Skip to content

Releases: HumanSignal/label-studio

1.12.1

21 May 16:18
Compare
Choose a tag to compare

🌟 What's New

✅ Enhancements

This release includes multiple usability enhancements for labeling with an ML backend and predictions: (#5714, #5712, #5761, #5729, #5631, #5741)

  • The Auto accept annotation suggestions option has been moved to the bottom of the screen to avoid blocking the top of any image that is being annotated.
  • The loading suggestion spinner that displays when suggestions are being generated is now active for all types of interactive annotations, and not just image ones.
  • The Start Training action has been fixed and now works as expected.
  • The Reject All action for auto annotations has been fixed and now works as expected.
  • Image sizing remains consistent in the label and review streams regardless of whether the Auto-detect tool is being used.
  • Ensure prediction visibility is consistent in the label stream.
  • Ensure predictions reflect the version selected in the project settings.
  • Ensure users are always able to see prediction model versions in the project settings.

🔐 Security

  • Addressed a security issue related to incomplete URL substring sanitization. (#5595)

🐞 Bug Fixes

  • Fixed an issue is which the TextArea input area would resize while you were editing it. (#5665)

  • Fixed an issue where multiple errors would appear in the console after navigating away from the Data Manager page. (#5824)

  • Fixed an issue where a spelling mistake within the code was causing errors related to local storage. (#5758)

  • Fixed an issue where the Retrieve Predictions modal was not properly formatted. (#5621)

  • Fixed an issue where exporting to YOLO caused memory issues. Special thanks to community member @Clemens-E for reporting this issue and contributing to the fix. (#5612)

  • Fixed an issue with application logging not working. (#5780)

  • Fixed an issue where, if there was no name provided for a cloud storage connection, the project settings page would not load. (#5817)

  • Fixed an issue where the Table tag failed to load values that were in list format. (#5736)

  • Fixed an issue with excess console warnings when viewing the Data Manager related to loading large JS files. (#5820)

  • Fixed an issue where the mouse cursor was disappearing against the light gray background when reviewing annotations. (#5730)

  • Fixed an issue where local file storage was not working with user tokens. (#5686)

  • Fixed an issue with loading the Data Manager while imported data included columns with trailing special characters. (#5692)

  • Fixed an issue where, in specific OS and browsers, text was dropped from regions in HyperText. (#5615)

  • Fixed an issue where users were able to incorrectly use the name parameter in labeling configurations without receiving an error message. (#5745)

  • Fixed an issue with environment variables that have the prefix LABEL_STUDIO_ appearing in context logs. (#5844)

🤩 Contributors

Full Changelog: tags/1.12.0.post0...1.12.1
This changelog was updated in response to a push of 779ee98 Workflow run

Jira Release not found
Release Notes are generated based on git log: No tasks found in Task Tracker.

Turned off Feature Flags (87)
Read more

1.12.0.post0

06 May 19:30
Compare
Choose a tag to compare

⏩ Fix issue with configuring data collection

  • Support COLLECT_ANALYTICS environment variable in addition to collect_analytics. Special thanks to community member @csavage5 for submitting this change. (#5788)

🤩 Contributors

@csavage5
@jombooth

Full Changelog: tags/1.12.0...1.12.0.post0
This changelog was updated in response to a push of f8e8296 Workflow run

Jira Release not found
Aha! Release 1.12.0.post0
Release Notes are generated based on git log: No tasks found in Task Tracker.

Turned off Feature Flags (83)
Read more

1.12.0

18 Apr 16:36
b2fb581
Compare
Choose a tag to compare

🌟 What's New

🎉 New Features

🚀 Improved Machine Learning & LLM integrations

This release streamlines the way ML models and LLMs are connected to Label Studio with a focus on security and simplified user experience. (#5570)

Using the powerful ML backend integration, users can add models and customize automated workflows for:

  • Pre-labeling: Letting ML/AI models predict labels autonomously, which can then be reviewed by human annotators.
  • Interactive labeling: An automated process that applies initial labels to data, which are then refined through manual review, enhancing the efficiency and accuracy of data annotation for machine learning models.
  • Model evaluation and fine-tuning: Used in models like the Segment Anything Model (SAM), involves a human-in-the-loop approach where the model provides initial predictions or annotations, and a human annotator interacts directly with these predictions to correct or refine them.

Label Studio users can add custom models, or reference a new examples library to connect popular models, including Segment Anything, OpenAI, GroundingDINO, select Hugging Face models, Tesseract, and more.

Updates to the ML backend integration in this release include:

  • New support for basic auth, which means users can now connect to hosted ML backends that require a password.
  • The ability to specify additional parameters to pass to the model, which means users can now easily connect to Azure-hosted OpenAI in addition to OpenAI and popular ML models.
  • An improved UI and simplified project settings, including:
    • A new Predictions section under the Annotation page of the project settings makes it easier select whether you want to use predictions or a model in your annotation workflow.
    • A new Predictions page, where you can easily upload and manage predictions.
    • Removed obsolete settings that are no longer compatible (for example, auto-updating version).
    • Fixed various usability issues related to the annotation experience with a model connected. (#5621), (#5677), (#5678), (#5697)

For more information, see Integrate Label Studio into your machine learning pipeline.

screenshot of the Connect Model window

Screenshot of connected model

✂️ Remove Duplicated Tasks action

There is a new Remove Duplicated Tasks action available from the Data Manager. This action had previously only been available as an experimental feature. (#5572)

When you use this action, annotations from duplicated tasks are consolidated into one task (the first task found among the duplicated tasks).

Remove duplicated tasks option

🔄 Reset Cache action

There is a new Reset Cache action available from project settings under the Danger Zone section. You can use this action to reset and recalculate the labeling cache.

This action is particularly useful for situations in which you are attempting to modify the labeling configuration and you receive a validation error pointing to non-existent labels or drafts. (#5432)

Reset Cache

✅ Enhancements

  • Added support for X-Api-Key: <token> as an alternative to Authentication: Token <token>. This will make it easier to use API keys when integrating with cloud-based services. Special thanks to community member @mc-lp for making this feature request. (#5562)

  • Made several updates to the UI to improve performance and user experience, including:

    • Better formatting for longer text strings when using the grid view in the Data Manager. (#5369)

    • When applying regions to text spans, that text will appear next to region when listed in the Regions pane of the labeling interface. (#5323)

🏁 Feature flag changes

  • Removed support for ff_front_dev_1470_dm_pagination_010422_short (#5466)

🐞 Bug Fixes

  • Fixed an issue where users could not submit annotations if the labeling configuration included the TextArea tag with the required and skipDuplicates parameters.  (#5490)

  • Fixed an issue where an empty draft was created every time a user click View all annotations. (#5417)

  • Fixed an issue with duplicate default hotkeys when working with multi-image segmentation. (#5297)

  • Fixed an issue where the Data Manager was not displaying false or 0 values as expected. (#5367)

  • Fixed an issue with the Number tag where toName was not validated. (#5408)

  • Fixed an issue with the Number tag in which the max constraint was not working. (#5220)

  • Fixed an issue where users could not use the Magic Wand tool with image preloading enabled. (#5385)

  • Fixed an issue where users were not shown a confirmation message after clicking Submit and exit in the label stream. (#5362)

  • Fixed an issue where the text next to the project pagination drop-down was not displaying properly. (#5363)

  • Fixed an issue where the toolbar in the labeling interface wasn’t properly positioned. (#5448)

  • Fixed an issue where Google Cloud Logging was not working due to a missing dependency. Special thanks to community member @tsr10 for reporting this issue.  (#5605)

  • Fixed an issue where imports were failing in cases where a user switched between organizations. (#5603)

  • Fixed an issue where users where seeing an n is not a function error when using a when configuring project settings. (#5449)

  • Fixed an issue where /api/version was not reporting all updates. (#5535)

🤩 Contributors

Full Changelog: tags/1.11.0...1.12.0
This changelog was updated in response to a push of b2fb581 Workflow run

Jira Release not found
Aha! Release 1.12.0
Release Notes are generated based on git log: No tasks found in Task Tracker.

Turned off Feature Flags (83)
Read more

1.11.0

30 Jan 16:44
a9766f0
Compare
Choose a tag to compare

🌟 What's New

🎉 New Features

Consolidated Label Studio Codebase

This release introduces a simplified Label Studio repository structure.

Previously, the Label Studio frontend and Data Manager codebases were each located in a separate repository: label-studio-frontend and dm2. Starting with this release, the Label Studio Frontend and Data Manager code will be updated and maintained in the main label-studio repository.

The Label Studio Frontend code is now located in the label-studio repository under web/libs/editor, and the Data Manager code can be found under web/libs/datamanager. For more information, see our contributing guide.

This consolidated codebase has many benefits, including streamlined and simplified workflows, increased efficiency when performing cross-component changes, and improved navigation. Most importantly, a unified codebase will make it easier for our Open Source community to navigate and understand the Label Studio code architecture, lowering the barrier to entry for new contributors. (#5154)

🔐 Security

  • This release includes several measures to increase SSRF protection (#5316), which address CVE-2023-47116 (#5316):
    • When SSRF_PROTECTION_ENABLED is set to true (note that it defaults to false), our new default is to ban all IPs within reserved blocks, for both IPv4 and IPv6.
    • We are introducing two new environment variables, to be used in conjunction with SSRF_PROTECTION_ENABLED=true:
      USER_ADDITIONAL_BANNED_SUBNETS — Use this to specify additional IP addresses or CIDR blocks to ban from server-side requests (e.g. the URL-based file uploader).
      USE_DEFAULT_BANNED_SUBNETS — This is set to True by default. If you would like to have full control over banned subnets, you can set this to False and use USER_ADDITIONAL_BANNED_SUBNETS to specify all the IP addresses / CIDR blocks you’d like to disallow instead.
    • We have also improved our error messages to make it clearer when an action is being blocked due to SSRF protections.
  • Implemented comprehensive HTML sanitization to safeguard against vulnerabilities and ensure a secure user experience. This addresses CVE-2024-26152. (#5232)
  • Addressed several vulnerabilities found in the npm-axios package. (#5229)

🐞 Bug Fixes

  • Fixed an issue where Label Studio crashed when configuring multiple hotkeys using the hotkey="," format. (#5240)
  • Fixed an issue where credential validation was failing in the Label Studio interface for cloud storages configured using SDK. (#5228)
  • Fixed an issue where cancelled and updated annotations were not recalculating is_labeled and other counters. (#4472)
  • Fixed an issue where annotation drafts were not changing when switching to view all mode. (#5141)
  • Fixed an issue where users would encounter an error when using the Storage filename filter in the Data Manager. (#5289)
  • Fixed an issue where users were unable to use the View all annotations option when the project included images that had an empty URL. (#5245)
  • Fixed an issue where relations were not displayed if they were added by a user while reviewing a task. (#5140)
  • Fixed an issue where users were seeing the Comments tab (an Enterprise-only feature) when resizing their screen. (#5230)

🤩 Contributors

1.10.1

04 Jan 20:41
d7ca8b7
Compare
Choose a tag to compare

🔐 Security

  • Addressed CVE-2024-23633 by setting a sandbox CSP header on the /data/upload/ endpoint (#5137).
  • Fixed an issue with HTML sanitization to address a vulnerability identified by CodeQL. (#5206, #5122)
  • Improved security for org invite links. (#5136)

🐞 Bug Fixes

  • Fixed an issue where the Auto accept annotation suggestions toggle was not working as expected in some situations. (#4963)
  • Fixed an issue with relation positions in multi-image segmentation. (#5117)
  • Fixed an issue where users were unable to edit polygon points. (#5097)
  • Fixed an issue with wrong position of brushstroke highlighted on hover. (#5093)

🤩 Contributors

Full Changelog: tags/1.10.0.post0...1.10.1
This changelog was updated in response to a push of d7ca8b7 Workflow run

Jira Release not found
Aha! Release 1.10.1
Release Notes are generated based on git log: No tasks found in Task Tracker.

Turned off Feature Flags (100)
Read more

1.10.0.post0

08 Dec 21:42
Compare
Choose a tag to compare

⏩ Issues when upgrading Label Studio versions

  • Fix migration issue that prevented upgrading Label Studio deployment with Prediction records from <1.9.0 to >=1.9.0 (#5156)
  • Fix migration issue that prevented upgrading Label Studio from 1.5.0 to 1.10.0 (#5157)

🤩 Contributors

@leonlowitzki
@jombooth

Full Changelog: tags/1.10.0...1.10.0.post0
This changelog was updated in response to a push of dbd8ddd Workflow run

Jira Release not found
Aha! Release 1.10.0.post0
Release Notes are generated based on git log: No tasks found in Task Tracker.

Turned off Feature Flags (99)
Read more

1.10.0

30 Nov 16:55
d451ae8
Compare
Choose a tag to compare

🌟 What's New

🎉 New Features

📃 External Taxonomy - Beta 🧪

This release introduces the ability to load an external taxonomy into your labeling configuration. The mechanism for this is a new apiUrl parameter on the Taxonomy tag, which allows you to load your taxonomy from an external JSON-formatted file. Previously, you had to use Choice tags to manually define your taxonomy within the labeling configuration.

This feature provides multiple benefits, including:

  • Performance - Significant performance improvements for large taxonomies.
  • Usability and standardization - With JSON formatting and the ability to manage taxonomies in your editor of choice, external taxonomies are easier to organize and update.
  • Security - You can now securely store taxonomies outside of Label Studio.

For more information, see the Taxonomy template and Taxonomy tag.

taxonomy1

💪 Enhancements

  • We’ve made some changes that, going forward, will make Label Studio much easier to install. To accomplish this, we've moved to Poetry for dependency management, and loosened certain dependency version constraints in pyproject.toml. (#5047, #5021, #4888)

  • You can now expand and collapse Ranker items for easier management and rearrangement. (#5016)

    Animated gif demonstrating ranker collapse

  • Updated the font and spacing for the Submit and Exit button to match Label Studio UI styling guidelines. (#5007)

🔐 Security

  • Patched an ORM leak vulnerability. (#5012)

  • Due to an XSS vulnerability, we previously added a requirement that users must log in to view the Label Studio API doc reference and Swagger. You can now view the API docs without logging in. However, the Swagger version is still only available to logged in users. (#4931)

  • Upgraded urllib3 to 1.26.18 to address CVE-2023-45803, and Django to 3.2.23 to address CVE-2023-46695. (#5047)

🐞 Bug Fixes

  • Fixed an issue where users were directed to the Data Manager page after clicking Submit and Exit or Update and Exit. Instead, users will now be directed to the Projects page. (#4981)

  • Fixed an issue where the Draft saved successfully message was appearing when it wasn’t needed. (#4917)

  • Fixed an issue where the crosshair parameter was not working. (#5040)

  • Fixed an issue with zoom performance in certain Image Segmentation use cases. (#4800)

  • Fixed a sync error when importing large amounts of tasks from Azure storage. (#4950)

  • Fixed an issue where PATCH api/tasks/<id> was returning an error. (#4925)

  • Fixed an issue where code was unnecessarily executing when contextual scrolling was disabled. (#4651)

  • Fixed an issue where a labeling configuration validation error was not using the correct styling. (#4949)

  • Fixed an issue where predictions were not appearing in the Label Stream after upgrading Label Studio. Special thanks to community members @davidblom603 and @WillieMaddox for reporting this issue. (#5105)

  • Fixed an issue with the wrong position of brushstroke highlighted on hover. (#5114)

  • Fixed an issue where users were unable to edit polygon points. (#5110)

🤩 Contributors

Full Changelog: tags/1.9.2.post0...1.10.0
This changelog was updated in response to a push of d451ae8 Workflow run

Jira Release not found
Aha! Release 1.10.0
Release Notes are generated based on git log: No tasks found in Task Tracker.

Turned off Feature Flags (98)
Read more

1.9.2.post0

08 Nov 19:46
Compare
Choose a tag to compare

Security

  • Fix ORM Leak security vulnerability in Label Studio (CVE-2023-47117). This vulnerability inadvertently made it possible to leak certain secrets from the database via the task filtering endpoint powering Data Manager. We strongly recommend upgrading to this new version, and would like to thank @alex-elttam for identifying this issue in Label Studio.

Breaking changes

  • In general, task filtering expressions that depend on foreign keys will no longer be allowed in this and future versions of Label Studio. However, individual expressions leveraging foreign key relationships (that is, filters containing __, as in updated_by__active_organization) may be allowlisted via the environment variable DATA_MANAGER_FILTER_ALLOWLIST, which accepts a comma-separated list of task filters.

Full Changelog: tags/1.9.2...1.9.2.post0
This changelog was updated in response to a push of f931d9d Workflow run

Jira Release not found
Aha! Release 1.9.2.post0
Release Notes are generated based on git log: No tasks found in Task Tracker.

Turned off Feature Flags (98)
Read more

1.9.2

07 Nov 22:05
de252f5
Compare
Choose a tag to compare

What's New

Enhancements

  • Added a new legacy parameter to the Taxonomy tag. This will allow users to continue to access the legacy version of Taxonomy after upcoming feature work is completed. (#4884)
  • Added support for AWS Signature Version 4 query parameters. Special thanks to community member @darthhexx for their contribution. (#4928)

Breaking Changes

  • This release adds a deployment-wide VERIFY_SSL_CERTS setting that defaults to true. Customers who are loading data (e.g. uploading tasks) from https URLs without verifiable SSL certificates must set VERIFY_SSL_CERTS to false in their environment variables before deploying Label Studio 1.9.2+. (#4862)
  • Add WINDOWS_SQLITE_BINARY_HOST_PREFIX environment variable to support hosting SQLite binaries on a server other than sqlite.org, for Windows deployments running Python 3.8 only. (#4862)

Security

  • Fixed an XSS vulnerability with certain error pages. (#4926)
  • Fixed an XSS vulnerability related to file extensions for avatars. This change addresses CVE-2023-47115. (#4818)
  • Fixed an SSRF DNS rebinding issue. (#4828)

Bug Fixes

  • Fixed an issue where users would see a run time error seen when creating or syncing Azure blob storage. (#4905)
  • Fixed an issue where tasks created through source storage were not triggering webhooks. (#4845)

Contributors

New Contributors

Contributors

Full Changelog: tags/1.9.1.post0...1.9.2
This changelog was updated in response to a push of de252f5 Workflow run

Jira Release not found
Aha! Release 1.9.2
Release Notes are generated based on git log: No tasks found in Task Tracker.

Turned off Feature Flags (93)
Read more

1.9.1.post0

13 Oct 18:58
Compare
Choose a tag to compare

Security

Full Changelog: tags/1.9.1...1.9.1.post0
This changelog was updated in response to a push of 521e5ca Workflow run

Jira Release not found
Aha! Release 1.9.1.post0
Release Notes are generated based on git log: No tasks found in Task Tracker.

Turned off Feature Flags (94)
Read more