You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Auto-updater integrity verification: Downloads are now verified against a SHA-256 checksum. If the checksum doesn't match, the update is aborted. If no checksum is available (older releases), the user is prompted to confirm.
Fixed version comparison: The auto-updater now uses proper semver comparison instead of string comparison (e.g., 1.9.0 was incorrectly considered less than 1.10.0).
Least-privilege Graph API scopes: Read-only operations (reports, audits) now request only *.Read.All scopes. Write scopes are only requested when performing mutations (create/edit/delete users, groups).
Restrictive file permissions on reports: Exported Excel reports are now created with 0o600 (owner read/write only) and report directories with 0o700.
Consistent PowerShell escaping: All PowerShell string interpolation now uses the centralized escapePS() helper.
