Commit Graph

  • 688c69b478
    🐛 Fix import-binfile schema test (#11118) Elena Torró 2026-08-06 17:05:41 +02:00
  • 38b990ef90
    🔧 Add exporter headless backend (#10875) Elena Torró 2026-08-06 16:13:06 +02:00
  • a76401596e
    Skip imperceptible shadows and simplify low-scale strokes (#11102) Alejandro Alonso 2026-08-06 15:58:11 +02:00
  • de8d8ca401
    🐛 Fix serialization of constraints (#11108) Belén Albeza 2026-08-06 15:49:04 +02:00
  • 314a2a245f
    📚 Fix the devenv backend-flags instructions (#11077) Álvaro Tejero-Cantero 2026-08-06 14:14:44 +02:00
  • fc55bc2a48 🐛 Fix typography on shortcuts list eva-fix-delete-node Eva Marco 2026-08-06 13:41:58 +02:00
  • eb34e1c118 🐛 Fix delete path node Eva Marco 2026-08-06 13:38:10 +02:00
  • 614d619173 Merge remote-tracking branch 'origin/staging' into develop Andrey Antukh 2026-08-06 13:31:29 +02:00
  • 229d24e8f2 🐛 Fix regression on uploading binfile with incorrect schema Andrey Antukh 2026-08-06 13:30:59 +02:00
  • fdf1684565
    🐛 Fix plugin modal z index (#11109) Eva Marco 2026-08-06 12:49:52 +02:00
  • 2392015c63
    🐛 Fix microinteractions on text shape selrects for autowidth/autoheight (#11068) Belén Albeza 2026-08-06 12:40:57 +02:00
  • 11fc090bc4
    Expand direct shape painting and skip empty drop-shadow blits (#11100) Alejandro Alonso 2026-08-06 12:31:49 +02:00
  • 81e44afbe3
    🐛 Add backend password validation with complexity rules and dictionary check (#11059) Andrey Antukh 2026-08-06 10:17:14 +02:00
  • 10a2c19f92
    🔧 Improve text editor selection and tab conversion (#11071) Elena Torró 2026-08-06 09:43:02 +02:00
  • 495e9f059e 🐛 Add minor fix on token tests Andrey Antukh 2026-08-06 09:35:21 +02:00
  • 4b413299c2
    Clear dirty flags after tile surface reset (#11095) Alejandro Alonso 2026-08-06 09:09:09 +02:00
  • 31c9ab4701 Merge remote-tracking branch 'origin/staging' into develop Andrey Antukh 2026-08-06 09:05:48 +02:00
  • 8b64b0f84f
    Fix progressive render budget when timestamp is stale (#11094) Alejandro Alonso 2026-08-06 09:00:45 +02:00
  • a60b648c6c 🐛 Fix issues with draft-js tests Andrey Antukh 2026-08-06 08:55:58 +02:00
  • 649f4bebef Merge remote-tracking branch 'origin/staging' into develop Alejandro Alonso 2026-08-06 08:38:15 +02:00
  • b6656ee8dd
    🐛 Enable SSRF check for organization SSO provider (#11064) (#11065) Andrey Antukh 2026-08-05 21:54:33 +02:00
  • 86aaf642b6 🐛 Fix scripts/ci issue with backend lintig Andrey Antukh 2026-08-05 21:43:45 +02:00
  • c4dd04353f 🐛 Sanitize SVG files on upload to prevent XSS Andrey Antukh 2026-07-29 10:18:57 +00:00
  • 64fe8e57e3 🐛 Fix SNS signature verification field sets per AWS spec issue-11092 Andrey Antukh 2026-08-05 18:22:19 +00:00
  • a4b9ccee8b 🐛 Fix SNS signature verification field sets per AWS spec Andrey Antukh 2026-08-05 16:00:09 +00:00
  • 0ac711aa68
    🐛 Normalize string inputs to prevent unfiltered echo (#11061) Andrey Antukh 2026-08-05 17:54:07 +02:00
  • bf62e59f73
    🐛 Add cooldown to prevent duplicate invitation emails (#11063) Andrey Antukh 2026-08-05 17:53:15 +02:00
  • 5906312dff
    🐛 Normalize error response on duplicate file ID (#11050) Andrey Antukh 2026-08-05 17:52:14 +02:00
  • 25066c2f46
    🐛 Require file read permissions for asset endpoints (#11036) Andrey Antukh 2026-08-05 17:44:01 +02:00
  • 3d176d5390
    🐛 Restrict webhook creation/edit/delete to team members only (#11029) Andrey Antukh 2026-08-05 17:42:49 +02:00
  • 0481408531
    🐛 Add recursion depth limit to Fressian reader (#11020) Andrey Antukh 2026-08-05 17:41:59 +02:00
  • 689d3a1be2
    🐛 Add max-object-size guard to read-obj! in v1 parser (#11018) Andrey Antukh 2026-08-05 17:40:58 +02:00
  • fb07273897
    🐛 Validate library belongs to same team in link/unlink/sync handlers (#11016) Andrey Antukh 2026-08-05 17:40:04 +02:00
  • 9242556da6
    🐛 Close import-binfile schema and remove file-id parameter (#10994) Andrey Antukh 2026-08-05 17:37:27 +02:00
  • 4f7bb94bb1
    🐛 Add size limit and rate limiting to send-user-feedback (#10979) (#10990) Andrey Antukh 2026-08-05 17:35:59 +02:00
  • 5b26913cd3 Merge remote-tracking branch 'origin/staging' into develop Andrey Antukh 2026-08-05 17:30:41 +02:00
  • 36e76da26c Revert "🐛 Fix text creating on draft.js (#11086)" Andrey Antukh 2026-08-05 17:30:36 +02:00
  • 49276886f3 🐛 Fix some issues with immutablejs incompatibility Andrey Antukh 2026-08-05 17:28:58 +02:00
  • 35bdcde183
    Avoid per-tile image_snapshot when filling atlases (#11093) Alejandro Alonso 2026-08-05 17:12:09 +02:00
  • 2101d657e5 🐛 Fix SNS signature verification issues Andrey Antukh 2026-08-05 14:57:26 +00:00
  • a8a441b7ad 🐛 Verify AWS SNS signature on webhook notifications Andrey Antukh 2026-08-05 12:29:21 +00:00
  • a2968defbe
    🐛 Add bounding box dimension limit to prevent export DoS (#11042) Andrey Antukh 2026-08-05 14:18:14 +02:00
  • abf586cdf0 🔧 Fix dependency issue with draftjs / immutable ladybenko-fix-dependency-draftjs Belén Albeza 2026-08-05 13:26:11 +02:00
  • 6df045b194
    🐛 Fix text creating on draft.js (#11086) Eva Marco 2026-08-05 13:10:21 +02:00
  • 1b26b69b25
    🐛 Fix Firefox not inserting emoji from MacOS Character Viewer (#11072) Belén Albeza 2026-08-05 12:53:20 +02:00
  • 6628f0a134
    🐛 Adjust button icon visibility (#11070) Marina López 2026-08-05 11:30:13 +02:00
  • 96f6a295e7 🐛 Escape LDAP filter values and use directory email in retrieve-user issue-11084 Andrey Antukh 2026-08-05 09:22:45 +00:00
  • 6f2bfb617c Merge remote-tracking branch 'origin/staging' into develop Andrey Antukh 2026-08-05 10:16:06 +02:00
  • 636bc22cc4
    Add Node.js E2E API tests for backend (#10787) Andrey Antukh 2026-08-05 10:15:41 +02:00
  • aeedb96260
    Add media-processor service for image and font processing (#10767) Andrey Antukh 2026-08-05 09:41:48 +02:00
  • 3e59754a25 Add optional max-size param to blob decode functions Andrey Antukh 2026-08-04 15:38:22 +00:00
  • c16b7919f9 🐳 Remove the configuration of the admin-console from Nginx if it is not enabled David Barragán Merino 2026-08-04 19:53:20 +02:00
  • 34702fd46b 🐳 Remove the configuration of the admin-console from Nginx if it is not enabled David Barragán Merino 2026-08-04 19:53:20 +02:00
  • 83a3d099f6 🐛 Mock RPC and timer in composable test interpreter to fix network errors Andrey Antukh 2026-08-04 15:55:47 +00:00
  • 8e713df5f0
    🎉 Add repair functions for variant validation errors (#10768) Andrés Moya 2026-08-04 16:53:36 +02:00
  • 3fba272848 🐛 Keep svg-raw children as uuids on binfile import (#10837) Filip Sajdak 2026-08-04 16:49:12 +02:00
  • 648c8e2152
    🐛 Keep svg-raw children as uuids on binfile import (#10837) Filip Sajdak 2026-08-04 16:49:12 +02:00
  • 7ae57a035f
    🐛 Position overlays by frame selrect, not filter-inflated bounds (#10454) Filip Sajdak 2026-08-04 16:42:55 +02:00
  • 23ea2bbad6 📎 Update creating-commits serena workflow file Andrey Antukh 2026-08-04 15:36:33 +02:00
  • 2e8cdac124 🐛 Add authorization checks to WebSocket subscriptions issue-11067 Andrey Antukh 2026-08-04 13:28:20 +00:00
  • 14a6ea5c52
    🔧 Support text style shortcuts (#11002) Elena Torró 2026-08-04 15:30:26 +02:00
  • ca29f734c7 Merge remote-tracking branch 'origin/staging' into develop Andrey Antukh 2026-08-04 15:08:55 +02:00
  • b507a6b667 ♻️ Convert commiter agent to create-commit skill Andrey Antukh 2026-08-04 13:04:19 +00:00
  • 3865e29b65 ⬆️ Update pnpm dependencies across all modules Andrey Antukh 2026-08-04 14:15:35 +02:00
  • 43e05c38bf
    🐛 Fix error when clicking 'Start' button to finish onboarding after creating a new account (#11058) Luis de Dios 2026-08-04 12:44:25 +02:00
  • 0811b1cda6 🔧 Generate the Docker image for the admin console by creating a tag David Barragán Merino 2026-08-04 11:55:36 +02:00
  • 2142b8c8d5 🔧 Release admin-console images on final tags bameda-ci-release-admin-console-image-on-dockerhub David Barragán Merino 2026-08-04 11:57:31 +02:00
  • edbe9f8215
    🐛 Fix nitrate related literals (#11047) María Valderrama 2026-08-04 11:55:01 +02:00
  • 6e843faba3 Merge remote-tracking branch 'origin/staging' into develop Andrey Antukh 2026-08-03 18:36:27 +02:00
  • 05e7f2ec2e 🐛 Add cooldown to prevent duplicate invitation emails niwinz-bugfixes-batch-1 Andrey Antukh 2026-07-29 18:22:00 +00:00
  • 6da24aaf52 🐛 Normalize string inputs to prevent unfiltered echo Andrey Antukh 2026-07-29 18:00:00 +00:00
  • 5f0175a641 🐛 Add backend password validation with complexity rules and dictionary check Andrey Antukh 2026-07-29 17:24:14 +00:00
  • 41afcba297 🐛 Add permission checks to WebSocket subscription handlers Andrey Antukh 2026-07-29 11:06:43 +00:00
  • c4b24743ea 🐛 Normalize error response on duplicate file ID Andrey Antukh 2026-07-29 10:34:38 +00:00
  • 252683eac8 🐛 Sanitize SVG files on upload to prevent XSS Andrey Antukh 2026-07-29 10:18:57 +00:00
  • 66bf6768e0 🐛 Add bounding box dimension limit to prevent export DoS Andrey Antukh 2026-07-29 09:37:59 +00:00
  • 0655c4510a 🐛 Mock DNS resolution in SSRF tests for environments without public DNS Andrey Antukh 2026-07-29 08:54:01 +00:00
  • 0064a1afb4 🐛 Add accumulated storage byte quota for media uploads Andrey Antukh 2026-07-29 08:36:40 +00:00
  • aac8a69951 🐛 Require file read permissions for asset endpoints Andrey Antukh 2026-07-29 08:08:18 +00:00
  • c329defa5e 🐛 Escape markdown in Mattermost error notifications Andrey Antukh 2026-07-29 07:21:19 +00:00
  • 7ccc52fbdf 🐛 Restrict webhook edit/delete to team members only Andrey Antukh 2026-07-28 12:55:58 +00:00
  • 2a0b75fe09 🐛 Validate content-type on management upload endpoints Andrey Antukh 2026-07-28 12:31:56 +00:00
  • 22b6b6df57 🐛 Add concurrency limit to import-binfile RPC handler Andrey Antukh 2026-07-28 11:33:27 +00:00
  • 1ed13d6d5e 🐛 Add configurable limits for ZIP entry count and object size in v3 import Andrey Antukh 2026-07-28 11:29:12 +00:00
  • cc68024d43 🐛 Add recursion depth limit to Fressian reader Andrey Antukh 2026-07-28 11:21:37 +00:00
  • 5d4d5d0fac 🐛 Add max-object-size guard to read-obj! in v1 parser Andrey Antukh 2026-07-28 11:14:52 +00:00
  • a91502f5e7 🐛 Validate library belongs to same team in link/unlink/sync handlers Andrey Antukh 2026-07-28 09:45:41 +00:00
  • 8806f92cd7 🐛 Validate font-id team ownership in create-font-variant Andrey Antukh 2026-07-28 09:12:58 +00:00
  • 7807e34151 🐛 Scope assemble-chunks session lookup to profile-id Andrey Antukh 2026-07-28 09:06:41 +00:00
  • 565b7ea878 🐛 Restrict webhook creation to team editors Andrey Antukh 2026-07-28 08:44:51 +00:00
  • 461227fe16 🐛 Close import-binfile schema and remove file-id parameter Andrey Antukh 2026-07-28 08:27:49 +00:00
  • f978da1a54 🐛 Restrict webhook creation to team editors issue-10995 Andrey Antukh 2026-07-28 08:44:51 +00:00
  • 319a2185c9
    🐛 Fix crash on drag-and-drop of selected text in Draft.js editor (#10959) Andrey Antukh 2026-08-03 17:31:55 +02:00
  • 1136e5eda5
    🐛 Restrict update-profile-props to documented keys only (#10992) Andrey Antukh 2026-08-03 17:27:09 +02:00
  • 49119e0339
    ♻️ Rename nitrate config to admin-console (#10929) Andrey Antukh 2026-08-03 17:23:55 +02:00
  • c6c8a38544
    🐛 Fix not being able to add multiple fills to text spans (v3) (#10988) Belén Albeza 2026-08-03 17:11:59 +02:00
  • 0fed63eeb3
    🐛 Fix text replacement on selection and text offsets (#10983) Elena Torró 2026-08-03 15:22:49 +02:00
  • 79da4d274d 📎 Fix linter issues Andrey Antukh 2026-08-03 14:40:36 +02:00
  • 2f535c3f3f 🐛 Prevent unexpected exception in swatch* component Andrey Antukh 2026-08-03 14:25:39 +02:00
  • c320cecf15 📎 Add better prompt for review opencode command Andrey Antukh 2026-08-03 14:25:19 +02:00