v2.68.1

What's Changed

• fix(api): correctly parse env.id when creating secrets at a defined path by @rohan-chaturvedi in #894

Full Changelog: v2.68.0...v2.68.1

v2.68.0

Important

This release includes database migrations that must be run when upgrading to this version. As a precaution, please make sure to backup your PostgreSQL database before continuing. For more information, please see docs.

What's Changed

• feat: teams + SCIM misc UX polish, dialog fixes, and SCIM URL prefix by @nimish-ks in #886
• feat: teams + SCIM by @rohan-chaturvedi in #838
• fix(csp): allow https://*.phase.dev in script-src by @nimish-ks in #889
• chore: bumped phase to v2.68.0 by @nimish-ks in #890
• chore: bump posthog by @nimish-ks in #891
• fix: validate cross-app secret refs against empty target envs by @rohan-chaturvedi in #881

Full Changelog: v2.67.5...v2.68.0

v2.67.5

What's Changed

• fix(sso): Okta OIDC adapter respects org-level config by @nimish-ks in #887
• chore: bump version to v2.67.5 by @nimish-ks in #888

Full Changelog: v2.67.4...v2.67.5

v2.67.4

What's Changed

• perf: bulk INSERT secret events to reduce DB round-trips by @nimish-ks in #784
• chore: bump version to 2.67.4 by @rohan-chaturvedi in #880

Full Changelog: v2.67.3...v2.67.4

v2.67.3

What's Changed

• fix: raise gunicorn --timeout and --graceful-timeout by @nimish-ks in #874
• chore(deps): bump django from 4.2.29 to 4.2.30 in /backend by @dependabot[bot] in #844
• chore(deps): bump lodash from 4.17.23 to 4.18.1 in /frontend by @dependabot[bot] in #845
• fix: serve all routes at both / and /service/ via middleware by @nimish-ks in #873
• fix: bypass host validation for /health/ ALB probes by @nimish-ks in #878
• chore: bump version to v2.67.3 by @nimish-ks in #879

Full Changelog: v2.67.2...v2.67.3

v2.67.2

What's Changed

• ci: native arm64 runners for PR builds (replace QEMU emulation) by @nimish-ks in #868
• fix: validate identity_key against member's keyring, not org owner's by @rohan-chaturvedi in #871
• chore: bump version to v2.67.2 by @rohan-chaturvedi in #872

Full Changelog: v2.67.1...v2.67.2

v2.67.1

What's Changed

• fix: page rendering, entra id scope by @rohan-chaturvedi in #866

Full Changelog: v2.67.0...v2.67.1

v2.67.0

What's Changed

Important

This release includes database migrations that must be run when upgrading to this version. As a precaution, please make sure to backup your PostgreSQL database before continuing. For more information, please see docs.

Tip

This release adds support for email + password authentication. To enable this on an existing Phase Console instance, you must set the ENABLE_PASSWORD_AUTH env var. Please see the docs for more information

• chore(deps): bump flatted from 3.4.1 to 3.4.2 in /frontend by @dependabot[bot] in #823
• chore(deps): bump pyasn1 from 0.4.8 to 0.6.3 in /backend by @dependabot[bot] in #818
• chore(deps): bump axios from 1.13.5 to 1.15.0 in /frontend by @dependabot[bot] in #848
• chore(deps): bump pyjwt from 2.6.0 to 2.12.0 in /backend by @dependabot[bot] in #803
• chore(deps): bump protobufjs from 7.5.4 to 7.5.5 in /frontend by @dependabot[bot] in #856
• chore(deps): bump picomatch from 2.3.1 to 2.3.2 in /frontend by @dependabot[bot] in #830
• feat: eliminate NextAuth, move SSO auth to backend by @nimish-ks in #849
• chore: bump version to v2.67.0 by @nimish-ks in #864

Full Changelog: v2.66.1...v2.67.0

v2.66.1

What's Changed

• fix: apply rate limiting to /secrets/tokens/ endpoint by @nimish-ks in #842
• Fix GitHub OAuth issuer validation by @nimish-ks in #846
• Bump version to v2.66.1 by @nimish-ks in #847

Full Changelog: v2.66.0...v2.66.1

v2.66.0

What's Changed

• fix: restore fallback chain in get_client_ip to prevent None IP by @rohan-chaturvedi in #839
• feat: secret referencing ux and autocompletion by @rohan-chaturvedi in #786
• chore: bump version to v2.66.0 by @nimish-ks in #841

Full Changelog: v2.65.0...v2.66.0