cigamit What's Changed Notable Items and New Features feat: notify on change by @blaipr in ctrliq/ascender696 Add dropdown option for VMWare Inventory Source collection by @cigamit in ctrliq/ascender773 Move the awxkit client out into its own repository by @blaipr in ctrliq/ascender660 Speed up OIDC login by reconciling org/team memberships in bulk by @2and3makes23 in ctrliq/ascender662 Slight improvements to social auth pipeline by @2and3makes23 in ctrliq/ascender678 Vendor django-ansible-base subset into awx/dab by @cigamit in ctrliq/ascender741 Bug Fixes fix: survey question edit link resolves to a doubled survey/ segment by @Aureliolo in ctrliq/ascender626 fix: SSO login buttons hidden when custom login info is empty by @samoz83 in ctrliq/ascender625 Fix the mobile nav toggle not working by @cigamit in ctrliq/ascender736 Fix issue with Workflow Node Timer inaccuracy by @cigamit in ctrliq/ascender771 Fix issue with duplicate prometheus HELP/TYPE lines by @cigamit in ctrliq/ascender772 Fix issue with sliced node names in workflow menu by @cigamit in ctrliq/ascender774 Defer loading of ansible_facts in HostLatestSummaryQuerySet by @ssimpson89 in ctrliq/ascender628 Removed the erroneous get_queryset override on InventorySourceGroupsList by @cigamit in ctrliq/ascender637 Label social auth login buttons and allow a custom SAML label by @Aureliolo in ctrliq/ascender622 Resolve Host last_job filters against the latest job host summary by @Aureliolo in ctrliq/ascender623 fix: prevent notification template render errors from crashing the error formatter by @Aureliolo in ctrliq/ascender630 fix: require superuser for the debug scheduler-trigger endpoints by @Aureliolo in ctrliq/ascender631 GitHub CI by @cigamit in ctrliq/ascender647 Point the docs at the Ascender client and drop leftover AWX names by @blaipr in ctrliq/ascender667 Report the Twilio error instead of a bare reraise by @blaipr in ctrliq/ascender668 Give outgoing notification requests a timeout by @blaipr in ctrliq/ascender670 Emit every activity stream entry of an m2m change, not the last one by @blaipr in ctrliq/ascender669 Set additionalProperties once in the injector schema by @blaipr in ctrliq/ascender673 Write the round up note as a comment, not a noqa directive by @blaipr in ctrliq/ascender674 Drop partition names cleanup_jobs cannot read a date out of by @blaipr in ctrliq/ascender671 Stop coerce_naive_until crashing on an UNTIL it cannot read by @blaipr in ctrliq/ascender672 Resolve 2 flaky tests by @cigamit in ctrliq/ascender694 Update openstack credential by @ssimpson89 in ctrliq/ascender656 Attempt to resolve sporatic flickering of Follow button by @cigamit in ctrliq/ascender737 fix: remove the service worker by @Aureliolo in ctrliq/ascender646 Fix container group TLS verification broken by the kubernetes 36 upgrade by @blaipr in ctrliq/ascender649 Let flake8 catch identity comparisons against literals by @blaipr in ctrliq/ascender652 Re-attach latest job host summaries on clones of an evaluated queryset by @blaipr in ctrliq/ascender650 Describe the locale lists accurately and pin them to the files on disk by @blaipr in ctrliq/ascender651 Bulk-load recent_jobs for the host list instead of one query per host by @blaipr in ctrliq/ascender653 Stop cleanup_jobs crashing on a batch window that holds no jobs by @blaipr in ctrliq/ascender654 Cover the PostgreSQL-only paths of cleanup_jobs with real tests by @blaipr in ctrliq/ascender655 fix: use awx.version in the SQL query profiler by @blaipr in ctrliq/ascender732 Build ARM64 images separately by @cigamit in ctrliq/ascender740 fix: make the workflow job selector show and switch the right job by @blaipr in ctrliq/ascender760 test: add an end-to-end browser suite for the UI by @blaipr in ctrliq/ascender762 Docs Add dark mode to the docsite by @ssimpson89 in ctrliq/ascender621 Update Rebranding Docs by @ssimpson89 in ctrliq/ascender677 Add Date search to docs by @ssimpson89 in ctrliq/ascender681 docs: standardize README and community files by @blaipr in ctrliq/ascender682 docs: Clean up references by @ssimpson89 in ctrliq/ascender768 Add supported architectures documentation by @ssimpson89 in ctrliq/ascender738 Added theme selector in docs by @ssimpson89 in ctrliq/ascender739 Document the Labels listing view and pseudo-folder workflow by @ssimpson89 in ctrliq/ascender657 Add installation/backup/restore to docs by @ssimpson89 in ctrliq/ascender770 Backend Upgrades Remove the orphaned @rspack/core build dependency by @blaipr in ctrliq/ascender659 Let Dependabot open version updates for actions and the UI by @blaipr in ctrliq/ascender675 ci: bump docker/setup-qemu-action from 4.1.0 to 4.2.0 by @dependabot[bot] in ctrliq/ascender683 ci: bump docker/setup-buildx-action from 4.1.0 to 4.3.0 by @dependabot[bot] in ctrliq/ascender684 ci: bump actions/checkout from 6.0.2 to 7.0.1 by @dependabot[bot] in ctrliq/ascender685 ci: bump actions/setup-python from 6.2.0 to 7.0.0 by @dependabot[bot] in ctrliq/ascender686 ci: bump docker/setup-buildx-action from 4.1.0 to 4.3.0 in /.github/actions/awx_devel_image by @dependabot[bot] in ctrliq/ascender689 ci: bump crazy-max/ghaction-github-runtime from 3.1.0 to 4.0.0 in /.github/actions/awx_devel_image by @dependabot[bot] in ctrliq/ascender688 test: add a type check job and broaden the flake8 selection by @blaipr in ctrliq/ascender695 build: bump @testing-library/user-event from 14.6.1 to 14.6.5 in /awx/ui by @dependabot[bot] in ctrliq/ascender687 build: bump certifi from 2026.2.25 to 2026.7.22 in /docs/docsite by @blaipr in ctrliq/ascender698 build: bump dompurify from 3.4.13 to 3.4.14 in /awx/ui by @dependabot[bot] in ctrliq/ascender690 build: bump charset-normalizer from 3.4.6 to 3.5.1 in /docs/docsite by @blaipr in ctrliq/ascender699 build: bump idna from 3.15 to 3.19 in /docs/docsite by @blaipr in ctrliq/ascender700 build: bump packaging from 26.0 to 26.3 in /docs/docsite by @blaipr in ctrliq/ascender701 build: bump pygments from 2.20.0 to 2.21.0 in /docs/docsite by @blaipr in ctrliq/ascender702 build: bump requests from 2.33.0 to 2.34.2 in /docs/docsite by @blaipr in ctrliq/ascender703 build: bump snowballstemmer from 3.0.1 to 3.1.1 in /docs/docsite by @blaipr in ctrliq/ascender704 build: bump postcss-preset-env from 11.3.2 to 11.4.0 in /awx/ui by @dependabot[bot] in ctrliq/ascender692 build: bump http-proxy-middleware from 4.1.1 to 4.2.0 in /awx/ui by @dependabot[bot] in ctrliq/ascender693 build: bump markdown from 3.10.2 to 3.10.3 in /requirements by @blaipr in ctrliq/ascender707 build: bump daphne from 4.2.2 to 4.2.3 in /requirements by @blaipr in ctrliq/ascender708 build: bump slack-sdk from 3.27.0 to 3.43.0 in /requirements by @blaipr in ctrliq/ascender705 build: bump prometheus-client from 0.20.0 to 0.26.0 in /requirements by @blaipr in ctrliq/ascender706 build: bump irc from 20.3.1 to 20.4.3 in /requirements by @blaipr in ctrliq/ascender709 build: bump filelock from 3.20.3 to 3.32.3 in /requirements by @blaipr in ctrliq/ascender710 build: bump pygithub from 2.8.1 to 2.10.0 in /requirements by @blaipr in ctrliq/ascender711 build: bump azure-identity from 1.25.2 to 1.25.3 in /requirements by @blaipr in ctrliq/ascender712 build: bump jsonschema from 4.25.1 to 4.26.0 in /requirements by @blaipr in ctrliq/ascender716 build: bump azure-keyvault-secrets from 4.11.0 to 4.11.1 in /requirements by @blaipr in ctrliq/ascender715 build: bump python-ldap from 3.4.5 to 3.4.7 in /requirements by @blaipr in ctrliq/ascender721 build: bump django-valkey from 0.3.2 to 0.4.0 in /requirements by @blaipr in ctrliq/ascender720 build: bump django-solo from 2.4.0 to 2.5.1 in /requirements by @blaipr in ctrliq/ascender713 build: bump requests from 2.33.0 to 2.34.2 in /requirements by @blaipr in ctrliq/ascender714 build: bump django-auth-ldap from 5.2.0 to 5.3.0 in /requirements by @blaipr in ctrliq/ascender717 build: bump python-daemon from 3.0.1 to 3.1.2 in /requirements by @blaipr in ctrliq/ascender719 build: bump boto3 from 1.39.1 to 1.43.78 in /requirements by @blaipr in ctrliq/ascender723 build: bump django-polymorphic from 4.1.0 to 4.11.7 in /requirements by @blaipr in ctrliq/ascender722 build: bump psutil from 5.9.8 to 7.2.2 in /requirements by @blaipr in ctrliq/ascender725 build: bump twilio from 8.13.0 to 9.11.0 in /requirements by @blaipr in ctrliq/ascender724 build: bump psycopg from 3.1.18 to 3.3.4 in /requirements by @blaipr in ctrliq/ascender729 build: bump asn1 from 2.7.0 to 3.3.0 in /requirements by @blaipr in ctrliq/ascender727 build: bump python-tss-sdk from 1.2.2 to 2.0.1 in /requirements by @blaipr in ctrliq/ascender730 build: bump dotenv-expand from 13.0.0 to 1000.0.0 in /awx/ui by @dependabot[bot] in ctrliq/ascender691 build: bump cachetools from 5.3.2 to 7.1.7 in /requirements by @blaipr in ctrliq/ascender726 Fix broken psycopg after upgrade by @cigamit in ctrliq/ascender763 Upgrade lingui stack to 6.6.0 and adopt message descriptors by @cigamit in ctrliq/ascender764 build: replace django-pglocks with django-pgware by @blaipr in ctrliq/ascender728 build: bump importlib-metadata from 4.6.4 to 9.0.0 in /requirements by @blaipr in ctrliq/ascender754 build: bump wheel from 0.46.3 to 0.48.0 in /requirements by @blaipr in ctrliq/ascender755 build: bump drf-spectacular from 0.29.0 to 0.30.0 in /requirements by @blaipr in ctrliq/ascender718 build: unblock and bump social-auth-core from 4.5.0 to 5.1.0 in /requirements by @blaipr in ctrliq/ascender731 build: bump filelock from 3.32.3 to 3.32.4 in /requirements by @blaipr in ctrliq/ascender743 build: bump azure-keyvault-secrets from 4.11.1 to 4.11.2 in /requirements by @blaipr in ctrliq/ascender744 build: bump gitpython from 3.1.59 to 3.1.60 in /requirements by @blaipr in ctrliq/ascender745 build: bump msal from 1.37.0 to 1.38.0 in /requirements by @blaipr in ctrliq/ascender746 build: bump cryptography from 50.0.0 to 50.0.1 in /requirements by @blaipr in ctrliq/ascender747 build: bump boto3 from 1.43.78 to 1.43.80 in /requirements by @blaipr in ctrliq/ascender748 build: bump receptorctl from 1.6.2 to 1.6.4 in /requirements by @blaipr in ctrliq/ascender750 build: bump django-guid from 3.5.2 to 3.6.1 in /requirements by @blaipr in ctrliq/ascender751 build: bump packaging from 24.2 to 26.3 in /requirements by @blaipr in ctrliq/ascender753 build: bump cython from 3.2.5 to 3.3.0 in /requirements by @blaipr in ctrliq/ascender756 build: bump pkgconfig from 1.5.5 to 1.6.0 in /requirements by @blaipr in ctrliq/ascender757 build: bump setuptools-rust from 1.8.1 to 1.13.0 in /requirements by @blaipr in ctrliq/ascender758 build: bump setuptools from 83.0.0 to 84.0.0 in /requirements by @blaipr in ctrliq/ascender759 fix: call dotenv-expand through its named export by @blaipr in ctrliq/ascender697 Upstream Patches Upstream 16552 - Remove skip_tags character limit by converting to TextField by @cigamit in ctrliq/ascender638 Upstream 16467 - Reset orphaned waiting jobs when controller node is deprovisioned by @cigamit in ctrliq/ascender639 Upstream 16554 - Replace OR with UNION in team list RBAC query by @cigamit in ctrliq/ascender640 Upstream 16563 - Batch-delete JobHostSummary before cleanup to avoid invalid memory alloc by @cigamit in ctrliq/ascender641 Upstream 16558 - Set PostgreSQL statement_timeout on web worker DB connections by @cigamit in ctrliq/ascender642 Upstream 16557 - Use unfiltered count for activity stream pagination by @cigamit in ctrliq/ascender643 Upstream 16564 - Prefer scm_revision as the cache_id if available by @cigamit in ctrliq/ascender644 Security Fixes These CVEs were against the underlying packages we depend on, not directly on Ascender. For several of these, we did not use the affected code at all. They were resolved nevertheless as they will still be reported on any vulnerability scan on the container in your environment. Upgrade GitPython to resolve GHSA-hh9p-6wh2-4mfc GHSA-9rj7-rf2p-w77r GHSA-4gmw-gg2m-w46p GHSA-hmq2-w58f-27jc GHSA-wvpp-8hx9-p66j GHSA-jm78-9fvv-mhgr by @cigamit in ctrliq/ascender633 Upgrade dompurify to resolve GHSA-55q2-fjhq-7xh7 by @cigamit in ctrliq/ascender634 Update nanoid to resolve GHSA-5p4m-2wfm-xmqj by @cigamit in ctrliq/ascender635 Upgrade js-yaml to resolve GHSA-5p4m-2wfm-xmqj by @cigamit in ctrliq/ascender636 Bump django:5.2.16 to 5.2.17 (2 advisories) by @ciq-triage[bot] in ctrliq/ascender624 Bump sqlparse:0.5.4 to 0.6.0 (3 advisories) by @ciq-triage[bot] in ctrliq/ascender676 Upgrade pip to resolve CVE-2026-13346 by @cigamit in ctrliq/ascender679 Upgrade browserslist to resolve CVE-2026-73089 CVE-2026-73088 by @cigamit in ctrliq/ascender680 New Contributors @Aureliolo made their first contribution in ctrliq/ascender622 @samoz83 made their first contribution in ctrliq/ascender625 @2and3makes23 made their first contribution in ctrliq/ascender662 Full Changelog: ctrliq/ascender25.5.1 → 25.6.0
