PASS release 2.0.0

[Tim Sanders]

The PASS team is happy to announce the release of version 2.0.0.

This major release marks our transition from the 1.x to the 2.x series. The removal of SWORD deposit support was the reason for the major release transition. The SWORD client previously used by PASS is no longer actively maintained and had become a security concern. For deposit into DSpace, PASS now directly utilizes the DSpace REST API. Due to the removal of SWORD, PASS 2.x is not backwards compatible with PASS 1.x.

This release includes new tools for improving code quality with SonarQube and JaCoCo. The JaCoCo tool provides code coverage that measures how thoroughly your tests exercise the code. It helps to identify untested parts of a code base and improve the corresponding tests. SonarQube is a platform that provides continuous inspection of code quality to detect bugs, vulnerabilities, and code smells. It provides quality checks built into our GitHub pull request, assisting with the review process. SonarQube ingests the JaCoCo reports and displays all analysis within the SonarQube Eclipse Pass projects.

We also had our first pull request from a contributor not at JHU (thanks Tom!), updating PASS Docker InvenioRDM—a milestone for greater community involvement. The current state of the InvenioRDM integration is foundational and we would still appreciate input and testing of the InvenioRDM integration. Additional highlights include key security fixes to address identified CVEs, investigating the feasibility of removing AlpacaJS and replacing them with JSONForms to simplify dynamic form generation, archiving outdated documentation, and fixing a display issue with the proxy search dialog.

For more information about this or any previous release, please see our release notes. Our plans for upcoming releases can be seen on our roadmap.