Changed

• [Server API] TUS upload endpoints no longer accept requests with no Content-Length header (https://github.com/cvat-ai/cvat/pull/10098)

• [SDK] Package metadata no longer uses the deprecated Home-page and License fields (https://github.com/cvat-ai/cvat/pull/10125)

Fixed

• Image scaling was not applied when image filter is enabled (https://github.com/cvat-ai/cvat/pull/10111)

• Fixed TUS resumable upload validation to properly reject chunks that would exceed the declared file size (https://github.com/cvat-ai/cvat/pull/10102)

• [SDK] Removed the redundant setuptools runtime dependency (https://github.com/cvat-ai/cvat/pull/10125)

Security

• Fixed a directory traversal vulnerability in the /api/server/share endpoint (https://github.com/cvat-ai/cvat/security/advisories/GHSA-3g7v-xjh7-xmqx)