Changelog

• 4b1b56a feat(billing): add stripe error translator (#1849)
• 2486677 feat(billing): move plan writes to AdminService and add ListAllPlans (#1830)
• 7b216ea feat(billing): reset product title, description, and config when update omits them (#1821)
• c977583 feat(checkout): add delete of checkout records by billing account (#1841)
• 121eab0 feat(credit): add delete of credit transactions by billing account (#1842)
• 555c089 feat(deleter): write an audit record for each checkout removed during org delete (#1839)
• ccb1c11 feat(kyc): add delete of an org kyc record (#1843)
• 990e142 feat(reconcile): add BillingProduct kind (#1816)
• c294c5f feat(reconcile): add the BillingPlan reconcile kind (#1854)
• 3a20ccb fix(admin): Admin org design fixes (#1799)
• 5c7721f fix(api): map billing errors to actionable codes instead of internal (#1851)
• 6ccc7ba fix(authenticate): read otp attempt counter from json-decoded metadata (#1846)
• c21aa1c fix(billing): deny entitlement for a feature with no products (#1858)
• ad5e9a5 fix(billing): include plans without products in plan listings (#1834)
• df5181b fix(billing): translate stripe errors in billing services (#1850)
• 6fc4b65 fix(db): report rollback outcome correctly in WithTxn (#1855)
• 2930c71 fix(deleter): clean up all billing and kyc records during org delete (#1838)
• c4b8ca5 fix(resource): use resource title as audit record target name (#1833)
• 366e24c fix(subscription): make billing account teardown retryable (#1844)
• 8cfe082 refactor(membership): deduplicate repeated patterns (#1827)
• 98a7873 refactor(membership): split service.go by resource type (#1826)
• 3b828eb refactor(project): move project creation grants into membership (#1822)
• c808552 refactor(project): remove unused SetMemberRole and RemoveMember (#1823)

Changelog

• 9880871 refactor(server): serve unencrypted HTTP/2 natively (#1818)

Changelog

• d72c679 refactor(schema): drop the retired org/group ownership relations (#1815)

Changelog

• 580ee14 feat(auth): add auth_via claim to minted access tokens (#1808)
• 9d6a482 feat(billing): manage product prices through UpdateProduct (#1810)
• 1b1f3a3 fix(billing): ignore inactive prices in checkout, plan matching, and invoicing (#1811)
• 1713cdd fix(membership): clean custom-resource policies when removing an org member (#1807)
• 0145b65 refactor(membership): stop writing org owner/member relations (#1812)
• ab8b990 refactor(schema): grant org and group access through roles only (#1809)

What's Changed

• docs(reconcile): show scopes in the Role example by @rohilsurana in #1764
• chore(resource): remove the unused resource-config cache by @rohilsurana in #1766
• feat(reconcile): validate every document before applying anything by @rohilsurana in #1776
• fix(reconcile): harden the PlatformUser kind against silent access removal by @rohilsurana in #1775
• refactor(admin): centralize date formatting, fix null-timestamp rendering, and correct table filter attribute by @Shreyag02 in #1746
• fix(membership): log audit record failures instead of dropping them by @AmanGIT07 in #1770
• chore: acknowledge unactionable errors explicitly by @AmanGIT07 in #1773
• fix: log audit log failures instead of dropping them by @AmanGIT07 in #1769
• fix(cmd): fail fast when marking an unknown flag required by @AmanGIT07 in #1771
• fix(store): surface prospect metadata errors and revive the policy list assertion by @AmanGIT07 in #1778
• chore: dedupe imports and simplify expressions by @AmanGIT07 in #1780
• fix(sdk): disable native browser validation on react-hook-form forms by @rohanchkrabrty in #1791
• chore: name error vars by convention by @AmanGIT07 in #1788
• chore: acknowledge deprecated API usage by @AmanGIT07 in #1781
• fix(store): return transaction errors from rql search repositories by @AmanGIT07 in #1768
• fix(spicedb): migrate batch check to the stable bulk permissions API by @AmanGIT07 in #1777
• fix(auth): return 4xx for bad OIDC authorization codes by @whoAbhishekSah in #1790
• chore(lint): enable errcheck and staticcheck by @AmanGIT07 in #1774
• feat(reconcile): unify custom and predefined role handling under one field model by @rohilsurana in #1779
• docs: RFC 0001 for declarative management of platform resources by @rohilsurana in #1751
• feat(reconcile): add a Webhook kind by @rohilsurana in #1772
• feat(reconcile): validate preference values against the trait at plan time by @rohilsurana in #1794
• feat(db): block deleting an org that still has service users by @whoAbhishekSah in #1796
• fix(reconcile): close the PlatformUser Rule 2 and Rule 5 gaps by @rohilsurana in #1795
• fix(reconcile): validate the permission namespace charset at plan time by @rohilsurana in #1797
• fix(auth): reject PAT and service user when parent org is disabled by @whoAbhishekSah in #1792
• refactor(server): remove unused ListOrganizationsByDomain messages and authz entry by @AmanGIT07 in #1793
• fix(auth): store mail OTP codes as bcrypt hashes by @AmanGIT07 in #1803
• chore(proto): bump proton to pick up pagination field bounds by @AmanGIT07 in #1804
• feat(admin): show org slug in detail URLs instead of UUID by @Shreyag02 in #1763
• refactor(deleter): move custom-resource policy cleanup to resource service by @whoAbhishekSah in #1800
• refactor: rename service user variables by @RushikeshBhavsar3605 in #1802
• feat(billing): use credit product title as overdraft invoice line item name by @rohilsurana in #1753

New Contributors

• @RushikeshBhavsar3605 made their first contribution in #1802

Full Changelog: v0.110.0...v0.111.0

Changelog

• 45b45db feat(cli): add export command to generate desired-state YAML from current state (#1731)
• 3c08b2f feat(reconcile): add Permission and Role kinds, bootstrap only creates missing roles (#1737)
• 7dcfcee feat(reconcile): add a Preference kind (#1762)

What's Changed

• fix(admin): add skeleton loader to invite-user Org select by @Shreyag02 in #1735
• fix(orgusers): support case-insensitive name filtering by @Shreyag02 in #1723
• fix(webhooks): surface form validation errors and reset add-webhook drawer state by @Shreyag02 in #1736
• fix: remove unused user and org relations from app/pat schema by @whoAbhishekSah in #1741
• refactor(group): resolve org from the group instead of the request by @AmanGIT07 in #1739
• fix(products): redirect unknown product id to list instead of dangling URL by @Shreyag02 in #1742
• fix(invitation): auto-delete expired invitations on a schedule by @whoAbhishekSah in #1744
• fix(users): resolve user detail via frontierService.getUser instead of searchUsers by @Shreyag02 in #1743
• fix(admin): fix Org Security loading state UI by @Shreyag02 in #1738
• refactor(admin): use AlertDialog for destructive confirmation dialogs by @Shreyag02 in #1752
• fix(users): default user detail to Security tab via index redirect by @Shreyag02 in #1755
• fix(sdk): use searchOrganizationInvoices and value-based debounce by @rohanchkrabrty in #1748
• fix: wait for HTTP server drain during graceful shutdown by @AmanGIT07 in #1745
• fix: add graceful shutdown to UI server by @AmanGIT07 in #1747
• chore: bump apsara to 1.1.0 and remove unused sdk/react folder by @rohanchkrabrty in #1760
• fix: wait for background goroutines during shutdown by @AmanGIT07 in #1756
• feat: make the shutdown grace period configurable by @AmanGIT07 in #1758
• fix: auth OIDC button styles by @rohanchkrabrty in #1759
• fix: drop orgId from group RPCs by @rohanchkrabrty in #1757
• refactor(webhooks): make admin webhooks view-only, remove write actions by @Shreyag02 in #1754

Full Changelog: v0.108.1...v0.109.0

Changelog

• af5fda3 feat: make the shutdown grace period configurable (#1758)
• 7d10e3e fix(admin): add skeleton loader to invite-user Org select (#1735)
• cd6b070 fix(admin): fix Org Security loading state UI (#1738)
• 9339bb2 fix(invitation): auto-delete expired invitations on a schedule (#1744)
• 961da8a fix(orgusers): support case-insensitive name filtering (#1723)
• 4d34103 fix(products): redirect unknown product id to list instead of dangling URL (#1742)
• abe099f fix(sdk): use searchOrganizationInvoices and value-based debounce (#1748)
• dab6e85 fix(users): default user detail to Security tab via index redirect (#1755)
• ff27bf5 fix(users): resolve user detail via frontierService.getUser instead of searchUsers (#1743)
• b763d0a fix(webhooks): surface form validation errors and reset add-webhook drawer state (#1736)
• afc1be7 fix: add graceful shutdown to UI server (#1747)
• a41e92d fix: auth OIDC button styles (#1759)
• ab3fce9 fix: drop orgId from group RPCs (#1757)
• 545ee21 fix: remove unused user and org relations from app/pat schema (#1741)
• ba080b5 fix: wait for HTTP server drain during graceful shutdown (#1745)
• d43bcfb fix: wait for background goroutines during shutdown (#1756)
• 390b967 refactor(admin): use AlertDialog for destructive confirmation dialogs (#1752)
• 8ad9342 refactor(group): resolve org from the group instead of the request (#1739)
• da6059c refactor(webhooks): make admin webhooks view-only, remove write actions (#1754)

Changelog

• f46911c feat(image-upload): add button to clear uploaded image (#1725)
• 7384a11 feat: simplify admin create-workspace form (#1733)
• 4a8d725 fix(admin): use blue IAM mark as favicon (#1729)
• 854c122 fix(billing): advance credit overdraft invoice window past last invoiced range (#1730)
• 46c7170 fix: remove duplicated word in users listing preference description (#1727)

Changelog

• ed17ed9 feat(auth): enforce per-endpoint credential restrictions and make the auth chain order-independent (#1718)
• cc4e300 feat: manage platform users via GitOps (relation-level grants, bootstrap superuser SA, reconcile CLI) (#1719)
• 655d4df fix(pat): clear expiry-alert metadata on PAT regeneration (#1724)

Changelog

• 1e95e03 fix(admin): open billing portal in same tab to reflect edits on return (#1722)