Commit graph

250 commits

Author SHA1 Message Date
thibaud-leclere
b1e4b648ee feat: add local auth settings
Some checks failed
Node.js CI / Test (push) Has been cancelled
2026-05-06 08:52:10 +02:00
thibaud-leclere
d4bbde7deb feat: add local user creation 2026-05-06 08:50:30 +02:00
thibaud-leclere
b17375eb16 feat: add local admin login 2026-05-06 08:44:14 +02:00
thibaud-leclere
4c30592ae4 feat: add local auth onboarding 2026-05-06 08:41:02 +02:00
Mir Arif Hasan
078d71036b
chore: security patch for the dependency chain v2026.4.0 (#6191)
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-04-28 17:51:43 +05:30
James George
67782b2b30 chore: bump version to 2026.4.0 2026-04-28 00:48:24 +05:30
Mir Arif Hasan
eb801889ba
feat: add SMTP OAuth2 authentication support (#6141)
Co-authored-by: nivedin <nivedinp@gmail.com>
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-04-22 17:11:03 +05:30
dependabot[bot]
3e63bdab02 chore: patch axios CVEs and bump related dependencies (#6131)
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-04-14 12:57:58 +05:30
James George
2837ef789a chore: bump version to 2026.3.1 2026-04-10 13:52:32 +05:30
James George
ad4041e51a chore: address remaining production audit findings
Bump handlebars to 4.7.9, @apollo/server to 5.5.0, and
nodemailer to 8.0.4 in the backend. Add narrow pnpm
overrides for path-to-regexp (8.4.0) and dompurify (3.3.3).
Move unplugin-icons to devDependencies in sh-admin to keep
dev-only transitive packages out of the production audit.
2026-03-30 12:50:14 +05:30
James George
d5a19320b8 chore: bump version to 2026.3.0 2026-03-27 19:52:07 +05:30
Mir Arif Hasan
e4eee306a7
chore: patch dependency vulnerabilities and harden production image (#6055)
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-03-27 19:26:26 +05:30
Mir Arif Hasan
59c1b595a6
feat: show user workspace memberships in admin dashboard (#5968)
Co-authored-by: Anwarul Islam <anwaarulislaam@gmail.com>
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-03-26 00:28:36 +05:30
Mir Arif Hasan
06bdd7ca6a
feat: add MAILER_SMTP_IGNORE_TLS and optional SMTP auth (#5972)
Co-authored-by: nivedin <nivedinp@gmail.com>
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-03-25 23:30:46 +05:30
Mir Arif Hasan
da3b8c5d37
fix(backend): prevent stored XSS via mock server responses and cross-team request moves (#6006)
Co-authored-by: nivedin <nivedinp@gmail.com>
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-03-25 16:16:38 +05:30
Mir Arif Hasan
2fcf5b7a5f
chore: security patch for the dependency chain v2026.3.0 (#6013)
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-03-24 16:34:36 +05:30
Daniel Bates
4a61e3464d
fix(common): prevent infinite auth refresh retry loop on permanent token failure (#5893)
Co-authored-by: nivedin <nivedinp@gmail.com>
2026-03-19 23:09:01 +05:30
Nikhil
08921786e7
fix: restore tooltips on icon-only buttons inside popover triggers (#5935)
Co-authored-by: nivedin <nivedinp@gmail.com>
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-03-18 15:11:15 +05:30
James George
4cbe23cf00 chore: bump version to 2026.2.1 2026-03-04 19:09:52 +05:30
Shekhu☺️
3876fa9682
fix(common): update documentation link for mock server (#5929) 2026-03-03 15:28:24 +05:30
James George
a40c491f7a chore: bump version to 2026.2.0 2026-02-23 17:46:08 +05:30
Leonic
1de672b8bd
feat(sh-admin): add search and pagination to teams list (#5803)
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-02-20 14:13:14 +05:30
Mir Arif Hasan
4fe0e376bb
chore: security patch for the dependency chain v2026.2.0 (#5887)
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-02-19 12:48:50 +05:30
James George
32114fc8ef chore: bump version to 2026.1.1 2026-02-04 22:54:23 +05:30
Mayank Jain
fcf31a4fd8
fix: broken scroll on latest chrome versions (#5816)
Co-authored-by: nivedin <nivedinp@gmail.com>
2026-02-03 12:07:54 +05:30
James George
8991f2a490 chore: bump version to 2026.1.0 2026-01-23 21:18:39 +05:30
Mir Arif Hasan
4f13549ed2
chore: security patch for the dependency chain v2026.1.0 (#5786)
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-01-21 23:25:40 +05:30
James George
9693a82a87 chore: bump version to 2025.12.1 2026-01-05 16:15:09 +05:30
Mir Arif Hasan
442242c8ca
chore: security patch for the quic-go vulnerability (#5710)
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
Co-authored-by: Nahid Hasan <52489202+nahidhasan94@users.noreply.github.com>
2025-12-19 21:00:22 +05:30
James George
440868d635 chore: bump version to 2025.12.0 2025-12-19 17:19:24 +05:30
Mir Arif Hasan
05927f3d4d
chore: security patch for the dependency chain v2025.12.0 (#5678)
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2025-12-12 16:58:35 +05:30
James George
3527f217c9 chore: bump version to 2025.11.2 2025-12-10 18:58:30 +05:30
James George
77d0956180 chore: bump version to 2025.11.1 2025-12-03 23:02:12 +05:30
James George
c50076ef2e chore: bump dependencies
Follow up to #5590.
2025-11-26 11:06:57 +05:30
James George
7bcd268725 chore: bump version to 2025.11.0 2025-11-26 10:39:09 +05:30
Mir Arif Hasan
904a1b0405
chore: security patch for the dependency chain v2025.11.0 (#5590)
Bump dependencies and account for breaking changes.

---------

Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2025-11-24 14:21:29 +05:30
James George
8b164f9e31 chore: bump version to 2025.10.1 2025-11-13 00:11:21 +05:30
Anwarul Islam
c0e3ff49b3
fix (common): address mock server issues and improve the UI (#5517)
Co-authored-by: nivedin <nivedinp@gmail.com>
Co-authored-by: jamesgeorge007 <25279263+jamesgeorge007@users.noreply.github.com>
Co-authored-by: mirarifhasan <arif.ishan05@gmail.com>
2025-10-29 16:25:02 +05:30
Harshit Chandra
453b5fc088
feat: add configurable session cookie name (#5425)
Added support for overriding the default session cookie name using the `INFRA.SESSION_COOKIE_NAME` config or the `SESSION_COOKIE_NAME` environment variable. This helps compatibility with proxies or load balancers that cannot handle cookie names containing dots.

---

Co-authored-by: mirarifhasan <arif.ishan05@gmail.com>
Co-authored-by: jamesgeorge007 <25279263+jamesgeorge007@users.noreply.github.com>
2025-10-28 13:45:08 +05:30
jamesgeorge007
457ca12be9 chore: bump version to 2025.10.0 2025-10-27 23:04:50 +05:30
Mir Arif Hasan
3acc0ec9b6
feat: mock server (#5482)
Co-authored-by: Anwarul Islam <anwaarulislaam@gmail.com>
Co-authored-by: jamesgeorge007 <25279263+jamesgeorge007@users.noreply.github.com>
2025-10-27 23:03:22 +05:30
Mir Arif Hasan
53e8b28459
chore: security patch for the dependency chain (#5487)
v2025.10.0

---------

Co-authored-by: jamesgeorge007 <25279263+jamesgeorge007@users.noreply.github.com>
2025-10-22 18:48:20 +05:30
Prit Rojivadiya
c31f74829d
refactor: cleanup sync logic and imports (#5428) 2025-10-08 13:31:29 +05:30
jamesgeorge007
d80ea5d214 chore: bump version to 2025.9.2 2025-10-07 17:22:25 +05:30
jamesgeorge007
6bbfb9b8b7 chore: bump version to 2025.9.1 2025-10-01 11:18:38 +05:30
jamesgeorge007
58b0736c5b chore: bump non-major dependencies 2025-09-26 13:26:42 +05:30
jamesgeorge007
93d2e53885 chore: bump version to 2025.9.0 2025-09-24 19:47:28 +05:30
Mir Arif Hasan
37060638df
chore: security patch for the dependency chain (#5400)
Bump non-major dependencies

---------

Co-authored-by: jamesgeorge007 <25279263+jamesgeorge007@users.noreply.github.com>
2025-09-24 16:22:31 +05:30
jamesgeorge007
75ec412076 chore: bump version to 2025.8.1 2025-09-02 15:22:35 +05:30
Mir Arif Hasan
a0c2635000
chore: security patch for the dependency chain (#5349)
Co-authored-by: jamesgeorge007 <25279263+jamesgeorge007@users.noreply.github.com>
2025-08-26 14:56:48 +05:30