v3.78.0

3.78.0 (2026-06-11)

Bug Fixes

• guard optimistic state sync and align picker page cap (cubic on #3095) (c39011f)
• integration-platform: isolate per-subscription wildcard scan + graceful subscription picker (62fd692)
• integration-platform: make multi-subscription scanning strictly opt-in (c1bce47)
• integration-platform: stamp account attribution on account-level AWS findings (1493c5c), closes #3086 #3065
• integration-platform: surface real read errors in azure/gcp checks (CS-534 part 1) (91135b2)
• integration-platform: surface real read errors in cloudtrail/kms/iam/ec2/rds checks (CS-533) (5d7e2a0), closes #3075
• integration-platform: surface the subscription scan cap as an explicit finding (e6dda8c)
• integrations: gate the Add-account CTA on integration:create RBAC (6c35625)
• resolve cubic findings from the production deploy review (#3087) (9f30138)
• trust-portal: resync custom-framework state + mark response fields nullable (ec5ba44)
• trust-portal: validate allowed-emails body with a DTO (06ed9bd)
• trust: gate certificate drag-and-drop behind the read-only permission (086bf7c)
• trust: reset the certificate file input on every selection, not only success (7d51e2c)
• trust: resolve 4 cubic findings from the production deploy review (c2b9122)
• trust: return 400 not 500 on malformed PUT /custom-frameworks body (bb30749)

Features

• integration-platform: scan all enabled Azure subscriptions (CS-534 part 2) (9912b9a)
• trust-portal: add per-email NDA-bypass allowlist (3e3ed70)
• trust-portal: display custom frameworks on the trust portal (e9ed93d)