6075 Commits

Author SHA1 Message Date
James George
2837ef789a chore: bump version to 2026.3.1 2026.3.1 2026-04-10 13:52:32 +05:30
lif
d45903d2e5 fix(common): newly created folder not shown in save-as dialog (#6059) 2026.3.0 2026-03-30 20:27:51 +05:30
Shreyas
42934b90e6 chore: align Tauri plugin-shell versions (#6069) 2026-03-30 15:53:20 +05:30
Nivedin
40d65dba49 fix: add missing field and translateToNewRequest for history (#6068) 2026-03-30 15:27:54 +05:30
James George
ad4041e51a chore: address remaining production audit findings
Bump handlebars to 4.7.9, @apollo/server to 5.5.0, and
nodemailer to 8.0.4 in the backend. Add narrow pnpm
overrides for path-to-regexp (8.4.0) and dompurify (3.3.3).
Move unplugin-icons to devDependencies in sh-admin to keep
dev-only transitive packages out of the production audit.
2026-03-30 12:50:14 +05:30
Mir Arif Hasan
8ac1b29b88 fix: use team.findMany for fetching user teams (#6057) 2026-03-28 08:37:10 +06:00
James George
d5a19320b8 chore: bump version to 2026.3.0 2026-03-27 19:52:07 +05:30
Mir Arif Hasan
e4eee306a7 chore: patch dependency vulnerabilities and harden production image (#6055)
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-03-27 19:26:26 +05:30
Anwarul Islam
088ea9f4dc feat(common): remove functions to utilize ref_id when IDs are not provided (#5898)
Co-authored-by: nivedin <nivedinp@gmail.com>
2026-03-27 18:22:31 +05:30
Nahid Hasan
60c607c185 fix: validate device-login redirect_uri to prevent token theft via DNS wildcard bypass (#6012)
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-03-27 14:45:46 +05:30
Shreyas
c690937fd1 fix(desktop): add missing backport changes (#6047)
read_log Tauri command (path.rs + lib.rs registration) and
 plugin-appload ref (168ff95 → 0d58d53) were missed during
 the initial SHC backport.
2026-03-26 23:26:21 +05:30
Shekhu☺️
b728f5da24 fix(common): handle File objects in HAR postData text resolution (#5917)
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-03-26 20:56:36 +05:30
Gadam Jumayev
744f434698 fix(common): use operation title as fallback in OpenAPI import (#5950)
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-03-26 20:51:30 +05:30
James George
37b06fb07e fix(selfhost-web): restore numpad support for first/last tab shortcuts
Follow-up for #6009: restore `Ctrl+Alt+Numpad9/0` tab switching in Desktop App.
Add `Numpad9/Numpad0` with the same NumLock guard used in `keybindings.ts`.
2026-03-26 19:38:14 +05:30
Shreyas
ce0fdeccfb fix: keyboard shortcuts on non-English layouts (#6009)
Co-authored-by: sahilkhan09k <181699039+sahilkhan09k@users.noreply.github.com>
Co-authored-by: 04cb <111667698+04cb@users.noreply.github.com>
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-03-26 19:06:00 +05:30
Shreyas
8aac537c7a feat(desktop): cloud for orgs support - phase 3 (#6043) 2026-03-26 18:00:51 +05:30
Nivedin
f690d5969a refactor(common): route mock server and published docs operations through platform backend (#6036) 2026-03-26 00:41:36 +05:30
Mir Arif Hasan
59c1b595a6 feat: show user workspace memberships in admin dashboard (#5968)
Co-authored-by: Anwarul Islam <anwaarulislaam@gmail.com>
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-03-26 00:28:36 +05:30
Mir Arif Hasan
06bdd7ca6a feat: add MAILER_SMTP_IGNORE_TLS and optional SMTP auth (#5972)
Co-authored-by: nivedin <nivedinp@gmail.com>
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-03-25 23:30:46 +05:30
Mir Arif Hasan
da3b8c5d37 fix(backend): prevent stored XSS via mock server responses and cross-team request moves (#6006)
Co-authored-by: nivedin <nivedinp@gmail.com>
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-03-25 16:16:38 +05:30
Mir Arif Hasan
2fcf5b7a5f chore: security patch for the dependency chain v2026.3.0 (#6013)
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-03-24 16:34:36 +05:30
James George
e03ffc5d85 fix(common): prevent open redirect in enter page (#5982) 2026-03-20 12:41:31 +05:30
Umut Keltek
402955d55f fix(desktop): add native Edit menu to enable clipboard shortcuts on Linux (#5920)
Co-authored-by: curiouscorrelation <curiouscorrelation@gmail.com>
2026-03-19 23:30:22 +05:30
Daniel Bates
4a61e3464d fix(common): prevent infinite auth refresh retry loop on permanent token failure (#5893)
Co-authored-by: nivedin <nivedinp@gmail.com>
2026-03-19 23:09:01 +05:30
Nikhil
08921786e7 fix: restore tooltips on icon-only buttons inside popover triggers (#5935)
Co-authored-by: nivedin <nivedinp@gmail.com>
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-03-18 15:11:15 +05:30
Chhavi Goyal
f012c31ba2 fix(common): fetch full team collection tree on workspace import (#5792)
Co-authored-by: nivedin <nivedinp@gmail.com>
Co-authored-by: Nivedin <53208152+nivedin@users.noreply.github.com>
2026-03-17 16:14:51 +05:30
James George
e418a51432 fix(common): prevent stored XSS in team member overflow tooltip (#5984) 2026-03-14 17:26:44 +05:30
Denny Jiang
0bb4824cfa chore(common): update Chinese translations (#5979)
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-03-13 23:59:14 +05:30
Umut Keltek
be536f0ca3 fix(common): persist OAuth2 code challenge method selection (#5921)
Co-authored-by: Anwarul Islam <anwaarulislaam@gmail.com>
2026-03-13 23:11:13 +05:30
James George
4cbe23cf00 chore: bump version to 2026.2.1 2026.2.1 2026-03-04 19:09:52 +05:30
Mir Arif Hasan
a91acdd6bf fix(backend): bump Prisma packages to 7.4.2 (#5932) 2026-03-04 11:42:59 +05:30
Shekhu☺️
3876fa9682 fix(common): update documentation link for mock server (#5929) 2026-03-03 15:28:24 +05:30
Mir Arif Hasan
1f4ae3dd88 fix(backend): enforce user ownership when deleting PAT (#5916)
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-03-02 23:35:19 +05:30
Mir Arif Hasan
d6ea86dcca fix(backend): prevent request payload from overriding id and name (#5913)
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-03-02 21:50:43 +05:30
Hypo
4594e838d4 fix(common): hide horizontal scrollbar in Firefox for URL input (#5906)
Co-authored-by: nivedin <nivedinp@gmail.com>
2026-03-02 16:58:40 +05:30
James George
1119a2209c chore(common): add no_active_orgs_found locale string 2026.2.0 2026-02-26 12:38:51 +05:30
James George
12fea3dd09 chore: ignore AI coding assistant config dirs 2026-02-26 12:38:44 +05:30
Mir Arif Hasan
57be05cdcb fix(backend): prevent IDOR in user collection and request endpoints (#5902) 2026-02-24 23:32:43 +05:30
Shreyas
02b3dbcf5c feat(desktop): cloud for orgs platform contract (#5903)
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-02-24 23:21:48 +05:30
iDschepe
5ae9639901 fix(common): increase modal dialog width for more screen sizes (#5884)
Co-authored-by: nivedin <nivedinp@gmail.com>
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-02-24 21:03:16 +05:30
Leonic
77e420dc6a fix(common): resolve TypeError when opening request from search results (#5842)
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-02-24 15:18:13 +05:30
James George
b9064045e8 chore: update lock file 2026-02-24 12:23:14 +05:30
Eve
562d2919ca fix(common): constrain variable tooltip to viewport for long values (#5878)
Co-authored-by: aviu16 <aviu16@users.noreply.github.com>
Co-authored-by: nivedin <nivedinp@gmail.com>
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-02-23 23:33:14 +05:30
James George
c687473889 chore: streamline pnpm versioning 2026-02-23 20:27:07 +05:30
Mir Arif Hasan
803e4633a2 feat: api documentation versioning (#5676)
Co-authored-by: nivedin <nivedinp@gmail.com>
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-02-23 20:11:55 +05:30
James George
faf2bfc8eb feat(common): add foundational support for dropdown-based organization switcher (#5890) 2026-02-23 20:06:10 +05:30
Mir Arif Hasan
a1be60da64 fix(backend): resolve security advisories for IDOR and onboarding bypass (#5897)
Improve error handling in the onboarding status check

---

Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-02-23 18:11:45 +05:30
James George
55c1cb8290 chore: bump CLI version 2026-02-23 17:47:58 +05:30
James George
a40c491f7a chore: bump version to 2026.2.0 2026-02-23 17:46:08 +05:30
James George
eb4b6a83c5 chore: update lock file 2026-02-23 17:45:37 +05:30