v1.7.0 - Redesigned integration pages and a better-auth security fix

A minor release: the Data Sources, Data API and Notifications pages are redesigned, the whole app reads better on phones and for low vision, and better-auth is patched.

Upgrading

Nothing to do. There is no migration, and environment variables, port and image base are unchanged.

Security

• better-auth 1.7.14. Closes GHSA-965c-763c-88jm (critical), GHSA-r4xp-prcw-77qf (high) and GHSA-44jh-23m7-hpcf (low), all fixed from 1.7.7. The passkey and SSO plugins move to 1.7.14 with it (#92).

Pages

• Data Sources. A catalog with search, filters and one tile per directory type (Entra ID, Google Workspace, LDAP / Active Directory, AWS, Okta, SCIM) showing its logo and status. A tile opens a side panel with its connections, a Connect button that opens the form for that type, and the setup guide. Automated remediation, the SIEM pull feed and SIEM push delivery are now tabs that explain what each does.
• Data API. The stat tiles are gone; search, filters and the side panel are shared with Data Sources.
• Notifications. Two tabs, Real-time alerts and Scheduled reports, each with a table (Test, Pause, Delete with a confirmation) and an add form where every field has a label. A test shows Delivered or Failed in words.

Readability and phones

• Severity colors used as text reach a 4.5:1 contrast, and muted text is darker.
• Alerts say "Medium severity" and "High confidence", and every action has a text label.
• On phones, alert rows wrap, the dashboard stacks its widgets in one column, and pages use a 16px margin.

Fixes

• Incident Timeline shows monthly bars instead of a smoothed curve that suggested detections before they happened.
• The dashboard's data type shares are computed over every type, so they match the reports.
• The company score is labelled Company risk, to tell it apart from an employee's own level.
• The exposure register groups its data types into Identity, Financial, Contact and account, and Health and HR.