Release 2.32.1 (#7851)

Co-authored-by: Ben Hardill <ben@flowfuse.com>

Author: hardillb

CHANGELOG.md

@@ -1,3 +1,80 @@
+#### 2.32.1: Release
+
+ - fix: enable default maintenance schedule for opt-out tiers on instance creation (#7822)
+ - Fix pipeline stage validations (#7850)
+ - Add granular RBAC SSO support (#7733)
+ - build(deps-dev): bump @typescript-eslint/eslint-plugin from 8.62.1 to 8.64.0 (#7804)
+ - Inject source context headers in MCP tool calls (#7830)
+ - Validate resource ownership in broker api (#7845)
+ - Add source column to AuditLog with request context propagation (#7825)
+ - Fix MCP feature enumeration with with cap, deadline and per instance fault containement (#7841)
+ - build(deps): bump @sentry/vue from 10.62.0 to 10.65.0 (#7809)
+ - build(deps): bump posthog-node from 5.38.6 to 5.41.0 (#7808)
+ - build(deps): bump @fastify/swagger from 9.7.0 to 9.8.0 (#7800)
+ - build(deps): bump @fastify/multipart from 10.0.0 to 10.1.0 (#7807)
+ - build(deps-dev): bump postcss from 8.5.16 to 8.5.17 (#7806)
+ - build(deps): bump marked from 18.0.5 to 18.0.6 (#7802)
+ - build(deps-dev): bump webpack-cli from 7.1.0 to 7.2.1 (#7740)
+ - build(deps): bump fastify from 5.9.0 to 5.10.0 (#7748)
+ - build(deps-dev): bump @typescript-eslint/parser from 8.62.1 to 8.63.0 (#7816)
+ - build(deps): bump @fastify/swagger-ui from 6.0.0 to 6.1.0 (#7805)
+ - build(deps-dev): bump cypress from 15.18.0 to 15.18.1 (#7803)
+ - build(deps): bump @fastify/static from 9.1.3 to 10.1.0 (#7799)
+ - build(deps): bump @fastify/cookie from 11.0.2 to 11.1.1 (#7798)
+ - build(deps): bump @fastify/websocket from 11.2.0 to 11.3.0 (#7796)
+ - build(deps-dev): bump vue-tsc from 3.3.5 to 3.3.7 (#7795)
+ - build(deps): bump @fastify/helmet from 13.0.2 to 13.1.0 (#7794)
+ - build(deps): bump @sentry/node from 10.62.0 to 10.65.0 (#7791)
+ - build(deps-dev): bump webpack from 5.108.1 to 5.108.4 (#7756)
+ - [7653] New instance creation fails to load immersive editor/FlowFuse Expert   (#7661)
+ - build(deps): bump @aws-sdk/client-sesv2 from 3.1079.0 to 3.1085.0 (#7793)
+ - build(deps): bump websocket-driver from 0.7.4 to 0.7.5 (#7836)
+ - build(deps-dev): bump systeminformation from 5.31.6 to 5.31.17 (#7835)
+ - [7833] Flaky HA unit test + update cypress config (#7834)
+ - Skip offline devices in Expert API to avoid unnecessary timeouts (#7831)
+ - Introduce status field to Device model for better representation of state (#7828)
+ - Use shared subscription group for Expert platform requests (#7823)
+ - build(deps): bump mqtt from 5.15.1 to 5.15.2 (#7801)
+ - build(deps): bump lru-cache from 11.5.1 to 11.5.2 (#7797)
+ - build(deps): bump dompurify from 3.4.11 to 3.4.12 (#7812)
+ - build(deps): bump @aws-sdk/credential-provider-node from 3.972.62 to 3.972.66 (#7813)
+ - docs: Introduce Kubernetes/FlowFuse observability documentation (#7769)
+ - fix: sanitise OpenMetrics metric names in admin stats endpoint (#7787)
+ - build(deps): bump aws-actions/configure-aws-credentials from 6.2.1 to 6.2.2 (#7792)
+ - Add generic means for logging additional properties and add to acl routes (#7819)
+ - Set admin flag on pre-staging setup token (#7788)
+ - build(deps): bump docker/build-push-action from 7.2.0 to 7.3.0 (#7741)
+ - build(deps): bump docker/login-action from 4.2.0 to 4.4.0 (#7745)
+ - build(deps): bump docker/setup-buildx-action from 4.1.0 to 4.2.0 (#7744)
+ - build(deps): bump docker/setup-qemu-action from 4.1.0 to 4.2.0 (#7737)
+ - build(deps): bump cypress-io/github-action from 7.4.0 to 7.4.1 (#7739)
+ - Scoped PATs: permission enforcement (#7777)
+ - fix: backfill adminOptIn for existing admin PATs (#7785)
+ - Fix navigation for custom editor paths (#7784)
+ - [7446] Scoped PATs: API routes and controllers (#7766)
+ - fix: normalise Expert inbound origins to bare origin (#7783)
+ - Enabled Expert Insights by default for self-hosted (#7773)
+ - ci: Add slack notification to the release pipeline (#7779)
+ - Remove @node-red/util dependency (#7768)
+ - chore: Upgrade eslint to v9 (#7760)
+ - Fix escaping in npm scripts in package.json (#7771)
+ - ci: Replace manual scripts with `slack_notification` action in `Create pre-staging environment` (#7761)
+ - ci: Replace custom scripts with `slack_notification` action in `Install Test` workflow (#7763)
+ - ci: Replace custom scripts with `slack_notification` action in `Publish` workflow (#7764)
+ - ci: Replace custom scripts with `slack_notification` action in `Tests` workflow (#7762)
+ - Add PAT scope foundation: request-context plugin, permission tagging, migrations, and models (#7580)
+ - chore(expert): tool-permissions review follow-ups (comments + generic JsonViewer) (#7730)
+ - build(deps): bump @aws-sdk/client-sesv2 from 3.1075.0 to 3.1079.0 (#7751)
+ - build(deps-dev): bump @tailwindcss/postcss from 4.3.1 to 4.3.2 (#7752)
+ - build(deps): bump @redis/client from 6.0.1 to 6.1.0 (#7746)
+ - build(deps): bump @node-red/util from 5.0.0 to 5.0.1 (#7753)
+ - build(deps): bump @aws-sdk/credential-provider-node from 3.972.58 to 3.972.62 (#7742)
+ - build(deps): bump nodemailer from 9.0.1 to 9.0.3 (#7738)
+ - fix(expert): dismiss pending tool-approval cards when a new message is sent (#7663)
+ - Upgrade echarts for XSS CVE (#7657)
+ - Documentation Update For 2.32 (#7656)
+ - Device agent 4 related documentation update (#7658)
+
 #### 2.32.0: Release
 
  - feat(expert): human-in-the-loop tool permissions (#421) (#7639)