v3.27.5

3.27.5 (2026-04-21)

Bug Fixes

• devices: soften stale tooltip copy to not prescribe a single cause (71053b6)

v3.27.4

3.27.4 (2026-04-21)

Bug Fixes

• devices: show stale as distinct state on /people device column (#2629) (6e1a06f)

v3.27.3

3.27.3 (2026-04-21)

Bug Fixes

• devices: propagate three-state compliance to employee & device drill-ins (CS-276) (b56f7dc)

v3.27.2

3.27.2 (2026-04-21)

Bug Fixes

• digest: key policy acknowledgment rollup by email, not user.id (#2624) (75c8888)

v3.27.1

3.27.1 (2026-04-21)

Bug Fixes

• api,app: unblock onboarding frameworks list for users without active org (8fee034)

v3.27.0

3.27.0 (2026-04-20)

Bug Fixes

• devices: flag stale device agents as non-compliant + CSV export (#2612) (0d59e8f)
• integration-platform: preserve VCS url fragments in python matcher (f820738)
• integration-platform: use toml-aware comment stripping for pyproject.toml (2cf8979)
• integrations-catalog: add global request pacing to prevent 429s (0dfb793)

Features

• add compliance timeline to overview (feature flagged) (26c04d8)
• integration-platform: expand validation library detection for sanitized inputs check (964cb1b)
• integrations-catalog: add public catalog (ea297de)

Reverts

• Revert "chore(app): remove the duplicated prisma/ setup" (#2621) (a1889a1)

v3.26.1

3.26.1 (2026-04-20)

Bug Fixes

• rbac: gate Auditor View tab on audit:read instead of role string (CS-189) (fa52778)
• rbac: scope Auditor View to explicit auditor roles (CS-189 follow-up) (d7c3936)

v3.26.0

3.26.0 (2026-04-20)

Features

• vercel: add project filter variables and parser helper (9718d87)

v3.25.1

3.25.1 (2026-04-20)

Bug Fixes

• allow creating new version of policy even if empty or if using pdf (a78d96b)

v3.25.0

3.25.0 (2026-04-20)

Bug Fixes

• app: hide policy alerts if pending version is cleared (#2604) (a7389a1)
• controls: dedupe policyIds/taskIds before validating length (5de8a67)
• controls: scope FK inputs to caller org in create() (2b8991f)
• framework-editor: stop auto-linking all framework requirements on control create (#2605) (3f681e5)
• frameworks: address PR review feedback (e3b58bc)
• frameworks: address review feedback — tenant-FK hardening + custom-framework parity (d296e2a)
• frameworks: dedupe linked requirements and scope lookups by org (c39a7c5)
• frameworks: remove debug log and return DB-reported link counts (409be26)
• onboarding: set default value for organizationId in updatePolicy schema (c3a50db)

Features

• controls: add endpoints to link policies, tasks, and requirements to controls (0380ff7)
• frameworks: add custom framework and requirement management endpoints (a81af3e)