14.0.67

Upgrade notes

• SAML sign-in now accepts a response only once, only for the provider it was issued for (Audience, Recipient, Destination) and only while it is fresh (10 minutes, 3 minutes of clock skew). If SAML sign-in starts failing after the upgrade, check the Entity ID and Reply URL your identity provider uses. See SSO.
• Sign-in: when the Require SSO for Login setting (server-wide, or a project's own) cannot be read, requests are now refused. Server admins are still exempt from the server-wide setting. See SSO.
• Server admins: removing a person's master admin access takes effect on their next request. They stay signed in as a regular member.

Changes

• Workflow Builder: the add button says Add Trigger while the workflow has no trigger
  • PR: #4923
• Feeds and notes: links that leave the app open in a new tab; quotes no longer look like warnings
  • PR: #4925
• fix(settings): every Project Settings path in product text leads to a real menu
  • PR: #4929
• fix(billing): plan limits hold for creates made at the same moment, and a person's first SSO sign-in takes a seat (refused at the seat limit)
  • PR: #4927
• Monitor overview: Change status behind a ⋯ menu beside a clearer Refresh
  • PR: #4928
• Create New Project: one page, a clear plan choice with honest prices, promo code under More fields
  • PR: #4930
• Rule conditions: ask 'All incidents' or 'Only incidents that match conditions' before any condition, everywhere rules have conditions
  • PR: #4931
• fix(billing): people limits hold every SSO sign-in, and a full project says so
  • PR: #4932
• Episodes: a project setting so an incident (or alert) can be in only one episode
  • PR: #4933
• Release 14.0.66 (gate - do not merge)
  • PR: #4937