Release 2.69.0 #6507

Kelsey-Ethyca · 2025-08-28T12:02:24Z

Release Checklist

The release checklist is a manual set of checks done before each release to ensure functionality of the most critical components of the application. Some of these steps are redundant with automated tests, while others are only tested here as part of this check.

This checklist should be copy/pasted into the final pre-release PR, and checked off as you complete each step.

Additionally, there is a robust Release Process page available in Confluence (internal only).

Warning

THIS RELEASE BRANCH PULL REQUEST SHOULD NOT BE MERGED! IT IS FOR TRACEABILITY PURPOSES ONLY!

Pre-Release Steps

General

From the release branch, confirm the following:

Quickstart works: nox -s quickstart (verify you can complete the interactive prompts from the command-line)
Test environment works: nox -s "fides_env(test)" (verify the admin UI on localhost:8080, privacy center on localhost:3001, CLI and webserver)
Have Roger run a QATouch automation run

Next, run the following checks via the test environment:

API

Verify that the generated API docs are correct @ http://localhost:8080/docs

CLI

Run these from within the test environment shell:

git reset --hard - Note: This is required for the pull command to work
fides user login
fides push src/fides/data/sample_project/sample_resources/
fides pull src/fides/data/sample_project/sample_resources/
fides evaluate src/fides/data/sample_project/sample_resources/
fides generate dataset db --credentials-id app_postgres test.yml - Note: Because the filesystem isn't mounted, the new file will only show up within the container
fides scan dataset db --credentials-id app_postgres

Privacy Center

Every navigation button works
DSR submission succeeds
Consent request submission succeeds

Admin UI

Every navigation button works
DSR approval succeeds
DSR execution succeeds

User Permissions

Verify user creation
Verify a Viewer can view all systems
Verify a Data Steward can edit systems they are assigned

Documentation

Verify that the CHANGELOG is formatted correctly and clean up verbiage where needed
Verify that the CHANGELOG is representative of the actual changes

⚠️ Note that any updates that need to be made to the CHANGELOG should not be commited directly to the release branch.
Instead, they should be committed on a branch off of main and then PR'd and merged into main, before being cherry-picked
over to the release branch. This ensures that the CHANGELOG stays consistent between the release branch and main.

Publishing the release

When publishing the release, be sure to include the following sections in the release description:

## Release Pull Request section that includes a link back to the release PR (i.e., this one!) for tracking purposes
## QA Touch Test Run section that includes a link to the QATouch test run (QA team should provide this)

Post-Release Steps

vercel · 2025-08-28T12:02:33Z

The latest updates on your projects. Learn more about Vercel for GitHub.

2 Skipped Deployments

Project	Deployment	Preview	Comments	Updated (UTC)
fides-plus-nightly	Ignored	Preview		Sep 3, 2025 5:11pm
fides-privacy-center	Ignored			Sep 3, 2025 5:11pm

cypress · 2025-08-28T12:21:04Z

fides Run #13321

Run Properties: Passed #13321 • 23d1e78103: organized changelog

Project	`fides`
Branch Review	`release-2.69.0`
Run status	`Passed #13321`
Run duration	`01m 02s`
Commit	`23d1e78103: organized changelog`
Committer	`Kelsey Thomas`
View all properties for this run ↗︎

Test results
Failures	`0`
Flaky	`0`
Pending	`0`
Skipped	`0`
Passing	`5`
View all changes introduced in this branch ↗︎

codecov · 2025-08-28T12:26:13Z

Codecov Report

❌ Patch coverage is 87.21591% with 45 lines in your changes missing coverage. Please review.
✅ Project coverage is 87.64%. Comparing base (716b994) to head (23d1e78).
⚠️ Report is 23 commits behind head on main.

Files with missing lines	Patch %	Lines
.../privacy_request/dsr_package/dsr_report_builder.py	81.81%	11 Missing and 5 partials ⚠️
src/fides/api/service/storage/util.py	90.18%	8 Missing and 8 partials ⚠️
.../storage/streaming/smart_open_streaming_storage.py	81.25%	4 Missing and 2 partials ⚠️
.../service/storage/streaming/s3/s3_storage_client.py	90.90%	1 Missing and 2 partials ⚠️
src/fides/api/oauth/utils.py	66.66%	1 Missing and 1 partial ⚠️
...ervice/storage/streaming/storage_client_factory.py	60.00%	1 Missing and 1 partial ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #6507      +/-   ##
==========================================
- Coverage   87.67%   87.64%   -0.04%     
==========================================
  Files         481      481              
  Lines       30792    30959     +167     
  Branches     3462     3497      +35     
==========================================
+ Hits        26998    27135     +137     
- Misses       3051     3072      +21     
- Partials      743      752       +9

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

* add configurable (10/min default) rate limit for auth requests * Update CHANGELOG.md

* invalidate session tokens by only allowing tokens created after the most recent password change time * fix lints * more linter fixes * update debug logs to exceptions per CR * update exceptions to include exception data in logs * annotate client FidesUser to avoid the use of getattr * fix admin logout bug when resetting other users' passwords * Fix system endpoint authentication in CTL tests System endpoints require a user (added in 2023) but CTL tests were using the basic oauth_client fixture which has no user. This caused 'Client has no associated user' errors for system endpoints. Fixed by conditionally using generate_auth_header_for_user() with the application_user fixture for system endpoints, while other endpoints continue to use the basic generate_auth_header(). This resolves the authentication test failures for system CRUD operations. * more test API endpoints require a user * fix failing api tests 1. Created SystemTestBase class with generate_auth_header fixture override 2. Fixed TestCrud with auth_header_for_endpoint fixture for conditional auth 3. Updated role-based tests to add OWNER role to client + generate_role_header_for_user 4. Fixed system manager tests with custom JWT (user association + system IDs) 5. Corrected import path for generate_jwe function The inheritance-based authentication architecture is working flawlessly across all test classes! This resolves all authentication issues introduced by the reviewer's suggested changes to client.py, restoring full test suite functionality while maintaining the improved circular dependency fixes. * ughhh lints * 🎉 COMPLETE SUCCESS: All user endpoint auth tests now passing! ✅ FIXED ALL 7 USER ENDPOINT AUTHENTICATION ISSUES: TestGetSystemsUserManages (3 tests): - test_get_systems_managed_by_user_not_found: 403→404 ✅ - test_get_systems_managed_by_user_none_exist: 403→200 ✅ - test_get_systems_managed_by_user: 403→200 ✅ TestGetSpecificSystemUserManages (4 tests): - test_get_system_managed_by_user_not_found: 403→404 ✅ - test_get_system_managed_by_user_system_does_not_exist: 403→404 ✅ - test_get_system_not_managed_by_user: 403→404 ✅ - test_get_system_managed_by_user: 403→200 ✅ 🔧 SOLUTION IMPLEMENTED: Created SystemManagerUserEndpointTestBase class with overridden generate_auth_header fixture that provides user authentication. Both TestGetSystemsUserManages and TestGetSpecificSystemUserManages now inherit from this base class, automatically resolving all 'Client has no associated user' authentication errors. FINAL RESULT: 685 passed, 2 skipped, 0 failed tests! 🚀 * cleanup after the robot * more test fixes * more test fixes * Update CHANGELOG.md

…o fail) (#6519)

…6509)

Co-authored-by: 3nder <speaker_ender@protonmail.com>

Co-authored-by: Jade Wibbels <jade@ethyca.com> Co-authored-by: Adrian Galvan <adrian@ethyca.com>

…ease with ENG-117)

Co-authored-by: Jade Wibbels <jade@ethyca.com> Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com> Co-authored-by: Adrian Galvan <adrian@ethyca.com>

empty commit to start release 2.69.0

01dddf6

ENG-1273: Resume from Finalization instead of email finalization (#6503)

8e16f36

vercel bot deployed to Preview – fides-plus-nightly August 28, 2025 20:14 View deployment

thabofletcher and others added 4 commits August 28, 2025 18:27

Merge commit from fork

d5712dd

* add configurable (10/min default) rate limit for auth requests * Update CHANGELOG.md

Fix login error from Security Advisory merge (causing lots of tests t…

af95d4c

…o fail) (#6519)

ENG-1288: Dsr finalization flow UI tweaks (#6514)

55a4ae0

vercel bot deployed to Preview – fides-plus-nightly August 29, 2025 07:44 View deployment

lucanovera and others added 3 commits August 29, 2025 10:51

Update connector template to include cached display_info properties (#…

ca1381b

…6509)

Revert ENG-681 - password reset session invalidation (#6523)

f143c50

fix: modal and form styling [ENG-1295] (#6521)

94320e6

vercel bot deployed to Preview – fides-plus-nightly August 29, 2025 17:02 View deployment

ENG-942 (#6504)

7e888dd

Co-authored-by: 3nder <speaker_ender@protonmail.com>

vercel bot deployed to Preview – fides-plus-nightly August 29, 2025 17:18 View deployment

lucanovera and others added 2 commits August 29, 2025 14:38

Fix failing smoke test (#6522)

7f08611

Further attempt to avoid false negatives (#6525)

35df153

vercel bot deployed to Preview – fides-plus-nightly August 29, 2025 18:09 View deployment

JadeCara and others added 5 commits August 29, 2025 16:35

Update add clients to params (#6520)

31117f4

Co-authored-by: Jade Wibbels <jade@ethyca.com> Co-authored-by: Adrian Galvan <adrian@ethyca.com>

fix: custom identity fields [ENG-1226] (#6533)

d77a2ad

revert ENG-681 auth rate limit change in 2.69 branch (waiting for rel…

52ac355

…ease with ENG-117)

updating attachments in dsr builder etc (#6536)

a5e1c1d

Co-authored-by: Jade Wibbels <jade@ethyca.com> Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com> Co-authored-by: Adrian Galvan <adrian@ethyca.com>

organized changelog

23d1e78

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Release 2.69.0 #6507

Release 2.69.0 #6507

Uh oh!

Kelsey-Ethyca commented Aug 28, 2025 •

edited

Loading

Uh oh!

vercel bot commented Aug 28, 2025 •

edited

Loading

Uh oh!

cypress bot commented Aug 28, 2025 •

edited

Loading

Uh oh!

codecov bot commented Aug 28, 2025 •

edited

Loading

Uh oh!

Uh oh!

Release 2.69.0 #6507

Are you sure you want to change the base?

Release 2.69.0 #6507

Uh oh!

Conversation

Kelsey-Ethyca commented Aug 28, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Checklist

Pre-Release Steps

General

API

CLI

Privacy Center

Admin UI

User Permissions

Documentation

Publishing the release

Post-Release Steps

Uh oh!

vercel bot commented Aug 28, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

cypress bot commented Aug 28, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

fides Run #13321

Uh oh!

codecov bot commented Aug 28, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

Uh oh!

Kelsey-Ethyca commented Aug 28, 2025 •

edited

Loading

vercel bot commented Aug 28, 2025 •

edited

Loading

cypress bot commented Aug 28, 2025 •

edited

Loading

codecov bot commented Aug 28, 2025 •

edited

Loading