v12.116.70
·
1423 commits
to main
since this release
Immutable
release. Only release title and notes can be modified.
🆕 Changelog
Fixed
- Fixed modal action button click handling to restore proper interaction behavior
- Fixed API key expiry enforcement in user organization access checks
- Fixed modal dialog pointer cursor behavior and external link interactions
- Improved onboarding instruction clarity and time estimates in multiple languages
Security
- Hardened authorization for remaining helper RPC functions to prevent unauthorized access
- Blocked app-scoped API keys from performing organization-level webhook actions
- Enforced role-based access control (RBAC) for bundle metadata updates
- Enforced encrypted bundle update requirements to prevent unencrypted bundle modifications
- Stopped webhook delivery from following HTTP redirects to prevent SSRF attacks
🔗 Full Changelog: v12.116.69...v12.116.70