Releases: CERT-Polska/mwdb-core
v2.5.0
Release focused on Karton integration bugfixes and small improvements
New features and improvements:
- Added support for AWS IAM authentication for Minio (#443, thanks @alex-ilgayev!)
- Built-in Karton integration allows to bind Karton analyses that doesn't origin from MWDB (#430, #436)
Bugfixes:
v2.4.0
Small release that includes minor improvements of existing features.
New features and improvements:
- API keys have names in addition to UUID identifier, so user can describe the purpose of API key (#420)
- Web: DagreD3Plot and SwaggerUI components are lazy-loaded, so the main JS bundle is much smaller. This should boost the loading time of MWDB webapp (#418, #427)
- User can delete all attributes under the same key via single API request. This is mainly a workaround for deletion of attribute values that are too long for URI query part of DELETE request. (#426)
Bugfixes:
v2.3.0
This release is focused mainly on MWDB administration improvements and further UI refactoring. In addiition, Karton integration is now available out-of-the-box, without need of extra plugins.
If you are mwdb-plugin-karton user, read Karton guide/Migration from unofficial setup section before upgrade.
For complete changelog, see v2.3.0-rc1.
Bugfixes (from 2.3.0-rc1):
v2.3.0-rc1
Release Candidate version of mwdb-core 2.3.0 🎉
This release is focused mainly on MWDB administration improvements and further UI refactoring. In addiition, Karton integration is now available out-of-the-box, without need of extra plugins.
If you are mwdb-plugin-karton user, read Karton guide/Migration from unofficial setup section before upgrade.
Key changes:
- Read-only guest accounts (#334):
- All users are by default added into additional 'registered' group that enables profile customization and file upload
- To make a guest account, just remove it from 'registered' group, so only the 'public' capabilities will apply to this group. 'public' group doesn't have any capabilities by default, but feel free to change it depending on your needs.
- All groups have additional properties: "workspace" and "default".
registeredgroup andpublicgroup are not workspaces which prevents users from seeing each other within these groups. In the same time, they are default so all newcomers are automatically added.
- Built-in Karton integration (#298)
- Removed
managing_attributescapability because of its inconsistency. From now, all administration tasks requiremanage_userscapability (#377) - New, more user-friendly Settings and Profile view
Minor changes and improvements:
- More removable elements:
- Sessions are not invalidated when group or capabilities was changed (#325)
- Added hooks for tags and comments (#353, thanks @ITAYC0HEN!)
- Keyboard navigation in Autocomplete components (#362)
- Replaced obsolete search help with link to ReadTheDocs (#339)
Bugfixes:
v2.2.2
v2.2.1
v2.2.0
New MWDB Core release 🎉 Web part was heavily refactored and uses React Context instead of Redux, so some plugins that extends the web application may need to be ported before upgrade.
If you are plugin developer, see What's changed section in MWDB Core documentation.
New features:
- Remote API feature (feature draft: #157) that allows to connect your own mwdb-core instance with mwdb.cert.pl (Documentation
- New file download endpoint (#290)
Bugfixes and improvements:
- Improved error handling in web app (#316)
- Same set of buttons in Preview and Details tab (#278)
- Unified object routes in web app (
/file/<hash>instead of/sample/<hash>) (#314) - If route is not available, web app redirects to
/(#293) - Disabled
multipleoption in upload dropzone (#277) - Optimized
/api/useradministration endpoint (#286) - Added
NOT NULLconstraint in associative tables (#279) Sharesbox links touploader:query instead of user/group management view (#295)
v2.1.2
Bugfix release for regression introduced in v2.1.0. Fixed by #259.
Bugfixes:
uploader:query didn't show correct results (issue #257)uploader:query allowed to search for all users' uploads even if they're not a member of requestor's own groups. Results were still nonsense though due to previous bug./profile/<login>endpoint allowed to get basic profile info (e-mail address, registration and last login timestamp) of arbitrary user even if they're not a common member with requestor's groups.
v2.1.1
v2.1.0
New features:
- Exact array search for configurations -
cfg.urls*.url:...syntax (#231) - Support for S3-compatible object storage (#236, thanks @jamie-34254 for contribution)
- Marking objects as favorite (#237)
- Presenting count of found objects in search (#249)
- New "Groups" view that allows to inspect which users are in our own groups (#167)
- Support for human-readable file size in search and UI (#233)
Bugfixes:
- Legacy config upload endpoint (
PUT /api/config/{identifier}) allows to upload configuration even if user has noadding_configscapability.