Important
This release includes database migrations that must be run when upgrading to this version. As a precaution, please make sure to backup your PostgreSQL database before continuing. For more information, please see docs.
What's Changed
- fix: scope legacy secret mutations to environment by @nimish-ks in #992
- fix: make managed roles immutable by @nimish-ks in #993
- fix: secure secret token bootstrap by @nimish-ks in #996
- fix: protect service account credential boundaries by @nimish-ks in #995
- fix: remove unused environment key mutation by @nimish-ks in #994
- fix(backend): store token expiry as UTC instead of server local time by @omlahore in #972
- fix: validate env and principal bindings in SSE init, env creation, and SA handler flows by @rohan-chaturvedi in #1001
- feat: add CSRF protection by @nimish-ks in #1008
- chore(frontend): build production bundles with Turbopack by @rohan-chaturvedi in #1012
- fix(frontend): Next.js 16 review follow-ups for sync dialogs by @rohan-chaturvedi in #1009
- Upgrade frontend to Next.js 16 by @nimish-ks in #998
- chore(frontend): bump posthog-js to v1.428.9 by @nimish-ks in #1016
- chore: bump version to v2.75.0 by @nimish-ks in #1015
New Contributors
Full Changelog: v2.74.0...v2.75.0
Contributors
rohan-chaturvedi, nimish-ks, and omlahore