Skip to content

Version 6.13#5823

Merged
thomasleese merged 103 commits intomainfrom
next
Jan 20, 2026
Merged

Version 6.13#5823
thomasleese merged 103 commits intomainfrom
next

Conversation

@thomasleese
Copy link
Copy Markdown
Contributor

No description provided.

murugapl and others added 30 commits January 15, 2026 10:02
Current hint text is potentially misleading - users might think Mavis automatically reports uploaded records to GPs and/or NHS England, which is not the case. We replace it with something clearer.

MAV-3047
This allows the user to choose from radio buttons between 1 and
`Programme.maximum_dose_sequence`

Jira-Issue: MAV-2916
On records which were bulk uploaded

Jira-Issue: MAV-2905
Before this change, Mavis generates mismatched procedure terms and codes for flu vaccinations.

This change:
* fixes the underlying mismatch
* reduces the likelihood of this happening in future by bringing together the code and term structures into one

JIRA: https://nhsd-jira.digital.nhs.uk/browse/MAV-3076
Adds information displayed in the command so we can quickly see any sites associated with the same URN and also GIAS year groups that might differ from the LocationProgrammeYearGroups associated with the school.
- DDoS provided OOTB
- Add basic protection rules
- Block known bad IPs
- Add a rate limiter based on IP
- Required to execute this as a pre-deployment step
This removes the scope and replaces it usage with
`has_programme_status`.

Jira-Issue: MAV-2660
This removes the scope and replaces it usage with
`has_programme_status`.

Jira-Issue: MAV-2660
This removes the scope and replaces it usage with
`has_programme_status`.

Jira-Issue: MAV-2660
This updates the scope to use the `Patient::ProgrammeStatus` model to
filter on vaccine criteria rather than the `Patient::ConsentStatus` and
`Patient::TriageStatus` models, allowing us to eventually remove these
models.

Jira-Issue: MAV-2660
Remove `Patient` scopes for consent, triage and vaccination statuses
This ensures that any values being joined together are escaped
correctly and don't result in XSS vulnerabilities.
Use `safe_join` instead of `join(...).html_safe`
Bumps [@hotwired/turbo-rails](https://github.com/hotwired/turbo-rails) from 8.0.20 to 8.0.21.
- [Release notes](https://github.com/hotwired/turbo-rails/releases)
- [Commits](https://github.com/hotwired/turbo-rails/commits/v8.0.21)

---
updated-dependencies:
- dependency-name: "@hotwired/turbo-rails"
  dependency-version: 8.0.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [turbo-rails](https://github.com/hotwired/turbo-rails) from 2.0.20 to 2.0.21.
- [Release notes](https://github.com/hotwired/turbo-rails/releases)
- [Commits](hotwired/turbo-rails@v2.0.20...v2.0.21)

---
updated-dependencies:
- dependency-name: turbo-rails
  dependency-version: 2.0.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [aws-sdk-rds](https://github.com/aws/aws-sdk-ruby) from 1.305.0 to 1.306.0.
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases)
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-rds/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-ruby/commits)

---
updated-dependencies:
- dependency-name: aws-sdk-rds
  dependency-version: 1.306.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [aws-sdk-iam](https://github.com/aws/aws-sdk-ruby) from 1.139.0 to 1.140.0.
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases)
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-iam/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-ruby/commits)

---
updated-dependencies:
- dependency-name: aws-sdk-iam
  dependency-version: 1.140.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [aws-sdk-ec2](https://github.com/aws/aws-sdk-ruby) from 1.590.0 to 1.591.0.
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases)
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-ec2/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-ruby/commits)

---
updated-dependencies:
- dependency-name: aws-sdk-ec2
  dependency-version: 1.591.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
…vaccinator

Allow bulk upload users to edit vaccinator
…dose-sequence

Allow bulk upload users to edit dose sequence
…outcome

Disallow bulk upload users from changing `outcome`
Bumps [aws-sdk-accessanalyzer](https://github.com/aws/aws-sdk-ruby) from 1.84.0 to 1.85.0.
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases)
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-accessanalyzer/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-ruby/commits)

---
updated-dependencies:
- dependency-name: aws-sdk-accessanalyzer
  dependency-version: 1.85.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
dependabot Bot and others added 23 commits January 19, 2026 22:46
Bumps [nhsuk-frontend](https://github.com/nhsuk/nhsuk-frontend) from 10.3.0 to 10.3.1.
- [Release notes](https://github.com/nhsuk/nhsuk-frontend/releases)
- [Changelog](https://github.com/nhsuk/nhsuk-frontend/blob/main/CHANGELOG.md)
- [Commits](nhsuk/nhsuk-frontend@v10.3.0...v10.3.1)

---
updated-dependencies:
- dependency-name: nhsuk-frontend
  dependency-version: 10.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [solargraph](https://github.com/castwide/solargraph) from 0.58.1 to 0.58.2.
- [Changelog](https://github.com/castwide/solargraph/blob/master/CHANGELOG.md)
- [Commits](castwide/solargraph@v0.58.1...v0.58.2)

---
updated-dependencies:
- dependency-name: solargraph
  dependency-version: 0.58.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [aws-sdk-s3](https://github.com/aws/aws-sdk-ruby) from 1.211.0 to 1.212.0.
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases)
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-ruby/commits)

---
updated-dependencies:
- dependency-name: aws-sdk-s3
  dependency-version: 1.212.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
…cr-1.119.0

Bump aws-sdk-ecr from 1.118.0 to 1.119.0
…k-frontend-10.3.1

Bump nhsuk-frontend from 10.3.0 to 10.3.1
…h-0.58.2

Bump solargraph from 0.58.1 to 0.58.2
…3-1.212.0

Bump aws-sdk-s3 from 1.211.0 to 1.212.0
This updates the `Patient::ProgrammeStatus` model to include an
optional location association that works the same as the
`Patient::VaccinationStatus` `latest_location` association.

We need this to be able to fully replace all the usage of the
`Patient::VaccinationStatus` model with the `Patient::ProgrammeStatus`
and replicate the logic related to eligiblity of a session depending on
where the patient was vaccinated.

Jira-Issue: MAV-2660
Prevent onboarding schools already assigned to other teams
We aren't able to use X26 in production, so we're using this one instead.

Jira-Issue: MAV-2756
Update managing teams documentation to include the site object format
for schools with multiple physical locations. Add notes on validation
rules for sites and team assignment restrictions.
Document school sites in onboarding configuration
This should have been included as part of PRs: #5670 and #5672
…vaccinator-and-dose-sequence-fix

Hide "Change" vaccinator and dose sequence buttons for PoC users
When using all the schools in Mavis, there were severe performance
issues on this page; both loading the page, and also searching in the
dropdown list.

This reduces the scope from 52167 to 27131 schools, which may make
the performance manageable.
…location-performance-fix

Filter schools when editing location on NR records
If there are no statuses to show on the child's search card, then
remove the entire "Programme status" row
Rename functional tests to end-to-end tests
…how-programme-status

Don't show programme status row if there are no statuses
@thomasleese thomasleese requested review from a team as code owners January 20, 2026 16:12
@sonarqubecloud
Copy link
Copy Markdown

@thomasleese thomasleese merged commit 677d443 into main Jan 20, 2026
93 of 96 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

9 participants