# Changelog All notable changes to this project will be documented in this file. ## Unreleased ## [0.172.1] - 2026-04-22 ### Security - Bump github.com/jackc/pgx/v5 from 5.9.1 to 5.9.2 ## [0.172.0] - 2026-04-22 ### Added - Add missing resources to CLI, MCP, and n8n surfaces - Add cookie detection - Update kit with new pg config ### Fixed - Handle SCIM user email rename via external ID fallback ## [0.171.1] - 2026-04-22 ### Fixed - Add user external id in bridge logs ## [0.171.0] - 2026-04-22 ### BREAKING CHANGES - OAuth2/OpenID Connect authorization server requires a new `probod.auth.oauth2-server` config block with at least one signing key ### Added - Add OAuth2/OpenID Connect authorization server with PKCE, device grant, dynamic client registration, introspection, and revocation - Add cookie banner management UX with cookies catalog, categories, themed banner preview, and publishing workflow - Add cookie banner web components, headless and themed SDK entrypoints, and settings link element - Add approval quorum and decision read tools to MCP, CLI, and n8n - Add global branding config to control cookie banner Probo branding by default ### Changed - Replace implemented boolean column on controls with a CMMI maturity level - Replace data snapshot export with document publish workflow - Replace asset snapshot export with document publish workflow - Prevent the last active owner of an organization from demoting themselves - Deduplicate existing connectors and enforce per-organization uniqueness ### Fixed - Fix SCIM bridge PUT loop and missing pagination - Preserve reviewer decisions and notes on access-entry upsert - Include inactive accounts in access-review fetch - Always send Bearer auth for OAuth2 connectors regardless of returned token_type ### Security - Mitigate SSRF on outbound HTTP client usage - Replace non-constant-time string comparisons in secure cookie and secure token packages - Bump langsmith and override @langchain/classic to fix GHSA-rr7j-v2q5-chgv ### Removed - Remove meeting feature and related tables ## [0.170.0] - 2026-04-17 ### Added - Add @probo/cookie-banner SDK package scaffold - Add webhook subscription MCP tools and N8N operations ### Fixed - Preserve shared connector on SCIM disconnect - Handle NotFound and NotPublished errors in document resolvers ## [0.169.1] - 2026-04-16 ### Fixed - Fix Profile email field in n8n-node GraphQL queries ## [0.169.0] - 2026-04-16 ### Changed - Add SOA as document: replace export/snapshot with publish workflow ## [0.168.2] - 2026-04-15 ### Added - Enforce unicity of draft/pending document version in DB ## [0.168.1] - 2026-04-15 ### Added - Add document filters to MCP and n8n APIs ### Fixed - Filter people with ended contracts from signature request dialog ## [0.168.0] - 2026-04-15 ### Fixed - Align risk severity across views - Set cookie secure flag to false in dev config - Fix risk controls tab missing pagination ### Changed - Split GraphQL schemas into per-entity files - Consolidate document draft management into updateDocument - Replace document properties drawer with inline details card ## [0.167.0] - 2026-04-14 ### Added - Add LLM model registry with OpenRouter auto-generation - Improve connectors ## [0.166.0] - 2026-04-13 ### Added - Add membership and host to user webhook payload - Add document resource to n8n node and MCP sendSigningNotifications tool - Add document CLI commands - Add CookieBanner service and models ### Fixed - Fix missing fields in MCP type serializers ## [0.165.3] - 2026-04-10 ### Fixed - Fix MCP data owner serialization and document ordering ## [0.165.2] - 2026-04-10 ### Fixed - Fix MCP snapshot issues for SOA and vendors ### Changed - Move document title ownership from document to version ## [0.165.1] - 2026-04-09 ### Fixed - Fix registration unavailable page for authenticated users ## [0.165.0] - 2026-04-09 ### Fixed - Show registration unavailable page when signup is disabled ### Changed - Change document approval workflow ## [0.164.0] - 2026-04-09 ### Fixed - Fix famework_id filer ### Changed - Rename State of Applicability to Statement of Applicability - Validate document content length by extracted text, not JSON size ## [0.163.2] - 2026-04-08 ### Added - Add prosemirror markdown renderer for MCP document content tools ### Changed - Connector OAuth2 refactor ## [0.163.1] - 2026-04-07 ### Fixed - Fix mcp task creation priority ## [0.163.0] - 2026-04-07 ### Changed - Improve list handling and backspace behavior in rich editor ## [0.162.1] - 2026-04-07 ### Fixed - Fix invisible drag line on Safari in rich editor ## [0.162.0] - 2026-04-06 ### Added - Add prosemirror markdown renderer for MCP document content tools ### Fixed - Fix permission error for CD ## [0.161.2] - 2026-04-06 ## [0.161.1] - 2026-04-06 ### Fixed - Fix measure ID missing for evidence dialog ## [0.161.0] - 2026-04-03 ### Added - Add measure-document linking ### Changed - Sort employee signatures and approvals by most recently updated - Remove no-changes guard from document version publish - Exclude approved-without-signature documents from employee approvals ## [0.160.2] - 2026-04-03 ### Fixed - Fix SCIM sync ## [0.160.1] - 2026-04-03 ### Fixed - Fix OAuth connector redirect not requiring safe redirect for known providers ## [0.160.0] - 2026-04-03 ### Added - Add markdown copy-paste support in rich text editor ### Changed - Update rich editor style to be lighter and closer to printed documents ## [0.159.0] - 2026-04-02 ### Added - Add access review - Add in-progress state to tasks ### Fixed - Allow logo to take doc width ## [0.158.0] - 2026-04-02 ### Added - Add task priority enum - Add UNKNOWN and NOT_IMPLEMENTED measure states - MCP takes markdown input for document version content ## [0.157.0] - 2026-04-01 ### Added - Add rich text editor for documents with TipTap (tables, links, mermaid diagrams, slash commands, auto-save) Migration of existing documents should be done running `cmd/migrate-document-versions-markdown/main.go -pg-dsn `. - Add prosemirror-based PDF rendering for documents - Add migration command for document version markdown-to-prosemirror conversion ### Changed - Remove version update dialog in favor of inline editing ### Fixed - Fix create draft condition and delete draft connections handling - Fix document creation request validation ## [0.156.1] - 2026-04-01 ### Fixed - Split employee document policy from core document actions ## [0.156.0] - 2026-03-31 ### Changed - Unify dropzone accept prop ### Added - Add document classification filter ### Fixed - Add session transfer for SSO cookies on custom domains ## [0.155.0] - 2026-03-31 ### Added - Add major.minor document versioning ### Fixed - Fix compliance page login redirect to custom domains ## [0.154.2] - 2026-03-30 ### Added - Add reusable agent guardrails for prompt injection and data leaks ### Fixed - Add ability to disconnect Slack channel from compliance page ## [0.154.1] - 2026-03-30 ### Fixed - Fix goreleaser snapshot ## [0.154.0] - 2026-03-30 ### Added - Add document approval workflow - Add task priority ### Fixed - Fix duplicate organization name returning internal error - Distinguish expired magic links from invalid tokens ## [0.153.2] - 2026-03-26 ### Fixed - Mark failed evidence descriptions instead of retrying ## [0.153.1] - 2026-03-26 ### Fixed - Fix file MIME type lookup for evidence description generation ## [0.153.0] - 2026-03-26 ### Added - Add AI-powered evidence description generation ### Fixed - Fix batch signature dialog wording - Fix empty search_engine_indexing on trust centers ## [0.152.0] - 2026-03-25 ### Added - Add GraphQL dataloaders for batched record lookups - Check CAA records before ACME certificate issuance ### Fixed - Fix Microsoft OIDC token exchange auth style - Fix SCIM bridge updating all users on every sync - Fix ACME challenge retry to create fresh orders ## [0.151.0] - 2026-03-24 ### Added - Add SEO controls and sitemap for compliance pages ### Changed - Allow editing non-SCIM fields on SCIM-managed profiles ## [0.150.0] - 2026-03-23 ### Added - Add OIDC login support for Google and Microsoft providers - Add per-email sender name for compliance page emails - Add audit log feature for recording all actions ## [0.149.0] - 2026-03-20 ### Changed - Use actual MIME type for trust center file exports ### Fixed - Fix trust center SPA asset loading on custom domains ## [0.148.0] - 2026-03-20 ### Added - Add MCP audit report metadata and getAuditReportUrl tool - Add Homebrew tap publishing for prb CLI ### Fixed - Fix measure category filter not applying on initial page load ## [0.147.0] - 2026-03-20 ### Added - Add /llms.txt endpoint to trust center compliance page - Add context page with organization context and meetings tabs - Allow skipping confirmation email when adding mailing list subscribers - Support developer-specific env vars in sandbox provisioning ### Changed - Rename Vendor to Subprocessor in trust API surface - Improve pagination performance for findings, obligations, and measures ### Fixed - Fix unvalidated URL redirection in HTTP redirects - Fix measure breadcrumb category filter ## [0.146.1] - 2026-03-19 ### Fixed - Fix SAML ACS endpoint CORS rejection ## [0.146.0] - 2026-03-19 ### Added - Add document archiving - Add fulltext search to measures page - Add document types filtering ### Changed - Rename ISMS to GOVERNANCE ### Fixed - Fix owner deletion by qualifying ambiguous tenant_id column - Fix organization profile using owner's full name instead of org name - Fix measure count queries missing category column - Clamp pagination size ## [0.145.0] - 2026-03-19 ### Added - Add unified findings system with GraphQL, MCP, and CLI support - Add PDF dropzone to audit list for streamlined report upload - Add dynamic favicon for trust center - Add SSR for compliance page with dynamic title and meta tags - Add cross-origin protection for CSRF defense - Add file visibility (PRIVATE/PUBLIC) and public files API ### Changed - Rename NONCONFORMITY to MINOR_NONCONFORMITY and add MAJOR_NONCONFORMITY ### Fixed - Fix race condition in magic link token verification - Fix sandbox provisioning issues - Fix CLI URL scheme handling with http:// addresses - Fix NDA file display on page reload - Fix audit report buttons visibility when no file attached - Fix drag-and-drop issues in audit list dropzone ## [0.144.0] - 2026-03-17 ### Added - Add implemented state and justification to controls - Add release guide documentation - Add Lima sandbox environment for parallel feature testing ## [0.143.0] - 2026-03-16 ### Added - Add CLI - Add validation to mailman service ### Fixed - SCIM provisioning failure when enrolling existing manual users due to stale external_id conflicts - SCIM reset not clearing external_id and user_name on profiles ## [0.142.2] - 2026-03-13 ### Fixed - Compliance page member provisioning for already signed in identities - Compliage page request all callback redirection ## [0.142.1] - 2026-03-13 ### Fixed - Fix documents UI - Fix refetch after publication - Add nda warning to new compliance update modal - Autosubmit mailing list confirmation ## [0.142.0] - 2026-03-12 ### Added - Support for mermaid in markdown ### Fixed - Account activation redirection flow improved - Compliance updates improvements: display, public ## [0.141.0] - 2026-03-11 ### Added - Add compliance page mailing list ## [0.140.0] - 2026-03-11 ### Added - Support for MS SCIM and Google bridge update - Account activation flow from document signing request email link ### Changed - CI improvements - Removal of unused table and columns - Removed adhoc token authentication for document signing and related pages ## [0.139.0] - 2026-03-11 ### Added - Add social links on compliance page ### Changed - Fix person update ### Fixed - Update vendor compliance report UI ## [0.138.2] - 2026-03-10 ### Fixed - Profiles filter should filter user with console/employee membership by default in console/employee APIs ## [0.138.1] - 2026-03-10 ### Changed - CP framework badges name display ## [0.138.0] - 2026-03-10 ### Changed - Improve mailer performance ### Fixed - Display empty state for soa control assessment - Fix compliance report ## [0.137.3] - 2026-03-05 ### Fixed - Fix trust center access SQL queries SELECT clauses ## [0.137.2] - 2026-03-05 ### Fixed - Compliance page full name unified handling through identities and profiles ## [0.137.1] - 2026-03-05 ### Fixed - Compliance page request all callback page refresh ## [0.137.0] - 2026-03-04 ### Added - Compliance page frameworks ordering and display toggling ### Fixed - Cmopliance page connect redirection fix for existing identities ## [0.136.0] - 2026-03-04 ### Added - continue URLs for compliance page for better access request flow - enforce NDA signature with explicit API error catched in error boundary ### Changed - framework display name on compliange page org sidebar ## [0.135.1] - 2026-03-03 ### Fixed - fix: add trust-center config section to entrypoint.sh ## [0.135.0] - 2026-03-03 ### Added - Add delete vendor tool on mcp ## [0.134.3] - 2026-03-03 ### Fixed - Use default filter with no snapshot for mcp ## [0.134.2] - 2026-03-02 ### Fixed - Fix CVEs by updating go and open telemetry ## [0.134.1] - 2026-03-02 ### Fixed - Fix n8n get many organizations ## [0.134.0] - 2026-02-27 ### Added - Display audit name in compliance page - Add obligation webhooks - Add user webhooks ## [0.133.0] - 2026-02-26 ### Added - Add mcp control links ## [0.132.0] - 2026-02-25 ### Added - Add vendor risk assessment to mcp - Add risk and measure mcp tools ### Fixed - Fix long pdf exports ## [0.131.2] - 2026-02-24 ### Fixed - Fix mcp list tools returns badly encoded jsonschema - Fix compliance page show unpblished document title - Fix compliace page show unpublished document ## [0.131.1] - 2026-02-23 ### Fixed - Fix infinit redirect when NDA not configured ## [0.131.0] - 2026-02-23 ### Added - Add SOA MCP tools - Electronic signature for compliace page NDA - Add vendor contacts to n8n - Add soa risk assement via document - Allow more permissive bracket validations ### Fixed - Fix n8n get many organization 4xx errors - Fix auditor access to people - Fix no link button when list is empty - Fix obligation type not updated ## [0.130.3] - 2026-02-20 ### Fixed - Add mcp bearer header ## [0.130.2] - 2026-02-20 ### Fixed - Fix MCP authentication error ## [0.130.1] - 2026-02-20 ### Fixed - CreateUser sets profile EmailAddress field - Invitation GraphQL type fix: remove organization & user fields ## [0.130.0] - 2026-02-20 ### Added - Add processing activities to mcp ## [0.129.3] - 2026-02-19 ### Fixed - Console org dropdown query ## [0.129.2] - 2026-02-19 ### Added - Add access to SOA for auditor ## [0.129.1] - 2026-02-19 ### Fixed - Do not display inactive profiles on iam home page - Fix profile update additional email addresses coalesce missing ## [0.129.0] - 2026-02-19 ### Added - n8n operations for users (profiles) - MCP operations for users (profiles) - SCIM user title synchronization ### Changed - Dropped minio in favor of seaweedFS - Profile data model linked to org and identity instead of membership - Moved state and source on profiles instead of memberships - Refactored invitations into account activations ## [0.128.0] - 2026-02-17 ### Added - Add audit n8n nodes - Add delete measure to mcp ## [0.127.1] - 2026-02-17 ### Changed - Remove deprecated SOA ## [0.127.0] - 2026-02-17 ### Changed - Change single document owner to multiple approvers ## [0.126.1] - 2026-02-16 ### Added - Add delete tasks to mcp ## [0.126.0] - 2026-02-16 ### Fixed - Fix deployment ## [0.125.0] - 2026-02-16 ### Added - Add delete risks to mcp - Add meetings to mcp ## [0.124.3] - 2026-02-16 ### Fixed - Fix missing risk validations ## [0.124.2] - 2026-02-16 ### Fixed - Display control description - Change download button text while loading in compliance page ## [0.124.1] - 2026-02-16 ### Fixed - Fix control order in SOA - Fix saml subject not populated ## [0.124.0] - 2026-02-13 ### Added - Add webhooks ## [0.123.3] - 2026-02-13 ### Fixed - Fix missing name id format for idp initiated SAML request ## [0.123.2] - 2026-02-13 ### Fixed - Fix SAML subject must not be updated - Fix SAML subject not set on first login ## [0.123.1] - 2026-02-13 ### Fixed - Fix missing NameID format information in SAML metadata ## [0.123.0] - 2026-02-12 ### Changed - Upgrade Postgres to 18.1 - IAM: Migrate people into profiles ## [0.122.0] - 2026-02-12 ### Added - Redirect to previous location on authentication or assumption needed ## [0.121.1] - 2026-02-11 ### Fixed - Fix Google Workspace SCIM bridge does not set active state at creation - Fix compliance page access request was not active by default - Fix compliance page request access add non request file to the requested one ### Security - Update javascript dependencies ## [0.121.0] - 2026-02-10 ### Added - Add user exclusion management to the Google Workspace bridge ### Changed - Improve compliance page access management UX ### Fixed - Remove noisy error log from slack queue message ## [0.120.0] - 2026-02-09 ### Added - Suport all vendors fields on mcp ### Fixed - Fix duplicate assessments ## [0.119.1] - 2026-02-09 ### Security - Upgrade go to 1.25.7 ## [0.119.0] - 2026-02-05 ### Added - Add member n8n actions ### Fixed - Fix controls for CFR framework - Fix missing `trace_id` on resolver logs ## [0.118.2] - 2026-02-05 ### Fixed - Noisy TLS errors are filtered from logs - Use s3 presigned URLs for email assets ### Changed - Safer docker ubuntu image version with digest - Safer github actions versions with digest - Redirect already authenticated user on compliance page home when trying to log in ## [0.118.1] - 2026-02-04 ### Fixed - Fix column reference "full_name" is ambiguous ## [0.118.0] - 2026-02-04 ### Added - Add HDS framework - Add 21 CFR Part 11 framework ### Changed - Serve email static assets from object store - Rework the UI of vendor row on compliance page - Update auth layout on console and compliance page to remove right panel ### Fixed - Fix create organization node ### Security - Fix npm vulnerabilities ## [0.117.3] - 2026-02-03 ### Fixed - Fix n8n node cannot fetch many organizations. - Fix SCIM disable all non SCIM members. ## [0.117.2] - 2026-02-02 ### Fixed - Missing logo - Static handler cache headers handling ## [0.117.1] - 2026-02-02 ### Changed - Use svg for slack logo ### Fixed - Missing google logo - Missing relay generated files ## [0.117.0] - 2026-02-02 ### Added - Google Workspace to SCIM bridge - Compliance page logo branding ### Fixed - Memberships page conditional display of search input ### Security - Upgrade go dependencies ## [0.116.15] - 2026-01-31 ### Fixed - Console slack connection placeholder display fix ## [0.116.14] - 2026-01-30 ### Fixed - Slack compliance page access display name empty case - Compliance page API file access check fix + granular error handling ### Security - Upgrade go to 1.25.6 ## [0.116.13] - 2026-01-30 ### Fixed - Misplaced dependabot.yaml file is making CI fail ## [0.116.12] - 2026-01-29 ### Changed - Do not display trust center subprocessors tab when there are none - Remove query params from compliange page sidebar website displayed URLs - Refactor trust center pages to make them more maintainable - Rename Trust Center to Compliance Page on displayed wording - Compliance page vite dev server proxies graphQL API calls to go server port ### Fixed - Add noreferrer noopener to compliance page open link from console ## [0.116.11] - 2026-01-27 ### Added - CI Test analytics with junit results format - CI performance improvements with caching - Extend dependabot to all dependencies ### Fixed - AWS path style s3 option for Docker image entrypoint - Console signatures counts - Console signatures requests notifications ## [0.116.10] - 2026-01-23 ### Added - New up to date linting rules for TS codebase ### Changed - Refactor SOA - Dropped prettier - Updated eslint related dependencies - Ignore new TLS errors in logs ### Fixed - otel utf8 errors ## [0.116.9] - 2026-01-21 ### Fixed - Document signing authentication is still done with token - SOA permissions handling + tenant scoping ## [0.116.8] - 2026-01-20 ### Changed - Revert revert console graphql endpoint ## [0.116.7] - 2026-01-20 ### Fixed - n8n app calls by reverting console graphql endpoint ## [0.116.6] - 2026-01-20 ### Fixed - n8n http request options URL ## [0.116.5] - 2026-01-20 ### Fixed - Console invitationResolver.Organization authorize check ## [0.116.4] - 2026-01-19 ### Changed - Clean child sessions in IAM memberships migration ## [0.116.3] - 2026-01-19 ### Fixed - IAM memberships migration for entity ID ## [0.116.2] - 2026-01-19 ### Changed - Membership Profile authz done from membership in membershipResolver (it's a 1:1 association) - Match keycloak URL ports with default base URL one for local dev - Drop the authentication dialog in favor of a dedicated auth page for compliance page - Order memberships by organization name on console / and memberships dropdown - Update kit ### Fixed - Missing console react-pdf dependency in package.json - On sign out, clear cookie along with the existing session expiration - Remove conditional rendering of org search input on console - Fix organizations page layout vertical alignment ## [0.116.1] - 2026-01-18 ### Fixed - 5xx on profile loading. ## [0.116.0] - 2026-01-18 ### BREAKING CHANGES - API keys generated with previous versions are no longer compatible. ### Added - Add SCIM provisioning support. - Add magic link authentication. - Add membership disable state. - Add ABAC policy. ### Changed - Filter junk HTTP TLS server errors. - Change API token format. - Add session support to compliance page. ### Fixed - Fix overly strict obligation validation. ## [0.115.0] - 2026-01-15 ### Added - Add processing activity exports ## [0.114.0] - 2026-01-15 ### Added - Add proxy protocol v2 support. ## [0.113.0] - 2026-01-15 ### Added - Add right requests ## [0.112.4] - 2026-01-12 ### Fixed - Fix people in mcp - Fix task display ## [0.112.3] - 2026-01-05 ### Fixed - Fix code blocks in documents - Fix cancel signature permissions ## [0.112.2] - 2025-12-31 ### Fixed - Fix people deletion ## [0.112.1] - 2025-12-31 ### Changed - Change minutes max length ## [0.112.0] - 2025-12-22 ### Added - Add new GDPR registries ### Fixed - Create Slack notification when updating trust center access if no existing message found ## [0.111.2] - 2025-12-19 ### Fixed - Fix trust center nil pointer dereference ## [0.111.1] - 2025-12-19 ### Fixed - Console: framework logo import ## [0.111.0] - 2025-12-18 ### Added - Add ISO 27701 (2025) framework. - Add ISO 42001 (2023) framework. - Add GDPR framework. - Add CCPA framework. - Add NIS2 framework. - Add DORA framework. ## [0.110.2] - 2025-12-17 ### Fixed - Fix azure blob storage ## [0.110.1] - 2025-12-17 ### Fixed - Frameworks logo SVG colors - Framework name displayed in trust center org sidebar ## [0.110.0] - 2025-12-17 ### Added - Add risk vendor risk assesments to n8n ## [0.109.0] - 2025-12-16 ### Added - Add organization filtering - Use in-house logos when importing framework ### Fixed - Unblock ACME provision queue on error - GQLGen version handling with go tool - Fix GraphQL types ## [0.108.0] - 2025-12-15 ### Added - Blacklist emails from trust requests ### Fixed - ACME cert renewing ## [0.107.1] - 2025-12-15 ### Fixed - Fix infinit loop when renew ACME TLS certificate. ## [0.107.0] - 2025-12-15 ### Added - Add service to vendor on n8n ## [0.106.0] - 2025-12-12 ### Added - Add auditor role ### Fix - Fix the “no change” error display in documents bulk update - Update the front end after a document is published ## [0.105.0] - 2025-12-11 ### Added - Update trust center access slack message on console actions ## [0.104.0] - 2025-12-11 ### Added - Add risk management to N8N ## [0.103.0] - 2025-12-11 ### Added - Reject/Revoke trust center document accesses via slack app or console ## [0.102.0] - 2025-12-10 ### Added - New mime types for truct center files ## [0.101.1] - 2025-12-10 ### Fix - Fix missing validation on relation existence - Fix permissions for trust center access ## [0.101.0] - 2025-12-10 ### Added - Enable svg support for company logos ## [0.100.0] - 2025-12-09 ### Changed - Allow non conformities without audit ### Fix - Fix audit and framework deletion - Make employee role assignable ## [0.99.0] - 2025-12-09 ### Added - Add employee page - Add people management to N8N ### Fixed - Fix invations never deleted when organization is deleted. - Fix otel network error locally. ### Security - Update kit. ## [0.98.1] - 2025-12-04 ### Fixed - Missing organization_id on Report - ESLint issues ## [0.98.0] - 2025-12-03 ### Added - Add n8n vendor operations. ### Fixed - Fix n8n node always returns success. ### Security - Upgrade golang to 1.25.5 ## [0.97.0] - 2025-12-02 ### Added - @probo/node-n8n-probo Meeting operations ### Fixed - Console permissions initialisation - Probod dev config values ## [0.96.1] - 2025-12-02 ### Fixed - Fix missing n8n placeholder. ## [0.96.0] - 2025-12-02 ### Added - Add n8n-node package. ## [0.95.0] - 2025-12-02 ### Added - New UI EditableTable component + implementation on assets page. ## [0.94.2] - 2025-11-27 ### Fixed - Fix missing compliance page permission again. ## [0.94.1] - 2025-11-27 ### Fixed - Fix missing compliance page permission. ## [0.94.0] - 2025-11-26 ### Added - Add updatePeople MCP tool. - Add `SMTP_USER` and `SMTP_PASSWORD` to entrypoint.sh. ### Fixed - MCP permission tools. ## [0.93.0] - 2025-11-25 ### Added - Add document MCP tools. - Add document version MCP tools. - Add document version signature MCP tools. - Add MCP tools annotation hints. ## [0.92.0] - 2025-11-24 ### Added - Add snapshot MCP tools. - Add task MCP tools. - Add control MCP tools. - Add control mapping MCP tools. ### Fixed - Fix 5xx on vendor snapshot. ## [0.91.0] - 2025-11-24 ### Added - Add audit MCP tools. ### Fixed - Fix 5xx when create vendor snapshot. - Fix compliance page http to https redirect. - Fix cannot create continious improvment via MCP. ## [0.90.1] - 2025-11-23 ### Fixed - Fix missing permission to delete custom domain. ## [0.90.0] - 2025-11-23 ### Added - MCP tools for many new objects. ### Fixed - HTTP to HTTPS redirect for trust center. ## [0.89.1] - 2025-11-21 ### Fixed - MCP client always lost their session. ## [0.89.0] - 2025-11-21 ### Added - New MCP tools. ## [0.88.8] - 2025-11-20 - Fix SAML entrypoint config. - Fix missing permission to verify SAML domain. ### Changed - Update go dependencies ## [0.88.7] - 2025-11-19 ### Fixed - Fix snapshot creation ## [0.88.6] - 2025-11-18 ### Fixed - Fix asset permissions ## [0.88.5] - 2025-11-17 ### Fixed - Fix invitation permissions ## [0.88.4] - 2025-11-14 ### Fixed - Fix ca-cert-bundle entrypoint.sh ## [0.88.3] - 2025-11-14 ### Fixed - Fix document permissions ## [0.88.2] - 2025-11-14 ### Fixed - Fix missing healthcheck for postgres docker compose prod. - Fix missing `AUTH_COOKIE_SECURE` support in entrypoint.sh. ## [0.88.1] - 2025-14-07 ## Fixed - Fix support PostgreSQL CA bundle in Helm charts with file path option ## [0.88.0] - 2025-11-13 ### Added - Add role management. - Enable IdP-initiated SAML ### Changed - API keys now have access to the organization they just created. ## [0.87.0] - 2025-11-13 ### Added - Add beta MCP server. - Add official Kubernetes HEML chart. - Add SAML IDP initiated flow support. - Add meeting object. ### Changed - SAML role is not mandatory anymore. ## [0.86.4] - 2025-11-07 ### Fixed - Test a fix of the deletion freeze ## [0.86.3] - 2025-11-07 ### Fixed - Fix document validations ## [0.86.2] - 2025-11-06 ### Fixed - Fix vendor url validations ## [0.86.1] - 2025-11-06 ### Fixed - Fix vendor validations ## [0.86.0] - 2025-11-06 ### Added - Add field validation system ## [0.85.0] - 2025-11-04 ### Changed - Make secure cookie configurable ## [0.84.0] - 2025-11-04 ### Added - Update documentation ### Fixed - Fix download button in pdf preview ## [0.83.0] - 2025-10-31 ### Added - Add clearer error messages ### Fixed - Fix organization creation - Fix organization display order ## [0.82.0] - 2025-10-31 ### Added - Add SAML support - Add vendors to processing activities ## [0.81.0] - 2025-10-29 ### Added - Add custom order ranking to trust center references ## [0.80.2] - 2025-10-28 ### Fixed - Fix create report access query ## [0.80.1] - 2025-10-28 ### Fixed - Fix report list in trust center update access modal ## [0.80.0] - 2025-10-28 ### Changed - Change trust center console UX/UI ## [0.79.0] - 2025-10-28 ### Added - Add trust center files ### Fixed - Fix HTML entities displaying incorrectly in PDF exports (e.g., "&" showing as "&") ## [0.78.0] - 2025-10-23 ### Added - Add slack integration for trust center access management ### Changed - Markdown links now open in new tab with security attributes ## [0.77.0] - 2025-10-23 ### Added - Add invitation filtering by multiple states (PENDING/ACCEPTED/EXPIRED) ### Changed - Settings page now shows only pending and expired invitations (accepted invitations are hidden) ### Fixed - Fix document classification not being passed when creating documents - Fix document classification changes not syncing to draft versions - Fix organization invitations filter not being applied at database level ## [0.76.0] - 2025-10-22 ### Added - Add customizable document classification ## [0.75.1] - 2025-10-22 ### Fixed - Invitation status not updated on the UI - Inconsistent updates of nullable values ## [0.75.0] - 2025-10-21 ### Added - Add signature filtering by state (REQUESTED/SIGNED) on document signatures tab - Add HTTP to HTTPS redirect for custom domain 404 pages ### Changed - Optimize document PDF export signature loading with single query instead of N+1 queries ## [0.74.7] - 2025-10-20 ### Fixed - Fix compliance website wording ## [0.74.6] - 2025-10-20 ### Fixed - Fix ordered list display in documents - Fix 5xx on risk measures resolver ## [0.74.5] - 2025-10-16 ### Fixed - Broken document scroll when document list unfollded ## [0.74.4] - 2025-10-15 ### Fixed - React pdf race condition ## [0.74.3] - 2025-10-15 ### Changed - Increase signature link period from 7 days to 30 days ## [0.74.2] - 2025-10-15 ### Fixed - Not all signature are visible ## [0.74.1] - 2025-10-15 ### Changed - Use hosted png for logo in emails ## [0.74.0] - 2025-10-15 ### Fixed - Fix audit update in trust center settings ### Changed - New signatures page design - New emails design ## [0.73.1] - 2025-10-15 ### Fixed - Fix organization logo update ## [0.73.0] - 2025-10-14 ### Added - Add invitation management - Bootstrap role management ### Changed - Refactor of authentication and authorization ## [0.72.0] - 2025-10-14 ### Added - Add retry tracking for certificate provisioning and renewal. - Add automatic cleanup of stale provisioning attempts (4+ hours old) - Add max retry limit (3 attempts) before marking domains as failed - Add distinction between fatal and transient ACME errors ### Changed - Silently reject TLS connections without SNI (health checks, scanners) ### Fixed - Fix stale certificate provisioning attempts blocking the queue ## [0.71.0] - 2025-10-14 ### Fixed - Fix SQL measure queries ### Changed - Remove trust center slug config UI - Add EU as possible contry code for vendor ## [0.70.0] - 2025-10-14 ### Added - Add horizontal logo to documents ### Fixed - Fix file download Content-Disposition header format ## [0.69.0] - 2025-10-13 ### Added - Add document version on document list - Add procedure document type - Allow to filter measures by state ### Changed - Support ID-based trust center URLs with slug fallback - Show custom domain URL on trust center page when configured - Update framework icons ### Removed - Remove verifiedAt field from CustomDomain - Remove criticity on assets ## [0.68.3] - 2025-10-11 ### Fixed - Fix trust center design on custom domain - Send trust center invitation with custom domain when available - Fix evidence deletion - Fix dead ACME challenge ## [0.68.2] - 2025-10-10 ### Added - Socket binding for trust center ## [0.68.1] - 2025-10-09 ### Fixed - Fix filename content type regression - Add missing permission to binary in docker image ## [0.68.0] - 2025-10-09 ### Added - Add custom domain to trust centers ## [0.67.2] - 2025-10-09 ### Fixed - Fix vendor compliance reports files migration ## [0.67.1] - 2025-10-09 ### Fixed - Fix evidence files migration ## [0.67.0] - 2025-10-09 ## Changed - Store all file data in one table ### Fixed - Display more measures and tasks # [0.66.1] - 2025-10-06 ### Fixed - Fix access to public documents for unauthenticated users # [0.66.0] - 2025-10-06 ### Added - Store id of accepted nda - Add public documents on trust centers ## Changed - Allow missing NDA ### Fixed - Fix trust center v2 design # [0.65.1] - 2025-10-03 ### Fixed - Restrict deletion of users who have assets # [0.65.0] - 2025-10-03 ### Added - Add access by document on trust center - Add ordering measures by name in the API ### Fixed - Fix resetting state during measure editing - Handle document mapping conflict error # [0.64.1] - 2025-09-30 ### Fixed - Remove document description and footer in template # [0.64.0] - 2025-09-30 ### Added - Add trust center v2 - Add optional watermark and signatures in pdf export ### Changed - Remove description from pdf export # [0.63.1] - 2025-09-26 ### Fixed - Fix request document signature # [0.63.0] - 2025-09-25 ### Changed - Allow `.csv` file as evidences. - Remove section id from obligations - Change obligations status enum ### Added - Add link between obligations and risks # [0.62.0] - 2025-09-24 ### Added - Add reference companies for trust center trusted by section ### Fixed - Fix watermark display in trust center # [0.61.1] - 2025-09-23 ### Added - Display countries on trust centers # [0.61.0] - 2025-09-23 ### Added - Decouple users from people - Add more details to organization # [0.60.0] - 2025-09-18 ### Added - Add bulk export documents - Add bulk delete documents - Display risk description - Uniformize date diplay - Add risk order by owner full name # [0.59.1] - 2025-09-16 ### Fixed - Build trust center in the make file # [0.59.0] - 2025-09-16 ### Added - Add nda to trust centers - Add confidential watermark to trust center documents - Add countries to vendors ### Fixed - Add category back to vendors # [0.58.4] - 2025-09-12 ### Fixed - Fix framework export email ## [0.58.3] - 2025-09-12 ### Fixed - Fix release workflow ## [0.58.2] - 2025-09-12 ### Added - Send framework export by email - Order organization by name ## [0.58.1] - 2025-09-10 ### Chore - Rename registries ## [0.58.0] - 2025-09-08 ### Added - Soft delete documents - Store sidebar state ## [0.57.1] - 2025-09-04 ### Fixed - Fix framework export for evidence link ## [0.57.0] - 2025-09-04 ### Added - Add framework exports ## [0.56.0] - 2025-09-03 ### Added - Add risks snapshots ### Fixed - Fix tabs counter - Fix password page redirection ## [0.55.0] - 2025-09-01 ### Added - Add vendor snapshots ### Fixed - Fix document deletion and update errors - Remove signature block from trust center documents - Fix non mandatory fields on vendor ## [0.54.0] - 2025-09-01 ### Added - Add compliance registry snapshots - Add continual improvement snapshots - Add processing activity registry snapshots - Add assets snapshots ## [0.53.0] - 2025-08-29 ### Added - Add processing activity registries - Add continual improvement registries - Add noncoformity registry snapshots ### Fixed - Probo instance allow crawling bot to index. ## [0.52.0] - 2025-08-27 ### Added - Add data snapshot ## [0.51.1] - 2025-08-23 ### Fixed - Fix query loops in public trust center - Fix button display when disconected in public trust center ## [0.51.0] - 2025-08-22 ### Added - Add trust center access requests ## [0.50.1] - 2025-08-21 ### Fixed - Fix authentification token error ## [0.50.0] - 2025-08-21 ### Added - Add compliance registries - Add vendor services ### Chore - Replace mailhog ## [0.49.0] - 2025-08-20 ### Added - Add nonconformity registries ### Fixed - Fix trust center dark mode ## [0.48.1] - 2025-08-14 ### Fixed - Fix display of download buttons in the public trust center ## [0.48.0] - 2025-08-14 ### Added - Add baa to vendors - Add dpa to vendors - Add contacts to vendors - Add name to audits - Add audits to controls ## [0.47.0] - 2025-08-13 ### Added - Add document draft deletion - People now have contract start and end dates in the UI and API. - Lists can filter out people whose contracts have ended. ### Fixed - Fix closing of document deletion pop up - Fix creation of empty draft without save ## [0.46.2] - 2025-08-10 ### Fixed - Fix various SQL queries failures due to trust center - Fix internal information leaking to API ## [0.46.1] - 2025-08-10 ### Fixed - 5xx on risk show page ## [0.46.0] - 2025-08-08 ### Added - Add organization deletion - Add Probo by default ## [0.45.1] - 2025-08-06 ### Fixed - Fix data page display ## [0.45.0] - 2025-08-06 ### Added - Add trust center - Add edition of document fields ## [0.44.0] - 2025-07-23 ### Fixed - Fix PDF tables - Fix display issue on control and framework - Fix control creation ## [0.43.1] - 2025-07-22 ### Fixed - Fix document draft creation ## [0.43.0] - 2025-07-21 ### Added - Add control exclusion ### Fixed - Fix small issues on SOA ## [0.42.1] - 2025-07-16 ### Fixed - Fix missing document download button ## [0.42.0] - 2025-07-16 ### Fixed - Fix document version selector - Fix duplicate people ## [0.41.0] - 2025-07-16 ### Changed - Revision of multiple UI elements ### Added - Add document version selector on details page - Add document bulk publication - Add document bulk signature request - Add cancel signature request ## [0.40.0] - 2025-07-11 ### Added - Add cancel request mutation - Add bulk publish document version mutation - Add bulk request signature mutation ## [0.39.0] - 2025-06-03 ### Added - Add policy PDF export ### Security - Update go dependencies - Update node dependencies ## [0.38.1] - 2025-07-03 ### Fixed - Fix 5xx on document type order ## [0.38.0] - 2025-07-03 ### Added - Allow to change doucment order in the UI ### Change - Change default document sorting order ## [0.37.5] - 2025-06-30 ### Fixed - Fix missing risk score on detail risk page - Fix matrix risk score color on risk matrix ## [0.37.4] - 2025-06-30 ### Fixed - Fix SOA with risk ## [0.37.3] - 2025-06-30 ### Fixed - Fix missing framework controls ## [0.37.2] - 2025-06-30 ### Changed - Generate excel in memory instead of using fs ## [0.37.1] - 2025-06-30 ### Added - Add updated at and created at order for vendor ### Fixed - Fix SOA filename ## [0.37.0] - 2025-06-30 ### Added - Add SOA generator - Show last assessment date ## [0.36.0] - 2025-06-29 ### Added - Add URI evidence type - Add link dialog for measure evidences - Add default security header to API - Add support for extra header ### Fixed - Fix tasks deadline - Fix order people by kind - Fix missing people role order ### Security - Remove all data after logout - Enforce maximum password limit - Mitigate timing attack on signin ### Changed - Use httplogger on GraphQL error - Returns internal error when error is known ## [0.35.0] - 2025-06-20 ### Added - Add forgot password pages ## [0.34.0] - 2025-06-17 ### Added - Pagination for people, vendors, documents, data and assets ### Fixed - Fix 404 on email confirmation page - Fix 404 on invitation confirmation page - Fix login redirection - Fix form not reset after submit ## [0.33.6] - 2025-06-15 ### Fixed - Fix filedrop upload too small file size ## [0.33.5] - 2025-06-14 ### Fixed - Fix framework view too many queries - Fix image upload failed ## [0.33.4] - 2025-06-13 - Fix measure count ## [0.33.3] - 2025-06-13 ### Fixed - Fix 5xx on document count for risk - Fix leaking pg connections ## [0.33.2] - 2025-06-13 ### Fixed - Fix API path contain undefined ## [0.33.1] - 2025-06-13 ### Fixed - Fix localhost enforce at build time ## [0.33.0] - 2025-06-13 ### Added - Add backend fulltext search on controls, documents, risks and measures - Add `totalCount` field in `Connection` object - New console design ### Fixed - Use new enum for data classification ## [0.32.0] - 2025-06-07 ### Changed - Prevent publishing of document versions with no changes - Update AI prompt used for changelog generation ### Added - Add deadline on tasks - Add controls manual create, update, and delete ## [0.31.0] - 2025-06-04 ### Added - Add assets inventory - Add data inventory - Add title and owner id to document versions - Add automatic changelog ## [0.30.1] - 2025-06-02 ### Added - Added sort key `updated_at` for vendors ### Fixed - Fix 5xx on signature request - Fix sort key 5xx ## [0.30.0] - 2025-05-31 ### Changed - Change policies to documents ### Added - Add type to documents ### Fixed - Fix HIPAA import ## [0.29.0] - 2025-05-29 ### Added - HIPAA releated risks - Add framework import from json ### Changed - New add vendor UI ### Fixed - Add url input type for vendor assessement ## [0.28.0] - 2025-05-29 ### Added - Add automatic vendor assessment - Add vendor category fields - Add vendor business associate agreement url and subprocessors list url ### Fixed - Fix 5xx when create new vendor - Fix 5xx when update a vendor ## [0.27.1] - 2025-05-25 ### Fixed - Fix missing `position` field migration ## [0.27.0] - 2025-05-25 ### Changed - Rename severity into risk score - Add contract dates fields - Add people position field ### Fixed - Fix conflict http header fields ### [0.26.0] - 2025-05-20 ### Added - Add docker image security scan - Show latest risk updated date - Log error when GraphQL resolver failed ### Security - Update Golang dependencies - Update to latest Ubuntu LTS - Update to latest Golang version ### [0.25.0] - 2025-05-13 ### Changed - Allow data and text file for evidences ### Fixed - Fix missing people when inviting user already in other organization - Fix cannot upload organization logo ### [0.24.0] - 2025-05-06 ### Added - Task page list ### Changed - Task is now linked to organization ### Fixed - Fix cannot see vendor assessment note ### Security - Add filetype validation for end-user upload ## [0.23.1] - 2025-05-04 ### Fixed - Fix http cache etag - Fix cannot delete measure ## [0.23.0] - 2025-05-04 ### Added - Add ISO 27001 document header - Add policy downlaod ### Changed - Enable HTML support in Markdown renderer ## [0.22.0] - 2025-05-04 ### Added - Show owner of the policy in list - Show number of singatures in the policy list ### Changed - Link evidences to measure ## [0.21.0] - 2025-05-01 ### Changed - Add markdown table support - Explicit risk score calcul ## [0.20.1] - 2025-05-01 ### Changed - New vendors in the built-in lists ## [0.20.0] - 2025-05-01 ### Added - Add end-user confirmation before sending policy sign notification - Add assessed at in the vendor list ### Fixed - Fix not aligned button on policy list view ### Removed - Remove start and end service date of vendor ## [0.19.2] - 2025-05-01 ### Fixed - Fix 5xx when invite user in an organization ## [0.19.1] - 2025-05-01 ### Fixed - Evidence URL not set ## [0.19.0] - 2025-04-30 ### Changed - New vendors in the built-in lists ### Security - Update javascript dependencies - Fix open redirect when the redirect url use `//` ## [0.18.1] - 2025-04-30 ### Fixed Fix typo `mesure` instead of `measure` ## [0.18.0] - 2025-04-30 ### Added - Static files are served using GZip - Static fiels are served with ETag and Cache header fields ### Fixed - Entrypoint JS/CSS has no chunk hash ## [0.17.0] = 2025-04-29 ### Added - Add policy unlogged sign ## [0.16.0] = 2025-04-29 ### Added - Policy history - Policy signature - New vendors in the built-in lists ### Fixed - Fix cannot delete measure with linked risk ## [0.15.1] - 2025-04-27 ### Fixed - Fix SQL syntax error ## [0.15.0] - 2025-04-27 ### Added - Add delete measure in the UI and GraphQL API ### Removed - Remove `importance` field from measure as it's not used anymore ### Fixed - Fix delete evidence from task list does not work - Fix cannot load attached measure risks ## [0.14.0] - 2025-04-24 ### Added - Risk can have note - Cache static assets ## [0.13.2] - 2025-04-24 ### Fixed - Fix psql `generated_gid` returns padded base64 - Fix `user_id` not set when create new organization - Fix `additional_email_addresses` not set when invite in organization ## [0.13.0] - 2025-04-23 ### Added - New "Risk assessments" tab for vendors that allows you to: - View all risk assessments for a vendor in one place - Create new risk assessments with data sensitivity and business impact ratings - Track assessment expiration dates - Automatic people record creation when accepting invitations - New vendors in the built-in lists - Introduced a connector framework enabling integration with external services: - Add OAuth2 connector implementation ### Changed - Completely redesigned vendor list page - Completely redesigned vendor detail page - Improved compliance reports table with better file size formatting and date display - People may be linked to user ## [0.12.0] - 2025-04-20 ### Added - New vendors in the built-in lists ### Changed - Update risk library with new risks ### Security - Upgrade Golang dependencies - Upgrade Node dependencies ## [0.11.1] - 2025-04-15 ### Changed - New vendors in the built-in vendors list ## [0.11.0] - 2025-04-15 ### Added - New vendors in the built-in vendors list ### Changed - More explicit scale, legend and score for risk matrix ## [0.10.1] - 2025-04-14 ### Fixed - Fix grammar for "people" in the navigation bar - Fix editor change cursor position at each keystroke - Fix editor does not display list icon ## [0.10.0] - 2025-04-14 ### Changed - Improve UI of the risk matrix - Rename "Mitigation" in "Mesure" ## [0.9.0] - 2025-04-12 ### Added - Added business owner and security owner fields to vendors ### Changed - Improved vendor detail page with organized sections - Split information into logical sections (Basic Information, Ownership, Risk & Service, Documentation) - Better visual organization of vendor information ## [0.8.0] - 2025-04-12 ### Added - New risk treatment strategy options: Mitigate, Accept, Avoid, Transfer - Risk ownership functionality ## [0.7.0] - 2025-04-12 ### Added - Enhanced risk management with inherent and residual risk assessment capabilities - Added new fields to track both inherent and residual likelihood/impact values - Introduced risk severity calculation as the product of likelihood and impact - Added visual risk matrix to view risk distribution by severity - New risk-policy mapping functionality allowing risks to be linked to policies - New risk-control mapping functionality enabling risks to be linked to controls - Added edit functionality for risks with a new edit page - New popover components for mitigation information on the mitigations list view - Pre-populated risk templates from a JSON data source ### Changed - Update vendors catalog. - Updated risk creation form to include both inherent and residual risk parameters - Improved risk list view with risk matrix visualization - Enhanced breadcrumb navigation for risk detail pages - Refactored risk-mitigation mapping to remove redundant probability/impact fields - Renamed probability field to likelihood for better alignment with risk management terminology ### Fixed - Improved license file formatting in vendors and risks data directories - Fixed URL in attribution text (`getprobo.com` → `www.getprobo.com`) ## [0.6.0] - 2025-04-10 ### Added - Added vendors.json data file under Creative Commons Attribution-ShareAlike 4.0 license` - New vendor data management system with comprehensive vendor information - Pre-populated vendor database with 12 common SaaS vendors and their certifications - Vendor details page with extended fields for improved vendor management: - Legal name and headquarters address - Website URL - Certification tracking with tag-based interface - Links to important vendor documents (SLA, DPA, security pages) - Support for multiple compliance certifications per vendor ### Fixed - Fix cannot create vendor when the name is too similar to suggested one - Fix UI showing double button to close evidence preview modal - Fix cannot delete vendor with compliance reports (added cascade delete constraint) ## [0.5.0] - 2025-04-10 ### Added - Add vendor compliance reports UI - Controls can now be linked to policies, enabling better organization of compliance documentation and clearer traceability between policies and security controls - New UI for viewing and managing policies related to a specific control ## [0.4.2] - 2025-04-09 ### Changed - Simplified policy data model by removing version field and optimistic concurrency - Refactored policy update flow to load-modify-save pattern ### Fixed - Added user-friendly error messages when importing frameworks that already exist ## [0.4.1] - 2025-04-09 ### Changed - Update ISO 27001 and SOC2 framework definition. ## [0.4.0] - 2025-04-09 ### BREAKING CHANGES - **BREAKING:** Renamed GraphQL mutations for control-mitigation mappings: - `createControlMapping` → `createControlMitigationMapping` - `deleteControlMapping` → `deleteControlMitigationMapping` - Input and payload types have been updated accordingly ### Added - Add import control <> mitigation mapping. - Add mitigation tasks import. - Add auto-scroll to opened category. - Added support for mapping controls to policies: - New GraphQL mutations `createControlPolicyMapping` and `deleteControlPolicyMapping` - Controls can now be associated with both mitigations and policies - New bidirectional relationships: - Control objects now expose a `policies` field to list associated policies - Policy objects now expose a `controls` field to list associated controls - Added vendor compliance reports: - New GraphQL types `VendorComplianceReport` and related connection types - New GraphQL mutations `uploadVendorComplianceReport` and `deleteVendorComplianceReport` - New `complianceReports` field on the Vendor type - Support for uploading, viewing, and managing vendor compliance documentation - Added pre-configured frameworks: - Added ISO/IEC 27001:2022 and SOC 2 framework templates - Improved framework import interface with dropdown menu for template selection - Support for one-click import of standard compliance frameworks ### Changed - Evidence can now be requested. ### Fixed - Fix unfoldable mitigation category when open via the URI fragment. - Fix ctrl+click on mitigation does not open new tab. - Fix error handling in framework view when no controls are available. ## [0.3.0] - 2025-04-01 ### Added - Add sidebar to show a task. - Add task estimate edition. - Add control+framework auditor views. - Add import mitigations support. - Add import framework support. - Add risk object management. - Add risk template. - Add mapping between control and risk. ### Changed - Rename control in mitigation. - Home page is now mitigations page. ### Fixed - Fix panic in GraphQL resolver are not reported. - Fix otal trace never started. - Fix React.lazy chunck error. - Fix login page show `unauthorized` error. - Fix cannot delete task with evidences. - Fix cannot download file with non-ASCII filename. ## [0.2.0] - 2025-03-24 ### Added - Add forget password. - Allow evidence to be a link. - Add task import support. - Allow to create vendor when it not exist in the auto-complete. - Add service account people kind. ### Changed - Make task time estimate optional. - Set invitation token to 12 hours. - Order people by fullname. - Order vendor by name. - Allow to edit control state without going to edit page. - Redirect on people list after people creation. - New UI for the framework overview page. ### Fixed - Fix flickering on hover on categories. - Fix control order under a category. - Fix UI does not refresh after importing a framework. - Fix cannot create control. - Fix missing include cookie on confirmation invit. - Fix sign-in does not include cookie. - Fix missing version when create task. - Fix random order on framework overview. - Fix change task state not visible on UI. - Fix control card items alignement. - Fix cannot delete task. - Fix password managers misidentifying token fields as usernames in reset password and invitation confirmation forms. ## [0.1.0] - 2025-03-14 Initial release.