Skip to content

Release v1.14.1#1406

Open
aharwood2 wants to merge 184 commits into
releasefrom
dev
Open

Release v1.14.1#1406
aharwood2 wants to merge 184 commits into
releasefrom
dev

Conversation

@aharwood2

Copy link
Copy Markdown
Member

This pull request introduces several improvements across the repository, focusing on codebase maintainability, workflow enhancements, and governance documentation. Key changes include the introduction of a security analysis workflow, improved GitHub Actions workflows with enhanced permissions and version pinning, significant refactoring of data entity inheritance, and updates to project governance and contribution documentation.

GitHub Actions and CI/CD improvements:

  • Added a new .github/workflows/run-zizmor.yml workflow to perform GitHub Actions security analysis using Zizmor.
  • Updated workflow files to use explicit version pinning for actions, added or clarified permissions blocks, and improved workflow triggers for better security and reliability (e.g., docker-images-build-health-check.yml, dotnet.yml, naming-conventions.yml). [1] [2] [3]
  • Added a cooldown period and scheduled updates for dependencies in .github/dependabot.yml.

Data model and codebase refactoring:

  • Introduced an abstract base class BaseBookableItem for timesheet codes and tasks, and updated InnateCode and InnateCodeTask to inherit from it. This centralizes shared logic and improves maintainability. [1] [2] [3]
  • Added shadow properties to Person and Project entities to support easier filtering in the UI (e.g., SkillTags, CurrentGrade, FundsReceived). [1] [2]
  • Updated PPMToolContext to ensure all DateTime columns are mapped to timestamp without time zone for compatibility with Npgsql v6+.

Governance, documentation, and licensing:

  • Updated CONTRIBUTING.md to clarify project governance, contribution expectations, and the role of the dRTP Operational Management Community of Practice. [1] [2]
  • Added a CODEOWNERS file and copyright/license headers to new and modified files.

General maintenance:

  • Upgraded dotnet-ef tool version in .config/dotnet-tools.json and improved workflow triggers and permissions in multiple workflow files. [1] [2] [3] [4]

These changes collectively improve the security, maintainability, and clarity of the repository, while laying groundwork for better community contribution and operational governance.

dependabot Bot and others added 30 commits May 22, 2026 08:05
Bumps coverlet.collector from 10.0.0 to 10.0.1
Bumps dotnet-ef from 10.0.7 to 10.0.8
Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.7 to 10.0.8
Bumps Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore from 10.0.7 to 10.0.8
Bumps Microsoft.EntityFrameworkCore from 10.0.7 to 10.0.8
Bumps Microsoft.EntityFrameworkCore.Design from 10.0.7 to 10.0.8
Bumps Microsoft.EntityFrameworkCore.InMemory from 10.0.7 to 10.0.8
Bumps Microsoft.EntityFrameworkCore.Proxies from 10.0.7 to 10.0.8
Bumps Microsoft.EntityFrameworkCore.Sqlite from 10.0.7 to 10.0.8
Bumps Microsoft.EntityFrameworkCore.SqlServer from 10.0.7 to 10.0.8
Bumps Microsoft.EntityFrameworkCore.Tools from 10.0.7 to 10.0.8
Bumps Microsoft.Extensions.Configuration.Abstractions from 10.0.7 to 10.0.8
Bumps Microsoft.Playwright.NUnit from 1.59.0 to 1.60.0
Bumps NUnit from 4.6.0 to 4.6.1
Bumps Radzen.Blazor from 10.4.1 to 10.4.4

---
updated-dependencies:
- dependency-name: coverlet.collector
  dependency-version: 10.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-updates
- dependency-name: dotnet-ef
  dependency-version: 10.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-updates
- dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer
  dependency-version: 10.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-updates
- dependency-name: Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore
  dependency-version: 10.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-updates
- dependency-name: Microsoft.EntityFrameworkCore
  dependency-version: 10.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-updates
- dependency-name: Microsoft.EntityFrameworkCore.Design
  dependency-version: 10.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-updates
- dependency-name: Microsoft.Extensions.Configuration.Abstractions
  dependency-version: 10.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-updates
- dependency-name: Microsoft.EntityFrameworkCore.Design
  dependency-version: 10.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-updates
- dependency-name: Microsoft.EntityFrameworkCore.InMemory
  dependency-version: 10.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-updates
- dependency-name: Microsoft.EntityFrameworkCore.Proxies
  dependency-version: 10.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-updates
- dependency-name: Microsoft.EntityFrameworkCore.Sqlite
  dependency-version: 10.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-updates
- dependency-name: Microsoft.EntityFrameworkCore.SqlServer
  dependency-version: 10.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-updates
- dependency-name: Microsoft.EntityFrameworkCore.Tools
  dependency-version: 10.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-updates
- dependency-name: Microsoft.Playwright.NUnit
  dependency-version: 1.60.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-updates
- dependency-name: NUnit
  dependency-version: 4.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-updates
- dependency-name: Radzen.Blazor
  dependency-version: 10.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
These adjustments are mostly to define permissions, and to switch check-ruleset to common reusable workflow.
…ross database schema (towards #1340)

- Added migration to alter timestamp columns in various tables to 'timestamp without time zone' to ensure proper handling of date and time values.
- Updated model snapshot to reflect changes in column types for consistency.
…42-make-documentation-changes-from-cop-meeting-on-26th-may-2026-2026-05-28-10-59-37

Add License and Copyright Headers
Fixed typos

Co-authored-by: Phil Bradbury <PhilBradbury@users.noreply.github.com>
…ig/all-updates-47a7d35778

Bump the all-updates group with 15 updates
…ecks and `SpecifyKind` for API key expiration (towards #1340)
…40-timezone-pgsql-fix-2026-05-30-01-40-42

Add License and Copyright Headers
…vent `NpgsqlOperationInProgressException` on PostgreSQL.

Iterating directly over DbSet inside a loop that issues further queries
on the same context fails on PostgreSQL (no MARS support). Fixed by
calling ToList() before the affected foreach loops in
SeedOwnedSkillsForPeople, SeedCompetencyAssessments, and SeedTimesheets.
aharwood2 and others added 27 commits July 1, 2026 08:40
…verriding of LINQ-based filtering consistently
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
…ges-broken

1366 filtering on some pages broken
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
…t-1388

Optimize startup project metadata refresh without changing global `GetAll` loading behavior
…ject-meta-data-on-program-start

1375 compute or cache project meta data on program start
…ig/all-updates-348c62996b

Bump DocX and 19 others
…with-profiling

Added some more test fixtures
@aharwood2 aharwood2 added this to the v1.14.1 milestone Jul 3, 2026
@aharwood2 aharwood2 requested a review from a team July 3, 2026 09:13
@aharwood2 aharwood2 self-assigned this Jul 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants