Dev

applications/Unity.AutoUI/cypress/selectors/registry.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 2,
   "mode": "report-only",
-  "generatedAt": "2026-10-08T20:47:48.557Z",
+  "generatedAt": "2026-10-16T22:08:25.092Z",
   "summary": {
     "total": 364,
     "matched": 150,
@@ -1789,11 +1789,11 @@
         "applications/Unity.GrantManager/src/Unity.GrantManager.EntityFrameworkCore/Migrations/TenantMigrations/20260902202447_AddEmailAddressDefault.Designer.cs",
         "applications/Unity.GrantManager/src/Unity.GrantManager.EntityFrameworkCore/Migrations/TenantMigrations/20260917183045_AddTemplateTypes.Designer.cs",
         "applications/Unity.GrantManager/src/Unity.GrantManager.EntityFrameworkCore/Migrations/TenantMigrations/20260928201123_LimitEmailTemplateNameLength.Designer.cs",
+        "applications/Unity.GrantManager/src/Unity.GrantManager.EntityFrameworkCore/Migrations/TenantMigrations/20261015221241_AddScheduledNotificationTemplateConstraint.Designer.cs",
         "applications/Unity.GrantManager/src/Unity.GrantManager.EntityFrameworkCore/Migrations/TenantMigrations/GrantTenantDbContextModelSnapshot.cs",
         "applications/Unity.GrantManager/src/Unity.GrantManager.Web/Pages/GrantApplications/Details.cshtml",
         "applications/Unity.GrantManager/src/Unity.GrantManager.Web/Pages/GrantApplications/Details.js",
-        "applications/Unity.GrantManager/src/Unity.GrantManager.Web/Views/Shared/Components/AssessmentResultAttachments/AssessmentResultAttachments.js",
-        "applications/Unity.GrantManager/src/Unity.GrantManager.Web/Views/Shared/Components/AssessmentScoresWidget/Default.cshtml"
+        "applications/Unity.GrantManager/src/Unity.GrantManager.Web/Views/Shared/Components/AssessmentResultAttachments/AssessmentResultAttachments.js"
       ]
     },
     {
@@ -1852,6 +1852,7 @@
         "applications/Unity.GrantManager/src/Unity.GrantManager.EntityFrameworkCore/Migrations/TenantMigrations/20260902202447_AddEmailAddressDefault.Designer.cs",
         "applications/Unity.GrantManager/src/Unity.GrantManager.EntityFrameworkCore/Migrations/TenantMigrations/20260917183045_AddTemplateTypes.Designer.cs",
         "applications/Unity.GrantManager/src/Unity.GrantManager.EntityFrameworkCore/Migrations/TenantMigrations/20260928201123_LimitEmailTemplateNameLength.Designer.cs",
+        "applications/Unity.GrantManager/src/Unity.GrantManager.EntityFrameworkCore/Migrations/TenantMigrations/20261015221241_AddScheduledNotificationTemplateConstraint.Designer.cs",
         "applications/Unity.GrantManager/src/Unity.GrantManager.EntityFrameworkCore/Migrations/TenantMigrations/GrantTenantDbContextModelSnapshot.cs",
         "applications/Unity.GrantManager/src/Unity.GrantManager.Web/Pages/AssigneeSelection/AssigneeSelectionModal.cshtml"
       ]
@@ -3256,11 +3257,11 @@
         "applications/Unity.GrantManager/src/Unity.GrantManager.EntityFrameworkCore/Migrations/TenantMigrations/20260902202447_AddEmailAddressDefault.Designer.cs",
         "applications/Unity.GrantManager/src/Unity.GrantManager.EntityFrameworkCore/Migrations/TenantMigrations/20260917183045_AddTemplateTypes.Designer.cs",
         "applications/Unity.GrantManager/src/Unity.GrantManager.EntityFrameworkCore/Migrations/TenantMigrations/20260928201123_LimitEmailTemplateNameLength.Designer.cs",
+        "applications/Unity.GrantManager/src/Unity.GrantManager.EntityFrameworkCore/Migrations/TenantMigrations/20261015221241_AddScheduledNotificationTemplateConstraint.Designer.cs",
         "applications/Unity.GrantManager/src/Unity.GrantManager.EntityFrameworkCore/Migrations/TenantMigrations/GrantTenantDbContextModelSnapshot.cs",
         "applications/Unity.GrantManager/src/Unity.GrantManager.Web/Pages/ApplicantHistory/ReportsHistoryModalViewModel.cs",
         "applications/Unity.GrantManager/src/Unity.GrantManager.Web/Views/Shared/Components/ApplicantHistory/Default.js",
-        "applications/Unity.GrantManager/src/Unity.GrantManager.Web/Views/Shared/Components/CustomFields/Default.js",
-        "applications/Unity.GrantManager/src/Unity.GrantManager.Web/Views/Shared/Components/PaymentConfiguration/Default.js"
+        "applications/Unity.GrantManager/src/Unity.GrantManager.Web/Views/Shared/Components/CustomFields/Default.js"
       ]
     },
     {
@@ -3539,10 +3540,10 @@
         "applications/Unity.GrantManager/src/Unity.GrantManager.EntityFrameworkCore/Migrations/TenantMigrations/20260902202447_AddEmailAddressDefault.Designer.cs",
         "applications/Unity.GrantManager/src/Unity.GrantManager.EntityFrameworkCore/Migrations/TenantMigrations/20260917183045_AddTemplateTypes.Designer.cs",
         "applications/Unity.GrantManager/src/Unity.GrantManager.EntityFrameworkCore/Migrations/TenantMigrations/20260928201123_LimitEmailTemplateNameLength.Designer.cs",
+        "applications/Unity.GrantManager/src/Unity.GrantManager.EntityFrameworkCore/Migrations/TenantMigrations/20261015221241_AddScheduledNotificationTemplateConstraint.Designer.cs",
         "applications/Unity.GrantManager/src/Unity.GrantManager.EntityFrameworkCore/Migrations/TenantMigrations/GrantTenantDbContextModelSnapshot.cs",
         "applications/Unity.GrantManager/src/Unity.GrantManager.Web/Pages/GrantApplications/Index.js",
-        "applications/Unity.GrantManager/src/Unity.GrantManager.Web/Views/Shared/Components/ApplicantSubmissions/Default.js",
-        "applications/Unity.GrantManager/src/Unity.GrantManager.Web/Views/Shared/Components/AssessmentResults/Default.js"
+        "applications/Unity.GrantManager/src/Unity.GrantManager.Web/Views/Shared/Components/ApplicantSubmissions/Default.js"
       ]
     },
     {
@@ -3872,6 +3873,7 @@
         "applications/Unity.GrantManager/src/Unity.GrantManager.EntityFrameworkCore/Migrations/TenantMigrations/20260902202447_AddEmailAddressDefault.Designer.cs",
         "applications/Unity.GrantManager/src/Unity.GrantManager.EntityFrameworkCore/Migrations/TenantMigrations/20260917183045_AddTemplateTypes.Designer.cs",
         "applications/Unity.GrantManager/src/Unity.GrantManager.EntityFrameworkCore/Migrations/TenantMigrations/20260928201123_LimitEmailTemplateNameLength.Designer.cs",
+        "applications/Unity.GrantManager/src/Unity.GrantManager.EntityFrameworkCore/Migrations/TenantMigrations/20261015221241_AddScheduledNotificationTemplateConstraint.Designer.cs",
         "applications/Unity.GrantManager/src/Unity.GrantManager.EntityFrameworkCore/Migrations/TenantMigrations/GrantTenantDbContextModelSnapshot.cs",
         "applications/Unity.GrantManager/src/Unity.GrantManager.Web/Views/Shared/Components/ApplicantInfo/Default.js"
       ]

applications/Unity.GrantManager/common.props

@@ -9,6 +9,7 @@
   <Target Name="NoWarnOnRazorViewImportedTypeConflicts" BeforeTargets="RazorCoreCompile">
     <PropertyGroup>
       <NoWarn>$(NoWarn);0436</NoWarn>
+      <NoWarn>$(NoWarn);NU1510</NoWarn>
     </PropertyGroup>
   </Target>
 
@@ -24,7 +25,7 @@
     <!-- System.Security.Cryptography.Xml 8.0.2 (pulled in transitively) has several known high
          severity vulnerabilities; pin to the same patched version already used directly by
          Unity.AI.Application so every project importing common.props gets the safe version. -->
-    <PackageReference Include="System.Security.Cryptography.Xml" Version="10.0.10" />
+    <PackageReference Include="System.Security.Cryptography.Xml" Version="10.0.13" />
   </ItemGroup>
 
 </Project>

applications/Unity.GrantManager/global.json

@@ -0,0 +1,7 @@
+{
+  "sdk": {
+    "version": "10.0.303",
+    "rollForward": "latestFeature",
+    "allowPrerelease": false
+  }
+}

applications/Unity.GrantManager/modules/Unity.AI/src/Unity.AI.Application/Unity.AI.Application.csproj

@@ -1,17 +1,17 @@
-<Project Sdk="Microsoft.NET.Sdk">
+<Project Sdk="Microsoft.NET.Sdk">
   <Import Project="..\..\common.props" />
   <PropertyGroup>
     <TargetFramework>net10.0</TargetFramework>
     <Nullable>enable</Nullable>
     <RootNamespace>Unity.AI</RootNamespace>
+    <AcceptNPOIOSMFLicense>true</AcceptNPOIOSMFLicense>
   </PropertyGroup>
   <ItemGroup>
     <PackageReference Include="Microsoft.EntityFrameworkCore.Relational" Version="10.0.10" />
     <PackageReference Include="Azure.AI.OpenAI" Version="2.1.0" />
     <PackageReference Include="Newtonsoft.Json" Version="13.0.4" />
-    <PackageReference Include="NPOI" Version="2.7.5" />
-    <PackageReference Include="SixLabors.ImageSharp" Version="2.1.13" />
-    <PackageReference Include="PdfPig" Version="0.1.15" />
+    <PackageReference Include="NPOI" Version="2.8.1" />
+    <PackageReference Include="PdfPig" Version="0.1.16" />
     <PackageReference Include="Volo.Abp.AspNetCore.Mvc" Version="10.5.0" />
     <PackageReference Include="Volo.Abp.Mapperly" Version="10.5.0" />
     <PackageReference Include="Riok.Mapperly" Version="4.3.1" />

applications/Unity.GrantManager/modules/Unity.Flex/src/Unity.Flex.Web/Pages/Components/DataGrid/DataGridWriteService.cs

@@ -279,7 +279,7 @@ internal async Task<WriteDataRowResponse> UpdateRowAsync(RowInputData rowInputDa
             };
         }
 
-        internal async Task DeleteRowAsync(Guid valueId, uint row, Guid worksheetInstanceId)
+        public async Task DeleteRowAsync(Guid valueId, uint row, Guid worksheetInstanceId)
         {
             var currentValue = await customFieldValueAppService.GetAsync(valueId);
             var dataGridValue = DataGridServiceUtils.DeserializeDataGridValue(currentValue.CurrentValue);

applications/Unity.GrantManager/modules/Unity.Flex/src/Unity.Flex.Web/Views/Shared/Components/CheckboxGroupWidget/Default.cshtml

@@ -24,19 +24,23 @@
                         <input type="@Model.Field?.Type.ConvertInputType()"
                                id="@optionId"
                                name="@optionId"
-                               onchange="@($"notifyFieldChange('{Model.Name}', '{Model.Field?.UiAnchor}', this)")"
+                               data-worksheet-name="@Model.Name"
+                               data-ui-anchor="@Model.Field?.UiAnchor"
+                               onchange="notifyFieldChange(this.dataset.worksheetName, this.dataset.uiAnchor, this)"
                                checked />
                     }
                     else
                     {
                         <input type="@Model.Field?.Type.ConvertInputType()"
                                id="@optionId"
                                name="@optionId"
-                               onchange="@($"notifyFieldChange('{Model.Name}','{Model.Field?.UiAnchor}', this)")" />
+                               data-worksheet-name="@Model.Name"
+                               data-ui-anchor="@Model.Field?.UiAnchor"
+                               onchange="notifyFieldChange(this.dataset.worksheetName, this.dataset.uiAnchor, this)" />
                     }
                     <label for="@optionId">@($"{option.Label}")</label>
                 </div>
             }
         }
     </fieldset>
-}
+}

applications/Unity.GrantManager/modules/Unity.Flex/src/Unity.Flex.Web/Views/Shared/Components/CheckboxWidget/Default.cshtml

@@ -17,16 +17,20 @@
             <input type="@Model.Field?.Type.ConvertInputType()"
                    id="@fieldId"
                    name="@fieldId"
-                   onchange="@($"notifyFieldChange('{Model.Name}', '{Model.Field?.UiAnchor}', this)")"
+                   data-worksheet-name="@Model.Name"
+                   data-ui-anchor="@Model.Field?.UiAnchor"
+                   onchange="notifyFieldChange(this.dataset.worksheetName, this.dataset.uiAnchor, this)"
                    checked />
         }
         else
         {
             <input type="@Model.Field?.Type.ConvertInputType()"
                    id="@fieldId"
                    name="@fieldId"
-                   onchange="@($"notifyFieldChange('{Model.Name}', '{Model.Field?.UiAnchor}', this)")" />
+                   data-worksheet-name="@Model.Name"
+                   data-ui-anchor="@Model.Field?.UiAnchor"
+                   onchange="notifyFieldChange(this.dataset.worksheetName, this.dataset.uiAnchor, this)" />
         }
         <label for="@fieldId">@($"{Model.Field?.Label}")</label>
     </div>
-}
+}

applications/Unity.GrantManager/modules/Unity.Flex/src/Unity.Flex.Web/Views/Shared/Components/CurrencyWidget/Default.cshtml

@@ -22,7 +22,9 @@
                placeholder="@Model.Field.Definition?.ConvertDefinition(Model.Field.Type)?.Placeholder"
                id="@fieldId"
                name="@fieldId"
-               onchange="@($"notifyFieldChange('{Model.Name}', '{Model.Field?.UiAnchor}', this)")"/>
+               data-worksheet-name="@Model.Name"
+               data-ui-anchor="@Model.Field?.UiAnchor"
+               onchange="notifyFieldChange(this.dataset.worksheetName, this.dataset.uiAnchor, this)"/>
         <span id="@fieldId-error" class="text-danger field-validation-error"></span>
     </div>
-}
+}

applications/Unity.GrantManager/modules/Unity.Flex/src/Unity.Flex.Web/Views/Shared/Components/DataGridWidget/DataGridWidget.cs

@@ -117,7 +117,7 @@ private IViewComponentResult GenerateGridView(WorksheetFieldViewModel fieldModel
                 Rows = [.. dataRows],
                 AllowEdit = true,
                 SummaryOption = ConvertSummaryOption(dataGridDefinition),
-                Summary = GenerateSummary([.. dataColumns], [.. dataRows], presentationSetttings),
+                Summary = GenerateSummary([.. dataColumns], dataGridRowsValue?.Rows ?? [], presentationSetttings),
                 TableOptions = GenerateAvailableTableOptions(!dataGridDefinition.Dynamic),
                 WorksheetId = worksheetId,
                 WorksheetInstanceId = worksheetInstanceId,
@@ -367,7 +367,7 @@ private static List<string> GenerateDynamicPlaceholderColumn()
         }
 
         private static DataGridViewSummary GenerateSummary(DataGridColumn[]? dataColumns,
-            DataGridViewModelRow[] rows,
+            List<DataGridRow> rows,
             PresentationSettings presentationSettings)
         {
             var summary = new DataGridViewSummary();
@@ -386,10 +386,11 @@ private static DataGridViewSummary GenerateSummary(DataGridColumn[]? dataColumns
             return summary;
         }
 
-        private static string SumCells(string? key, DataGridViewModelRow[] rows)
+        // Sum the raw stored values - presentation-formatted values (e.g. "CA$ 567.00") do not parse back to decimals
+        private static string SumCells(string? key, List<DataGridRow> rows)
         {
             decimal sum = 0;
-            var cells = rows.Select(row => row.Cells.Find(x => x.Key == key)).Where(cell => cell != null);
+            var cells = rows.Select(row => row.Cells.Find(x => x.Key == key)).Where(cell => cell?.Value != null);
             foreach (var cell in cells)
             {
                 var preparse = cell!.Value.Replace("$", "").Replace(",", "");

applications/Unity.GrantManager/modules/Unity.Flex/src/Unity.Flex.Web/Views/Shared/Components/DateWidget/Default.cshtml

@@ -19,6 +19,8 @@
                label="@Model.Field.Label"
                id="@fieldId"
                name="@fieldId"
-               onchange="@($"notifyFieldChange('{Model.Name}', '{Model.Field?.UiAnchor}', this)")" />
+               data-worksheet-name="@Model.Name"
+               data-ui-anchor="@Model.Field?.UiAnchor"
+               onchange="notifyFieldChange(this.dataset.worksheetName, this.dataset.uiAnchor, this)" />
     </div>
-}
+}

applications/Unity.GrantManager/modules/Unity.Flex/src/Unity.Flex.Web/Views/Shared/Components/DefaultFieldWidget/Default.cshtml

@@ -22,5 +22,7 @@
            placeholder="@fieldDef?.Placeholder"
            id="@fieldId"
            name="@fieldId"
-           onchange="@($"notifyFieldChange('{Model.Name}', '{Model.Field.UiAnchor}', this)")" />
+           data-worksheet-name="@Model.Name"
+           data-ui-anchor="@Model.Field.UiAnchor"
+           onchange="notifyFieldChange(this.dataset.worksheetName, this.dataset.uiAnchor, this)" />
 }

applications/Unity.GrantManager/modules/Unity.Flex/src/Unity.Flex.Web/Views/Shared/Components/QuestionSelectListWidget/QuestionSelectListViewModel.cs

@@ -7,7 +7,7 @@ public class QuestionSelectListViewModel : RequiredFieldViewModel
         public Guid QuestionId { get; set; }
         public bool IsDisabled { get; set; }
         public string Answer { get; set; } = string.Empty;
-        public string Definition { get; set; } = "{}";
+        public new string Definition { get; set; } = "{}";
         public bool IsHumanConfirmed { get; set; } = true;
         public string? AICitation { get; set; }
         public int? AIConfidence { get; set; }

applications/Unity.GrantManager/modules/Unity.Flex/src/Unity.Flex.Web/Views/Shared/Components/RadioWidget/Default.cshtml

@@ -28,7 +28,9 @@
                                id="@optionId"
                                name="@fieldBaseName"
                                value="@($"{option.Value}")"
-                               onchange="@($"notifyFieldChange('{Model.Name}', '{Model.Field?.UiAnchor}', this)")"
+                               data-worksheet-name="@Model.Name"
+                               data-ui-anchor="@Model.Field?.UiAnchor"
+                               onchange="notifyFieldChange(this.dataset.worksheetName, this.dataset.uiAnchor, this)"
                                checked />
                     }
                     else
@@ -37,11 +39,13 @@
                                id="@optionId"
                                name="@fieldBaseName"
                                value="@($"{option.Value}")"
-                               onchange="@($"notifyFieldChange('{Model.Name}', '{Model.Field?.UiAnchor}', this)")" />
+                               data-worksheet-name="@Model.Name"
+                               data-ui-anchor="@Model.Field?.UiAnchor"
+                               onchange="notifyFieldChange(this.dataset.worksheetName, this.dataset.uiAnchor, this)" />
                     }
                     <label for="@optionId">@($"{option.Label}")</label>
                 }
             </div>
         }
     </fieldset>
-}
+}

applications/Unity.GrantManager/modules/Unity.Flex/src/Unity.Flex.Web/Views/Shared/Components/Scoresheet/Default.cshtml

@@ -62,7 +62,12 @@
                                     <i class="fa-solid fa-upload"></i> <span>@L["Scoresheet:Configuration:PublishScoresheetButtonText"].Value</span>
                                 </button>
                             }
-                            <button id="export_scoresheet_btn" onclick="exportScoresheet('@scoresheet.Id','@scoresheet.Name','@scoresheet.Title');" class="btn btn-light" type="button">
+                            <button id="export_scoresheet_btn"
+                                    data-scoresheet-id="@scoresheet.Id"
+                                    data-scoresheet-name="@scoresheet.Name"
+                                    data-scoresheet-title="@scoresheet.Title"
+                                    onclick="exportScoresheet(this.dataset.scoresheetId, this.dataset.scoresheetName, this.dataset.scoresheetTitle);"
+                                    class="btn btn-light" type="button">
                                 <i class="fa-solid fa-file-export"></i> <span>@L["Scoresheet:Configuration:ExportScoresheetButtonText"].Value</span>
                             </button>
                             <button data-scoresheet-id="@scoresheet.Id" data-is-archived="false" class="btn btn-light archive-scoresheet-btn" type="button">

applications/Unity.GrantManager/modules/Unity.Flex/src/Unity.Flex.Web/Views/Shared/Components/Scoresheet/Scoresheet.js

@@ -283,7 +283,9 @@ $(function () {
         let optionsHTML = `<option data-numeric-value="0" value="">Please choose...</option>`;
         optionsHTML += options.map(option => {
             const truncatedValue = option.value.length > 100 ? option.value.substring(0, 100) + " ..." : option.value;
-            return `<option data-numeric-value="${option.numeric_value}" value="${option.value}" title="${option.value}">${truncatedValue}</option>`;
+            // Encode option text and attributes before the preview is parsed as HTML.
+            const escapedValue = escapeHtml(option.value);
+            return `<option data-numeric-value="${escapeHtml(option.numeric_value)}" value="${escapedValue}" title="${escapedValue}">${escapeHtml(truncatedValue)}</option>`;
         }).join('');
         let req = item.dataset.required === 'True' ? "required" : null;
 

applications/Unity.GrantManager/modules/Unity.Flex/src/Unity.Flex.Web/Views/Shared/Components/SelectListWidget/Default.cshtml

@@ -15,12 +15,14 @@
     <select class="@Model.Field.Type.ApplyCssClass()"
             id="@fieldId"
             name="@fieldId"
-            onchange="@($"notifyFieldChange('{Model.Name}', '{Model.Field?.UiAnchor}', this)")">
+            data-worksheet-name="@Model.Name"
+            data-ui-anchor="@Model.Field?.UiAnchor"
+            onchange="notifyFieldChange(this.dataset.worksheetName, this.dataset.uiAnchor, this)">
 
         @foreach (var item in ((SelectListDefinition?)Model.Field?.Definition?.ConvertDefinition(Model.Field.Type))?.Options ?? [])
         {
             <option selected="@Model.Field?.CurrentValue?.CompareSelectListKey(@item.Key)" value="@item.Key">@item.Value</option>
         }
 
     </select>
-}
+}