What shipped

17 PRs · 2 repos · 7 contributors · 6 Jun – 6 Jul

Monday, 6 July 2026

Rrobin-agent
The key_service_sites microservice now applies timeouts to all gRPC calls including page-rendering operations, preventing worker threads from getting stuck waiting for unresponsive backend services.
#1983 — feat: PENG-3675 gRPC deadlines, 16MB limits, and django-q task retries

Rrobin-agent
The training_centre service added timeouts and automatic retries to its gRPC calls so transient service issues don't silently break course completion flows.
#1964 — feat: PENG-3675 add deadlines and native gRPC retries to service clients
RRhadamanthus1
The almanac calendar management tool was restored to the training_centre codebase after it was accidentally deleted during a code cleanup.
#1965 — fix(almanac): PENG-3499 restore almanac wagtail admin

Ssarahcthekey
Configured the key_service_sites container to run as a non-root user for improved security in production environments.
#1981 — feat(key_service_sites): run container as non-root user (PLA-380)

Rrobin-agent
Prevented accidental changes to SCOID identifiers on training pages once registrations exist, which was breaking the ability to sync completion data from ScormCloud.
#1960 — fix: PENG-3637 prevent SCOID changes when registrations or results exist
Llunky84
Modified certificate downloads to reference training results through their unique IDs instead of a separate certificates table for better data consistency.
#1962 — PENG-3540 certificates pass elearning result id

Llunky84
The e-learning certificate API now exposes the record ID so clients can identify which e-learning result each certificate corresponds to.
#1961 — PENG-3540 certificates from record id

Rrobin-agent
Training content marked as 'new' will now automatically stop appearing as new after 2 months, eliminating the need for manual updates and preventing stale content from being labeled as fresh.
#1959 — feat: PENG-3652 auto-expire is_new label after 2 months

Rrobin-agent
Prevented learner course completion status from reverting to incomplete when they re-access a finished ScormCloud course, ensuring consistent data between status and completion timestamps.
#1957 — fix: PENG-3637 prevent status regression on ScormCloud re-access sync
Ssnyk-io-eu[bot]
Updated the PostgreSQL Docker image from version 16.11 to 16.14 to address three security vulnerabilities.
#1955 — [Snyk] Security upgrade postgres from 16.11 to 16.14

Rrobin-agent
Made text and messaging updates to the website for ticket 3635 to improve user-facing copy.
#1978 — 3635 copy tweaks

Ccpotey
Images no longer silently disappear from articles when the Wagtail editor encounters rendering errors, preventing accidental data loss when users save pages after editing.
#1976 — 2fix(rich_text): PENG-3622 Preserve image embed data when editor rende…
RRhadamanthus1
Unused application settings and the context processor module that served no active purpose have been removed as part of cleanup operations.
#1977 — chore(settings): PENG-3499 prune unused settings
RRhadamanthus1
Obsolete OIDC middleware that was designed for the old user-facing Django template system has been removed since the application is now a headless backend.
#1972 — chore(middleware): PENG-3499 remove unused oidc middleware
RRhadamanthus1
The single-access-session middleware and related functionality have been removed because no new tokens of this type have been created in years and stakeholders confirmed it is unused.
#1974 — Peng 3499 remove single access session middleware
RRhadamanthus1
The redirect middleware has been removed because its functionality is now handled by Kubernetes infrastructure-level redirect rules that are already in place.
#1973 — chore(middleware): PENG-3499 remove redirect middleware

Aalex-wilson-the-key
The training centre service now exposes an endpoint for the orca service to retrieve elearning results data, enabling service-to-service communication with proper authentication.
#1950 — chore(certificates-part-5): PENG-3540 elearning data endpoint