1.10.0

Release Notes

For: uc-cdis/requestor

Notes since tag: 1.9.0

Notes to tag/commit: 1.10.0

Generated: 2026-05-26

Improvements

• Add authorization check when a request's status is set to one of the
  UPDATE_ACCESS_STATUSES at creation (#85)
• Fix and re-enable database migrations unit tests (#82)
• Update to use new Amazon Linux base image and use the same structure as our
  other python services. (#59)
• Utilizing "gen3" user instead of "root" for more secure containers (#59)
• Moving to Poetry to manage our virtual environments (#59)
• Multi-stage Docker builds for smaller images (#59)
• Move to Gunicorn (#59)
• Add a description of how to remove access in the authorization document.
  (#63)
• Create resources and policies after the authorization check instead of
  before (#58)
• Log detailed authentication errors from authutils (#56)

Dependency Updates

• Update Python from 3.9 to 3.13 (#82)
• Remove Gino, use sqlalchemy (#82)
• starlette to 0.41.2, and other dependency updates (#75)
• Bumps the pip group with 5 updates: (#73)
• Bumps authlib from 1.3.0 to 1.3.1.
  (#70)
• Bumps requests from 2.31.0 to 2.32.0.
  (#69)
• Bumps jinja2 from 3.1.3 to 3.1.4. (#67)
• Bumps gunicorn from 20.1.0 to
  22.0.0. (#66)
• Bumps urllib3 from 2.0.2 to 2.0.7.
  Bumps jinja2 from 3.1.2 to 3.1.3. (#64)
• Bumps idna from 3.4 to 3.7. (#62)