vamsikrishnamathala
1741278fec
chore: added licence
2026-03-05 17:02:04 +05:30
vamsikrishnamathala
f88062328f
Merge branch 'preview' of github.com:makeplane/plane into feat-workspace-api-tokens
2026-03-03 19:31:31 +05:30
Bavisetti Narayan and GitHub
a58642ed10
[WIKI-852] chore: update page version save logic ( #8440 )
...
* chore: updated the logic for page version task
* chore: updated the html variable
* chore: handled the exception
* chore: changed the function name
* chore: added a custom variable
2026-03-03 19:10:42 +05:30
Saurabh Kumar and GitHub
a9d688f290
[SILO-1028] feat: Project Summary external API ( #8661 )
...
* add project summary endpoint
* update response structure
2026-03-03 01:33:07 +05:30
sriram veeraghanta and GitHub
f53446340b
fix: Member Information Disclosure via Public Endpoint #8646
2026-02-20 18:33:45 +05:30
sriram veeraghanta and GitHub
9070acbbe8
fix: IDOR Vulnerabilities in Asset & Attachment Endpoints ( #8644 )
...
* fix: idor issues in project assets and issue attachements
* fix: comments
2026-02-20 18:02:12 +05:30
Sangeetha and GitHub
b5fe8a2825
[WEB-6194]migration: added archived_at in IssueView #8641
...
* migration: added archived_at in IssueView
* fix: lint
2026-02-17 19:06:13 +05:30
sangeethailango
d42371ac2b
merge preview
2026-02-17 13:31:35 +05:30
Sangeetha and GitHub
c4b3d52466
[WEB-5878] chore: add validation for project name/identifier for special characters ( #8529 )
...
* chore: update ProjectSerializer to raise validation for special characters in name and identifier
* chore: update external endpoints
* fix: external api serializer validation
* update serializer to send error code
* fix: move the regex expression to Project model
2026-02-17 00:49:02 +05:30
b-saikrishnakanth and GitHub
f0dcf66167
[WEB-5917] fix: generate clean plain text from HTML email template #8535
2026-02-17 00:44:52 +05:30
3a99ecf8f3
[WEB-5871] chore: added intake count for projects ( #8497 )
...
* chore: add intake_count in project list endpoint
* chore: sidebar project navigation intake count added
* fix: filter out closed intake issues in the count
* chore: code refactor
* chore: code refactor
* fix: filter out deleted intake issues
---------
Co-authored-by: Anmol Singh Bhatia <[email protected] >
2026-02-17 00:04:03 +05:30
ef5d481a19
[VPAT-51] fix: update workspace invitation flow to use token for validation #8508
...
- Modified the invite link to include a token for enhanced security.
- Updated the WorkspaceJoinEndpoint to validate the token instead of the email.
- Adjusted the workspace invitation task to generate links with the token.
- Refactored the frontend to handle token in the invitation process.
Co-authored-by: sriram veeraghanta <[email protected] >
2026-02-17 00:02:18 +05:30
Dheeraj Kumar Ketireddy and GitHub
c8a800104c
[SILO-820] fix: update serializer for module detail API endpoint to use ModuleUpdateSerializer ( #8496 )
2026-02-17 00:01:33 +05:30
53b3358a63
[GIT-44] refactor(auth): add PASSWORD_TOO_WEAK error code ( #8522 )
...
* refactor(auth): add PASSWORD_TOO_WEAK error code and update related error handling in password change flow
* fix(auth): update import to use type for EAuthenticationErrorCodes in security page
* Update apps/web/app/(all)/profile/security/page.tsx
Co-authored-by: Copilot <[email protected] >
* Update apps/web/app/(all)/[workspaceSlug]/(settings)/settings/account/security/page.tsx
Co-authored-by: Copilot <[email protected] >
* refactor: updated auth error exception accross zxcvbn usages
* fix: improve error handling for password strength validation and update error messages
* i18n(ru): update Russian translations for stickies and automation description
Added translation for 'stickies' and improved formatting of the automation description in Russian locale.
---------
Co-authored-by: Copilot <[email protected] >
2026-02-13 18:51:33 +05:30
Aaryan Khandelwal and GitHub
d497304de5
refactor: table drag preview using decorations ( #8597 )
...
* refactor: table drag preview using decorations
* fix: history meta for table drag state
2026-02-13 17:59:37 +05:30
sriram veeraghanta and GitHub
dfce8c6278
chore: admin folder structure ( #8632 )
...
* chore: admin folder structure
* fix: copy right check and formatting
* fix: types
2026-02-13 16:29:45 +05:30
Vamsi Krishna and GitHub
fab84eb058
[WEB-5899]fix: project sort order ( #8530 )
...
* fix: project sort order
* chore: updated queryset for sort_order
2026-02-13 15:52:22 +05:30
Sangeetha and GitHub
cd613e5f8f
[SECUR-105] fix: csv injection vulnerability sanitization #8611
2026-02-13 15:37:13 +05:30
b59e541b35
chore(deps): bump cryptography ( #8625 )
...
Bumps the pip group with 1 update in the /apps/api/requirements directory: [cryptography](https://github.com/pyca/cryptography ).
Updates `cryptography` from 44.0.1 to 46.0.5
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst )
- [Commits](https://github.com/pyca/cryptography/compare/44.0.1...46.0.5 )
---
updated-dependencies:
- dependency-name: cryptography
dependency-version: 46.0.5
dependency-type: direct:production
dependency-group: pip
...
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-11 13:06:42 +05:30
Sangeetha and GitHub
57ce2a5429
[WEB-6149] migration: change estimate point key max value to 50 #8620
2026-02-10 17:07:14 +05:30
sriramveeraghanta
13a679437d
chore(deps): upgrade django version
2026-02-09 14:51:53 +05:30
Sangeetha and GitHub
78729277e8
[SECUR-104] fix: Arbitrary Modification of API Token Rate Limits#8612
2026-02-09 14:50:29 +05:30
Sangeetha and GitHub
d191615a5e
[SECUR-113] fix: ssrf for work item links ( #8607 )
2026-02-05 15:03:43 +05:30
Bavisetti Narayan and GitHub
b8d3b3c5eb
fix: module percentage calculation ( #8595 )
2026-01-29 14:48:43 +05:30
sriram veeraghanta and GitHub
02d0ee3e0f
chore: add copyright ( #8584 )
...
* feat: adding new copyright info on all files
* chore: adding CI
2026-01-27 13:54:22 +05:30
Sangeetha and GitHub
f7d5200ed8
migration: back migrate all product tour fields to set true ( #8575 )
2026-01-27 00:47:02 +05:30
punto and GitHub
57806f9bd5
[GIT-45] fix: allow markdown file attachments ( #8524 )
...
* fix: allow markdown file attachments
- Add text/markdown to ATTACHMENT_MIME_TYPES
- Fixes issue where .md files were rejected with 'Invalid file type' error
* added the support for frontend mime type too
2026-01-23 13:38:47 +05:30
Sangeetha and GitHub
ba5ba5bf54
[GIT-61] chore: allow .md files to be uploaded ( #8571 )
...
* chore: allow .md files to be uploaded
* chore: allow .md files to be uploaded
2026-01-23 13:33:20 +05:30
2a29ab8d4a
[WEB-5845] chore: changing description field to description json ( #8230 )
...
* chore: migrating description to description json
* chore: replace description with description_json
* chore: updated migration file
* chore: updated the migration file
* chore: added description key in external endpoint
* chore: updated the migration file
* chore: updated the typo
---------
Co-authored-by: Aaryan Khandelwal <[email protected] >
2026-01-22 18:23:59 +05:30
Sangeetha and GitHub
fa1b4a102a
[WEB-5890] migration: added getting_started_checklist, tips, explored_feature fields on the workspace member table ( #8489 )
...
* migration: added getting_started_checklist and tips field
* fix: remove defaults and added explored_features field
* fix: added user table migration
2026-01-15 14:25:31 +05:30
Bavisetti Narayan and GitHub
5f3f9d2623
chore: updated migration file name ( #8515 )
2026-01-09 14:36:45 +05:30
ea1f92e0c6
[WEB-5537]refactor: rename IssueUserProperty to ProjectUserProperty and update related references ( #8206 )
...
* refactor: rename IssueUserProperty to ProjectUserProperty and update related references across the codebase
* migrate: move issue user properties to project user properties and update related fields and constraints
* refactor: rename IssueUserPropertySerializer and IssueUserDisplayPropertyEndpoint to ProjectUserPropertySerializer and ProjectUserDisplayPropertyEndpoint, updating all related references
* fix: enhance ProjectUserDisplayPropertyEndpoint to handle missing properties by creating new entries and improve response handling
* fix: correct formatting in migration for ProjectUserProperty model options
* migrate: add migration to update existing non-service API tokens to remove workspace association
* migrate: refine migration to update existing non-service API tokens by excluding bot users from workspace removal
* chore: changed the project sort order in project user property
* chore: remove allowed_rate_limit from APIToken
* chore: updated user-properties endpoint for frontend
* chore: removed the extra projectuserproperty
* chore: updated the migration file
* chore: code refactor
* fix: type error
---------
Co-authored-by: NarayanBavisetti <[email protected] >
Co-authored-by: sangeethailango <[email protected] >
Co-authored-by: vamsikrishnamathala <[email protected] >
Co-authored-by: Anmol Singh Bhatia <[email protected] >
2026-01-06 15:37:19 +05:30
sangeethailango
f1ae07e5ea
chore: Resolver404 error handling
2026-01-02 16:32:10 +05:30
sangeethailango
03e2c5a8d8
fix: error handling
2026-01-02 15:43:54 +05:30
vamsikrishnamathala
fea647dec8
Merge branch 'preview' of github.com:makeplane/plane into feat-workspace-api-tokens
2026-01-02 12:08:43 +05:30
Nikhil and GitHub
a37e5e2f6a
[WEB-5598] refactor: streamline object creation in workspace seed task and improve error handling in workspace creation #8264
2025-12-30 17:28:33 +05:30
sangeethailango
50040733d8
merge preview
2025-12-30 16:26:35 +05:30
1072509642
migration: added webhook version, navigation related fields and allowed_rate_limit for APIToken ( #8339 )
...
* migration: added version field in webhook
* chore: add max_length
* chore: added product tour fields
* chore: updated the migration file
* chore: removed the duplicated migration file
* chore: added allowed_rate_limit for api_tokens
* chore: changed key feature tour to product tour
* chore: added is_subscribed_to_changelog field
---------
Co-authored-by: NarayanBavisetti <[email protected] >
2025-12-30 16:18:58 +05:30
sangeethailango
42f060b899
Merge branch 'migration-webhook' into feat-workspace-api-tokens
2025-12-30 16:04:22 +05:30
lif and GitHub
94d5779f3a
chore: remove unused get_client_ip import ( #8453 )
...
Remove unused import `get_client_ip` from workspace/invite.py.
Identified by ruff linter (F401 error).
Signed-off-by: majiayu000 <[email protected] >
2025-12-29 18:39:54 +05:30
sangeethailango
a2fcc06d96
chore: added is_subscribed_to_changelog field
2025-12-29 17:52:38 +05:30
b-saikrishnakanth and GitHub
20492ffa75
[WEB-5790] feat: new email templates ( #8423 )
2025-12-29 16:17:29 +05:30
sangeethailango
0fd1f66e3e
fix: error handling for APIToken not exist
2025-12-29 15:27:37 +05:30
sangeethailango
26eba89d1b
fix: error handling for APIToken not exist
2025-12-29 15:22:35 +05:30
sangeethailango
ae0550e3d3
merge preview
2025-12-29 15:07:45 +05:30
sangeethailango
b031dea5a9
fix: expired_at set as a read only field
2025-12-29 14:32:58 +05:30
sangeethailango
97e18f5d54
fix: workspace tokens are returned in user tokens
2025-12-29 14:32:51 +05:30
sangeethailango
bc52fa1cc4
chore: workspace api token permission check
2025-12-29 14:32:44 +05:30
sangeethailango
d21f106113
chore: set header
2025-12-29 14:31:54 +05:30
sangeethailango
42d5407fdd
chore: separate rate limit class for workspace api token
2025-12-29 14:31:42 +05:30