Pull Request Explorer

Summary

Update plugin-calls to v1.11.5

Bumps the Mattermost Calls plugin to version 1.11.5, adding support for self‑signed/private CA certificates with offloader/recorder/transcriber.

Health Assessment

• • Fast review and merge with minimal changes; low risk of regression.

Summary

Enforce query timeouts consistently

Ensures all database queries respect application-level timeouts, preventing long-running operations and improving system reliability.

Health Assessment

• • High-impact change to core DB wrapper; AI-assisted review helped catch timeout bugs; moderate iteration with two review rounds; overall healthy process with quick review turnaround.

Summary

Update jira prepackaged version

Bumps the prepackaged Jira plugin to v4.7.0 for release-11.5, ensuring compatibility and stability.

Health Assessment

• • Quick cherry-pick with minimal changes, no rework, fast merge.

Summary

Disable flaky autotranslation tests

Disables flaky end‑to‑end tests for autotranslation and demo plugin hook toggle to stabilize the test suite.

Health Assessment

• • PR had a short cycle time and minimal changes, with a single review and no rework, indicating a low‑risk, straightforward maintenance update.

Summary

Backport reporter-config.json to release-10.11

Adds missing reporter configuration to enable Cypress test execution on release-10.11. This prevents CI failures and ensures test coverage for the release branch.

Health Assessment

• • The PR backported a missing JSON config to restore CI functionality on the release branch, with minimal changes and a single review cycle.

Summary

Upgrade golangci-lint to v2.12.2

Upgrades golangci-lint to v2.12.2, enabling all linters by default and fixing lint-related bugs, improving code quality and reliability.

Health Assessment

• • Fast review and merge with minimal rework, indicating a stable lint upgrade with low risk of regression.

Summary

Update Playbooks plugin to v2.9.0 (incl. FIPS)

Users can now use the latest Playbooks plugin version with FIPS support, ensuring compliance and improved security for enterprise deployments.

Health Assessment

• • Fast review and merge with minimal changes; low risk and small scope.

Summary

Add Azure Blob Storage filestore backend

Adds Azure Blob Storage as a file backend, giving customers an alternative to S3 and local storage, improving flexibility and potentially reducing costs.

Health Assessment

• • The PR underwent several rounds of review and required substantial code changes, reflecting the complexity of integrating Azure Blob Storage and ensuring configuration validation.

Summary

Fix CI shard timing cache and guard saves

Resolves a self‑reinforcing CI failure loop by resetting the shard timing cache, gating cache saves to successful runs, and adding concurrency safety to a migration, ensuring stable test execution.

Health Assessment

• • Fast cycle time and a single review round indicate an efficient resolution of a critical CI issue, with moderate risk due to changes in cache logic and migration concurrency handling.

Summary

Add .envrc to .gitignore

Adds .envrc to .gitignore to prevent local environment files from being committed, improving repository hygiene.

Health Assessment

• • Fast merge with minimal changes and no review friction.

Summary

Load Direct Message Members on Demand

Ensures Direct Messages modal correctly loads group channel members, improving user experience and preventing blank entries.

Health Assessment

• • Fast review cycle with minimal rework; moderate risk due to large scope and new async loading logic.

Summary

Consolidate OpenLDAP runner prep into composite action

Centralizes OpenLDAP runner preparation steps into a reusable composite action, eliminating duplicate logic. This prevents CI failures on Ubuntu 24.04, improving build reliability and reducing maintenance overhead.

Health Assessment

• • Fast review and single commit indicate a straightforward change; moderate risk due to runner-level modifications but isolated to CI configuration.

Summary

Cherry pick of user active endpoint fix

Prevents unauthorized toggling of bot active status by user managers, enhancing security.

Health Assessment

• • Fast automated merge with no review, indicating low complexity and high confidence.

Summary

Document Mattermost cloud startup flow

Adds documentation and environment setup for the Cursor Cloud Agent, enabling developers to quickly spin up a Mattermost instance in the cloud with pre‑configured Docker images and scripts.

Health Assessment

• • The PR was merged within 1.6 hours after a single review, indicating straightforward additive changes. The presence of Cursor AI and CodeRabbit AI in the commit history shows automated generation of environment files and documentation, reducing manual effort.

Summary

Update jira prepackaged version

Bumps the prepackaged Jira plugin from v4.5.0 to v4.7.0, ensuring compatibility with the latest plugin features.

Health Assessment

• • Quick cherry‑pick with minimal changes, no review friction, and a straightforward plugin version bump.

Summary

Update latest patch version to 11.6.3

Automated version bump for release pipeline, ensuring consistency across backend and webapp dependencies.

Health Assessment

• • Automated PR with minimal changes, merged quickly with no review friction.

Summary

Cherry pick of global session revocation fix

Applies session cache invalidation logic to global session revocation, ensuring WebConn sessions are cleared.

Health Assessment

• • Cherry pick of a bug fix merged after a quick review but had a long cycle time due to release scheduling.

Summary

Cherry pick of global session revocation fix

Applies session cache invalidation logic to global session revocation, ensuring WebConn sessions are cleared consistently.

Health Assessment

• • Cherry pick of a bugfix was merged after a long cycle time, but with minimal review friction.

Summary

Bumping prepackaged gitlab version to 1.12.2

Updates the bundled GitLab component to version 1.12.2, ensuring compatibility and security fixes for GitLab integration.

Health Assessment

• • The PR had a long review cycle, likely due to release branch context, but the change was minimal and low risk.

Summary

Bumping prepackaged gitlab version to 1.12.2

Updates the bundled GitLab version to 1.12.2, ensuring compatibility and security updates for the platform.

Health Assessment

• • Long review cycle indicates delayed feedback; minimal code change suggests low risk.

Summary

Update latest patch version to 11.5.6

Automated update of the version number to 11.5.6, ensuring the release pipeline reflects the correct patch level.

Health Assessment

• • Quick automated PR with minimal changes, merged within 1.3 hours, indicating efficient release process.

Summary

Update latest patch version to 10.11.18

Updates the Mattermost server to version 10.11.18, ensuring the latest bug fixes and security patches are applied.

Health Assessment

• • Automated release pipeline quickly updated the version with minimal changes, indicating a streamlined process.

Summary

Add Session field to Subject

Adds a Session field to the Subject model, enabling future enterprise features that rely on session data while maintaining backward compatibility and preventing build failures.

Health Assessment

• • Quick fix with minimal changes, no review friction, low risk.

Summary

Implement masked visual AST API handler

Adds secure attribute value masking for policy editors, preventing sensitive data exposure.

Health Assessment

• • Significant rework after review with multiple AI-assisted commits; complex masking logic introduces moderate to high risk of regression.

Summary

Upgrade Go toolchain to 1.26.2

Upgrades the Go toolchain and related dependencies, applies modernizer fixes, updates image fixtures, and resolves vet bugs, improving build stability and compatibility.

Health Assessment

• • The PR required extensive review and multiple iterations, indicating complexity. The Go upgrade touches many parts of the codebase, including tests and image handling, raising regression risk. The long cycle time suggests coordination challenges.

Summary

Wrap sqlx.DB instead of embedding

Exposes helper methods to route to sqlx.DB, improving timeout handling and reducing direct DB access errors, enhancing reliability of data‑access layers.

Health Assessment

• • Multiple review cycles and rework indicate complexity, but the PR closed in under 20 hours, showing efficient collaboration and rapid resolution of issues.

Summary

Increase PostgreSQL statistics target for posts

Improves query planner accuracy during bulk imports and thread-heavy operations, reducing latency and boosting throughput.

Health Assessment

• • Fast review cycle with minimal changes; AI-generated comment provided release notes.

Summary

Fix TestCreatePost shared DM/GM subtests

Improves test reliability by ensuring feature flag isolation, preventing flaky tests due to environment variable overrides. No impact on production code.

Health Assessment

• • Quick review and minimal changes led to a low-friction, small-scope PR that was merged after a long cycle time, likely due to scheduling or backlog.

Summary

Add mixed channel notice to policy editor

Provides admins with clear guidance on channel type implications, reducing misconfiguration and improving user experience.

Health Assessment

• • Fast review cycle with minimal rework, AI-assisted comments, moderate scope, low friction

Summary

Fix invite modal autocomplete clipping

Restores proper visibility of the invite modal autocomplete dropdown and ensures long inputs stay within modal width, fixing a regression.

Health Assessment

• • Fast cycle time and minimal rework; AI-assisted code generation helped resolve the regression quickly.

Summary

Explicit noTimeoutContext for schema dump queries

Ensures schema dump operations are not subject to client‑side timeouts, improving reliability of diagnostic support packets.

Health Assessment

• • Quick approval with minimal changes indicates low complexity and high confidence in the fix.

Summary

Fix flaky TestCreatePost upload_file subtests

Improves test reliability by isolating permission changes to prevent race conditions in parallel API tests, ensuring consistent behavior without affecting production code.

Health Assessment

• • The PR received a quick review with minimal comments and no subsequent commits, indicating low review friction. The long cycle time was largely due to scheduling rather than complexity. Overall risk is low as the change touches only test code.

Summary

Gate flaky PR comments on recovered retries

Reduces CI noise by only posting flaky test comments when all retries pass, improving clarity for contributors.

Health Assessment

• • Single small change to CI workflow, quick initial review, a later change request but no further commits; overall process was straightforward and low risk.

Summary

Update prepackaged GitHub plugin to v2.7.1

Updates the prepackaged GitHub plugin to the latest patch version, ensuring compatibility and bug fixes without affecting existing functionality.

Health Assessment

• • Quick, single-commit PR with no review delays, minimal scope and risk.

Summary

Update NOTICE.txt with new dependency attributions

Adds attribution entries for newly added third‑party packages, ensuring compliance and transparency without affecting runtime behavior.

Health Assessment

• • Rapid merge with minimal review, indicating low complexity and high confidence in automated compliance update.

Summary

Update API documentation for consistency

Improved API documentation to align with current implementation, reducing integration errors.

Health Assessment

• • The PR had a long cycle time and multiple review rounds with AI-generated feedback, indicating significant rework and potential integration risk.

Summary

Add Azurite to test infrastructure

Integrates the Azure Blob Storage emulator into the development and CI docker‑compose stack, enabling Blob Storage tests to run locally without an Azure account.

Health Assessment

• • Fast review (18 min) and single commit indicate low complexity; the change is a small dev‑ops tweak adding a service to the existing docker‑compose stack.

Summary

Update E2E test workflows and workers

Improves CI test reliability and reporting by updating context names, server images, and increasing Playwright workers.

Health Assessment

• • Merged within an hour with no rework; minimal changes to CI workflows and low risk to production

Summary

Mark autotranslation tests as fixme for CI

Quickly skip failing autotranslation tests in CI to keep pipeline green while addressing them separately.

Health Assessment

• • Fast cycle time of 0.9h, minimal changes, no impact on production code.

Summary

Order-tolerant Shared Channel plugin attachment API

Enables plugin remote posts to deliver attachments in any order or concurrently, preventing duplicate records and improving reliability for shared channel integrations.

Health Assessment

• • Rapid cycle with multiple commits and review rounds indicates active rework; AI-generated release notes suggest automation support.

Summary

Fix autocomplete clipping when RHS is open

Improves post autocomplete menu positioning so it clamps to the nearest horizontally clipping container, keeping suggestions visible when the right-hand sidebar is open.

Health Assessment

• • PR took over 10 days to merge, with a single round of changes after review, indicating a slow but straightforward fix. AI tools were used to author and review the code, but the change is limited to UI positioning logic with low regression risk.

Summary

Fix RHS bot reply header float in compact mode

Corrects visual layout of consecutive bot replies in RHS thread view when compact mode is enabled, ensuring headers display properly. This improves readability and user experience in threaded conversations.

Health Assessment

• • Fast review and minimal changes indicate low complexity and quick resolution.

Summary

Data spillage report generation

Adds a new endpoint to generate and download content flagging reports for flagged posts, enhancing audit and compliance visibility for administrators.

Health Assessment

• • The PR required extensive review and multiple iterations, with AI-generated review comments prompting several commits after the first review. Despite the large scope and complex changes across many layers, the PR was eventually merged after addressing all feedback.

Summary

Block user managers from toggling bot active status

Prevents unauthorized toggling of bot active status by user managers, enhancing security.

Health Assessment

• • Quick cherry pick with no review needed, minimal changes, low risk.

Summary

Fix modal title line-height regression

This fix prevents modal title overflow, ensuring a better user experience in channel notifications.

Health Assessment

• • Quick resolution of a UI regression with minimal code changes and an added e2e test, indicating efficient review and low risk.

Summary

Enhance User Active Endpoint Authorization

Adds stricter permission checks for bot account activation/deactivation, preventing unauthorized user managers from toggling bot status.

Health Assessment

• • The PR required multiple review iterations and several commits to address authorization logic and tests, indicating moderate complexity but was resolved quickly within 16 hours.

Summary

Fix permission for test-system-io actions

Ensures e2e test workflows run without permission errors, maintaining CI reliability.

Health Assessment

• • Rapid resolution with minimal changes, indicating a straightforward permission tweak.

Summary

Add permissions for test-system-io actions

Adds required permissions to CI test workflows, ensuring E2E tests run successfully without impacting application logic.

Health Assessment

• • Rapid review and merge with minimal changes, indicating straightforward CI configuration update.

Summary

Add Test System IO integration for Playwright & Cypress

Enables new CI pipelines that route E2E test dispatch and reporting through Test System IO, allowing reversible rollout via repo variables.

Health Assessment

• • PR involved extensive CI workflow changes and multiple rework iterations, leading to a slow cycle time and high risk of pipeline regressions.

Summary

Preserve sender file ID in shared channel attachments

Fixes a bug where file attachments synced via shared channels were stored with new IDs, causing them to be missing from posts. Ensures attachments appear correctly for users.

Health Assessment

• • Rapid approval and minimal changes indicate low complexity and risk.