Joe Boccanfuso
27229609cd
fix(security): CVE-2026-27212 patched. Various dependency updates as a result of CVE-2026-26996. ( #5830 )
...
fix(security): CVE-2026-27212 patched.
Various dependency updates as a result of CVE-2026-26996.
Ultimately CVE-2026-26996 was ignored because it is only exposed in itk-wasm via CLI and OHIF's other use of minimatch is limited to build/dev environments.
2026-02-20 17:25:06 -05:00
Joe Boccanfuso
3d59c0d9d3
fix(security): Bump tar to 7.5.9 and lerna to 9.0.4 to fix CVE-2026-26960. ( #5824 )
...
* fix(security): Bump tar to 7.5.9 and lerna to 9.0.4 to fix CVE-2026-26960.
Bump sharp to 0.34.5 to fix tar-fs vulnerabilities.
* Update node version to 20.19.0 in circleci config. Needed for lerna and cypress tests.
* Now installing bun for cypress tests in circleci config.
* Use node version 20.19.0 in netlify config.
2026-02-18 16:46:02 -05:00
dependabot[bot]
f590fc05a8
chore(deps): bump webpack from 5.95.0 to 5.105.0 ( #5795 )
...
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Joe Boccanfuso <joe.boccanfuso@radicalimaging.com>
2026-02-13 07:03:10 -05:00
dependabot[bot]
4e9b5c2e22
chore(deps): bump diff from 4.0.2 to 4.0.4 - OHIF-2449 ( #5731 )
...
* fix(security): Use resolution for diff package to patch CVE-2026-24001.
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Joe Boccanfuso <joe.boccanfuso@radicalimaging.com>
2026-02-11 08:24:34 -05:00
dependabot[bot]
b8adfdfc84
chore(deps): bump lodash-es from 4.17.21 to 4.17.23 - OHIF-2441 ( #5736 )
...
* fix(security): Moved react-color dependency to default extension because it is only used there.
Addressed CVE-2025-13465 by adding lodash-es as a resolution.
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Joe Boccanfuso <joe.boccanfuso@radicalimaging.com>
2026-02-10 11:15:21 -05:00
dependabot[bot]
02f99d5638
chore(deps): bump lodash from 4.17.21 to 4.17.23 - OHIF-2438 ( #5744 )
...
* fix(security): Update lodash to 4.17.23 using a resolution.
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Joe Boccanfuso <joe.boccanfuso@radicalimaging.com>
2026-02-10 10:04:20 -05:00
Joe Boccanfuso
94c9e162f3
fix(security): Use a resolution for axios to address CVE-2026-25639. ( #5793 )
2026-02-09 16:43:50 -05:00
Bill Wallace
48f2f6fb13
fix(HistoryMemo): Segmentation delete wasn't remembered ( #5775 )
...
Will address a few more comments in a separate PR released after this one into 3.13
* fix(HistoryMemo): Segmentation delete wasn't remembered
* Temporary add of package.json linking
* fix: Use newer dcmjs version and delete segmentation with history cs3d
2026-02-05 11:49:49 -05:00
Joe Boccanfuso
06612fe177
fix(TMTV): Consider blend mode when adding segmentation representations. OHIF-2416, OHIF-2369 ( #5735 )
...
* Updated screenshots for failing tests due to FOV improvements.
---------
Co-authored-by: Bill Wallace <wayfarer3130@gmail.com>
2026-01-27 08:47:29 -05:00
Joe Boccanfuso
ca364a3af7
fix(security): update qs package to fix vulnerability CVE-2025-15284 ( #5686 )
...
fixes: qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustion
2026-01-05 12:23:34 -05:00
dependabot[bot]
6d6ce0ddae
chore(deps): bump mdast-util-to-hast from 13.2.0 to 13.2.1 in /platform/docs ( #5602 )
...
* Fix node-forge security alerts as well.
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Joe Boccanfuso <joe.boccanfuso@radicalimaging.com>
2025-12-02 09:08:43 -05:00
Bill Wallace
57205703bb
Fix contour annotations RTSS saving ( #5545 )
...
* [WIP] Fix contour annotations RTSS saving
* fix: Export image sop image reference provider
* Fixes for download with filename
* Updates to fix metadata issues with CS3D
* Updates to save menu
* Fixing some additional re-save metadata
* Add support for saving with predecessor image sequence
* PR comment fixes
* fix: Load RTSS after save
* fix segmentation save
* fix load of mixed seg/rt studies
* Use frame module to get information on the frame shown
* Fix study browser to use instances.length when numImageFrames not present
* fix: Load of display set split from multiple non-FOR referenes
* Fix RT and SEG applying to wrong series because of using
referenced series sequence without checkout sop instances
* Fix save seg
* Update to released CS3D versions
* test: Add revokeObjectURL to test download blob
* Add hard dependency on mode-basic to fix build order issues
* fix: build
* Try to fix build segmentation
* PR comments
* PR comment update
2025-11-21 13:07:26 -05:00
dependabot[bot]
62797acd9a
chore(deps): bump glob from 10.4.5 to 10.5.0 ( #5572 )
...
Ignore CVE-2025-64756 (aka GHSA-5j98-mcp5-4vw2) in bun audit.
Co-authored-by: Joe Boccanfuso <joe.boccanfuso@radicalimaging.com>
2025-11-19 08:43:58 -05:00
Joe Boccanfuso
000e42e9a6
fix(security): Exact versioning and docs dependabot alerts ( #5536 )
2025-10-30 16:04:19 -04:00
Joe Boccanfuso
1f11c83006
fix(security): Addressed dependabot alert CVE-2025-59288 concerning playwright ( #5527 )
2025-10-27 15:16:43 -04:00
Joe Boccanfuso
1009c60911
fix(security): For bun, enforce frozen lockfile. For yarn, strongly suggest using frozen lockfile. ( #5508 )
...
* Updated docs for security information.
2025-10-24 16:48:35 -04:00
Ibrahim
a1544432db
feat(jpeg2000): Add 16-bit RGB support to JPEG2000 decoder ( #5519 )
2025-10-23 09:11:54 -04:00
Joe Boccanfuso
c7d2017f08
fix(security): Use exact versioning for dependencies in package.json files. ( #5494 )
...
Added bun audit security check in build process.
Removed bun caching.
2025-10-14 16:23:36 -04:00
Bill Wallace
9ad0d7fc8c
feat: Add inherit from basic/longitudinal modes ( #5435 )
...
Co-authored-by: Ibrahim <ibrahim.mdev@gmail.com>
2025-10-01 14:31:26 -04:00
Vinícius Alves de Faria Resende
12ac509c40
test(SegmentationService): Adding 98.63% of test line coverage to Segmentation Service through unit tests ( #5421 )
2025-09-30 13:49:13 -04:00
Joe Boccanfuso
80f314a422
fix(security): Removed dependency on tar-fs by removing dependencies on storybook and sharp. ( #5438 )
2025-09-28 22:28:06 -04:00
Joe Boccanfuso
d41eca4ed5
chore(deps): update cornerstone to 4.3.10 ( #5436 )
2025-09-26 10:04:30 -04:00
dependabot[bot]
06073af035
chore(deps): bump axios from 1.11.0 to 1.12.0 ( #5412 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Joe Boccanfuso <joe.boccanfuso@radicalimaging.com>
2025-09-17 12:02:33 -04:00
Pedro Köhler
735405a855
feat: add support to scoord3d ( #5016 )
...
Co-authored-by: Bill Wallace <wayfarer3130@gmail.com>
2025-07-31 00:21:26 -04:00
dependabot[bot]
76a2b90c17
chore(deps): bump form-data from 4.0.3 to 4.0.4 ( #5244 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Joe Boccanfuso <joe.boccanfuso@radicalimaging.com>
Co-authored-by: Joe Boccanfuso <109477394+jbocce@users.noreply.github.com>
2025-07-22 13:30:29 -04:00
Joe Boccanfuso
e0289dc49f
fix(segmentation): Removed LOAD/hydrate button for segmentation overlays ( #5214 )
2025-07-15 09:02:36 -04:00
Vinícius Alves de Faria Resende
4a59126dd9
fix(UnitTests): Fixing "Cannot find module @cornerstonejs/core" error while running unit tests ( #5148 )
2025-07-11 16:36:49 -04:00
Ibrahim
10d93161b4
feat(rendering): Introduce WebGLContextPool for parallel rendering in ContextPoolRenderingEngine ( #5196 )
2025-07-11 12:33:24 -04:00
Joe Boccanfuso
eeaf49c61a
fix(security): Patch for Babel vulnerability ( #5193 )
2025-07-11 09:43:56 -04:00
Dan Rukas
04ab79f8fb
ui(feat): Adds light/dark mode support for viewport overlay text and markers ( #5041 )
...
Co-authored-by: sedghi <ar.sedghi@gmail.com>
2025-05-15 17:12:53 -04:00
Alireza
7c15bb8901
feat(actions): simplify action corner api through the toolbarService ( #5033 )
2025-05-15 12:08:12 -04:00
Bill Wallace
578c3939f0
feat(thumbnails): Enhance DICOM Thumbnail Rendering with different strategies ( #5004 )
...
Co-authored-by: Martin Bellehumeur, M. Eng. <23396581+mbellehumeur@users.noreply.github.com>
2025-05-08 12:44:56 -04:00
Alireza
08c14e9ba2
fix/runner ( #4971 )
2025-04-16 17:35:32 -04:00
Alireza
91117f40f8
chore: add test coverage ( #4960 )
2025-04-16 15:56:52 -04:00
Alireza
bd2f843469
chore: update screenshopts for test ( #4934 )
2025-04-08 18:34:45 -04:00
Alireza
ebe6fbaf31
feat: update vtk js ( #4858 )
2025-03-17 10:21:06 -04:00
Alireza
cc5cdfb081
feat(toolbox): Refactor Toolbar and Toolbox to enable sections ( #4825 )
2025-03-06 22:19:47 -05:00
Alireza
9233143b9d
fix(sr): sr hydration and load was not working, Screenshot Comparison, and Testing ( #4814 )
2025-02-26 11:23:40 -05:00
Alireza
d8a6e79df0
fix: depandabot ( #4786 )
2025-02-18 09:08:10 -05:00
Alireza
d554f02f7c
fix(dependencies): Update dcmjs library and improve documentation links ( #4741 )
2025-01-28 14:59:59 -05:00
Alireza
d4a4267429
feat(dev): move to rsbuild for dev - faster ( #4674 )
2025-01-10 15:05:35 -05:00
Alireza
66eebbed0f
fix(circleci): Update workflow dependencies for Docker publishing stages ( #4661 )
2025-01-08 15:20:16 -05:00
Bill Wallace
7e43b2f768
fix: Docker build time was very slow on a tiny change ( #4559 )
...
Co-authored-by: sedghi <ar.sedghi@gmail.com>
2025-01-02 14:46:53 -05:00
Alireza
4e2ae32874
feat: migrate icons to ui-next ( #4606 )
2024-12-17 13:20:19 -05:00
Alireza
6ec04ca65e
fix(sr): correct jump to first image via viewRef ( #4576 )
2024-12-05 21:39:13 -05:00
Bill Wallace
edfaf7248d
fix: Make the commands ordering the registration order of hte mode ( #4492 )
2024-11-22 12:00:47 -05:00
Ibrahim
5aeed931c2
chore(CI): move tasks from yarn to bun, improve cypress tests ( #4476 )
2024-11-14 13:06:58 -05:00
Alireza
7ce7127d7c
OHIF with Cornerstone3D 2.0 ( #4347 )
2024-11-06 07:15:27 -05:00
Alireza
465df5c573
docs(ui): add base for ui component showcase in docs ( #4414 )
2024-10-15 09:53:26 -04:00
Pedro H. Köhler
b4f08adfb6
fix(dependent): high priority vulnerabilities ( #4396 )
2024-10-01 08:20:19 -04:00
