Mirrors/plane
1
0
Fork 0
mirror of https://github.com/makeplane/plane.git synced 2026-08-29 01:58:36 +02:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 4a6f9edff6 refactor: migrate web Input to @makeplane/propel Input (#9708) preview Anmol Singh Bhatia 2026-08-28 19:53:38 +05:30
  • 4baa06367e refactor: migrate web @plane/propel Button to @makeplane/propel refactor/button-to-makeplane-button anmolsinghbhatia 2026-08-28 19:03:30 +05:30
  • f2eaf42d25 chore: remove unused @plane/ui P1 primitives chore/remove-unused-plane-ui-p1-primitives anmolsinghbhatia 2026-08-28 16:48:11 +05:30
  • accde008b8 refactor: migrate web Tag to @makeplane/propel Pill refactor/tag-to-propel-pill anmolsinghbhatia 2026-08-28 16:41:17 +05:30
  • 124103743e [INFRA-779] use str.translate instead of a char-by-char rebuild for tab/CR/LF stripping infra-779/next-path-authority-relative-reject Manish Gupta 2026-08-28 16:28:13 +05:30
  • 838341158f [INFRA-779] strip tab/CR/LF from next_path before the authority-relative check Manish Gupta 2026-08-28 16:07:17 +05:30
  • 8537b6edfd [INFRA-779] fix(security): reject authority-relative next_path redirects Manish Gupta 2026-08-28 15:59:06 +05:30
  • 1b2716c930 [INFRA-778] use status.HTTP_200_OK instead of bare 200 in the new test infra-778/export-history-scope-to-initiator Manish Gupta 2026-08-28 15:34:44 +05:30
  • 96d4ae95f0 [INFRA-778] fix(security): scope ExportIssuesEndpoint.get to the requesting user's own exports Manish Gupta 2026-08-28 15:28:23 +05:30
  • 77a8eff693 [INFRA-777] fix(security): scope ProjectArchiveUnarchiveAPIEndpoint to the URL project infra-777/project-archive-scope-to-project Manish Gupta 2026-08-28 14:53:55 +05:30
  • 07739f27c2 [INFRA-774] also lock down is_active/deleted_at on WorkspaceMember serializers infra-774/workspace-member-scope-to-caller Manish Gupta 2026-08-28 11:44:01 +05:30
  • 926e84c4ce [INFRA-774] dedupe read_only_fields into a shared constant Manish Gupta 2026-08-28 11:23:07 +05:30
  • a7d9f1f257 [INFRA-774] fix(security): stop trusting body-supplied workspace/member on WorkSpaceMemberSerializer Manish Gupta 2026-08-28 11:16:23 +05:30
  • f36cd10e0d fix: tighten created_at assertions per CodeRabbit review on PR #9704 infra-772/created-by-forgery-scope-to-caller Manish Gupta 2026-08-28 10:01:29 +05:30
  • 8294c6531d fix: address Copilot review on PR #9704 Manish Gupta 2026-08-28 09:51:18 +05:30
  • 63f4a7c4da [INFRA-772] fix(security): stop trusting body-supplied created_by/created_at on external API Manish Gupta 2026-08-28 09:33:16 +05:30
  • 3478d4fac4 [WEB-8352] fix(security): scope SubIssuesEndpoint to the URL project (#9466) Manish Gupta 2026-08-28 01:52:19 +05:30
  • 5b5af0aeca [WEB-8283] fix: bind Spaces board object IDs to the anchor's project (#9442) Manish Gupta 2026-08-28 00:17:41 +05:30
  • d25b99cae2 [WEB-8110] fix: sanitize page list order_by against an allowlist (#9387) Manish Gupta 2026-08-28 00:16:47 +05:30
  • 30527927d7 [WEB-8103] fix: stop leaking webhook HMAC secret_key on reads (#9382) Manish Gupta 2026-08-28 00:16:01 +05:30
  • e30605d419 [WEB-7946] fix: add rate limiting to email/password sign-in and sign-up endpoints (#9335) Manish Gupta 2026-08-28 00:13:58 +05:30
  • fa4ec2b2e2 refactor: migrate web Tooltip to @makeplane/propel Tooltip (#9697) Anmol Singh Bhatia 2026-08-28 00:11:19 +05:30
  • ad57941526 refactor: migrate ToggleSwitch to @makeplane/propel (#9696) Anmol Singh Bhatia 2026-08-28 00:10:53 +05:30
  • c3cc04777a refactor: migrate web progress indicators to @makeplane/propel (#9698) Anmol Singh Bhatia 2026-08-28 00:10:29 +05:30
  • 8b021935aa refactor: migrate web Checkbox to @makeplane/propel Checkbox (#9702) Anmol Singh Bhatia 2026-08-28 00:09:33 +05:30
  • 1cf0249d24 chore: wire @makeplane/propel into web (#9699) Anmol Singh Bhatia 2026-08-28 00:09:16 +05:30
  • 0495678f7c chore: remove unused @plane/ui exports (#9701) Anmol Singh Bhatia 2026-08-28 00:08:27 +05:30
  • 3fadd7ac58 refactor(admin): replace workspace @plane/propel with @makeplane/propel (#9692) sriram veeraghanta 2026-08-27 23:59:07 +05:30
  • a584fbad53 refactor(admin): migrate from @plane/ui to @plane/propel (#9690) sriram veeraghanta 2026-08-27 23:59:07 +05:30
  • ddac107ae0 chore: remove Zenith managed hosting from README (#9693) Vihar Kurama 2026-08-27 15:11:58 +05:30
  • 302f09b5b9 fix: remove redundant Fragment wrapper around comboButton in dropdowns (#9694) Atul Tameshwari 2026-08-27 14:54:18 +05:30
  • 7a5dd57549 [INFRA-499] fix(security): reapply guest ownership restriction in WorkspaceViewViewSet.retrieve infra-499/undecorated-action-authz Manish Gupta 2026-08-27 10:30:54 +05:30
  • 999514fffc fix: 404 instead of a hollow 200 when a global view does not exist Manish Gupta 2026-08-20 18:11:23 +05:30
  • 463cba8557 fix(security): require workspace membership to read a global view Manish Gupta 2026-08-20 17:49:02 +05:30
  • 96c33544e6 fix(security): resolve the guard's permissions from get_permissions(), mirror partial_update on the other-surface scan infra-496/baseviewset-routed-verb-guard Manish Gupta 2026-08-27 10:51:06 +05:30
  • c31bb76efa fix(security): resolve perform_create against its actual owner, not just its presence Manish Gupta 2026-08-27 10:22:58 +05:30
  • cd39bdf2e9 fix(security): share the non-authorizing permission set with the route scan Manish Gupta 2026-08-20 18:01:07 +05:30
  • 7cecb466d3 fix(security): refuse routed actions served by unauthorized DRF mixins Manish Gupta 2026-08-20 17:10:52 +05:30
  • bfdc654699 fix(live): close redirect-follow gap in PDF image SSRF guard secur-245/live-pre-auth-ssrf Manish Gupta 2026-08-27 10:52:06 +05:30
  • d02e0c3187 [INFRA-501] fix(security): validate the destination entity_id, not project_id, for PROJECT_COVER duplicates infra-501/asset-project-access-structural Manish Gupta 2026-08-27 10:51:22 +05:30
  • 26db9ea57b [SECUR-236] fix: reject per_page=0 in get_per_page, not just negatives secur-236/appscan-ce-hardening Manish Gupta 2026-08-27 10:48:38 +05:30
  • cc71787d86 fix(live): judge IPv6 literals on their expanded form Manish Gupta 2026-08-07 16:25:16 +05:30
  • 5a0286b76f style(security): drop advisory identifiers and shorten comments Manish Gupta 2026-08-07 15:48:31 +05:30
  • 57b5fb17ad [SECUR-245] fix(security): match reserved /24s exactly and bound the Live request timeout Manish Gupta 2026-08-04 17:27:02 +05:30
  • 184596c5db [SECUR-245] fix(security): guard PDF image srcs and authenticate /convert-document/ Manish Gupta 2026-08-27 10:39:25 +05:30
  • b6a6b577ee [INFRA-501] fix(security): require project scoping on asset create/duplicate Manish Gupta 2026-08-27 10:35:38 +05:30
  • 33977a3bf8 [SECUR-236] fix: close remaining per_page crash and view/cycle mass-assignment gaps Manish Gupta 2026-08-27 10:34:27 +05:30
  • 2fc210f574 [WEB-8353] fix(security): extend guest issue visibility guard to comments + reactions web-8353/guest-issue-subresource-scope Manish Gupta 2026-08-27 10:33:41 +05:30
  • 6da62c6bb6 fix(security): keep archived-issue relations readable within their own project secur-243/issue-subresource-idor Manish Gupta 2026-08-27 10:32:47 +05:30
  • c48480572d fix(security): remove internal ticket ID from test module docstring secur-248/project-viewset-put-guard Manish Gupta 2026-08-27 10:29:43 +05:30
  • 1a76f29c79 chore: upgrade React to 19 and React Router to 8 (#9530) sriram veeraghanta 2026-08-26 17:39:36 +05:30
  • d0a30f497b [WEB-8789] Adopt @makeplane/propel as the design token source (#9682) Anmol Singh Bhatia 2026-08-25 21:23:06 +05:30
  • 1d0ee2482a chore: set issue type on GitHub issue templates (#9559) sriram veeraghanta 2026-08-24 21:09:47 +05:30
  • e093a22094 chore: remove posthog integration and analytics scaffold (#9634) sriram veeraghanta 2026-08-24 21:07:34 +05:30
  • 1d9def5d0b chore(ci): build images natively per architecture and merge by digest chore/native-arm-docker-builds Sriram Veeraghanta 2026-08-23 20:26:38 +05:30
  • 5f7d92784c release: v1.4.2 #9632 v1.4.2 master sriram veeraghanta 2026-08-23 20:03:06 +05:30
  • bd25c20105 [INFRA-502] fix(security): bind external-API work item attachments to the URL work item web-8375/external-api-issue-authz Manish Gupta 2026-08-21 17:23:19 +05:30
  • 8d992aebf3 [INFRA-501] test: pin absence of the asset identifier fields on a denied dedup match Manish Gupta 2026-08-21 14:24:12 +05:30
  • 0effe3c2ae [INFRA-501] fix(security): stop the external-id dedup echo disclosing foreign asset ids Manish Gupta 2026-08-21 13:06:53 +05:30
  • 83d5bda1ce [INFRA-501] fix(security): enforce project membership on every workspace-level asset route Manish Gupta 2026-08-21 12:04:36 +05:30
  • e056bbf9eb chore: dump version v1.4.2-rc1 sriram veeraghanta 2026-08-16 23:36:30 +05:30
  • d9841a5e02 fix(security): guard ProjectViewSet PUT — routed verb fell through to DRF Manish Gupta 2026-08-13 17:04:16 +05:30
  • f494bfd76d fix(security): scope the duplicate ProjectMemberPermission POST branch too secur-247/project-member-permission-post-scope Manish Gupta 2026-08-13 14:18:02 +05:30
  • 0f9249153f fix(security): scope ProjectMemberPermission POST to the URL project Manish Gupta 2026-08-13 13:34:54 +05:30
  • 1c8a60f858 [WEB-8632] fix(web): auto-reload on stale chunk load failure during navigation (#9579) Atul Tameshwari 2026-08-10 17:34:02 +05:30
  • dd88794fec chore(deps): bump the pip group across 2 directories with 1 update dependabot/pip/apps/api/pip-e901ebb543 dependabot[bot] 2026-08-10 04:14:27 +00:00
  • f21ee4d42a chore(security): drop advisory identifiers from code comments web-8291/project-invite-list-admin-scope Manish Gupta 2026-08-07 16:02:26 +05:30
  • f75d1ae91b chore(security): drop advisory identifiers from code comments Manish Gupta 2026-08-07 16:03:00 +05:30
  • ded0e06685 chore(security): drop advisory identifiers from code comments web-8332/workspace-member-mass-assignment Manish Gupta 2026-08-07 16:02:11 +05:30
  • 96a51159c6 chore(security): drop advisory identifiers from code comments web-8333/undecorated-route-idor Manish Gupta 2026-08-07 16:02:11 +05:30
  • 9133face1f chore(security): drop advisory identifiers from code comments web-8289/draft-to-issue-owner-scope Manish Gupta 2026-08-07 16:02:10 +05:30
  • edb0ccd5fb chore(security): drop advisory identifiers from code comments web-8374/member-preference-idor Manish Gupta 2026-08-07 16:00:10 +05:30
  • 3639e026cc chore(security): drop advisory identifiers from code comments web-8400/deploy-board-cross-workspace-idor Manish Gupta 2026-08-07 16:00:10 +05:30
  • 3321fd3102 chore(security): drop advisory identifiers from code comments web-8372/state-partial-update-admin-only Manish Gupta 2026-08-07 15:59:53 +05:30
  • 448367ed27 chore(security): drop advisory identifiers and shorten comments web-8401/space-asset-mutation-authz Manish Gupta 2026-08-07 15:59:31 +05:30
  • 880960390a chore(security): drop advisory identifiers from code comments Manish Gupta 2026-08-07 15:59:05 +05:30
  • dcda257280 chore(security): drop advisory identifiers from code comments Manish Gupta 2026-08-07 15:51:17 +05:30
  • 5662b76106 release: v1.4.1 #9545 v1.4.1 sriram veeraghanta 2026-08-07 15:35:02 +05:30
  • 31853ab2b8 chore: resolve dependabot security alerts (pnpm + pip) (#9549) v1.4.1-rc2 sriram veeraghanta 2026-08-05 00:48:59 +05:30
  • fa027167f6 fix(web): guard unguarded data derefs causing work-item and layout crashes (#9546) Atul Tameshwari 2026-08-05 00:21:19 +05:30
  • 8eeb8d762a fix: harden markdown attachment uploads feat/file-uploads-md-mdx-support vihar 2026-08-04 21:35:48 +05:30
  • 5adf526995 fix: reject suspicious filenames and match file icons case-insensitively sriram veeraghanta 2026-05-15 01:54:23 +05:30
  • ddb11a8012 feat: support .md and .mdx file uploads sriram veeraghanta 2026-05-03 00:01:24 +05:30
  • ed61f9925b chore: update package version sriramveeraghanta 2026-08-04 20:11:48 +05:30
  • 25c6843fce fix: enforce FILE_SIZE_LIMIT on published Space asset upload (#9242) sriram veeraghanta 2026-08-04 20:10:03 +05:30
  • c5951e7def [WEB-8510] fix(web): fix clipped/overlapping LayoutDropDown button in Create View modal (#9542) v1.4.1-rc1 Atul Tameshwari 2026-08-04 19:50:50 +05:30
  • a18177ce5e feat(api): enhance workspace module query to include member IDs (#9541) Atul Tameshwari 2026-08-04 19:50:08 +05:30
  • 194266581c fix(web): add trailing slash to notification list API call (#9521) Igor Bojczuk 2026-08-03 19:45:54 +02:00
  • 9fd1d537e2 [SECUR-243] fix(security): scope issue relation list to the URL project Manish Gupta 2026-08-03 16:35:56 +05:30
  • 96257d141e [SECUR-243] fix(security): scope issue relation removal to the URL project Manish Gupta 2026-08-03 15:13:18 +05:30
  • 69036c173a [SECUR-243] fix(security): scope issue comment + relation create to the URL project Manish Gupta 2026-08-03 13:24:21 +05:30
  • 65f4a99657 docs: add Zenith Hosting deploy option (#9529) Josh 2026-08-03 17:36:56 +10:00
  • 1ed664e8f8 [WEB-8512] feat: add workspace member reactivation command (#9520) Nikhil 2026-08-02 03:17:23 +05:30
  • 917b23a6c1 release: v1.4.0 #9160 v1.4.0 sriram veeraghanta 2026-07-31 17:53:44 +05:30
  • 53ead0a2d1 [WEB-8374] test: assert preference payload and persistence, not just 200 Manish Gupta 2026-07-31 17:10:50 +05:30
  • b9a01fdaef [WEB-8382][WEB-8383] docs: document 403 responses in the OpenAPI contract Manish Gupta 2026-07-31 16:59:25 +05:30
  • 39856932cd [WEB-8477] fix(api): filter "Updated At" by updated_at column, not created_at (#9514) Manish Gupta 2026-07-30 20:30:21 +05:30
  • 027a5a0330 fix: cast avatar_asset to CharField to resolve mixed type errors in URL concatenation (#9512) Satya Bharadwaj 2026-07-30 20:29:41 +05:30
  • e496b24f27 [WEB-8477] fix: created_at/updated_at filters return no work items (#9513) Manish Gupta 2026-07-30 19:51:16 +05:30
  • 7564480cf7 fix: resolve React Doctor errors and restore its PR baseline (#9488) sriram veeraghanta 2026-07-30 01:04:02 +05:30