v12.116.45
·
1508 commits
to main
since this release
Immutable
release. Only release title and notes can be modified.
🆕 Changelog
Removed
- Singleton settings tables (
rbac_settingsandsecurity_settings) in favor of Vault-backed environment configuration for runtime feature flags and security toggles
Changed
- RBAC feature flag now controlled by
CAPGO_RBAC_ENABLEDenvironment variable instead of database table - MFA email OTP enforcement threshold now controlled by
CAPGO_MFA_EMAIL_OTP_ENFORCED_ATenvironment variable instead of database table - Platform admin configuration now uses Vault-backed runtime configuration instead of mutable database state
Fixed
- Security vulnerability where runtime behavior could be altered through database manipulation instead of being controlled by immutable deployment-time configuration
🔗 Full Changelog: v12.116.44...v12.116.45