Commit Graph

  • 270ef0d3c0 refactor: update password strength banner implementation in AuthPasswordForm refactor/makeplane-propel-banner Atul Tameshwari 2026-09-02 14:35:05 +05:30
  • cce4cb80bd feat(i18n): add page content limit banners and archive messages across multiple languages Atul Tameshwari 2026-09-02 14:32:08 +05:30
  • 4ecba799f7 feat(i18n): integrate translation support in multiple components Atul Tameshwari 2026-09-02 14:31:40 +05:30
  • 562c4ae6d4 fix: enhance accessibility for Upgrade to One link in IssueBulkOperationsRoot Atul Tameshwari 2026-09-02 14:27:14 +05:30
  • cd379dce98 refactor: update icon imports in ArchivedIssueDetailsPage and DevErrorComponent Atul Tameshwari 2026-09-02 14:15:15 +05:30
  • 47e21128f8 refactor: update banner imports and usage across multiple components Atul Tameshwari 2026-09-02 14:11:38 +05:30
  • 8f8dc7b29f chore: remove unused banner components from web application Atul Tameshwari 2026-09-02 14:07:13 +05:30
  • 431a838205 fix: address icon migration review on web refactor/web-icons-to-makeplane-icons anmolsinghbhatia 2026-09-02 13:40:49 +05:30
  • 2ff5df3d21 fix: address icon migration review on space refactor/space-icons-to-makeplane-icons anmolsinghbhatia 2026-09-02 13:35:06 +05:30
  • f5466fbcd7 fix: restore Settings breadcrumb label after icon rename refactor/admin-icons-to-makeplane-icons anmolsinghbhatia 2026-09-02 13:33:28 +05:30
  • 4dd82c4e47 chore(deps): bump sanitize-html dependabot/npm_and_yarn/npm_and_yarn-f5a43b1c9b dependabot[bot] 2026-09-02 01:26:34 +00:00
  • 3717500d6e chore: upgrade pnpm to 11.10, turbo to latest, fix dependabot alert (#9734) preview sriram veeraghanta 2026-09-02 02:10:33 +05:30
  • 244f94e028 refactor: migrate web icons to @makeplane/propel anmolsinghbhatia 2026-09-01 18:21:00 +05:30
  • 935074faff refactor: migrate package icons to @makeplane/propel refactor/packages-icons-to-makeplane-icons anmolsinghbhatia 2026-09-01 18:42:27 +05:30
  • 3a6301711e refactor: migrate admin icons to @makeplane/propel anmolsinghbhatia 2026-09-01 18:15:57 +05:30
  • efb433ddfe refactor: migrate space icons to @makeplane/propel anmolsinghbhatia 2026-09-01 18:13:15 +05:30
  • 12eb6015de refactor: migrate web Avatar to @makeplane/propel Avatar (#9724) Anmol Singh Bhatia 2026-09-01 17:45:42 +05:30
  • fd68e7d919 refactor: migrate web @plane/propel Tooltip to @makeplane/propel (#9726) Anmol Singh Bhatia 2026-09-01 17:15:12 +05:30
  • c09705f443 fix(airgapped): restore old data if swap is interrupted by a signal fix-airgapped-restore-script akshat5302 2026-09-01 15:25:23 +05:30
  • bb5cf6cc16 fix(airgapped): address review comments on restore script akshat5302 2026-09-01 15:14:43 +05:30
  • bbf6f1df4f fix(airgapped): harden community restore script akshat5302 2026-09-01 14:55:30 +05:30
  • 4a3779ccd5 fix(space): forward svg props in BacklogGroupIcon and use catalog for @makeplane/propel chore/space-makeplane-propel-migration Sriram Veeraghanta 2026-08-31 22:47:30 +05:30
  • 6b40d82c33 fix(space): reject malformed emoji tokens in stringToEmoji Sriram Veeraghanta 2026-08-31 22:42:29 +05:30
  • 6c1233a8f5 chore(space): address react-doctor review comments sriramveeraghanta 2026-08-31 20:12:29 +05:30
  • 7a898680bf refactor(space): migrate from @plane/propel to @makeplane/propel sriramveeraghanta 2026-08-31 20:00:55 +05:30
  • bc2fce4f1b fix(i18n): correct broken German translations (#9715) Sufiyan Khan 2026-08-31 17:09:17 +05:30
  • 8b4ea6dc93 fix: set explicit sizes on migrated Button icons refactor/button-to-makeplane-button anmolsinghbhatia 2026-08-31 14:37:00 +05:30
  • 550b46a1b5 fix: address Button migration review on web call sites anmolsinghbhatia 2026-08-31 14:10:18 +05:30
  • 93282ad8f6 refactor: migrate web @plane/propel Button to @makeplane/propel anmolsinghbhatia 2026-08-28 19:03:30 +05:30
  • 22c783c838 feat: add Georgian (ka-ge) language support (#9720) sriram veeraghanta 2026-08-31 14:25:15 +05:30
  • 78b4e43976 refactor: flatten editor src/core into src (#9723) sriram veeraghanta 2026-08-31 14:18:01 +05:30
  • fd4110e8aa refactor: flatten editor package folder structure (#9719) sriram veeraghanta 2026-08-31 14:06:41 +05:30
  • 43f4dc0a6a [INFRA-779] delegate isValidURL to the shared isValidNextPath instead of a local reimplementation infra-779/next-path-authority-relative-reject Manish Gupta 2026-08-31 09:53:09 +05:30
  • 2be57e2467 fix(api): expand null relations to null instead of an empty object fix/expand-updated-by Sriram Veeraghanta 2026-08-30 19:06:18 +05:30
  • effd0c5719 refactor: migrate admin and web from nginx to Caddy (#9716) sriram veeraghanta 2026-08-30 16:25:06 +05:30
  • 23cfe3cc42 refactor: migrate web Tag to @makeplane/propel Pill (#9710) Anmol Singh Bhatia 2026-08-30 15:23:01 +05:30
  • 145688fc79 chore: remove unused @plane/ui P1 primitives (#9711) Anmol Singh Bhatia 2026-08-30 15:22:42 +05:30
  • 6488fdc3cc chore(ci): build images natively per architecture and merge by digest (#9673) sriram veeraghanta 2026-08-30 15:22:21 +05:30
  • 57913925b2 fix(api/observability): honor settings-configured Celery pool, pass signal-specific endpoints, guard filelog parser feat/otel-api-observability Sriram Veeraghanta 2026-08-30 14:14:07 +05:30
  • b6e1f24f7c fix(api/observability): address PR review — leak, fork-safety, bounded shutdown, gate unification Sriram Veeraghanta 2026-08-30 11:50:21 +05:30
  • 4a6f9edff6 refactor: migrate web Input to @makeplane/propel Input (#9708) Anmol Singh Bhatia 2026-08-28 19:53:38 +05:30
  • 124103743e [INFRA-779] use str.translate instead of a char-by-char rebuild for tab/CR/LF stripping Manish Gupta 2026-08-28 16:28:13 +05:30
  • 838341158f [INFRA-779] strip tab/CR/LF from next_path before the authority-relative check Manish Gupta 2026-08-28 16:07:17 +05:30
  • 8537b6edfd [INFRA-779] fix(security): reject authority-relative next_path redirects Manish Gupta 2026-08-28 15:59:06 +05:30
  • 1b2716c930 [INFRA-778] use status.HTTP_200_OK instead of bare 200 in the new test infra-778/export-history-scope-to-initiator Manish Gupta 2026-08-28 15:34:44 +05:30
  • 96d4ae95f0 [INFRA-778] fix(security): scope ExportIssuesEndpoint.get to the requesting user's own exports Manish Gupta 2026-08-28 15:28:23 +05:30
  • 77a8eff693 [INFRA-777] fix(security): scope ProjectArchiveUnarchiveAPIEndpoint to the URL project infra-777/project-archive-scope-to-project Manish Gupta 2026-08-28 14:53:55 +05:30
  • 07739f27c2 [INFRA-774] also lock down is_active/deleted_at on WorkspaceMember serializers infra-774/workspace-member-scope-to-caller Manish Gupta 2026-08-28 11:44:01 +05:30
  • 926e84c4ce [INFRA-774] dedupe read_only_fields into a shared constant Manish Gupta 2026-08-28 11:23:07 +05:30
  • a7d9f1f257 [INFRA-774] fix(security): stop trusting body-supplied workspace/member on WorkSpaceMemberSerializer Manish Gupta 2026-08-28 11:16:23 +05:30
  • f36cd10e0d fix: tighten created_at assertions per CodeRabbit review on PR #9704 infra-772/created-by-forgery-scope-to-caller Manish Gupta 2026-08-28 10:01:29 +05:30
  • 8294c6531d fix: address Copilot review on PR #9704 Manish Gupta 2026-08-28 09:51:18 +05:30
  • 63f4a7c4da [INFRA-772] fix(security): stop trusting body-supplied created_by/created_at on external API Manish Gupta 2026-08-28 09:33:16 +05:30
  • 3478d4fac4 [WEB-8352] fix(security): scope SubIssuesEndpoint to the URL project (#9466) Manish Gupta 2026-08-28 01:52:19 +05:30
  • 5b5af0aeca [WEB-8283] fix: bind Spaces board object IDs to the anchor's project (#9442) Manish Gupta 2026-08-28 00:17:41 +05:30
  • d25b99cae2 [WEB-8110] fix: sanitize page list order_by against an allowlist (#9387) Manish Gupta 2026-08-28 00:16:47 +05:30
  • 30527927d7 [WEB-8103] fix: stop leaking webhook HMAC secret_key on reads (#9382) Manish Gupta 2026-08-28 00:16:01 +05:30
  • e30605d419 [WEB-7946] fix: add rate limiting to email/password sign-in and sign-up endpoints (#9335) Manish Gupta 2026-08-28 00:13:58 +05:30
  • fa4ec2b2e2 refactor: migrate web Tooltip to @makeplane/propel Tooltip (#9697) Anmol Singh Bhatia 2026-08-28 00:11:19 +05:30
  • ad57941526 refactor: migrate ToggleSwitch to @makeplane/propel (#9696) Anmol Singh Bhatia 2026-08-28 00:10:53 +05:30
  • c3cc04777a refactor: migrate web progress indicators to @makeplane/propel (#9698) Anmol Singh Bhatia 2026-08-28 00:10:29 +05:30
  • 8b021935aa refactor: migrate web Checkbox to @makeplane/propel Checkbox (#9702) Anmol Singh Bhatia 2026-08-28 00:09:33 +05:30
  • 1cf0249d24 chore: wire @makeplane/propel into web (#9699) Anmol Singh Bhatia 2026-08-28 00:09:16 +05:30
  • 0495678f7c chore: remove unused @plane/ui exports (#9701) Anmol Singh Bhatia 2026-08-28 00:08:27 +05:30
  • 3fadd7ac58 refactor(admin): replace workspace @plane/propel with @makeplane/propel (#9692) sriram veeraghanta 2026-08-27 23:59:07 +05:30
  • a584fbad53 refactor(admin): migrate from @plane/ui to @plane/propel (#9690) sriram veeraghanta 2026-08-27 23:59:07 +05:30
  • ddac107ae0 chore: remove Zenith managed hosting from README (#9693) Vihar Kurama 2026-08-27 15:11:58 +05:30
  • 302f09b5b9 fix: remove redundant Fragment wrapper around comboButton in dropdowns (#9694) Atul Tameshwari 2026-08-27 14:54:18 +05:30
  • 7a5dd57549 [INFRA-499] fix(security): reapply guest ownership restriction in WorkspaceViewViewSet.retrieve infra-499/undecorated-action-authz Manish Gupta 2026-08-27 10:30:54 +05:30
  • 999514fffc fix: 404 instead of a hollow 200 when a global view does not exist Manish Gupta 2026-08-20 18:11:23 +05:30
  • 463cba8557 fix(security): require workspace membership to read a global view Manish Gupta 2026-08-20 17:49:02 +05:30
  • 96c33544e6 fix(security): resolve the guard's permissions from get_permissions(), mirror partial_update on the other-surface scan infra-496/baseviewset-routed-verb-guard Manish Gupta 2026-08-27 10:51:06 +05:30
  • c31bb76efa fix(security): resolve perform_create against its actual owner, not just its presence Manish Gupta 2026-08-27 10:22:58 +05:30
  • cd39bdf2e9 fix(security): share the non-authorizing permission set with the route scan Manish Gupta 2026-08-20 18:01:07 +05:30
  • 7cecb466d3 fix(security): refuse routed actions served by unauthorized DRF mixins Manish Gupta 2026-08-20 17:10:52 +05:30
  • bfdc654699 fix(live): close redirect-follow gap in PDF image SSRF guard secur-245/live-pre-auth-ssrf Manish Gupta 2026-08-27 10:52:06 +05:30
  • d02e0c3187 [INFRA-501] fix(security): validate the destination entity_id, not project_id, for PROJECT_COVER duplicates infra-501/asset-project-access-structural Manish Gupta 2026-08-27 10:51:22 +05:30
  • 26db9ea57b [SECUR-236] fix: reject per_page=0 in get_per_page, not just negatives secur-236/appscan-ce-hardening Manish Gupta 2026-08-27 10:48:38 +05:30
  • cc71787d86 fix(live): judge IPv6 literals on their expanded form Manish Gupta 2026-08-07 16:25:16 +05:30
  • 5a0286b76f style(security): drop advisory identifiers and shorten comments Manish Gupta 2026-08-07 15:48:31 +05:30
  • 57b5fb17ad [SECUR-245] fix(security): match reserved /24s exactly and bound the Live request timeout Manish Gupta 2026-08-04 17:27:02 +05:30
  • 184596c5db [SECUR-245] fix(security): guard PDF image srcs and authenticate /convert-document/ Manish Gupta 2026-08-27 10:39:25 +05:30
  • b6a6b577ee [INFRA-501] fix(security): require project scoping on asset create/duplicate Manish Gupta 2026-08-27 10:35:38 +05:30
  • 33977a3bf8 [SECUR-236] fix: close remaining per_page crash and view/cycle mass-assignment gaps Manish Gupta 2026-08-27 10:34:27 +05:30
  • 2fc210f574 [WEB-8353] fix(security): extend guest issue visibility guard to comments + reactions web-8353/guest-issue-subresource-scope Manish Gupta 2026-08-27 10:33:41 +05:30
  • 6da62c6bb6 fix(security): keep archived-issue relations readable within their own project secur-243/issue-subresource-idor Manish Gupta 2026-08-27 10:32:47 +05:30
  • c48480572d fix(security): remove internal ticket ID from test module docstring secur-248/project-viewset-put-guard Manish Gupta 2026-08-27 10:29:43 +05:30
  • 1a76f29c79 chore: upgrade React to 19 and React Router to 8 (#9530) sriram veeraghanta 2026-08-26 17:39:36 +05:30
  • d0a30f497b [WEB-8789] Adopt @makeplane/propel as the design token source (#9682) Anmol Singh Bhatia 2026-08-25 21:23:06 +05:30
  • 1d0ee2482a chore: set issue type on GitHub issue templates (#9559) sriram veeraghanta 2026-08-24 21:09:47 +05:30
  • e093a22094 chore: remove posthog integration and analytics scaffold (#9634) sriram veeraghanta 2026-08-24 21:07:34 +05:30
  • 5f7d92784c release: v1.4.2 #9632 v1.4.2 master sriram veeraghanta 2026-08-23 20:03:06 +05:30
  • bd25c20105 [INFRA-502] fix(security): bind external-API work item attachments to the URL work item web-8375/external-api-issue-authz Manish Gupta 2026-08-21 17:23:19 +05:30
  • 8d992aebf3 [INFRA-501] test: pin absence of the asset identifier fields on a denied dedup match Manish Gupta 2026-08-21 14:24:12 +05:30
  • 0effe3c2ae [INFRA-501] fix(security): stop the external-id dedup echo disclosing foreign asset ids Manish Gupta 2026-08-21 13:06:53 +05:30
  • 83d5bda1ce [INFRA-501] fix(security): enforce project membership on every workspace-level asset route Manish Gupta 2026-08-21 12:04:36 +05:30
  • e056bbf9eb chore: dump version v1.4.2-rc1 sriram veeraghanta 2026-08-16 23:36:30 +05:30
  • d9841a5e02 fix(security): guard ProjectViewSet PUT — routed verb fell through to DRF Manish Gupta 2026-08-13 17:04:16 +05:30
  • f494bfd76d fix(security): scope the duplicate ProjectMemberPermission POST branch too secur-247/project-member-permission-post-scope Manish Gupta 2026-08-13 14:18:02 +05:30
  • 0f9249153f fix(security): scope ProjectMemberPermission POST to the URL project Manish Gupta 2026-08-13 13:34:54 +05:30