Pedro CastroandGitHub 9ae2381755 fix(auth): validate IdP authority before SAML account linking (#26005) ...

* fix(auth): validate IdP authority before SAML account linking

Adds verification that SAML IdP is authoritative for the email domain
before allowing account conversion

* fix(auth): deny by default on missing SAML tenant + optimize membership query

 - Block account conversion when tenant is missing (deny by default)
 - Replace JOIN + ILIKE with two indexed lookups for O(1) performance

* refactor(auth): apply data minimization to security logs

2025-12-20 17:45:18 +00:00

..

apps

feat: posthog version upgrade and added trackings (#24401)

2025-11-28 12:43:37 +00:00

assignment-reason/repositories

feat: managed event reassignment (#24809)

2025-12-01 14:04:24 +04:00

auth

fix(auth): validate IdP authority before SAML account linking (#26005)

2025-12-20 17:45:18 +00:00

availability

feat(holidays): improve UI/UX and add contextual emojis (#25895)

2025-12-16 00:40:04 +00:00

billing/hooks

refactor: remove tRPC references from packages/lib (#24553)

2025-10-27 18:13:25 +00:00

booking-audit

fix: integration test of booking audit service (#26027)

2025-12-18 15:26:03 +00:00

bookingReference/repositories

refactor: Migrate repositories/services from /lib to /features (#25925)

2025-12-17 14:14:50 +00:00

bookingReport/repositories

refactor: Migrate repositories/services from /lib to /features (#25925)

2025-12-17 14:14:50 +00:00

bookings

chore: Improves the core booking audit architecture by adding new capabilities and simplifying the existing interfaces. (#25872)

2025-12-18 12:46:24 +00:00

bot-detection

fix: add event type validation (#24429)

2025-11-03 10:26:40 +00:00

busyTimes

feat: upgrade Prisma to 6.16.0 with no-rust engine (#23816)

2025-10-21 20:02:03 +01:00

calAIPhone

refactor: Migrate repositories/services from /lib to /features (#25925)

2025-12-17 14:14:50 +00:00

calendar-batch

perf: (googlecalendar): batch freebusy calls by delegation credential (#24332)

2025-12-20 13:45:44 -03:00

calendar-subscription

refactor: Move SelectedCalendarRepository and WorkflowRelationsRepository from /lib to /features (#25982)

2025-12-17 16:05:03 +00:00

calendar-view

feat: CalendarView atom v2 (#24896)

2025-12-02 21:44:30 +05:30

calendars

feat(booking): implement cross-page/week navigation in booking details sheet with view persistence (#25545)

2025-12-15 16:04:00 +00:00

calVideoSettings/repositories

refactor: create CalVideoSettingsRepository in features package (#25841)

2025-12-12 19:53:28 +00:00

cityTimezones

fix: typos in packages/features (#19220)

2025-02-21 05:14:57 -03:00

components

fix: adjust padding in timezone select, event advanced edit icon, and sidebar bottom nav (#25877)

2025-12-16 01:11:10 +00:00

conferencing

feat: add session endpoint and booking access pbac (#24637)

2025-12-04 05:45:17 +00:00

credentials

chore: Improves the core booking audit architecture by adding new capabilities and simplifying the existing interfaces. (#25872)

2025-12-18 12:46:24 +00:00

credits/repositories

refactor: create CreditsRepository in /features/credits (#25843)

2025-12-16 10:42:27 -03:00

crmManager

refactor: Remove circular deps between @calcom/lib and @calcom/features [1] (#24399)

2025-10-13 12:01:02 -03:00

data-table

fix(bookings): enable past date selection for cancelled bookings (#25644)

2025-12-17 13:47:51 +00:00

delegation-credentials

fix: APIV2 team membership - Member not getting added to event-type automatically (#24780)

2025-11-07 10:50:00 +00:00

deployment/repositories

refactor: Migrate repositories/services from /lib to /features (#25925)

2025-12-17 14:14:50 +00:00

di

feat: add webhook versioning (#23861)

2025-12-18 09:36:22 +02:00

ee

feat: add promotion codes support to SMS credit purchases (#23774)

2025-12-19 08:57:13 -03:00

embed

fix: slots in email embed sorted (#25676)

2025-12-20 13:12:50 +00:00

eventtypes

perf: use compound key (#25970)

2025-12-20 14:57:55 +00:00

eventTypeTranslation/repositories

refactor: Migrate repositories/services from /lib to /features (#25925)

2025-12-17 14:14:50 +00:00

filters

feat: upgrade tailwind v4 (#24598)

2025-11-25 17:32:28 -03:00

flags

feat: add enabled column to UserFeatures and TeamFeatures for tri-state semantics (#25765)

2025-12-18 07:16:20 -03:00

form/components

feat: upgrade tailwind v4 (#24598)

2025-11-25 17:32:28 -03:00

form-builder

fix: Radio buttons not filled in (CSS background-color) (#25599)

2025-12-04 19:49:02 +00:00

formbricks

refactor: remove tRPC references from packages/lib (#24553)

2025-10-27 18:13:25 +00:00

hashedLink

refactor: decouple @calcom/prisma from @calcom/features, @calcom/ee, and @calcom/lib (#24802)

2025-11-04 06:51:13 -03:00

holidays/repositories

feat(holidays): improve UI/UX and add contextual emojis (#25895)

2025-12-16 00:40:04 +00:00

host/repositories

refactor: create HostRepository in /features/host (#25842)

2025-12-13 11:04:57 +00:00

insights

feat: export all booking question fields in csv for non seated events in insights (#25837)

2025-12-16 10:35:21 +00:00

instant-meeting

Rename handleNewBooking to BookingCreateService (#23682)

2025-10-21 14:52:16 +03:00

kbar

feat: upgrade tailwind v4 (#24598)

2025-11-25 17:32:28 -03:00

links

Refactors EE code (#3490)

2022-07-28 13:58:26 -06:00

membership

fix(auth): validate IdP authority before SAML account linking (#26005)

2025-12-20 17:45:18 +00:00

mintlify-chat

fix: Proxy Mintlify traffic through a Next.js API route (#25320)

2025-11-21 18:43:09 +00:00

noShow

refactor: circular deps between app store and lib [6] (#23971)

2025-10-09 14:02:12 +00:00

notifications

fix: make vapid optional to prevent api failure at initialisation (#24469)

2025-10-18 18:30:12 +00:00

oauth

feat: OAuth PKCE (#25313)

2025-11-26 17:02:42 +01:00

onboarding/lib

fix(onboarding): adderss nits for invite link / spacing (#24742)

2025-10-28 14:35:57 +00:00

ooo/repositories

refactor: create PrismaOOORepository in /features/ooo (#25850)

2025-12-14 08:39:58 -03:00

organizations/repositories

fix(auth): validate IdP authority before SAML account linking (#26005)

2025-12-20 17:45:18 +00:00

pbac

chore: Improves the core booking audit architecture by adding new capabilities and simplifying the existing interfaces. (#25872)

2025-12-18 12:46:24 +00:00

platform-oauth-client

chore: Upgrade prisma to 6.7.0 (#21264)

2025-09-11 15:27:50 +01:00

profile

refactor: Migrate repositories/services from /lib to /features (#25925)

2025-12-17 14:14:50 +00:00

redis

refactor: move @calcom/lib/di folder to @calcom/features (#24199)

2025-10-02 08:12:06 -03:00

routing-forms

refactor: Move PrismaRoutingFormRepository from lib to /features/routing-forms (#25975)

2025-12-17 14:26:17 +00:00

schedules

fix: hide OOO slots across timezones (#25966)

2025-12-19 08:12:39 -03:00

selectedCalendar/repositories

refactor: Move SelectedCalendarRepository and WorkflowRelationsRepository from /lib to /features (#25982)

2025-12-17 16:05:03 +00:00

selectedSlots/repositories

refactor: Migrate repositories/services from /lib to /features (#25925)

2025-12-17 14:14:50 +00:00

settings

feat(holidays): improve UI/UX and add contextual emojis (#25895)

2025-12-16 00:40:04 +00:00

shell

fix: adjust padding in timezone select, event advanced edit icon, and sidebar bottom nav (#25877)

2025-12-16 01:11:10 +00:00

slots

refactor: move handleNotificationWhenNoSlots from trpc to features/slots (#25538)

2025-12-08 10:54:21 +02:00

tasker

chore: Improves the core booking audit architecture by adding new capabilities and simplifying the existing interfaces. (#25872)

2025-12-18 12:46:24 +00:00

timezone-buddy

feat: upgrade tailwind v4 (#24598)

2025-11-25 17:32:28 -03:00

tips

feat: gated features modal (#25296)

2025-12-11 11:14:31 +01:00

travelSchedule/repositories

refactor: Create TravelScheduleRepository and PrismaOrgMembershipRepository in /features (#25853)

2025-12-17 10:24:44 -03:00

troubleshooter

fix: troubleshooter team events + improve race condition (#25704)

2025-12-09 07:37:21 +00:00

users

refactor: Migrate repositories/services from /lib to /features (#25925)

2025-12-17 14:14:50 +00:00

video-call-guest/repositories

feat: link email to participant (requireEmailForGuests) (#24661)

2025-11-05 11:15:41 +00:00

watchlist

refactor: Migrate repositories/services from /lib to /features (#25925)

2025-12-17 14:14:50 +00:00

webhooks

feat: add webhook versioning (#23861)

2025-12-18 09:36:22 +02:00

workflows/repositories

refactor: migrate workflows utilities from trpc to features layer (#25534)

2025-12-16 10:17:46 +00:00

CalendarEventBuilder.test.ts

fix: workflow reminder send to all RR hosts. (#25597)

2025-12-04 09:21:48 +02:00

CalendarEventBuilder.ts

fix: workflow reminder send to all RR hosts. (#25597)

2025-12-04 09:21:48 +02:00

eslint.config.mjs

refactor: replace TRPCError with ErrorWithCode in packages/features (#25482)

2025-12-02 08:11:17 -03:00

get-cal-video-reference.test.ts

test: add test for invalid cal video (#13103)

2024-01-15 15:07:58 -05:00

get-cal-video-reference.ts

fix: backward compatibility for old cal rooms (#15609)

2024-06-28 09:42:38 +01:00

handleCreatePhoneCall.ts

refactor: replace TRPCError with ErrorWithCode in packages/features (#25482)

2025-12-02 08:11:17 -03:00

handleMarkNoShow.ts

refactor: migrate workflows utilities from trpc to features layer (#25534)

2025-12-16 10:17:46 +00:00

index.ts

feat: remove unused features barrel file for better performance (#23456)

2025-08-31 19:58:34 +00:00

isValidEmail.ts

fix: customReplyEmailTo feedback (#23738)

2025-10-01 15:32:32 +05:30

package.json

feat: Booking EmailAndSms Notifications Tasker (#24944)

2025-11-28 14:00:04 +00:00

Segment.test.tsx

fix: loading skeleton is rendered even when no attributes filter is selected (#23656)

2025-09-10 16:57:56 +05:30

Segment.tsx

feat: upgrade tailwind v4 (#24598)

2025-11-25 17:32:28 -03:00

trigger.config.ts

feat: Booking EmailAndSms Notifications Tasker (#24944)

2025-11-28 14:00:04 +00:00

tsconfig.json

feat: add coss-ui core package (#25984)

2025-12-18 19:57:21 +00:00