Conversation
Update version.json
…image automatically
Forbid the compute worker from pulling competition images
Small packages upgrade
Paginate the competition list endpoint (LargePagination), and update
the Organizing/Participating tabs in competition_list.tag to
consume the new {count, next, previous, results} shape with
next/previous buttons (hidden on a single page). Fix the navbar
competition search to read response.results instead of assuming a
bare array.
Fix participating_in filter incorrectly including competitions the
user organizes: creators/collaborators are auto-added as approved
participants (Competition.save()), so they leaked into the
Participating tab. Applied the same fix to the public competitions
endpoint's participating_in filter and updated its tests. Added
coverage for the list endpoint's pagination and participating_in
behavior. Minor renames for clarity (change_page, tab labels).
Add pagination to GET /api/competitions and fix participating_in leak
…limit Raise RAM limit for Site Worker in docker-compose.yml
…t is reached. Fixed user lookup to not show deleted users in the collaborators dropdown
Queue creation error improved
Remove the is_bot user flag and allow_robot_submissions competition setting, along with the permission bypasses they granted (unlimited submissions, auto-approval as participant, and unrestricted re-run/secret-check bypass on any submission). Also removes the related UI, docs, and tests.
Remove robot submissions and bot user feature
Fix Django migrations
Privacy link updated
…titions Propagate organization when creating chiled submissions during multi-task split, phase migration, and re-run so that leaderboard entries for organization submissions on multi-task competitions show the organization name instead of falling back to the submitter's username.
Fix organization name not showing on leaderboard for multi-task competitions
API Throttling
Anonymous and non-owner requests could previously view submission details when hide_output was off. Now only the owner or an admin can access them. Adds tests covering the fix.
Submission `get_detail` API: Restrict to submission owner or admin
Contributor
|
Do we have a timeline for v1.32? There are several fixes we are interested in. |
Collaborator
Author
We are hoping to merge it next week, most likely on Wednesday. |
Contributor
Great thank you, no the ones we want are merged. |
Contributor
* switch to quay.io for mc and minio images * Update documentation --------- Co-authored-by: Obada Haddad <obada.haddad@lisn.fr> Co-authored-by: didayolo <adrien.pavao@gmail.com>
* Deny anonymous access to /api/submissions/ list and retrieve Anonymous GETs returned full submission records (filenames, status details, fact sheet answers) for any finished leaderboard submission, ignoring is_public. Now returns an empty queryset instead; public leaderboard data is already served by get_leaderboard in PhaseViewSet * Add missing raise * Fix test and remove debug prints --------- Co-authored-by: didayolo <adrien.pavao@gmail.com>
Member
Contributor
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
5 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Release Notes
Upgrade instructions
Django migration:
New Features
Compute worker
Instance
Improvements
Bug Fixes
Security
get_detailAPI: Restrict to submission owner or admin #2525