Nautobot

v2.2.4 - 2024-05-13 #5704

glennmatthews started this conversation in General

glennmatthews
May 13, 2024
Maintainer

What's Changed

Security

#1858 - Added sanitization of HTML tags in the content of BANNER_TOP, BANNER_BOTTOM, and BANNER_LOGIN configuration to prevent against potential injection of malicious scripts (stored XSS) via these features (GHSA-r2hr-4v48-fjv3).
#5672 - Updated Jinja2 dependency to 3.1.4 to address CVE-2024-34064.

Added

#1858 - Added support in BRANDING_FILEPATHS configuration to specify a custom css and/or javascript file to be added to Nautobot page content.
#1858 - Added Markdown support to the BANNER_TOP, BANNER_BOTTOM, and BANNER_LOGIN configuration settings.

Fixed

#4986 - Fixed inconsistent use of super causing active_tab context to be missing from several views.
#5644 - Made the uniqueness constraints between the ContactAssociation model and the related API serializer consistent.
#5684 - Fixed standard CSV export when using export templates.
#5689 - Fixed change logging for bulk delete operations so that user is included in the log.

Documentation

#5661 - Updated documentation to organize installation instructions and provide easier to use functions from mkdocs.

Housekeeping

#5263 - Updated nh3 to 0.2.17 in poetry.lock.
#5637 - Removed "version" from development docker-compose.yml files as newer versions of Docker complain about it being obsolete.
#5637 - Fixed behavior of invoke stop so that it also stops the optional mkdocs container if present.

Contributors

Full Changelog: v2.2.3...v2.2.4

This discussion was created from the release v2.2.4 - 2024-05-13.

Replies: 0 comments

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment