April 2025: 3.2.49 - 3.3.0

3.3.0

Fixes

Issue 49066: Canned Reports for Goals failing

Bug 49854: 6.4 MED - End-of-Life JavaScript Libraries in Use

Bug 49855: 6.5 MED - Insecure JavaScript Libraries in Use

Issue 50238: 360 responses by peers, direct reports, manager etc is not showing up anymore

Bug 50359: 6.5 MED - Insecure JavaScript Libraries in Use - Chart.js

Bug 50625: 6.5 MED - Insecure JavaScript Libraries in Use - jQuery-validation

Bug 50738: [Goals] Organisation name is missing

Bug 50797: 6.5 MED - Insecure JavaScript Libraries in Use - Select2

Bug 50977: Conversations - calculations crashing when multi-select element is not selected

Bug 51043: Observe customers timezone when booking meetings

Features

PBI 49052: Surveys to be made available starting from today (M)

PBI 49088: Question bank questions rating labels (M)

PBI 49846: [Goals] Remove old cards from new UI

PBI 50142: [Veracode] Deserialization of Untrusted Data CWE-502

PBI 50146: [Veracode] Permissive List of Allowed Inputs CWE-183

PBI 50586: Add opt-in test isolation to each Cypress spec

PBI 50751: Fix SASS deprecation warnings upon build

3.2.50

Fixes

Issue 48239: Automated performance reviews - AI summary

Issue 49833: Duplicate questions showing in a department dashboard

Bug 49851: 6.1 HIGH - Stored Cross-site Scripting

Bug 49853: 6.3 MED - Unrestricted File Upload Vulnerability

Bug 49856: 6.6 MED - Weak Password Policy

Bug 49858: 6.8 LOW - Open URL Redirect

Issue 49882: Using translations/Long labels are not properly displayed on Talent Mapping Configuration

Bug 49899: when mentioned in a comment - it will not be shown in teams notification

Issue 50217: Conversations hyperlinks are not opened from teams

Issue 50274: Issue Syncing Departments

Bug 50299: AD Sync failing due to blank surname field

Issue 50315: Users avatars are not displayed properly on talent mapping grid

Bug 50359: 6.5 MED - Insecure JavaScript Libraries in Use - Chart.js

Bug 50438: Unable to sync extensionAttributes as Departments

Issue 50484: Multiple choices responses from PRs are not exported to reports

Features

PBI 49878: Address XSS vulnerability in File Uploads

PBI 49879: Address XSS vulnerability in email templates

PBI 50015: Vunerability scanning of P&E uploads

PBI 50139: [Veracode] Improper Output Neutralization for Logs CWE-117

PBI 50148: [Veracode] Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CWE-89

PBI 50149: [Veracode] Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) CWE-80

PBI 50251: Z-index bug on mentions/hashtags going over RTE actions in checkins

PBI 50272: Custom log in page branding

PBI 50296: Check if datetime.now() calls can be replaced with timezone in rest framework authentication module

PBI 50331: Allow configurations of additional CSP headers at runtime

PBI 50345: Add admin page where partners + CSM can create customer accounts and depreciate the csp_sign_up page

PBI 50391: Organisation populator for SectionStageVisibility

3.2.49

Fixes

Bug 48937: Issue with Goals containing 0 after the decimal point

Bug 49196: Reporting includes responses from drafts (M)

Bug 49852: 6.2 MED - Weak Password Reset Token Generation

Bug 49856: 6.6 MED - Weak Password Policy

Bug 49928: Comment is missing for sub-goals

Bug 49963: [Goals] Submition page crashes when there are no Personal or Team goals or both

Bug 50300: Performance review background task crashed

Issue 50315: Users avatars are not displayed properly on talent mapping grid

Features

PBI 45357: Configuring email notification sender

PBI 49280: Allow for Vacations/Leave functionality to be disabled

PBI 49670: Test coverage: conversations - duplicate field for multiple choice

PBI 49684: Closed goal UI adjustments

PBI 49691: [Goals] Mobile and tablet view

PBI 49926: Goals HSP Coverage Cypress

PBI 49951: Extract Auto-calculated tag and responsible person avatar into a separate components

PBI 50138: [Veracode] Insufficient Entropy CWE-331

PBI 50215: Update the version of shared project