Promotion 2026-09-08 prod (#8291) - #8295

Open

nadove-ucsc wants to merge 121 commits into

prodfrom

promotions/2026-09-08-prod

Commits on Aug 21, 2026

Merge branch 'anvilprod' into promotions/2026-08-18-anvilprod
hannes-ucsc
committed
892ffac

Commits on Aug 22, 2026

[r h] Hotfix: Accumulator overflow for AnVIL (#6793)
hannes-ucsc
committed
c59468b
[r h A R] Promotion 2026-08-18 anvilprod (#8238)#8248
hannes-ucsc
committed
38041a3

Commits on Aug 26, 2026

Backport b649cdd5 (PR #8233)
hannes-ucsc
committed
a271b72
Add more Claude skills
hannes-ucsc
committed
ea8ab9e

Commits on Aug 27, 2026

Merge branch 'anvilprod' into promotions/2026-08-25-anvilprod
hannes-ucsc
committed
7a053a8
[R] Add ECR repository and Dockerfile for Lambda container images (#7730)

hannes-ucsc
and
claude
committed
b897188
Add Make targets for building and pushing Lambda container images (#7730)

hannes-ucsc
and
claude
committed
dd37ecd
[R] Add configurable Lambda image platforms with arch mapping (#7730)

hannes-ucsc
and
claude
committed
8d2752f
[R] Switch Lambda functions from ZIP to Docker image deployment (#7730)

hannes-ucsc
and
claude
committed
60666b9
Remove unnecessary lifecycle rules from Lambda resources (#7730)

hannes-ucsc
and
claude
committed
7e15d51
[R] Remove Lambda runtime version pinning (#7730)

hannes-ucsc
and
claude
committed
8a51253
Replace aliases when Lambda package type changes (#7730)

hannes-ucsc
and
claude
committed
e6acd37
[R] Recompile .pyc files in Docker image with correct paths (#7730)

hannes-ucsc
and
claude
committed
1603e6c
Replace newlines with carriage returns in Lambda log records (#7730)

hannes-ucsc
and
claude
committed
2e0ebb7
[R] Remove Lambda layer infrastructure (#7730)

hannes-ucsc
and
claude
committed
b91f8f5
Grant GitLab CI permission to push Lambda images to ECR (#7730)

hannes-ucsc
and
claude
committed
5f6a74e
[R] Remove pre-downloaded runtime wheels (#7730)

hannes-ucsc
and
claude
committed
7ff0394
Support Docker credHelpers for ECR authentication (#7730)

hannes-ucsc
and
claude
committed
c6672ca
[R] Ran `make requirements_update`
hannes-ucsc
committed
be48a12

Commits on Aug 28, 2026

[R] Switch Lambda functions from ZIP to Docker image deployment (#7730, PR #8244)
hannes-ucsc
committed
2adefba

Commits on Aug 29, 2026

[H 1/2] Fix: URL cache actually overloads DUOS (#8245)

hannes-ucsc
and
claude
committed
663ae38
[A] Fix: /index/datasets response exceeds maximum allowed payload size on anvilprod (#8258)

hannes-ucsc
and
claude
committed
8e4e048
[A] Fix: /index/projects response exceeds maximum allowed payload size (#7466)

hannes-ucsc
and
claude
committed
fff0a78
[A] Bump service lambda version

hannes-ucsc
and
claude
committed
84ec0a2
[H 2/2] Fix: URL cache actually overloads DUOS (#8245)

hannes-ucsc
and
claude
committed
3138e7a
[H] Fix: URL cache's redirect behavior is not documented
hannes-ucsc
committed
e58c1c7

Commits on Aug 31, 2026

Commits on Sep 1, 2026

Add project and lock file (#8249)
hannes-ucsc
committed
0e9efd2
Reimplement `make virtualenv` (#8249)
hannes-ucsc
committed
edecd9b
Drop pip and wheel checks from check_python (#8249)
hannes-ucsc
committed
ba73b7d
Reimplement `make requirements` (#8249)
hannes-ucsc
committed
1e2d877
Reimplement `make requirements_update` (#8249)
hannes-ucsc
committed
18fba4c
Restrict dependency resolution to the platforms Azul runs on (#8249)

hannes-ucsc
and
claude
committed
93e99aa
Migrate version match comments to pyproject.toml (#8249)

hannes-ucsc
and
claude
committed
1a7f4f5
Remove the requirements files and their tooling (#8249)

hannes-ucsc
and
claude
committed
5fac3f6
Restore propagation of environment loading failures

hannes-ucsc
and
claude
committed
d34c11e
Replace the ENVHOOK opt-out with `python -S`

hannes-ucsc
and
claude
committed
75b007c
Profile the tests with an ephemeral installation of pyinstrument

hannes-ucsc
and
claude
committed
75b7242
Build the image with uv (#8249)

hannes-ucsc
and
claude
committed
a38ab4f
Remove README section on installing Python on macOS 11

hannes-ucsc
and
claude
committed
0da47a4
Remove README section on making wheels

hannes-ucsc
and
claude
committed
cdd6ff1
Rewrite README section on managing dependencies

hannes-ucsc
and
claude
committed
85f780b
Remove README section on macOS 12 build prerequisites

hannes-ucsc
and
claude
committed
f855f1f
In README, recommend pyenv for installing Python

hannes-ucsc
and
claude
committed
8abbd3f
Enforce the version of uv a developer has installed (#8249)

hannes-ucsc
and
claude
committed
61364fe
Document `uv` as a development prerequisites (#8249)

hannes-ucsc
and
claude
committed
b27990d
Simplify README links to files in this repository

hannes-ucsc
and
claude
committed
02befd3
Derive the Python and uv versions from the pins in `pyproject.toml` (#8249)

hannes-ucsc
and
claude
committed
19f6a7f
Reword instructions for modifying …_version variables (#8249)

hannes-ucsc
and
claude
committed
a245ef7
Remove PIP_DISABLE_PIP_VERSION_CHECK (#8249)

hannes-ucsc
and
claude
committed
e57f52c
Remove `pip list` from the GitLab build (#8249)

hannes-ucsc
and
claude
committed
866420c
Rewrite README section on upgrading direct dependencies (#8249)

hannes-ucsc
and
claude
committed
602e6dc
Build the Lambda image with uv (#8249)

hannes-ucsc
and
claude
committed
e620948
Install uv in the GitHub Actions workflow (#8249)

hannes-ucsc
and
claude
committed
7a739ac
Don't let the condition of the requirements update fail the job

hannes-ucsc
and
claude
committed
35b1923
Don't skip the browser deployment via ||

hannes-ucsc
and
claude
committed
34da936
Name the files the image is actually built from (#8249)

hannes-ucsc
and
claude
committed
217b9e3
Say why `azul_chalice_bin` is no longer used (#8249)

hannes-ucsc
and
claude
committed
b28b528
Document how to update versions where they are pinned (#8249)

hannes-ucsc
and
claude
committed
3bcedce
Remove UV_PYTHON (#8249)

hannes-ucsc
and
claude
committed
72877e3
Fail sandbox builds that modify pyproject.toml without updating uv.lock (#8249)

hannes-ucsc
and
claude
committed
6b0e4d6
[R] Ran `make requirements_update` (#8249)

hannes-ucsc
and
claude
committed
0a61e8d
Update PR checklist to reflect uv-based requirement checks (#8249)

hannes-ucsc
and
claude
committed
47807ed
Fix PyCharm warnings in PR template template

hannes-ucsc
and
claude
committed
a890483
Keep Dependabot watching our Python dependencies (#8249)

hannes-ucsc
and
claude
committed
9d80091
Update the upgrade issue template to reflect uv (#8249)

hannes-ucsc
and
claude
committed
3971e2b
Mention `gh_checksums` in upgrade issue template

hannes-ucsc
and
claude
committed
300ffdb
Build the dev image natively on Apple Silicon (#8249)

hannes-ucsc
and
claude
committed
ad01192
Drop the runtime image (#8249)

hannes-ucsc
and
claude
committed
2615aab
Consolidate Makefile target names (#8249)

hannes-ucsc
and
claude
committed
02530e0
Fix phony declaration in Makefile

hannes-ucsc
and
claude
committed
ac10238
Remove README section on branch flow

hannes-ucsc
and
claude
committed
c71f55a
[u] Add upgrade instructions about uv (#8249)

hannes-ucsc
and
claude
committed
23ed8fe
[R] Ran `make requirements_update` (#8249)

hannes-ucsc
and
claude
committed
2975abc

Commits on Sep 2, 2026

Commits on Sep 3, 2026

Add Claude Code skill for reviewing PRs

hannes-ucsc
and
claude
committed
53b7465
Fix: TF doesn't manage Lambda ephemeral storage, allowing silent drift (#8253)

authored and
nadove-ucsc
committed
d4426e7

Commits on Sep 4, 2026

Fix: TF doesn't manage Lambda ephemeral storage, allowing silent drift (#8253, PR #8271)
nadove-ucsc
committed
6892e2c
Fix: Inspector findings script mislabels GitLab instance (#8225)
nadove-ucsc
committed
6ac5045
Fix: Inspector findings script mislabels GitLab instance (#8225, PR #8231)
nadove-ucsc
committed
df378b9
Fix: `make format` doesn't work on GitLab (#8265)

authored and
nadove-ucsc
committed
f1d87f0
Fix: make format doesn't work on GitLab (#8265, PR #8275)
nadove-ucsc
committed
ffdc3c2
[R] Upgrade direct python dependencies (#8268)
nadove-ucsc
committed
3482334
[R] Update Python to 3.14.7 (#8268)
nadove-ucsc
committed
805a245
Update Terraform to 1.15.9 (#8268)
nadove-ucsc
committed
92ebbe3
Update Terraform AWS provider to 6.62.0 (#8268)
nadove-ucsc
committed
f42fe09
Update Terraform external provider to 2.4.1 (#8268)
nadove-ucsc
committed
65b0916
Update Terraform Google provider to 7.46.0 (#8268)
nadove-ucsc
committed
f1ce367
Update Terraform null provider to 3.3.1 (#8268)
nadove-ucsc
committed
d58b1c2
Update PyCharm image (#8268)
nadove-ucsc
committed
6eabdfc
Update BigQuery Emulator image (#8268)
nadove-ucsc
committed
806ab15
Update Docker to 29.7.2 (#8268)
nadove-ucsc
committed
32c6021
Update GitLab and runner to 19.3.1 (#8268)
nadove-ucsc
committed
a1c5e2b
Update GitLab AMI (#8268)
nadove-ucsc
committed
b626bb4
Update AL2023 release to 2023.12.20260831 (#8268)
nadove-ucsc
committed
d0ef468
Update AWS CLI to 2.36.38 (#8268)
nadove-ucsc
committed
91e2547
Update GitHub CLI to 2.99.0 (#8268)
nadove-ucsc
committed
b950f73
Update uv to 0.12.9 (#8268)
nadove-ucsc
committed
67ae814

Commits on Sep 5, 2026

[R] make requirements_update
nadove-ucsc
committed
f1483df
[R] Upgrade software dependencies 2026-08-31 (#8268, PR #8278)
nadove-ucsc
committed
6fb286b
Fix DRS access fixture pairing an HTTPS access method with a GS URL

authored and
nadove-ucsc
committed
478f3fe
Fix: OAuth 2.0 client secret is logged verbatim (DataBiosphere/azul-private#412)

authored and
nadove-ucsc
committed
30e0a53
Reject an unredactable OAuth 2.0 client secret when it is provisioned (DataBiosphere/azul-private#412)

authored and
nadove-ucsc
committed
6103b41
Redact secrets that occur as part of a larger logged value

authored and
nadove-ucsc
committed
5bf71ad
[1/3] Fix: Signed URLs are logged verbatim (DataBiosphere/azul-private#390)

authored and
nadove-ucsc
committed
a93d896
[2/3] Fix: Signed URLs are logged verbatim (DataBiosphere/azul-private#390)

authored and
nadove-ucsc
committed
9d0c6a2
[3/3] Fix: Signed URLs are logged verbatim (DataBiosphere/azul-private#390)

authored and
nadove-ucsc
committed
e3ee3c8
Fix: verbatim log of client secrets and signed URLs (DataBiosphere/azul-private#412, DataBiosphere/azul-private#390, PR #8276)
nadove-ucsc
committed
fc54279

Commits on Sep 9, 2026

[H] Fix: TDR snapshot metadata is requested redundantly during indexing (#8282)

authored and
nadove-ucsc
committed
8ad76f1
[H] Backport: 5e419ec (#8282, PR #8262, PR #8292)
nadove-ucsc
committed
7899ae5

Commits on Sep 10, 2026

Merge branch 'prod' into promotions/2026-09-08-prod
nadove-ucsc
committed
8906c81