v1.7.14

1.7.14 (2026-10-13)

Bug Fixes

• clear leftover OpenTelemetry, Alert and act warnings (#530) (7071cd4)
• declare dfe-core-ui peers, widen test waits (#528) (9195c55)
• declare the peers third-party packages leave out (#531) (7dafd21)
• deps: move /metrics to @prometheus-io/client and refresh the node digest (#536) (6275380)
• fix bugs rules (#543) (1ed7895)
• fix platform settings defaults apply (#538) (208a2f4)
• name the telemetry template that sets the OTLP endpoint (#532) (d5959bb)
• say why an OIDC sign-in was refused, on the sign-in form (#533) (622b42c), closes hyperi-io/dfe-engine#823 #488
• set a group's IdP link and rework the OIDC provider form (#542) (f6a7d4d), closes hyperi-io/dfe-engine#758

Helm charts

Registry: oci://ghcr.io/hyperi-io/charts

Chart	Version	Digest
dfe-ui	1.7.14	sha256:2ab1d759689b4c06f8308988ebc7bff721fd8a8319286dfe399d1305a68715e5

What's Changed

• fix: declare dfe-core-ui peers, widen test waits by @catinspace-au in #528
• fix: clear leftover OpenTelemetry, Alert and act warnings by @catinspace-au in #530
• fix: declare the peers third-party packages leave out by @catinspace-au in #531
• fix: name the telemetry template that sets the OTLP endpoint by @catinspace-au in #532
• fix: say why an OIDC sign-in was refused, on the sign-in form by @catinspace-au in #533
• chore: stop tracking per-developer Cursor rules by @catinspace-au in #535
• fix(deps): move /metrics to @prometheus-io/client and refresh the node digest by @catinspace-au in #536
• chore(dfe-engine-types): sync from dfe-engine by @hypersec-ci-bot[bot] in #537
• test: drop the Define Schema click from the filebeat data-path spec by @catinspace-au in #540
• fix: fix platform settings defaults apply by @kbrandt-hs in #538
• fix: set a group's IdP link and rework the OIDC provider form by @kazmosahebi in #542
• fix: fix bugs rules by @kbrandt-hs in #543

Full Changelog: v1.7.13...v1.7.14

v1.7.13

1.7.13 (2026-10-11)

Bug Fixes

• refuse new passwords over 72 bytes (#526) (1e87fe6)

Helm charts

Registry: oci://ghcr.io/hyperi-io/charts

Chart	Version	Digest
dfe-ui	1.7.13	sha256:9087daf0fdec6d3ccedb972e71981a659730d66222506a4e0b820d11bc0d7520

What's Changed

• fix: refuse new passwords over 72 bytes by @catinspace-au in #526

Full Changelog: v1.7.12...v1.7.13

v1.7.12

1.7.12 (2026-10-11)

Bug Fixes

• adopt engine v1.22.21 sync states and names (#524) (2ada465)
• load only a same-origin YAML worker from the shim (#521) (9fcacca)

Helm charts

Registry: oci://ghcr.io/hyperi-io/charts

Chart	Version	Digest
dfe-ui	1.7.12	sha256:ac4ec9f9baba6f6367de0dbaffaffd420c3acc9583dac3707a025217e3e33b91

What's Changed

• fix: load only a same-origin YAML worker from the shim by @catinspace-au in #521
• fix: adopt engine v1.22.21 sync states and names by @catinspace-au in #524

Full Changelog: v1.7.11...v1.7.12

v1.7.11

1.7.11 (2026-10-10)

Bug Fixes

• show OIDC sync status, name form controls (#519) (1ed3b66)
• stop the YAML worker requesting 404 files (#520) (00ed48c)

Helm charts

Registry: oci://ghcr.io/hyperi-io/charts

Chart	Version	Digest
dfe-ui	1.7.11	sha256:94c275074794fe94ab8871d420b112808d98342e30b45809e2d5ecb2baa6f440

What's Changed

• fix: show OIDC sync status, name form controls by @catinspace-au in #519
• fix: stop the YAML worker requesting 404 files by @catinspace-au in #520

Full Changelog: v1.7.10...v1.7.11

v1.7.10

1.7.10 (2026-10-10)

Bug Fixes

• link errors to fields, mark required ones (#518) (dc285ed), closes #516
• show form errors beside hints and make the hunt target table optional (#516) (bbae391)

Helm charts

Registry: oci://ghcr.io/hyperi-io/charts

Chart	Version	Digest
dfe-ui	1.7.10	sha256:81fe6773781ea6d2a271b382994e970abdb8c62fd68881ca69d8e1a33c6c59bc

What's Changed

• fix: show form errors beside hints and make the hunt target table optional by @catinspace-au in #516
• fix: link errors to fields, mark required ones by @catinspace-au in #518
• chore(dfe-engine-types): sync from dfe-engine by @hypersec-ci-bot[bot] in #517

Full Changelog: v1.7.9...v1.7.10

v1.7.9

1.7.9 (2026-10-10)

Bug Fixes

• accept the lint-only braces advisory with its reason (#514) (95e24ad)
• match name fields to the engine's rules (#515) (e8950fd)

Helm charts

Registry: oci://ghcr.io/hyperi-io/charts

Chart	Version	Digest
dfe-ui	1.7.9	sha256:6a09e4c70be92c5696b33936372fc40056f382bda522cadfb74edf45ccec9102

What's Changed

• fix: accept the lint-only braces advisory with its reason by @catinspace-au in #514
• fix: match name fields to the engine's rules by @catinspace-au in #515

Full Changelog: v1.7.8...v1.7.9

v1.7.8

1.7.8 (2026-10-10)

Bug Fixes

• drop the Google admin email from the OIDC provider forms (#512) (fc6fb38)
• give the CI workflow an explicit permissions ceiling (#509) (5db7a49)
• match the OIDC provider forms to the engine (#513) (02049f2)

Helm charts

Registry: oci://ghcr.io/hyperi-io/charts

Chart	Version	Digest
dfe-ui	1.7.8	sha256:cd4a6cd2d9ac38c8fea298aa1001723672134bdcae5d2db938ecaed3e18b5a30

What's Changed

• fix: give the CI workflow an explicit permissions ceiling by @catinspace-au in #509
• fix: drop the Google admin email from the OIDC provider forms by @catinspace-au in #512
• fix: match the OIDC provider forms to the engine by @catinspace-au in #513

Full Changelog: v1.7.7...v1.7.8

v1.7.7

1.7.7 (2026-10-09)

Bug Fixes

• clear next, sharp and source-map-js security advisories (#502) (a82a9d0)
• commit dfe-ui's deployment contract (#501) (4e2118c)
• fix OIDC delete and soft delete users (#507) (2fdf52c)
• high priority issues asst (#505) (1125181)

Helm charts

Registry: oci://ghcr.io/hyperi-io/charts

Chart	Version	Digest
dfe-ui	1.7.7	sha256:58adaa98e3d8840a5e81a66b9bef20ff7518e17c5394f6dea11e72b8dff0458c

What's Changed

• fix: clear next, sharp and source-map-js security advisories by @catinspace-au in #502
• chore(dfe-engine-types): sync from dfe-engine by @hypersec-ci-bot[bot] in #493
• chore(dfe-engine-types): sync from dfe-engine by @hypersec-ci-bot[bot] in #504
• fix: high priority issues asst by @kbrandt-hs in #505
• chore(dfe-engine-types): sync from dfe-engine by @hypersec-ci-bot[bot] in #506
• fix: fix OIDC delete and soft delete users by @kbrandt-hs in #507
• fix: commit dfe-ui's deployment contract by @catinspace-au in #501

Full Changelog: v1.7.6...v1.7.7

v1.7.6

1.7.6 (2026-10-06)

Bug Fixes

• better cron drawer (#415) (a7723ab)
• bump next to 16.3.6 for GHSA-vcvr-r3jv-pc5j (#453) (fe2e398)
• copy: drop internal and design words from UI text (#421) (1d1c892), closes #419
• cron tweaks and style bugs (#449) (dd56c93)
• custom scrollbar component (#448) (230cd8f)
• harden console sign-in, renewal and sign-out (#441) (7c08da1), closes #667
• image: build on Debian 13, pinned by digest (#434) (2d40f74)
• re-resolve grpc-js and brace-expansion past advisories (#454) (d46adf9)
• sanitize every wildcard in the CRON day/hour/minute fields, bump fast-uri and undici (#422) (908d2b5)
• send a CSP and serve Ace workers locally (#440) (fbe89ec)
• settings: name the OIDC provider secret fields for what they hold (#410) (852283b), closes #405
• settings: the OIDC provider edit saves every field it shows (#413) (1770f88)
• setup: land the wizard on welcome, and keep Complete reachable (#404) (3d44c9f), closes #325
• setup: show only the chosen provider's login fields (#409) (afdf7b3)
• source UI fixes (#487) (a55405f), closes #462 #461 #460 #463
• sources: show sample events as a JSON tree, no promote on main (#423) (a091726)
• ui: list the admin UIs this deployment runs (#412) (fdc9bc5), closes #406
• update defaults and apply updates (#465) (c5b39d1)

Reverts

• Revert "fix(sources): show sample events as a JSON tree, no promote on main (…" (#439) (eb976d4)

What's Changed

• fix: better cron drawer by @kbrandt-hs in #415
• fix(setup): show only the chosen provider's login fields by @catinspace-au in #409
• fix(settings): name the OIDC provider secret fields for what they hold by @catinspace-au in #410
• fix(settings): the OIDC provider edit saves every field it shows by @catinspace-au in #413
• fix(copy): drop internal and design words from UI text by @catinspace-au in #421
• fix: CRON wildcard sanitization + fast-uri/undici advisories by @catinspace-au in #422
• fix(sources): show sample events as a JSON tree, no promote on main by @catinspace-au in #423
• fix(ui): list the admin UIs this deployment runs by @catinspace-au in #412
• fix(image): build on Debian 13, pinned by digest by @catinspace-au in #434
• chore(dfe-engine-types): sync from dfe-engine by @kbrandt-hs in #437
• fix(setup): land the wizard on welcome, and keep Complete reachable by @catinspace-au in #404
• fix: send a CSP and serve Ace workers locally by @catinspace-au in #440
• fix: harden console sign-in, renewal and sign-out by @catinspace-au in #441
• Revert "fix(sources): show sample events as a JSON tree, no promote on main" by @kbrandt-hs in #439
• fix: custom scrollbar component by @kbrandt-hs in #448
• fix: cron tweaks and style bugs by @kbrandt-hs in #449
• chore(dfe-engine-types): sync from dfe-engine by @kbrandt-hs in #447
• chore: improve test performance by @kbrandt-hs in #450
• fix: bump next to 16.3.6 for GHSA-vcvr-r3jv-pc5j by @catinspace-au in #453
• fix: re-resolve grpc-js and brace-expansion past advisories by @catinspace-au in #454
• chore(dfe-engine-types): sync from dfe-engine by @kbrandt-hs in #456
• chore(dfe-engine-types): sync from dfe-engine by @kbrandt-hs in #464
• fix: update defaults and apply updates by @kbrandt-hs in #465
• chore(dfe-engine-types): sync from dfe-engine by @kbrandt-hs in #481
• chore: remove services feature - deployments, service configs & servi… by @kbrandt-hs in #482
• chore(dfe-engine-types): sync from dfe-engine by @kbrandt-hs in #483
• chore(dfe-engine-types): sync from dfe-engine by @hypersec-ci-bot[bot] in #489
• fix: source UI fixes by @kbrandt-hs in #487

New Contributors

• @hypersec-ci-bot[bot] made their first contribution in #489

Full Changelog: v1.7.5...v1.7.6

v1.7.5

1.7.5 (2026-09-27)

Bug Fixes

• build against the synced engine types (#385) (a8df23d), closes #384 #547
• clear the Quality job's warnings (#386) (fa25117)
• drop our tenant domain and dev cluster name (#391) (1b25c06)
• e2e: expect the permission notice in both account cards (#381) (69b3efc), closes #359
• e2e: match the specs to what the rc.14 stack seeds and renders (#390) (b371d51)
• ui: auto-merge toggle follows the stored flag (#398) (379ec5c)
• ui: one storage helper for every localStorage access (#383) (bfec225)

What's Changed

• fix(e2e): expect a notice per account card by @catinspace-au in #381
• fix(ui): one guarded helper for every localStorage access by @catinspace-au in #383
• fix: build against the synced engine types by @catinspace-au in #385
• fix: clear the Quality job's warnings by @catinspace-au in #386
• fix(e2e): match the specs to what the rc.14 stack seeds and renders by @catinspace-au in #390
• fix: drop our tenant domain and dev cluster name by @catinspace-au in #391
• fix(ui): auto-merge toggle follows the stored flag by @catinspace-au in #398

Full Changelog: v1.7.4...v1.7.5