🔖(minor) release 2.7.0

Added:
- 📄(legal) Require contributors to sign a DCO

Changed:
- ♻️(frontend) Integrate UI kit
- 🏗️(y-provider) manage auth in y-provider app

Fixed:
- 🐛(backend) compute ancestor_links in get_abilities
  if needed
- 🔒️(back) restrict access to document accesses

CHANGELOG.md

@@ -8,7 +8,7 @@ and this project adheres to
 
 ## [Unreleased]
 
-## [3.0.0] - 2025-03-28
+## [2.7.0] - 2025-03-28
 
 ## Added
 
@@ -506,8 +506,8 @@ and this project adheres to
 - ✨(frontend) Coming Soon page (#67)
 - 🚀 Impress, project to manage your documents easily and collaboratively.
 
-[unreleased]: https://github.com/numerique-gouv/impress/compare/v3.0.0...main
-[v3.0.0]: https://github.com/numerique-gouv/impress/releases/v3.0.0
+[unreleased]: https://github.com/numerique-gouv/impress/compare/v2.7.0...main
+[v2.7.0]: https://github.com/numerique-gouv/impress/releases/v2.7.0
 [v2.6.0]: https://github.com/numerique-gouv/impress/releases/v2.6.0
 [v2.5.0]: https://github.com/numerique-gouv/impress/releases/v2.5.0
 [v2.4.0]: https://github.com/numerique-gouv/impress/releases/v2.4.0

UPGRADE.md

@@ -16,18 +16,6 @@ the following command inside your docker container:
 
 ## [Unreleased]
 
-## [3.0.0] - 2025-03-28
-
-We are not using the nginx auth request anymore to access the collaboration server (`yProvider`)
-The authentication is now managed directly from the yProvider server. 
-You must remove the annotation `nginx.ingress.kubernetes.io/auth-url` from the `ingressCollaborationWS`.
-
-This means as well that the yProvider server must be able to access the Django server.
-To do so, you must set the `COLLABORATION_BACKEND_BASE_URL` environment variable to the `yProvider`
-service.
-
-## [2.2.0] - 2025-02-10
-
 - AI features are now limited to users who are authenticated. Before this release, even anonymous
   users who gained editor access on a document with link reach used to get AI feature.
   IF you want anonymous users to keep access on AI features, you must now define the

src/backend/pyproject.toml

@@ -7,7 +7,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "impress"
-version = "3.0.0"
+version = "2.7.0"
 authors = [{ "name" = "DINUM", "email" = "dev@mail.numerique.gouv.fr" }]
 classifiers = [
     "Development Status :: 5 - Production/Stable",

src/frontend/apps/e2e/package.json

@@ -1,6 +1,6 @@
 {
   "name": "app-e2e",
-  "version": "3.0.0",
+  "version": "2.7.0",
   "private": true,
   "scripts": {
     "lint": "eslint . --ext .ts",

src/frontend/apps/impress/package.json

@@ -1,6 +1,6 @@
 {
   "name": "app-impress",
-  "version": "3.0.0",
+  "version": "2.7.0",
   "private": true,
   "scripts": {
     "dev": "next dev",

src/frontend/apps/impress/src/features/service-worker/__tests__/useSWRegister.test.tsx

@@ -21,11 +21,9 @@ describe('useSWRegister', () => {
           reject('error');
         }),
     );
-
     Object.defineProperty(navigator, 'serviceWorker', {
       value: {
         register: registerSpy,
-        addEventListener: jest.fn(),
       },
       writable: true,
     });
@@ -33,10 +31,6 @@ describe('useSWRegister', () => {
     render(<TestComponent />);
 
     expect(registerSpy).toHaveBeenCalledWith('/service-worker.js?v=123456');
-    expect(navigator.serviceWorker.addEventListener).toHaveBeenCalledWith(
-      'controllerchange',
-      expect.any(Function),
-    );
   });
 
   it('checks service-worker is not register', () => {

src/frontend/apps/impress/src/features/service-worker/hooks/useSWRegister.tsx

@@ -8,33 +8,9 @@ export const useSWRegister = () => {
     ) {
       navigator.serviceWorker
         .register(`/service-worker.js?v=${process.env.NEXT_PUBLIC_BUILD_ID}`)
-        .then((registration) => {
-          registration.onupdatefound = () => {
-            const newWorker = registration.installing;
-            if (!newWorker) {
-              return;
-            }
-
-            newWorker.onstatechange = () => {
-              if (
-                newWorker.state === 'installed' &&
-                navigator.serviceWorker.controller
-              ) {
-                newWorker.postMessage({ type: 'SKIP_WAITING' });
-              }
-            };
-          };
-        })
         .catch((err) => {
           console.error('Service worker registration failed:', err);
         });
-
-      const currentController = navigator.serviceWorker.controller;
-      navigator.serviceWorker.addEventListener('controllerchange', () => {
-        if (currentController) {
-          window.location.reload();
-        }
-      });
     }
   }, []);
 };

src/frontend/apps/impress/src/features/service-worker/service-worker.ts

@@ -65,13 +65,6 @@ self.addEventListener('install', function (event) {
   event.waitUntil(self.skipWaiting());
 });
 
-self.addEventListener('message', (event) => {
-  // eslint-disable-next-line @typescript-eslint/no-unsafe-member-access
-  if (event.data?.type === 'SKIP_WAITING') {
-    void self.skipWaiting();
-  }
-});
-
 self.addEventListener('activate', function (event) {
   const cacheAllow = SW_VERSION;
 

src/frontend/package.json

@@ -1,6 +1,6 @@
 {
   "name": "impress",
-  "version": "3.0.0",
+  "version": "2.7.0",
   "private": true,
   "workspaces": {
     "packages": [

src/frontend/packages/eslint-config-impress/package.json

@@ -1,6 +1,6 @@
 {
   "name": "eslint-config-impress",
-  "version": "3.0.0",
+  "version": "2.7.0",
   "license": "MIT",
   "scripts": {
     "lint": "eslint --ext .js ."

src/frontend/packages/i18n/package.json

@@ -1,6 +1,6 @@
 {
   "name": "packages-i18n",
-  "version": "3.0.0",
+  "version": "2.7.0",
   "private": true,
   "scripts": {
     "extract-translation": "yarn extract-translation:impress",

src/frontend/servers/y-provider/package.json

@@ -1,6 +1,6 @@
 {
   "name": "server-y-provider",
-  "version": "3.0.0",
+  "version": "2.7.0",
   "description": "Y.js provider for docs",
   "repository": "https://github.com/numerique-gouv/impress",
   "license": "MIT",

src/helm/env.d/dev/values.impress.yaml.gotmpl

@@ -124,7 +124,6 @@ yProvider:
     tag: "latest"
 
   envVars:
-    COLLABORATION_BACKEND_BASE_URL: https://impress.127.0.0.1.nip.io
     COLLABORATION_LOGGING: true
     COLLABORATION_SERVER_ORIGIN: https://impress.127.0.0.1.nip.io
     COLLABORATION_SERVER_SECRET: my-secret
@@ -137,6 +136,9 @@ ingress:
 ingressCollaborationWS:
   enabled: true
   host: impress.127.0.0.1.nip.io
+  
+  annotations:
+    nginx.ingress.kubernetes.io/auth-url: https://impress.127.0.0.1.nip.io/api/v1.0/documents/collaboration-auth/
 
 ingressCollaborationApi:
   enabled: true

src/helm/helmfile.yaml

@@ -1,7 +1,7 @@
 environments:
   dev:
     values:
-      - version: 3.0.0
+      - version: 2.7.0
 ---
 repositories:
 - name: bitnami

src/helm/impress/Chart.yaml

@@ -1,5 +1,5 @@
 apiVersion: v2
 type: application
 name: docs
-version: 3.0.0
+version: 2.7.0
 appVersion: latest

src/mail/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mail_mjml",
-  "version": "3.0.0",
+  "version": "2.7.0",
   "description": "An util to generate html and text django's templates from mjml templates",
   "type": "module",
   "dependencies": {