Draft 10.2 Release Notes

[rowanseymour]

New Features

• New user account management system (using allauth) which includes:
  • Enforced email verification
  • More notification emails on account changes (e.g. adding 2FA)
• New AI features:
  • Users can add LLM providers to their account
  • TODO
• Session wait timeouts, expirations and campaign events are now processed every 30 seconds instead of 1 minute and the scheduling mechanism for those has been unified and rewritten to be more performant.
• Campaign events which are messages are now handled as broadcasts rather than flows so don't create unnecessary runs and sessions.
• Campaign events are shown with the number of contacts that are currently scheduled for that event.
• Flow list page shows number of ongoing runs in that flow.
• Quick replies can have extra text which in the case of WhatsApp is used as description for items in list messages (only exposed via API currently).

Bug Fixes

• TODO

Security Fixes

• Constant time checking of shared secrets in Courier and Mailroom
• Updates to latest gunicorn which fixes https://security.snyk.io/vuln/SNYK-PYTHON-GUNICORN-6615672

Other Changes

• Maximum length validation of all search queries in the UI.

Deployment Notes

• Need to fake the initial migration of the new temba.users app since we reuse the existing user database table, e.g. echo "INSERT INTO django_migrations (app, name, applied) VALUES ('users', '0001_initial', CURRENT_TIMESTAMP);" | python manage.py dbshell
• User model changes assume that email field is unique. This should be checked and addressed manually prior to upgrading.
• In RapidPro settings temba.channels.types.facebookapp.FacebookAppType is now temba.channels.types.facebook.FacebookType and temba.channels.types.viber_public.ViberPublicType is now temba.channels.types.viber.ViberType