CHANGELOG.md

CHANGELOG

Inspired from Keep a Changelog

[Unreleased]

💥 Breaking Changes

Deprecations

🛡 Security

• [CVE-2022-25869] Remove AngularJS 1.8 (#5086)
• [CVE-2022-37599] Bump loader-utils from 2.0.3 to 2.0.4 (#3031). Backwards-compatible fixes included in v2.6.0 and v1.3.7 releases.
• [CVE-2022-37603] Bump loader-utils from 2.0.3 to 2.0.4 (#3031). Backwards-compatible fixes included in v2.6.0 and v1.3.7 releases.
• [WS-2021-0638] Bump mocha from 7.2.0 to 10.1.0 (#2711)
• [CVE-2023-26115] Bump word-wrap from 1.2.3 to 1.2.4 (#4589)
• Bump node-sass to a version that uses a newer libsass (#4649)
• [CVE-2019-11358] Bump version of tinygradient from 0.4.3 to 1.1.5 (#4742)
• [CVE-2021-3520] Bump lmdb from 2.8.0 to 2.8.5 (#4804)
• Remove examples and other unwanted artifacts from installed dependencies (#4896)
• Add support for TLS v1.3 (#5133)
• [CVE-2023-45133] Add package resolution for @babel/traverse to 7.23.2 to fix vulnerability (#5309)
• [CVE-2023-45133] Bump all babel dependencies from 7.16.x to 7.22.9 to fix upstream vulnerability (#5428)
• [CVE-2023-46234] Bump eslint-import-resolver-webpack from 0.11.1 to 0.13.8 and browserify-sign from 4.2.1 to 4.2.2 (#5414)

📈 Features/Enhancements

• Enable theme-switching via Advanced Settings to preview the Next theme (#4475)
• Optimize augment-vis saved obj searching by adding arg to saved obj client (#4595)
• Add resource ID filtering in fetch augment-vis obj queries (#4608)
• Reduce the amount of comments in compiled CSS (#4648)
• [Saved Object Service] Customize saved objects service status (#4696)
• Remove minimum constraint on opensearch hosts to allow empty host (#4701)
• [Discover] Update styles to compatible with OUI next theme (#4644)
• [Home] Add modal to introduce the next theme (#4715)
• [Home] Add new theme sample dashboard screenshots (#4906)
• Remove visualization editor sidebar background (#4719)
• [Vis Colors] Remove customized colors from sample visualizations and dashboards (#4741)
• [Vis Colors] Update color mapper to prioritize unique colors per visualization rather than across entire dashboard (#4890)
• [Decouple] Allow plugin manifest config to define semver compatible OpenSearch plugin and verify if it is installed on the cluster(#4612)
• [Advanced Settings] Consolidate settings into new "Appearance" category and add category IDs (#4845)
• Adds Data explorer framework and implements Discover using it (#4806)
• [Theme] Use themes' definitions to render the initial view (#4936)
• [Theme] Make next theme the default (#4854)
• [Discover] Update embeddable for saved searches (#5081)
• Add support for read-only mode through tenants (#4498)
• [Workspace] Add core workspace service module to enable the implementation of workspace features within OSD plugins (#5092)
• [Workspace] Setup workspace skeleton and implement basic CRUD API (#5075)
• [Decouple] Add new cross compatibility check core service which export functionality for plugins to verify if their OpenSearch plugin counterpart is installed on the cluster or has incompatible version to configure the plugin behavior(#4710)
• [Discover] Display inner properties in the left navigation bar #5429

🐛 Bug Fixes

• [Chore] Update deprecated url methods (url.parse(), url.format()) (#2910)
• Cleanup unused url (#3847)
• Fix Node.js download link (#4556)
• [TSVB, Dashboards] Fix inconsistent dark mode code editor themes (#4609)
• [Table Visualization] Fix width of multiple tables when rendered in column view (#4638)
• [Legacy Maps] Fix dark mode style overrides (#4658)
• Fix management overview page duplicate rendering (#4636)
• Bump agentkeepalive to v4.5.0 to solve a problem preventing the use https://ip in opensearch.hosts (#4949)
• [Table Vis] Fix filter actions on data table vis cells (#4837)
• Fix broken app when management is turned off (#4891)
• Correct the generated path for downloading plugins by their names on Windows (#4953)
• Fix maps.proxyOpenSearchMapsServiceInMaps config definition so it can be set (#5170)
• Fix buildPointSeriesData unit test fails due to local timezone (#4992)
• [Data Explorer][Discover] Fix total hits issue for no time based data (#5087)
• [Data Explorer][Discover] Add onQuerySubmit to top nav and allow force update to embeddable (#5160)
• [Discover] Fix misc navigation issues (#5168)
• [Discover] Fix mobile view (#5168)
• Fix visAugmenter forming empty key-value pairs in its calls to the SavedObject API (#5190)
• Fix errors in conditions for activating vizAugmenter (#5213)
• [Data Explorer][Discover] Automatically load solo added default index pattern (#5171)
• [Data Explorer][Discover] Allow data grid to auto adjust size based on fetched data count (#5191)
• [BUG] Fix wrong test due to time conversion (#5174)
• [BUG][Data Explorer][Discover] Allow filter and query persist when refresh page or paste url to a new tab (#5206)
• [Data Explorer] Remove the X icon in data source selection field (#5238)
• [BUG][Fuctional Test] Make setDefaultAbsoluteRange more robust and update doc views tests (#5242)
• [BUG] Add platform "darwin-arm64" to unit test (#5290)
• [BUG][Dev Tool] Add dev tool documentation link to dev tool's help menu #5166
• Fix navigation issue across dashboards (#5435)
• [Discover] Fix table panel auto-sizing (#5441)
• Fix missing border for header navigation control on right (#5450)

🚞 Infrastructure

• Re-enable CI workflows for feature branches (#2908)
• Upgrade yarn version to be compatible with @opensearch-project/opensearch (#3443)
• Add an achievement badger to the PR (#3721)
• [CI] Enable inputs for manually triggered Cypress test jobs (#5134)
• [CI] Add NODE_OPTIONS and disable disk allocation threshold (#5172)
• [CI] Supprt CI Groups for Cypress test jobs (#5298)
• [CI] Replace usage of deprecated set-output in workflows (#5340)
• [CI][Test] Add plugin functional tests on GitHub Actions (#5383)

📝 Documentation

• [Doc] Add COMMUNICATIONS.md with info about Slack, forum, office hours (#3837)
• Add plugin development section in DEVELOPER_GUIDE.md (#3989)
• [Vis Augmenter] Add documentation to vis_augmenter plugin (#4527)
• Remove ftr test step from PR template (#5217)
• [Doc] Update EUI doc site links to point to OUI doc site (#5293)

🛠 Maintenance

• Remove angular html extractor (#4680)
• Removes minimatch manual resolution (#3019)
• Upgrade vega-lite dependency from 4.17.0 to ^5.6.0 (#3076). Backwards-compatible version included in v2.5.0 release.
• Bump js-yaml from 3.14.0 to 4.1.0 (#3770)
• [@osd/pm] Automate multi-target bootstrap and build (#4650)
• Update webpack environment targets (#4649)
• Add @curq as maintainer (#4760)
• Bump oui to 1.3.0 (#4941)
• Replace node-sass with sass-embedded (#5338)
• Add @bandinib-amzn as maintainer (#5113)
• Add @bandinib-amzn to CODEOWNERS file. (#5456)
• Bump chromedriver from 107.0.3 to 119.0.1 (#5465)

🪛 Refactoring

• [Console] Remove unused ul element and its custom styling (#3993)
• Fix EUI/OUI type errors (#3798)
• Remove unused Sass in tile_map plugin (#4110)
• [Maps Legacy] Removed KUI usage in maps_legacy plugin(#3998)
• [Markdown] Replace custom CSS styles and HTML markup with OUI components (#4390)
• [Vis Colors] [VisLib] Update legend colors to use OUI color palette (#4365)
• [Vis colors] Update legacy mapped colors in charts plugin to use ouiPaletteColorBlind(), Update default color in legacy visualizations to use ouiPaletteColorBlind()[0] (#4398)
• [Saved Objects Management] Add new or remove extra tags and styles (#4069)
• [Console] Migrate /lib/autocomplete/ module to TypeScript (#4148)
• [Console] Migrate /lib/!autocomplete/ module to TypeScript (#4150)
• [Dashboard] Restructure the Dashboard plugin folder to be more cohesive with the project (#4575)
• Refactor logo usage to centralize and optimize assets and improve tests (#4702)
• [Home] Remove unused tutorials (#5212)

🔩 Tests

• [Tests] Add BWC tests for 2.9 and 2.10 (#4762)
• [Tests-refactor] Remove angular code from plugin_functional and update tests (#5221)

1.3.12 - 2023-08-10

🛡 Security

• [CVE-2021-23382] Bump postcss from 8.2.10 to 8.4.24 (#4403)
• Bump joi to v14 to avoid the possibility of prototype poisoning in a nested dependency (#3952)
• [WS-2018-0347] Bump sass-lint from 1.12.1 to 1.13.0 to fix eslint security issue (#4338)
• [CVE-2022-25883] Resolve semver to 7.5.3 and remove unused package (#4411, #4686)
• [CVE-2022-1537] Bump grunt from 1.4.1 to 1.5.3 (#3723)
• [CVE-2022-0436] Bump grunt from 1.4.1 to 1.5.3 (#3723)
• [CVE-2023-26136] Resolve tough-cookie to 4.1.3 (#4682)

📈 Features/Enhancements

🐛 Bug Fixes

🚞 Infrastructure

📝 Documentation

🛠 Maintenance

• Adding @ZilongX and @Flyingliuhub as maintainers. (#4137)
• Add new MAINTAINERS to CODEOWNERS file. (#4199)
• Adding @BSFishy as maintainer. (#4469)
• [Version] Increment version to 1.3.12 (#4656)

2.9.0 - 2023-07-24

🛡 Security

• Bump joi to v14 to avoid the possibility of prototype poisoning in a nested dependency (#3952)
• [CVE-2022-25883] Resolve semver to 7.5.3 and remove unused package (#4411)
• Bump tough-cookie from 4.0.0 to 4.1.3 (#4531)

📈 Features/Enhancements

• Add plugin manifest config to define OpenSearch plugin dependency and verify if it is installed on the cluster (#3116)
• Replace re2 with RegExp in timeline and add unit tests (#3908)
• Hide any output from use_node checking for Node compatibility (#4237)
• Add category option within groups for context menus (#4144)
• [Saved Object Service] Add Repository Factory Provider (#4149)
• [Sample Data] Add visual consistency dashboard to sample logs data (#4339, #4619)
• [@osd/pm] Fix file:-linked dependencies' resolution to improve ability to test with local packages (#4342)
• [Multiple DataSource] Backend support for adding sample data (#4268)
• Add configurable defaults and overrides to uiSettings (#4344)
• Update header logo selection logic to match the header's theme (#4383)
• Introduce new fonts for the Next theme (#4381)
• Bump OUI to 1.1.2 to make anomalyDetection icon available (#4408)
• Add color-scheme to the root styling (#4477)
• [Multiple DataSource] Frontend support for adding sample data (#4412)
• Enable plugins to augment visualizations with additional data and context (#4361)
• Dashboard De-Angularization (#4502)
• New management overview page and rename stack management to dashboard management (#4287)
• [Console] Add support for JSON with long numerals (#4562)
• [Vis Augmenter] Update base vis height in view events flyout (#4535)
• [Dashboard De-Angular] Add more unit tests for utils folder (#4641)
• [Dashboard De-Angular] Add unit tests for dashboard_listing and dashboard_top_nav (#4640)

🐛 Bug Fixes

• [Chore] Update deprecated url methods (url.parse(), url.format()) (#2910)
• Cleanup unused url (#3847)
• Fix i18n generation scripts (#4252)
• [Saved Objects Management] Fix relationships header overflow (#4070)
• Update main menu to display 'Dashboards' for consistency (#4453)
• [Multiple DataSource] Retain the original sample data API (#4526)
• Remove lmdb-store to fix backport issue (#4266)

🚞 Infrastructure

• Upgrade the backport workflow (#4343)
• [Lint] Add custom stylelint rules and config to prevent unintended style overrides (#4290)
• [Lint] Add stylelint rule to define properties that are restricted from being used (#4374)
• [Lint] Add stylelint rule to define values that are restricted from being used (#4413)
• [Lint] Add typing to Stylelint rules (#4392)
• [CI] Split build and verify into parallel jobs (#4467)

📝 Documentation

• [Saved Object Service] Adds design doc for new Saved Object Service Interface for Custom Repository #3954

🛠 Maintenance

• Adding @ZilongX and @Flyingliuhub as maintainers. (#4137)
• Add new MAINTAINERS to CODEOWNERS file. (#4199)
• Adding @BSFishy as maintainer. (#4469)

🪛 Refactoring

• [Table Visualization] Remove custom styling for text-align:center in favor of OUI utility class. (#4164)
• [Table Visualization] Replace div containers with OuiFlex components (#4272)
• Migrate from legacy elasticsearch client to opensearch-js client in osd-opensearch-archiver package(#4142)
• Replace the use of bluebird in saved_objects plugin (#4026)
• Relocate tutorials imagery into src/plugins/home/public/assets/tutorials/logos (#4382)
• [VisBuilder] Use OUI icon (#4446)
• [Vis Colors] [Region Maps] Replace hardcode color to OUI color in region_map plugin (#4299)
• [Vis Colors] Replace color maps with OUI color palettes (#4293)
• [Vis Colors] [Maps] Replace hardcoded color to OUI color in maps_legacy plugin (#4294)
• [Vis Colors] [TSVB] Update default color in vis_type_timeseries to use ouiPaletteColorBlind()[0](#4363)
• [Vis Colors] [Timeline] Replace vis_type_timeline colors with ouiPaletteColorBlind() (#4366)
• [Vis Colors] Update legacy seed colors to use ouiPaletteColorBlind() (#4348)
• [Console] Migrate /lib/mappings/ module to TypeScript (#4008)
• [Console] Migrate /lib/autocomplete/ module to TypeScript (#4148)
• [Dashboard] Restructure the Dashboard plugin folder to be more cohesive with the project (#4575)
• [Chrome] Remove breadcrumb style overrrides (#4621)
• Replace tinymath with math.js (#4492)

🔩 Tests

• [Vis Augmenter Add UT for few fns (#4516)
• [BWC Tests] Add BWC tests for 2.7.0 and 2.8.0 (#4023)

1.3.11 - 2023-06-29

🛡 Security

• [CVE-2022-1537] Bump grunt from 1.5.2 to 1.5.3 (#4276)
• [CVE-2020-15366] Bump ajv from 4.11.8 to 6.12.6 (#3769)

📈 Features/Enhancements

🐛 Bug Fixes

🚞 Infrastructure

• Upgrade the backport workflow (#4343)

📝 Documentation

🛠 Maintenance

2.8.0 - 2023-06-06

Deprecations

• Remove timeline application (#3971)

🛡 Security

• [CVE-2023-2251] Bump yaml to 2.2.2 (#3947)

📈 Features/Enhancements

• [Multiple Datasource] Support Amazon OpenSearch Serverless (#3957)
• Add support for Node.js >=14.20.1 <19 (#4071)
• Bundle Node.js 14 as a fallback for operating systems that cannot run Node.js 18 (#4151)
• Enhance grouping for context menus (#3924)

🐛 Bug Fixes

• [BUG] Fix bottom bar visibility using createPortal (#3978)
• [Dashboards Listing] Fix listing limit to utilize savedObjects:listingLimit instead of savedObjects:perPage (#4021)

🚞 Infrastructure

• Install chrome driver for functional tests from path set by environment variable TEST_BROWSER_BINARY_PATH(#3997)
• Add threshold to code coverage config to prevent workflow failures (#4040)
• [CI] Skip checksum verification on OpenSearch snapshot for cypress tests (#4188)

📝 Documentation

🛠 Maintenance

• Use exec in the CLI shell scripts to prevent new process creation (#3955)

🪛 Refactoring

🔩 Tests

1.3.10 - 2023-05-18

🛡 Security

• [CVE-2020-15366][1.x] Bump ajv from 4.11.8 to 6.12.6 (#4035)
• [CVE-2022-48285][1.x] Bump jszip from 3.7.1 to 3.10.1 (#4011)
• [CVE-2021-35065][1.x] Bump glob-parent from 6.0.0 to 6.0.2 (#4005)
• [CVE-2022-25851][1.x] Bump jpeg-js from 0.4.1 to 0.4.4 (#3860)
• [CVE-2022-25858][1.x] Bump terser from 4.8.0 to 4.8.1 (#3786)
• [CVE-2021-23490][1.x] Bump parse-link-header from 1.0.1 to 2.0.0 (#3820)
• [CVE-2021-3765][1.x] Bump validator from 8.2.0 to 13.9.0 (#3753)
• [CVE-2022-25758][1.x] Bump scss-tokenizer from 0.3.0 to 0.4.3 (#3789)
• [CVE-2021-3803][1.x] Bump nth-check from 1.0.2 to 2.0.1 (#3745)
• Bump highlight.js from 9.18.5 to 10.7.3 to solve security concerns （#4062)

📈 Features/Enhancements

• Add tooltip to help icon (#3872)

🐛 Bug Fixes

📝 Documentation

• Update jest documentation links (#3939)

🛠 Maintenance

• Add threshold to code coverage changes for project (#4050)
• Temporarily hardcode chromedriver to 112.0.0 to enable all ftr tests (#4039)
• Update MAINTAINERS.md and CODEOWNERS (#3938)
• Add opensearch-dashboards-docker-dev to .gitignore (#3781)

🪛 Refactoring

🔩 Tests

2.7.0 - 2023-05-02

Deprecations

🛡 Security

• [CVE-2023-26486] Bump vega from 5.22.1 to 5.23.0 (#3533)
• [CVE-2023-26487] Bump vega from 5.22.1 to 5.23.0 (#3533)
• [CVE-2023-0842] Bump xml2js from 0.4.23 to 0.5.0 (#3842)
• [Multi DataSource] Add private IP blocking validation on server side (#3912)

📈 Features/Enhancements

• Add satisfaction survey link to help menu (#3676)
• Add osd-xsrf header to all requests that incorrectly used node-version to satisfy XSRF protection (#3643)
• [Dashboard] Add Dashboards-list integrations for Plugins (#3090 )
• [Data] Add geo shape filter field (#3605)
• [Doc Links] Add downgrade logic for branch in DocLinkService (#3483)
• [Monaco editor] Add json worker support (#3424)
• [Multiple DataSource] Allow create and distinguish index pattern with same name but from different datasources (#3604)
• [Multiple DataSource] Integrate multiple datasource with dev tool console (#3754)
• [Navigation] Remove unused tags (#3964)
• [Notifications] Add id to toast api for deduplication (#3752)
• [UI] Add support for comma delimiters in the global filter bar (#3686)
• [UI] Indicate that IE is no longer supported (#3641)
• [Vega] Add Filter custom label for opensearchDashboardsAddFilter (#3640)
• [VisBuilder] Add metric to metric, bucket to bucket aggregation persistence (#3495)
• [VisBuilder] Add UI actions handler (#3732)
• [VisBuilder] Add persistence to visualizations inner state (#3751)
• [Console] Add support for exporting and restoring commands in Dev Tools (#3810)

🐛 Bug Fixes

• Clean up and rebuild @osd/pm (#3570)
• Omit adding the osd-version header when the Fetch request is to an external origin (#3643)
• [Console] Fix/update documentation links in Dev Tools console (#3724)
• [Console] Fix dev tool console autocomplete not loading issue (#3775)
• [Console] Fix dev tool console run command with query parameter error (#3813)
• [Table Visualization] Fix table rendering empty unused space (#3797)
• [Table Visualization] Fix data table not adjusting height on the initial load (#3816)
• [Timeline] Fix y-axis label color in dark mode (#3698)
• [TSVB] Fix undefined serial diff aggregation documentation link (#3503)
• [UI] Add clarifying tooltips to header navigation icons (#3626)
• [VisBuilder] Fix multiple warnings thrown on page load (#3732)
• [VisBuilder] Fix Firefox legend selection issue (#3732)
• [VisBuilder] Fix type errors (#3732)
• [VisBuilder] Fix indexpattern selection in filter bar (#3751)

🚞 Infrastructure

• Use mirrors to download Node.js binaries to escape sporadic 404 errors (#3619)
• [CI] Update NOTICE file, add validation to GitHub CI (#3051)
• [CI] Reduce redundancy by using matrix strategy on Windows and Linux workflows (#3514)
• [Darwin] Add support for Darwin for running OpenSearch snapshots with yarn opensearch snapshot (#3537)

📝 Documentation

• Correct copyright date range of NOTICE file and notice generator (#3308)
• Simplify the in-code instructions for upgrading re2 (#3328)
• [Doc] Improve DEVELOPER_GUIDE to make first time setup quicker and easier (#3421)
• [Doc] Update DEVELOPER_GUIDE with added manual bootstrap timeout solution and max virtual memory error solution with docker (#3764)
• [Doc] Add second command to install yarn step in DEVELOPER_GUIDE (#3633)
• [Doc] Add docker dev set up instruction (#3444)
• [Doc] Add docker files and instructions for debugging Selenium functional tests (#3747)
• [Doc] Update SECURITY with instructions for nested dependencies and backporting (#3497)
• [TSVB] Fix typo in TSVB README (#3518)
• [UI Actions] Improve UI actions explorer (#3614)

🛠 Maintenance

• Relax the Node.js requirement to ^14.20.1 (#3463)
• Bump the version of Node.js installed by nvm to 14.21.3 (#3463)
• Allow selecting the Node.js binary using NODE_HOME and OSD_NODE_HOME (#3508)
• Remove the unused renovate.json5 file (#3489)
• Bump styled-components from 5.3.5 to 5.3.9 (#3678)
• [Timeline] Update default expressions from .es(*) to .opensearch(*). (#2720)

🪛 Refactoring

• Remove automatic addition of osd-version header to requests outside of OpenSearch Dashboards (#3643)
• [Console] Replace jQuery usage in console plugin with native methods (#3733)
• [Doc Links] Clean up docs_link_service organization so that strings are in the right categories. (#3685)
• [I18n] Fix Listr type errors and error handlers (#3629)
• [Multiple DataSource] Refactor dev tool console to use opensearch-js client to send requests (#3544)
• [Multiple DataSource] Present the authentication type choices in a drop-down (#3693)
• [Table Visualization] Move format table, consolidate types and add unit tests (#3397)

🔩 Tests

• Update caniuse to 1.0.30001460 to fix failed integration tests (#3538)
• [Tests] Fix unit tests for get_keystore (#3854)
• [BWC Tests] Add BWC tests for 2.7.0 and 2.8.0 (#4023)

1.3.9 - 2023-04-04

🛡 Security

• [CVE-2022-2499] Resolve qs from 6.5.2 and 6.7.0 to 6.11.0 in 1.x (#3451)
• [CVE-2020-36632] [REQUIRES PLUGIN VALIDATION] Bump flat from 4.1.1 to 5.0.2 (#3539). To the best of our knowledge, this is a non-breaking change, but if your plugin relies on mocha tests, validate that they still work correctly (and plan to migrate them to jest in preparation for mocha deprecation.
• [CVE-2023-25653] Bump node-jose to 2.2.0 (#3445)
• [CVE-2021-23807] Bump jsonpointer from 4.1.0 to 5.0.1 (#3535)
• [CVE-2021-23424] Bump ansi-html from 0.0.7 to 0.0.8 (#3536)
• [CVE-2022-24999] Bump express from 4.17.1 to 4.18.2 (#3542)

📈 Features/Enhancements

• [I18n] Register ru, ru-RU locale (#2817)

🐛 Bug Fixes

• [TSVB] Fix the link to "serial differencing aggregation" documentation (#3503)

📝 Documentation

• [TSVB] Fix a spelling error in the README file (#3518)
• Simplify the in-code instructions for upgrading re2 (#3328)
• [Doc] Improve DEVELOPER_GUIDE to make first time setup quicker and easier (#3421)

🛠 Maintenance

• Update MAINTAINERS.md formatting and maintainer list (#3338)
• Remove github-checks-reporter, an unused dependency (#3126)
• [Version] Increment to 1.3.9 (#3375)
• Remove the unused renovate.json5 file (3489)

2.6.0 - 2023-02-28

Deprecations

• [CVE-2020-36632] [REQUIRES PLUGIN VALIDATION] Bump flat from 4.1.1 to 5.0.2 (#3419). To the best of our knowledge, this is a non-breaking change, but if your plugin relies on mocha tests, validate that they still work correctly (and plan to migrate them to jest in preparation for mocha deprecation.

🛡 Security

• [CVE-2022-37599] Bump loader-utils from 2.0.3 to 2.0.4 (#3318)
• [CVE-2022-37603] Bump loader-utils from 2.0.3 to 2.0.4 (#3318)
• [CVE-2022-25860] Bump simple-git from 3.15.1 to 3.16.0 (#3345)
• [CVE-2022-25881] Resolve http-cache-semantics from 4.1.0 to 4.1.1 (#3409)
• [Security] Bump hapi/statehood from 7.0.3 to 7.0.4 (#3411)
• [CVE-2023-25166] Bump formula from 3.0.0 to 3.0.1 (#3416)
• [CVE-2020-36632] [REQUIRES PLUGIN VALIDATION] Bump flat from 4.1.1 to 5.0.2 (#3419). To the best of our knowledge, this is a non-breaking change, but if your plugin relies on mocha tests, validate that they still work correctly (and plan to migrate them to jest in preparation for mocha deprecation.
• [CVE-2023-25653] Bump node-jose from 2.1.1 to 2.2.0 (#3445)
• [CVE-2022-24999] Resolve qs from 6.5.3 to 6.11.0 (#3450)
• [CVE-2022-25758] Bump node-sass from 6.0.1 to 7.0.3 and sass-loader from 10.2.1 to 10.4.1 to bump scss-tokenizer from 0.2.3 to 0.4.3 (#3455)
• [CVE-2020-24025] Bump node-sass from 6.0.1 to 7.0.3 (#3455)

📈 Features/Enhancements

• Add disablePrototypePoisoningProtection configuration to prevent JS client from erroring when cluster utilizes JS reserved words (#2992)
• [Multiple DataSource] Add support for SigV4 authentication (#3058)
• [Multiple DataSource] Refactor test connection to support SigV4 auth type (#3456)

🐛 Bug Fixes

• [Search Telemetry] Fix search telemetry's observable object that won't be GC-ed(#3390)
• [Region Maps] Add ui setting to configure custom vector map's size parameter(#3399)

🚞 Infrastructure

• Fix detection of Chrome's version on Darwin during CI (#3296)

📝 Documentation

• [Docs] Fix documentation link for date math (#3207)

🛠 Maintenance

• Bump re2 and supertest (#3018)
• Upgrade vega-tooltip to 0.30.0 to support custom tooltips (#3359)
• Allow relaxing the Node.js runtime version requirement (#3402)
• Make build scripts find and use the latest version of Node.js that satisfies engines.node (#3467)
• Add @opensearch-project/opensearch@^2.x as dependency aliased as @opensearch-project/opensearch-next (#3469)

🪛 Refactoring

🔩 Tests

• [BWC Tests] Add BWC tests for 2.6.0 (#3356)
• Prevent primitive linting limitations from being applied to unit tests found under src/setup_node_env (#3403)

1.3.8 - 2023-02-15

🛡 Security

• [CVE-2022-25901] Bump supertest from 2.0.5 to 2.0.12 (#3326)
• [CVE-2022-25860] Bump simple-git from 3.15.1 to 3.16.0 (#3345)
• [CVE-2022-46175] Bump json5 version from 1.0.1 and 2.2.1 to 1.0.2 and 2.2.3 (#3201)
• [CVE-2022-25912] Bump simple-git from 3.4.0 to 3.15.0 (#3036)
• Bump decode-uri-component from 0.2.0 to 0.2.2 (#3009)

🐛 Bug Fixes

• [BUG] Fixes misleading embeddable plugin error message (#3043)
• [BUG] Trim trailing slashes before checking no-restricted-path rule (#3020)

🚞 Infrastructure

• Lock workflow tests to Chrome and ChromeDriver 107 as the last combination that run on Node.js v10 (#3299)
• Update yarn timeout for GitHub workflow on Windows (#3118)
• Add Windows CI to the GitHub workflow (#2966)

📝 Documentation

• Fix documentation link for date math (#3207)

🔩 Tests

• [BWC] Updates to BWC tests (#1190)
• Automates chromedriver version selection for tests (#2990)

2.5.0 - 2023-01-25

🛡 Security

• Introduce guidelines for reporting vulnerable dependencies (#2674)
• Bump decode-uri-component from 0.2.0 to 0.2.2 (3009)
• [CVE-2022-25912] Bump simple-git from 3.4.0 to 3.15.0 (#3036)
• [CVE-2022-35256] Bump node version from 14.20.0 to 14.20.1 #3166)
• [CVE-2022-46175] Bump json5 version from 1.0.1 and 2.2.1 to 1.0.2 and 2.2.3 (#3201)

📈 Features/Enhancements

• [CLI] Enhance yarn opensearch snapshot to facilitate installing plugins on an OpenSearch cluster (#2734)
• [I18n] Register ru, ru-RU locale (#2817)
• [Multi DataSource] Introduce validation of new or modified connections to external data sources (#2973, #3110)
• [VisBuilder] Create global data persistence for VisBuilder (#2896)
• [VisBuilder] Introduce Redux store persistence (#3088)
• [VisBuilder] Enable persistence for app filter and query without using state containers (#3100)
• [Data] Make the newly created configurations get added to beginning of the aggConfig array when using createAggConfig (#3160)
• [Optimizer] Increase the amount of time an optimizer worker is provided to exit before throwing an error (#3193)

🐛 Bug Fixes

• Upgrade the del library to fix a race condition on macOS (#2847)
• [Table Visualization] Fix a problem with table visualizations that prevented URLs from being rendered correctly (#2918)
• [Embeddable] Fix a misleading error message (#3043)
• Fix rendering issues when the obsolete v8 (beta) theme was carried over by an upgrade (#3045)
• [Multi Datasource] Replace the mock URL in tests (#3099)
• [CI] Increase Yarn's timeout for installing dependencies in workflows (#3118)
• [VisBuilder] Fix an issue that caused a crash when certain filters were added to a table visualization (#3210)
• [VisBuilder] Fix errors throws when pipeline aggregations, like cumulative sum, were used in VisBuilder (#3137)
• [Region Maps] Fix the problem of join fields being unusable (#3213)
• [Multi DataSource] Update test connection button text (#3247)

🚞 Infrastructure

• Bump the version of the 2.x branch to 2.5.0 (#2884)
• [CI] Create workflows that test and build on Windows (#2966)
• [CI] Automate ChromeDriver installation for running functional tests (#2990)
• Create the Release Notes for the 1.3.7 release (#3066)
• [CI] Improve workflows by retaining Yarn's cache folder (#3194)

📝 Documentation

• Publish the release runbook (#2533)
• Document the capabilities of the Charts plugin and its current usage (#2695)
• Document the correct version selection switch in @osd/plugin-helpers (#2810)
• Document the global query persistence (#3001)
• Document data persistence for plugins (#3081)

🪛 Refactoring

• [VisBuilder] Extend the use of i18n (#2867)
• [Console] Switch to using core.http when calling OSD APIs in console (#3080)
• [Table Visualization] Refactor table visualization using React and DataGrid component (#2863)

🛠 Maintenance

• Remove an unused dependency on github-checks-reporter (#3126)
• Introduce vega-lite@5, aliased as vega-lite-next (#3151)

🔩 Tests

• Enable retrying of flaky tests (#2967)
• Enhance cross-platform testing of plugin installation on cluster snapshots (#2994)
• [Tests] Bump chromedriver to v107 (#3017)
• [CI] Disable the execution of the Build and Test workflow when the changes are limited to the docs folder (#3197)
• Correct the linting logic for no-restricted-path to ignore trailing slashes (#3020)
• [VisBuilder] Create unit tests for field utilities (#3211)

2.4.1 - 2022-12-14

🐛 Bug Fixes

• Update leaflet-vega and fixed its usage (#3005)

🔩 Tests

• Correct the linting logic for no-restricted-path to ignore trailing slashes (#3020)

1.3.7 - 2022-12-14

🛡 Security

• [CVE-2022-0144] Bump shelljs from 0.8.4 to 0.8.5 (#2511)
• [Legacy Maps Plugin] Prevent reverse-tabnabbing (#2540)
• [CVE-2022-3517] Bump minimatch from 3.0.4 to 3.0.5 and [IBM X-Force ID: 220063] unset-value from 1.0.1 to 2.0.1 (#2640)
• [CVE-2022-0155] Bump follow-redirects to 1.15.2 (#2653)
• [CVE-2022-0536] Bump follow-redirects to 1.15.2 (#2653)
• [CVE-2021-24033] Remove storybook package (#2660)
• [CVE-2021-42740] Remove storybook package (#2660)
• [CVE-2022-23647] Bump prismjs to 1.29.0 (#2668)
• [CVE-2022-37599] Bump loader-utils to 2.0.4 (#2995)
• [CVE-2022-37603] Bump loader-utils to 2.0.4 (#2995)

📈 Features/Enhancements

• [Windows] Facilitate building and running OSD and plugins on Windows platforms (#2601)
• [Windows] Add helper functions to work around the differences of platforms (#2681)
• [Windows] Add @osd/cross-platform package to standardize path handling across platforms (#2703)

🐛 Bug Fixes

• [Chore] Visualize link fix #2395
• [BUG] Fix suggestion list cutoff issue (#2607)
• Remove Leftover X Pack references (#2638)
• Bump del version to fix MacOS race condition (#2847)
• Temporary workaround for task-kill exceptions on Windows when it is passed a pid for a process that is already dead (#2842)
• [Build] Fixed "Last Access Time" not being set by scanCopy on Windows (#2964)
• Update leaflet-vega and fix its usage (#3005)

🚞 Infrastructure

• Update backport custom branch name to utilize head template (#2766)

📝 Documentation

• Add the release runbook to RELEASING.md (#2533)
• Security-CVEs fixes guidelines #2674
• Correct README and help command of osd-plugin-helpers (#2810)

🛠 Maintenance

• Increment version to 1.3.7 #2528

🔩 Tests

• Bump chromedriver to 106 to fix function test fail issue #2514
• Fix incorrect validation of time values in JUnit Reporter (#2965)

2.4.0 - 2022-11-15

🛡 Security

• Bump percy-agent to use non-beta version (#2415)
• Use a forced CSP-compliant interpreter with Vega visualizations (#2352)
• [CVE-2022-33987] Bump makelogs to remove dependency on got (#2801)
• [CVE-2022-33987] Upgrade geckodriver to 3.0.2 (#2166)
• [CVE-2022-3517] Bump minimatch to 3.0.5 and [IBM X-Force ID: 220063] unset-value to 2.0.1 (#2640)
• [CVE-2022-37601] Bump loader-utils to 2.0.3 (#2706)
• [GMS-2022-4708] Resolve sub-dependent d3-color version and potential security issue (#2454)
• [Legacy Maps] Prevent reverse-tabnabbing (#2540)
• [WS-2022-0284] [WS-2022-0280] Bump moment-timezone from 0.5.34 to 0.5.37 (#2361)
• [Multi DataSource] Prevent spell-checking the password fields (#2818)

📈 Features/Enhancements

• Add DataSource service and DataSourceSelector for multiple datasource support (#5167)
• Add extension point in saved object management to register namespaces and show filter (#2656)
• Add updated_at column to Saved Objects' tables (#1218)
• Change the links in the visualize plugin to use href rather than onClick (#2395)
• Improve Discover field summaries (#2391)
• Remove Add Integration button (#2723)
• [Multi DataSource] Add data source column into index pattern table (#2542)
• [Multi DataSource] Add data source config to opensearch-dashboards-docker (#2557)
• [Multi DataSource] Add data source signing support (#2510)
• [Multi DataSource] Add experimental callout for index pattern section (#2523)
• [Multi DataSource] Address UX comments on Data source list and create page (#2625)
• [Multi DataSource] Apply get indices error handling in step index pattern (#2652)
• [Multi DataSource] Display error toast for create index pattern with data source (#2506)
• [Multi DataSource] Make text content dynamically translated & update unit tests (#2570)
• [Multi DataSource] Support legacy client for data source (#2204)
• [Multi DataSource] UX enhancement on Data source management creation page (#2051)
• [Multi DataSource] UX enhancement on Data source management stack (#2521)
• [Multi DataSource] UX enhancement on Index Pattern management stack (#2505)(#2527)
• [Multi DataSource] UX enhancement on Update stored password modal for Data source management stack (#2532)
• [Plugin Helpers] Facilitate version changes (#2398)
• [VisBuilder] Add an experimental table visualization in vis builder (#2705)
• [VisBuilder] Add field summary popovers (#2682)
• [VisBuilder] Add index pattern info when loading embeddable (#2363)
• [VisBuilder] Add state validation before dispatching and loading (#2351)
• [VisBuilder] Change VisBuilder flag for docker config (#2804)
• [VisBuilder] Change classname prefix wiz to vb (#2581)
• [VisBuilder] Change save object type, wizard id and name to visBuilder (#2673)
• [VisBuilder] Change wizard to vis_builder in file names and paths (#2587)
• [VisBuilder] Create a new wizard directly on a dashboard (#2384)
• [VisBuilder] Edit wizard directly on dashboard (#2508)
• [VisBuilder] Enable VisBuilder by default (#2725)
• [VisBuilder] Rename wizard on save modal and visualization table (#2645)
• [VisBuilder] Rename wizard to visBuilder in class name, type name and function name (#2639)
• [VisBuilder] Rename wizard to visBuilder in i18n id and formatted message id (#2635)
• [Windows] Add cross-platform helpers (#2681)
• [Windows] Consume @osd/cross-platform package to standardize path handling across platforms (#2703)
• [Windows] Facilitate building and running OSD and plugins on Windows platforms (#2601)

🐛 Bug Fixes

• Fix management app breadcrumb error (#2344)
• Fix suggestion list cutoff issue (#2607)
• Remove Leftover X Pack references (#2638)
• [Multi DataSource] Add data source param to low-level search call in Discover (#2431)
• [Multi DataSource] Address UX comments on Edit Data source page (#2629)
• [Multi DataSource] Address UX comments on index pattern management stack (#2611)
• [Multi DataSource] Enhance data source error handling (#2661)
• [Multi DataSource] Skip data source view in index pattern step when default is chosen (#2574)
• [Multi DataSource] Update default audit log path (#2793)
• [Save Object Aggregation View] Fix for export all after scroll count response changed (#2696)
• [VisBuilder] Add additional aggregation parameters to Vislib charts (Bar, Line and Area) (#2610)
• [VisBuilder] Add missing test subject property of DisabledVisualization (#2610)
• [VisBuilder] Fix Date Histogram auto bounds showing per 0 millisecond (#2632)
• [VisBuilder] Fix Histogram updating bounds when date range updates (#2632)
• [VisBuilder] Fix auto bounds for time-series bar chart visualization (2401)
• [VisBuilder] Fix broken UX after switching index pattern while editing an aggregation (#2632)
• [VisBuilder] Fix rendering issues with time series for new chart types (#2309)
• [VisBuilder] Fix the missing Last Updated timestamp in visualization list (#2628)
• [VisBuilder] Fix visualization shift when editing an aggregation (2401)
• [VisBuilder] Rename "Histogram" to "Bar" in visualization type picker (2401)
• [Table Visualization] Fix an issue preventing sorting the first column (#2828)
• Temporary workaround for task-kill exceptions on Windows when it is passed a pid for a process that is already dead (#2842)

🚞 Infrastructure

• Add CHANGELOG.md and related workflows (#2414)
• Update WhiteSource scans to ignore Backward Compatibility artifacts in cypress (#2408)
• [CI] Add Backward Compatibility tests for 2.4.0 (#2393)
• [CI] Add path ignore for markdown files (#2312)
• [CI] Prevent backport workflow from running on unmerged PRs (#2746)
• [CI] Run functional test repo as workflow (#2503)
• [CI] Update backport custom branch name (#2766)
• [CI] Update backport workflow to ignore changelog conflicts (#2729)

📝 Documentation

• Add CHANGELOG.md and Release Notes for 2.4.0 (#2809)
• Add README.md for dataSource and dataSourceManagement plugins (#2448)
• Add README.md for saving index pattern relationship (#2276)
• Remove a repeated "to" from the README.md file (#2403)
• Update functional testing information in TESTING.md (#2492)
• [Multi DataSource] Add design documents of multiple data source feature #2538
• [Multi DataSource] Add sample configuration for multi data source to the yml template (#2428)
• [Multi DataSource] Tweak multiple data source design doc (#2724)
• [Multi DataSource] Update MD data source documentation link (#2693)

🔩 Tests

• Update caniuse to fix failed integration tests (#2322)
• [Multi DataSource] Add unit test coverage for Update Data source management stack (#2567)
• [VisBuilder] Enable VisBuilder cypress tests (#2728)

🛠 Maintenance

• Add @zengyan-amazon as a maintainer (#2419)
• Increment from 2.3 to 2.4. (#2295)
• Add CHANGELOG.md for 2.4.0 (#2809)

1.3.6 - 2022-10-06

🛡 Security

• [CVE-2021-3807] Resolves ansi-regex to v5.0.1 (#2425)
• [CVE-2022-23713] Handle invalid query, index and date in vega charts filter handlers (#1932)
• Use a forced CSP-compliant interpreter with Vega visualizations (#2352)
• Bump moment-timezone from 0.5.34 to 0.5.37 (#2361)

📈 Features/Enhancements

• Custom healthcheck with filters (#2232, #2277). To configure see example in config/opensearch_dashboards.yml

🚞 Infrastructure

• Add CHANGELOG.md and related workflows (#2414)
• Extends plugin-helpers to be used for automating version changes (#2398,#2486)

🛠 Maintenance

• Version Increment to 1.3.6 (#2420)

🔩 Tests

• Update caniuse to fix failed integration tests (#2322)