1.1.0

Release Notes

For: uc-cdis/gen3-statics

Notes since tag: 1.0.0

Notes to tag/commit: 1.1.0

Generated: 2023-01-19

Improvements

• Add CSP directives in response (#27)
• Removing Veracode scanning pipeline (#14)
• Removing Veracode scanning pipeline (#13)
• Use Quay image for node 12 to fix "too many requests" from DockerHub (#10)
• Update dependencies to support IAM-linked service accounts. (#5)
• update dependencies to fix vulnerabilities (#4)
• cache-control max-age 300, so client does not cache Secure/ data for more
  than 5 minutes (#4)

Dependency Updates

• Adpoted helmet (#27)
• Adpoted cors (#27)

Deployment Changes

• This change will add some CSP and CORS related header to the response that
  returned from the dashboard services. They should not be interruptive, but
  each team is encouraged to double check their webpages hosted by dashboard
  to ensure they still works (#27)
• Because of these CSP directives being added, starting from this version, if
  anyone what to load remote scripts in their dashboard-hosted webpages, they
  will need to update the CSP directives in this dashboard service if the
  current directives doesn't fit, or to ship the script files with the page
  (#27)

New Features

• Added .secinclude to include all relevant files needed for veracode scan.
  (#3)
• Added .secexclude to explicitly remove any unneeded files. (#3)
• Added Jenkinsfile.security for the veracode security organization in
  Jenkins to scan this repo regularly. (#3)