v0.6.0

Release Notes

• Removed H2DB support due to lack of features and bug remediation, and low adoption. Replaced with SQLite in-memory mode for any ephemeral use-cases. Contact Yet team if you were using H2 and this upgrade will cause a production issue as we can suggest migration strategies. (#297)
• Added normalized Zulu timestamps and stored time to xapi_statement table in all DBMS’ for use in analytics/BI suites. Includes automatic migration/upgrade process for existing DBs. (#298)
• Migrated other existing timestamp fields to be normalized with Zulu statement timestamp. (#300)
• Addressed CVE-2023-32697, a remote code execution vulnerability on SQLite. (#301)

v0.5.7

What's Changed

• update jetty to clear CVE-2023-26048 by @milt in #296

Full Changelog: v0.5.6...v0.5.7

v0.5.6

What's Changed

• CVE-2022-45688 add suppression for false positive on jackson by @milt in #287
• SQL-177 Test against all supported versions of PostgreSQL by @milt in #288
• Add H2 CVE suppression by @kelvinqian00 in #290
• SQL-179 Use rds-db-init for db init function in CF template by @milt in #289
• SQL-182 Set NoEcho on DefaultAdminPass to hide it by @milt in #292
• SQL-181 RDS template updates by @milt in #291
• SQL-183 GitHub Dependency Graph by @milt in #293
• SQL-186 Prevent deletion of sole admin account by @milt in #294
• SQL-187 Feature: Update Local Admin Password by @milt in #295

Full Changelog: v0.5.5...v0.5.6

v0.5.5

What's Changed

• SQL-176 add AS to postgresql timeline query so it doesn't error on 12+ by @milt in #286

Full Changelog: v0.5.4...v0.5.5

v0.5.4

What's Changed

• SQL-172 Admin LRS Monitor Dashboard by @milt in #282

Full Changelog: v0.5.3...v0.5.4

v0.5.3

What's Changed

• CVE-2023-24998 commons-fileupload vuln by @milt in #285

Full Changelog: v0.5.2...v0.5.3

v0.5.2

What's Changed

• SQL-148 Apache Superset Demo w/Keycloak by @milt in #231
• SQL-164 Auth0 OIDC Setup Guide by @milt in #271
• correct superset README link by @milt in #273
• SQL-165 Add CORS for CF template by @milt in #274
• Use new reusable workflow for linting by @kelvinqian00 in #275
• SQL-166 add Cloudwatch Metrics + Logs to template by @milt in #277
• SQL-167 Automate deployment of DBfn on release by LRS version by @milt in #279
• update cmft templates with stackrefs by @deathtenk in #276
• copyright updates 2023 by @cliffcaseyyet in #281
• SQL-168 implement state scope by @milt in #280

New Contributors

• @deathtenk made their first contribution in #276

Full Changelog: v0.5.1...v0.5.2

v0.5.1

What's Changed

• CORS startup docs update by @cliffcaseyyet in #267
• SQL-163 localhost-friendly CORS defaults by @milt in #268

Full Changelog: v0.5.0...v0.5.1

v0.5.0

What's Changed

• Added stricter CORS support, and configuration options for CORS.

NOTE: It is possible that this release could break the Admin UI for an existing deployment if LRSQL_HTTP_HOST is not set properly, because CORS will be enforced where it was not before. In order to maintain the same CORS behavior as prior versions (permissive) set LRSQL_ALLOW_ALL_ORIGINS to true (it now defaults to false). For other CORS options see the documentation for webserver configuration variables, specifically LRSQL_ALLOW_ALL_ORIGINS and LRSQL_ALLOWED_ORIGINS .

Full Changelog: v0.4.2...v0.5.0

v0.4.2

What's Changed

• SQL-161 add unix socket support by @milt in #239 - Thanks to @florianrusso for the request and help testing!

Full Changelog: v0.4.1...v0.4.2