Grimoirelab

Latest version: v1.9.2

Safety actively analyzes 724206 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 5 of 6

0.11.0

**New components:**

* sortinghat 0.11.0
* cereslib 0.4.1
* perceval 0.22.0
* perceval-mozilla 0.3.12
* perceval-opnfv 0.2.12
* perceval-puppet 0.2.12
* perceval-weblate 0.2.12
* graal 0.4.10
* grimoire-elk 0.106.0
* sirmordred 0.9.0

The following list describes the changes by component:

sortinghat

**New features:**

* Merge organizations (571)\
Merging organizations automatically moves all the domains, teams and
enrollments to the target organization. This is helpful in case an
organization has duplicates or if an organization absorbs another one.
Organizations can be merged using drag and drop on the user interface.
* Recommendations by individual (779)\
Users can generate matching recommendations for a specific individual
by clicking on the drop down menu on each individual or on the
individual's profile.

**Bug fixes:**

* Show hidden buttons when the mouse is over the table row (787)\
The buttons to lock an individual or mark it as a bot were only
visible when the mouse wass over the individual's name, which made it
hard to find them. Now they appear when the mouse is over the table
row.
* Email affiliation error (793)\
Fix an error when the email domain ends with a dot, causing the
affiliation process to stop.
* ADD button doesn't affiliate individuals to organizations\
Affiliating an individual to an organization using the "+ ADD" button
on the table expanded view failed.
* Enrollment filter on organizations view\
Filtering individuals by their affiliation to an organization also
returned results of organizations that contained that name. The filter
now only returns organizations that match the exact name.

cereslib

* Update Poetry's package dependencies

perceval

**New features:**

* Git backend alternates mechanism\
Git alternates is a mechanism that lets a repository borrow objects
from another repository on the same machine. Allow to execute Git
Perceval backend using this mechanism.

perceval-mozilla

* Update Poetry's package dependencies

perceval-opnfv

* Update Poetry's package dependencies

perceval-puppet

* Update Poetry's package dependencies

perceval-weblate

* Update Poetry's package dependencies

graal

* Update Poetry's package dependencies

grimoire-elk

**Performance improvements:**

* Refreshing identities performance\
Decrease the time required to execute the autorefresh process by
reducing the number of queries to SortingHat.

sirmordred

**Performance improvements:**

* Refreshing identities performance\
Decrease the time required to execute the autorefresh process by
reducing the number of queries to SortingHat.

0.10.0

**New components:**

* kidash 0.5.6
* sortinghat 0.10.0
* perceval 0.21.7
* perceval-mozilla 0.3.11
* perceval-opnfv 0.2.11
* perceval-puppet 0.2.11
* perceval-weblate 0.2.11
* graal 0.4.9
* grimoire-elk 0.105.0
* sirmordred 0.8.0

The following list describes the changes by component:

kidash

* Update Poetry's package dependencies

sortinghat

**New features:**

* Show when tables are loading (772)\
The individuals and organizations tables now show a progress bar to
indicate that the items are loading.
* Organization profiles\
Each organization's full profile is available by clicking its name on
the table or at `/organization/<organization name>`. This view shows
the organization's teams, members and domains.

**Bug fixes:**

* Sort jobs from newest to oldest (769)\
The jobs page now sorts the list from newest to oldest to show running
jobs first.
* Unreadable large numbers in pagination (770)\
Large page numbers were not fully visible in the tables pagination.
* Edit a profile name with the pencil button (773)\
Clicking on an invidual's name no longer activates the edition mode.
The name can now be edited with the pencil button.
* Fix enrollment in individual's profile\
In the individual's profile, the button to add an organization was not
working.
* Job timeouts\
Jobs failed because they exceeded the default timeout while running
tasks involving numerous identities. To ensure successful completion,
we adjusted the timeout setting to an infinite duration, allowing jobs
to finish without interruptions.

**Breaking changes:**

* Multi-tenancy using headers\
Tenants are now selected using the `sortinghat-tenant` header instead
of the host. Proxies and clients using multi-tenancy should include
that header.

**Performance improvements:**

* Performance improved for recommendations and merging jobs\
The performance of the matching and merging algorithms that are used
on these jobs have been considerably improved. These jobs will be 4
times faster than on the previous version.
* uWSGI threads and workers\
Include two new environments variables to define the number of threads
and workers for uWSGI. These new variables are
`SORTINGHAT_UWSGI_WORKERS` and `SORTINGHAT_UWSGI_THREADS`
* SortingHat database performance\
Improve SortingHat performance when there are a lot of individuals in
the database.

**Dependencies updateds:**

* Update dependencies\
Include google-auth as a dependency to fix release issues.

perceval

* Update Poetry's package dependencies

perceval-mozilla

* Update Poetry's package dependencies

perceval-opnfv

* Update Poetry's package dependencies

perceval-puppet

* Update Poetry's package dependencies

perceval-weblate

* Update Poetry's package dependencies

graal

* Update Poetry's package dependencies

grimoire-elk

**Breaking changes:**

* SortingHat configuration\
When SortingHat's multi-tenancy is enabled, the tenant is included in
all clients during execution.

sirmordred

**New features:**

* Optional configuration for SortingHat\
Include an optional configuration for SortingHat to define the name of
the tenant when multi-tenancy is enabled.

**Bug fixes:**

* Race condition initializing SirMordred\
There was a race condition when SirMordred initializes. The thread
that read the list of projects didn't have time to even start before
the manager finalizes it, so data backends didn't have any have any
input to work with. This bug was originally reported by ncsibra-lab49
on
[grimoirelab585](https://github.com/chaoss/grimoirelab/issues/585).

0.9.2

**New components:**

* sortinghat 0.9.3
* graal 0.4.8
* grimoire-elk 0.104.6
* sirmordred 0.7.2

The following list describes the changes by component:

sortinghat

**Bug fixes:**

* Tenant selection in job fixed\
Tenant selection raised an error when the job context was defined as
keyword argument.

graal

* Update Poetry's package dependencies

grimoire-elk

* Update Poetry's package dependencies

sirmordred

* Update Poetry's package dependencies

0.9.1

**New components:**

* kidash 0.5.5
* sortinghat 0.9.2
* perceval 0.21.6
* perceval-mozilla 0.3.10
* perceval-opnfv 0.2.10
* perceval-puppet 0.2.10
* perceval-weblate 0.2.10
* graal 0.4.7
* grimoire-elk 0.104.5
* sirmordred 0.7.1

The following list describes the changes by component:

kidash

* Update Poetry's package dependencies

sortinghat

**Bug fixes:**

* Static files not included in wheel package\
SortingHat static files were not included in the Python package. The
problem was in the GitHub action.

perceval

* Update Poetry's package dependencies

perceval-mozilla

* Update Poetry's package dependencies

perceval-opnfv

* Update Poetry's package dependencies

perceval-puppet

* Update Poetry's package dependencies

perceval-weblate

* Update Poetry's package dependencies

graal

* Update Poetry's package dependencies

grimoire-elk

* Update Poetry's package dependencies

sirmordred

* Update Poetry's package dependencies

0.9.0

**New components:**

* grimoirelab-toolkit 0.3.4
* kidash 0.5.4
* sortinghat 0.9.0
* cereslib 0.4.0
* perceval 0.21.4
* perceval-mozilla 0.3.8
* perceval-opnfv 0.2.8
* perceval-puppet 0.2.8
* perceval-weblate 0.2.8
* graal 0.4.5
* grimoire-elk 0.104.3
* sirmordred 0.7.0

The following list describes the changes by component:

grimoirelab-toolkit

* Update Poetry's package dependencies

kidash

* Update Poetry's package dependencies

sortinghat

**New features:**

* Set top domain from UI (729)\
Add the option to set an organization's domain as top domain from the
UI.
* Order individuals by indentities (732)\
Adds the option to order the individuals by the number of identities
they have.
* Import identities automatically (746)\
Create a schema to import identities to SortingHat automatically using
custom backends. The jobs will be executed periodically, at the given
interval. The tasks can be configured using the GraphQL API. To
create a custom importer you need to extend `IdentitiesImporter`,
define a `NAME` for your importer (that will be used in the UI), and
implement `get_identities` method that returns a list of individuals
with the related identities that will be imported into SortingHat. If
your importer requires extra parameters, you must extend the
`__init__` method with the required parameters. Those parameters can
be defined using the API.
* Create account command\
Include a new command to create users in SortingHat. The command can
be executed as `sortinghat-admin create-user`.
* Drag and drop to enroll in teams\
Expanding an organization on the table now shows the full list of
teams. Individuals can be dragged and dropped into a team and
viceversa to affiliate them. The buttons to add, edit and delete
organization and team information are reorganized into a dropdown menu
to simplify the interface.
* Multi-tenancy mode\
SortingHat allows hosting multiple instances with a single service
having each instance's data isolated in different databases. To enable
this feature follow these guidelines: - Set `MULTI_TENANT` settings to
`True`. - Define the tenants in `sortinghat/config/tenants.json`. -
Assign users to tenants with `sortinghat-admin set-user-tenant`
command.
* Verify SSL option for client\
Include an option for the client to verify if the certificate is
valid. By default it is verified.

**Bug fixes:**

* Fix outdated recommendation count (733)\
The number of remaining recommendations on the UI was wrong each time
a recommendation was applied or dismissed.
* Fix search syntax link (735)\
Fixes the link to the search syntax page on the search bar.

**Feature removals:**

* Groups table removed from the UI\
Groups and organizations are very similar, and having both tables in
the dashboard can be confusing to users. To simplify the view, the
table is removed from the user interface, but groups remain available
through the API.

cereslib

**New features:**

* Support for more languages and file types\
The library is able to detect the new file formats and language
formats. This list includes JavaScript, TypeScript, Terraform, among
others.

perceval

**Bug fixes:**

* Default value for mbox to-date (810)\
Include a default value for `--to-date` argument in mbox backend.

perceval-mozilla

* Update Poetry's package dependencies

perceval-opnfv

* Update Poetry's package dependencies

perceval-puppet

* Update Poetry's package dependencies

perceval-weblate

* Update Poetry's package dependencies

graal

**Dependencies updateds:**

* Update package dependencies\
Update package dependencies and pin `markdown-it-py` to a specific
version.

grimoire-elk

**Bug fixes:**

* Fix typo in SortingHat fields\
Some fields were not updated from the old version of SortingHat. Now
the API returns 'isBot' and 'genderAcc' instead of 'is_bot' and
'gender_acc'.

**Breaking changes:**

* Define date format for Git documents\
Git by default uses a custom date format that is not recognized by
Elastic/OpenSearch. Specify the format for the AuthorDate and
CommitDate fields in Git documents to support the formats usually
returned by `git log`. This allows us to do proper filtering on these
fields such as "all documents with CommitDate before 2020".
* Update support for ES/OS versions > 7.X/1.X\
Currently the support for ES/OS versions > 7.X/1.X is broken due to a
faulty version check. Add a static method to the Elasticsearch object
that correctly checks whether the version is 'legacy' (defined as ES
6.X or OS 0.X) and adds this check to various places in the codebase.
Additionally, fixes an instance where `interval` is used instead of
`fixed_interval`. `interval` was deprecated in ES7.

sirmordred

**New features:**

* SirMordred logs available on console\
All SirMordred logs are now available on the console output. The
`logs_dir` parameter in the `general` section is optional and it is
only needed if you also want the logs in a file.
* SortingHat option to verify SSL\
Include `verify_ssl` option to SortingHat configuration to verify the
connection with the server. By default it is `True`.

0.8.0

**New components:**


The following list describes the changes by component:

Page 5 of 6

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.