Release Notes

For: uc-cdis/fence

Notes since tag: 10.1.0

Notes to tag/commit: e1a568d

Generated: 2024-08-12

New Features

• Adds support for deleting files from non-AWS S3-compatible endpoints (e.g.
  MinIO, Wasabi, Ceph). (#1171)

Bug Fixes

• Create new migration to remove foreign key constraint if it exists on
  google_service_account table (#1172)
• Fixes the "The AWS Access Key Id you provided does not exist" error when
  attempting to delete a file from a non-AWS bucket. (#1171)

Improvements

• Allows for Gen3 administrators to have greater flexibility in choosing
  their preferred data storage, while keeping the AWS S3 endpoint as the
  "default" storage option. (#1171)
• /upload endpoint accepts optional guid in request body. If the guid
  exists in indexd, it does not create a new record, else it creates a blank
  record with the provided guid. (#1147)
• /multipart/init endpoint accepts optional guid in request body. If the
  guid exists in indexd, it does not create a new record, else it creates a
  blank record with the provided guid. (#1147)

Deployment Changes

• Requires database migration (#1172)

Release Notes

For: uc-cdis/fence
Notes since tag: 10.0.0
Notes to tag/commit: 58f8164
Generated: 2024-08-01

New Features

• Prometheus metrics support for logins and presigned URLs (#1156)

Bug Fixes

• Fix so local csvs file are processed in consistent order, regardless of os
  (#1165)
• Updates user_info overwrite logic to preserve data when processing CSVs
  without some attributes (#1165)

Improvements

• Reorganized docs to make finding what you need a bit easier (#1164)

Dependency Updates

• Bumps idna from 2.10 to 3.7. (#1150)

What's Changed

Rewrite Fence project to work with Authlib 1.2.1

Breaking Changes

New Alembic Database Migration added and is required.
Update Authlib Version by Major Version to post-1.0 release: 1.2.1

New Contributors

• @tianj7 made their first contribution in #1114

Release Notes

For: uc-cdis/fence

Notes since tag: 9.3.5

Notes to tag/commit: 9.3.6

Generated: 2024-06-17

Improvements

• Add debug log when the authorization header cannot be parsed (#1151)
• Print stack trace when usersync cannot downloaded files from an ftp/sftp
  server (#1151)
• Removes travis CI, replace with GH Actions (#1116)

Dependency Updates

• many dep updates, including security update for werkzeug (#1146)

Release Notes

For: uc-cdis/fence

Notes since tag: 9.3.4

Notes to tag/commit: 9.3.5

Generated: 2024-04-23

New Features

• Added upload bucket selection support for multipart upload (#1112)
• Add support for non-aws s3 buckets for multipart upload (#1112)

Bug Fixes

• Retries failures when downloading authorization files through SFTP. (#1143)

Improvements

• Update base user.yaml in documentation to pass validation (#1140)

Dependency Updates

• cryptography to 42.0.5 (#1141)
• paramiko, for security reasons (#1138)

Release Notes

For: uc-cdis/fence

Notes since tag: 9.3.3

Notes to tag/commit: 410fae7

Generated: 2024-02-12

Bug Fixes

• Another CI fix (#1129)
• Fixed a bug causing the metadata ingestion CI test to fail (#1128)

Improvements

• improve signed URL data metrics log by adding client_id from token (#1130)
• dependency cleanup. storageclient code migrated from multiple libraries
  (causing circular dependency issues) to Fence, the only place where the
  code was used (#1132)

Dependency Updates

• cryptography to >=42.0.2 (#1137)
• gen3users to ^1.0.2 (#1137)
• pyyaml to ^6.0.1 (#1137)
• ensure use of tagged deps (#1135)
• update urllib3 (#1132)

Release Notes

For: uc-cdis/fence

Notes since tag: 9.3.2

Notes to tag/commit: 9.3.3

Generated: 2023-12-07

Bug Fixes

• Fixes issue with usersync and MFA policy management in cases where a user
  has not been persisted by Fence. (#1125)

Improvements

• Add a new log that includes data information per signed URL generation
  which includes the size, bucket used, authz, acl, and requesting user
  (#1124)

Release Notes

For: uc-cdis/fence

Notes since tag: 9.3.1

Notes to tag/commit: 9.3.2

Generated: 2023-11-17

Bug Fixes

• Fixes issue where users not present in arborist would have blank resources
  and authz fields when they should have values for open access data within
  the commons. (#1122)

Release Notes

For: uc-cdis/fence

Notes since tag: 9.3.0

Notes to tag/commit: 9.3.1

Generated: 2023-10-05

Improvements

• Downloads through GA4GH DRS are recorded in audit service (#1117)

Release Notes

For: uc-cdis/fence

Notes since tag: 9.2.0

Notes to tag/commit: 9.3.0

Generated: 2023-08-25

New Features

• Enables support for identifying when users have authenticated with MFA.
  (#1106)

Dependency Updates

• temporarily override authlib install with a forked version with a security
  patch (#1110)

Deployment Changes

• Deployment changes to enable this feature for commons are described here
  https://github.com/uc-cdis/fence/blob/e36f6574ade17bb8c9c0c9df8801f9a59de423b1/docs/fence_multifactor_authentication_guide.md
  (#1106)