Avalon 7.1.1 Release

[joncameron]

Description

We'll need a slightly different process than usual, since we won't be merging develop to staging as is the usual way.

PRs to Exclude

• Make active-storage configurable #4152
• Catch top-most Exception since LoadError can be thrown #4136
• Handle errors when attaching files #4125
• Remove section title in files tab when there are no files #4124
• Supplemental file storage #4085
• Supplemental file add/remove UI #4080

PRs to Include

Dependency Upgrades

• Upgrade JS dependencies in yarn.lock #4166
• Bump websocket-extensions from 0.1.3 to 0.1.5 #4163
• Bump version of websocket-extensions #4161
• [Snyk] Fix for 1 vulnerabilities #4157
• [Snyk] Fix for 1 vulnerabilities #4149
• Update kaminari due to security issue #4148
• Bump kaminari from 1.1.1 to 1.2.1 #4147
• [Snyk] Fix for 5 vulnerabilities #4137
• Upgrade to rails 5.2.4.3 for security patches #4131
• [Snyk] Fix for 1 vulnerabilities #4126
• Upgrade audio_waveform-ruby and get json upgrade with it #4106
• [Snyk] Fix for 1 vulnerabilities #4105
• Upgrade acorn from 6.1.1 to 6.4.1 #4063
• [Snyk] Fix for 1 vulnerabilities #4060
• [Snyk] Fix for 2 vulnerabilities #4059
• Bump acorn from 6.1.1 to 6.4.1 #4047

Other Updates

• Pass quality to #auth_service for probe id #4133
• Simplify and avoid error handling by using safe_constantize #4132
• Add probe service for UV support #4129
• Increase default DB pool setting for prod #4127
• Add webpacker compile to production stage in Dockerfile #4115
• Use standard rdf predicates #4112
• Collection contact information #4091
• Attempt to fetch Derivative.absolute_location in WaveformJob #4088
• Use rails_same_site_cookie to set SameSite on cookies #4086
• Update rails to 5.2.4.2 for actionview XSS fix #4065
• After the derivative object is destroyed queue a job… #4064
• Disable Create Timeline button until derivative loads #4058
• Add production stage to Dockerfile #4053

Fixes

• Fix for breaking autoplay in playlists #4160
• Carry forward selected quality from a section to the next #4159
• Carry forward the set volume from a section to next section #4156
• Skip waveform generation if no audio track #4142
• Zero width #4110
• Fix batch replay #4108
• Rebuild list of current user's virtual groups stored in user_session #4101
• Changed the embeded_code display to trim spaces #4100
• Update _embed_resource.html.erb #4099
• Preserve fullscreen of player when advancing to next section #4075
• Fix local derivative file deletion #4074
• Fix locking_runner always returns exit code 255 #4071

Structural Metadata Editor

• New SME build with support for playing media file with spacebar #4143
• New SME build #4138
• New SME build with react-dnd disabled when inline eiditing is in prog… #4134
• New SME build with fix for flashing warning on load #4119
• New sme build with, peaks.js upgrade for adding precsion option #4102

Process and Git Flow

Done Looks Like

Pre-release check

• Go through the current changelog since 7.1 and double-check changes to the code to make sure we're getting only things that should be in the release

Code Changes

• Update version in code
• Update license headers in files if needed
• Tag dependency repos
• Update gemfile to point to those tags
• Merge staging into master
• Publish release button in Github
• Create tag for v7.1.1 (should already happen when pressing release button)

Application Testing

• Smoke-testing

Documentation

• Update Known Issues
• Update version numbers on Wiki to refer to latest release as 7.1.1

Marketing and Outreach

• Write a draft of release notes on Github (some items currently in a draft)
• Publish release on Github https://github.com/avalonmediasystem/avalon/releases
• Update wiki with release notes
• Publish blog post announcing the release
• Update homepage with blog post for release announcement
• Update homepage with the updated version and documentation links
• Update website with demo box changes
• Put announcement on Twitter
• Put announcement on Facebook
• Send out email to Samvera community mailing list
• Publicize in appropriate Slack channels

[cjcolvar]

Need to review and upgrade dependencies for security issues. PRs created or merged to deal with all ruby dependencies. 3 JS dependencies need to be upgraded:

• Upgrade minimist to version 1.2.3 or later
• Upgrade acorn to version 6.4.1 or later
• Upgrade kind-of to version 6.0.3 or later

[joncameron]

@joncameron to enter the release checklist template in "done looks like"