Skip to content

Releases: ctrliq/ascender

25.3.6

10 Apr 16:00
4c28813

Choose a tag to compare

What's Changed

** Please take note that we utilize the new ascender-operator for this install, please ensure you update the installer to the latest git pull **

Notable Items

  • Fix missing exception catch in create_partition by @Klaas- in #291
  • Swap to using Inter fonts in #295
  • Resolve highlighted Job Output being lost when scrolling in #296
  • Resolve issue where highlighting Job Output text can cause the event popup in #298
  • Resolve issue where Elapsed Timer doesn't start on Launch in #299
  • Migrate from axios to native Fetch in #287
  • Clean up some tests, resolve some deprecation warnings in #290

Upstream Patches

  • Upstream 16366 - avoid delete in loop in inventory import in #281
  • Upstream 16340 - NameError in wsrelay when JSON decode fails with DEB… in #282
  • Upstream 16344 - Do not ignore errors on activity stream connection in #283
  • Upstream 16346 - Delete unused contains method in #284
  • Upstream 16013 - Remove deprecated custom virtual environment feature in #256

Security Fixes

These CVEs were against the underlying packages we depend on, not directly on Ascender. For several of these, we did not use the affected code at all. They were resolved nevertheless as they will still be reported on any vulnerability scan on the container in your environment.

Full Changelog: 25.3.5...25.3.6

25.3.5

11 Mar 18:22
9615236

Choose a tag to compare

What's Changed

** Please take note that we utilize the new ascender-operator for this install, please ensure you update the installer to the latest git pull **

Notable Items

  • Add python social Azure Tenant based auth by @Klaas- in #238
  • Add github_app credential adapted from awx-plugins by @Klaas- in #239
  • Make githubapp private key storable in other credential sources by @Klaas- in #240
  • Fix datetime error when downloading the Instance Bundle by @mcowser in #264

Upstream Patches

  • Upstream 15338 - Remove archaic monkey patches in #246
  • Upstream 15964 - Fix duplicate metrics in AWX subsystem_metrics in #252
  • Upstream 16074 - Validate max_length for scm_branch in #243
  • Upstream 16104 - Fix Grafana notification bug in #254
  • Upstream 16119 - Make project and private data directories in #251
  • Upstream 16120 - Gracefully handle hostname change in metrics code in #250
  • Upstream 16173 - add force flag to refspec in #249
  • Upstream 16179 - Sanitize SSH key whitespace to prevent validation errors in #245
  • Upstream 16230 - remove artifacts from list endpoint in #248
  • Upstream 16257 - Harden log message output containing user input in #244
  • Upstream 16261 - improve Reliability Rating in #247
  • Upstream 16289 - Do not add optional survey fields with empty strings in #242

Security Fixes

These CVEs were against the underlying packages we depend on, not directly on Ascender. For several of these, we did not use the affected code at all. They were resolved nevertheless as they will still be reported on any vulnerability scan on the container in your environment.

New Contributors

Full Changelog: 25.3.4...25.3.5

25.3.4

12 Feb 19:40
91ca320

Choose a tag to compare

What's Changed

** Please take note that we utilize a new operator for this install, please ensure you update the installer to the latest git pull **

  • Fix decrecation warning in project syncs in #230

Security Fixes

These CVEs were against the underlying packages we depend on, not directly on Ascender. For several of these, we did not use the affected code at all. They were resolved nevertheless as they will still be reported on any vulnerability scan on the container in your environment.

Full Changelog: 25.3.3...25.3.4

25.3.3

02 Feb 19:22
d05fcee

Choose a tag to compare

What's Changed

** Please take note that we utilize a new operator for this install, please ensure you update the installer to the latest git pull **

  • Add contributor docs for docker in #210
  • Resolve issue with intermittent access to Patternfly assets in #211
  • Fix translation of Launch Title in #213 #214
  • Add the pull policy to the Execution Environment Display in #220
  • Migrate from coreapi to drf_spectacular in #226
  • Migrate to Python 3.12 in #225 derived from Upstream #16208 #16215
  • Remove requirement for Galaxy Credentials to belong to an Org in #224 derived from Upstream #16075 #16077

Security Fixes

These CVEs were against the underlying packages we depend on, not directly on Ascender. For several of these, we did not use the affected code at all. They were resolved nevertheless as they will still be reported on any vulnerability scan on the container in your environment.

Full Changelog: 25.3.2...25.3.3

25.3.2

18 Dec 19:38
35bc30c

Choose a tag to compare

What's Changed

** Please take note that we utilize a new operator for this install, please ensure you update the installer to the latest git pull **

  • Migrate from Redis 7 to Valkey 9 in #200
  • Migrate back to rockylinux:9-minimal now that it is being updated regularly in #199
  • Resolve issue with mass deleting templates and workflows in #202
  • Fix dummy data generator in #201
  • Hide the SSH Password text that is displayed on every playbook run in #203
  • Move prompt steps inline to resolve issues with lingui marco in #204
  • Fix __pycache__ directory removal in clean target - Upstream ansible/awx#16196 in #197
  • Cache dashboard query - Upstream ansible/awx#16165 in #198

Security Fixes

These CVEs were against the underlying packages we depend on, not directly on Ascender. For several of these, we did not use the affected code at all. They were resolved nevertheless as they will still be reported on any vulnerability scan on the container in your environment.

  • Redis 7 container's base os wasn't being updated upstream and had 4 Critical and multiple other Vulnerabilities, so we migrated to Valkey
  • Upgrade sqlparse to 0.5.4 in #196
  • Update filelock to resolve CVE-2025-68146 in #205

Full Changelog: 25.3.1...25.3.2

25.3.1

08 Dec 17:22
187f404

Choose a tag to compare

Security Fixes

These CVEs were against the underlying packages we depend on, not directly on Ascender. For several of these, we did not use the affected code at all. They were resolved nevertheless as they will still be reported on any vulnerability scan on the container in your environment.

Full Changelog: 25.3.0...25.3.1

25.3.0

02 Dec 17:04
b9cc975

Choose a tag to compare

What's Changed

  • Upgrade to Django v5 in #187
  • Fix logic in isAuthenticated in #180
  • Fix f-string in log that is broken (Upstream 16132) in #179
  • Remove unused additional containers (splunk, grafana, etc...) in #184
  • Remove dependency on django-crum, move to native threading. in #186
  • Fix using the Ascender controller as an Inventory Source in #192
  • Fix some translation issues causing text not to display in #193
  • Removed options to disable gradient and custom header logo in #193
  • Add better Source Var defaults for some Inventory Sources in #193
  • Fix a UI caching issue when selecting Role permissions in #193
  • Re-added Satellite credential in #191

Security Fixes

These CVEs were against the underlying packages we depend on, not directly on Ascender. For several of these, we did not use the affected code at all. They were resolved nevertheless as they will still be reported on any vulnerability scan on the container in your environment.

Full Changelog: 25.2.0...25.3.0

25.2.0

17 Sep 05:37
f96a2bb

Choose a tag to compare

What's Changed

  • Add option for enabling Ansible 2.9 Collections variable
  • Fix all links to external documentation
  • Fix API JavaScript expansion icon. size() is long deprecated and removed
  • Fix some web-socket issues and memory leaks in asyncs
  • Migrate off react-script
  • Notebook 7 breaks currently implementation of Jupyter, so downgrade it
  • Pin django-ansible-base as last commit breaks migrations
  • Re-import docs from Upstream 24.6.1 repo
  • Remove alert modal if custom login settings can't be fetched
  • Swap to alpine node image for UI
  • Upgrade receptor to latest version
  • Upgrade to latest Node 20 LTS
  • (Upstream) Fix maintain order of insertions into m2m relationship tables
  • (Upstream) Setting with ANSIBLE_BASE_ prefix does not need to be added to ENV var for job execution

Security Fixes

These CVEs were against the underlying packages we depend on, not directly on Ascender. For several of these, we did not use the affected code at all. They were resolved nevertheless as they will still be reported on any vulnerability scan on the container in your environment.

Full Changelog: 25.1.0...25.2.0

25.1.0

09 Jul 18:03
08e39de

Choose a tag to compare

What's Changed

  • Adding toast handler to fix errors when using list approve or deny buttons
  • Address first_found skip bug in Ansible 2.16
  • Add Labels listing to start using Labels as pseudo-folders for Templates
  • Allow Menu Header logo to be customized
  • Allow Menu gradient to be disabled
  • Database deadlock by awx_callback_receiver_worker and awx_dispatcher_worker
  • Facts are unintentionally deleted when the inventory is modified during a job execution
  • Fix issue with saving System Settings when using local overrides
  • Fix 404 error when logging in
  • Fix issue on notifications when viewing a notification for a webhook
  • Fix notification name search
  • Fix instance peering pagination
  • Resolve multiple warnings during build process
  • Send job_lifecycle logs to external loggers
  • Update to Python 3.11

Security Fixes

  • Updated python / npm dependencies to resolve multiple CVEs.

These CVEs were against the underlying packages we depend on, not directly on Ascender. For several of these, we did not use the affected code at all. They were resolved nevertheless as they will still be reported on any vulnerability scan on the container in your environment.

Full Changelog: 25.0.0...25.1.0

25.0.0

10 Apr 18:38
90b8452

Choose a tag to compare

What's Changed

Notable Items

  • Official support for Ascender Ledger Pro 1.0. This release is certified to work with the upcoming Ascender Ledger Pro 1.0 release.
  • Fix long standing bug where systems with more than 1500 packages would fail to upload data to Ledger due to rsyslog protocol limitations.
  • Support for Same Site Cookies to support secure connectivity.
  • Fix multiple framework CVE's and deprecation's as documented below.
  • Adding the Install UUID to all External Logging to uniquely identify Ascender servers inside of an Ascender Ledger Pro install.
  • Forwarding of bearer token Authorization headers when Externally logging to Ascender Ledger Pro.

Upstream Patches

Other

  • Migrate away from pkg_resources as it's deprecated -> This resolves the pkg_resources deprecation warnings.
  • Move to using an image mirror
  • Replace the deprecated usage of "docker-compose" with "docker compose"
  • Updates rsyslog to use the imptcp input module over the legacy socket input module. It does this to avoid Messages with too long errors (Errno 90) that occur with large packet sizes. Fixes [https://github.com//issues/51]
  • Add Install UUID and URL to log data

Security Fixes

Full Changelog: 24.0.4...25.0.0