Merge branch 'dev' into LNK-4551-new

Author: seanmcilvenna

.github/workflows/pr-title-check.yml

@@ -30,8 +30,8 @@ jobs:
           } else {
             core.setFailed('Cannot determine PR title for validation.')
           }
-          const prTitleExpectedPattern = /(^LNK-\d+:\s)|(^TECH_DEBT:\s)|(^DOCS:\s)/g
-          const prTitleMismatchError = 'Invalid PR title "' + prTitle + '"! Must begin with LNK-nnnn:<space> or TECH_DEBT:<space> or DOCS:<space>, e.g. LNK-1234: My PR title, or TECH_DEBT: My PR title or DOCS: My PR title'
+          const prTitleExpectedPattern = /(^LNK-\d+:\s)|(^TECH_DEBT:\s)|(^DOCS:\s)|(^SNYK:\s)/g
+          const prTitleMismatchError = 'Invalid PR title "' + prTitle + '"! Must begin with LNK-nnnn:<space> or TECH_DEBT:<space> or DOCS:<space> or SNYK:<space>, e.g. LNK-1234: My PR title, or TECH_DEBT: My PR title or DOCS: My PR title or [Snyk] My PR title'
           if (!prTitleExpectedPattern.test(prTitle)) {
             // Fail the workflow
             console.log(prTitleMismatchError)

.github/workflows/snyk_pull_request_template.yaml

@@ -0,0 +1,13 @@
+title: "SNYK: {{ snyk_pull_request_type }} for {{ package_name }}"
+description: |
+  {{ #is_upgrade_pr }}
+  This PR has been opened by Snyk to make sure our repositories are kept up-to-date.
+  It updates **{{ package_name }}** from version {{ package_from }} to version {{ package_to }}.
+  Review relevant docs for possible breaking changes.
+  {{ /is_upgrade_pr }}
+  
+  {{ #is_fix_pr }}
+  This PR applies a fix for a vulnerability in **{{ package_name }}**.
+  {{ /is_fix_pr }}
+
+  **Issues Fixed:** {{ issue_count }}

Java/measureeval/src/main/java/com/lantanagroup/link/measureeval/controllers/MeasureDefinitionController.java

@@ -31,7 +31,7 @@
 
 @RestController
 @RequestMapping("/api/measureeval/measure-definition")
-@PreAuthorize("hasRole('LinkUser')")
+@PreAuthorize("hasAnyRole('LinkUser', 'LinkAdministrator')")
 public class MeasureDefinitionController {
 
     private final Logger _logger = LoggerFactory.getLogger(MeasureDefinitionController.class);

Java/measureeval/src/main/java/com/lantanagroup/link/measureeval/controllers/PatientController.java

@@ -13,7 +13,7 @@
 
 @RestController
 @RequestMapping("/api/measureeval/patient")
-@PreAuthorize("hasRole('LinkUser')")
+@PreAuthorize("hasAnyRole('LinkUser', 'LinkAdministrator')")
 public class PatientController {
     private final PatientReportingEvaluationStatusRepository patientReportingEvaluationStatusRepository;
     private final PatientStatusBundler patientStatusBundler;

Java/pom.xml

@@ -148,7 +148,7 @@
             <dependency>
                 <groupId>com.azure</groupId>
                 <artifactId>azure-storage-blob</artifactId>
-                <version>12.30.0</version>
+                <version>12.32.0</version>
             </dependency>
         </dependencies>
     </dependencyManagement>

Java/validation/pom.xml

@@ -148,7 +148,7 @@
         <dependency>
             <groupId>io.opentelemetry</groupId>
             <artifactId>opentelemetry-sdk-extension-autoconfigure</artifactId>
-            <version>1.38.0</version>
+            <version>1.56.0</version>
         </dependency>
         <dependency>
             <groupId>io.opentelemetry</groupId>

Scripts/should-run-smoke-test.sh

@@ -20,13 +20,14 @@ if [[ -z "${DIFF_RANGE}" ]]; then
   fi
 fi
 
+echo "Checking changes in range: ${DIFF_RANGE}" >&2
+
 # Folders where changes ALONE should NOT trigger the job
 ALLOWED_PREFIXES=(
   "Azure_Pipelines/"
   "docs/"
   "Scripts/"
   ".github/"
-  "Web/"
 )
 
 # Collect changed files (added/changed/renamed)
@@ -37,6 +38,7 @@ run_job="false"
 
 if ((${#FILES[@]} == 0)); then
   # no changes → skip
+  echo "No changes detected in range ${DIFF_RANGE}." >&2
   echo "run_job=${run_job}"
   exit 0
 fi
@@ -47,14 +49,20 @@ for file in "${FILES[@]}"; do
   for prefix in "${ALLOWED_PREFIXES[@]}"; do
     if [[ "${file}" == ${prefix}* ]]; then
       allowed="true"
+      echo "File '${file}' is in allowed prefix '${prefix}'. It does not trigger the job." >&2
       break
     fi
   done
 
   if [[ "${allowed}" == "false" ]]; then
+    echo "File '${file}' is NOT in any allowed prefix. Job must run." >&2
     run_job="true"
     break
   fi
 done
 
+if [[ "${run_job}" == "false" ]]; then
+  echo "All changed files are in allowed prefixes. Skipping job." >&2
+fi
+
 echo "run_job=${run_job}"