v3.7.0

What's Changed

New Features

• Add Coverage type to GraphQL API by @williamjallen in #2515
• Add GraphQL "contains" filter by @williamjallen in #2517
• Expose Labels via GraphQL API by @williamjallen in #2518
• Add top-level site field to GraphQL API by @williamjallen in #2585

Administration

• Enable SBOM generation for Docker images by @williamjallen in #2547
• Move "Cleanup Database" functionality to new artisan command by @zackgalbreath in #2580
• Demote "No note text for..." log message to debug level by @williamjallen in #2621

Performance

• Improve static asset build process and cache headers by @williamjallen in #2560
• Eliminate unnecessary DELETE statements in removeBuilds() by @zackgalbreath in #2576
• Use more foreign keys for cascading deletions by @zackgalbreath in #2577
• Perform batch deletion of invalid records before applying new foreign keys by @zackgalbreath in #2588
• Use Laravel relationships to remove configure and note rows by @zackgalbreath in #2613
• Replace custom SQL in removeBuilds with Eloquent relationships by @zackgalbreath in #2624

User Experience

• Improve maintenance page UI by @williamjallen in #2519
• Remove unnecessary web scraper directives by @williamjallen in #2561
• Overhaul project sites page by @williamjallen in #2583

Deprecations & Removals

• Remove coveragefile2user table and associated logic by @williamjallen in #2509
• Remove last traces of google analytics tracker by @williamjallen in #2584

Bug Fixes

• Await API load before attempting to render dynamic analysis by @williamjallen in #2544
• docker container dependency condition updated by @stefankaufmann in #2553
• Fix testDetails.php redirect by @williamjallen in #2569
• Ensure configureerror FK types match by @zackgalbreath in #2582
• Improve handling of sites with no information by @williamjallen in #2586
• Fix project sites page pagination by @williamjallen in #2587
• Call cdashmail() from Notification/Email/Mail.php by @zackgalbreath in #2619
• Fix AuthTokenUtil SQL query by @josephsnyder in #2656

Internals

• Lint ignored Vue files by @williamjallen in #2512
• Add subproject2subproject foreign-key constraints by @williamjallen in #2521
• Overhaul Mix build by @williamjallen in #2524
• Clean up Vue build warnings by @williamjallen in #2548
• Bump PHPStan rules to level 9 by @williamjallen in #2551
• Clean up misc. submission handler inconsistencies by @williamjallen in #2557
• Remove legacy logs directory by @williamjallen in #2558
• Remove unused test directory by @williamjallen in #2570
• Add foreign-key constraint to configureerror table by @zackgalbreath in #2574
• Move remove_builds (and related functions) to DatabaseUtils by @zackgalbreath in #2575
• Clean up submission handler public interface by @williamjallen in #2572
• Delete unused uploads directory by @williamjallen in #2573
• Add submission trait to test environment by @williamjallen in #2578
• Rename user table to users by @williamjallen in #2614
• Add Laravel Dusk for e2e browser testing by @williamjallen in #2589
• Refactor notification/email inheritance structure by @williamjallen in #2620
• Add mock email server to development environment by @williamjallen in #2622
• Replace cdashmail() email logging with Laravel event listener by @williamjallen in #2623

Dependencies

• Bump http-proxy-middleware from 2.0.6 to 2.0.7 by @dependabot in #2514
• Bump elliptic from 6.5.7 to 6.6.0 by @dependabot in #2525
• Bump aws/aws-sdk-php from 3.322.8 to 3.325.1 by @dependabot in #2539
• Bump vue from 3.5.10 to 3.5.12 by @dependabot in #2526
• Bump sass-loader from 16.0.2 to 16.0.3 by @dependabot in #2529
• Bump eslint-plugin-vue from 9.28.0 to 9.30.0 by @dependabot in #2527
• Bump daisyui from 4.12.10 to 4.12.14 by @dependabot in #2534
• Bump webpack from 5.95.0 to 5.96.0 by @dependabot in #2530
• Bump tailwindcss from 3.4.13 to 3.4.14 by @dependabot in #2528
• Bump webpack from 5.96.0 to 5.96.1 by @dependabot in #2541
• Bump phpstan/phpstan from 1.12.6 to 1.12.7 by @dependabot in #2540
• Bump sass from 1.79.4 to 1.80.5 by @dependabot in #2532
• Bump lcobucci/jwt from 5.3.0 to 5.4.0 by @dependabot in #2536
• Bump cypress from 13.15.0 to 13.15.1 by @dependabot in #2531
• Bump phpstan/phpstan-strict-rules from 1.6.0 to 1.6.1 by @dependabot in #2538
• Bump larastan/larastan from 2.9.8 to 2.9.9 by @dependabot in #2537
• Bump symfony/process from 6.4.13 to 6.4.14 by @dependabot in #2549
• Bump axios-mock-adapter from 2.0.0 to 2.1.0 by @dependabot in #2533
• Bump symfony/http-foundation from 6.4.13 to 6.4.14 by @dependabot in #2550
• Bump cross-spawn from 7.0.3 to 7.0.6 by @dependabot in #2579
• Bump friendsofphp/php-cs-fixer from 3.64.0 to 3.65.0 by @dependabot in #2593
• Bump sass from 1.80.5 to 1.81.0 by @dependabot in #2609
• Bump @fortawesome/fontawesome-svg-core from 6.6.0 to 6.7.1 by @dependabot in #2610
• Bump @fortawesome/free-regular-svg-icons from 6.6.0 to 6.7.1 by @dependabot in #2604
• Bump tailwindcss from 3.4.14 to 3.4.15 by @dependabot in #2605
• Bump vue from 3.5.12 to 3.5.13 by @dependabot in #2603
• Bump eslint-plugin-vue from 9.30.0 to 9.32.0 by @dependabot in #2602
• Bump postcss from 8.4.47 to 8.4.49 by @dependabot in #2600
• Bump cypress from 13.15.1 to 13.16.0 by @dependabot in #2599
• Bump axios from 1.7.7 to 1.7.8 by @dependabot in #2606
• Bump nuwave/lighthouse from 6.45.0 to 6.45.1 by @dependabot in #2597
• Bump @fortawesome/free-solid-svg-icons from 6.6.0 to 6.7.1 by @dependabot in #2601
• Bump @apollo/client from 3.11.8 to 3.11.10 by @dependabot in #2608
• Bump @fortawesome/free-brands-svg-icons from 6.6.0 to 6.7.1 by @dependabot in #2607
• Bump aws/aws-sdk-php from 3.325.1 to 3.332.0 by @dependabot in #2611
• Bump fakerphp/faker from 1.23.1 to 1.24.1 by @dependabot in #2596
• Bump lcobucci/jwt from 5.4.0 to 5.4.2 by @dependabot in #2591
• Bump laravel/ui from 4.5.2 to 4.6.0 by @dependabot in #2592
• Bump knplabs/github-api from 3.15.0 to 3.16.0 by @dependabot in #2594
• Bump league/commonmark from 2.5.3 to 2.6.0 by @dependabot in #2615
• Bump path-to-regexp and express by @dependabot in #2616
• Bump nanoid from 3.3.7 to 3.3.8 by @dependabot in #2617
• Bump laravel/dusk from 8.2.11 to 8.2.12 by @dependabot in #2643
• Bump axios from 1.7.8 to 1.7.9 by @dependabot in #2631
• Bump cypress from 13.16.0 to 13.17.0 by @dependabot in #2630
• Bump @fortawesome/free-brands-svg-icons from 6.7.1 to 6.7.2 by @dependabot in #2632
• Bump graphql from 16.9.0 to 16.10.0 by @dependabot in #2638
• Bump sass from 1.81.0 to 1.83.0 by @dependabot in #2636
• Bump tailwindcss from 3.4.15 to 3.4.17 by @dependabot in #2626
• Bump @apollo/client from 3.11.10 to 3.12.4 by @dependabot in #2634
• Bump daisyui from 4.12.14 to 4.12.23 by @dependabot in #2637
• Bump webpack from 5.96.1 to 5.97.1 by @dependabot in #2633
• Bump nuwave/lighthouse from 6.45.1 to 6.47.0 by @dependabot in #2641
• Bump @fortawesome/free-solid-svg-icons from 6.7.1 to 6.7.2 by @dependabot in #2627
• Bump sass-loader from 16.0.3 to 16.0.4 by @dependabot in #2628
• Bump aws/aws-sdk-php from 3.332.0 to 3.336.6 by @dependabot in #2642
• Bump @fortawesome/fontawesome-svg-core from 6.7.1 to 6.7.2 by @dependabot in #2635
• Bump laravel/socialite from 5.16.0 to 5.16.1 by @dependabot in #2640
• Bump @fortawesome/free-regular-svg-icons from 6.7.1 to 6.7.2 by @dependabot in #2629
• Bump friendsofphp/php-cs-fixer from 3.65.0 to 3.66.0 by @dependabot in #2639

Full Changelog: v3.6.2...v3.7.0