v2.0

What's new

This release introduces significant new features including a virtual file manager, comprehensive notification system, dataset
inventory, plugin marketplace enhancements, and post-market monitoring. It also includes UI/UX improvements, testing
infrastructure, and numerous bug fixes.

Virtual File Manager: Organize uploaded files into a hierarchical folder structure without changing where files are linked from. Files can exist in multiple folders (tag-like behavior), with "All Files" and "Uncategorized" default views.

In-App Notification System: Comprehensive real-time notification system featuring:

• Server-Sent Events (SSE) for instant updates
• Email integration for important notifications
• Notification types for tasks, reviews, approvals, policies, and mentions
• "Load more" pagination in notification dropdown
• Mark as read functionality

Dataset Inventory: New dataset management under Model Inventory for EU AI Act Article 10 compliance:

• Track training, validation, testing, and production datasets
• Data classification levels (Public, Internal, Confidential, Restricted)
• PII tracking and bias documentation
• Dataset-model and dataset-project linking

Plugin Marketplace:

• Plugin install/uninstall functionality
• Generic plugin execute endpoint for extensibility
• Enhanced custom import plugin with separate framework support
• Improved sidebar navigation and consistent styling

Governance Score Widget
Task Deadline View
New deadline view for task management with priority colored flags and inline editing
Unified Upload Component

What's Changed

• fix: preserve paragraph formatting when saving policies from templates by @gorkem-bwl in #3093
• Feat/reusable dropdown with icons by @Innagl in #3086
• fix: standardize action dropdown styles in evals tables by @gorkem-bwl in #3088
• Update workflows by @HarshP4585 in #3091
• docs: add comprehensive technical documentation by @gorkem-bwl in #3099
• Rotate severity label 180 deg by @Innagl in #3105
• Approval workflow button convert to an icon button by @Innagl in #3106
• 3054 setup repository to start tests by @DeboraSerra in #3115
• Fix: Remove Stale Uppy Code by @Br0wnHammer in #3101
• feat: add post-market monitoring for EU AI Act compliance by @gorkem-bwl in #3098
• Eval dashboard fixes by @EfeAcar6431 in #3121
• Add plugins by @HarshP4585 in #2996
• feat: add generic plugin execute endpoint by @gorkem-bwl in #3127
• Fix password validation checks showing incorrect icons by @gorkem-bwl in #3116
• 2812 app logs timezone by @DeboraSerra in #3056
• feat: add governance score widget to dashboard by @gorkem-bwl in #3087
• Feature/priority colored flags and inline edit by @Innagl in #3102
• feat: add comprehensive security scanning to CI/CD pipeline by @gorkem-bwl in #3128
• 3110 tests for application mappers directory by @DeboraSerra in #3117
• Updated routes for plugins by @HarshP4585 in #3132
• chore(deps): bump the npm_and_yarn group across 3 directories with 3 updates by @dependabot[bot] in #3126
• Enhancements and Fixes by @MuhammadKhalilzadeh in #3165
• test(utils): add missing tests to reach full line and branch coverage by @Walber2903 in #3122
• feat: add deadline view for task management by @gorkem-bwl in #3125
• 3114 tests for application validations directory by @DeboraSerra in #3131
• ci: bump actions/upload-artifact from 4 to 6 by @dependabot[bot] in #3134
• ci: bump docker/build-push-action from 4 to 6 by @dependabot[bot] in #3135
• docker(frontend): bump nginx from 1.25-alpine to 1.29-alpine in /Clients by @dependabot[bot] in #3133
• ci: bump aquasecurity/trivy-action from 0.28.0 to 0.33.1 by @dependabot[bot] in #3138
• docker(backend): bump node from 20-alpine to 25-alpine in /Servers by @dependabot[bot] in #3137
• ci: bump appleboy/ssh-action from 0.1.5 to 1.2.5 by @dependabot[bot] in #3139
• ci: bump docker/setup-buildx-action from 2 to 3 by @dependabot[bot] in #3140
• Selectable Cards to filter Vendor Risks tables by @MuhammadKhalilzadeh in #3167
• refactor: improve plugins marketplace UI with sidebar navigation and consistent styling by @gorkem-bwl in #3166
• Visual effects and messages on Risk Cards to Filter Vendor Risk table by @MuhammadKhalilzadeh in #3169
• Scaffold GRS dataset generation pipeline + the Normative Seed Layer (Step 0-1) by @sermengi in #3171
• docker(frontend): bump node from 20-alpine to 25-alpine in /Clients by @dependabot[bot] in #3136
• deps(frontend): bump the frontend-minor-patch group in /Clients with 6 updates by @dependabot[bot] in #3147
• deps(frontend): bump @types/node from 22.19.7 to 25.0.10 in /Clients by @dependabot[bot] in #3153
• deps(frontend): bump vitest from 3.2.4 to 4.0.18 in /Clients by @dependabot[bot] in #3155
• deps(frontend): bump @vitest/coverage-v8 from 3.2.4 to 4.0.18 in /Clients by @dependabot[bot] in #3149
• deps(frontend): bump @mui/styled-engine-sc from 6.4.9 to 7.3.7 in /Clients by @dependabot[bot] in #3157
• deps(frontend): bump globals from 16.5.0 to 17.2.0 in /Clients by @dependabot[bot] in #3162
• deps(frontend): bump react and @types/react in /Clients by @dependabot[bot] in #3163
• deps(backend): bump the backend-minor-patch group in /Servers with 15 updates by @dependabot[bot] in #3148
• deps(backend): bump resend from 4.8.0 to 6.9.1 in /Servers by @dependabot[bot] in #3151
• deps(backend): bump tsc-watch from 6.3.1 to 7.2.0 in /Servers by @dependabot[bot] in #3152
• deps(eval): bump langfair from 0.6.6 to 0.8.0 in /EvaluationModule by @dependabot[bot] in #3145
• deps(eval): bump pyarrow from 21.0.0 to 23.0.0 in /EvaluationModule by @dependabot[bot] in #3144
• deps(eval): bump pydantic-core from 2.33.2 to 2.41.5 in /EvaluationModule by @dependabot[bot] in #3143
• deps(eval): bump datasets from 4.0.0 to 4.5.0 in /EvaluationModule by @dependabot[bot] in #3142
• Fix: AI Governance Score Card by @Br0wnHammer in #3170
• deps(backend): bump express and @types/express in /Servers by @dependabot[bot] in #3154
• deps(backend): bump ejs from 3.1.10 to 4.0.1 in /Servers by @dependabot[bot] in #3156
• deps(backend): bump dotenv from 16.6.1 to 17.2.3 in /Servers by @dependabot[bot] in #3158
• deps(backend): bump @types/node from 22.19.3 to 25.0.10 in /Servers by @dependabot[bot] in #3159
• Standardize timestamps across all database models by @gorkem-bwl in #2784
• build(deps): bump the uv group across 2 directories with 6 updates by @dependabot[bot] in #3096
• Feat: Unified Upload by @Br0wnHammer in #3172
• 3108 tests for applicationcommands directory by @Walber2903 in #3177
• Bump the pip group across 1 directory with 4 updates by @dependabot[bot] in #3180
• Potential fix for code scanning alert no. 51: Overly permissive regular expression range by @MuhammadKhalilzadeh in #3181
• Potential fix for code scanning alert no. 59: Overly permissive regular expression range by @MuhammadKhalilzadeh in #3182
• CodeRules Documentation by @MuhammadKhalilzadeh in #3183
• Making tables filterable using status cards by @MuhammadKhalilzadeh in #3193
• ci: bump github/codeql-action from 3 to 4 by @dependabot[bot] in #3184
• ci: bump actions/checkout from 3 to 6 by @dependabot[bot] in #3185
• deps(eval): bump huggingface-hub from 0.33.4 to 1.3.5 in /EvaluationModule by @dependabot[bot] in #3186
• deps(eval): bump tqdm from 4.67.1 to 4.67.2 in /EvaluationModule by @dependabot[bot] in #3187
• deps(eval): bump fairlearn from 0.12.0 to 0.13.0 in /EvaluationModule by @dependabot[bot] in #3188
• deps(backend): bump the backend-minor-patch group in /Servers with 6 updates by @dependabot[bot] in #3190
• deps(frontend): bump the frontend-minor-patch group in /Clients with 9 updates by @dependabot[bot] in #3191
• deps(frontend): bump @platejs/code-block from 49.0.0 to 52.0.11 in /Clients by @dependabot[bot] in #3192
• Fix: Remove Dead Date Functions by @Br0wnHammer in #3194
• Refactor: GovernanceScoreCard UI by @Br0wnHammer in #3195
• Better styling for the Cards by @MuhammadKhalilzadeh in #3198
• feat: add dataset inventory for EU AI Act Article 10 compliance by @gorkem-bwl in #3196
• Fix: Remove stale code from fileErrorHandler utils by @Br0wnHammer in #3197
• deps(frontend): Bump jspdf from 4.0.0 to 4.1.0 in /Clients by @dependabot[bot] in #3200
• Polishing Components with CodeRules by @MuhammadKhalilzadeh in #3201
• Enhance custom import plugin to have separate plugin frameworks by @HarshP4585 in #3179
• CI/CD Workflow Updates and JavaScript Popup Best Practices by @MuhammadKhalilzadeh in #3207
• Contextual renderer and adversarial perturbation layer (Step 2-3) by @sermengi in #3199
• Fix stylings for plugin framewoks by @HarshP4585 in #3210
• style: improve plugin pages UI consistency by @gorkem-bwl in #3209
• Fix: Remove stale code in paginationStorage.ts File by @Br0wnHammer in #3203
• feat: add comprehensive in-app notification system with email integration by @gorkem-bwl in #3213
• Update kubernetes to have evalserver volume by @HarshP4585 in #3094
• Adjust icon button color in disabled state by @Innagl in #3118
• Icon added to approval workflow breadcrumbs by @Innagl in #3174
• Enhanced components using CodeRules by @MuhammadKhalilzadeh in #3216
• feat(demo-data): enhance demo data generator with comprehensive sample data by @gorkem-bwl in #3205
• New PageHeaderExtended component created by @Innagl in #3215
• fix: make organization name modal mandatory on first login by @gorkem-bwl in #3217
• deps(eval): bump transformers from 4.53.2 to 5.0.0 in /EvaluationModule by @dependabot[bot] in #3141
• feat: add virtual file manager with folder organization by @gorkem-bwl in #3208
• fix: disable tour beacon on tasks deadline view by @gorkem-bwl in #3219
• fix: prevent 500 error when deleting demo data by @gorkem-bwl in #3222
• fix: prevent file manager action buttons from overflowing offscreen by @gorkem-bwl in #3220
• fix: stop experiments early on fatal API errors by @gorkem-bwl in #3079
• Fix: preserve heading formatting when saving and reopening policies by @gorkem-bwl in #3223
• Fix: resolve DOM nesting warnings by @gorkem-bwl in #3225
• Fix: incident update date field mismatch and improve validation logging by @gorkem-bwl in #3224
• Fix: React key prop warning in approval workflow form by @gorkem-bwl in #3226
• Fix: Edit API key modal and allow updating existing keys by @gorkem-bwl in #3228
• Feat: Add load more button and improve notification dropdown UI by @gorkem-bwl in #3229
• Add datasets documentation to model inventory guide by @gorkem-bwl in #3230
• UI: clean up plugin management page by @gorkem-bwl in #3227
• Merge develop into master (Feb 3) by @HarshP4585 in #3204

New Contributors

• @DeboraSerra made their first contribution in #3115

Full Changelog: v1.9...v2.0