v1.7.0

1.7.0 (2026-10-05)

Features

• accounts: service accounts, behind the CREATE_SERVICE_ACCOUNTS flag (#563, #635)
  • create, rename, disable and delete them from account settings, and grant them product access on the membership pages (#567, #564)
  • sign in with API keys: opaque sck_ keys with a CRC-32 checksum that can be revoked or set to expire, and leaked keys are revoked through GitHub secret scanning (#570, #596, #581)
  • sign in from GitHub Actions by trusting a repository's branch, tag or environment (#566, #565, #632)
• accounts: label the create_repositories flag "Create Products" (#637) (bbe9b14)
• object-browser: delete in the background with progress, in batches (#583) (b00c17e)
• products: refresh button for the object listing (#625) (bf47211)

Bug Fixes

• admin: search users as you type and list every match (#568) (73e3be9)
• api: answer unmatched /api paths with a JSON 404 (#630) (e79eb4a)
• api: remove legacy API keys and the api-keys table (#374) (f845857)
• auth: keep the session across a server action redirect, e.g. after creating a product (#604) (2572d85)
• profiles: keep deactivated products listed for their owners (#579) (1f06414)
• products: render inline markdown in product list descriptions (#603) (7e9a94a)
• seo: disallow crawling on non-production deployments (#585) (5e05878)
• seo: keep crawlers on product pages, out of the file browser (#586) (0ffe1e6)