Commit Graph

3409 Commits

Author SHA1 Message Date
Émile Ré
6e836d42f8 Add UI rules
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-04-07 11:38:57 +04:00
Émile Ré
9b473b27c2 Fix invisible drag line on Safari
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-04-06 19:18:09 +04:00
Émile Ré
f9b0132614 Release v0.162.0
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-04-06 16:31:15 +04:00
Émile Ré
ad326224b3 Fix inline code rendering and error handling consistence
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-04-06 16:01:51 +04:00
Émile Ré
23eaa4ce24 Fix lint
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-04-06 15:35:58 +04:00
Émile Ré
f7e41c7f24 Update mcp types.newDocumentVersion signature - panic from body
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-04-06 15:22:39 +04:00
Émile Ré
6d2e9dbe19 Update MCP to handle markdown for all document content tools + fix converter edge case for code fence closing
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-04-06 15:13:39 +04:00
Émile Ré
24a9459fb9 Move tests to dedicated file for html converter
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-04-06 15:13:39 +04:00
Émile Ré
5280898eb9 Implement prosemirror markdown renderer
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-04-06 15:13:38 +04:00
Émile Ré
ab33285c9c Rename files for clarity
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-04-06 15:13:38 +04:00
Bryan Frimin
660567f894 Fix permission error for CD
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-04-06 12:26:38 +02:00
Bryan Frimin
16dce23553 Release v0.161.2 2026-04-06 12:12:12 +02:00
Bryan Frimin
893d4f674e Fix CD pipeline
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-04-06 12:08:41 +02:00
Émile Ré
e062ef5676 Release v0.161.1
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-04-06 13:52:34 +04:00
Émile Ré
e4dbf9e2bb Remove --max-warnings from lint scripts
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-04-06 13:33:51 +04:00
Émile Ré
c00b260cef Fixes
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-04-06 13:22:51 +04:00
Émile Ré
08847d9dc5 Fix measure Id missing for evidence dialog
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-04-06 12:32:57 +04:00
Bryan Frimin
acf5913d6c Rollback to GHA runner
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-04-04 14:07:57 +02:00
Bryan Frimin
5215d0eed8 Trigger CI
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-04-04 14:00:28 +02:00
Bryan Frimin
7e685a2e96 Rewrite CI/CD pipeline
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-04-03 20:14:38 +02:00
Sacha Al Himdani
c9af5620a9 Release v0.161.0
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2026-04-03 18:04:49 +02:00
Sacha Al Himdani
ef2e99d86c Add measure-document linking
Introduce the ability to link measures to documents, following the
existing pattern used by controls and risks. This includes:

- Database migration for measures_documents join table
- Coredata MeasureDocument struct with insert/delete operations
- Document service methods for listing/counting by measure ID
- Measure service CreateDocumentMapping/DeleteDocumentMapping methods
- Cleanup of measure-document mappings on document archive
- GraphQL mutations, inputs, payloads, and Measure.documents field
- DocumentConnection.TotalCount support for measure resolver
- MCP linkMeasure/unlinkMeasure updated to support documents
- MCP listMeasureDocuments tool
- Frontend MeasureDocumentsTab with LinkedDocumentsCard integration
- Authorization actions for measure document mapping
- E2e tests for measure document mapping

Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2026-04-03 17:51:31 +02:00
Sacha Al Himdani
8de7add203 Exclude approved-without-signature documents from employee approvals
Filter out approval decisions where state is APPROVED but
electronic_signature_id is NULL, removing historical approved
entries that lack an electronic signature from the employee
approvals page.

Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2026-04-03 17:38:28 +02:00
Sacha Al Himdani
2b377a22e7 Sort employee signatures and approvals by most recently updated
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2026-04-03 17:38:28 +02:00
Sacha Al Himdani
b610a19b84 Remove no-changes guard from document version publish
Allow publishing a document version even when the content and title
are identical to the current published version.

Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2026-04-03 17:27:15 +02:00
Bryan Frimin
9bbeb6bd22 Release v0.160.2 2026-04-03 17:24:28 +02:00
Bryan Frimin
7bee5f27d2 Fix SCIM sync
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-04-03 17:21:08 +02:00
Émile Ré
8ba334160e Release v0.160.1
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-04-03 19:02:21 +04:00
Émile Ré
11a96633ec No need for saferedirect on known connectors
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-04-03 18:53:02 +04:00
Émile Ré
60f968fa07 Release v0.160.0
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-04-03 18:32:03 +04:00
Émile Ré
a5d7630b9c Update release promp
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-04-03 18:18:10 +04:00
Émile Ré
d82ff8267e Revert change to allow for relative links
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-04-03 17:21:47 +04:00
Émile Ré
9ebb86ab37 Review fixes
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-04-03 17:11:48 +04:00
Émile Ré
b9d7beb22c Change import for bullet list in rich editor
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-04-03 17:07:35 +04:00
Émile Ré
5359fe9931 Update rich editor style to be lighter and closer to printed doc
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-04-03 17:02:42 +04:00
Émile Ré
6d1a7c846d Add bottom padding to rich editor
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-04-03 17:02:42 +04:00
Émile Ré
f2c39d1741 Update markdown detection to avoid regex
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-04-03 17:02:42 +04:00
Émile Ré
0ac3fd1f75 Handle html in markdown during conversion to prosemirror nodes
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-04-03 17:02:42 +04:00
Émile Ré
2a6845d884 Reimplement ts converter using marked parser
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-04-03 17:02:42 +04:00
Émile Ré
a850b0f77c Move markdown to prosemirror parser in packages
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-04-03 17:02:41 +04:00
Émile Ré
3561a6e0b7 Implement markdown parsing for copy paste
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-04-03 17:02:41 +04:00
Sacha Al Himdani
2543765bb3 Release v0.159.0
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2026-04-03 14:14:54 +02:00
Bryan Frimin
5c2ce9ddec Update e2e config for new LLM settings structure
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-04-03 14:06:31 +02:00
Bryan Frimin
050154ab6a Refactor LLM config into top-level settings
Replace the monolithic agents config with a cleaner structure:
- llm: holds provider credentials and default model settings
- probo-agent: LLM overrides for the probo agent
- evidence-describer: worker config (interval, stale-after,
  max-concurrency) alongside LLM overrides

This makes worker tuning configurable via YAML and env vars
instead of being hardcoded in Go, and separates provider
credentials from per-consumer model settings.

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-04-03 14:06:30 +02:00
Bryan Frimin
0926a8828a Fix migrate cmd
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-04-03 11:56:07 +02:00
Bryan Frimin
f17fb7bf49 Upgrade to kit v0.3.0
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-04-03 11:56:06 +02:00
Sacha Al Himdani
8adf26ad20 Add in-progress state to tasks
Introduce IN_PROGRESS as a new task state between TODO and DONE across
the full stack: database enum, Go backend, GraphQL, MCP, and frontend.

The task state icon now cycles forward on click (TODO → IN_PROGRESS →
DONE → TODO), and the action dropdown provides explicit "Move to"
options for any state transition. The "All" tab supports drag-and-drop
between state sections to change a task's state.

Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2026-04-03 08:33:37 +02:00
Sacha Al Himdani
5c71575ade Override lodash to fix security vulnerabilities
Add npm overrides for lodash and lodash-es to force version 4.18.1,
fixing CVE for code injection via _.template and prototype pollution
via _.unset and _.omit.

Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2026-04-02 18:59:31 +02:00
dependabot[bot]
e6b88e7eec Bump the github-actions group with 12 updates
Bumps the github-actions group with 12 updates:

| Package | From | To |
| --- | --- | --- |
| [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `3.7.0` | `4.0.0` |
| [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3.12.0` | `4.0.0` |
| [anchore/sbom-action](https://github.com/anchore/sbom-action) | `0.22.1` | `0.24.0` |
| [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) | `6.4.0` | `7.0.0` |
| [anchore/scan-action](https://github.com/anchore/scan-action) | `7.3.1` | `7.4.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `6` | `7` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `6` | `8` |
| [docker/setup-compose-action](https://github.com/docker/setup-compose-action) | `1.2.0` | `2.1.0` |
| [docker/login-action](https://github.com/docker/login-action) | `3.7.0` | `4.0.0` |
| [actions/attest-sbom](https://github.com/actions/attest-sbom) | `3` | `4` |
| [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) | `3` | `4` |
| [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) | `b78fbfd8eb982f4802e09a265fb2bc37b3040975` | `e48f9039c82786db50685e8ef7d980b209f06186` |


Updates `docker/setup-qemu-action` from 3.7.0 to 4.0.0
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](c7c5346462...ce360397dd)

Updates `docker/setup-buildx-action` from 3.12.0 to 4.0.0
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](8d2750c68a...4d04d5d948)

Updates `anchore/sbom-action` from 0.22.1 to 0.24.0
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md)
- [Commits](deef08a0db...e22c389904)

Updates `goreleaser/goreleaser-action` from 6.4.0 to 7.0.0
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](e435ccd777...ec59f474b9)

Updates `anchore/scan-action` from 7.3.1 to 7.4.0
- [Release notes](https://github.com/anchore/scan-action/releases)
- [Changelog](https://github.com/anchore/scan-action/blob/main/RELEASE.md)
- [Commits](8d2fce0942...e1165082ff)

Updates `actions/upload-artifact` from 6 to 7
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v6...v7)

Updates `actions/download-artifact` from 6 to 8
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v6...v8)

Updates `docker/setup-compose-action` from 1.2.0 to 2.1.0
- [Release notes](https://github.com/docker/setup-compose-action/releases)
- [Commits](364cc21a5d...8cccb8c14b)

Updates `docker/login-action` from 3.7.0 to 4.0.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](c94ce9fb46...b45d80f862)

Updates `actions/attest-sbom` from 3 to 4
- [Release notes](https://github.com/actions/attest-sbom/releases)
- [Changelog](https://github.com/actions/attest-sbom/blob/main/RELEASE.md)
- [Commits](https://github.com/actions/attest-sbom/compare/v3...v4)

Updates `actions/attest-build-provenance` from 3 to 4
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](https://github.com/actions/attest-build-provenance/compare/v3...v4)

Updates `trufflesecurity/trufflehog` from b78fbfd8eb982f4802e09a265fb2bc37b3040975 to e48f9039c82786db50685e8ef7d980b209f06186
- [Release notes](https://github.com/trufflesecurity/trufflehog/releases)
- [Commits](b78fbfd8eb...e48f9039c8)

---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: anchore/sbom-action
  dependency-version: 0.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: goreleaser/goreleaser-action
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: anchore/scan-action
  dependency-version: 7.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/download-artifact
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: docker/setup-compose-action
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: docker/login-action
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/attest-sbom
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/attest-build-provenance
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: trufflesecurity/trufflehog
  dependency-version: e48f9039c82786db50685e8ef7d980b209f06186
  dependency-type: direct:production
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-02 18:37:23 +02:00
dependabot[bot]
d86bce1a59 Bump ubuntu from d1e2e92 to 186072b
Bumps ubuntu from `d1e2e92` to `186072b`.

---
updated-dependencies:
- dependency-name: ubuntu
  dependency-version: '24.04'
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-02 17:58:35 +02:00