Release Pull Request

#6547

What's changed

• Decode S3 storage URLs when building object keys for streaming attachments into download packages by @JadeCara in #6541
• Enables the exclude domains field in the website monitor config. by @erosselli in #6544
• Region table value displayed correctly and Location select only allowing valid values by @erosselli in #6545
• Adds safeguards when encountering rate limit errors upon instantiation by @eastandwestwind in #6546

Full Changelog: 2.69.1...2.69.2

What's Changed

• Added the ability to selectively redact dataset, collection, and field names in DSR packages by @galvana in #6487
• Changed session invalidation logic to end all sessions for a user when their password has been changed by @thabofletcher CVE-2025-57766
• Fixed OAuth scope privilege escalation vulnerability that allowed clients to create or update other OAuth clients with unauthorized scopes by @thabofletcher CVE-2025-57817
• Added stricter rate limiting to authentication endpoints to mitigate against brute force attacks by @thabofletcher CVE-2025-57815
• Adds Redis-driven rate limiting across all endpoints by @eastandwestwind CVE-2025-57816

Full Changelog: 2.69.0...2.69.1

Release Pull Request

#6507

What's Changed

• ENG-1128 by @adamsachs in #6441
• ENG-1096 Add execution log when DSR enters awaiting_email_send status by @erosselli in #6462
• ENG-1111 Privacy Center location collection config by @thabofletcher in #6432
• ENG-1186 Fixing issue patching config with legacy values in the DB by @thabofletcher in #6464
• [ENG-983] Update Manual Task Graph with Conditional Evaluator by @JadeCara in #6440
• ENG-881: db engine and session improvements by @adamsachs in #6434
• Improve UI for manual tasks by @lucanovera in #6454
• Upgrade PostgreSQL from 12 to 16 and Redis from 6.2 to 8.0 in local dev & test environments (fides) by @daveqnet in #6456
• Update the fides.js banner to use H2 by @gilluminate in #6470
• ENG-1122 Show brand image and badge for test website monitors by @erosselli in #6476
• Updated the privacy request service to also check for awaitng input status by @JadeCara in #6471
• DB models for custom taxonomies by @galvana in #6421
• Eng 1061 async polling queue by @Vagoasdf in #6435
• Eng 1111 location config move by @thabofletcher in #6468
• Deep linking tables by @gilluminate in #6447
• ENG-1209 - Add logs to debug detection task by @vcruces in #6482
• Refactor Column Header Menu to use components prop instead of title by @gilluminate in #6481
• feat: location select [ENG-1152] by @speaker-ender in #6478
• Optional test + dev mode for AdminUI by @gilluminate in #6483
• [ENG-1200] by @JadeCara in #6474
• Apply new hooks to existing action center tables by @gilluminate in #6484
• handle missing GVL from full experience by @gilluminate in #6472
• Correct consent language for integrations by @Linker44 in #6486
• ENG-1112 and ENG-1109 Location on Privacy Requests by @thabofletcher in #6425
• Display saas integrations in the integrations page by @lucanovera in #6480
• Prevent edits on Ignored assets by @gilluminate in #6485
• Migrate popovers to ant by @gilluminate in #6488
• fix: privacy center identity field logic [ENG-1226] by @speaker-ender in #6492
• fix: web monitor locations select [ENG-1223] by @speaker-ender in #6491
• privacy center dsr redirect by @JadeCara in #6489
• Fix non-applicable notices being saved as "true" in the consent cookie by @jpople in #6490
• ENG-1273: Fix finalization by @tvandort in #6493
• UI for adding manual task creation conditions by @lucanovera in #6431
• ENG-782: Remove beta flags from orgs and SSO by @tvandort in #6494
• ENG-782: Update changelog by @tvandort in #6495
• update datamap lineage colors by @Kelsey-Ethyca in #6505
• Updated CHANGELOG.md for release 2.69.0 by @Kelsey-Ethyca in #6506

Full Changelog: 2.68.0...2.69.0

Release Pull Request

#6461

What's Changed

• Filtering and sorting for discovered assets in Action Center by @gilluminate in #6401
• Improved API call loading/failure handling by @gilluminate in #6387
• ENG-878 Privacy Request cancellation/retry limit by @thabofletcher in #6396
• ENG-856 memory manager by @thabofletcher in #6375
• Skipping missing tables for leaf-collections by @galvana in #6397
• ENG-1068 support unscheduling datahub syncs (fides) by @adamsachs in #6408
• [ENG-871] Part 2 by @JadeCara in #6390
• fix fides debugger errors in privacy center by @gilluminate in #6406
• Updating External Saas Tests by @Vagoasdf in #6363
• remove sorting from problematic columns by @gilluminate in #6413
• Adding missing non-KMS S3 test case by @galvana in #6412
• Adding missing table detection for erasures by @galvana in #6414
• Fixing requirment of Saas env token on all tests by @Vagoasdf in #6415
• Fix default tab not loading with Manual Task integrations by @lucanovera in #6417
• update changelog for 2-67.1 release by @lucanovera in #6423
• improve error logging for database query failures by @adamsachs in #6420
• Protect against multiple instantiations of FidesJS and GPP by @gilluminate in #6416
• fix changelog by @gilluminate in #6427
• Fix console error when creating new TCF experience by @gilluminate in #6428
• Fix small UI bugs in Manual Task config screen by @lucanovera in #6436
• [ENG-984] Add dependencies as scalar field references inputs into access and erasure manual graph tasks by @JadeCara in #6402
• fix logging test by @adamsachs in #6433
• [ENG-1114] Update CI to run all tests by @JadeCara in #6419
• ENG-738 - Performance improvements for data detection - bulk insert ancestor links by @vcruces in #6426
• [ENG-1133] Added privacy center settings to config by @JadeCara in #6439
• [ENG-982] Added type validation for operators by @JadeCara in #6429
• Dataset Generic Object Support by @Linker44 in #6424
• Configure role assumption in create client. by @tvandort in #6443
• update changelog 2.67.2 by @adamsachs in #6446
• ENG-738 - Update the ancestors and descendants functions to create a single SQL query by @vcruces in #6444
• Add nox -s dev -- workers-all and rename worker-other by @NevilleS in #6445
• Visual cue when updating layer 2 + live region update by @gilluminate in #6451
• Revert tables to use Ant filter icon by @gilluminate in #6450
• Improve responsive styles in privacy request detail page by @lucanovera in #6437
• Fix failing Cypress test by @gilluminate in #6455
• Fix bug with GPP API not initializing with invalid Fides string override by @jpople in #6452
• Fix params getting encoded by @gilluminate in #6449
• Updated CHANGELOG.md for release 2.68.0 by @Kelsey-Ethyca in #6460
• subtle dsr processing issue by @JadeCara in #6469

Full Changelog: 2.67.2...2.68.0

Release Pull Request

#6448

What's changed

• Configured AWS S3 role assumption in client creation code so that all uses support role assumption by @tvandort in #6443

Full Changelog: 2.67.1...2.67.2

Release Pull Request

#6422

What's changed

• Added protection against multiple FidesJS script loading on the same page with configurable override option by @gilluminate in #6416
• Fixed default tab not being set in the integration detail page for Manual Tasks integrations by @lucanovera in #6417

Full Changelog: 2.67.0...2.67.1

Release Pull Request

#6410

What's Changed

• feat: editable gvl vendors [ENG-844] by @speaker-ender in #6341
• Remove data-testid from FidesJS prod builds by @gilluminate in #6351
• Use versioneer to set PC/FidesJS version by @gilluminate in #6239
• Fix selected styles in language picker by @gilluminate in #6355
• ENG-651: use npm ci by @tvandort in #6174
• Migrate Action Center tables to Ant Design by @gilluminate in #6349
• preserve selections across pages by @gilluminate in #6357
• ENG-648: Prevent manual updates to autogenerated Fides.js docs by @tvandort in #6175
• Remove global fides when cleaning up preview by @gilluminate in #6361
• ENG-1022 skip fetching manual tasks when not running in plus by @lucanovera in #6364
• Debug Logger fixes by @gilluminate in #6369
• Fix link to use NextJS router link by @gilluminate in #6371
• Support uploading multiple attachments in a manual task by @lucanovera in #6370
• Remove all layout styles (margins) from StatusIndicators by @gilluminate in #6360
• [ENG-978] Created conditional schemas and evaluator with tests by @JadeCara in #6354
• upgrade rollup-plugin-jsx-remove-attributes for Preact by @gilluminate in #6362
• [ENG-979] Create new conditional dependencies table by @JadeCara in #6356
• Optimizing BigQuery deletes by @galvana in #6340
• Adding support for 50+ dataset configs by @galvana in #6367
• TCF overlay special purpose only vendors by @gilluminate in #6358
• ENG-1006 BE: Enable respondent user to manage their user profile without seeing all fides users by @JadeCara in #6368
• ENG-1028 Adding record counts to privacy request activity timeline by @galvana in #6374
• Support traditional Chinese in Fides.js by @jpople in #6372
• Moving masking secrets from Redis to database by @galvana in #6002
• ENG-1032 Escaping column names with spaces for BigQuery by @galvana in #6380
• Handle IS_TEST param for fides-js builds to include test ids by @nrxsmith in #6382
• Update changelog for release 2.66.1 by @jpople in #6386
• Use IS_TEST in fides-js build script by @nrxsmith in #6385
• Enable respondent user to manage their user profile by @lucanovera in #6377
• Fix rendering errors after saving experience by @gilluminate in #6379
• Allow turbo to pass env variable by @nrxsmith in #6388
• ENG-781 Implement require DSR erasure finalization by @eastandwestwind in #6301
• bump rollup-plugin-jsx-remove-attributes by @gilluminate in #6391
• [ENG-871] Addresses circular import and cleans up some tests by @JadeCara in #6383
• Update cypress_admin-ui.yml by @gilluminate in #6393
• Fix privacy request detail page layout issues with long titles by @lucanovera in #6389
• Fix bug with Discovery and Detections filter on initial page load by @lucanovera in #6394
• feat: add vendor ids to vendor list [ENG-974] by @speaker-ender in #6348
• update changelog for release 2.66.2 by @adamsachs in #6400
• ENG-1057: fix email template to remove reference to PDF format by @thabofletcher in #6399
• Update datamap to use react flow by @Kelsey-Ethyca in #6381
• ENG-992 Optimize dataset traversal by @galvana in #6353
• Adding signature v4 to S3 client by @galvana in #6365
• Update autogenerated types in admin-ui by @lucanovera in #6404
• Add option to FidesJS to show modal by default by @jpople in #6407
• Updated CHANGELOG.md for release 2.67.0 by @Kelsey-Ethyca in #6409

Full Changelog: 2.66.2...2.67.0

Release Pull Request

#6398

What's changed

• Fixed an issue where the Data Detection & Discovery pages were missing some filter parameters for the results by @lucanovera in #6394

Full Changelog: 2.66.1...2.66.2

Release Pull Request

#6384

What's changed

• Add support for traditional Chinese to FidesJS by @jpople #6372

Full Changelog: 2.66.0...2.66.1

Release Pull Request

#6347

What's Changed

• Fix manual tasks UI bugs by @lucanovera in #6311
• Fix external UI bugs by @lucanovera in #6313
• ENG-889 by @adamsachs in #6310
• fix dataset select by @lucanovera in #6314
• GPP sections default to national when no other notice applies and both State and National approach used by @gilluminate in #6307
• fix: taxonomy search filter [ENG-823] by @speaker-ender in #6288
• Include exports field to improve 3rd party usage by @gilluminate in #6315
• Refactor GPP to be more DRY by @gilluminate in #6318
• FidesJS: served_notice_history_id consistency by @gilluminate in #6312
• Migrate tabs to Ant Design by @jpople in #6260
• ENG-897 Generic Erasure Email Integration Improvements by @erosselli in #6316
• Fixes smoke test failure from Ant tab migration by @jpople in #6320
• ENG-752 Change Asset's with_consent field to consent_status and add indexes to stagedresource table by @erosselli in #6287
• Fix flaky user management tests by @gilluminate in #6321
• ENG-898 by @tvandort in #6319
• ENG-907 Tasks table assigned user improvements by @lucanovera in #6317
• ENG-924 Remove all logger calls in get_cache by @erosselli in #6328
• Upgrade RollupJS to latest by @gilluminate in #6330
• ENG-899 by @JadeCara in #6322
• feat: persist beta feature flags [ENG-896] by @speaker-ender in #6305
• Show consent status on assets and vendors by @gilluminate in #6283
• [ENG-951] update internal respondent by @JadeCara in #6336
• ENG-922 allow viewers internal respondent users to log in and view their assigned tasks by @lucanovera in #6329
• [ENG-899] corrected some manual task graph creation issues by @JadeCara in #6335
• Eng 899 research and correct task instance creation 3 by @JadeCara in #6342
• Add IDs to FidesJS buttons by @gilluminate in #6343
• Allow fides.js to pull experiences with no notices by @gilluminate in #6332
• Add scope check for d&d menu items by @lucanovera in #6337
• Add icon for attachment that go in the access package by @lucanovera in #6344
• Fix Fides.js modals being unscrollable on very small screens by @jpople in #6327
• Add option to override Fides modal default view by @jpople in #6338
• ENG-904 display completed/skipped manual tasks in the activity view by @lucanovera in #6345
• Updated CHANGELOG.md for release 2.66.0 by @Kelsey-Ethyca in #6346

Full Changelog: 2.65.2...2.66.0