Release v0.15.0

• AJ formatting and fixed log level for sandpit (b26c265)
• VIA-333 AJ/MD Upgrading the version that fixes logs format (259e2e3)
• VIA-254 MD Change variable IS_APIM_AVAILABLE to IS_APIM_AUTH_ENABLED as suggested by team (100b5bb)

Release v0.14.2

• VIA-286 AJ/AS Removing the temporary logging (df9e61e)
• VIA-254 MD Add test for APIM AUTH not being available in our getToken function (5a8a96e)

Release v0.14.1

• VIA-286 AJ/AS debugging pino (temporary log level to warn) (54aa4db)
• VIA-286 AJ/AS debugging pino (temporary logs) (f185f40)
• VIA-254 MD/SB Add AUTH_SECRET to config and use it to get JWT token (47d6dee)
• VIA-254 SB & MD Fix unit AND e2e tests. We hope. (5c334c3)
• VIA-254 SB Fix e2e. (7e8b03e)
• VIA-254 SB Fix strange import. (f135b5c)
• VIA-254 SB & MD Put APIM credential retrieval into getToken, as stored in JWT secure cookie. (5e644a2)
• TASK SB & MD Revert typescript version bump, and ensure dependency conflicts fail the build. (83c0168)
• VIA-286 AJ/AS Adding cache hydrator lambda layer as it was failing (be53c0b)

Release v0.14.0

• VIA-286 AJ/AS Enabling logging of performance profiling in preprod (ca372e5)
• Bump @playwright/test from 1.54.1 to 1.54.2 (f43dfce)
• Bump @aws-sdk/client-s3 from 3.858.0 to 3.859.0 in the aws-sdk group (e45662b)
• Bump @aws-sdk/client-s3 from 3.857.0 to 3.858.0 in the aws-sdk group (ce7eedd)
• Bump typescript from 5.8.3 to 5.9.2 (93fc269)
• VIA-286 AJ/AS Brought back singleton pattern to reuse config but with a TTL (f20cdae)
• AJ Added to template (f73d977)
• VIA-286 AJ/AS Added required permission to access extensions layer (cb0a2f4)
• VIA-286 AJ/AS Using lambda extension for parameters store to get application configuration (dbf8690)
• VIA-286 AJ/AS Reverting back the singleton pattern, in favour of using lambda extensions. (0d8855f)
• VIA-286 AJ/AS Added parameter store lambda extension environment variables (8a7c19c)
• AJ Added debug parameter for local debugging (761c6e0)
• VIA-254 SB More typing clean-up. (1c2cd12)
• VIA-254 SB Sketch of solution using JWT session to store Apin creds. (8637393)
• Bump the aws-sdk group with 2 updates (745e92e)
• Bump zod from 4.0.13 to 4.0.14 (6af480c)
• VIA-254 MD Add accessToken and refreshToken to JWT token, and accessToken to session that is client-side exposed (ddd7381)
• VIA-286 AS/AJ Add profiler to get-ssm function call (201c04d)
• VIA-254 SB & MD Fix Sonar field-not-used error. (d679175)
• VIA-254 MD/SB Introduce brand typing for all apim types, move it to types.ts, and check in cookie storage if APIM credentials exist and if not generage a new access token (bcb16f2)
• TASK SB Fix MarkdownWithStyling lint warnings. (e9da1d8)
• VIA-286 AS/AJ Add singleton pattern to configProvider and apimConfig (0ecef02)
• TASK AS Increase number of workers, parallelise e2e tests (80fa9d4)
• Bump the aws-sdk group with 2 updates (c84952e)
• Bump zod from 4.0.10 to 4.0.13 (4f95e21)
• Bump the next group with 2 updates (5e400c9)
• Bump the react group with 2 updates (8c3d99f)
• Revert "VIA-283 AS Use composite action instead of reusable workflow for deploy stage" (3866a91)
• Revert "VIA-283 AS Update pr workflow file to use composite action template" (cce2bc3)
• VIA-283 AS Update pr workflow file to use composite action template (6e3f95e)
• VIA-283 AS Use composite action instead of reusable workflow for deploy stage (2738593)
• VIA-286 AJ Added performance profiling of NBS SSO (c2efdd9)
• VIA-286 AJ Added performance profiling of EliD and content paths (866fb30)
• VIA-254: MD/DB Extract APIM token logic into dedicated method (43694b6)

Release v0.13.2

• VIA-283 AS/AJ Update workflows to remove refs for checkout, let deploy handle ref type logic, update variable names (015a690)
• VIA-254 MD/DB Call API to exchange accessToken for idToken in elid fetch function (61b8f94)
• SPIKE SB Fixes as per Marie's PR comments. (afe238d)
• SPIKE SB Fix fetch-eligibility-content.contract.ts. It was assuming that our data structure exactly matched EliD's, which is invalid. (aa647c3)
• SPIKE SB Rename linkUrl to just url in returned actions. (c38479e)
• SPIKE SB Don't use enums for ruleCode and actionType, since we only want to log a warning in these cases, and still show the action or rule to the end user. (a839771)
• SPIKE SB Improve parse error logging. (1b24b2b)
• SPIKE SB Complete schema ACL tests. (f199313)
• SPIKE SB Start to add schema ACL tests. (9beda26)
• SPIKE SB Remove code (and tests) for now impossible error situations. (14d61fa)
• SPIKE SB Use Zod to enforce EliD API schema. (cfa19a1)
• AJ/JH Testing external links behaviour in test flight. to be reverted later. (9c93c56)
• TASK SB Make sure multiple near-simultaneous commits don't all try and deploy at once. (0618213)
• VIA-254 MD/DB Check SSM configuration is set before making call (7d3c5dd)

Release v0.13.1

• VIA-283 Fix tag value in deploy workflow (63971e4)
• Bump the testing-library group with 2 updates (85fb35d)
• Bump the react group with 2 updates (14f1fe4)
• Bump the aws-sdk group with 2 updates (ed43b66)
• VIA-394 SB Use constant values for static header title & URL. (4a580b0)

Release v0.13.0

• VIA-283 AS Update workflows (80bce8c)
• VIA-283 AS Modify build pipeline to use full sha (d158063)
• VIA-283 AS Update workflows to couple infra with deployment (d34cd2d)
• VIA-254 AS/DB Update Github Action for contract test with new config value (e267b6f)
• VIA-286 AJ/AS Added performance profiling for api/sso route, app config, middleware and auth callbacks (b3bffc5)
• VIA-286 AJ/AS Added performance profiling function (2927756)
• VIA-286 AJ/AS Increased the default throughput of parameter store in all 3 environments, as we were hitting rate limits with parallel e2e tests (ee79be3)
• TEMPCOMMIT MD/DB: create a separate apim config and introduce a flag IS_APIM_AVAILABLE for preprod only (a7b29dc)
• Reapply "VIA-254 MD/DB Improve test coverage on get-token callback" (abe9676)
• Reapply "VIA-254 MD/DB Remove APIM token placeholders from session" (7864718)
• Reapply "VIA-254 AJ/MD/DB Add APIM auth request generator methods" (92b2a8d)
• VIA-424 MD: correct the word 'login' to 'log in' on session-logout and session-timeout page (fe675e4)
• VIA-283 AJ/AS Updated docs (d98a465)
• Reapply "VIA-254 Setup placeholders for APIM config" (110e53f)
• Revert "VIA-254 AJ/MD/DB Add APIM auth request generator methods" (2f29980)
• Revert "VIA-254 Setup placeholders for APIM config" (53ee791)
• Revert "VIA-254 MD/DB Remove APIM token placeholders from session" (9e84c53)
• Revert "VIA-254 MD/DB Improve test coverage on get-token callback" (3281392)
• VIA-254 MD/DB Improve test coverage on get-token callback (4d45e78)
• VIA-254 MD/DB Remove APIM token placeholders from session (c191310)
• VIA-254 Setup placeholders for APIM config (e9f5027)
• VIA-254 AJ/MD/DB Add APIM auth request generator methods (707c96a)
• Bump eslint from 9.31.0 to 9.32.0 (d6be7f4)
• VIA-283 AJ/AS fixing unnecessary coalesce (f68c5eb)
• TASK SB Update wiremock/__files/eligibility/ test data to reflect EliD sandox changes. (a0a7a9e)
• VIA-283 AJ/AS updated the certificate search criteria based on domain rather than subdomains for lower environments (1911525)
• VIA-283 AJ/AS All configs fixed except NBS link (5df3fe0)
• VIA-283 AS/DB Setup configuration for Prod env (a6fe93f)
• VIA-283 AS/DB Update Deploy job to support deploying to Prod (bf48599)
• Bump dotenv from 17.2.0 to 17.2.1 (12cc527)
• Bump the next group with 2 updates (55a1c6c)
• TASK SB Fix some Sonar warnings. (d62087e)
• TASk SB Make our e2e tests a bit more robust in the face of strict mode. (a28825c)
• TASK AS Update infra readme, update value spelling (736191c)
• Bump @types/aws-lambda from 8.10.150 to 8.10.152 (b6c7dbb)
• Bump @types/node from 24.0.14 to 24.1.0 (b32e345)
• Bump axios from 1.10.0 to 1.11.0 (1e4f3cd)
• TASK - Fix sonar issues regarding using array indexes as keys (7a0eb79)
• TASK - Various sonar code quality fixes (5b94285)
• SB Simplify src/app/api/sso-to-nbs/route.ts a bit. (4aa7104)
• VIA-394 SB Add "How to turn on JavaScript" link. (37fdaf8)
• VIA-394 SB Extract static header & footer components. (0b2371d)
• VIA-394 SB Extract NoJsMessage component. (1744b4c)
• VIA-394 SB Style No-JS error message, and include header & footer. (42a8331)
• VIA-394 SB Rudimentary No-JS error message shown. (1be215b)
• Bump the jest group with 2 updates (d8e68b7)
• Bump the aws-sdk group across 1 directory with 2 updates (60481bc)
• Bump esbuild from 0.25.6 to 0.25.8 (8930ad3)
• Bump form-data from 4.0.3 to 4.0.4 (be4f895)
• Bump eslint-config-prettier from 10.1.5 to 10.1.8 (abdcace)
• Bump the next group with 2 updates (6a0f1ba)

Release v0.12.0

• TASK: Update cache hydrator logging (1e0681b)
• TASK: Prevent cache hydrator from running twice on every deployment (e7ae499)
• TASK: Clean up logs for content cache hydrator (7b90fba)
• VIA-404 AS/DB Use FakeAuth for E2E tests if VitA URL is localhost:3000 (f389111)
• VIA-404 AS/DB Remove Fake Auth env vars in E2E Github Actions workflows (364f747)
• VIA-404 AS/DB Replace fake auth with real NHS App in e2e tests (0328132)
• VIA-404 AS/DB Add e2e test for login via NHS App (a24bcbd)
• VIA-254 AJ Removed dead code and replaced JWT calculation by library that does that (a70dde6)
• VIA-404 AS/DB Use new vita test users for e2e tests (a46d33d)
• VIA-404 AJ Updating the Login and NBS links for preprod now that they are working (7e6255c)
• VIA-326 SB Additional suitability rule types to snapshot tests. (60d974a)
• Bump the aws-sdk group with 2 updates (f4d1a2b)
• VIA-328 SB Remove unused import. (94539c0)
• VIA-328 SB Extract BasicCard component. (9da239a)
• VIA-326 MD/SB: Fix styling of infotext above NBS button in EligibilityActions (67adc08)
• VIA-329 SB & MD Show infocard on unknown action type, and log the error so it can be spotted and the new action type can be implemented appropriately. (cb1000d)
• VIA-328 SB & MD Show button with no card if action description empty. (13b95a8)
• VIA-330 MD: improve logging for suitability rules, add ruleCode to auditing (9b17130)
• VIA-398 MD: Fix the grammar issue with 'login' being 'log in' in sso-failure and service-failure (e8970d0)
• VIA-326 SB Display "OtherSetting" rules as infotext. (a4349a5)
• SB Just so I don't have to keep looking it up... (38b3068)
• VIA-283 AS Update iam role policy json (b992aaa)
• SB e2e tests are failing due to issues with NHS Login, so let's continue on error for now. (e4e217b)
• Bump the aws-sdk group with 2 updates (df1bbb2)
• VIA-330 MD: Add a care card to eligibility when cardType is unknown (6d296cf)
• VIA-326 SB "OtherSetting" suitability rules are displayed in exactly the same way as AlreadyVaccinated" rules are. (1a385a6)
• VIA-211 SB Rename RuleType.alreadyVaccinated to RuleType.card. This way, any new suitability rules which also show a basic card won't need any changes outside of the eligibility-filter-service. (2271e02)
• VIA-211 SB & MD Add e2e test for AlreadyVaccinated user. (de0f939)
• VIA-211 SB & MD Add actionable-with-already-vaccinated-suitability-rule user to snapshot tests. (dbef81a)
• VIA-211 SB & MD Build SuitabilityRules component, and show it in the Eligibility component. (0870dd2)
• SB & MD Fix formatting. (f469511)
• VIA-211 SB & MD Move EligibilityActions test out of Eligibility suite. (3ccc9f1)
• VIA-211 SB & MD Extract EligibilityActions component out of Eligibility. Tests next! (0ab0bad)
• VIA-336 AS/DB Remove unused access and refresh tokens from session (9ccf8ef)
• VIA-336 AS/DB Remove refresh token logic from NHS Login journeys (7118ab3)
• VIA_336 AS/DB Remove extra debug logging for token refresh (fbb8b33)
• VIA-328 SB Fix linting errors by making sure we are populating pino's structure properly.. (a541a20)
• VIA-211 SB Populate suitabilityRules in the EligibilityContent returned to the front end. (088dc91)
• VIA-211 SB add suitabilityRules to the EligibilityContent structure. (e457e02)
• TASK MD/SB: Fix the browser error to have the key for mapped key unique in div (77f109f)
• VIA-398 MD: Fixed the grammar and content mistake on sso-failure and service-failure page (73accad)
• VIA-211 SB add suitabilityRules to the EligibilityApiResponse structure. (cc6e253)
• VIA-328 SB Fix NBS booking redirect route so we aren't caught by next's weird redirect-throws-an-error-on-success behavior. (0c3617c)
• VIA-328 SB If there's no button data, there's no button. (37944f9)
• VIA-328 SB Error handling for route.ts with redirectTarget. (63b8684)
• Bump @types/node from 24.0.13 to 24.0.14 (3855cae)
• Bump the aws-sdk group with 2 updates (3a06289)
• VIA-398 AJ/MD Fixed the merge conflicts erroneously dealt with earlier (378176e)
• VIA-398 AJ/MD Using browser context in the rest of the components (a0ad799)
• VIA-398 AJ/MD Using browser context in all failure and session pages (cad1b7a)
• VIA-398 AJ/MD Adding browser context provider, which provides nhsapp JS library output, to be reused in all client components later (9c35329)
• VIA-328 SB NBS booking button now redirects via the nbs route to get its SSO params. (ef1f7b2)
• Bump the next group with 2 updates (9f30908)
• VIA-336 Add extra debug logging around refresh token expiry times (737fd31)
• VIA-328 SB extract getNbsQueryParams() function, so we can use it to populate the NBS booking link. (8efc270)
• VIA-336 Alter temporary logging for triaging auth journeys (43e762f)
• VIA-328 SB Create NBSBookingActionForBaseUrl, and use it in the Eligibility component. (79588bc)
• VIA-328 SB Rename NBSBookingAction to NBSBookingActionForVaccine, because we are going to need a NBSBookingActionForBaseUrl. (54f4ba6)
• VIA-336 AS/DB Add debug logging around signed jwt auth payload (40ea07d)
• VIA-336 Refactor getToken callback for readability, add extra logging for refreshToken (cd2e51f)
• SB Log & throw errors for unknown action types. (a476aac)
• SB Formatting fixes. What isn't precommit linting catching this? (8b2f6b8)
• VIA-328 SB Show booking button for ButtonWithAuthLink actions. (8716ab2)
• VIA-328 SB Remove placeholder booking button. (e2fd117)
• VIA-328 SB Add additional data to Actions type - we'll need them in order to render the buttons. (3299877)
• Bump @playwright/test from 1.54.0 to 1.54.1 (7b58dad)
• Bump eslint from 9.30.1 to 9.31.0 (fb0ae34)

Release v0.11.0

• VIA-245 Modify constant name in eligibility snapshot test for maintainability (4e7dfb5)
• VIA-245 AS Modify test user keys, unify naming of auth contexts and screenshots, loop over users in eligibility snapshot tests (244b9e8)
• VIA-245 Use shared auth contexts across e2e tests to reduce flakiness (17e0d5c)
• VIA-327 SB OK, last one, I promise.. (e8b4756)
• VIA-327 SB Fix build - I updated the classes, but not the e2e test. (8a96f37)
• VIA-327 SB Render our h1, h3 and h4 tags with smaller classes. (eae083e)
• VIA-327 SB Render h1, h3 and h4 tags with correct classes. (de4c3df)
• VIA-395 SB Benchmark correct URL during E2E tests. (adba22a)
• VIA-327 SB Rendered Markdown p tags should default to having no class attribute. (49d28f8)
• VIA-327 SB Fix console error. (2a3e139)
• VIA-327 SB e2e test for CardWithText type actions. (dc9eafd)
• Trigger build (16cc261)
• Bump @playwright/test from 1.53.2 to 1.54.0 (8a2e013)
• Bump @types/node from 24.0.12 to 24.0.13 (210d178)
• VIA-393 SB Fix "Find out more about the RSV vaccine" link. (d21ddba)
• VIA-327 SB Show basic card for CardWithText type actions. (04480a8)
• VIA-327 SB Allow customisation of CSS classes emitted by MarkdownWithStyling component. (1321329)
• VIA-327 SB Brand NhsNumber type, rather than using strings. (3021838)

Release v0.10.0

• VIA-245 AS Add snapshot test for Eligibility API Error response (4492b78)
• Revert "SB Fix sonarqube warnings - introduce URL objects rather than strings." (53f5b42)
• SB Fix sonarqube warnings - introduce URL objects rather than strings. (881b096)
• VIA-331 DB SB Log NHS number as a JSON field rather than embedded in a string, to make querying easier. (8ebcd2b)
• SB Reformatting which has somehow not happened. (546ea26)
• AJ Removing continue on error (be31e5f)
• AJ Fixing security finding in SonarQube (4bd1669)
• AJ Updating Sonar scanner docker image in attempt to fix SonarQube failures (664f32f)
• VIA-331 DB SB Log NHS number as a JSON field rather than embedded in a string, to make querying easier. (bf7929f)
• Trigger build (4e32592)
• Bump the aws-sdk group with 2 updates (e86c690)
• Bump dotenv from 17.1.0 to 17.2.0 (273ea87)
• VIA-159 MD/AJ/JS: Add e2e test for attempt of a user to access app without login (e3833c6)
• VIA-331 Update Readme sample log insights query (3970822)
• VIA-331 Fix Wiremock EliD stub to return HTTP error codes when expected (f59c9e9)
• VIA-331 DB SB Ensure "how to get" and "find out more" links open in new tabs. (d92bcd1)
• VIA-331 MD/SB/DB: Improve error handling and logs when retriving data from S3 (71a7d79)