Pull Request Explorer

Summary

Fix telemetry sendBeacon content-type

Ensures client performance telemetry is sent with correct JSON content type, preventing WAF alerts and network bans. Adds unit tests to validate Blob serialization and fallback fetch.

Health Assessment

• • Quick review and merge within 6 hours, minimal rework, low risk due to isolated telemetry module.

Summary

Fix bookmark drag‑and‑drop edge cases

Improves user experience by preventing accidental drag states and unwanted menu openings when bookmarks are limited or overflow is empty.

Health Assessment

• • Quick review and single commit indicate a straightforward bug fix with comprehensive test coverage.

Summary

Add ever-member history lookup for ABAC sync

Introduces a new API to retrieve deduplicated prior member IDs for a channel, enabling ABAC sync to identify ever-members efficiently.

Health Assessment

• • PR required two rounds of review and added a new public API; moderate cycle time and moderate risk due to potential caller impact.

Summary

Fix inflated message count in search results

Corrects the message counter in search results to accurately reflect the number of matching posts, improving user trust and reducing confusion.

Health Assessment

• • Quick, single‑commit fix with minimal code changes and no shared APIs, resulting in a low‑risk, fast turnaround.

Summary

Cherry pick update of Jira prepackaged version

Automated cherry pick of a dependency update, ensuring release consistency.

Health Assessment

• • Fast merge with minimal changes, indicating routine maintenance.

Summary

Cherry pick of session cache invalidation

Adds session cache invalidation on global session revocation, mirroring per-user revocation pattern to improve session consistency.

Health Assessment

• • Merged within 1.3 hours with no rework, indicating a straightforward, low-risk change.

Summary

Expose Default Category Name via Feature Flag

Adds a feature flag to control managed categories and exposes default category name to UI, enabling admins to manage categories more flexibly. This change improves admin control over channel organization while maintaining backward compatibility.

Health Assessment

• • Extensive rework and multiple review cycles suggest high complexity and risk; thorough testing is essential.

Summary

Fix flaky TestPluginAPIUpdateUserPreferences

Improves test reliability by replacing brittle index-based assertions with deterministic category lookups, eliminating flakiness without affecting production code.

Health Assessment

• • Fast review and minimal changes; test-only fix with no production impact.

Summary

Update Jira prepackaged version

Bumps the Jira plugin to version 4.7.0, ensuring compatibility with the latest plugin features without affecting core Mattermost functionality.

Health Assessment

• • Fast approval with minimal changes; small scope and low risk.

Summary

Invalidate WebConn session cache on global revocation

Ensures that global session revocation also clears active WebSocket connections across all nodes, tightening security and preventing stale authenticated connections.

Health Assessment

• • The PR had a long cycle time of nearly 7.5 days but a rapid first review. Multiple review iterations and AI‑assisted comments contributed to a moderate review friction, while the large code change and regression risk elevate overall risk.

Summary

Add root ID to webhook requests

Enables incoming webhooks to post replies in threads by specifying a root ID, improving integration flexibility.

Health Assessment

• • PR required multiple iterations after initial review, but overall cycle time under 3 days, indicating efficient resolution.

Summary

Add eager loading import for server AGENTS

Ensures server-level AI agent instructions are loaded at session start, improving context consistency.

Health Assessment

• • Quick review and minimal changes indicate low complexity and high confidence in documentation update.

Summary

Extract buttonClassNames utility for button styling

Refactors button styling logic into a reusable utility, improving maintainability and consistency across the admin console.

Health Assessment

• • The PR had a slow review cycle and required a change request, indicating moderate complexity and potential for visual regression risk.

Summary

Add Button to Component Library

Adds a new button component to the UI library, enabling consistent styling and interaction across the Mattermost web app.

Health Assessment

• • PR was merged within 45 hours with only one review comment, indicating efficient collaboration and low friction.

Summary

Lower default test console log level from stdlog to debug

Reduces test console log spam by changing the default log level to debug, improving CI output clarity without affecting production behavior.

Health Assessment

• • Quick turnaround with minimal changes and no review friction, indicating a straightforward maintenance update.

Summary

Add shared package to STYLE_GUIDE.md

Documentation updates adding shared package references and new AGENTS guide, improving developer onboarding.

Health Assessment

• • Documentation-only PR with minimal changes and quick review, indicating low risk and efficient process.

Summary

Surface Recommended badge in the quick channel switcher

Adds a Recommended badge to quick channel switcher rows for channels that match ABAC policy, enabling users to identify recommended channels instantly without opening Browse Channels, thereby improving onboarding and channel discovery.

Health Assessment

• • The PR was merged within 3.3 hours with a single commit and no review back‑and‑forth, indicating a smooth review process and high confidence in the change.

Summary

Automated cherry pick of #36430

Updates prepackaged GitLab version to 1.12.2, ensuring compatibility and security updates for the release.

Health Assessment

• • Quick automated cherry pick with minimal changes and fast review, indicating low complexity and low risk.

Summary

Update translations from Mattermost Weblate

Translations update for Mattermost/server from Weblate, improving localization support.

Health Assessment

• • The PR had a fast review time and low risk due to being purely localization updates.

Summary

Update interdependency between packages to 11.8.0

Bumps shared package to 11.8.0 to resolve version mismatch, ensuring smooth integration and preventing potential build failures.

Health Assessment

• • Quick dependency bump resolved with minimal changes and no review delays.

Summary

Bump prepackaged GitLab plugin to v1.12.2

Updates the bundled GitLab plugin to the latest version, ensuring compatibility and access to new features without changing core functionality.

Health Assessment

• • Fast review cycle with AI-generated release notes; minimal code changes and low risk.

Summary

Enable public channel search by default for new installs

New installations using Elasticsearch/OpenSearch will now see public channels in search results by default, improving discoverability for users without membership. Existing installations remain unaffected.

Health Assessment

• • PR was reviewed quickly with minimal rework, indicating a straightforward change with low complexity.

Summary

Clarify membership policy UI copy

Updated membership policy copy in System Console and public channel settings to be clearer and more concise, improving user understanding of auto‑add behavior.

Health Assessment

• • Quick turnaround with minimal rework; UI copy changes were straightforward and merged within 14 hours.

Summary

Adds experimental label to the views endpoints

Adds an experimental label to seven view endpoints’ OpenAPI descriptions, with no impact on API logic or behavior.

Health Assessment

• • Quick, additive documentation change with immediate review and merge; no code or functional impact.

Summary

Fix admin sidebar category rendering and update link checker

Corrects admin sidebar category component behavior and updates external link checker script, improving UI rendering and CI stability.

Health Assessment

• • S
• • i
• • n
• • g
• • l
• • e
• •
• • c
• • o
• • m
• • m
• • i
• • t
• •
• • w
• • i
• • t
• • h
• •
• • i
• • m
• • m
• • e
• • d
• • i
• • a
• • t
• • e
• •
• • r
• • e
• • v
• • i
• • e
• • w
• •
• • a
• • n
• • d
• •
• • m
• • i
• • n
• • i
• • m
• • a
• • l
• •
• • c
• • o
• • m
• • m
• • e
• • n
• • t
• • s
• •
• • i
• • n
• • d
• • i
• • c
• • a
• • t
• • e
• • s
• •
• • a
• •
• • s
• • m
• • o
• • o
• • t
• • h
• •
• • p
• • r
• • o
• • c
• • e
• • s
• • s
• • ;
• •
• • d
• • e
• • s
• • p
• • i
• • t
• • e
• •
• • a
• •
• • l
• • a
• • r
• • g
• • e
• •
• • c
• • o
• • d
• • e
• •
• • c
• • h
• • a
• • n
• • g
• • e
• • ,
• •
• • t
• • h
• • e
• •
• • f
• • i
• • x
• •
• • i
• • s
• •
• • i
• • s
• • o
• • l
• • a
• • t
• • e
• • d
• •
• • a
• • n
• • d
• •
• • l
• • o
• • w
• •
• • r
• • i
• • s
• • k
• • .

Summary

Tighten authorization on group syncable endpoints

Adds stricter permission checks to group sync endpoints, enhancing security for role management.

Health Assessment

• • PR was merged within 10 hours, showing a quick review cycle. Linter fixes added after the main commit demonstrate a focus on code quality and maintainability.

Summary

Tighten authorization on group syncable link and patch endpoints

Enhances security by adding permission checks for group syncable links and patch endpoints, ensuring only authorized users can access these features.

Health Assessment

• • The PR was merged quickly, indicating a smooth review process.
• • The changes are focused on security enhancements, which is a positive development.

Summary

Tighten authorization on group syncable endpoints

Adds stricter permission checks to group syncable link and patch endpoints, enhancing security for role management.

Health Assessment

• • Fast 10‑hour cycle with a single commit shows efficient resolution; AI‑assisted code generation likely accelerated development.

Summary

Tighten authorization on group syncable endpoints

Enhances security by requiring role-management permission for group sync operations, reducing risk of unauthorized changes.

Health Assessment

• • Fast merge with a single review round indicates the changes were straightforward and low risk.
• • Large code addition suggests significant refactoring, but the quick turnaround implies confidence in the implementation.

Summary

Update latest patch version to 11.7.1

Automated update of patch version for release 11.7.1, ensuring consistency across backend and webapp dependencies.

Health Assessment

• • Fast merge with minimal changes, automated release pipeline, low risk.

Summary

Update latest minor version to 11.8.0

This PR bumps the Mattermost server and webapp component versions to 11.8.0, ensuring consistency across the codebase without changing functionality.

Health Assessment

• • Fast merge with no review needed, indicating automated release pipeline.

Summary

Add job API endpoint and expand test coverage

Adds missing job management API route. Improves test coverage to prevent regressions in job scheduling behavior.

Health Assessment

• • Quick review and minimal rework; PR merged within 58 hours with only two commits and a single changes_requested review, indicating a straightforward bug fix with low complexity.

Summary

Fix Data Spillage reviewer pill background in dark mode

The Reviewer field pill on the Data Spillage review card now renders correctly in dark themes.

Health Assessment

• • The PR was reviewed and merged quickly, indicating a straightforward fix.
• • The change is isolated to a single component and has a low risk of unintended side effects.

Summary

Fix concurrent update conflicts in migration

Addresses race conditions in content flagging migration, improving reliability in HA deployments and parallel CI tests.

Health Assessment

• • Quick fix with minimal changes, fast review, low risk.

Summary

Extend GetJobsByTypeAndData test coverage

Improves reliability of job retrieval logic by covering edge cases, reducing potential bugs in production.

Health Assessment

• • Quick merge with minimal changes indicates low complexity and high confidence in test coverage.

Summary

Cherry pick of group sync authorization fix

Applies tightened authorization checks to group sync endpoints, improving security for role‑management operations.

Health Assessment

• • Fast merge with minimal review, indicating an automated cherry pick of a security fix with straightforward implementation.

Summary

Remove unused GetChannelCounts channel store API

Eliminates unused channel count functionality, simplifying the codebase. Reduces maintenance overhead and potential bugs.

Health Assessment

• • PR had a long cycle time but quick review; minimal rework; clean removal of dead code.

Summary

Clarify PR template rules in AGENTS.md

Documentation update clarifies PR template usage, reducing ambiguity for contributors.

Health Assessment

• • Quick review and merge with minimal changes, indicating low complexity and high confidence.

Summary

Upgrade build images to Go 1.26.2

Updates build images to use Go 1.26.2, enabling toolchain upgrade.

Health Assessment

• • Fast cycle time of 2.1 hours, single review with minimal comments, small code change, low risk.

Summary

Automated cherry pick of #36417

Automated cherry pick of the Agents plugin FIPS version update to v2.0.3 for release 11.7, ensuring consistency across releases.

Health Assessment

• • Fast merge with minimal changes, indicating low complexity and high confidence in the change.

Summary

Surface RPC errors from plugin hooks

Adds companion methods to plugin hooks that return an explicit RPC error, enabling callers to distinguish transport failures from normal no‑op responses and improving reliability of plugin interactions.

Health Assessment

• • The PR was merged quickly (13.5h) but required several review rounds and many commits, indicating significant rework; AI‑assisted review likely accelerated the process.

Summary

Focus mobile search box only on search open

Ensures the mobile search input auto‑focuses only when the search RHS is opened, preventing unintended focus on other RHSes and improving the mobile user experience.

Health Assessment

• • Fast review (0.1h) and minimal changes (80 lines) led to a quick merge with low risk and small scope.

Summary

Tighten authorization on group syncable link and patch endpoints

Adds stricter permission checks to group syncable link and patch endpoints, ensuring only users with role‑management or sysconsole groups‑management permissions can modify syncable settings, reducing risk of unauthorized changes.

Health Assessment

• • The PR had a rapid review cycle thanks to AI‑generated comments, but the overall development period was long, and the change touches critical authorization logic with large code churn, elevating risk despite low review friction.

Summary

Update Agents plugin FIPS version to v2.0.3

Brought the latest FIPS‑compliant Agents plugin to the server, ensuring compliance with security standards and providing users with a secure, updated plugin.

Health Assessment

• • Rapid review and merge with minimal changes; low risk and high confidence in stability.

Summary

Add AttributeValueMasking flag and HasMaskedValues field

Introduces a feature flag to control masking of attribute values in policy conditions, enabling clients to opt‑in to see masked values and enhancing data privacy controls.

Health Assessment

• • Merged in 14 hours with no review friction and minimal code changes, indicating a straightforward, low‑risk enhancement.

Summary

Automated cherry pick of plugin version bump

Updates the prepackaged Agents plugin to the latest version, ensuring users receive the newest features and bug fixes.

Health Assessment

• • Quick cherry pick with minimal changes, merged within 12 hours, indicating efficient process.

Summary

Apply team invite permission alignment to release

Ensures consistent authorization for team creation invites, matching existing update behavior and strengthening security for new teams.

Health Assessment

• • Quick turnaround with a single review and merge within 12 hours, indicating minimal friction and low risk.