Jakub Zych 5471b66b8f fix(32): CR-02 gate field type uploads on extension visibility ...

The plugin field-type upload route resolved a form extension's field without
checking the extension's Permissions and Visible, so an administrator who
cannot see the extension could still run its Upload. The route now answers
404 for them, like the extension's widget actions and partials.

2026-10-27 15:22:21 +01:00

..

backpack

docs: add a Role in the framework section to every module README

2026-10-11 00:58:17 +02:00

beachcomber

refactor: framework modules log through diary components

2026-10-21 11:58:22 +02:00

boardwalk

fix(19.7): rebuild the embedded admin for the lane B re-review fixes

2026-10-23 20:39:10 +02:00

bonfire

fix(summer): mask secret flag values in a delegate's error (WR-10)

2026-10-22 04:00:57 +02:00

bouncer

test(19.7-09): gate workspace check and unreleased-pin policy, TestSessionReaper and TestAuthTime

2026-10-23 17:45:51 +02:00

breakwater

feat(breakwater): Markdown renderer and HTML sanitizer with the forum policy (D-17)

2026-10-18 14:52:30 +02:00

cabana

fix(32): CR-02 gate field type uploads on extension visibility

2026-10-27 15:22:21 +01:00

compass

docs: add a Role in the framework section to every module README

2026-10-11 00:58:17 +02:00

conga

test(surf,conga,lagoon): summaries, reports, stats and checklist flags

2026-10-21 19:38:18 +02:00

cooler

docs(cooler): give KeyPrefix and keyPrefix their own doc comments (A-IN-02)

2026-10-23 16:08:27 +02:00

diary

fix(bonfire): strip control characters from error blocks, process views and tables

2026-10-22 02:31:55 +02:00

festival

docs: add a Role in the framework section to every module README

2026-10-11 00:58:17 +02:00

fetchguard

docs: add a Role in the framework section to every module README

2026-10-11 00:58:17 +02:00

flare

test(cabana,flare,dev,summer): json, reported errors and dev serve

2026-10-21 19:38:19 +02:00

lagoon

fix(lagoon): keep Status plugin-only; migrate:status adds the framework sets itself (WR-12)

2026-10-22 04:30:36 +02:00

lighthouse

feat: Artisan checklist for application commands, hints and coverage gate

2026-10-21 13:16:21 +02:00

pact

feat(32-02): record events and content descriptors (tracer)

2026-10-26 22:22:25 +01:00

party

test(17-06): framework and admin SPA unit tests for the blog companions

2026-10-12 19:29:37 +02:00

phrasebook

fix(admin): shadow-DOM-aware plain keys, commit drafts before shortcut saves and safe My account links (B-WR-01, B-WR-02, B-WR-03, B-WR-06, B-IN-01)

2026-10-23 16:29:10 +02:00

pier

test(phase-19.7): add Nyquist validation tests

2026-10-24 00:38:42 +02:00

postcard

refactor: framework modules log through diary components

2026-10-21 11:58:22 +02:00

seaglass

test(17-06): framework and admin SPA unit tests for the blog companions

2026-10-12 19:29:37 +02:00

sieve

feat(sieve): add the remaining collection helpers and docs mentions

2026-10-11 14:27:13 +02:00

signpost

test(32-06): framework unit matrices for form extensions, record events and descriptors

2026-10-27 13:11:28 +01:00

sunrise

docs: add a Role in the framework section to every module README

2026-10-11 00:58:17 +02:00

sunscreen

test(diary): config, channels, rotation, redaction and slogtest

2026-10-21 19:09:28 +02:00

surf

fix(pier): end only the revoked token's or client's MCP sessions and log the client address (B-WR-04, B-IN-04)

2026-10-23 16:21:37 +02:00

tide

feat(19.4-03): tide captures a named input of an HTML response

2026-10-19 19:59:24 +02:00

towel

test(19.7-09): named tests for every framework and admin SPA fix of plans 06 and 07

2026-10-23 18:36:16 +02:00

wire

docs: add a Role in the framework section to every module README

2026-10-11 00:58:17 +02:00

wristband

test(19.7-05): framework unit tests for every validation row and the gate's admin stage

2026-10-23 14:04:16 +02:00