v2.19.0

Added

• Quality management tab on quality control allows to enabling/disabling GT frames (#8329)

Changed

• Moved quality control from analytics page to quality control page (#8329)

Removed

• Quality report no longer available in CVAT community version (#8329)

Fixed

• Fixing a problem when project export does not export skeleton tracks (#8423)

Security

• Fixed an XSS vulnerability in request-related endpoints (https://github.com/cvat-ai/cvat/security/advisories/GHSA-hp6c-f34j-qjj7)

• Fixed an XSS vulnerability in the quality report data endpoint (https://github.com/cvat-ai/cvat/security/advisories/GHSA-2c85-39cc-2px9)

v2.18.0

Added

• New quality settings Target metric, Target metric threshold, Max validations per job (#8347)

• Ability to specify location when exporting datasets and backups using SDK (#8255)

• Shortcuts in user interface now may be customized depends on a user requirements (#8186)

• Added analytics events for function calls (#8395)

Changed

• Mean annotaion quality card on quality page now displays a value depending on Target metric setting (#8347)

• When cancelling a request, a user is no longer required to have permissions to perform the original action (#8369)

• Lambda function endpoints now return 500 instead of 404 if a function's metadata is invalid (#8406)

• An unknown lambda function type is now treated as invalid metadata and the function is no longer included in the list endpoint output (#8406)

Removed

• Legacy component to setup shortcuts to switch a label (#8416)

Fixed

• An issue that occurred when exporting the same dataset or backup twice in a row using SDK (#8255)

• An issue that occurred when exporting a dataset or backup using SDK when the default project or task location refers to cloud storage (#8255)

• Export crashed on skeleton track with missing shapes (#8377)

• One lambda function with invalid metadata will no longer break function listing (#8406)

Security

• Fixed a missing authorization vulnerability in webhook delivery endpoints (GHSA-p3c9-m7jr-jxxj)

v2.17.0

Added

• Added support for YOLOv8 formats (#8240)

• Last assignee update date in quality reports, new options in quality settings (#8321)

Changed

• User sessions now expire after two weeks of inactivity (#8289)

• A user changing their password will now invalidate all of their sessions except for the current one (#8289)

Deprecated

• Client events upload:annotations, lock:object, change:attribute, change:label (#8304)

Removed

• Client event restore:job (#8304)

• Removed the /auth/login-with-token page (#8336)

Fixed

• Go back button behavior on analytics page (#8277)

• Logging out of one session will no longer log the user out of all their other sessions (#8289)

• Prevent export process from restarting when downloading a result file, that resulted in downloading a file with new request ID (#8216)

• Race condition occurred while handling parallel export requests (#8216)

• Requests filtering using format and target filters (#8216)

• Sometimes it is not possible to switch workspace because active control broken after trying to create a tag with a shortcut (#8334)

v2.16.3

Added

• Labels mapper on UI now supports attributes for skeleton points (#8251)

• Segment Anything now supports bounding box input (#8270)

Changed

• Player navigation not blocked anymore if a frame is being loaded from the server (#8284)

• Accelerated implementation of IntelligentScissors from OpenCV (#8293)

Fixed

• Issue tool was not reset after creating new issue (#8236)

• Fixed issue with slices handling in LazyList which caused problems with exporting masks in CVAT for images 1.1 format. (#8299)

v2.16.2

Changed

• Following the link in notification no longer reloads the page (#8197)

Fixed

• Copy/paste annotation guide with assets did not work, showing the message Asset is already related to another guide (#7989)

• Undo can't be done when a shape is rotated (#8129)

• Exporting a skeleton track in a format defined for shapes raises error operands could not be broadcast together with shapes (X, ) (Y, ) (#8179)

• Delete label modal window does not have cancellation button (#8196)

• Export and export cache clean rq job retries' hangs (#8198)

• The automatic annotation process failed for tasks from cloud data (#8199)

• Request card was not disabed properly after downloading (#8197)

• Annotations in a ground truth jobs marked as GT annotations after modifying (#8206)

• API call to run automatic annotations fails on a model with attributes when mapping not provided in the request (#8250)

• Fixed a label collision issue where labels with similar prefixes and numeric suffixes could conflict, causing error on export. (#8262)

v2.16.1

Added

• Datumaro format now supports skeletons (#8165)

Changed

• Quality analytics page will now report job assignees from quality reports instead of current job assignees (#8123)

• When exporting projects in COCO format, images in different subsets are now stored in different subfolders (#8171)

• On task export, put images to folders depending on subset (#8176)

Fixed

• User interface crashed if there are active creating task requests on a project page (#8187)

• Permission error: organization owner cannot export dataset and backup (#8185)

v2.16.0

Added

• Set of features to track background activities: importing/exporting datasets, annotations or backups, creating tasks. Now you may find these processes on Requests page, it allows a user to understand current status of these activities and enhances user experience, not losing progress when the browser tab is closed (#7537)

• User now may update a job state from the corresponding task page (#8102)

• The server will now record and report last assignee update time (#8119)

Changed

• "Finish the job" button on annotation view now only sets state to 'completed'. The job stage keeps unchanged (#8102)

• Log files for individual backend processes are now stored in ephemeral storage of each backend container rather than in the cvat_logs volume (#8121)

• Do not reset opacity level each time frame switched if there are masks on the frame (#8149)

Removed

• Renew the job button in annotation menu was removed (#8102)

Fixed

• A possible crash in quality computation for tasks with skeletons and normal labels (#8100)

• Quality report button and timestamp alignments on quality page (#8106)

• Fixed display of working time in Grafana management dashboard (#8112)

• Fixed unexpected deletion of log files of other processes that led to OSError: [Errno 116] Stale file handle error on NFS volumes (#8121)

• Attribute values with ":" may be displayed incorrectly on canvas (#8137)

• Fixed broken server Docker image build (#8160)

• DOMException: Failed to execute 'atob' on 'Window': The string to be decoded is not correctly encoded (#8166)

v2.15.0

Added

• Propagate shapes action to create copies of visible shapes on multiple frames forward or backward (#8044)

• [Helm] Ability to use an external ClickHouse instance (#8048)

Changed

• Improved performance for mask import and export (#8049)

Fixed

• Failing dataset export cleanup attempts for exports before #7864 (#8039)

• Exception 'this.el.node.getScreenCTM() is null' occuring in Firefox when a user resizes window during skeleton dragging/resizing (#8067)

• Exception 'Edge's nodeFrom M or nodeTo N do not to refer to any node' occuring when a user resizes window during skeleton dragging/resizing (#8067)

• Slightly broken layout when running attributed face detection model (#8072)

• Exception 'this.el.node.getScreenCTM() is null' when cancel drawing shape for any tracker (#8080)

• The switcher to block an active tool on annotation header is not highligted properly (#8081)

• Points shape color wasn't changed on changing label (#8082)

• Incorrect counting of tracked shapes when computing analytics report (#8088)

• Ordering of frame intersection column on task quality page (#8089)

• The property "outside" not propagated correctly on skeleton elements (#8105)

v2.14.4

Added

• Polyline editing may be finished using corresponding shortcut (#7922)

Changed

• Single shape annotation mode allows to modify/delete objects (#8017)

Fixed

• Invalid server cache cleanup for backups and events (after #7864) (#8040)

• Filters by created date, updated date do not work on different pages (e.g. list of tasks or jobs) (#8055)

v2.14.3

Changed

• Increased server healthcheck timeout 5 -> 15 seconds (#7993)

Fixed

• Cannot read properties of null (reading 'draw') happens when use shortcut N in a task where first label has type "tag" (#7997)

• When use route /auth/login-with-token/<token> without next query parameter the page reloads infinitely (#7999)

• Fixed kvrocks port naming for istio (#8010)

• Exception: State cannot be updated during editing, need to finish current editing first (#8019)

Security

• Mitigated a CSRF vulnerability in backup and export-related endpoints (GHSA-jpf9-646h-4px7)

• Fixed an SSRF vulnerability with custom cloud storage endpoints (GHSA-q684-4jjh-83g6)