and branch config pick
- Fixed branchViewLink to use branch config and domain model #4032
- restore viewbox to svg icons for proper rendering
- extend dependabot config to admin and metrics (#4217)
- add slack notification to release (#4216)
- update dependencies
- run dev tests in parallel with build, update dependabot (#4196)
- Build test webpack assets in non-version-controlled directory (#4191)
- add github release to production deploy (#4216)
- update deployment documentation
- correct release PR behavior (#4162)
- Restructure site model with site branch config relation
- Add report of published sites per org and Reports admin menu item.
- Enable omission of search form in PaginatedQueryPage.
- Pages logo replaces Federalist logo in Pages Admin header (#4186)
- Remove dependencies on json-to-csv and abandoned json2csv version
- Move globals from frontend source files into ESLint config.
- Remove js-file-download dependency.
- fix minor issues in release pipeline, gh status checks (#4162)
- create new production deployment on tag
- add automated release PRs
- Add nightly builds queue to bull board #4198
- Update nightly builds queue query #4198
- document use of conventional commits
Work done prior to the release schedule