v0.106.1

Changelog

• 2fff358 fix(bootstrap): reconcile predefined roles instead of add-only migrate (#1687)
• 23b216b fix(invitation): remove user relation on invitation delete (#1678)
• b96f141 fix(role): reject deletion of a role still in use by policies (#1683)
• d1acb6b refactor(api): pass real errors in CodeInternal instead of generic sentinel (#1689)

v0.106.0

Changelog

• 367c75f fix(admin): invoice amount filter units, org URL error, search focus (#1676)
• 4942a2f fix(api): add error sanitizer interceptor and fix billing response codes (#1680)
• ea08627 fix(api): remove duplicate request_id and method from logger attrs (#1681)
• 9558e83 fix(api): wrap billing org-lookup errors in proper connect codes (#1682)
• ab01538 fix(auth): require Bearer/Basic scheme and route exclusively (#1677)
• 6583806 fix(deleter): cascade PAT cleanup on user delete (#1672)
• bd6a145 fix(docker): run containers as non-root user and update alpine to 3.21 (#1674)
• 3430fcd perf(admin): lazy-load route pages (#1666)

v0.105.0

Changelog

• c2f9a2c feat(membership): accept PAT principals; add SetPATAllProjectsRole (#1665)
• 963cf10 fix(api): dedupe access_pairs and map invalid-id/unknown-perm to 4xx (#1657)
• c5a08d1 fix(group): resolve PAT to user before owner wiring on group create (#1658)
• 0e8b178 fix: IAM Design fixes (#1663)
• 59e64ef fix: PAT expiry handling, date filters, and settings view borders (#1671)
• 880fd9a fix: admin organization issues and form validations (#1664)
• 2e93a90 fix: handle in/notin operators in token search filters (#1656)

v0.104.2

Changelog

• c312696 refactor(organization): batch joinable orgs fetch, extract helper (#1652)

v0.104.1

Changelog

• c312696 refactor(organization): batch joinable orgs fetch, extract helper (#1652)

v0.104.0

What's Changed

• fix(admin): use Radio for single-select role assignment by @paanSinghCoder in #1631
• fix(admin): improve webhook form fields by @paanSinghCoder in #1636
• fix(admin): prevent negative values in organization size input by @paanSinghCoder in #1640
• fix(admin): align table columns with page header by @paanSinghCoder in #1642
• fix(admin): surface API error message in assign role toast by @paanSinghCoder in #1644
• refactor(organization): migrate ListByUser callers to membership, delete legacy method by @AmanGIT07 in #1639
• refactor(group): migrate ListByUser callers to membership, delete legacy method by @AmanGIT07 in #1643
• fix(sdk): PAT page UI fixes and copy updates by @rohilsurana in #1646
• refactor(project): migrate ListByUser callers to membership, delete legacy method by @AmanGIT07 in #1648

Full Changelog: v0.103.2...v0.104.0

Changelog

• a9f2e87 fix(admin): align table columns with page header (#1642)
• 98d6246 fix(admin): improve webhook form fields (#1636)
• 906d529 fix(admin): prevent negative values in organization size input (#1640)
• 7fae42c fix(admin): surface API error message in assign role toast (#1644)
• 1df544c fix(admin): use Radio for single-select role assignment (#1631)
• e24bcb7 fix(sdk): PAT page UI fixes and copy updates (#1646)
• 9e2e75a refactor(group): migrate ListByUser callers to membership, delete legacy method (#1643)
• 592ede2 refactor(organization): migrate ListByUser callers to membership, delete legacy method (#1639)
• f1d968b refactor(project): migrate ListByUser callers to membership, delete legacy method (#1648)

v0.103.2

What's Changed

• fix(admin): "Coming soon" tooltip not showing on disabled "Add domain" button by @paanSinghCoder in #1632
• fix(sdk): add icons to PAT details header action menu by @rohanchkrabrty in #1635

Full Changelog: v0.103.1...v0.103.2

Changelog

• 5061882 fix(admin): "Coming soon" tooltip not showing on disabled "Add domain" button (#1632)
• 0b6e31a fix(sdk): add icons to PAT details header action menu (#1635)

v0.103.1

What's Changed

• feat(membership): add ListResourcesByPrincipal with inheritance by @AmanGIT07 in #1618
• migrate(admin): SDK admin and SDK app to Apsara v1 (rc.6) by @paanSinghCoder in #1600
• fix(authz): require permission checks on GetPolicy, ListOrganizations, ListUsers by @whoAbhishekSah in #1622
• fix(serviceuser): symmetric SpiceDB cleanup on delete by @whoAbhishekSah in #1630
• fix(authz): symmetric SpiceDB cleanup on policy delete by @whoAbhishekSah in #1624
• fix(sdk): polish views-new empty states, menus and add member flow by @rohanchkrabrty in #1626
• fix: bump apsara to rc.8 and SDK dialog refactors by @rohanchkrabrty in #1627
• fix(sdk): use setOrganizationMemberRole RPC in update role dialog by @rohanchkrabrty in #1628
• fix: PAT project list and assorted SDK view fixes by @rohanchkrabrty in #1633

Full Changelog: v0.103.0...v0.103.1

v0.103.0

What's Changed

• fix(sdk): remove orgId from project update requests by @rohilsurana in #1604
• refactor(membership): make SetGroupMemberRole an upsert by @whoAbhishekSah in #1603
• fix: atomic last-owner guard prevents TOCTOU race on role demotion by @rohilsurana in #1590
• refactor(group): migrate AddGroupUsers handler to membership by @whoAbhishekSah in #1608
• refactor(sdk): migrate group add-member flows to setGroupMemberRole by @whoAbhishekSah in #1609
• refactor(group): migrate RemoveGroupUser handler to membership by @whoAbhishekSah in #1611
• refactor(sdk): drop redundant policy CRUD from remove-member-dialog by @whoAbhishekSah in #1612
• chore(sdk-admin): list new group member webhook events by @whoAbhishekSah in #1613
• fix(sdk): forward existing project name in edit-project update by @rohanchkrabrty in #1607
• fix(bootstrap): backfill org policies for legacy service users on startup by @AmanGIT07 in #1616
• refactor(group): remove AddGroupUsers handler + authz entry by @whoAbhishekSah in #1614
• refactor(group): move group-delete cleanup into membership package by @whoAbhishekSah in #1615
• fix(api): replace raw error responses with generic ErrInternalServerError by @rohilsurana in #1620
• fix(api): return CodeFailedPrecondition for disabled org in AuthToken by @rohilsurana in #1621
• fix(billing): replace text/template with strings.Replace in checkout URL templating by @rohilsurana in #1619

Full Changelog: v0.102.0...v0.103.0

Changelog

• 1276dd1 fix(api): replace raw error responses with generic ErrInternalServerError (#1620)
• 53ad4c9 fix(api): return CodeFailedPrecondition for disabled org in AuthToken (#1621)
• 996912f fix(billing): replace text/template with strings.Replace in checkout URL templating (#1619)
• 74c44fa fix(bootstrap): backfill org policies for legacy service users on startup (#1616)
• 2fe010a fix(sdk): forward existing project name in edit-project update (#1607)
• bb2091e fix(sdk): remove orgId from project update requests (#1604)
• 0d0ca1d fix: atomic last-owner guard prevents TOCTOU race on role demotion (#1590)
• 294a560 refactor(group): migrate AddGroupUsers handler to membership (#1608)
• d631ed6 refactor(group): migrate RemoveGroupUser handler to membership (#1611)
• c922ba4 refactor(group): move group-delete cleanup into membership package (#1615)
• 5e7ebe5 refactor(group): remove AddGroupUsers handler + authz entry (#1614)
• 0f0bc2d refactor(membership): make SetGroupMemberRole an upsert (#1603)
• 3e6353b refactor(sdk): drop redundant policy CRUD from remove-member-dialog (#1612)
• 924b575 refactor(sdk): migrate group add-member flows to setGroupMemberRole (#1609)

v0.102.0

Changelog

• 6fa0175 feat(membership): add group membership management (#1596)
• f4d3398 fix(project): make org immutable via UpdateProject (#1598)
• 1915b20 refactor(group): migrate group creation to membership package (#1601)
• b7611c8 refactor: consolidate principal-by-resource listing into membership (#1567)