Anmol Singh Bhatia
c3a9f99789
[WEB-6420] chore: self-host social icons in project invitation email ( #8718 )
...
* chore: add self-hosted social icon assets for email templates
* chore: pass current_site to project invitation email context
* chore: replace mailinblue CDN icons with self-hosted static assets
2026-03-05 18:17:42 +05:30
sriram veeraghanta
71b0d30afb
[SECUR-116] fix: ssrf webhook url for ip address #8716
2026-03-05 17:26:06 +05:30
sriramveeraghanta
d20247e976
chore(deps): django version upgrade
2026-03-05 14:05:30 +05:30
Anmol Singh Bhatia
a75301d6c6
[WEB-6420] chore: migrate community references from Discord to Forum ( #8657 )
...
* chore: replace Discord references with Forum links
* chore: migrate help and community CTAs from Discord to Forum
* refactor: replace Discord icons with lucide MessageSquare
* chore: rename Discord labels and keys to Forum
* chore: remove obsolete Discord icon component
* chore: update Discord references to Forum in templates
* chore: code refactoring
2026-03-04 13:08:36 +05:30
Nikhil
351344ecbb
[WEB-5225] feat: enhance authentication logging with detailed error and info message ( #7998 )
...
* feat: enhance authentication logging with detailed error and info messages
- Added logging for various authentication events in the Adapter and its subclasses, including email validation, user existence checks, and password strength validation.
- Implemented error handling for GitHub OAuth email retrieval, ensuring proper logging of unexpected responses and missing primary emails.
- Updated logging configuration in local and production settings to include a dedicated logger for authentication events.
* chore: address copilot comments
* chore: addressed some additional comments
* chore: update log
* fix: lint
2026-03-03 19:35:34 +05:30
Bavisetti Narayan
a58642ed10
[WIKI-852] chore: update page version save logic ( #8440 )
...
* chore: updated the logic for page version task
* chore: updated the html variable
* chore: handled the exception
* chore: changed the function name
* chore: added a custom variable
2026-03-03 19:10:42 +05:30
Saurabh Kumar
a9d688f290
[SILO-1028] feat: Project Summary external API ( #8661 )
...
* add project summary endpoint
* update response structure
2026-03-03 01:33:07 +05:30
sriram veeraghanta
f53446340b
fix: Member Information Disclosure via Public Endpoint #8646
2026-02-20 18:33:45 +05:30
sriram veeraghanta
9070acbbe8
fix: IDOR Vulnerabilities in Asset & Attachment Endpoints ( #8644 )
...
* fix: idor issues in project assets and issue attachements
* fix: comments
2026-02-20 18:02:12 +05:30
Sangeetha
b5fe8a2825
[WEB-6194]migration: added archived_at in IssueView #8641
...
* migration: added archived_at in IssueView
* fix: lint
2026-02-17 19:06:13 +05:30
Sangeetha
c4b3d52466
[WEB-5878] chore: add validation for project name/identifier for special characters ( #8529 )
...
* chore: update ProjectSerializer to raise validation for special characters in name and identifier
* chore: update external endpoints
* fix: external api serializer validation
* update serializer to send error code
* fix: move the regex expression to Project model
2026-02-17 00:49:02 +05:30
b-saikrishnakanth
f0dcf66167
[WEB-5917] fix: generate clean plain text from HTML email template #8535
2026-02-17 00:44:52 +05:30
Sangeetha
3a99ecf8f3
[WEB-5871] chore: added intake count for projects ( #8497 )
...
* chore: add intake_count in project list endpoint
* chore: sidebar project navigation intake count added
* fix: filter out closed intake issues in the count
* chore: code refactor
* chore: code refactor
* fix: filter out deleted intake issues
---------
Co-authored-by: Anmol Singh Bhatia <anmolsinghbhatia@plane.so>
2026-02-17 00:04:03 +05:30
Dheeraj Kumar Ketireddy
ef5d481a19
[VPAT-51] fix: update workspace invitation flow to use token for validation #8508
...
- Modified the invite link to include a token for enhanced security.
- Updated the WorkspaceJoinEndpoint to validate the token instead of the email.
- Adjusted the workspace invitation task to generate links with the token.
- Refactored the frontend to handle token in the invitation process.
Co-authored-by: sriram veeraghanta <veeraghanta.sriram@gmail.com>
2026-02-17 00:02:18 +05:30
Dheeraj Kumar Ketireddy
c8a800104c
[SILO-820] fix: update serializer for module detail API endpoint to use ModuleUpdateSerializer ( #8496 )
2026-02-17 00:01:33 +05:30
Jayash Tripathy
53b3358a63
[GIT-44] refactor(auth): add PASSWORD_TOO_WEAK error code ( #8522 )
...
* refactor(auth): add PASSWORD_TOO_WEAK error code and update related error handling in password change flow
* fix(auth): update import to use type for EAuthenticationErrorCodes in security page
* Update apps/web/app/(all)/profile/security/page.tsx
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
* Update apps/web/app/(all)/[workspaceSlug]/(settings)/settings/account/security/page.tsx
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
* refactor: updated auth error exception accross zxcvbn usages
* fix: improve error handling for password strength validation and update error messages
* i18n(ru): update Russian translations for stickies and automation description
Added translation for 'stickies' and improved formatting of the automation description in Russian locale.
---------
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2026-02-13 18:51:33 +05:30
Aaryan Khandelwal
d497304de5
refactor: table drag preview using decorations ( #8597 )
...
* refactor: table drag preview using decorations
* fix: history meta for table drag state
2026-02-13 17:59:37 +05:30
sriram veeraghanta
dfce8c6278
chore: admin folder structure ( #8632 )
...
* chore: admin folder structure
* fix: copy right check and formatting
* fix: types
2026-02-13 16:29:45 +05:30
Vamsi Krishna
fab84eb058
[WEB-5899]fix: project sort order ( #8530 )
...
* fix: project sort order
* chore: updated queryset for sort_order
2026-02-13 15:52:22 +05:30
Sangeetha
cd613e5f8f
[SECUR-105] fix: csv injection vulnerability sanitization #8611
2026-02-13 15:37:13 +05:30
dependabot[bot]
b59e541b35
chore(deps): bump cryptography ( #8625 )
...
Bumps the pip group with 1 update in the /apps/api/requirements directory: [cryptography](https://github.com/pyca/cryptography ).
Updates `cryptography` from 44.0.1 to 46.0.5
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst )
- [Commits](https://github.com/pyca/cryptography/compare/44.0.1...46.0.5 )
---
updated-dependencies:
- dependency-name: cryptography
dependency-version: 46.0.5
dependency-type: direct:production
dependency-group: pip
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-11 13:06:42 +05:30
Sangeetha
57ce2a5429
[WEB-6149] migration: change estimate point key max value to 50 #8620
2026-02-10 17:07:14 +05:30
sriramveeraghanta
13a679437d
chore(deps): upgrade django version
2026-02-09 14:51:53 +05:30
Sangeetha
78729277e8
[SECUR-104] fix: Arbitrary Modification of API Token Rate Limits#8612
2026-02-09 14:50:29 +05:30
Sangeetha
d191615a5e
[SECUR-113] fix: ssrf for work item links ( #8607 )
2026-02-05 15:03:43 +05:30
Bavisetti Narayan
b8d3b3c5eb
fix: module percentage calculation ( #8595 )
2026-01-29 14:48:43 +05:30
sriram veeraghanta
02d0ee3e0f
chore: add copyright ( #8584 )
...
* feat: adding new copyright info on all files
* chore: adding CI
2026-01-27 13:54:22 +05:30
Sangeetha
f7d5200ed8
migration: back migrate all product tour fields to set true ( #8575 )
2026-01-27 00:47:02 +05:30
punto
57806f9bd5
[GIT-45] fix: allow markdown file attachments ( #8524 )
...
* fix: allow markdown file attachments
- Add text/markdown to ATTACHMENT_MIME_TYPES
- Fixes issue where .md files were rejected with 'Invalid file type' error
* added the support for frontend mime type too
2026-01-23 13:38:47 +05:30
Sangeetha
ba5ba5bf54
[GIT-61] chore: allow .md files to be uploaded ( #8571 )
...
* chore: allow .md files to be uploaded
* chore: allow .md files to be uploaded
2026-01-23 13:33:20 +05:30
Bavisetti Narayan
2a29ab8d4a
[WEB-5845] chore: changing description field to description json ( #8230 )
...
* chore: migrating description to description json
* chore: replace description with description_json
* chore: updated migration file
* chore: updated the migration file
* chore: added description key in external endpoint
* chore: updated the migration file
* chore: updated the typo
---------
Co-authored-by: Aaryan Khandelwal <aaryankhandu123@gmail.com>
2026-01-22 18:23:59 +05:30
Sangeetha
fa1b4a102a
[WEB-5890] migration: added getting_started_checklist, tips, explored_feature fields on the workspace member table ( #8489 )
...
* migration: added getting_started_checklist and tips field
* fix: remove defaults and added explored_features field
* fix: added user table migration
2026-01-15 14:25:31 +05:30
Bavisetti Narayan
5f3f9d2623
chore: updated migration file name ( #8515 )
2026-01-09 14:36:45 +05:30
Nikhil
ea1f92e0c6
[WEB-5537]refactor: rename IssueUserProperty to ProjectUserProperty and update related references ( #8206 )
...
* refactor: rename IssueUserProperty to ProjectUserProperty and update related references across the codebase
* migrate: move issue user properties to project user properties and update related fields and constraints
* refactor: rename IssueUserPropertySerializer and IssueUserDisplayPropertyEndpoint to ProjectUserPropertySerializer and ProjectUserDisplayPropertyEndpoint, updating all related references
* fix: enhance ProjectUserDisplayPropertyEndpoint to handle missing properties by creating new entries and improve response handling
* fix: correct formatting in migration for ProjectUserProperty model options
* migrate: add migration to update existing non-service API tokens to remove workspace association
* migrate: refine migration to update existing non-service API tokens by excluding bot users from workspace removal
* chore: changed the project sort order in project user property
* chore: remove allowed_rate_limit from APIToken
* chore: updated user-properties endpoint for frontend
* chore: removed the extra projectuserproperty
* chore: updated the migration file
* chore: code refactor
* fix: type error
---------
Co-authored-by: NarayanBavisetti <narayan3119@gmail.com>
Co-authored-by: sangeethailango <sangeethailango21@gmail.com>
Co-authored-by: vamsikrishnamathala <matalav55@gmail.com>
Co-authored-by: Anmol Singh Bhatia <anmolsinghbhatia@plane.so>
2026-01-06 15:37:19 +05:30
Nikhil
a37e5e2f6a
[WEB-5598] refactor: streamline object creation in workspace seed task and improve error handling in workspace creation #8264
2025-12-30 17:28:33 +05:30
Sangeetha
1072509642
migration: added webhook version, navigation related fields and allowed_rate_limit for APIToken ( #8339 )
...
* migration: added version field in webhook
* chore: add max_length
* chore: added product tour fields
* chore: updated the migration file
* chore: removed the duplicated migration file
* chore: added allowed_rate_limit for api_tokens
* chore: changed key feature tour to product tour
* chore: added is_subscribed_to_changelog field
---------
Co-authored-by: NarayanBavisetti <narayan3119@gmail.com>
2025-12-30 16:18:58 +05:30
lif
94d5779f3a
chore: remove unused get_client_ip import ( #8453 )
...
Remove unused import `get_client_ip` from workspace/invite.py.
Identified by ruff linter (F401 error).
Signed-off-by: majiayu000 <1835304752@qq.com>
2025-12-29 18:39:54 +05:30
b-saikrishnakanth
20492ffa75
[WEB-5790] feat: new email templates ( #8423 )
2025-12-29 16:17:29 +05:30
Bavisetti Narayan
3241693d6d
[WEB-5815] chore: removed the deleted states ( #8457 )
2025-12-26 20:28:33 +05:30
Bavisetti Narayan
59f26a80bb
[WEB-5667] fix: estimate value display in analytics #8448
2025-12-24 17:34:58 +05:30
Sangeetha
1a7c537ee5
[WEB-5791] fix: broken favicon in links ( #8396 )
...
* fix: using base url of a redirect url
* chore: internal networks check for the final_url
* fix: none final_url
* fix: exception handling
* fix: exception handling
* chore: remove unused imports
* refactor: moved ip address check logic into separate function
* fix: ValueError logic
2025-12-24 17:33:46 +05:30
sriram veeraghanta
777200db7b
chore: workspace events ( #8439 )
...
* chore: adding invite and joined events
* chore: adding workspace create and update events
2025-12-23 19:47:00 +05:30
Nikhil
c2ce21e56c
[WEB-5657] feat: add synchronization configuration for multiple providers in authentication adapter ( #8336 )
...
* feat: add sync functionality for OAuth providers
- Implemented `check_sync_enabled` method to verify if sync is enabled for Google, GitHub, GitLab, and Gitea.
- Added `sync_user_data` method to update user details, including first name, last name, display name, and avatar.
- Updated configuration variables to include sync options for each provider.
- Integrated sync check into the login/signup process.
* feat: add sync toggle for OAuth providers in configuration forms
* fix: remove default value for sync options in OAuth configuration forms
* chore: delete old avatar and upload a new one
* chore: update class method
* chore: add email nullable
* refactor: streamline sync check for multiple providers and improve avatar deletion logic
* fix: ensure ENABLE_SYNC configurations default to "0" for Gitea, Github, Gitlab, and Google forms
* fix: simplify toggle switch value handling in ControllerSwitch component
---------
Co-authored-by: b-saikrishnakanth <bsaikrishnakanth97@gmail.com>
2025-12-22 12:23:39 +05:30
Sangeetha
df710e00dc
[WEB-5666] chore: set project timezone same as workspace timezone in project ( #8340 )
2025-12-16 20:46:53 +05:30
Henit Chobisa
e7974afd8b
[SILO-783] feat: added porters and new serializer based exporter ( #8335 )
2025-12-16 15:20:53 +05:30
Aaryan Khandelwal
22339b9786
[WEB-5602] feat: new design system ( #8220 )
...
* chore: init tailwind v4
* chore: update all configs
* chore: add source to parse monorepo packages
* chore: combine all css files
* feat: added extended colors
* chore: update typography
* chore: update extended color var names
* refactor: remove initial spacing variable and update dark mode selector
* chore: update css files
* chore: update animations
* chore: remove spacing tokens
* fix: external css files
* chore: update tailwind-merge version
* chore: update font family
* chore: added brief agents.md and story for new design system
* chore: enhance design system documentation with rare exceptions for visual separation
* chore: add fontsource package for typography
* chore: material symbols font added
* chore: update shadow default
* chore: add stroke and outline theme vars
* chore: update ring and fill colors
* chore: overwrite tailwind typography tokens
* chore: add high contrast mode tokens
* chore: update scrollbar colors
* chore: backward compatibility for buttons and placeholders
* chore: add priority colors
* chore: update urgent priority color
* chore: update plan colors
* chore: add missing utility class
* chore: update height and padding classes
* chore: update label colors
* chore: add missing utlity
* chore: add typography plugin to space app
* chore: replace existing classNames with new design system tokens #8244 (#8278 )
* chore: update border colors
* chore: update all borders
* chore: update text colors
* chore: update css variables
* chore: update font sizes and weights
* chore: update bg colors
* chore: sync changes
* fix: uncomment spacing-1200 variable in variables.css
* chore: update primary colors
* refactor: updated border to border-subtle
* refactor: update various components and improve UI consistency across the application
* updated classnames
* updated classnames
* refactor: update color-related class names to use new design system variables for consistency
* chore: default automations
* chore: update text sizes
* chore: home and power k
* chore: home and power k
* chore: replace ui package button components
* chore: update text sizes
* chore: updated issue identifier (#8275 )
* refactor: top navigation and sidebar design token (#8276 )
* chore: update all button components (#8277 )
* chore: new button component
* chore: update existing buttons
* chore: overwrite tailwind typography tokens
* fix: twMerge config + fixed cn instances
* refactor: toast design token updated (#8279 )
* chore: update existing buttons
* chore: tooltip design token updatged (#8280 )
* chore: moved cn utility to propel (#8281 )
* chore: update space app UI (#8285 )
* chore; update space app filters component
* fix: button whitespace wrap
* chore: space app votes
* chore: update dropdown components
* refactor: auth, onboarding, sidebar, and common component design token migration (#8291 )
* chore: checkbox component design token updated
* chore: indicator and oauth component design token updated
* chore: sidebar design token updated
* chore: auth and onboarding design token updated
* chore: update divider color
* style: update background colors and hover effects across list components
* fix: tailwind merge
* refactor: toggle switch design token migration and header utility classname added (#8295 )
* chore: toggle component design token updated
* chore: h-header utility class added
* chore: updated color tokens for work item detail page (#8296 )
* chore: update react-day-picker UI
* refactor: update button sizes and styles in filters components
* refactor: breadcrumbs design token updated (#8297 )
* chore: update priority icon colors
* refactor: updated layout variables
* chore: update plan card primary CTA
* Chore update editor design system (#8299 )
* refactor: update styles for callout, color selector, logo selector, and image uploader
* refactor:fix image
* chore: update settings UI
* chore: updated notifications color and size tokens (#8302 )
* chore: update sm button border radius
* fix: logo renderer
* chore: icon button component
* chore: remove deprecated classes
* chore: remove deprecated classes
* chore: update editor list spacing
* fix: icon button size
* chore: improvements (#8309 )
* chore: update cycles and modules pages
* refactor: update background styles across various components to use new design system colors
* fix: button type errors
* chore: update modals design system (#8310 )
* refactor: callout bg
* refactor: code bg
* refactor: modal size and variant
---------
Co-authored-by: Aaryan Khandelwal <aaryankhandu123@gmail.com>
* chore: update next-themes
* design: update billing and plans component styles and remove unused utility functions (#8313 )
* refactor: empty state design token migration and improvements (#8315 )
* fix: profile page
* refactor: tabs design token updated (#8316 )
* chore: updated buttons and tokens for work items (#8317 )
* fix: adjust trial button spacing in checkout modal
* chore: update add button hover state
* fix: type error (#8318 )
* fix: type error
* chore: code refactor
* refactor: update button sizes and background styles in rich filters components
* refactor: update editor bg
* refactor: enhance Gantt chart sidebar functionality and styling
- Removed unused prop from .
- Updated to include new props for better block management and scrolling behavior.
- Improved auto-scroll functionality for Gantt chart items.
- Adjusted styles in component for consistent design.
* regression: gantt design
* chore: new badge component
* fix: favorite star
* chore: update backgroung, typography and button sizes across workspace settings general and members pages
* fix: header button sizes
* fix: emoji icon logo (#8323 )
* more fixes
* chore: update settings sidebar
* refactor: avatar component
* chore: updated work item detail sidebar (#8327 )
* refactor: update link preview
* fix: work item property dropdowns
* fix: dropdown buttons border radius
* chore: update power k translation
* chore: updated profile activity design (#8328 )
* chore: update settings pages
* chore: update work item sidebar alignments (#8330 )
* refactor: admin design system
* chore: update page header
---------
Co-authored-by: Jayash Tripathy <76092296+JayashTripathy@users.noreply.github.com>
Co-authored-by: VipinDevelops <vipinchaudhary1809@gmail.com>
Co-authored-by: Vamsi Krishna <46787868+vamsikrishnamathala@users.noreply.github.com>
Co-authored-by: Anmol Singh Bhatia <121005188+anmolsinghbhatia@users.noreply.github.com>
Co-authored-by: gakshita <akshitagoyal1516@gmail.com>
Co-authored-by: Palanikannan M <akashmalinimurugu@gmail.com>
Co-authored-by: Prateek Shourya <prateekshourya29@gmail.com>
Co-authored-by: b-saikrishnakanth <bsaikrishnakanth97@gmail.com>
Co-authored-by: M. Palanikannan <73993394+Palanikannan1437@users.noreply.github.com>
* fix: formatting
* reexport types
* fix: lint error
---------
Co-authored-by: Jayash Tripathy <76092296+JayashTripathy@users.noreply.github.com>
Co-authored-by: VipinDevelops <vipinchaudhary1809@gmail.com>
Co-authored-by: Vamsi Krishna <46787868+vamsikrishnamathala@users.noreply.github.com>
Co-authored-by: Anmol Singh Bhatia <121005188+anmolsinghbhatia@users.noreply.github.com>
Co-authored-by: gakshita <akshitagoyal1516@gmail.com>
Co-authored-by: Palanikannan M <akashmalinimurugu@gmail.com>
Co-authored-by: Prateek Shourya <prateekshourya29@gmail.com>
Co-authored-by: b-saikrishnakanth <bsaikrishnakanth97@gmail.com>
Co-authored-by: M. Palanikannan <73993394+Palanikannan1437@users.noreply.github.com>
2025-12-12 20:50:14 +05:30
Anmol Singh Bhatia
2ac5efe2f0
[WEB-5647] chore: list layout work item identifier enhancements ( #8326 )
2025-12-12 19:21:29 +05:30
sriram veeraghanta
f1761c65b5
chore: fix ruff checks ( #8305 )
2025-12-11 01:18:09 +05:30
sriram veeraghanta
97e21ba21c
chore: format files in API server ( #8292 )
2025-12-10 23:50:01 +05:30
Dheeraj Kumar Ketireddy
647813a6ab
[WEB-4440] fix: duplicate sequence when creating multiple workitems in rapid succession ( #8298 )
...
- Replace advisory lock with transaction-level lock in Issue model save method
- Updated the save method in the Issue model to use a transaction-level advisory lock for better concurrency control.
- Simplified the locking mechanism by removing the explicit unlock step, as the lock is automatically released at the end of the transaction.
- Maintained existing functionality for sequence and sort order management while improving code clarity.
2025-12-10 23:20:41 +05:30
