Pull Request Explorer

Summary

Validate incoming webhook user membership

Adds validation to ensure webhook actions are performed by users with proper team or channel access, tightening security and preventing unauthorized post attribution.

Health Assessment

• • Fast review and minimal rework, but high security impact; quick turnaround indicates confidence in changes.

Summary

Verify post ownership on inbound shared-channel edits

Ensures that only posts owned by the originating remote can be edited or deleted via shared-channel sync, preventing unauthorized modifications and strengthening data integrity across clusters. This change adds ownership checks and regression tests, improving security and reliability for cross-cluster communication.

Health Assessment

• • The PR had a long cycle time but quick initial review, indicating a straightforward change that required minimal rework.

Summary

Automated cherry pick of #36640

Applies team sanitization to scheme teams endpoint, ensuring consistent data handling and reducing potential errors.

Health Assessment

• • Quick review and merge after automated cherry pick, minimal changes, low risk.

Summary

Restrict group_constrained to channels that support group sync

Ensures that the group_constrained flag is only applied to channel types that support group synchronization, preventing misconfiguration and potential errors in channel behavior.

Health Assessment

Summary

Cherry pick deactivated guest login fix

Applies deactivated guest login rejection to release 11.7, ensuring security compliance.

Health Assessment

• • Fast merge with minimal changes, indicating straightforward cherry pick of a bug fix.

Summary

Add Azure SAS export download support

Enables time‑limited SAS URLs for Azure export downloads, matching S3 behavior, improving user experience and security.

Health Assessment

• • The PR was reviewed quickly with minimal rework, but added a substantial amount of code (over 280 lines) to implement Azure SAS support. AI‑generated release notes and a single review cycle indicate a smooth process, though the feature’s credential handling introduces moderate risk that is mitigated by feature flags.

Summary

Add toast for plugin upload rejections

Provides consistent user feedback for plugin‑rejected uploads, matching download rejection toasts, improving clarity and reducing confusion.

Health Assessment

• • Fast cycle time and minimal review iterations indicate smooth integration; AI‑assisted review helped streamline feedback.

Summary

Remove flagged post from Redux store

Fixes a bug where deleted posts remained visible to content reviewers until a refresh, improving user experience and reducing confusion.

Health Assessment

• • Quick review (0.1h) but long cycle time (96h) due to delayed rework; moderate risk as changes touch multiple Redux modules but are well-tested.

Summary

Fix flaky TestCheckUsersEmojiIntegrity

Resets tables and scopes assertions to eliminate flakiness in emoji integrity tests, ensuring reliable test outcomes without affecting production code.

Health Assessment

• • Multiple AI-assisted reviews and several commits after the first review indicate moderate iteration, but the small scope and test-only nature keep risk low.

Summary

Cherry pick deactivated guest login fix

Adds a regression test and applies authentication check for deactivated guests on magic-link login, ensuring security compliance.

Health Assessment

• • Quick cherry pick with immediate merge, minimal review, low risk.

Summary

Reject deactivated guests on magic-link login

Fixes a security issue by preventing deactivated guests from logging in via magic link, ensuring authentication integrity.

Health Assessment

• • Fast merge with minimal changes, automated cherry pick, no review needed.

Summary

Cherry pick deactivated guest login fix

Ensures deactivated guests cannot log in via magic-link, maintaining security compliance.

Health Assessment

• • Quick cherry pick with minimal changes, fast review, low risk.

Summary

Cherry pick OAuth token tightening for user deactivation

Adds stricter OAuth token handling and cleans up stored data when users are deactivated, improving security and data hygiene.

Health Assessment

• • PR merged quickly with minimal review, indicating a straightforward change.

Summary

Cherry pick: concurrent React logging fix

Adds server logging for concurrent React sessions, improving diagnostics.

Health Assessment

• • Fast cycle, minimal rework, straightforward cherry pick.

Summary

Revert accidental release-11.7 cherry-pick

Undo an unintended cherry‑pick that caused a white flash in the UI, restoring stable navigation for users.

Health Assessment

• • The PR was merged within 11 hours, indicating a quick review and minimal rework. The small number of files and moderate line changes suggest low complexity and risk.

Summary

Add concurrent React logging to server

Adds debug logging for concurrent React experiments, enabling easier troubleshooting of client errors and user sessions.

Health Assessment

• • Fast cycle time and minimal rework indicate smooth integration.

Summary

Align guest magic-link REST login with auth checks

This change enforces authentication criteria for guest magic-link REST logins, matching web and password flows. It blocks deactivated guests from logging in, enhancing security and consistency.

Health Assessment

• • Long cycle time but quick review indicates a complex change that required thorough testing. The added regression test reduces risk.

Summary

Fix OAuth token handling for deactivated users

Ensures that OAuth tokens are not issued to deactivated users and cleans up stored OAuth data, enhancing security and data integrity.

Health Assessment

• • Quick cherry pick with minimal review, indicating a straightforward bugfix with low complexity.

Summary

Replace eslint-plugin-header with eslint-plugin-headers

Updates ESLint header enforcement to a maintained plugin, improving code quality and reducing linting errors.

Health Assessment

• • The PR was reviewed quickly and required only a few commits, but the long cycle time was driven by a late commit that updated the plugin version.

Summary

Convert ESLint configs to flat config

Migrate ESLint configuration to flat config files for easier maintenance and compatibility with newer ESLint versions.

Health Assessment

• • The PR has a medium scope with 20 files changed, and the review process was relatively fast with a cycle time of 136.9 hours. The risk level is medium due to the potential impact on downstream packages and the need for verification of ESLint linting passes in CI.

Summary

Tighten OAuth token issuance and cleanup

Improves security by preventing token issuance for deactivated users and ensuring cleanup of stored OAuth data, reducing risk of unauthorized access.

Health Assessment

• • The PR had a long cycle time (144h) but a rapid first review (0.1h) and only one commit, indicating efficient review but delayed merge. The change introduces a breaking security fix, warranting high risk assessment.

Summary

Upgrade compass-icons to 0.1.61

Updates the icon library to the latest stable release, adding new icons and restoring npm registry publishing, which improves UI consistency and security compliance.

Health Assessment

• • Fast cycle time and immediate approval indicate a straightforward dependency bump with minimal impact on the codebase.

Summary

Add PushNotification.Transport and related constants

Extends push notification API to support new transport types, improving integration with calls plugin and enhancing push delivery capabilities. This change enables clients to specify transport and sub_type, allowing more flexible push handling.

Health Assessment

• • Fast cycle with minimal rework; low review friction; small scope; moderate risk due to API changes.

Summary

Cherry pick of channel banner change

Applies a change to disable native channel banner when creating a classification banner, improving UI consistency.

Health Assessment

• • Fast review and merge indicate minimal complexity and low risk.

Summary

Disable native channel banner on classification creation

Prevents stale native banners from appearing when channels are created with classifications, ensuring banner visibility aligns with classification settings and avoiding confusion for users.

Health Assessment

• • Fast review cycle with minimal changes; AI-assisted code generation helped resolve the issue quickly.

Summary

Update NOTICE.txt with new dependencies

Updates the NOTICE file to reflect current dependency licenses, ensuring compliance and transparency.

Health Assessment

• • Quick review and merge, minimal changes, low risk.

Summary

Fix File Test Connection for Export Filestore

The change corrects the file test connection logic to validate the export backend when configured, preventing incorrect validation errors. This improves reliability for deployments using multiple filestore drivers.

Health Assessment

• • Quick review and single commit indicate a straightforward bug fix with minimal risk.

Summary

Cherry pick session attributes simulation

Enables session attributes in simulation, enhancing testing flexibility.

Health Assessment

• • Fast review and merge, minimal changes, automated cherry pick.

Summary

Add permission check to /share-channel autocomplete

Adds a permission gate for shared channel autocomplete, ensuring only authorized users see suggestions, with regression tests covering various roles.

Health Assessment

• • Fast review and merge, minimal changes, quick cherry-pick of a security fix.

Summary

Fix flaky TestCheckTeamsChannelsIntegrity

Fixes intermittent failures in database integrity tests by resetting tables and scoping assertions, ensuring reliable test results without affecting production behavior.

Health Assessment

• • Fast review and minimal changes led to quick merge; test-only fix with no production impact.

Summary

Health Assessment

Summary

Enable session attributes in simulation

Allows session attributes to be used in both policies and simulation, enhancing authorization flexibility and testing accuracy.

Health Assessment

• • Fast cycle time and minimal review iterations indicate smooth integration; however, lack of unit tests for error paths introduces moderate regression risk.

Summary

Fix flaky TestScheduleOnceSequential

Replaces unreliable fixed sleep with polling logic to make test deterministic, improving reliability without affecting production code.

Health Assessment

• • Quick, low‑risk test fix with minimal changes and fast review cycle.

Summary

Harden ABAC masking guards and fix sentinel detection

Improves security by tightening access control masking, ensuring safer policy enforcement and consistent error handling for administrators and end‑users.

Health Assessment

• • PR addressed critical security gaps with minimal rework and quick approval, indicating strong code quality and effective review.

Summary

Fix flaky TestUpdatePropertyValues_WriteAccessControl

Fix flaky test in property values access control by making assertions order-independent, ensuring test reliability without affecting production code.

Health Assessment

• • Fast review and minimal changes; test-only fix with low risk.

Summary

Add authorization gate to share-channel autocomplete

Enhances security by requiring manage_shared_channels permission for share-channel autocomplete, reducing unauthorized access.

Health Assessment

• • Quick merge with no rework, indicating straightforward change.

Summary

Cherry pick: tighten share-channel autocomplete authorization

Ensures only users with manage_shared_channels permission can see share-channel autocomplete suggestions, aligning security with existing gates.

Health Assessment

• • The PR was cherry‑picked and merged within 1.3 hours with no review, reflecting an automated workflow and low friction. The change adds a security gate to share‑channel autocomplete, improving authorization consistency.

Summary

Cherry pick of team sanitization endpoint

Adds sanitization to scheme teams endpoint, improving data consistency and security.

Health Assessment

• • Fast merge with minimal changes, indicating a straightforward cherry pick with no review needed.

Summary

Cherry pick of team sanitization fix

Applies team sanitization to scheme teams endpoint, ensuring consistent data handling across API.

Health Assessment

• • Quick cherry pick with minimal changes, fast review and merge.

Summary

Cherry pick of team sanitization fix

Applies team sanitization to scheme teams endpoint, ensuring consistent data handling.

Health Assessment

• • Fast merge with minimal changes, indicating straightforward cherry pick of a small bug fix.

Summary

Cherry pick of team sanitization for scheme endpoint

Adds team sanitization to scheme teams API, improving data consistency.

Health Assessment

• • Quick merge with minimal changes indicates low complexity and high confidence in the change.

Summary

Cherry pick Playbooks plugin update

Updates Playbooks plugin to v2.9.0 with FIPS support, ensuring compatibility with release 11.6.

Health Assessment

• • Quick merge after a single review, minimal changes, low risk.

Summary

Automated cherry pick of #36693

Fixes classification modal save state issue for better user experience.

Health Assessment

• • Fast cycle time and immediate review indicate a straightforward and well-prepared PR.

Summary

Cherry pick experimental concurrent React setting

Adds a user setting to enable experimental concurrent React mode, improving performance for advanced users.

Health Assessment

• • Quick cherry pick with minimal review, indicating a straightforward change that was merged within minutes of creation.

Summary

Add experimental concurrent React setting

Enables users to opt into experimental concurrent React mode, allowing early testing and potential performance improvements on the platform.

Health Assessment

• • Fast 1.8‑hour cycle with a single AI‑generated review; minimal rework and quick approval indicate a smooth process.

Summary

Cherry pick Playbooks plugin update

Applies Playbooks plugin v2.9.0 update to release-11.5, ensuring compatibility and FIPS compliance.

Health Assessment

• • Quick cherry pick with minimal changes, fast review and merge, low risk.

Summary

Fix classification modal save state

Fixes a UI bug that caused the Save button to disappear when toggling classification settings, improving user experience in channel configuration.

Health Assessment

• • The PR required multiple iterations and extensive test additions, indicating significant rework, but the final merge was quick after approvals.

Summary

Automated cherry pick of #36701

This automated cherry pick brings the updated prepackaged boards plugin version into the 11.7 release, ensuring users receive the latest plugin features and fixes.

Health Assessment

Summary

Tighten CI workflows

Align artifact upload conditions to ensure reliable CI builds, reducing build failures and improving deployment stability.

Health Assessment

• • Quick, low‑scope change with fast review and merge, indicating minimal risk.

Summary

Cherry pick of navigation fix

Applies a previously fixed navigation flash issue to the 11.7 release, ensuring consistent UI behavior.

Health Assessment

• • Quick cherry pick with minimal changes, fast review and merge, indicating low complexity and high confidence in the fix.