Merge pull request #8998 from cvat-ai/release-2.26.0

Release v2.26.0

.bandit

@@ -1,9 +1,7 @@
 [bandit]
 # B101 : assert_used
 # B102 : exec_used
-# B320 : xml_bad_etree
 # B404 : import_subprocess
 # B406 : import_xml_sax
-# B410 : import_lxml
-skips: B101,B102,B320,B404,B406,B410
+skips: B101,B102,B404,B406
 exclude: **/tests/**,tests

.eslintrc.cjs

@@ -1,5 +1,5 @@
 // Copyright (C) 2018-2022 Intel Corporation
-// Copyright (C) 2023 CVAT.ai Corporation
+// Copyright (C) CVAT.ai Corporation
 //
 // SPDX-License-Identifier: MIT
 
@@ -41,7 +41,6 @@ module.exports = {
         'max-len': ['error', { code: 120, ignoreStrings: true }],
         'func-names': 0,
         'valid-typeof': 0,
-        'no-useless-constructor': 0, // sometimes constructor is necessary to generate right documentation in cvat-core
         'quotes': ['error', 'single', { "avoidEscape": true }],
         'lines-between-class-members': 0,
         'class-methods-use-this': 0,

.github/CODEOWNERS

@@ -11,47 +11,49 @@
 # the global owner(s) will be requested for a review.
 
 # Component: Server
-/cvat/           @Marishka17
+/cvat/                      @SpecLad
+/cvat/apps/dataset_manager/ @zhiltsov-max
+/cvat/apps/consensus/       @zhiltsov-max
+/cvat/apps/quality_control/ @zhiltsov-max
 
 # Component: CVAT SDK/CLI
 /cvat-sdk/       @SpecLad
 /cvat/schema.yml @SpecLad
 /cvat-cli/       @SpecLad
 
 # Component: Documentation
-/site/          @mdacoca
-/CHANGELOG.md   @mdacoca
-/README.md      @mdacoca
+/site/          @bsekachev
+/CHANGELOG.md   @bsekachev
+/README.md      @bsekachev
 
 # Component: CVAT UI
 /cvat-ui/       @bsekachev
-/cvat-data/     @azhavoro
+/cvat-data/     @bsekachev
 /cvat-canvas/   @bsekachev
 /cvat-canvas3d/ @bsekachev
 /cvat-core/     @bsekachev
 
-# Component: Datumaro
-/datumaro/      @zhiltsov-max
-/cvat/apps/dataset_manager/ @zhiltsov-max
-
 # Advanced components (e.g. analytics)
 /components/    @azhavoro
 
 # Component: Tests
-/tests/         @kirill-sizov
+/tests/         @bsekachev
+/tests/python/  @zhiltsov-max
 
 # Component: Serverless functions
-/serverless/    @kirill-sizov
+/serverless/    @bsekachev
 
 # Infrastructure
 Dockerfile*     @azhavoro
 docker-compose* @azhavoro
 .*              @azhavoro
+*.js             @bsekachev
 *.conf          @azhavoro
 *.sh            @azhavoro
-/cvat_proxy/    @azhavoro
-/tests/         @azhavoro
-/utils/         @azhavoro
-/LICENSE        @nmanovic
-/.github/       @kirill-sizov
+/supervisord/   @azhavoro
 /helm-chart/    @azhavoro
+/utils/         @SpecLad
+/.github/       @SpecLad
+/dev/           @SpecLad
+.regal/         @SpecLad
+/LICENSE        @nmanovic

.github/PULL_REQUEST_TEMPLATE.md

@@ -26,11 +26,6 @@ If you're unsure about any of these, don't hesitate to ask. We're here to help!
 - [ ] I have added tests to cover my changes
 - [ ] I have linked related issues (see [GitHub docs](
   https://help.github.com/en/github/managing-your-work-on-github/linking-a-pull-request-to-an-issue#linking-a-pull-request-to-an-issue-using-a-keyword))
-- [ ] I have increased versions of npm packages if it is necessary
-  ([cvat-canvas](https://github.com/cvat-ai/cvat/tree/develop/cvat-canvas#versioning),
-  [cvat-core](https://github.com/cvat-ai/cvat/tree/develop/cvat-core#versioning),
-  [cvat-data](https://github.com/cvat-ai/cvat/tree/develop/cvat-data#versioning) and
-  [cvat-ui](https://github.com/cvat-ai/cvat/tree/develop/cvat-ui#versioning))
 
 ### License
 

.github/workflows/full.yml

@@ -223,9 +223,6 @@ jobs:
           docker compose -f docker-compose.yml -f docker-compose.dev.yml -f docker-compose.ci.yml run cvat_ci /bin/bash \
             -c 'python manage.py test cvat/apps -v 2'
 
-          docker compose -f docker-compose.yml -f docker-compose.dev.yml -f docker-compose.ci.yml run cvat_ci /bin/bash \
-            -c 'DISABLE_HUSKY=1 yarn --frozen-lockfile && yarn workspace cvat-core run test'
-
       - name: Creating a log file from cvat containers
         if: failure()
         env:

.github/workflows/main.yml

@@ -241,9 +241,6 @@ jobs:
           docker compose -f docker-compose.yml -f docker-compose.dev.yml -f docker-compose.ci.yml run cvat_ci /bin/bash \
             -c 'coverage run -a manage.py test -v 2 cvat/apps && coverage json && mv coverage.json ${CONTAINER_COVERAGE_DATA_DIR}/unit_tests_coverage.json'
 
-          docker compose -f docker-compose.yml -f docker-compose.dev.yml -f docker-compose.ci.yml run cvat_ci /bin/bash \
-            -c 'DISABLE_HUSKY=1 yarn --frozen-lockfile && yarn workspace cvat-core run test && mv cvat-core/reports/coverage/coverage-final.json ${CONTAINER_COVERAGE_DATA_DIR}'
-
       - name: Uploading code coverage results as an artifact
         uses: actions/upload-artifact@v4
         with:

.github/workflows/pylint.yml

@@ -2,7 +2,7 @@ name: Pylint
 on: pull_request
 jobs:
   Linter:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04 # TODO: update pylint to 3.x and change this back to ubuntu-latest
     steps:
       - uses: actions/checkout@v4
       - id: files

.github/workflows/schedule.yml

@@ -163,9 +163,6 @@ jobs:
           docker compose -f docker-compose.yml -f docker-compose.dev.yml -f docker-compose.ci.yml run cvat_ci /bin/bash \
             -c 'python manage.py test cvat/apps -v 2'
 
-          docker compose -f docker-compose.yml -f docker-compose.dev.yml -f docker-compose.ci.yml run cvat_ci /bin/bash \
-            -c 'DISABLE_HUSKY=1 yarn --frozen-lockfile && yarn workspace cvat-core run test'
-
           docker compose -f docker-compose.yml -f docker-compose.dev.yml -f docker-compose.ci.yml down -v
 
   e2e_testing:

.gitignore

@@ -65,8 +65,6 @@ cvat-ui/dist
 
 # produced by npm run docs in cvat-core
 cvat-core/docs
-# produced by npm run test in cvat-core
-cvat-core/reports
 # produced by prepare in the root package.json script
 .husky
 

.vscode/launch.json

@@ -550,20 +550,6 @@
                 "src/api.js"
             ],
             "port": 9230
-        },
-        {
-            "type": "node",
-            "request": "launch",
-            "name": "jest debug",
-            "cwd": "${workspaceFolder}/cvat-core",
-            "program": "${workspaceFolder}/node_modules/.bin/jest",
-            "args": [
-                "--config",
-                "${workspaceFolder}/cvat-core/jest.config.cjs"
-            ],
-            "console": "integratedTerminal",
-            "internalConsoleOptions": "neverOpen",
-            "disableOptimisticBPs": true,
         }
     ],
     "compounds": [

CHANGELOG.md

@@ -16,6 +16,72 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 <!-- scriv-insert-here -->
 
+<a id='changelog-2.26.0'></a>
+## \[2.26.0\] - 2025-01-27
+
+### Added
+
+- Setting `TMP_FILE_OR_DIR_RETENTION_DAYS`, which defines maximum retention period
+  of a file or dir in temporary directory
+  (<https://github.com/cvat-ai/cvat/pull/8804>)
+- Cron job to remove outdated files and directories from CVAT tmp directory
+  (<https://github.com/cvat-ai/cvat/pull/8804>)
+
+- Ability to set Django's secret key using an environment variable
+  (<https://github.com/cvat-ai/cvat/pull/8566>)
+
+### Changed
+
+- Export cache cleaning moved to a separate cron job
+  (<https://github.com/cvat-ai/cvat/pull/8804>)
+
+- Improved UX of quality management page: better table layout, file name search, ability to download table as `.csv`
+  (<https://github.com/cvat-ai/cvat/pull/8865>)
+
+- Enhanced MIL tracker. Optimized memory usage. Now it is runnable on many frames, and applicable to drawn rectangles.
+  (<https://github.com/cvat-ai/cvat/pull/8942>)
+
+- The UI only displays one version for the whole client component,
+  which is now aligned with the server version
+  (<https://github.com/cvat-ai/cvat/pull/8948>)
+
+### Fixed
+
+- Fixed webhook worker not restarting after losing Redis connection
+  (<https://github.com/cvat-ai/cvat/pull/8921>)
+
+- Fixed incorrect results being returned from lambda functions when all
+  detected shapes have labels that aren't mapped
+  (<https://github.com/cvat-ai/cvat/pull/8931>)
+
+- Optimized importing from cloud storage
+  (<https://github.com/cvat-ai/cvat/pull/8930>)
+
+- A job cannot be opened if to remove an image with the latest keyframe of a track
+  (<https://github.com/cvat-ai/cvat/pull/8952>)
+
+- A track will be interpolated incorrectly if to delete an image containing the object keyframe
+  (<https://github.com/cvat-ai/cvat/pull/8951>)
+
+- Error: Cannot read properties of undefined (reading 'startPoints') when dragging an object
+  (<https://github.com/cvat-ai/cvat/pull/8966>)
+
+- Extra shortcuts enabled from brush tools on views where not necessary
+  (<https://github.com/cvat-ai/cvat/pull/8971>)
+
+- \[Helm\] Fixed Nuclio dashboard crashes when running in a cluster
+  that doesn't use Docker
+  (<https://github.com/cvat-ai/cvat/pull/8825>)
+
+- \[SDK\] `cvat_sdk.auto_annotation.functions.torchvision_detection` and
+  `torchvision_instance_segmentation` no longer declare meaningless "N/A" labels
+  (<https://github.com/cvat-ai/cvat/pull/8997>)
+
+### Security
+
+- Protected tracker functions against deserializing untrusted input
+  (<https://github.com/cvat-ai/cvat/security/advisories/GHSA-wq36-mxf8-hv62>)
+
 <a id='changelog-2.25.0'></a>
 ## \[2.25.0\] - 2025-01-09
 

CITATION.cff

@@ -33,6 +33,6 @@ keywords:
   - deep-learning
   - annotation
 license: MIT
-version: 2.8.2
+version: 2.25.0
 date-released: '2023-11-06'
 

Dockerfile

@@ -21,6 +21,7 @@ RUN apt-get update && \
         libxmlsec1-dev \
         libxmlsec1-openssl \
         libhdf5-dev \
+        cargo \
     && rm -rf /var/lib/apt/lists/*
 
 ARG PIP_VERSION

LICENSE

@@ -1,7 +1,7 @@
 MIT License
 
-Copyright (c) 2018-2022 Intel Corporation
-Copyright (c) 2022-2024 CVAT.ai Corporation
+Copyright (C) 2018-2022 Intel Corporation
+Copyright (C) 2022-2025 CVAT.ai Corporation
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

SECURITY.md

@@ -5,11 +5,6 @@
 At the moment only the latest release is supported. When you report a security issue,
 be sure it can be reproduced in the supported version.
 
-| Version | Supported          |
-| ------- | ------------------ |
-| 2.0.0   | :white_check_mark: |
-| <2.0.0  | :x:                |
-
 ## Reporting a Vulnerability
 
 If you have information about a security issue or vulnerability in the product, please

cvat-canvas/.eslintrc.cjs

@@ -1,5 +1,5 @@
 // Copyright (C) 2019-2022 Intel Corporation
-// Copyright (C) 2023 CVAT.ai Corporation
+// Copyright (C) CVAT.ai Corporation
 //
 // SPDX-License-Identifier: MIT
 

cvat-canvas/README.md

@@ -5,14 +5,6 @@
 The CVAT module written in TypeScript language.
 It presents a canvas to viewing, drawing and editing of annotations.
 
-## Versioning
-
-If you make changes in this package, please do following:
-
-- After not important changes (typos, backward compatible bug fixes, refactoring) do: `yarn version --patch`
-- After changing API (backward compatible new features) do: `yarn version --minor`
-- After changing API (changes that break backward compatibility) do: `yarn version --major`
-
 ## Commands
 
 - Building of the module from sources in the `dist` directory:

cvat-canvas/src/scss/canvas.scss

@@ -1,5 +1,5 @@
 // Copyright (C) 2020-2022 Intel Corporation
-// Copyright (C) 2022-2023 CVAT.ai Corporation
+// Copyright (C) CVAT.ai Corporation
 //
 // SPDX-License-Identifier: MIT
 

cvat-canvas/src/typescript/canvas.ts

@@ -1,5 +1,5 @@
 // Copyright (C) 2019-2022 Intel Corporation
-// Copyright (C) 2022-2023 CVAT.ai Corporation
+// Copyright (C) CVAT.ai Corporation
 //
 // SPDX-License-Identifier: MIT
 
@@ -18,9 +18,6 @@ import { CanvasController, CanvasControllerImpl } from './canvasController';
 import { CanvasView, CanvasViewImpl } from './canvasView';
 
 import '../scss/canvas.scss';
-import pjson from '../../package.json';
-
-const CanvasVersion = pjson.version;
 
 interface Canvas {
     html(): HTMLDivElement;
@@ -197,5 +194,5 @@ export type InteractionResult = _InteractionResult;
 export type HighlightSeverity = _HighlightSeverity;
 
 export {
-    CanvasImpl as Canvas, CanvasVersion, RectDrawingMethod, CuboidDrawingMethod, Mode as CanvasMode,
+    CanvasImpl as Canvas, RectDrawingMethod, CuboidDrawingMethod, Mode as CanvasMode,
 };

cvat-canvas/src/typescript/canvasController.ts

@@ -1,5 +1,5 @@
 // Copyright (C) 2019-2022 Intel Corporation
-// Copyright (C) 2022-2024 CVAT.ai Corporation
+// Copyright (C) CVAT.ai Corporation
 //
 // SPDX-License-Identifier: MIT
 

cvat-canvas/src/typescript/canvasModel.ts

@@ -1,5 +1,5 @@
 // Copyright (C) 2019-2022 Intel Corporation
-// Copyright (C) 2022-2024 CVAT.ai Corporation
+// Copyright (C) CVAT.ai Corporation
 //
 // SPDX-License-Identifier: MIT