What shipped

JJoshYG-TheKey

The frontend now displays AI-generated answers with styled source links to knowledge documents, enabling users to see where KeyGPT found its information.

Rrobin-agent

The key_service_sites microservice now applies timeouts to all gRPC calls including page-rendering operations, preventing worker threads from getting stuck waiting for unresponsive backend services.

Rrobin-agent

Keystone's gRPC calls now have timeouts to prevent workers from hanging indefinitely on slow services, retries for transient failures, and the assignment cleanup moved off the blocking request path.

Ccpotey

Restored a missing academic year filter that wasn't appearing when viewing school organization pages in group workspaces.

Rrobin-agent

Enabled administrators to assign coming-soon training items in advance and fixed the My Training notification badge to exclude those items that aren't yet available.

TTheTomWard

Updated user-facing text on training records pages to provide clearer information to end users.

Ssarahcthekey

Configured the key_service_sites container to run as a non-root user for improved security in production environments.

Rrobin-agent

Automatically deleted orphaned training assignments when a user account is permanently removed from the system to prevent data inconsistencies.

Llunky84

The frontend now includes a record ID in API requests for certificate retrieval, enabling the system to fetch certificates based on specific record identifiers.

Llunky84

User authentication now bypasses caching during password resets so that login immediately validates against the new password hash instead of stale cached credentials.

Aalex-wilson-the-key

Removed a temporary restriction on training assignment creation that is no longer needed.

Llunky84

Fixed certificate downloads to match what's actually displayed in the table by reusing existing download logic instead of re-querying the server with different filters, and cleaned up orphaned code.

Llunky84

Added a restriction to prevent training assignments from being created beyond the current academic year.

Llunky84

Unified certificate downloads across multiple apps by routing them through the orchestration service and consolidated duplicated code into shared utilities.

Ccpotey

Fixed CSS cascade ordering issues in Next.js by adding !important declarations to ensure styles apply correctly.

Ccpotey

Restored the ability for logged-out users to return to their original training link after login by preserving and passing through the return URL across the authentication flow.

Ccpotey

Removed a stale redirect URL from the MYKEY application record that was causing login flows to hit a deprecated endpoint instead of returning users to their intended destination.

Rrobin-agent

The expired assignment feature is now enabled in production, allowing users to see assignments marked as expired at the end of the academic year instead of overdue.

Llunky84

Staff members with in-progress courses now appear in the course result table filter under their current academic year instead of being hidden when their completion date is missing.

Rrobin-agent

Admins assigning training courses now receive warnings when selecting courses being replaced, the extend assignment feature has been removed from the UI, and expiry messaging has been updated to reflect the new academic year-end expiration model.

Llunky84

An empty commit was created to resolve a technical pipeline issue unrelated to functionality.

Aalex-wilson-the-key

The training app was refactored to use a new orca service for handling certificates instead of the previous implementation.

Ccpotey

A timing fix prevents training data from being incorrectly recorded under the wrong organization when workspace switches fail.

Rrobin-agent

Fixed security vulnerabilities in lodash-es and fast-xml-parser by adding dependency overrides and upgrading packages to safer versions.

Ssarahcthekey

Updated the protobufjs library to patch 7 high-severity security vulnerabilities that were affecting multiple parts of the application through its dependencies.

Rrobin-agent

Made text and messaging updates to the website for ticket 3635 to improve user-facing copy.

Rrobin-agent

Additional vulnerable transitive dependencies in company-backend have been patched through pnpm overrides to address remaining security vulnerabilities like prototype pollution and HTTP response splitting issues.

Rrobin-agent

Seventy-one vulnerable transitive dependencies introduced by Strapi have been mitigated by pinning safe patched versions through pnpm overrides, addressing critical security issues while maintaining API compatibility.

OOwenTourlamain

The dashboard now groups overdue and expired assignments under a single 'Overdue' label while keeping separate visual indicators in tables, and fixes progress bars to show the combined proportion of overdue work in red and expired work in dark red.

Rrobin-agent

Socket.IO WebSocket connections from the browser to the assistant tunnel on rentabot are now proxied through the frontend domain to avoid being blocked by Cloudflare Access restrictions.

Ccpotey

Images no longer silently disappear from articles when the Wagtail editor encounters rendering errors, preventing accidental data loss when users save pages after editing.

RRhadamanthus1

Unused application settings and the context processor module that served no active purpose have been removed as part of cleanup operations.

RRhadamanthus1

Obsolete OIDC middleware that was designed for the old user-facing Django template system has been removed since the application is now a headless backend.

RRhadamanthus1

The single-access-session middleware and related functionality have been removed because no new tokens of this type have been created in years and stakeholders confirmed it is unused.

RRhadamanthus1

The redirect middleware has been removed because its functionality is now handled by Kubernetes infrastructure-level redirect rules that are already in place.