2025.11.19-1

What's Changed

• [Issue #6316] Record activity history audit events for applications by @chouinar in #7034
• [Issue #6809]: Add invitation instructions email sending to user invitation endpoint by @joshtonava in #6996
• moving the user/workspace page to dashboard (including text reference… by @ErinPattisonNava in #7028
• [Unticketed] Automated Update to Database ERD Diagrams and OpenAPI Docs by @github-actions[bot] in #7047
• [Issue #6901] Add 3 simple forms by @chouinar in #7039
• [Issue #6898] Handle restructuring objects for nested fields by @mikehgrantsgov in #7035
• [Issue #6949] setup foreign staging tables legacy users[1/2] by @babebe in #7020
• HOTFIX: remove 20251001 banner by @andycochran in #7049
• update code owners by @chay-REIsys in #7042
• [Issue #6537] pre load roles when checking access by @babebe in #6977
• [ISSUE #6922]: Manage users feature flag by @myduong-navapbc in #7037
• [Unticketed] Automated Update to Database ERD Diagrams and OpenAPI Docs by @github-actions[bot] in #7055
• [unticketed]: added missing pinpoint variable by @myduong-navapbc in #7057
• [Issue #6792]: wire up and move invitation form by @myduong-navapbc in #7054
• [Issue #6951] Create table for capturing ignored legacy org user by @babebe in #7051
• [Issue #6900] Add conditional transformations by @mikehgrantsgov in #7053
• [Issue #7011] Add Supplementary NEH Cover Sheet Form by @chouinar in #7056
• [Issue #7061] Create an ECS task that can generate opportunities for each form by @chouinar in #7062
• [Unticketed] Automated Update to Database ERD Diagrams and OpenAPI Docs by @github-actions[bot] in #7066
• [Issue #6902] Add GG Lobbying Form by @chouinar in #7064
• Update Analytics by @renovate[bot] in #7012
• [Issue #5931] hide save button button only by @glenblosser-nava in #7005
• [Issue #6775] Option to turn off token expiration / auto log out in local env by @glenblosser-nava in #6983
• [Issue #7076]: Upgrade terraform version to 1.13.5 by @prasnava in #7077
• [Issue #6953] Hide legacy users endpoint by @babebe in #7068
• [Unticketed] Automated Update to Database ERD Diagrams and OpenAPI Docs by @github-actions[bot] in #7110
• [Issue #6007] Improve link hover and active colors by @andycochran in #7065
• [Issue #6835] Add array_decomposition transform by @mikehgrantsgov in #7070
• [Issue #7071] Filter out select application forms from XML generation by @mikehgrantsgov in #7085
• [Issue #6814] Create ecs task for setting up cert user by @jakobpederson in #7021
• manual patch of js-yaml vulnerability while we wait for subdependency… by @doug-s-nava in #7117
• [Unticketed] Add some docs about the first time Oracle FDW setup in an env by @chouinar in #7122
• [Unticketed] Automated Update to Database ERD Diagrams and OpenAPI Docs by @github-actions[bot] in #7144
• [unticketed] add tf for manage users feature flag by @doug-s-nava in #7146

New Contributors

• @chay-REIsys made their first contribution in #7042
• @glenblosser-nava made their first contribution in #7005

Full Changelog: 2025.11.12-1...2025.11.19-1

2025.11.12-1

What's Changed

• [Issue #6115] remove is_organization_owner flag by @babebe in #6944
• [Issue #6796]: Fix merge conflicts in erd and openapi doc gen by @prasnava in #6975
• [Issue #6317] Add an endpoint for listing application audit events by @chouinar in #6973
• [Issue #6834] Modify application submission logic to put XML file in the Zip by @mikehgrantsgov in #6954
• [Issue #6808] Add tcertificates to TABLES_TO_LOAD by @jakobpederson in #6896
• [Issue #6892] Upgrade PostgreSQL version for Compose by @mdragon in #6894
• [Unticketed] Automated Update to Database ERD Diagrams and OpenAPI Docs by @github-actions[bot] in #6910
• [Issue #6813] Add lookup user_type by @jakobpederson in #6933
• [Issue #6982] Improve validation in CommonGrants services by @widal001 in #6987
• [Unticketed] Change application list to sort by created_at by default by @chouinar in #7002
• Update Api by @renovate[bot] in #7013
• [Unticketed] Automated Update to Database ERD Diagrams and OpenAPI Docs by @github-actions[bot] in #7010
• [Issue #6961]: Disable auto dev deploy on main merges by @prasnava in #6994
• Update CI/CD by @renovate[bot] in #7014
• feat: the Applications page with data by @ErinPattisonNava in #6962
• [Issue #6899] Add static values in XML generated fields/attributes by @mikehgrantsgov in #7018
• [Unticketed] Remove network calls to fetch XSDs at runtime by @mikehgrantsgov in #7019
• [Issue #7032]: Fix API Anchore Vulnerabilities by @prasnava in #7033

New Contributors

• @github-actions[bot] made their first contribution in #6910

Full Changelog: 2025.11.05-1...2025.11.12-1

2025.11.05-1

What's Changed

• [Issue #6869]: Hiding the submit button should only happen once the competition is closed by @myduong-navapbc in #6871
• fix: add checks for value type, radio specific by @myduong-navapbc in #6844
• [Issue #6763] wire up authorization gate and organization gating POC by @doug-s-nava in #6879
• [Issue #6648] accept invite widget by @doug-s-nava in #6863
• [Issue #6677] Create an endpoint for adding an organization to an application by @mikehgrantsgov in #6881
• [Issue #6685] Better reporting on and conservation of disk space during CI/CD runner by @mdragon in #6773
• [Issue #6495] Switch json schemas to be fully resolved before usage by @chouinar in #6846
• [Unticketed] Update CODEOWNERS for various directories by @mdragon in #6916
• [Issue #6908] Only fail the weekly vuln reporting job if something fails, not if it reports vulnerabilities by @mdragon in #6915
• [Issue #6496] Modify forms to use our shared schemas by @chouinar in #6859
• [Issue #6678] Modify the start application endpoint to allow an individual to start an application when only orgs are allowed by @mikehgrantsgov in #6911
• [Issue #6812] Create legacy_certificate table by @jakobpederson in #6918
• [Issue #6830]: Update ci-openapi.yml workflow to run in a separate container by @prasnava in #6897
• feat: adding the skeleton of the Applications page by @ErinPattisonNava in #6907
• [Issue #6903] Add CD511 and form building docs by @chouinar in #6929
• [Issue #6779] Setup static competition/app in seed script by @chouinar in #6914
• [Issue #6654] Remove political review code by @joshtonava in #6937
• [Issue #6836] Make app attachments be soft-deleted by @chouinar in #6932
• [Issue #6124] user list application endpoint add pagination by @babebe in #6891

Full Changelog: 2025.10.30-1...2025.11.05-1

2025.10.30-1

What's Changed

• [Issue #6526] organization invite tables by @babebe in #6794
• [Issue #6742] Enable CG routes in prod by @DavidDudas-Intuitial in #6777
• [Unticketed] Upgrade package for vulnerability scan by @chouinar in #6825
• [Issue #6639] create form for inviting user to organization by @doug-s-nava in #6793
• [Issue #6517] proper organization list and link section for workspace page by @doug-s-nava in #6819
• Dockle ignore Python "settings.py" files wrongly flagged as configuration by @pcraig3 in #6718
• [Issue #6453] Make forms endpoints use new API key auth by @chouinar in #6820
• [Issue #6686] create can access endpoint by @babebe in #6783
• [Issue #6817]: Remove graphviz deps from the api docker image by @prasnava in #6818
• [Issue #6606] Create Organization Invite Endpoint by @joshtonava in #6828
• [Issue #6315] Make table for Activity History by @mikehgrantsgov in #6842
• [Issue #6621] Get User Invitations Endpoint by @joshtonava in #6831
• [Issue #6728] build manage users page by @myduong-navapbc in #6829
• [Issue #6635] Add Lead Time Metric to Sprint Metrics Dashboard by @DavidDudas-Intuitial in #6824
• Update Api by @renovate[bot] in #6852
• [Issue #6620] List Organization Invitations Endpoint by @joshtonava in #6841
• [Issue #6662] Define schemas for GetSubmissionListExpanded by @jakobpederson in #6823
• [Issue #6810] Create an agency role for legacy certs by @mikehgrantsgov in #6853
• Fix Frontend E2E test failures by @prasnava in #6847
• [Issue #6784] Add new X-API-KEY to seed script by @btabaska in #6787
• [Unticketed] Add additional API linting rules by @chouinar in #6849
• Update Analytics by @renovate[bot] in #6851
• [Issue #6331] Add auto summation to sf424 and sf424a by @chouinar in #6451
• [Issue #6806] Create tcertificate legacy staging tables by @jakobpederson in #6858
• [Issue #6675] Create validation logic to verify an application that requires an org has an org by @mikehgrantsgov in #6865
• setup documentation updates by @ErinPattisonNava in #6840
• [Issue #6785] Add new X-API-KEY to frontend by @btabaska in #6786
• [Issue 6866]: Fix API Vulnerabilities by @prasnava in #6867
• Patch api/Dockerfile to fix step functions failure. by @prasnava in #6873
• [Issue #6649] user invitation response endpoint by @babebe in #6848
• [Issue #6720] consistent newsletter pages by @andycochran in #6845
• [Issue 6877]: Upgrade pip version in Analytics container image to 25.3 by @prasnava in #6878
• [Issue 6882]: Fix s3 permissions issue for the files cloudfront endpoint by @prasnava in #6883
• [Issue #6780] Add a local-only endpoint that returns user info/keys by @chouinar in #6874
• [Issue #6806] Update tcertificate tb name to tcertificates by @jakobpederson in #6884

New Contributors

• @ErinPattisonNava made their first contribution in #6840

Full Changelog: 2025.10.22-1...2025.10.30-1

2025.10.22-1

What's Changed

• fix(form): sf424 department and division info was missing by @myduong-navapbc in #6652
• [Issue #2973]: Update the API docker image to use a custom image by @prasnava in #6703
• [Issue #6747] Add submitted_at and submitted_by to Application table by @mikehgrantsgov in #6747
• [Issue #6538] organization roster table by @doug-s-nava in #6632
• [Issue #6689] Add USE_SIMPLER flag to env variables by @jakobpederson in #6729
• [unticketed] make room for long names and emails in org info by @doug-s-nava in #6750
• [Issue #6656] Set submitted_at and submitted_by during the Submit logic by @mikehgrantsgov in #6752
• [Issue #6121] Update application endpoints access by @babebe in #6715
• [Issue #6396] Support XML Attachment transformations by @mikehgrantsgov in #6712
• Update Analytics by @renovate[bot] in #6722
• [unticketed] fix errors loading organization detail page by @doug-s-nava in #6760
• [Issue #6588] Remove not-started application form status by @chouinar in #6745
• [unticketed]: add null check for Information Card by @myduong-navapbc in #6753
• [Issue #6544]: Missing Field in SF424 by @myduong-navapbc in #6759
• [Issue #6746]: Optimize API docker build to use a cached base image by @prasnava in #6756
• [Issue #6120] get application endpoints access check by @babebe in #6714
• [Issue #6674] authorization gate refactors by @doug-s-nava in #6765
• aws security hub fixes by @sean-navapbc in #6751
• [Issue #6488] Update PUT and GET endpoint to include new sgg_version / is_deprecated / form_type columns by @mikehgrantsgov in #6781
• [Issue #6478] Build Footer XML by @mikehgrantsgov in #6772
• [Issue #6666] Fetch data for simpler GetApplicationZipRequest by @jakobpederson in #6774
• [Issue #6122] update submit application endpoint with user access check by @babebe in #6732
• [Issue #6498] Setup shared schema and related utilities by @chouinar in #6727
• [Issue #6594] Setup applications for users/orgs in our local seed script by @chouinar in #6754
• [Issue #6122] access submit application by @babebe in #6803
• [Issue #6593] Add opportunity information to application list schema by @mikehgrantsgov in #6811
• [Issue #6718] Update admin assignment by @babebe in #6761

New Contributors

• @sean-navapbc made their first contribution in #6751

Full Changelog: 2025.10.15-1...2025.10.22-1

2025.10.15-1

What's Changed

• [Issue #6490] Modify update-form script to not need form instruction ID by @chouinar in #6564
• Bug/opportunity emails query by @babebe in #6690
• [Issue #6579] Add link to instructions in the Conditionally Required form table description by @TranquilMage in #6604
• [Issue #5124] Properly handle application page if an application is past date by @TranquilMage in #6602
• [Issue #6603] Add ebiz_poc_email, ebiz_poc_first_name, ebiz_poc_last_name by @mikehgrantsgov in #6702
• [Issue #6314] Setup tests for validating JSON conversion with XSD files by @mikehgrantsgov in #6436
• [Issue #5565] Add issue template for reoccuring sam.gov key rotation by @chouinar in #6691
• [Issue #6705] Nix beta banner by @andycochran in #6706
• [Issue #6385] Fix newsletter hero image (standardize heroes) by @andycochran in #6701
• [Issue #6502]: adds column count 5 to section b of budget form (sf424a) by @myduong-navapbc in #6582
• Revert "[Issue #6186] keep form save in view (#6608)" by @doug-s-nava in #6713
• [Issue #6558] Set up deliverable dependency mapping by @widal001 in #6707
• [Issue #6119] Update Start application endpoint to check for privileges by @babebe in #6645
• Add API root proxying for Gateway by @Nava-JoshLong in #6704
• [Issue #6716] Re-add ReturnToGrantsNotification by @andycochran in #6724
• [Issue #6665] Define schemas for GetApplicationZip by @jakobpederson in #6721
• Update Api by @renovate[bot] in #6723
• feat(frontend): sf424a adds row number to rows 1-4 by @myduong-navapbc in #6634
• [Issue #6525] create organization page by @doug-s-nava in #6590
• [unticketed] send down form id on non required form unselected error by @doug-s-nava in #6730
• [Issue #6145]: updates the sections in sf-lll to match documents provided (1/3 parts) by @myduong-navapbc in #6584

Full Changelog: 2025.10.08-1...2025.10.15-1

2025.10.08-1

What's Changed

• [Issue #6536] Create a task that automatically makes sam.gov extracts from users in lower envs by @chouinar in #6550
• Bugfix/update search test by @babebe in #6570
• [Issue #6429] Update link on developer page to wiki by @btabaska in #6572
• [Issue #6325] Get user privilege role endpoint by @babebe in #6520
• [Issue #6563] Update co-planning sync script by @widal001 in #6569
• [Issue #6553] Add CommonGrants routes to API (from branch not fork) by @DavidDudas-Intuitial in #6542
• [Issue #6360] Create process for testing soap endpoints by @jakobpederson in #6535
• [Issue #6580] Add explicit dependency pyyaml by @DavidDudas-Intuitial in #6581
• [Issue #6494] Add a sgg_version and is_deprecated column to the form table and a connect to a new lk_form_type table by @mikehgrantsgov in #6583
• [Issue #6507] hide submit application button after application has been submitted by @TranquilMage in #6575
• [Issue #6207] Remove ability to change application name after successful submission by @TranquilMage in #6578
• [Issue #5873] Update scheduled jobs cpu and mem override options by @prasnava in #6571
• [Issue #6477] Build Header XML by @mikehgrantsgov in #6573
• [Issue #6494] Update migration for form_type_id foreign key [2/2] by @mikehgrantsgov in #6586
• [Issue #6587] Return organization_id for applications listed by @babebe in #6598
• [Issue #6609] Handle newer AWS CLI format if it's present by @mdragon in #6610
• [Issue #6186] keep form save in view by @doug-s-nava in #6608
• [Issue #6397] Update schemas / scripts include json_to_xml_schema by @mikehgrantsgov in #6611
• [Issue #5872] Add container overrides config to scheduled jobs. by @prasnava in #6628
• [Issue #6340] Update user roles by @babebe in #6591
• [ Issue #6506]: SF-424A print styles by @myduong-navapbc in #6576
• [ISSUE #6145]: updates the sections in sf-424 to match documents provided (2/3 parts) by @myduong-navapbc in #6589
• [Issue #6630] list organizations users first and last name by @babebe in #6646
• [Issue #6585] Stream soap proxy response data instead of chunking by @jakobpederson in #6592
• [Issue #6544] Update print page with print widgets by @acouch in #6574
• [Issue #6357] basic authorization gate by @doug-s-nava in #6554
• [ISSUE #6341] Organization endpoints - Remove user from organization by @joshtonava in #6651
• [ISSUE #6117] Modify our local seed script to create users in various scenarios by @joshtonava in #6650

New Contributors

• @TranquilMage made their first contribution in #6575

Full Changelog: 2025.10.01-1...2025.10.08-1

2025.10.01-1

What's Changed

• [Issue #6514] Call Prod SAM in Training by @mdragon in #6515
• [ISSUE #6338] Organization endpoints - Get organization details by @joshtonava in #6505
• [Issue 5415] Restrict outbound traffic on security groups by @prasnava in #6504
• [Unticketed] Give our local test users API keys by default by @chouinar in #6540
• [Issue #6492] Create a script to list the status of forms in an env by @chouinar in #6523
• [Issue #6395] Add XML conversion column to form table by @chouinar in #6460
• Frontend API Gateway key and secret by @Nava-JoshLong in #6465
• [Issue #6516] Add retries to the sam.gov library by @chouinar in #6541
• [Issue #5874] Update cpu and mem config for ecs task definition by @prasnava in #6545
• [Issue #6356] Add legacy tracking number to application submission table by @chouinar in #6534
• [Issue 5874] update variable names for cpu and mem for each service module. by @prasnava in #6548
• [Issue #6313] Implement configurable XML namespaces by @mikehgrantsgov in #6435
• [Issue #6183] add competition instructions link to conditional forms table by @doug-s-nava in #6398
• [ISSUE #6339] Organization endpoints - List organization members by @joshtonava in #6549
• [Issue #6522] wire up account page by @doug-s-nava in #6533
• Fix Frontend env naming for API Gateway by @Nava-JoshLong in #6555
• [Issue #6354] user admin nav by @doug-s-nava in #6543
• [Issue #6520] List available organization roles by @babebe in #6556
• switch applications on by default by @doug-s-nava in #6561
• HOTFIX: 20251001 banner by @andycochran in #6562
• [Unticketed] Fix relative date issue by @chouinar in #6568

Full Changelog: 2025.09.24-2...2025.10.01-1

2025.09.24-2

What's Changed

• [Issue #6511] Don't always set the form to be included in the submission by @mdragon in #6512

Full Changelog: 2025.09.24-1...2025.09.24-2

2025.09.24-1

What's Changed

• fix mailto typo on start application modal by @doug-s-nava in #6424
• [Issue #6415]: Budget form styles & errors not properly rendering by @myduong-navapbc in #6420
• [Issue #6270] Deliverable Linter by @DavidDudas-Intuitial in #6417
• [Issue #6200] add userAdminOff flag by @doug-s-nava in #6419
• [Issue #5502] allow form left nav to scroll by @doug-s-nava in #6401
• [Issue #5780] - API Gateway Client & Local Mock by @btabaska in #6108
• [Issue #6427] Add default api gateway usage plan to secrets by @btabaska in #6428
• [Issue #6224] Static Site Content Update for Co-planning by @btabaska in #6421
• [Issue #6404] Fix prepopulation when value is null by @chouinar in #6425
• [Issue #6155] Add core XML generation service foundation by @mikehgrantsgov in #6329
• [Issue #6352] Get operation name without parsing whole xml by @jakobpederson in #6370
• Give API ECS role API Gateway permissions by @Nava-JoshLong in #6416
• [Issue #6430] Lowercase emails for sam.gov and login by @chouinar in #6432
• [Issue #5511] Upgrade Postgres from v15.10 to v17.5 by @prasnava in #6423
• [Issue #6116] Access endpoint utility by @babebe in #6426
• [Issue #6440] correctly mark failed validation for missing activity title when no activity line items are saved by @doug-s-nava in #6439
• Bug/suppressed email add logs by @babebe in #6442
• [Issue #6444] fix form data format by @doug-s-nava in #6450
• [Issue #6272] Update deliverable linter to post comments to GitHub by @DavidDudas-Intuitial in #6446
• [Unticketed] Fix SF424 title fields to allow required setup properly by @chouinar in #6455
• {Issue #6343] User profile table by @babebe in #6447
• [Unticketed] Remove tier from required fields in SFLLL by @chouinar in #6459
• [Issue #6445] Warn to save after an attachment is deleted by @mdragon in #6456
• [Issue #6113] Modify logic where we create organization users to make them the organization owner role by @joshtonava in #6407
• [No ticket] Fix inherit parent metadata linter by @widal001 in #6467
• [Unticketed] Resolve conflict with DB migration by @chouinar in #6470
• [Issue #6344] update user service schema by @babebe in #6461
• [Issue #6114] Modify logic where we create application users to make them the application owner role by @joshtonava in #6410
• Update Analytics by @renovate[bot] in #6387
• [Issue #6445] Fix unsaved attachment warnings by @mdragon in #6484
• [Issue #6345] Update user profile endpoint by @babebe in #6479
• [Issue #6371] Adjust agency transform job to warn on fields that are not accounted for and continue processing by @joshtonava in #6486
• [Issue #6359] Skip sending to grants.gov if simpler formatted id by @jakobpederson in #6434

Full Changelog: 2025.09.17-1...2025.09.24-1