Joe Boccanfuso
d8d376edaf
fix(security): Bump flattened version to address CVE-2026-32141. ( #5897 )
2026-03-13 15:25:21 -04:00
Joe Boccanfuso
d015b2e32a
fix(security): Bump tar version to address CVE-2026-31802. ( #5893 )
2026-03-11 20:53:17 -04:00
Joe Boccanfuso
61a1fccd7d
fix(security): Bump svgo and tar to fix vulnerabilities. ( #5877 )
2026-03-05 15:09:05 -05:00
Joe Boccanfuso
be8e266a80
fix(security): Address various security vulnerabilities. ( #5869 )
2026-03-04 12:23:49 -05:00
Bill Wallace
5370b9382e
fix: Update CS3D 4.18.2 ( #5837 )
...
* Update CS3D 4.17.4
* fix: Update to cs3d 4.18.2
* audit issues
* audit fixes
* fix: redos issue
* Simplify dependencies to fix audit alerts.
---------
Co-authored-by: Joe Boccanfuso <joe.boccanfuso@radicalimaging.com>
2026-02-26 09:49:44 -05:00
Joe Boccanfuso
27229609cd
fix(security): CVE-2026-27212 patched. Various dependency updates as a result of CVE-2026-26996. ( #5830 )
...
fix(security): CVE-2026-27212 patched.
Various dependency updates as a result of CVE-2026-26996.
Ultimately CVE-2026-26996 was ignored because it is only exposed in itk-wasm via CLI and OHIF's other use of minimatch is limited to build/dev environments.
2026-02-20 17:25:06 -05:00
Joe Boccanfuso
3d59c0d9d3
fix(security): Bump tar to 7.5.9 and lerna to 9.0.4 to fix CVE-2026-26960. ( #5824 )
...
* fix(security): Bump tar to 7.5.9 and lerna to 9.0.4 to fix CVE-2026-26960.
Bump sharp to 0.34.5 to fix tar-fs vulnerabilities.
* Update node version to 20.19.0 in circleci config. Needed for lerna and cypress tests.
* Now installing bun for cypress tests in circleci config.
* Use node version 20.19.0 in netlify config.
2026-02-18 16:46:02 -05:00
dependabot[bot]
f590fc05a8
chore(deps): bump webpack from 5.95.0 to 5.105.0 ( #5795 )
...
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Joe Boccanfuso <joe.boccanfuso@radicalimaging.com>
2026-02-13 07:03:10 -05:00
dependabot[bot]
4e9b5c2e22
chore(deps): bump diff from 4.0.2 to 4.0.4 - OHIF-2449 ( #5731 )
...
* fix(security): Use resolution for diff package to patch CVE-2026-24001.
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Joe Boccanfuso <joe.boccanfuso@radicalimaging.com>
2026-02-11 08:24:34 -05:00
dependabot[bot]
b8adfdfc84
chore(deps): bump lodash-es from 4.17.21 to 4.17.23 - OHIF-2441 ( #5736 )
...
* fix(security): Moved react-color dependency to default extension because it is only used there.
Addressed CVE-2025-13465 by adding lodash-es as a resolution.
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Joe Boccanfuso <joe.boccanfuso@radicalimaging.com>
2026-02-10 11:15:21 -05:00
dependabot[bot]
02f99d5638
chore(deps): bump lodash from 4.17.21 to 4.17.23 - OHIF-2438 ( #5744 )
...
* fix(security): Update lodash to 4.17.23 using a resolution.
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Joe Boccanfuso <joe.boccanfuso@radicalimaging.com>
2026-02-10 10:04:20 -05:00
Joe Boccanfuso
94c9e162f3
fix(security): Use a resolution for axios to address CVE-2026-25639. ( #5793 )
2026-02-09 16:43:50 -05:00
Bill Wallace
48f2f6fb13
fix(HistoryMemo): Segmentation delete wasn't remembered ( #5775 )
...
Will address a few more comments in a separate PR released after this one into 3.13
* fix(HistoryMemo): Segmentation delete wasn't remembered
* Temporary add of package.json linking
* fix: Use newer dcmjs version and delete segmentation with history cs3d
2026-02-05 11:49:49 -05:00
Joe Boccanfuso
06612fe177
fix(TMTV): Consider blend mode when adding segmentation representations. OHIF-2416, OHIF-2369 ( #5735 )
...
* Updated screenshots for failing tests due to FOV improvements.
---------
Co-authored-by: Bill Wallace <wayfarer3130@gmail.com>
2026-01-27 08:47:29 -05:00
Joe Boccanfuso
ca364a3af7
fix(security): update qs package to fix vulnerability CVE-2025-15284 ( #5686 )
...
fixes: qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustion
2026-01-05 12:23:34 -05:00
dependabot[bot]
6d6ce0ddae
chore(deps): bump mdast-util-to-hast from 13.2.0 to 13.2.1 in /platform/docs ( #5602 )
...
* Fix node-forge security alerts as well.
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Joe Boccanfuso <joe.boccanfuso@radicalimaging.com>
2025-12-02 09:08:43 -05:00
Bill Wallace
57205703bb
Fix contour annotations RTSS saving ( #5545 )
...
* [WIP] Fix contour annotations RTSS saving
* fix: Export image sop image reference provider
* Fixes for download with filename
* Updates to fix metadata issues with CS3D
* Updates to save menu
* Fixing some additional re-save metadata
* Add support for saving with predecessor image sequence
* PR comment fixes
* fix: Load RTSS after save
* fix segmentation save
* fix load of mixed seg/rt studies
* Use frame module to get information on the frame shown
* Fix study browser to use instances.length when numImageFrames not present
* fix: Load of display set split from multiple non-FOR referenes
* Fix RT and SEG applying to wrong series because of using
referenced series sequence without checkout sop instances
* Fix save seg
* Update to released CS3D versions
* test: Add revokeObjectURL to test download blob
* Add hard dependency on mode-basic to fix build order issues
* fix: build
* Try to fix build segmentation
* PR comments
* PR comment update
2025-11-21 13:07:26 -05:00
dependabot[bot]
62797acd9a
chore(deps): bump glob from 10.4.5 to 10.5.0 ( #5572 )
...
Ignore CVE-2025-64756 (aka GHSA-5j98-mcp5-4vw2) in bun audit.
Co-authored-by: Joe Boccanfuso <joe.boccanfuso@radicalimaging.com>
2025-11-19 08:43:58 -05:00
Joe Boccanfuso
000e42e9a6
fix(security): Exact versioning and docs dependabot alerts ( #5536 )
2025-10-30 16:04:19 -04:00
Joe Boccanfuso
1f11c83006
fix(security): Addressed dependabot alert CVE-2025-59288 concerning playwright ( #5527 )
2025-10-27 15:16:43 -04:00
Joe Boccanfuso
1009c60911
fix(security): For bun, enforce frozen lockfile. For yarn, strongly suggest using frozen lockfile. ( #5508 )
...
* Updated docs for security information.
2025-10-24 16:48:35 -04:00
Ibrahim
a1544432db
feat(jpeg2000): Add 16-bit RGB support to JPEG2000 decoder ( #5519 )
2025-10-23 09:11:54 -04:00
Joe Boccanfuso
c7d2017f08
fix(security): Use exact versioning for dependencies in package.json files. ( #5494 )
...
Added bun audit security check in build process.
Removed bun caching.
2025-10-14 16:23:36 -04:00
Bill Wallace
9ad0d7fc8c
feat: Add inherit from basic/longitudinal modes ( #5435 )
...
Co-authored-by: Ibrahim <ibrahim.mdev@gmail.com>
2025-10-01 14:31:26 -04:00
Vinícius Alves de Faria Resende
12ac509c40
test(SegmentationService): Adding 98.63% of test line coverage to Segmentation Service through unit tests ( #5421 )
2025-09-30 13:49:13 -04:00
Joe Boccanfuso
80f314a422
fix(security): Removed dependency on tar-fs by removing dependencies on storybook and sharp. ( #5438 )
2025-09-28 22:28:06 -04:00
Joe Boccanfuso
d41eca4ed5
chore(deps): update cornerstone to 4.3.10 ( #5436 )
2025-09-26 10:04:30 -04:00
dependabot[bot]
06073af035
chore(deps): bump axios from 1.11.0 to 1.12.0 ( #5412 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Joe Boccanfuso <joe.boccanfuso@radicalimaging.com>
2025-09-17 12:02:33 -04:00
Pedro Köhler
735405a855
feat: add support to scoord3d ( #5016 )
...
Co-authored-by: Bill Wallace <wayfarer3130@gmail.com>
2025-07-31 00:21:26 -04:00
dependabot[bot]
76a2b90c17
chore(deps): bump form-data from 4.0.3 to 4.0.4 ( #5244 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Joe Boccanfuso <joe.boccanfuso@radicalimaging.com>
Co-authored-by: Joe Boccanfuso <109477394+jbocce@users.noreply.github.com>
2025-07-22 13:30:29 -04:00
Joe Boccanfuso
e0289dc49f
fix(segmentation): Removed LOAD/hydrate button for segmentation overlays ( #5214 )
2025-07-15 09:02:36 -04:00
Vinícius Alves de Faria Resende
4a59126dd9
fix(UnitTests): Fixing "Cannot find module @cornerstonejs/core" error while running unit tests ( #5148 )
2025-07-11 16:36:49 -04:00
Ibrahim
10d93161b4
feat(rendering): Introduce WebGLContextPool for parallel rendering in ContextPoolRenderingEngine ( #5196 )
2025-07-11 12:33:24 -04:00
Joe Boccanfuso
eeaf49c61a
fix(security): Patch for Babel vulnerability ( #5193 )
2025-07-11 09:43:56 -04:00
Dan Rukas
04ab79f8fb
ui(feat): Adds light/dark mode support for viewport overlay text and markers ( #5041 )
...
Co-authored-by: sedghi <ar.sedghi@gmail.com>
2025-05-15 17:12:53 -04:00
Alireza
7c15bb8901
feat(actions): simplify action corner api through the toolbarService ( #5033 )
2025-05-15 12:08:12 -04:00
Bill Wallace
578c3939f0
feat(thumbnails): Enhance DICOM Thumbnail Rendering with different strategies ( #5004 )
...
Co-authored-by: Martin Bellehumeur, M. Eng. <23396581+mbellehumeur@users.noreply.github.com>
2025-05-08 12:44:56 -04:00
Alireza
08c14e9ba2
fix/runner ( #4971 )
2025-04-16 17:35:32 -04:00
Alireza
91117f40f8
chore: add test coverage ( #4960 )
2025-04-16 15:56:52 -04:00
Alireza
bd2f843469
chore: update screenshopts for test ( #4934 )
2025-04-08 18:34:45 -04:00
Alireza
ebe6fbaf31
feat: update vtk js ( #4858 )
2025-03-17 10:21:06 -04:00
Alireza
cc5cdfb081
feat(toolbox): Refactor Toolbar and Toolbox to enable sections ( #4825 )
2025-03-06 22:19:47 -05:00
Alireza
9233143b9d
fix(sr): sr hydration and load was not working, Screenshot Comparison, and Testing ( #4814 )
2025-02-26 11:23:40 -05:00
Alireza
d8a6e79df0
fix: depandabot ( #4786 )
2025-02-18 09:08:10 -05:00
Alireza
d554f02f7c
fix(dependencies): Update dcmjs library and improve documentation links ( #4741 )
2025-01-28 14:59:59 -05:00
Alireza
d4a4267429
feat(dev): move to rsbuild for dev - faster ( #4674 )
2025-01-10 15:05:35 -05:00
Alireza
66eebbed0f
fix(circleci): Update workflow dependencies for Docker publishing stages ( #4661 )
2025-01-08 15:20:16 -05:00
Bill Wallace
7e43b2f768
fix: Docker build time was very slow on a tiny change ( #4559 )
...
Co-authored-by: sedghi <ar.sedghi@gmail.com>
2025-01-02 14:46:53 -05:00
Alireza
4e2ae32874
feat: migrate icons to ui-next ( #4606 )
2024-12-17 13:20:19 -05:00
Alireza
6ec04ca65e
fix(sr): correct jump to first image via viewRef ( #4576 )
2024-12-05 21:39:13 -05:00
