v7.12.0

What's Changed

• Documentation by @adamloup-enquizit in #2963
• [FIX] CVE-2025-41249 and CVE-2025-41248 by @adamloup-enquizit in #2964
• [FIX] "Build and deploy" workflows trigger on dependency change by @adamloup-enquizit in #2965
• Fixes for Modern Search and Patient Summary by @mdavis-enquizit in #2938
• Update patient-profile-summary.feature by @ssathiah in #2966
• removes @adamloup-enquizit as code owner by @adamloup-enquizit in #2967
• Update branch name by @mpeels in #2968
• build: use NEDSSDev for containerization by @mcmcgrath13 in #2975
• chore: Update CODEOWNERS by @mcmcgrath13 in #2983
• APP-145: deploy to skylight ecr by @hawley-skylight in #2973
• APP-178 - Configure Dependabot to open PRs for dependency version upgrades, not just vulnerabilities by @JordanGuinn in #2982
• Bump actions/checkout from 2 to 6 by @dependabot[bot] in #2991
• test: temp fix - give our test patient a birthday! by @mcmcgrath13 in #2995
• Bump @testing-library/react from 16.2.0 to 16.3.2 in /apps/modernization-ui by @dependabot[bot] in #2993
• Bump lodash from 4.17.21 to 4.17.23 in /apps/modernization-ui by @dependabot[bot] in #2981
• APP-178, Follow-Up - Configure Dependabot to open PRs for dependency version upgrades, not just vulnerabilities by @JordanGuinn in #2996
• Bump js-yaml from 4.1.0 to 4.1.1 in /testing/regression by @dependabot[bot] in #2969
• Bump node-forge from 1.3.1 to 1.3.2 in /apps/modernization-ui by @dependabot[bot] in #2971
• Ensure Elasticsearch indices are created before starting nifi by @timoballard in #3001
• Bump actions/setup-java from 4 to 5 by @dependabot[bot] in #2989
• Bump js-yaml from 3.14.1 to 3.14.2 in /apps/modernization-ui by @dependabot[bot] in #2970
• Bump qs and @cypress/request in /testing/regression by @dependabot[bot] in #2980
• Bump confluentinc/cp-zookeeper from 8ac3e0e to 7610a50 in /cdc-sandbox/kafka by @dependabot[bot] in #2986
• Bump nginx from 1.23.2-alpine to 1.29.4-alpine in /cdc-sandbox/common-asset-server by @dependabot[bot] in #2990
• Bump posthog-js from 1.261.7 to 1.337.0 in /apps/modernization-ui by @dependabot[bot] in #3002
• Bump confluentinc/cp-schema-registry from 3a2196e to ba3353d in /cdc-sandbox/kafka by @dependabot[bot] in #2987
• Bump jsonpath from 1.1.1 to 1.2.0 in /apps/modernization-ui by @dependabot[bot] in #3005
• Bump lodash from 4.17.21 to 4.17.23 in /testing/regression by @dependabot[bot] in #2984
• Bump webpack from 5.101.3 to 5.105.0 in /apps/modernization-ui by @dependabot[bot] in #3006
• Bump sass from 1.92.0 to 1.97.3 in /apps/modernization-ui by @dependabot[bot] in #3010
• APP-226 - Initial Report Execution Service Scaffolding by @JordanGuinn in #3004
• APP-228 - Set up report execution service within Docker Compose by @JordanGuinn in #3007
• Bump jsonpath from 1.2.0 to 1.2.1 in /apps/modernization-ui by @dependabot[bot] in #3013
• Bump qs and express in /apps/modernization-ui by @dependabot[bot] in #3016
• Update NBS6 sandbox container to use Windows Server 2025 LTSC. by @rin-skylight in #3015
• Bump qs from 6.14.1 to 6.14.2 in /testing/regression by @dependabot[bot] in #3014
• [APP-310] build: incrementally enforce formatting via spotless by @mcmcgrath13 in #3020
• [APP-254] feat: add report execution feature flag by @mcmcgrath13 in #3018
• Bump ajv from 6.12.6 to 6.14.0 in /apps/modernization-ui by @dependabot[bot] in #3023
• Bump graphql from 16.11.0 to 16.13.0 in /apps/modernization-ui by @dependabot[bot] in #3025
• Bump Windows Server container version back to 2022, since 2025 is preview only. by @rin-skylight in #3027
• Bump minimatch from 3.1.2 to 3.1.3 in /apps/modernization-ui by @dependabot[bot] in #3028
• fix: ratchet formatting only works when .git exists by @mcmcgrath13 in #3024
• Update windows container build workflow to accommodate manual invocation with customizable version string. by @rin-skylight in #3030
• [APP-222] feat: add report library migrations by @mcmcgrath13 in #3021
• Bump react-router from 7.8.1 to 7.13.1 in /apps/modernization-ui by @dependabot[bot] in #3026
• Bump glob from 10.4.5 to 10.5.0 in /testing/regression by @dependabot[bot] in #3032
• [APP-259] ci: get e2e test running by @mcmcgrath13 in #3029
• Bump minimatch in /testing/regression by @dependabot[bot] in #3034
• Bump minimatch from 3.1.3 to 3.1.5 in /apps/modernization-ui by @dependabot[bot] in #3036
• build: Add more python checks/opinions by @mcmcgrath13 in #3038
• [APP-334] feat: stubbing python report calling by @mcmcgrath13 in #3035
• build: enable dependabot for uv/python by @mcmcgrath13 in #3041
• [APP-201] Turn on sonar scan and point to DB image in GHCR by @brick-green in #3022
• test: try reducing all 5s waits to 2s by @mcmcgrath13 in #3048
• [APP-201] Removed unused env vars and fix typo by @brick-green in #3047
• Bump actions/upload-artifact from 4 to 7 by @dependabot[bot] in #3045
• [APP-337] feat: implement library invocation by @mcmcgrath13 in #3037
• ci: submit java depedencies by @mcmcgrath13 in #3052
• Bump actions/setup-python from 5 to 6 by @dependabot[bot] in #3054
• Bump rollup from 2.79.2 to 2.80.0 in /apps/modernization-ui by @dependabot[bot] in #3033
• Bump spring-security from 6.5.5 to 6.5.7 by @dependabot[bot] in #3056
• Bump com.graphql-java:graphql-java from 24.2 to 25.0 by @dependabot[bot] in #3057
• [APP-357] build: move ui to vite by @mcmcgrath13 in #3046
• build: Update mssql-jdbc version by @mcmcgrath13 in #3058
• Bump cypress-io/github-action from 6 to 7 by @dependabot[bot] in #3055
• [APP-223] Entities and tests for Report Configuration tables by @brick-green in #3050
• Bump dompurify from 3.3.1 to 3.3.2 in /apps/modernization-ui by @dependabot[bot] in #3051
• Bump jsdom from 26.1.0 to 28.1.0 in /apps/modernization-ui by @dependabot[bot] in #3065
• build: bump version of sprint cloud gateway server by @mcmcgrath13 in #3061
• Bump immutable, @ardatan/relay-compiler and @graphql-codegen/typescript-react-apollo in /apps/modernization-ui by @dependabot[bot] in #3059
• Bump astral-sh/setup-uv from 5 to 7 by @dependabot[bot] in #3063
• [APP-350] feat: nbs_custom library by @mcmcgrath13 in #3076
• Update LogMonitor to version 2.1.3. by @rin-skylight in #3060
• style: format libs/ by @mcmcgrath13 in #3073
• style: format nbs-gateway by @mcmcgrath13 in #3071
• style: run and enforce formatting in modernization-ui by @mcmcgrath13 in #3069
• style: format question-bank by @mcmcgrath13 in #3072
• style: format modernization-api by @mcmcgrath13 in #3070
• build: ignore formatting in blame, remove ratchet by @mcmcgrath13 in #3078
• build: update jackson version by @mcmcgrath13 in #3080
• build: fix up report execution container for test running by @mcmcgrath13 in #3075
• feat: break out description into header, subheader, description by @mcmcgrath13 in #3082
• feat: spike - mounting custom libraries by @mcmcgrath13 in #3074
• ci: be smarter about when we run some workflows by @mcmcgrath13 in #3068
• build(deps): bump pyjwt from 2.11.0 to 2.12.0 in /apps/report-execution by @dependabot[bot] in #3084
• build(deps): bump undici from 7.22.0 to 7.24.1 in /apps/modernization-ui by @dependabot[bot] in #3083
• build(deps): bump actions/setup-node from 3 to 6 by @dependabot[bot] in #3085
• build(deps-dev): bump vitest from 3.2.4 to 4.1.0 in /apps/modernization-ui by @dependabot[bot] in #3088
• Bump actions/cache from 4 to 5 by @dependabot[bot] in #3064
• [APP-168] build: upgrade elasticsearch by @mcmcgrath13 in #2977
• build(deps-dev): bump flatted from 3.3.3 to 3.4.2 in /testing/regression by @dependabot[bot] in #3093
• build: have gateway use jackson bundle by @mcmcgrath13 in #3095
• build: further bump elastic search by @mcmcgrath13 in #3094
• fix: update microservice names by @emyl3 in #3097
• chore: comment out update helm chart jobs by @emyl3 in #3099
• build(deps-dev): bump pyrefly from 0.55.0 to 0.57.1 in /apps/report-execution by @dependabot[bot] in #3101
• [APP-353] feat: convert nbs sr 5 by @mcmcgrath13 in #3079
• [APP-256, APP-276, APP-364] feat: Add endpoints to get report configurations and execute report by @emyl3 in #3090
• [APP-412] feat: report run ui modernization (basically empty) page by @mcmcgrath13 in #3096
• build(deps-dev): bump flatted from 3.4.1 to 3.4.2 in /apps/modernization-ui by @dependabot[bot] in #3098
• feat: don't redirect if the api call asked for json by @mcmcgrath13 in #3103
• Kc/organization tests by @krista-skylight in #3062
• build(deps): bump picomatch in /apps/modernization-ui by @dependabot[bot] in #3111
• test: skip the slow + flaky edit question test suite by @mcmcgrath13 in #3106
• Bump cucumber from 7.27.2 to 7.34.3 by @dependabot[bot] in #3066
• build(deps): bump requests from 2.32.5 to 2.33.0 in /apps/report-execution by @dependabot[bot] in #3110
• build(deps): bump yaml in /apps/modernization-ui by @dependabot[bot] in #3112
• [APP-414] feat: add run/export buttons to page by @mcmcgrath13 in #3113
• [APP-413] feat: conditional routing to report run ui by @mcmcgrath13 in #3100
• build: configure asset dir to static to match prior behavior by @mcmcgrath13 in #3118

New Contributors

• @ssathiah made their first contribution in #2966
• @hawley-skylight made their first contribution in #2973
• @JordanGuinn made their first contribution in #2982
• @timoballard made their first contribution in #3001
• @rin-skylight made their first contribution in #3015
• @brick-green made their first contribution in #3022
• @emyl3 made their first contribution in #3097
• @krista-skylight made their first contribution in #3062

Full Changelog: v7.11.1...v7.12.0