v2.71.0

Important

This release includes database migrations that must be run when upgrading to this version. As a precaution, please make sure to backup your PostgreSQL database before continuing. For more information, please see docs.

What's Changed

• chore(deps-dev): bump shell-quote from 1.8.1 to 1.8.4 in /frontend by @dependabot[bot] in #910
• chore(deps): bump posthog-js to 1.391.2 by @nimish-ks in #925
• feat: show pending invites on lobby, skip onboard redirect when invites exist by @rohan-chaturvedi in #924
• fix: prevent secret action menu being hidden behind table header by @rohan-chaturvedi in #927
• feat: sync envs with references by @rohan-chaturvedi in #827
• fix: correct Apps empty-state copy for owners/admins by @nimish-ks in #931
• refactor(performance): discover and trigger reference-based syncs asynchronously by @rohan-chaturvedi in #930
• chore: bump version to v2.71.0 by @nimish-ks in #932
• fix: enforce lockbox view count server-side by @nimish-ks in #809
• fix: handle unlimited (null) seat limit in bulk invite on self-hosted by @tomaskir in #934
• fix(quotas): correct custom-environment plan gating by @rohan-chaturvedi in #936

New Contributors

• @tomaskir made their first contribution in #934

Full Changelog: v2.70.0...v2.71.0

v2.70.0

Important

This release includes database migrations that must be run when upgrading to this version. As a precaution, please make sure to backup your PostgreSQL database before continuing. For more information, please see docs.

What's Changed

• chore(deps): bump axios from 1.15.0 to 1.16.0 in /frontend by @dependabot[bot] in #905
• chore(deps): bump urllib3 from 2.6.3 to 2.7.0 in /backend by @dependabot[bot] in #882
• feat: tailscale sidecar docker compose self-hosting setup by @nimish-ks in #911
• chore(deps): bump protobufjs from 7.5.5 to 7.6.2 in /frontend by @dependabot[bot] in #908
• Update CLI install codebox by @nimish-ks in #913
• Add Homebrew tap trust step to macOS CLI install command by @nimish-ks in #914
• chore: bump version to v2.70.0 by @nimish-ks in #915
• feat: secret rotation by @rohan-chaturvedi in #909
• refactor: clean up schema changes for rotating secrets, regen migrations by @rohan-chaturvedi in #916

Full Changelog: v2.69.1...v2.70.0

v2.69.1

What's Changed

• chore(deps): bump dompurify from 3.3.1 to 3.4.5 in /frontend by @dependabot[bot] in #869
• fix: create SCIM token dialog closing prematurely by @rohan-chaturvedi in #906
• fix(billing): improve exception handling for Stripe webhook handlers by @rohan-chaturvedi in #903
• chore: bump version to v2.69.1 by @rohan-chaturvedi in #907

Full Changelog: v2.69.0...v2.69.1

v2.69.0

What's Changed

• fix(auth): build verification email URL from ALLOWED_ORIGINS by @nimish-ks in #899
• fix: user.socialaccount might be None by @ifaoji in #901
• chore: bump version to v2.69.0 by @rohan-chaturvedi in #902
• feat: management apis for apps, envs, access by @rohan-chaturvedi in #798

New Contributors

• @ifaoji made their first contribution in #901

Full Changelog: v2.68.1...v2.69.0

v2.68.1

What's Changed

• fix(api): correctly parse env.id when creating secrets at a defined path by @rohan-chaturvedi in #894

Full Changelog: v2.68.0...v2.68.1

v2.68.0

Important

This release includes database migrations that must be run when upgrading to this version. As a precaution, please make sure to backup your PostgreSQL database before continuing. For more information, please see docs.

What's Changed

• feat: teams + SCIM misc UX polish, dialog fixes, and SCIM URL prefix by @nimish-ks in #886
• feat: teams + SCIM by @rohan-chaturvedi in #838
• fix(csp): allow https://*.phase.dev in script-src by @nimish-ks in #889
• chore: bumped phase to v2.68.0 by @nimish-ks in #890
• chore: bump posthog by @nimish-ks in #891
• fix: validate cross-app secret refs against empty target envs by @rohan-chaturvedi in #881

Full Changelog: v2.67.5...v2.68.0

v2.67.5

What's Changed

• fix(sso): Okta OIDC adapter respects org-level config by @nimish-ks in #887
• chore: bump version to v2.67.5 by @nimish-ks in #888

Full Changelog: v2.67.4...v2.67.5

v2.67.4

What's Changed

• perf: bulk INSERT secret events to reduce DB round-trips by @nimish-ks in #784
• chore: bump version to 2.67.4 by @rohan-chaturvedi in #880

Full Changelog: v2.67.3...v2.67.4

v2.67.3

What's Changed

• fix: raise gunicorn --timeout and --graceful-timeout by @nimish-ks in #874
• chore(deps): bump django from 4.2.29 to 4.2.30 in /backend by @dependabot[bot] in #844
• chore(deps): bump lodash from 4.17.23 to 4.18.1 in /frontend by @dependabot[bot] in #845
• fix: serve all routes at both / and /service/ via middleware by @nimish-ks in #873
• fix: bypass host validation for /health/ ALB probes by @nimish-ks in #878
• chore: bump version to v2.67.3 by @nimish-ks in #879

Full Changelog: v2.67.2...v2.67.3

v2.67.2

What's Changed

• ci: native arm64 runners for PR builds (replace QEMU emulation) by @nimish-ks in #868
• fix: validate identity_key against member's keyring, not org owner's by @rohan-chaturvedi in #871
• chore: bump version to v2.67.2 by @rohan-chaturvedi in #872

Full Changelog: v2.67.1...v2.67.2