LORIS Release v23.0.7 -- DO NOT USE. SEE v23.0.8.

This release fixes the ability to build LORIS, after a change to npm started causing a linting error. It also fixes some security issues and includes a fix for LINST instruments.

• [LINST] Fixed default date field null error (#7559)
• [imaging_browser] Escape the header table in view session page (#7552)
• [CI] Fix Build on v23 branch (#7580)
• [Security] Add 2 more Content-Security-Policy options (#7579)

LORIS Release v23.0.6

This bugfix release includes all bug fixes since the 23.0.5 release.

For a full list of changes follow this link

Noteworthy changes:

[Security] Fix SameSite cookie CSRF protection #7539
[publication] Lead investigator issue when multiple collaborators share the same name or email #7471

LORIS Release v23.0.5

This bugfix release includes all bug fixes since the 23.0.4 release.

For a full list of changes follow this link

Noteworthy changes:

• [Publication] Set Content-Type for ajax responses. This could lead to an XSS attack if a user is tricked into directly accessing an ajax endpoint. The frontend was not directly vulnerable. (#7532)
• [Configuration] Fix saving of values when no previous value present (#7507)
• [Raisinbread] Fixing help_editor module to display RB instrument instructions (#6907)
• [Config] assign user creating project to a newly created project (#7505)
• [Filter] Fix Menu Filter logic to use exact match for "Sex" fields (#7498)

DOI Test Release

This was for the purpose of linking to Zenodo, but not really to be used as a release version for public consumption. Please use a numbered release.

LORIS Release v23.0.4

This bugfix release includes all bug fixes since the 23.0.3 release.

For the full list of changes follow this link.

Noteworthy changes:

• [survey_accounts] Remove Email column from SurveyAccountsProvisioner (#7452)
• [FilterableDataTable] Fix behaviour of grouped fields with multi-select filters (#7453)
• [Instrument] Add support for jsonData instrument in clearInstrument function (#7484)
• [Instrument API] expand saving functionality to include Candidate age calculations and scoring (#7485)
• [User] Replace GROUP_CONCAT with implode to bypass length limitations of group_concat (#7486)

LORIS Release v23.0.3

This bugfix release includes all changes from the 22.0.4 release as well as some added bugfixes for the 23.0.2 release.

For the full list of changes follow this link.

Noteworthy changes:

• [Battery] Add missing instruments to a battery when survey instruments are already populated instead of throwing an error #7163
• [Document_repository] Fix for contents displayed at root #7233
• [Filters] Fix Query Param Filtering Bug #7245
• [Instrument_builder] Fix Date element corruption in LINST files when load/saving #7247
• [Instrument] Fix form freeze for completed instruments #7344

Notes for release:

• If upgrading from 23.0.2 to 23.0.3 make sure to run the SQL patch removing the Email column from the participant_accounts table and the corresponding history entries (see #7248 for more details)
• The bugfix for populating the userId field of instrument tables (#7252) includes a back population script for all userIDs not saved in the instrument tables since this bug appeared. This script will search through the history log to retrospectively populate the userID field. It's important to note that, depending on the size of your database and history table, the script can take over 15 hours to run.

Caveat for projects:
Make sure to run the following scripts in order to remove special characters from links and ensure they are downloadable.

• tools/single_use/Cleanup_Special_Chars_Media.php (see #7386)
• tools/single_use/Cleanup_Special_Chars_Document_Repository.php (see #7428)

LORIS Release v22.0.4

This incorporated v21.0.7 into the v22 release series in order to remove all traces of email addresses from the survey module.

Updating the code will remove it from the frontend, but users must manually source the patch SQL/Archive/21.0/Cleanup/2020-12-18-Remove_survey_emails.sql to remove the data from the backend.

LORIS Release v21.0.7

This release removes all traces of email address from the survey module from the 21.0.x branch. Updating the code will remove it from the frontend, but users must manually source the patch SQL/Archive/21.0/Cleanup/2020-12-18-Remove_survey_emails.sql to remove the data from the backend.

LORIS Release v23.0.2

This bugfix release incorporates the bug fix from v22.0.3 into the v23 branch and also fixes a number of minor issues that were not ready in time for the v23.0.1 release.

Detailed bug fixes:

[User accounts] Fix error message on new user account page (#6803)
[issue_tracker] Update validation to allow NULL Site (#6526)
[candidate_profile] Only show consent summary card if useConsent is enabled (#6807)
[Module Manager] Fix grammar in reload prompt (#6824)
[timepoint_list] Hiding Candidate Info and View Imaging Datasets buttons when missing permission (#6815)
[Statistics / Behavioural] Fix query for project breakdown (#6649)
[electrophysiology_browser] Add Project Permissions check to session page(#6640)
[Statistics/Behavioural] Site permission fix on detailed view(#6861)
[Statistics] fix behavioural tab without any project selection (#6882)
[battery_manager] Allow editing of battery with null CenterID by converting to all CenterIDs (#6858)
[Imaging_browser] Access to view session based on session project instead of candidate project (#6888)

LORIS Release v22.0.3

This bug fix release fixes 2 issues an issue in LORIS v22.0 where data was incorrectly joining every header to get the acquisition date instead of a single acquisition date header, resulting in potentially unusable load times of the imaging browser for large data sets. See PR #6871