SmartPay Program Website Sprint 46 Release v3.15

This sprint release contains the following:

• Sales, Transactions, Card/Account Holder Data
  #768
• Senate Judiciary Committee hearing Link
  #755
• Dependabot Alert: Predictable results in nanoid generation when given non-integer values
  #762
• Program Statistics
  #769
• Georgia Tax Updates
  #764

SmartPay Program Website Sprint 45 Release v3.14

This sprint release contains the following:

• Replace Image on the Home screen with Updated Image to include 889 representations search
  #753
• Update to the latest version of USWDS 3.10.0
  #602

SmartPay Program Website Sprint 44 Release v3.13

This sprint release contains the following:

• Updates 2 Contacts with New Job Titles Under the Service Delivery Division
  #604
• Have a Consistent Naming Convention Throughout the Application Regarding 889
  #603
• Static Code Vulnerability: js/incomplete-URL-substring-sanitization
  #599
• Dependabot Alert: Regular Expression Denial of Service (ReDoS) in cross-spawn
  #743
• Remove Training Forum URL
  #749
• Delete - GSA Tax advantage travel card
  #601
• Delete the Chip and PIN publication.
  #736

SmartPay Program Website Sprint 43 Release v3.12

This sprint release contains the following:

• GSA Web Page Info: 889 Bot UPDATE
  #714

SmartPay Program Website Sprint 42 Release v3.11

This sprint release contains the following:

• USWDS 3.9.0
  #598
• Dependabot Alert: DOM Clobbering Gadget found in Astro's client-side router that leads to XSS
  #592
• Dependabot Alert: cookie accepts cookie name, path, and domain with out-of-bounds characters
  #588
• Archived Smart Bulletins - Add new message and address invalid links
  #638

SmartPay Program Website Sprint 41 Release v3.10

This sprint release contains the following:

• Change State Tax Information by State > Select a State/U.S. Territory to a Combo Box
  #597
• Contract Payment on Homepage
  #591
• Create a Mockup of the Home Screen with Contract Payments
  #725
• Dependabot Alert: Vite DOM Clobbering gadget found in vite bundled scripts that leads to XSS
  #600

SmartPay Program Website Sprint 40 Release v3.9

This sprint release includes the following:

• Dependabot Alert: Regular Expression Denial of Service (ReDoS) in micro-match
  #702
• Dependabot Alert: Vite's server.fs.deny is bypassed when using ?import&raw
  #712
• Dependabot Alert: Vite DOM Clobbering gadget found in vite bundled scripts that leads to XSS
  #711
• Dependabot Alert: path-to-regexp outputs backtracking regular expressions
  #709
• Dependabot Alert: dset Prototype Pollution vulnerability
  #710
• Update Headers on State Tax Information Pages with Notes
  #595
• Sprint 40 Content Changes
  #718
• Update the Updated Date on the State Tax Forms
  #593
• Contract Payments
  #715

SmartPay Program Website Sprint 39 Release v3.8

This sprint release contains the following:

• Update Treasury link
  #706
• USDA Video
  #703
• Dependabot Alert: Regular Expression Denial of Service (ReDoS) in micro match
  #702

SmartPay Program Website Sprint 38 Release v3.7

This sprint release contains the following:

• Insecure Frame (External)
  #660
• Convert PDF: Merchants > SmartTax Merchant Guide -- https://smartpay.gsa.gov/files/smartpay-vendor-guide.pdf
  #589
• Convert PDF: State Tax Information > Tax Resources > SmartTax Merchant Guide > SmartTax Merchant Guide https://smartpay.gsa.gov/files/smartpay-vendor-guide.pdf
  #590
• Louisiana State Tax Travel Form#690
• Bug: Remove Erroneous [PDF, #of pages] from Audit Repository records
  #694
• Update Forum Presentation Available Soon
  #693
• Smart Bulletin Header Changes
  #632

SmartPay Program Website Sprint 37 Release v3.6

This release includes the following:

• California Tax #688
• Citi Bank Address
  #662
• Update Forum 2025
  #655
• Replace Audit PDF DOI
  #667
• Replace HUD Travel Audit PDF
  #663
• Replace SSA Audit PDF
  #668
• Replace GSA OIG Audit PDF
  #666
• GSA 2018 Audit Replace PDF
  #665
• 2019 Audit DOD Replace PDF
  #664
• Convert PDF: Business Lines > Travel > Helpful Hints -- https://smartpay.gsa.gov/files/travel-account-helpful-hints.pdf
  #585
• Update to the latest version of USWDS 3.8.2 | Program
  #681
• Convert PDF: Business Lines > Fleet > Helpful Hints -- https://smartpay.gsa.gov/files/fleet-account-helpful-hints.pdf
  #586
• Convert PDF: Business Lines > Purchase > Helpful Hints -- https://smartpay.gsa.gov/files/purchase-account-helpful-hints.pdf
  #584
• Dependabot Alert: Server-Side Request Forgery in axios
  #686
• Convert PDF: About > Business Lines > Integrated > Helpful Hints for Purchase Account Use -- https://smartpay.gsa.gov/files/purchase-account-helpful-hints.pdf
  #605
• Convert PDF: About > Business Lines > Integrated > Helpful Hints for Fleet Account Use -- https://smartpay.gsa.gov/files/fleet-account-helpful-hints.pdf
  #607
• Convert PDF: About > Business Lines > Integrated > Helpful Hints for Travel Account Use -- https://smartpay.gsa.gov/files/travel-account-helpful-hints.pdf
  #606