v107.0.8

107.0.8 (2026-06-27)

Bug Fixes

• security: address review feedback on public-share exposure & secret masking (f7efb09)
• security: address review feedback on tenant isolation & self-role guard (5c7fd03)
• security: drop user email from public employee profile (review round 3) (7d15115)
• security: enforce tenant isolation on shared-entity links and self-role updates (e8769e0)
• security: restrict public-share over-fetch and mask integration OAuth secrets (fc328b1)
• security: tighten shared-entity scope + self-role guard (review round 3) (2d84b57)

What's Changed

• fix(security): cross-tenant isolation (SharedEntity IDOR) & roleId self-escalation by @evereq in #9749
• fix(security): public-share data exposure & integration secret masking by @evereq in #9750

Full Changelog: v107.0.7...v107.0.8