Skip to content

Sync upstream changes (backend & frontend only)#92

Open
vinaayakh-aot wants to merge 1 commit intomainfrom
sync-upstream-20260323-001944
Open

Sync upstream changes (backend & frontend only)#92
vinaayakh-aot wants to merge 1 commit intomainfrom
sync-upstream-20260323-001944

Conversation

@vinaayakh-aot
Copy link
Collaborator

@vinaayakh-aot vinaayakh-aot commented Mar 23, 2026

This PR syncs selective changes from upstream that affect only:

  • spiffworkflow-backend/
  • spiffworkflow-frontend/

Changes included:

spiffworkflow-backend/.gitignore
spiffworkflow-backend/Dockerfile
spiffworkflow-backend/bin/multiinstance_performance.py
spiffworkflow-backend/bin/openapi/dump_api_logs.py
spiffworkflow-backend/bin/openapi/extract_openapi_operation_info.py
spiffworkflow-backend/dev.docker-compose.yml
spiffworkflow-backend/migrations/versions/0b90171055cd_task_assignment_restructure.py
spiffworkflow-backend/migrations/versions/52f3e86566bf_add_query_params_to_api_log.py
spiffworkflow-backend/pyproject.toml
spiffworkflow-backend/src/spiffworkflow_backend/init.py
spiffworkflow-backend/src/spiffworkflow_backend/api.yml
spiffworkflow-backend/src/spiffworkflow_backend/background_processing/celery_tasks/process_instance_task_producer.py
spiffworkflow-backend/src/spiffworkflow_backend/config/default.py
spiffworkflow-backend/src/spiffworkflow_backend/config/openid/rsa_keys.py
spiffworkflow-backend/src/spiffworkflow_backend/interfaces.py
spiffworkflow-backend/src/spiffworkflow_backend/load_database_models.py
spiffworkflow-backend/src/spiffworkflow_backend/models/api_log_model.py
spiffworkflow-backend/src/spiffworkflow_backend/models/human_task.py
spiffworkflow-backend/src/spiffworkflow_backend/models/human_task_group.py
spiffworkflow-backend/src/spiffworkflow_backend/models/human_task_user_waiting.py
spiffworkflow-backend/src/spiffworkflow_backend/models/process_instance_event.py
spiffworkflow-backend/src/spiffworkflow_backend/routes/messages_controller.py
spiffworkflow-backend/src/spiffworkflow_backend/routes/process_api_blueprint.py
spiffworkflow-backend/src/spiffworkflow_backend/routes/tasks_controller.py
spiffworkflow-backend/src/spiffworkflow_backend/scripts/get_users_assigned_to_task.py
spiffworkflow-backend/src/spiffworkflow_backend/scripts/markdown_file_download_link.py
spiffworkflow-backend/src/spiffworkflow_backend/services/authorization_service.py
spiffworkflow-backend/src/spiffworkflow_backend/services/process_instance_processor.py
spiffworkflow-backend/src/spiffworkflow_backend/services/process_instance_report_service.py
spiffworkflow-backend/src/spiffworkflow_backend/services/process_instance_service.py
spiffworkflow-backend/src/spiffworkflow_backend/services/process_instance_tmp_service.py
spiffworkflow-backend/src/spiffworkflow_backend/services/process_model_test_generator_service.py
spiffworkflow-backend/src/spiffworkflow_backend/services/service_task_service.py
spiffworkflow-backend/src/spiffworkflow_backend/services/spec_file_service.py
spiffworkflow-backend/src/spiffworkflow_backend/services/task_service.py
spiffworkflow-backend/src/spiffworkflow_backend/services/user_service.py
spiffworkflow-backend/src/spiffworkflow_backend/services/workflow_execution_service.py
spiffworkflow-backend/src/spiffworkflow_backend/utils/api_logging.py
spiffworkflow-backend/tests/data/multiinstance_with_data/multiinstance_with_data.bpmn
spiffworkflow-backend/tests/data/service_task/service_task.bpmn
spiffworkflow-backend/tests/files/process_model_test_importer.json
spiffworkflow-backend/tests/spiffworkflow_backend/integration/test_authentication.py
spiffworkflow-backend/tests/spiffworkflow_backend/integration/test_long_running_services.py
spiffworkflow-backend/tests/spiffworkflow_backend/integration/test_messages.py
spiffworkflow-backend/tests/spiffworkflow_backend/integration/test_tasks_controller.py
spiffworkflow-backend/tests/spiffworkflow_backend/scripts/test_get_users_assigned_to_task.py
spiffworkflow-backend/tests/spiffworkflow_backend/unit/test_api_logging.py
spiffworkflow-backend/tests/spiffworkflow_backend/unit/test_authorization_service.py
spiffworkflow-backend/tests/spiffworkflow_backend/unit/test_background_processing_service.py
spiffworkflow-backend/tests/spiffworkflow_backend/unit/test_process_instance_migrator.py
spiffworkflow-backend/tests/spiffworkflow_backend/unit/test_process_instance_processor.py
spiffworkflow-backend/tests/spiffworkflow_backend/unit/test_process_instance_report_service.py
spiffworkflow-backend/tests/spiffworkflow_backend/unit/test_service_task_delegate.py
spiffworkflow-backend/tests/spiffworkflow_backend/unit/test_spec_file_service.py
spiffworkflow-backend/tests/spiffworkflow_backend/unit/test_user_service.py
spiffworkflow-backend/uv.lock
spiffworkflow-frontend/.github/workflows/tests.yml
spiffworkflow-frontend/.tool-versions
spiffworkflow-frontend/AGENTS.md
spiffworkflow-frontend/Dockerfile
spiffworkflow-frontend/README.md
spiffworkflow-frontend/bin/boot_server_in_docker
spiffworkflow-frontend/bin/use_local_bpmn_js_spiffworkflow
spiffworkflow-frontend/package-lock.json
spiffworkflow-frontend/package.json
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/README.md
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/package.json
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/rollup.config.js
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/src/components/BpmnEditor.tsx
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/src/components/DiagramActionBar.tsx
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/src/components/DiagramNavigationBreadcrumbs.tsx
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/src/components/DiagramZoomControls.tsx
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/src/components/DialogShell.tsx
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/src/components/FileNameEditorDialog.tsx
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/src/components/JsonSchemaEditorDialog.tsx
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/src/components/MarkdownEditorDialog.tsx
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/src/components/MessageEditorDialog.tsx
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/src/components/ProcessReferencesDialog.tsx
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/src/components/ProcessSearch.tsx
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/src/components/ProcessSearchDialog.tsx
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/src/components/ScriptAssistPanel.tsx
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/src/components/ScriptEditorDialog.tsx
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/src/components/messages/MessageEditor.tsx
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/src/components/messages/MessageHelper.ts
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/src/components/modals/JsonSchemaEditorModal.tsx
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/src/components/modals/MarkdownEditorModal.tsx
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/src/components/modals/MessageEditorModal.tsx
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/src/components/modals/ProcessSearchModal.tsx
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/src/components/modals/ScriptEditorModal.tsx
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/src/components/modals/index.ts
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/src/hooks/useBpmnEditorCallbacks.ts
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/src/hooks/useBpmnEditorLaunchers.ts
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/src/hooks/useBpmnEditorModals.ts
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/src/hooks/useBpmnEditorScriptState.ts
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/src/hooks/useBpmnEditorTextEditorsState.ts
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/src/hooks/useDiagramNavigationHandlers.ts
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/src/hooks/useDiagramNavigationStack.ts
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/src/hooks/useJsonSchemaEditor.ts
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/src/hooks/useProcessReferences.ts
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/src/hooks/useProcessSearch.ts
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/src/hooks/useScriptUnitTestRunner.ts
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/src/hooks/useScriptUnitTestsState.ts
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/src/icons/SvgIcons.tsx
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/src/icons/bpmn_js_script_icon.svg
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/src/icons/call_activity_navigate_arrow_up.svg
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/src/index.ts
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/src/modals.ts
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/src/services/BpmnApiService.ts
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/src/styles/bpmn-js-properties-panel.css
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/src/types/index.ts
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/src/utils/bpmnHelpers.ts
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/src/utils/schemaHelpers.ts
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/tsconfig.json
spiffworkflow-frontend/src/App.tsx
spiffworkflow-frontend/src/bpmn-js-properties-panel.css
spiffworkflow-frontend/src/components/ProcessInstanceLogList.tsx
spiffworkflow-frontend/src/components/ReactDiagramEditor.tsx
spiffworkflow-frontend/src/components/ReactFormBuilder/ReactFormBuilder.tsx
spiffworkflow-frontend/src/components/SideNav.tsx
spiffworkflow-frontend/src/components/messages/MessageInstanceList.tsx
spiffworkflow-frontend/src/config.tsx
spiffworkflow-frontend/src/helpers.tsx
spiffworkflow-frontend/src/index.css
spiffworkflow-frontend/src/interfaces.ts
spiffworkflow-frontend/src/locales/cs_cz/translation.json
spiffworkflow-frontend/src/locales/de/translation.json
spiffworkflow-frontend/src/locales/en_us/translation.json
spiffworkflow-frontend/src/locales/es/translation.json
spiffworkflow-frontend/src/locales/fi/translation.json
spiffworkflow-frontend/src/locales/fr_fr/translation.json
spiffworkflow-frontend/src/locales/pt_br/translation.json
spiffworkflow-frontend/src/locales/pt_pt/translation.json
spiffworkflow-frontend/src/locales/zh_cn/translation.json
spiffworkflow-frontend/src/services/SpiffBpmnApiService.ts
spiffworkflow-frontend/src/views/ProcessInstanceShow.tsx
spiffworkflow-frontend/src/views/ProcessModelEditDiagram.tsx
spiffworkflow-frontend/src/views/ReactFormEditor.tsx
spiffworkflow-frontend/test/browser/helpers.py
spiffworkflow-frontend/test/browser/helpers/login.py
spiffworkflow-frontend/test/browser/process_instances/test_can_create_and_modify.py
spiffworkflow-frontend/test/browser/process_models/test_can_create_new_bpmn_dmn_json_files.py
spiffworkflow-frontend/test/browser/tasks/public_tasks/test_can_complete_guest_task.py
spiffworkflow-frontend/test/browser/test_login.py
spiffworkflow-frontend/test/diagram_edit_acceptance/config.py
spiffworkflow-frontend/test/diagram_edit_acceptance/conftest.py
spiffworkflow-frontend/test/diagram_edit_acceptance/helpers.py
spiffworkflow-frontend/test/diagram_edit_acceptance/test_activity_rename.py
spiffworkflow-frontend/test/diagram_edit_acceptance/test_business_rule_task_dmn_editor.py
spiffworkflow-frontend/test/diagram_edit_acceptance/test_call_activity_process_id_update.py
spiffworkflow-frontend/test/diagram_edit_acceptance/test_call_activity_search.py
spiffworkflow-frontend/test/diagram_edit_acceptance/test_manual_task_instructions_editor.py
spiffworkflow-frontend/test/diagram_edit_acceptance/test_message_start_event_editor.py
spiffworkflow-frontend/test/diagram_edit_acceptance/test_script_task_launch_editor.py
spiffworkflow-frontend/test/diagram_edit_acceptance/test_service_task_operator.py
spiffworkflow-frontend/test/diagram_edit_acceptance/test_user_task_json_schema_editor.py
spiffworkflow-frontend/vite.config.ts

Notes:

  • Other upstream changes (root files, .github/, docs/, etc.) were intentionally ignored
  • This maintains the repository restructure while keeping backend/frontend up to date
  • Triggered manually via GitHub Actions workflow

Review carefully before merging.

@github-actions
Sync upstream changes for spiffworkflow-backend and spiffworkflow-fro…
833defb 
…ntend

Selectively merged changes from upstream/main that affect:
- spiffworkflow-backend/
- spiffworkflow-frontend/

Other upstream changes were ignored.

Triggered by: github-actions[bot]
Workflow run: 23416068383
@vinaayakh-aot vinaayakh-aot added upstream-sync Automated upstream sync automated Automated PR labels Mar 23, 2026
github-advanced-security[bot]
github-advanced-security bot found potential problems Mar 23, 2026
View reviewed changes
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/src/hooks/useBpmnEditorCallbacks.ts
(event: any) => {
const re = /.*[-.]schema.json/;
if (processModel?.files) {
const jsonFiles = processModel.files.filter((f) => f.name.match(re));

Check failure

Code scanning / CodeQL

Polynomial regular expression used on uncontrolled data High

This
regular expression
Loading
that depends on
library input
Loading
may run slow on strings with many repetitions of 'a'.
spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/src/utils/schemaHelpers.ts
Comment on lines +47 to +50
return input
.toLowerCase()
.replace(/[^a-z0-9]+/g, '-')
.replace(/^-+|-+$/g, '')

Check failure

Code scanning / CodeQL

Polynomial regular expression used on uncontrolled data High

This
regular expression
Loading
that depends on
library input
Loading
may run slow on strings with many repetitions of '-'.
This
regular expression
Loading
that depends on
library input
Loading
may run slow on strings with many repetitions of '-'.
This
regular expression
Loading
that depends on
library input
Loading
may run slow on strings with many repetitions of '-'.
@sonarqubecloud
Copy link

sonarqubecloud bot commented Mar 23, 2026

Quality Gate Failed Quality Gate failed

Failed conditions
4 Security Hotspots
C Security Rating on New Code (required ≥ A)
C Reliability Rating on New Code (required ≥ A)

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

automated Automated PR upstream-sync Automated upstream sync

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@vinaayakh-aot