6.5.0

Changes

Hypha now have ad hoc reporting and users will be notified of each new login via e-mail.

A new setting PROJECTS_TABLE_EXCLUDED_FIELDS allows for removing columns/filters from the project table to uncluttered it. This was added in preparation for more project table columns being added, some excluded by default.

The hook system have made a bit more modern so check that your custom plugins work as before. UI consistency improvements for PAF buttons and attachments, many requirements updates and more.

🚀 Features

• Ad hoc reports (#4884) @frjo
• Notify users on login via e-mail (#4824) @frjo

⚙️ Enhancements

• Make SOW/PF buttons the same (#4898) @wes-otf
• Implement PROJECTS_TABLE_EXCLUDED_FIELDS. (#4885) @frjo
• Avoid having comments partial load twise. (#4893) @frjo
• Use cotton attachment card everywhere an attachment is shown (#4892) @wes-otf
• Proper bulk action confirm dialogs on submission all view (#4832) @frjo

🐛 Bug Fixes

• Fix report bug when no project start was set. Issue introduced in ad hoc reporting feature (#4896) @frjo

🔧 Maintenance

• Update the hook system to use Python 3 and Django 5 patterns (#4802) @frjo
• Correcting a hash function, has no practical effect due to the unique_together constraints but it is still not correct (#4865) @frjo
• Bump js-yaml from 4.1.1 to 4.2.0 (#4881) @dependabot[bot]
• Python full updates 2026-06-21. (#4889) @frjo
• Python updates 2026-06-21. (#4888) @frjo
• Updated sandbox_db.dump with migrations (#4867) @wes-otf
• Bump shell-quote from 1.8.2 to 1.8.4 (#4863) @dependabot[bot]
• Mypy/zuban adjustments to avoid false errors (#4862) @frjo
• Python updates 2026-06-08. (#4861) @frjo

Contributors to this release: @dependabot[bot], @frjo, @wes-otf and dependabot[bot]

Full changelog: v6.4.0...v6.5.0

6.4.0

Changes

Passkeys in Hypha! Set WEBAUTHN_RP_ID to activate in production, see settings/base.py.

You want to permanently clear out old submission but keep some stats about them? Set SUBMISSION_ANONYMIZATION_ENABLED to true.

🚀 Features

• Add support for passkeys to Hypha (#4772) @frjo
• Add author updated feature to submission (#4380) @sandeepsajan0
• Add anonymizing of user applications feature (#4702) @wes-otf

⚙️ Enhancements

• Replace author Edit button with new window link icon (#4856) @wes-otf
• Secure cookies on production, check next redirect, permission checks for partials (#4843) @frjo
• Add missing translated strings (#4789) @frjo
• Align submission and project detail pages styling (#4820) @frjo
• Move strings from js to data attributes so they become translatable. (#4813) @frjo

🐛 Bug Fixes

• Retrieve reviewforms by sort_order explicitly. (#4859) @frjo
• Do not use custom password field template for wagtail admin. (#4845) @frjo
• Added upload (and debug) to whitelisted URLs (#4858) @wes-otf
• Bug fix for wagtail admin user save (#4848) @frjo
• Fix render of MultiInputCharFieldBlock when no value set so it does not leave tags unclosed (#4814) @frjo

🔧 Maintenance

• Python updates 2026-06-01. Bump Hypha version. (#4860) @frjo
• Memory use improvements (#4837) @frjo
• Python updates 2026-05-20. (#4855) @frjo
• Update uv-lock after adding setting exclude-newer. (#4850) @frjo
• Replace pre-commit/action that uses outdated node version with direct install and call of pre-commit (#4849) @frjo
• Set a min-release-age to 3 days for both npm and uv. (#4846) @frjo
• Python updates 2026-05-09. (#4842) @frjo
• Bump fast-uri from 3.0.6 to 3.1.2 (#4838) @dependabot[bot]
• Bump @babel/plugin-transform-modules-systemjs from 7.29.0 to 7.29.4 (#4840) @dependabot[bot]
• Remove old django-heroku and scout-apm (#4836) @frjo
• Python updates 2026-05-05. (#4835) @frjo
• Bump postcss from 8.5.6 to 8.5.13 (#4834) @dependabot[bot]
• The clear_cache command is part of django-extensions so move it back to production (#4833) @frjo
• Permission improvements (#4831) @frjo
• Removed a number of unused or very sparsly used packages. (#4830) @frjo
• Update locales. (#4829) @frjo
• Python updates 2026-04-22. (#4828) @frjo
• Retire jQuery (#4818) @frjo
• Updated pre-commit conf. (#4825) @frjo
• Remove some unused sass styles (#4811) @frjo
• Python updates 2026-04-16. (#4823) @frjo
• Update requirements files. (#4819) @frjo
• Switch from awesome-pages v2 to awesome-nav v3 (renamed). (#4812) @frjo
• Python updates 2026-04-14. (#4817) @frjo

📜 Documentation

• Update docs production/stand-alone to use uv etc. (#4847) @frjo

Contributors to this release: @dependabot[bot], @frjo, @sandeepsajan0, @wes-otf and dependabot[bot]

Full changelog: v6.3.0...v6.4.0

6.3.0

Changes

Three bigger things and many small updates in this release. The two big things are:

1. Block linkbots (i.e. MS Outlook) from consuming tokens in one time links. User need one extra click on a landing form.
2. The requested amount field can now accepts locale formated values.
3. Partners role is removed in favour of the new Co-applicant feature. Migration in place to move Partners users to become Co-applicants instead.

Then we have a long list of smaller changes. Test coverage is increased significantly. Attempts at making Hypha have lower RAM usage and make fewer db queries.

🚀 Features

• Prevent linkbots from consuming tokens in one time links (#4775) @frjo
• Make the Requested amount field accepts locale formated values (#4767) @frjo

⚙️ Enhancements

• Fix the rounds dropdown menu search on the all view. (#4784) @frjo
• Lower memory usage in submissions and projects (#4795) @frjo
• When a submission uploaded file is missing, give nice error and not a 500 (#4794) @frjo
• Minor changes in placement and background of nprogress spinner (#4801) @frjo
• Remove partner role (#4790) @wes-otf
• Use count() instead of len() where possible. (#4760) @frjo
• Added url to open calls API (#4750) @wes-otf
• Add a notice to notifications if recived as co-applicant. (#4744) @frjo

🐛 Bug Fixes

• Permission issues in view_comments and can_bulk_archive_submissions (#4758) @frjo
• Add missing site context to passwordless mails. (#4799) @frjo
• Hypha should not send e-mails to none users unless they are signing up. (#4798) @frjo
• Fix for ManagementForm data is missing errors on 2FA logins. (#4792) @frjo
• Add background to tinymce buttons so one can see them in dark mode. (#4793) @frjo
• Make active option in language switcher readable in light mode. (#4785) @frjo
• Update text only on clicked button on application form (#4773) @frjo
• Fix visibility display on the all reviews view. (#4759) @frjo
• Only target the first title column, not all of them (#4766) @frjo
• Added a button to disable 2FA for a specific user (#4747) @wes-otf

🔧 Maintenance

• Add missing migration for Partners & AssignedReviewers (#4804) @wes-otf
• Python updates 2026-04-10. (#4810) @frjo
• Update github action workflows. (#4807) @frjo
• Python updates 2026-04-08. (#4806) @frjo
• Python updates 2026-04-07. (#4803) @frjo
• Increase test coverage in Hypha (#4800) @frjo
• Add a health test to Hypha. (#4797) @frjo
• Python updates 2026-04-01. (#4796) @frjo
• Make translate test handle no translate packages installed. (#4786) @frjo
• Make submission tests only create files when needed. (#4782) @frjo
• Add license_key to TinyMCE, update esm and vendor js (#4783) @frjo
• Python updates 2026-02-26. (#4780) @frjo
• Bump picomatch (#4778) @dependabot[bot]
• Bump flatted from 3.3.3 to 3.4.2 (#4769) @dependabot[bot]
• Python updates 2026-03-18. (#4765) @frjo
• Add missing str to flag and task models. (#4761) @frjo
• Remove code in View that is already the default since Django 2.2. (#4762) @frjo
• Python updates 2026-03-14 (#4756) @frjo
• Missed updating uv lock. (#4751) @frjo
• Python updates 2026-03-11 (#4745) @frjo

Contributors to this release: @dependabot[bot], @frjo, @wes-otf and dependabot[bot]

Full changelog: v6.2.0...v6.3.0

6.2.0

Changes

⚙️ Enhancements

• Remove summary part of result view to improve performance. (#4732) @frjo
• Adjust column width on wagtailadmin form listings to make it easier to read (#4724) @frjo
• Improving result view performance. (#4718) @frjo

🐛 Bug Fixes

• Remove extra char after Send reset email button. (#4716) @frjo

🔧 Maintenance

• Update packages in translate-cpu.txt. (#4741) @frjo
• Fix to copy command to import uv. (#4740) @frjo
• Node package updates. (#4739) @frjo
• Updated python packages 2026-03-03 (#4735) @frjo
• Updated python packages 2026-03-01 (#4730) @frjo
• Node package updates. (#4729) @frjo
• Updated python packages 2026-02-26 (#4723) @frjo
• Remove django web components and convert remaning components to cotton (#4717) @frjo

📜 Documentation

• Fix favicon and node version check. (#4715) @frjo

Contributors to this release: @frjo

Full changelog: v6.1.0...v6.2.0

6.1.0

Changes

🚀 Features

• Allow staff to delete their own comments. (#4705) @frjo

🐛 Bug Fixes

• Set default storage to s3 when it is configured. (#4708) @frjo
• Move save to log_status_update so e-mail get sent. (#4693) @frjo

🔧 Maintenance

• Update all locale po files and the pot file. (#4714) @frjo
• Python updates 2026-02-19. (#4712) @frjo
• Update test_durations, pre-commit and hypha-ci action (#4709) @frjo
• Save test factories when needed, automatic saving is listed for deprecation (#4707) @frjo
• Move django-stubs to dev dependency. (#4706) @frjo
• Remove empty ignore file and add key and crt files (#4704) @frjo
• Updated python packages Feb 2026. (#4703) @frjo
• Production docker improvements. (#4701) @frjo
• Optimise gunicorn options for running in docker. (#4700) @frjo
• Update sandbox db. (#4699) @frjo
• Specify node version as only v24 so minor updates are used automatically on new builds (#4697) @frjo
• pyproject.toml sort dependencies, correct version, update pytest conf. (#4690) @frjo
• Update node packages 2026-02-02 (#4684) @frjo
• Update to Django 5.2.11 and python packages 2026-02-02 (#4683) @frjo

📜 Documentation

• Add DigitalHub.SH to list of adopters (#4682) @bmispelon

Contributors to this release: @bmispelon and @frjo

Full changelog: v6.0.0...v6.1.0

6.0.0

Changes

New major version jump with the upgrade to Django 5.2 & Wagtail 7.0!

Otherwise mostly bug fixes & small UI improvements.

⚙️ Enhancements

• Removed requirements file, added documentation & fixed docs not starting (#4672) @wes-otf
• Added global_vars to MarkdownMail rendering, removed redundant contexts (#4647) @wes-otf

🐛 Bug Fixes

• Revert to biome v1 for now. (#4673) @frjo
• Add url param to fix dashboard pagination. (#4657) @frjo
• Fix concept note & proposal both appearing in user's dashboard (#4655) @wes-otf
• Fixed incorrect proposal form rendering and improved order of fields (#4654) @wes-otf

🔧 Maintenance

• Update to Django 5.2 LTS and Wagtail 7 LTS (#4666) @frjo
• Update python packages (#4659) @frjo
• Updated node modules. (#4658) @frjo

Contributors to this release: @frjo and @wes-otf

Full changelog: v5.35.0...v6.0.0

5.35.0

❄️ ⛄ Lots of bug fixes & maintenance items ⛄ ❄️

⚙️ Enhancements

• Functionality for the deleting application attachments (#4624) @wes-otf
• Added ability to create a project in a Complete state (#4627) @wes-otf

🐛 Bug Fixes

• Fix elevate view link styling (#4648) @wes-otf
• Fix invalid end tag in email template (#4633) @bmispelon
• Temporary fix for bitnami migration to secure images (#4626) @wes-otf
• Fix wagtail 2FA disable confirm button styling (#4649) @wes-otf
• Fix missing org name (short and long) in email templates (#4638) @bmispelon
• Restore colors for word limit warning message in tinymce widget (#4641) @bmispelon
• Fix styling of strapline on homepage (#4639) @bmispelon
• Fix crash when creating a Fund without projects enabled (#4642) @bmispelon
• Fix incorrect logic in review detail template (#4637) @bmispelon
• Fix display of [View all] button for reviews on submission page (#4636) @bmispelon
• Fixed broken user permission in multi-language setup (#4619) (#4620) @bmispelon

🔧 Maintenance

• Update to Django 4.2.27 plus other python packages minor updates. (#4644) @frjo
• Bump js-yaml from 4.1.0 to 4.1.1 (#4635) @dependabot[bot]
• Update to Django 4.2.25 plus other python packages minor updates. (#4623) @frjo
• Bump urllib3 from 2.5.0 to 2.6.0 (#4646) @wes-otf
• Update to Django 4.2.26 plus other python packages minor updates. (#4631) @frjo

📜 Documentation

• Update ARDC website (#4632) @frankduncan

Contributors to this release: @bmispelon, @dependabot[bot], @frankduncan, @frjo, @wes-otf and dependabot[bot]

Full changelog: v5.34.0...v5.35.0

5.34.0

Check out the brand new design system utilizing DaisyUI!

🚀 Features

• Support for themes and new design system. (#4543) @theskumar

⚙️ Enhancements

• Refractor traffic light scss -> utility classes (#4603) @theskumar
• Implemented Cally to replace JQuery based daterangepicker (#4568) @wes-otf
• Better rendering of checkbox selection (#4601) @theskumar

🐛 Bug Fixes

• Fixed QR code not displaying in the 2FA setup flow (#4613) @wes-otf
• Reverted to using difflab for revisions comparsions [redux] (#4610) @wes-otf
• Fix deadline not showing on application form (#4605) @theskumar
• Removed nested htmx call causing triggering of submission export. (#4604) @frjo
• Fixed old status name showing twice in a transition notification (#4621) @wes-otf
• Fix dark mode not being auto dectected (#4611) @wes-otf
• Fixed incorrect pairing of revisions fields & revision CSS (#4608) @wes-otf

🔧 Maintenance

• Update to Django 4.2.24 plus other python packages minor updates. (#4617) @frjo

Contributors to this release: @frjo, @theskumar and @wes-otf

Full changelog: v5.33.0...v5.34.0

5.33.0

Changes

⚙️ Enhancements

• Restrict permission to invite and update co-applicant in archived submissions and complete projects (#4596) @sandeepsajan0
• Rename "Meta terms" to "Tags" in message on submission edit (#4593) @bickelj

🐛 Bug Fixes

• Removed nested htmx triggering submission export on search (#4597) @wes-otf
• Fix Project lead visibility for org memeber like finance (#4599) @sandeepsajan0
• Fix ScoreAnswerWidget(Textarea) browser validation issue with tinymce (#4588) @sandeepsajan0

🔧 Maintenance

• Updated python packages June 2025. (#4591) @frjo

Contributors to this release: @bickelj, @frjo, @sandeepsajan0 and @wes-otf

Full changelog: v5.32.0...v5.33.0

5.32.0

Changes

Expanded co-applicant feature to projects and fixed some ruff edges.

Hypha now uses Postgresql 17 and Node 24.

🚀 Features

• Create a json output version of the open calls on the front page. (#4554) @frjo
• Expand co-applicant feature to projects (#4552) @sandeepsajan0

⚙️ Enhancements

• Use xhtml2pdf inplace of reportlab for submission pdf export (#4577) @sandeepsajan0
• Set label in project header to "Project lead:" instead of only "Lead:" (#4570) @frjo

🐛 Bug Fixes

• Fix report file path issue and duplicate file issue, Fix file path issue for Project and SOW Form (#4580) @sandeepsajan0
• Fix co-applicant permission for Partners, Reviewers, and Community Reviewers (#4583) @sandeepsajan0
• Delete application comments with the application (#4585) @wes-otf
• Handle rare event of file uploads having data without id (#4581) @sandeepsajan0
• Correct project template urls. (#4575) @frjo
• Fix submission filters queryset issue (#4572) @sandeepsajan0
• Fix submission PDF download when project do not exist (#4569) @frjo
• Fix overlapping lines in header of submission PDF (#4567) @bmispelon
• Separate permissions for submission edit and submission actions (#4560) @sandeepsajan0
• Make file uploads after a preview work. (#4557) @frjo
• Fix co-applicant invite not found issue (#4553) @sandeepsajan0

🔧 Maintenance

• Migrate django-fsm to django-viewflow (#4561) @sandeepsajan0
• Update to python 3.12.11 (#4584) @wes-otf
• Update Django to 4.2.3 and also update other python packages. (#4582) @frjo
• Update Django to 4.2.2 and also update other python packages. (#4571) @frjo
• Upgrade to postgresql 17 and node 24. (#4559) @frjo

Contributors to this release: @bmispelon, @frjo, @sandeepsajan0 and @wes-otf

Full changelog: v5.31.0...v5.32.0