Merge branch 'release/25.13.0'

Author: cslzchen

CHANGELOG

@@ -2,6 +2,11 @@
 
 We follow the CalVer (https://calver.org/) versioning scheme: YY.MINOR.MICRO.
 
+25.13.0 (2025-08-08)
+====================
+
+- BE support for WB Upgrade
+
 25.12.0 (2025-07-08)
 ====================
 

docker-compose.yml

@@ -188,33 +188,35 @@ services:
     command:
       - /bin/bash
       - -c
-      - invoke install --develop &&
-        (python -m compileall /usr/local/lib/python3.6 || true) &&
-        rm -Rf /python3.6/* &&
-        cp -Rf -p /usr/local/lib/python3.6 /
+      - |
+        python3 -m venv /tmp/venv && \
+        /tmp/venv/bin/pip install poetry==2.1.2 && \
+        /tmp/venv/bin/poetry install --no-root --with=dev --without=docs --compile && \
+        rm -rf /python3.13/* && \
+        cp -Rf -p /usr/local/lib/python3.13 /
     restart: 'no'
     volumes:
-      - wb_requirements_vol:/python3.6
+      - wb_requirements_vol:/python3.13
       - wb_requirements_local_bin_vol:/usr/local/bin
 
   wb:
     image: quay.io/centerforopenscience/wb:develop
-    command: invoke server
+    command: python3 -m invoke server
     restart: unless-stopped
     ports:
       - 7777:7777
     env_file:
       - .docker-compose.wb.env
     volumes:
-      - wb_requirements_vol:/usr/local/lib/python3.6
+      - wb_requirements_vol:/usr/local/lib/python3.13
       - wb_requirements_local_bin_vol:/usr/local/bin
       - osfstoragecache_vol:/code/website/osfstoragecache
       - wb_tmp_vol:/tmp
     stdin_open: true
 
   wb_worker:
     image: quay.io/centerforopenscience/wb:develop
-    command: invoke celery
+    command: python3 -m invoke celery
     restart: unless-stopped
     depends_on:
       - wb
@@ -224,7 +226,7 @@ services:
     env_file:
       - .docker-compose.wb.env
     volumes:
-      - wb_requirements_vol:/usr/local/lib/python3.6
+      - wb_requirements_vol:/usr/local/lib/python3.13
       - osfstoragecache_vol:/code/website/osfstoragecache
       - wb_tmp_vol:/tmp
     stdin_open: true

osf/models/mixins.py

@@ -558,6 +558,8 @@ def get_addon(self, name, is_deleted=False, auth=None):
         # Avoid test-breakages by avoiding early access to the request context
         if name not in self.OSF_HOSTED_ADDONS:
             request, user_id = get_request_and_user_id()
+            if not user_id and auth and auth.user:
+                user_id = auth.user._id
             if flag_is_active(request, features.ENABLE_GV):
                 return self._get_addon_from_gv(gv_pk=name, requesting_user_id=user_id, auth=auth)
 

osf/models/node.py

@@ -2378,7 +2378,7 @@ def serialize_waterbutler_settings(self, provider_name):
     def create_waterbutler_log(self, auth, action, payload):
         try:
             metadata = payload['metadata']
-            node_addon = self.get_addon(payload['provider'])
+            node_addon = self.get_addon(payload['provider'], auth=auth)
         except KeyError:
             raise HTTPError(http_status.HTTP_400_BAD_REQUEST)
 

osf_tests/test_gv_session_optimization.py

@@ -1,6 +1,7 @@
 import pytest
 from unittest.mock import patch, MagicMock, PropertyMock
 
+from waffle.testutils import override_flag
 from osf.external.gravy_valet import translations as gv_translations
 from osf.external.gravy_valet import request_helpers as gv_requests
 from osf_tests.factories import ProjectFactory, UserFactory
@@ -354,6 +355,119 @@ def test_integration_get_addon_skips_gv_for_osf_hosted_addons(
 
             mock_get_addon_from_gv.assert_not_called()
 
+    @patch('osf.models.mixins.get_request_and_user_id')
+    @patch('osf.models.node.AbstractNode._get_addon_from_gv')
+    def test_get_addon_uses_auth_user_id_when_request_user_id_is_none(
+        self, mock_get_addon_from_gv, mock_get_request_user,
+        node, user
+    ):
+        with override_flag(features.ENABLE_GV, active=True):
+            mock_request = MagicMock()
+            mock_get_request_user.return_value = (mock_request, None)
+
+            auth = Auth(user=user)
+
+            mock_addon = MagicMock()
+            mock_addon.short_name = 'github'
+            mock_get_addon_from_gv.return_value = mock_addon
+
+            result = node.get_addon('github', auth=auth)
+
+            mock_get_addon_from_gv.assert_called_once_with(
+                gv_pk='github',
+                requesting_user_id=user._id,
+                auth=auth
+            )
+            assert result == mock_addon
+
+    @patch('osf.models.mixins.get_request_and_user_id')
+    @patch('osf.models.node.AbstractNode._get_addon_from_gv')
+    def test_get_addon_uses_request_user_id_when_available(
+        self, mock_get_addon_from_gv, mock_get_request_user,
+        node, user
+    ):
+        with override_flag(features.ENABLE_GV, active=True):
+            mock_request = MagicMock()
+            request_user_id = 'request_user_123'
+            mock_get_request_user.return_value = (mock_request, request_user_id)
+
+            auth = Auth(user=user)
+
+            mock_addon = MagicMock()
+            mock_addon.short_name = 'github'
+            mock_get_addon_from_gv.return_value = mock_addon
+
+            result = node.get_addon('github', auth=auth)
+
+            mock_get_addon_from_gv.assert_called_once_with(
+                gv_pk='github',
+                requesting_user_id=request_user_id,
+                auth=auth
+            )
+            assert result == mock_addon
+
+    @patch('osf.models.mixins.get_request_and_user_id')
+    @patch('osf.models.node.AbstractNode._get_addon_from_gv')
+    def test_get_addon_handles_none_auth_gracefully(
+        self, mock_get_addon_from_gv, mock_get_request_user,
+        node, user
+    ):
+        with override_flag(features.ENABLE_GV, active=True):
+            mock_request = MagicMock()
+            mock_get_request_user.return_value = (mock_request, None)
+
+            mock_addon = MagicMock()
+            mock_addon.short_name = 'github'
+            mock_get_addon_from_gv.return_value = mock_addon
+
+            result = node.get_addon('github', auth=None)
+
+            mock_get_addon_from_gv.assert_called_once_with(
+                gv_pk='github',
+                requesting_user_id=None,
+                auth=None
+            )
+            assert result == mock_addon
+
+    @patch('osf.models.mixins.get_request_and_user_id')
+    def test_get_addon_skips_gv_for_osf_hosted_addons_with_auth(
+        self, mock_get_request_user, node, user
+    ):
+        with override_flag(features.ENABLE_GV, active=True):
+            mock_request = MagicMock()
+            mock_get_request_user.return_value = (mock_request, None)
+
+            auth = Auth(user=user)
+
+            node.get_addon('osfstorage', auth=auth)
+            mock_get_request_user.assert_not_called()
+
+    @patch('osf.models.mixins.get_request_and_user_id')
+    @patch('osf.models.node.AbstractNode._get_addon_from_gv')
+    def test_get_addon_with_auth_user_none_falls_back_to_request_user_id(
+        self, mock_get_addon_from_gv, mock_get_request_user,
+        node, user
+    ):
+        with override_flag(features.ENABLE_GV, active=True):
+            mock_request = MagicMock()
+            request_user_id = 'request_user_123'
+            mock_get_request_user.return_value = (mock_request, request_user_id)
+
+            auth = Auth(user=None)
+
+            mock_addon = MagicMock()
+            mock_addon.short_name = 'github'
+            mock_get_addon_from_gv.return_value = mock_addon
+
+            result = node.get_addon('github', auth=auth)
+
+            mock_get_addon_from_gv.assert_called_once_with(
+                gv_pk='github',
+                requesting_user_id=request_user_id,
+                auth=auth
+            )
+            assert result == mock_addon
+
 
 @pytest.mark.django_db
 class TestGVTranslationsOptimization:

package.json

@@ -1,6 +1,6 @@
 {
   "name": "OSF",
-  "version": "25.12.0",
+  "version": "25.13.0",
   "description": "Facilitating Open Science",
   "repository": "https://github.com/CenterForOpenScience/osf.io",
   "author": "Center for Open Science",