3.40.1

What's Changed

• chore(deps): bump js-yaml from 5.2.0 to 5.2.1 in the all-non-major-security group across 1 directory by @dependabot[bot] in #19235
• chore(deps): bump protobufjs from 7.6.4 to 7.6.5 by @dependabot[bot] in #19242
• Support MSSQL history on tables by @adrinr in #19222
• guidelines on choosing a license by @mjashanks in #19243
• Relax Vouch requirements for pull requests by @melohagan in #19247
• feat: nest document list files by @Dakuan in #19233
• [VULN-118] Stop forwarding MongoDB TLS file paths on Cloud by @jvcalderon in #19244
• [GHSA-mqhr-6j6h-74p5] Enforce same-origin check for REST datasource requests by @jvcalderon in #19239
• [VULN-119] Add regression test showing MySQL injection report does not reproduce by @jvcalderon in #19250
• improve workspace home project data resources by @andz-bb in #19153

Full Changelog: 3.40.0...3.40.1

3.40.0

What's Changed

• feat: delete old backups by @Dakuan in #19186
• Remove multiple operations feature flags by @adrinr in #19237
• Allow automations to run in preview by @melohagan in #19179
• feat: sharepoint lists by @Dakuan in #19195
• Security fix: limit pwa zip depth - size by @calexiou in #19208
• Feat/credentials update respect on change by @calexiou in #19007
• Verify SMTP server TLS certificate by default by @leonacostaok in #19148

New Contributors

• @leonacostaok made their first contribution in #19148

Full Changelog: 3.39.32...3.40.0

3.39.32

What's Changed

• feat: show pop up if your sharepoint connection is not configured correctly by @Dakuan in #19209
• fix: dont forever sync legacy sharepoint by @Dakuan in #19214
• Fix flaky plugin URL upload test relying on live DNS resolution by @jvcalderon in #19216
• Fix many-to-many relationship logic that caused conflicts on updates by @adrinr in #19206
• Add allowUnverifiedEmailLinking to OIDC validation by @adrinr in #19220
• fix: block unvouched pull requests by @melohagan in #19227
• chore(deps): bump ws from 7.5.11 to 7.5.13 by @dependabot[bot] in #19228
• Fix vouch check rerun after status changes by @melohagan in #19229
• Fix vouch management through pull requests by @melohagan in #19231
• Add SMTP from field display name help by @melohagan in #19156
• Escalation feedback and bugs by @deanhannigan in #19198
• Fix: allow multiple escalations on a resumed AgentRequest by @jvcalderon in #19215
• Refactor tenant endpoint access and internalize user lookup by @adrinr in #19221
• Update VOUCHED list by @github-actions[bot] in #19232
• Gate agent request tracking on execute vs query intent by @jvcalderon in #19230
• [19077] Split automation graph layout pipeline by @melohagan in #19079
• Feat/OIDC unverified email linking env by @calexiou in #19218
• chore(deps): bump by @calexiou in #19234

New Contributors

• @github-actions[bot] made their first contribution in #19232

Full Changelog: 3.39.31...3.39.32

3.39.31

What's Changed

• [BUDI-19203] Fix offline license activation and removal by @jvcalderon in #19205

Full Changelog: 3.39.30...3.39.31

3.39.30

What's Changed

• [Added] Realtime WebSocket updates for the Agent Requests Activity table by @jvcalderon in #19150
• Fix live-update pagination and summary counts on Activity page by @jvcalderon in #19155
• Add status filter dropdown to Activity requests table by @jvcalderon in #19157
• Track status changes in the actions timeline by @jvcalderon in #19165
• Add actions timeline data model and user interaction tracking by @jvcalderon in #19162
• View fix for external dbs on column delete by @deanhannigan in #19161
• Secfix/sso takeover by @calexiou in #19173
• Make rollout strategy and imagePullPolicy configurable in Helm chart by @calexiou in #19183
• Secfix/dns rebinding openapi rest by @calexiou in #19178
• fix: partial removal of stalled cron jerbs by @Dakuan in #19065
• Track AgentRequest status through the full escalation lifecycle by @jvcalderon in #19124
• Unify usage of Helpers.uuid for unsecured browsers by @adrinr in #19191
• fix free plan workspace and plugin quotas by @ConorWebb96 in #19190
• Bind chat identity link confirmation to the current user by @adrinr in #19194
• Judge agent request outcome (completed/failed) via LLM instead of tool-failure counting by @jvcalderon in #19185
• Track escalation timeline actions (escalation_raised, escalation_resolved) by @jvcalderon in #19192
• Track tool call actions in the AgentRequest timeline by @jvcalderon in #19184
• feat: async sharepoint sync by @Dakuan in #19189
• fix: can miss sharepoint name on partial falure by @Dakuan in #19200
• fix: dont attempt to ingest large sharepoint files by @Dakuan in #19201
• Split couchinfo between internal and external by @adrinr in #19197
• Fix mysql test docker-compose, updating it to mysql 9 by @adrinr in #19199

Full Changelog: 3.39.29...3.39.30

3.39.29

What's Changed

• Chore/vouch by @melohagan in #19159
• Investigate/illegal column migration by @calexiou in #19180
• Fix for primary display healing if the column is dropped by @deanhannigan in #19164

Full Changelog: 3.39.28...3.39.29

3.39.28

What's Changed

• [Fixed] authorization bypass in BuilderSocket SelectApp by @jvcalderon in #19140
• fix: workspace import into existing workspace now restores row data by @Pallavikumarimdb in #19128
• fix sub-link nav items disappearing by @ConorWebb96 in #19152
• [Automations] Support standard separators in step names by @melohagan in #19142
• Default workspace invites to end user by @melohagan in #19154
• fix: style account linking page by @Dakuan in #19166
• Preserve previously set query column types on preview re-run by @Stropdasman in #19084
• Improve UX for Filter component by focusing input and supporting enter key by @Pallavikumarimdb in #19170

Full Changelog: 3.39.27...3.39.28

3.39.27

What's Changed

• Bump @sigstore/verify from 3.1.0 to 3.1.1 by @dependabot[bot] in #19137
• Bump sigstore from 4.1.0 to 4.1.1 by @dependabot[bot] in #19138
• Add portal group init regression test by @Dakuan in #19139
• Revert "Exclude 'Is in' operator for Number and Date types" by @melohagan in #19134
• Relationship filtering by _id by @deanhannigan in #19127
• [codex] Authorize resource duplicate target by @Dakuan in #19099
• Add query JSON binding regression coverage by @Dakuan in #19126
• fix: validate object store key before opening S3 stream by @cubic-dev-ai[bot] in #19101
• Scroll or swipe to change month in date picker calendar by @Stropdasman in #19082

Full Changelog: 3.39.26...3.39.27

3.39.26

What's Changed

• Block group init requests for users without permission by @deanhannigan in #19135
• Bump smtp-server from 3.18.1 to 3.19.1 in the all-non-major-security group across 1 directory by @dependabot[bot] in #19129

Full Changelog: 3.39.25...3.39.26

3.39.25

What's Changed

• Revert "feat: full screen logs UI" by @Dakuan in #19111
• [Codex] [108] Require builder access for group listing by @Dakuan in #19109
• [Codex] [106] Align login lockout for unknown users by @Dakuan in #19108
• [codex] Quote Oracle row lookup identifiers by @Dakuan in #19100
• [Codex] [105] Sanitize automation test OAuth outputs by @Dakuan in #19107
• [Codex] [107] Strip SSO tokens from user metadata by @Dakuan in #19110
• Improve automation connector connection flow by @melohagan in #19051
• Restore QueryViewer fields by @melohagan in #19125

Full Changelog: 3.39.24...3.39.25