2025.12.23-1

What's Changed

• Remove legacy user saved searches and opportunities in Tsubscription … by @kkrug in #7497
• [Issue #7317] Schema validation on pagination by @babebe in #7468
• [ISSUE #7469] Adding support to filter by ALN by @joshtonava in #7507
• [Issue #6642] Create Get Application Submissions endpoint by @mikehgrantsgov in #7505
• [Issue #7350] Change job to generate Zip of successfully submitted application to run hourly by @mikehgrantsgov in #7506
• [Issue #7475] Release notes link on /roadmap by @andycochran in #7476
• [Issue #5097] Create Activity History section on Applications page by @glenblosser-nava in #7362
• [unticketed] do not remove double slashes from protocol definitions by @doug-s-nava in #7548
• [Unticketed] Fix pagination logic to return the item not raise by @chouinar in #7546
• Move "Account" page to "Settings" by @nathan-stricker in #7392
• [Issue #7420] frontend ALN query support and pill by @myduong-navapbc in #7526
• [Issue #7048] organization admin audit [1/2] by @babebe in #7498
• [Issue #7394] setup simpler multiauth for JWT and new API key by @hao10282025-sudo in #7523
• [Issue #7058] allow frontend to process schema with complex nested conditionals by @doug-s-nava in #7482
• [Issue #7340] user account and tuser account mapper cleanup by @babebe in #7553
• [Issue #7113] Add NEH Supplementary cover sheet XML by @mikehgrantsgov in #7552
• [Unticketed] Bugfix/migration heads conflict by @babebe in #7561
• [Issue #7452] Attachments failing with API Gateway by @mdragon in #7486
• [Unticketed] Automated Update to Database ERD Diagrams and OpenAPI Docs by @github-actions[bot] in #7545
• [unticketed] specify max upload file size in a second place by @doug-s-nava in #7563
• [Issue #7547] Update homepage copy by @andycochran in #7549
• [Issue #6643] Persistent submit message by @glenblosser-nava in #7611
• [Issue 7612] Remove legacy API key auth from form management scripts by @Sumeet213 in #7613
• Correction of minor typos by @kylehamilton in #7623
• [Issue #7364] move organization routes to organizations by @doug-s-nava in #7494
• [Issue #7107] EPA 4700-4 v5 Form UI Schema by @myduong-navapbc in #7627
• [Issue #7641] Enable xml generaion dev and staging envs by @mikehgrantsgov in #7650

New Contributors

• @Sumeet213 made their first contribution in #7613
• @kylehamilton made their first contribution in #7623

Full Changelog: 2025.12.17-1...2025.12.23-1

2025.12.17-1

What's Changed

• [Issue #7416]: Implement Filter for Saved Opportunities to api by @btabaska in #7417
• [Unticketed] Document how we should be removing columns from DB tables by @chouinar in #7425
• [Issue #7083] Update list-forms script to include commands for updating form instructions by @mikehgrantsgov in #7422
• [Issue #7089] Add FK from Opportunity table to Agency table by @hao10282025-sudo in #7409
• [Unticketed] Automated Update to Database ERD Diagrams and OpenAPI Docs by @github-actions[bot] in #7430
• [Issue #7330]: Update fluentbit logs with sql truncation - draft by @prasnava in #7388
• Add dockleconfig "settings.py" ignore configuration for NOFO Builder by @pcraig3 in #7442
• [Unticketed] Add NOFOs to workflow name so it's clearly different in the UI by @mdragon in #7446
• [Issue #7156] XML for SF-424B Form matches legacy Grants.gov by @mikehgrantsgov in #7444
• Update MAINTAINERS and CODEOWNERS to add @kkrug by @kkrug in #7448
• [Issue-#7183]-Add background color to current pagination button by @chay-REIsys in #7441
• [Issue #6986] Set up alerts from AWS Security Hub by @sean-navapbc in #7218
• [Issue #7450] removing the wip banner on the search page by @ErinPattisonNava in #7454
• Update Api by @renovate[bot] in #7459
• [Issue #6940] Add Pagination and Default Email Sorting to List Organization Invitations Endpoint by @babebe in #7406
• [Issue #7445] Upgrade NextJS by @mdragon in #7447
• [Issue #7114] XML for EPA Key Contacts form by @mikehgrantsgov in #7463
• [Issue #6968] Rework the build opps script to be flexible and add scenarios by @chouinar in #7423
• [Issue #7470]: Update package versions w/ precompiled wheels for 3.14 by @prasnava in #7467
• [Issue #7111] Add XML transforms for EPA-4700-4 by @mikehgrantsgov in #7479
• [Unticketed] Automated Update to Database ERD Diagrams and OpenAPI Docs by @github-actions[bot] in #7485
• [Issue #7155] Add Project Abstract Summary form XML by @mikehgrantsgov in #7493
• [Issue #7499]: Resolve anchore filelock cve by @prasnava in #7500
• Exclude Inspector findings from Security Hub alerts by @sean-navapbc in #7502
• [Issue #7343] fix return to grants link on opportunity pages by @doug-s-nava in #7501
• [Issue #7200]: create new pipeline for managing feature flags in lower environments by @prasnava in #7487
• [Issue #2500]: Add open search iam authentication by @prasnava in #7481

New Contributors

• @kkrug made their first contribution in #7448

Full Changelog: 2025.12.10-1...2025.12.17-1

2025.12.10-1

What's Changed

• [Issue #6412] Update description for legal name field in FORM_JSON_… by @chay-REIsys in #7327
• [Issue #7183] Change to align Instructions and submit button by @chay-REIsys in #7280
• [Issue #7088] Remove Opportunity created published tracking ids by @hao10282025-sudo in #7284
• [Unticketed] Automated Update to Database ERD Diagrams and OpenAPI Docs by @github-actions[bot] in #7347
• [Unticketed] add basic unit testing docs by @doug-s-nava in #7328
• [Issue #7093]: Upgrade API python version to 3.14 by @prasnava in #7268
• [Issue #7285] invite organization users bugfixes by @doug-s-nava in #7308
• [Issue #6816] Modify soap proxy endpoints to use new env var by @jakobpederson in #7314
• [Issue #7353] Fix error when loading data from tcertificates table by @jakobpederson in #7354
• [Issue #6912] XML for Grants.gov Lobbying Form matches legacy Grants.gov XML output by @mikehgrantsgov in #7355
• [Issue #7359] add pagination and sorting to organization users call by @doug-s-nava in #7360
• [Issue #7329] Allowed created date on VuserAccountMixin to be nullable by @joshtonava in #7361
• [Unticketed] Add soap-private-keys to terraform by @jakobpederson in #7363
• [Issue #7367]: Update Open API base container by @prasnava in #7368
• [Issue #7372]: Update urllib3 in the base container and update the API by @prasnava in #7371
• Enable API Gateway auth enforcement by @Nava-JoshLong in #6764
• Added notes for Front End Windows Documentation by @dghazvini in #7342
• [Issue: #7231] adding unittests for header and organizations work by @ErinPattisonNava in #7273
• [Issue #6942] adding the skeleton page for manage users legacy invite by @ErinPattisonNava in #7346
• [Issue #7036] upgrade trussworks to fix file upload dev bug by @doug-s-nava in #7251
• [Unticketed] Automated Update to Database ERD Diagrams and OpenAPI Docs by @github-actions[bot] in #7370
• [Issue #7358] Clean up setup-soap.sh and add instructions by @jakobpederson in #7373
• [Issue #7382] put manage users button on dashboard page behind feature flag by @doug-s-nava in #7383
• [Unticketed] Update urllib3 for vulnerability scanning by @chouinar in #7369
• [Issue #7292]: Analytics python upgrade to 3.14 and CVE fix urllib3 by @prasnava in #7375
• [Issue #7112] XML for Quad 4 Priority forms match legacy Grants.gov by @mikehgrantsgov in #7378
• [Issue #7247] invite legacy table data by @ErinPattisonNava in #7377
• [Issue #7381] Add opportunity existence check to saved-opportunities endpoint by @babebe in #7385
• Security Hub Fixes Batch 2: EBS Encryption, S3 Block Public Access, CloudTrail Logging by @sean-navapbc in #7294
• Fix bug for created_at and updated_at in common grants search by @jcrichlake in #7396
• [Unticketed] Automated Update to Database ERD Diagrams and OpenAPI Docs by @github-actions[bot] in #7384
• [Issue #7082] Create script to automate usage of the new form instructions endpoint by @mikehgrantsgov in #7397
• [Issue #7410] add Hao to code owners and maintainers.md by @hao10282025-sudo in #7412
• [Issue #7413]: Resolve anchor findings in the python base container. by @prasnava in #7414

Full Changelog: 2025.12.05-1...2025.12.10-1

2025.12.05-1

What's Changed

• [Issue #7154] XML for Budget Narrative Attachment Form and Project Narrative Attachment Form by @mikehgrantsgov in #7291
• [Issue #7125] Add filtering to the audit event endpoint by @chouinar in #7323
• [Unticketed] Automated Update to Database ERD Diagrams and OpenAPI Docs by @github-actions[bot] in #7332
• [Unticketed] Fix bug in jsonref resolver which incorrectly resolves schemas by @chouinar in #7334
• [Issue #6409] SF-424: Add description to Program District Upload field by @dghazvini in #7325
• [Issue #6864] wire up organization invitiation response by @doug-s-nava in #7279
• [ISSUE #7329] Fix data tuser_account and vuser_account issues with load transform job by @joshtonava in #7341
• [Issue #7333] update react, next and react-dom to latest minor versions to fix vulnerability by @doug-s-nava in #7335
• Revert "[Issue #7163]: Remove environment variables and use cli args instead for step functions " by @prasnava in #7338
• [ISSUE #6938] Supporting pagination for list organization user endpoint by @joshtonava in #7326
• [Issue #7344]: Add guard duty image ecr permissions to the task executor role by @prasnava in #7345
• [Issue #6913] XML for CD511 form matches legacy Grants.gov XML output by @mikehgrantsgov in #7337

New Contributors

• @dghazvini made their first contribution in #7325

Full Changelog: 2025.12.03-1...2025.12.05-1

2025.12.03-1

What's Changed

• [Issue #6905] Add EPA Form 4700-4 by @chouinar in #7138
• [Unticketed] Added windows development setup doc by @btabaska in #7150
• [Issue #7159]: Update workflows to reduce slack notifications by @prasnava in #7162
• [Issue #6861] Switch to supported version of the depreciated package by @mdragon in #6862
• [Unticketed] Automated Update to Database ERD Diagrams and OpenAPI Docs by @github-actions[bot] in #7180
• [Issue #6997]: Clean up unused ECR images by @prasnava in #7123
• [Issue #6955] frontend adjustments to form cd511 by @ErinPattisonNava in #7099
• [ISSUE #6925]: manage users, pending users table by @myduong-navapbc in #7124
• [Issue #6949] Setup foreign staging tables legacy users[2/2] by @babebe in #7052
• [Issue #914] Add AWS Security Hub to Terraform by @sean-navapbc in #7186
• [Issue #7145] Implement FORM_XML_TRANSFORM_RULES for Form SF424A by @mikehgrantsgov in #7195
• Update Analytics by @renovate[bot] in #7214
• [ISSUE #6744]: Active Users Table by @myduong-navapbc in #7094
• [Issue #6782] Changes to Next/CDN to make them work correctly together by @mdragon in #7181
• [ISSUE #7086] Remove Competition Assistance Listing table by @hao10282025-sudo in #7217
• [ISSUE #6744]: Manage Users Role Change Functionality by @myduong-navapbc in #7215
• [Unticketed] Automated Update to Database ERD Diagrams and OpenAPI Docs by @github-actions[bot] in #7233
• [Issue #6843] Sprint Metrics Maintenance by @DavidDudas-Intuitial in #7228
• [Issue #7234]: Hotfix for public files endpoint by @prasnava in #7235
• [ISSUE #7240] Fix current-region script for running scripts locally by @joshtonava in #7241
• Update MAINTAINERS.md by @Dao-REI in #7137
• [Issue #6935]: adding the organizations page by @ErinPattisonNava in #7230
• [unticketed] allow playwright to point to deployed env by @doug-s-nava in #7222
• [ISSUE #6947] Updated the content for user invite email by @joshtonava in #7236
• [Issue #7163]: Remove environment variables and use cli args instead for step functions by @prasnava in #7219
• [ISSUE #6952] discover legacy users endpoint by @joshtonava in #7202
• [ISSUE: #6921]: Manage User Remove User from Active Roster List by @myduong-navapbc in #7232
• [Issue #6776] local form dev tools by @doug-s-nava in #7073
• Update Api by @renovate[bot] in #7213
• [Unticketed] Schedule the build-automatic-opportunities job by @chouinar in #7208
• [Issue #6906] Create EPA Key Contacts Form by @chouinar in #7158
• [unticketed]: manage users role change error handling by @myduong-navapbc in #7243
• Remove Bookmark banner from Application page by @Dao-REI in #7265
• [Issue #7269] Add new energy infrastructure funding category by @chouinar in #7270
• Add Nathan Stricker and Kevin Lyu to github maintainers by @nathan-stricker in #7274
• [Unticketed] Automated Update to Database ERD Diagrams and OpenAPI Docs by @github-actions[bot] in #7288
• [Issue #6815] Modify SOAP endpoint to enforce RBAC by @jakobpederson in #7149
• [Issue #7157] XML for SF-LLL Form matches legacy Grants.gov by @mikehgrantsgov in #7252
• [Unticketed] Update docs for login.gov cert rotation by @chouinar in #7289
• [Issue #7081] Create new endpoint for form instructions documents by @mikehgrantsgov in #7246
• [Security] Fix AWS Security Hub findings - GuardDuty, Inspector, and SSM by @sean-navapbc in #7249
• [Issue #5931] Hide save button when application is submitted by @glenblosser-nava in #6870
• [Issue #6955] tweaks to the CD511 form by @ErinPattisonNava in #7296
• Issue 6995 remove bookmark component as well by @Dao-REI in #7275
• [Unticketed] Automated Update to Database ERD Diagrams and OpenAPI Docs by @github-actions[bot] in #7318
• [Unticketed] Fix typo in setup-cert-user task by @jakobpederson in #7315
• [Issue #6685] Clean up some disk space during E2E build/test by @mdragon in #6804
• [ISSUE #7139] Add ebiz poc designation field to organization users list endpoint by @joshtonava in #7316

New Contributors

• @hao10282025-sudo made their first contribution in #7217
• @Dao-REI made their first contribution in #7137
• @nathan-stricker made their first contribution in #7274

Full Changelog: 2025.11.19-1...2025.12.03-1

2025.11.19-1

What's Changed

• [Issue #6316] Record activity history audit events for applications by @chouinar in #7034
• [Issue #6809]: Add invitation instructions email sending to user invitation endpoint by @joshtonava in #6996
• moving the user/workspace page to dashboard (including text reference… by @ErinPattisonNava in #7028
• [Unticketed] Automated Update to Database ERD Diagrams and OpenAPI Docs by @github-actions[bot] in #7047
• [Issue #6901] Add 3 simple forms by @chouinar in #7039
• [Issue #6898] Handle restructuring objects for nested fields by @mikehgrantsgov in #7035
• [Issue #6949] setup foreign staging tables legacy users[1/2] by @babebe in #7020
• HOTFIX: remove 20251001 banner by @andycochran in #7049
• update code owners by @chay-REIsys in #7042
• [Issue #6537] pre load roles when checking access by @babebe in #6977
• [ISSUE #6922]: Manage users feature flag by @myduong-navapbc in #7037
• [Unticketed] Automated Update to Database ERD Diagrams and OpenAPI Docs by @github-actions[bot] in #7055
• [unticketed]: added missing pinpoint variable by @myduong-navapbc in #7057
• [Issue #6792]: wire up and move invitation form by @myduong-navapbc in #7054
• [Issue #6951] Create table for capturing ignored legacy org user by @babebe in #7051
• [Issue #6900] Add conditional transformations by @mikehgrantsgov in #7053
• [Issue #7011] Add Supplementary NEH Cover Sheet Form by @chouinar in #7056
• [Issue #7061] Create an ECS task that can generate opportunities for each form by @chouinar in #7062
• [Unticketed] Automated Update to Database ERD Diagrams and OpenAPI Docs by @github-actions[bot] in #7066
• [Issue #6902] Add GG Lobbying Form by @chouinar in #7064
• Update Analytics by @renovate[bot] in #7012
• [Issue #5931] hide save button button only by @glenblosser-nava in #7005
• [Issue #6775] Option to turn off token expiration / auto log out in local env by @glenblosser-nava in #6983
• [Issue #7076]: Upgrade terraform version to 1.13.5 by @prasnava in #7077
• [Issue #6953] Hide legacy users endpoint by @babebe in #7068
• [Unticketed] Automated Update to Database ERD Diagrams and OpenAPI Docs by @github-actions[bot] in #7110
• [Issue #6007] Improve link hover and active colors by @andycochran in #7065
• [Issue #6835] Add array_decomposition transform by @mikehgrantsgov in #7070
• [Issue #7071] Filter out select application forms from XML generation by @mikehgrantsgov in #7085
• [Issue #6814] Create ecs task for setting up cert user by @jakobpederson in #7021
• manual patch of js-yaml vulnerability while we wait for subdependency… by @doug-s-nava in #7117
• [Unticketed] Add some docs about the first time Oracle FDW setup in an env by @chouinar in #7122
• [Unticketed] Automated Update to Database ERD Diagrams and OpenAPI Docs by @github-actions[bot] in #7144
• [unticketed] add tf for manage users feature flag by @doug-s-nava in #7146

New Contributors

• @chay-REIsys made their first contribution in #7042
• @glenblosser-nava made their first contribution in #7005

Full Changelog: 2025.11.12-1...2025.11.19-1

2025.11.12-1

What's Changed

• [Issue #6115] remove is_organization_owner flag by @babebe in #6944
• [Issue #6796]: Fix merge conflicts in erd and openapi doc gen by @prasnava in #6975
• [Issue #6317] Add an endpoint for listing application audit events by @chouinar in #6973
• [Issue #6834] Modify application submission logic to put XML file in the Zip by @mikehgrantsgov in #6954
• [Issue #6808] Add tcertificates to TABLES_TO_LOAD by @jakobpederson in #6896
• [Issue #6892] Upgrade PostgreSQL version for Compose by @mdragon in #6894
• [Unticketed] Automated Update to Database ERD Diagrams and OpenAPI Docs by @github-actions[bot] in #6910
• [Issue #6813] Add lookup user_type by @jakobpederson in #6933
• [Issue #6982] Improve validation in CommonGrants services by @widal001 in #6987
• [Unticketed] Change application list to sort by created_at by default by @chouinar in #7002
• Update Api by @renovate[bot] in #7013
• [Unticketed] Automated Update to Database ERD Diagrams and OpenAPI Docs by @github-actions[bot] in #7010
• [Issue #6961]: Disable auto dev deploy on main merges by @prasnava in #6994
• Update CI/CD by @renovate[bot] in #7014
• feat: the Applications page with data by @ErinPattisonNava in #6962
• [Issue #6899] Add static values in XML generated fields/attributes by @mikehgrantsgov in #7018
• [Unticketed] Remove network calls to fetch XSDs at runtime by @mikehgrantsgov in #7019
• [Issue #7032]: Fix API Anchore Vulnerabilities by @prasnava in #7033

New Contributors

• @github-actions[bot] made their first contribution in #6910

Full Changelog: 2025.11.05-1...2025.11.12-1

2025.11.05-1

What's Changed

• [Issue #6869]: Hiding the submit button should only happen once the competition is closed by @myduong-navapbc in #6871
• fix: add checks for value type, radio specific by @myduong-navapbc in #6844
• [Issue #6763] wire up authorization gate and organization gating POC by @doug-s-nava in #6879
• [Issue #6648] accept invite widget by @doug-s-nava in #6863
• [Issue #6677] Create an endpoint for adding an organization to an application by @mikehgrantsgov in #6881
• [Issue #6685] Better reporting on and conservation of disk space during CI/CD runner by @mdragon in #6773
• [Issue #6495] Switch json schemas to be fully resolved before usage by @chouinar in #6846
• [Unticketed] Update CODEOWNERS for various directories by @mdragon in #6916
• [Issue #6908] Only fail the weekly vuln reporting job if something fails, not if it reports vulnerabilities by @mdragon in #6915
• [Issue #6496] Modify forms to use our shared schemas by @chouinar in #6859
• [Issue #6678] Modify the start application endpoint to allow an individual to start an application when only orgs are allowed by @mikehgrantsgov in #6911
• [Issue #6812] Create legacy_certificate table by @jakobpederson in #6918
• [Issue #6830]: Update ci-openapi.yml workflow to run in a separate container by @prasnava in #6897
• feat: adding the skeleton of the Applications page by @ErinPattisonNava in #6907
• [Issue #6903] Add CD511 and form building docs by @chouinar in #6929
• [Issue #6779] Setup static competition/app in seed script by @chouinar in #6914
• [Issue #6654] Remove political review code by @joshtonava in #6937
• [Issue #6836] Make app attachments be soft-deleted by @chouinar in #6932
• [Issue #6124] user list application endpoint add pagination by @babebe in #6891

Full Changelog: 2025.10.30-1...2025.11.05-1

2025.10.30-1

What's Changed

• [Issue #6526] organization invite tables by @babebe in #6794
• [Issue #6742] Enable CG routes in prod by @DavidDudas-Intuitial in #6777
• [Unticketed] Upgrade package for vulnerability scan by @chouinar in #6825
• [Issue #6639] create form for inviting user to organization by @doug-s-nava in #6793
• [Issue #6517] proper organization list and link section for workspace page by @doug-s-nava in #6819
• Dockle ignore Python "settings.py" files wrongly flagged as configuration by @pcraig3 in #6718
• [Issue #6453] Make forms endpoints use new API key auth by @chouinar in #6820
• [Issue #6686] create can access endpoint by @babebe in #6783
• [Issue #6817]: Remove graphviz deps from the api docker image by @prasnava in #6818
• [Issue #6606] Create Organization Invite Endpoint by @joshtonava in #6828
• [Issue #6315] Make table for Activity History by @mikehgrantsgov in #6842
• [Issue #6621] Get User Invitations Endpoint by @joshtonava in #6831
• [Issue #6728] build manage users page by @myduong-navapbc in #6829
• [Issue #6635] Add Lead Time Metric to Sprint Metrics Dashboard by @DavidDudas-Intuitial in #6824
• Update Api by @renovate[bot] in #6852
• [Issue #6620] List Organization Invitations Endpoint by @joshtonava in #6841
• [Issue #6662] Define schemas for GetSubmissionListExpanded by @jakobpederson in #6823
• [Issue #6810] Create an agency role for legacy certs by @mikehgrantsgov in #6853
• Fix Frontend E2E test failures by @prasnava in #6847
• [Issue #6784] Add new X-API-KEY to seed script by @btabaska in #6787
• [Unticketed] Add additional API linting rules by @chouinar in #6849
• Update Analytics by @renovate[bot] in #6851
• [Issue #6331] Add auto summation to sf424 and sf424a by @chouinar in #6451
• [Issue #6806] Create tcertificate legacy staging tables by @jakobpederson in #6858
• [Issue #6675] Create validation logic to verify an application that requires an org has an org by @mikehgrantsgov in #6865
• setup documentation updates by @ErinPattisonNava in #6840
• [Issue #6785] Add new X-API-KEY to frontend by @btabaska in #6786
• [Issue 6866]: Fix API Vulnerabilities by @prasnava in #6867
• Patch api/Dockerfile to fix step functions failure. by @prasnava in #6873
• [Issue #6649] user invitation response endpoint by @babebe in #6848
• [Issue #6720] consistent newsletter pages by @andycochran in #6845
• [Issue 6877]: Upgrade pip version in Analytics container image to 25.3 by @prasnava in #6878
• [Issue 6882]: Fix s3 permissions issue for the files cloudfront endpoint by @prasnava in #6883
• [Issue #6780] Add a local-only endpoint that returns user info/keys by @chouinar in #6874
• [Issue #6806] Update tcertificate tb name to tcertificates by @jakobpederson in #6884

New Contributors

• @ErinPattisonNava made their first contribution in #6840

Full Changelog: 2025.10.22-1...2025.10.30-1

2025.10.22-1

What's Changed

• fix(form): sf424 department and division info was missing by @myduong-navapbc in #6652
• [Issue #2973]: Update the API docker image to use a custom image by @prasnava in #6703
• [Issue #6747] Add submitted_at and submitted_by to Application table by @mikehgrantsgov in #6747
• [Issue #6538] organization roster table by @doug-s-nava in #6632
• [Issue #6689] Add USE_SIMPLER flag to env variables by @jakobpederson in #6729
• [unticketed] make room for long names and emails in org info by @doug-s-nava in #6750
• [Issue #6656] Set submitted_at and submitted_by during the Submit logic by @mikehgrantsgov in #6752
• [Issue #6121] Update application endpoints access by @babebe in #6715
• [Issue #6396] Support XML Attachment transformations by @mikehgrantsgov in #6712
• Update Analytics by @renovate[bot] in #6722
• [unticketed] fix errors loading organization detail page by @doug-s-nava in #6760
• [Issue #6588] Remove not-started application form status by @chouinar in #6745
• [unticketed]: add null check for Information Card by @myduong-navapbc in #6753
• [Issue #6544]: Missing Field in SF424 by @myduong-navapbc in #6759
• [Issue #6746]: Optimize API docker build to use a cached base image by @prasnava in #6756
• [Issue #6120] get application endpoints access check by @babebe in #6714
• [Issue #6674] authorization gate refactors by @doug-s-nava in #6765
• aws security hub fixes by @sean-navapbc in #6751
• [Issue #6488] Update PUT and GET endpoint to include new sgg_version / is_deprecated / form_type columns by @mikehgrantsgov in #6781
• [Issue #6478] Build Footer XML by @mikehgrantsgov in #6772
• [Issue #6666] Fetch data for simpler GetApplicationZipRequest by @jakobpederson in #6774
• [Issue #6122] update submit application endpoint with user access check by @babebe in #6732
• [Issue #6498] Setup shared schema and related utilities by @chouinar in #6727
• [Issue #6594] Setup applications for users/orgs in our local seed script by @chouinar in #6754
• [Issue #6122] access submit application by @babebe in #6803
• [Issue #6593] Add opportunity information to application list schema by @mikehgrantsgov in #6811
• [Issue #6718] Update admin assignment by @babebe in #6761

New Contributors

• @sean-navapbc made their first contribution in #6751

Full Changelog: 2025.10.15-1...2025.10.22-1