v2025-11-14

What's Changed

• Convert 4-space indent to 2-space indent by @corylown in #1471
• Indent conditional blocks by @corylown in #1470
• Check for stream read ability before rendering content and links by @corylown in #1472
• Rescue from AccessDenied and return forbidden by @corylown in #1473
• Sequence upload jobs so they run in the correct order for remote downloads + multipart uploads by @cbeer in #1474
• add login details to site_users table by @dnoneill in #1475
• load setting from ENV variables by @dnoneill in #1478
• Add destroy action to let admins delete users outside of the org context by @cbeer in #1476
• Change icon for non group members by @corylown in #1481
• make 30 day sparkline border darker by @dnoneill in #1477
• Fix permission check for groups. by @cbeer in #1485
• Remove duplicate permissions check for creating groups by @cbeer in #1486
• Restrict the ability to invite users to org admins. by @cbeer in #1487
• Refactor away the 'crud' ability shortcut. by @cbeer in #1488
• Use more granular ability checks for organizations. by @cbeer in #1489
• Refactor away Ability#final_ability_restrictions by @cbeer in #1484
• Leave current default stream set as the default while the new stream is pending by @corylown in #1492
• Remove allowlisted_jwt cruft from Ability class by @cbeer in #1491
• Link out to MARC documentation for admins by @marlo-longley in #1490

Full Changelog: v2025-11-12...v2025-11-14