v0.7.16: security hardening, db o11y and profiling, settings UI - #5245

Merged

waleedlatif1 merged 17 commits into

mainfrom

staging

Jun 28, 2026

Commits on Jun 27, 2026

perf(trigger): cap concurrency on background DB tasks (#5231)
TheodoreSpeaks
authored
e08fb02
improvement(webhooks): add trigger-age instrumentation + guard env decryption (#5236)
waleedlatif1
authored
3c6c6b1
fix(connectors): harden Zendesk connector against SSRF (#5237)
waleedlatif1
authored
6264cba
perf(db): per-role Postgres connection-pool profiles (#5232)
TheodoreSpeaks
authored
845a627
fix(security): cap KB document download size to prevent memory-exhaustion DoS (#5240)
waleedlatif1
authored
b8a197b
fix(file-parsers): guard OOXML parsers against decompression-bomb memory exhaustion (#5239)
waleedlatif1
authored
37962a0
chore(data-drains): remove settings callout and unused InfoNote component (#5235)
waleedlatif1
authored
0420fee
fix(copilot): gate post-tool output writes behind write permission (#5241)
waleedlatif1
authored
b2d43c1
fix(mcp): pin public IP-literal server URLs to block SSRF redirect bypass (#5244)
waleedlatif1
authored
9b66b40
fix(security): gate credential-set invitation listing to admins and drop token (#5243)
waleedlatif1
authored
ac95a27
improvement(execution): stop rewriting execution snapshots on reuse + skip redundant actor lookup (#5242)
waleedlatif1
authored
2554725
perf(dev): SIM_DEV_MINIMAL_REGISTRY mode to slash local dev-server RAM (#5223)

TheodoreSpeaks
and
claude
authored
2686f04
improvement(clickhouse): expand block templates and skills, normalize tool versions (#5246)
waleedlatif1
authored
d493263
fix(sso): keep an exit affordance in edit mode when clean (#5247)
waleedlatif1
authored
b8d0b4f
improvement(logs): move per-block progress markers to Redis to cut write amplification (#5248)
waleedlatif1
authored
7a2103e

Navigation Menu

Uh oh!

v0.7.16: security hardening, db o11y and profiling, settings UI - #5245

v0.7.16: security hardening, db o11y and profiling, settings UI#5245
waleedlatif1 merged 17 commits into
mainfrom
staging

Commits on Jun 27, 2026

perf(trigger): cap concurrency on background DB tasks (#5231)

improvement(webhooks): add trigger-age instrumentation + guard env decryption (#5236)

fix(connectors): harden Zendesk connector against SSRF (#5237)

perf(db): per-role Postgres connection-pool profiles (#5232)

fix(security): cap KB document download size to prevent memory-exhaustion DoS (#5240)

fix(file-parsers): guard OOXML parsers against decompression-bomb memory exhaustion (#5239)

chore(data-drains): remove settings callout and unused InfoNote component (#5235)

fix(copilot): gate post-tool output writes behind write permission (#5241)

fix(mcp): pin public IP-literal server URLs to block SSRF redirect bypass (#5244)

fix(security): gate credential-set invitation listing to admins and drop token (#5243)

improvement(execution): stop rewriting execution snapshots on reuse + skip redundant actor lookup (#5242)

perf(dev): SIM_DEV_MINIMAL_REGISTRY mode to slash local dev-server RAM (#5223)

improvement(clickhouse): expand block templates and skills, normalize tool versions (#5246)

fix(sso): keep an exit affordance in edit mode when clean (#5247)

improvement(logs): move per-block progress markers to Redis to cut write amplification (#5248)

Commits on Jun 28, 2026

fix(webhooks): cast json provider_config for atomic jsonb merge (#5249)

fix(webhooks): run inactive deployment-version cleanup inline on deploy (#5250)