v2.48.1

Removed

• It is no longer possible to upgrade directly from CVAT releases prior to v2.0.0 (#9930)

Fixed

• UI crush on failed GET /api/server/annotation/formats request (#9927)

v2.48.0

Added

• [CLI] CVAT_ACCESS_TOKEN environment variable can now be used for authentication with an API token (#9563)

• [SDK] Client.login() and make_client() can now be called with an API token (#9563)

• [SDK] make_client() can now be called with a server URL that contains a port component (#9563)

• [Server API] Support for API access tokens (#9680)

• [Server] A configuration option to set maximum job limit per task (#9888)

Fixed

• Tracks does not leak to other jobs on task export (#9905)

• Incorrect cloud storage value in tasks within a project after transferring between organizations (#9912)

• Inefficient memory usage when counting number of objects in tracks when updating job annotations or analytics report computing (#9903)

v2.47.0

Added

• Made disk usage health check threshold configurable and updated documentation (#9870)

Changed

• FFmpeg updated to 8.0 (#9552)

• [SDK] Enabled retrying on some server error statuses by default (#9880)

Fixed

• Improved performance of task creation from cloud without manifest (#9827)

v2.46.1

Security

• Bump Redis version to 7.2.11 to address CVE-2025-49844 (#9876)

v2.46.0

Added

• Support for related images in 2d and 3d tasks bound to cloud storages (#9757)
• Support for 3d tasks with non-archived files bound to cloud storages (#9757)
• [Dataset manifest tool] now can handle 3d datasets in all 4 supported file layouts (#9757)

Changed

• Enabled validation of the frame width and height fields in manifests (now required both for 2d and 3d dataset manifests) (#9757)

• Dataset manifests now can include the original_name meta field with the server file name (#9757)

• Tasks can now be created without specifying the labels in advance (#9822)

• [SDK] Removed the tuspy dependency (#9824)

• Bump helm chart version, using images from our public repo now (#9832)

• The CVAT_ALLOW_STATIC_CACHE server configuration parameter will no longer affect the existing tasks. It will only affect new tasks, as stated in the description. Existing tasks will use chunks as configured in the task. (#9831)

Deprecated

• Excessive filtering for media files containing "related_images" in the path during task creation. Only the actual related images wrt. the input media layout will be filtered out in the future. (#9757)

Removed

• Removed non-functional API URL signing support (#9867)

Fixed

• Related image detection for 2d and 3d media in all 5 supported layouts (#9757)

• Improved documentation about supported task file layouts with related images (#9757)

• Improved error messages for invalid media in task creation (#9757)

• Re-enables helm chart compatibility with K8s pre-release versions (#9841)

• Model card clipping on windows with small height (#9852)

• UI error Cannot read properties of undefined (reading 'points') occurring in various scenarios (#9855)

• Fixed incorrect class names in some user messages (#9861)

• Updating organization description does not work on the organization page (#9863)

• Bulk delete for cloud storages was deleting only one instance (#9862)

• Fixed backend failing to start when analytics are disabled (#9845)

• A possible error when trying to merge tag annotations via consensus (#9865)

• Worked around an issue that may cause an error message to be replaced with "No module named 'pkg_resources'" (#9869)

v2.45.0

Added

• Basic user profile page that allows to change personal info, change password (#9789)

• [Helm] Set fsGroup for the Kvrocks pod to GID of the user the process runs as (#9823)

Fixed

• Fixed spacing in task creation status messages (#9812)

• Unaccepted organization invitations could not be deleted (#9819)

• [SDK] Fixed the torchvision_instance_segmentation AA function returning invalid polygons in cases when the underlying model detects a very small object (#9820)

• Reduced RAM usage during task export (#9782)

v2.44.3

Fixed

• User may create a skeleton with invalid structure in configurator, leads to UI crash (#9784)

• Crash on job export if the job contains tags or is not the first job in the task (#9790)

v2.44.2

Fixed

• User may create a skeleton with invalid structure in configurator, leads to UI crash (#9784)

• Crash on job export if the job contains tags or is not the first job in the task (#9790)

v2.44.1

Fixed

• Attribute/label input fields are not disabled when the object is locked (#9783)

v2.44.0

Added

• Introduced bulk actions to perform operations on multiple selected resources at once

  • Multi-select resources using click with Ctrl, Shift or using Select all button at the top bar
  • Supported resources: Tasks, Jobs, Projects, Requests, Organization members, Webhooks, Cloud Storages
  • Supported operations: Export, Backup, Delete, Download, Change: Assignee, State, Stage, Role (#9582)

• [SDK] Auto-annotation functions are now able to output tags (#9671)

• Now it is possible to move projects and tasks between organizations (#9528)

• Improved validation errors for invalid json filter queries (#9703)

• [SDK, CLI] Support for exporting with server-generated filename (#9732)

• Organization transfer now supported as a bulk action (#9727)

• Ability to replace cloud storage for tasks. (#9535)

• Lightweight backup option in Export backup dialog (excludes media for cloud-storage tasks). (#9535)

Changed

• Updated Yarn version from 1.22.22 to 4.9.2 (#9688)

• [SDK] simplified sending of custom requests with ApiClient, added documentation and improved related APIs. Documented using foreign libraries for sending requests. (#9730)

• [CLI] task backup and task export-dataset now download files with the server-generated filenames by default (#9732)

• [CLI] task backup and task export-dataset now always export files locally, regardless of the default export location on the server (#9732)

• The cvat/server Docker image is now configured with a numeric UID rather than a username (#9743)

• The frontend container no longer runs as root (#9746)

• [Helm] The Clickhouse, PostgreSQL and Redis containers now use the images from the Bitnami Legacy repository by default (#9754)

• [Compose, Helm] The Vector container now runs as a non-root user (#9755)

• [Helm] The Kvrocks container now has overridden UID/GID, making it compatible with the runAsNonRoot security context setting

• Made the error message when a particular image cannot be saved to a compressed chunk more useful (#9724)

• When registering a user, the server will now reject overly long email, first name and last name fields, instead of truncating them (#9767)

Removed

• Removed deprecated seed parameter in job creation in favor of random_seed (#9744)

Fixed

• Invalid GT job frame numbers in backups of video tasks with custom start/stop frame or frame step (#9695)

• Server error in GT job creation if the random_per_job frame selection method was used with the seed parameter. (#9744)

• [Helm] A useless /models directory is no longer created in the main data volume (#9773)