Joe Boccanfuso
646dd583a2
chore(security and testing): patch sigstore and run Playwright CI on the nashua self-hosted runner for release/3.12 ( #6123 )
2026-07-07 13:53:57 -04:00
ohif-bot
8460409a62
chore(version): Update package versions [skip ci]
2026-06-17 16:10:51 +00:00
ohif-bot
ea64ff7b89
chore(version): version.json [skip ci]
2026-06-17 16:10:43 +00:00
Joe Boccanfuso
f5f086cd95
fix(security): Update dependencies to fix security vulnerabilities. Release 3.12.5 ( #6086 )
...
* Update playwright config to output html report and always include video.
* Output playwright html report to results zip.
* Fix MeasurementPanel.spec.ts to use new measurement row locator.
2026-06-17 12:04:45 -04:00
ohif-bot
1a8db3b8c6
chore(version): Update package versions [skip ci]
2026-06-05 12:56:28 +00:00
ohif-bot
ac3ff44a56
chore(version): version.json [skip ci]
2026-06-05 12:56:20 +00:00
Joe Boccanfuso
62917c2142
fix(security): Update axios to fix security vulnerabilities. Release 3.12.4 ( #6064 )
2026-06-05 08:45:52 -04:00
ohif-bot
c31db6513b
chore(version): Update package versions [skip ci]
2026-05-27 14:55:54 +00:00
ohif-bot
c1d9d23f78
chore(version): version.json [skip ci]
2026-05-27 14:55:44 +00:00
Joe Boccanfuso
fb4441ba71
fix(security): Add tmp as a resolution to fix security vulnerability. Trigger release 3.12.3. ( #6045 )
2026-05-27 10:44:11 -04:00
ohif-bot
db16341a4f
chore(version): Update package versions [skip ci]
2026-05-18 13:39:27 +00:00
ohif-bot
0fcf3a9dc1
chore(version): version.json [skip ci]
2026-05-18 13:39:19 +00:00
Joe Boccanfuso
75a24a3393
fix(security): Update various dependencies to fix security vulnerabilities. Release 3.12.2 ( #6024 )
2026-05-18 09:32:40 -04:00
ohif-bot
104de8d833
chore(version): version.json [skip ci]
2026-05-08 18:51:36 +00:00
Alireza
647fd025cf
fix(release): make publish-version.mjs idempotent for re-runs
...
Skip the peer-dep commit when nothing is staged and skip the lerna
version step when the workspace is already at the target version.
Allows the release pipeline to be re-triggered after a partial run.
2026-05-08 14:42:57 -04:00
Alireza
3fc8706126
chore(version): Update package versions [skip ci]
2026-05-08 14:37:54 -04:00
ohif-bot
539ff44f47
chore(version): version.json [skip ci]
2026-05-07 23:52:54 +00:00
Joe Boccanfuso
146897f216
chore: release 3.12.1 ( #6003 )
2026-05-07 19:45:13 -04:00
Joe Boccanfuso
a264413124
fix(security): Patch axios security vulnerabilities. ( #5997 )
...
Patch axios security vulnerabilities.
2026-05-06 13:37:37 -04:00
Joe Boccanfuso
838f51957e
fix(configuration): Harden dynamic datasource URL trust boundaries and credential handling. 3.12 ( #5978 )
2026-04-29 14:38:55 -04:00
Joe Boccanfuso
bab20143fd
fix(security): Update axios and protobufjs to fix security vulnerabilities. ( #5975 )
2026-04-23 14:15:16 -04:00
Joe Boccanfuso
946735bf90
fix(security):Update yarn.lock that was missed in PR #5937 . ( #5939 )
2026-04-03 13:16:47 -04:00
Joe Boccanfuso
a5be4c3dce
fix(security): update dependencies to fix security vulnerabilities ( #5937 )
2026-04-02 18:06:35 -04:00
Joe Boccanfuso
171ea857cf
fix(security): Bump flattened version to address CVE-2026-32141 for release 3.12 ( #5898 )
2026-03-13 15:25:55 -04:00
Joe Boccanfuso
9754fc1e92
fix(security): Bump tar version to address CVE-2026-31802 in release/3.12 ( #5896 )
2026-03-13 08:49:13 -04:00
Joe Boccanfuso
6772deb4c6
fix(security): Bump svgo and tar to fix vulnerabilities in release 3.12 ( #5881 )
2026-03-06 08:26:16 -05:00
Joe Boccanfuso
1d0a8744b2
fix(security): Address various security vulnerabilities in the release/3.12 branch ( #5872 )
2026-03-04 14:54:17 -05:00
Joe Boccanfuso
555c87f1c5
chore(security): Updates for running bun audit during CI and dependabot PR version update settings ( #5836 )
...
chore(security): Update circleci config to only run bun audit for lockfile changes.
Disabled all dependabot pull requests for bun and npm version updates.
2026-02-23 16:26:49 -05:00
Joe Boccanfuso
51d267e707
fix(security): CVE-2026-27212 and CVE-2026-26996 addressed for release/3.12 ( #5831 )
...
* fix(security): CVE-2026-27212 patched.
Various dependency updates as a result of CVE-2026-26996.
Ultimately CVE-2026-26996 was ignored because it is only exposed in itk-wasm via CLI and OHIF's other use of minimatch is limited to build/dev environments.
* Switched to eslint 9.39.3 for compatibility with .eslintrc.json.
2026-02-23 14:51:42 -05:00
Joe Boccanfuso
c5c18f9516
fix(security): Bump tar to 7.5.9 and lerna to 9.0.4 to fix CVE-2026-26960. ( #5825 )
...
* fix(security): Bump tar to 7.5.9 and lerna to 9.0.4 to fix CVE-2026-26960.
Bump sharp to 0.34.5 to fix tar-fs vulnerabilities.
* Update node version to 20.19.0 in circleci config. Needed for lerna and cypress tests.
* Now installing bun for cypress tests in circleci config.
* Use node version 20.19.0 in netlify config.
2026-02-18 16:52:57 -05:00
Joe Boccanfuso
213a0974bb
chore(deps): bump webpack from 5.95.0 to 5.105.0 to address CVE-2025-68458 and CVE-2025-68157 ( #5822 )
2026-02-18 12:31:13 -05:00
Joe Boccanfuso
0d882a425d
fix: Better handle octet stream case ( #5789 ) ( #5804 )
...
* Better handle octet stream case
* Use data source config stack options
* Use immutability helper
---------
Co-authored-by: Igor Octaviano <igoroctaviano@gmail.com>
Co-authored-by: Bill Wallace <wayfarer3130@gmail.com>
2026-02-13 12:04:05 -05:00
Joe Boccanfuso
49ea3ac82b
chore(deps): bump diff to 5.2.2 to path CVE-2026-24001 ( #5812 )
2026-02-11 09:39:32 -05:00
Joe Boccanfuso
99736b6437
chore(deps): bump lodash and lodash-es from 4.17.21 to 4.17.23 to address CVE-2025-13465 ( #5803 )
2026-02-10 14:28:08 -05:00
Joe Boccanfuso
7fb67d2396
fix(security): Use a resolution for axios to address CVE-2026-25639. ( #5794 )
2026-02-09 16:44:12 -05:00
ohif-bot
04b121c1ba
chore(version): Update package versions [skip ci]
2026-02-06 17:45:00 +00:00
ohif-bot
9782980a7a
chore(version): version.json [skip ci]
2026-02-06 17:44:53 +00:00
Joe Boccanfuso
27b1afe040
chore: release 3.12.0
2026-02-06 10:03:53 -05:00
ohif-bot
891d6570c1
chore(version): Update package versions [skip ci]
2026-02-05 22:02:12 +00:00
ohif-bot
48f8e806c3
chore(version): version.json [skip ci]
2026-02-05 22:02:05 +00:00
Joe Boccanfuso
45739b31a2
fix(jump-to-contour-segment): For contours like those from RSTRUCTs, use generic jumpToSegmentCenter if a segment center is available. ( #5785 )
2026-02-05 16:57:15 -05:00
ohif-bot
54ff608605
chore(version): Update package versions [skip ci]
2026-02-05 16:55:14 +00:00
ohif-bot
710fefe3e8
chore(version): version.json [skip ci]
2026-02-05 16:55:06 +00:00
Bill Wallace
48f2f6fb13
fix(HistoryMemo): Segmentation delete wasn't remembered ( #5775 )
...
Will address a few more comments in a separate PR released after this one into 3.13
* fix(HistoryMemo): Segmentation delete wasn't remembered
* Temporary add of package.json linking
* fix: Use newer dcmjs version and delete segmentation with history cs3d
2026-02-05 11:49:49 -05:00
ohif-bot
3b9d3babf9
chore(version): Update package versions [skip ci]
2026-02-04 21:17:59 +00:00
ohif-bot
e71a20334a
chore(version): version.json [skip ci]
2026-02-04 21:17:50 +00:00
Joe Boccanfuso
512aa3b07f
fix(jump-to-label-map): Use undefined for viewportId for arrow navigation. ( #5774 )
...
* Update to CS3D 4.15.28.
2026-02-04 16:12:41 -05:00
ohif-bot
c40ebd2124
chore(version): Update package versions [skip ci]
2026-01-30 18:57:26 +00:00
ohif-bot
ceb61fce15
chore(version): version.json [skip ci]
2026-01-30 18:57:20 +00:00
Joe Boccanfuso
9a97095d5c
chore(deps): Update cornerstonejs dependencies to 4.15.24. ( #5764 )
2026-01-30 13:53:28 -05:00