Files

Sacha Al Himdani ead1d862cd Release v0.165.0

Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>

2026-04-09 18:45:56 +02:00

49 KiB

Raw Blame History

Changelog

All notable changes to this project will be documented in this file.

Unreleased

[0.165.0] - 2026-04-09

Fixed

Show registration unavailable page when signup is disabled

Changed

Change document approval workflow

[0.164.0] - 2026-04-09

Fixed

Fix famework_id filer

Changed

Rename State of Applicability to Statement of Applicability
Validate document content length by extracted text, not JSON size

[0.163.2] - 2026-04-08

Added

Add prosemirror markdown renderer for MCP document content tools

Changed

Connector OAuth2 refactor

[0.163.1] - 2026-04-07

Fixed

Fix mcp task creation priority

[0.163.0] - 2026-04-07

Changed

Improve list handling and backspace behavior in rich editor

[0.162.1] - 2026-04-07

Fixed

Fix invisible drag line on Safari in rich editor

[0.162.0] - 2026-04-06

Added

Add prosemirror markdown renderer for MCP document content tools

Fixed

Fix permission error for CD

[0.161.2] - 2026-04-06

[0.161.1] - 2026-04-06

Fixed

Fix measure ID missing for evidence dialog

[0.161.0] - 2026-04-03

Added

Add measure-document linking

Changed

Sort employee signatures and approvals by most recently updated
Remove no-changes guard from document version publish
Exclude approved-without-signature documents from employee approvals

[0.160.2] - 2026-04-03

Fixed

Fix SCIM sync

[0.160.1] - 2026-04-03

Fixed

Fix OAuth connector redirect not requiring safe redirect for known providers

[0.160.0] - 2026-04-03

Added

Add markdown copy-paste support in rich text editor

Changed

Update rich editor style to be lighter and closer to printed documents

[0.159.0] - 2026-04-02

Added

Add access review
Add in-progress state to tasks

Fixed

Allow logo to take doc width

[0.158.0] - 2026-04-02

Added

Add task priority enum
Add UNKNOWN and NOT_IMPLEMENTED measure states
MCP takes markdown input for document version content

[0.157.0] - 2026-04-01

Added

Add rich text editor for documents with TipTap (tables, links, mermaid diagrams, slash commands, auto-save)
Add prosemirror-based PDF rendering for documents
Add migration command for document version markdown-to-prosemirror conversion

Changed

Remove version update dialog in favor of inline editing

Fixed

Fix create draft condition and delete draft connections handling
Fix document creation request validation

[0.156.1] - 2026-04-01

Fixed

Split employee document policy from core document actions

[0.156.0] - 2026-03-31

Changed

Unify dropzone accept prop

Added

Add document classification filter

Fixed

Add session transfer for SSO cookies on custom domains

[0.155.0] - 2026-03-31

Added

Add major.minor document versioning

Fixed

Fix compliance page login redirect to custom domains

[0.154.2] - 2026-03-30

Added

Add reusable agent guardrails for prompt injection and data leaks

Fixed

Add ability to disconnect Slack channel from compliance page

[0.154.1] - 2026-03-30

Fixed

Fix goreleaser snapshot

[0.154.0] - 2026-03-30

Added

Add document approval workflow
Add task priority

Fixed

Fix duplicate organization name returning internal error
Distinguish expired magic links from invalid tokens

[0.153.2] - 2026-03-26

Fixed

Mark failed evidence descriptions instead of retrying

[0.153.1] - 2026-03-26

Fixed

Fix file MIME type lookup for evidence description generation

[0.153.0] - 2026-03-26

Added

Add AI-powered evidence description generation

Fixed

Fix batch signature dialog wording
Fix empty search_engine_indexing on trust centers

[0.152.0] - 2026-03-25

Added

Add GraphQL dataloaders for batched record lookups
Check CAA records before ACME certificate issuance

Fixed

Fix Microsoft OIDC token exchange auth style
Fix SCIM bridge updating all users on every sync
Fix ACME challenge retry to create fresh orders

[0.151.0] - 2026-03-24

Added

Add SEO controls and sitemap for compliance pages

Changed

Allow editing non-SCIM fields on SCIM-managed profiles

[0.150.0] - 2026-03-23

Added

Add OIDC login support for Google and Microsoft providers
Add per-email sender name for compliance page emails
Add audit log feature for recording all actions

[0.149.0] - 2026-03-20

Changed

Use actual MIME type for trust center file exports

Fixed

Fix trust center SPA asset loading on custom domains

[0.148.0] - 2026-03-20

Added

Add MCP audit report metadata and getAuditReportUrl tool
Add Homebrew tap publishing for prb CLI

Fixed

Fix measure category filter not applying on initial page load

[0.147.0] - 2026-03-20

Added

Add /llms.txt endpoint to trust center compliance page
Add context page with organization context and meetings tabs
Allow skipping confirmation email when adding mailing list subscribers
Support developer-specific env vars in sandbox provisioning

Changed

Rename Vendor to Subprocessor in trust API surface
Improve pagination performance for findings, obligations, and measures

Fixed

Fix unvalidated URL redirection in HTTP redirects
Fix measure breadcrumb category filter

[0.146.1] - 2026-03-19

Fixed

Fix SAML ACS endpoint CORS rejection

[0.146.0] - 2026-03-19

Added

Add document archiving
Add fulltext search to measures page
Add document types filtering

Changed

Rename ISMS to GOVERNANCE

Fixed

Fix owner deletion by qualifying ambiguous tenant_id column
Fix organization profile using owner's full name instead of org name
Fix measure count queries missing category column
Clamp pagination size

[0.145.0] - 2026-03-19

Added

Add unified findings system with GraphQL, MCP, and CLI support
Add PDF dropzone to audit list for streamlined report upload
Add dynamic favicon for trust center
Add SSR for compliance page with dynamic title and meta tags
Add cross-origin protection for CSRF defense
Add file visibility (PRIVATE/PUBLIC) and public files API

Changed

Rename NONCONFORMITY to MINOR_NONCONFORMITY and add MAJOR_NONCONFORMITY

Fixed

Fix race condition in magic link token verification
Fix sandbox provisioning issues
Fix CLI URL scheme handling with http:// addresses
Fix NDA file display on page reload
Fix audit report buttons visibility when no file attached
Fix drag-and-drop issues in audit list dropzone

[0.144.0] - 2026-03-17

Added

Add implemented state and justification to controls
Add release guide documentation
Add Lima sandbox environment for parallel feature testing

[0.143.0] - 2026-03-16

Added

Add CLI
Add validation to mailman service

Fixed

SCIM provisioning failure when enrolling existing manual users due to stale external_id conflicts
SCIM reset not clearing external_id and user_name on profiles

[0.142.2] - 2026-03-13

Fixed

Compliance page member provisioning for already signed in identities
Compliage page request all callback redirection

[0.142.1] - 2026-03-13

Fixed

Fix documents UI
Fix refetch after publication
Add nda warning to new compliance update modal
Autosubmit mailing list confirmation

[0.142.0] - 2026-03-12

Added

Support for mermaid in markdown

Fixed

Account activation redirection flow improved
Compliance updates improvements: display, public

[0.141.0] - 2026-03-11

Added

Add compliance page mailing list

[0.140.0] - 2026-03-11

Added

Support for MS SCIM and Google bridge update
Account activation flow from document signing request email link

Changed

CI improvements
Removal of unused table and columns
Removed adhoc token authentication for document signing and related pages

[0.139.0] - 2026-03-11

Added

Add social links on compliance page

Changed

Fix person update

Fixed

Update vendor compliance report UI

[0.138.2] - 2026-03-10

Fixed

Profiles filter should filter user with console/employee membership by default in console/employee APIs

[0.138.1] - 2026-03-10

Changed

CP framework badges name display

[0.138.0] - 2026-03-10

Changed

Improve mailer performance

Fixed

Display empty state for soa control assessment
Fix compliance report

[0.137.3] - 2026-03-05

Fixed

Fix trust center access SQL queries SELECT clauses

[0.137.2] - 2026-03-05

Fixed

Compliance page full name unified handling through identities and profiles

[0.137.1] - 2026-03-05

Fixed

Compliance page request all callback page refresh

[0.137.0] - 2026-03-04

Added

Compliance page frameworks ordering and display toggling

Fixed

Cmopliance page connect redirection fix for existing identities

[0.136.0] - 2026-03-04

Added

continue URLs for compliance page for better access request flow
enforce NDA signature with explicit API error catched in error boundary

Changed

framework display name on compliange page org sidebar

[0.135.1] - 2026-03-03

Fixed

fix: add trust-center config section to entrypoint.sh

[0.135.0] - 2026-03-03

Added

Add delete vendor tool on mcp

[0.134.3] - 2026-03-03

Fixed

Use default filter with no snapshot for mcp

[0.134.2] - 2026-03-02

Fixed

Fix CVEs by updating go and open telemetry

[0.134.1] - 2026-03-02

Fixed

Fix n8n get many organizations

[0.134.0] - 2026-02-27

Added

Display audit name in compliance page
Add obligation webhooks
Add user webhooks

[0.133.0] - 2026-02-26

Added

Add mcp control links

[0.132.0] - 2026-02-25

Added

Add vendor risk assessment to mcp
Add risk and measure mcp tools

Fixed

Fix long pdf exports

[0.131.2] - 2026-02-24

Fixed

Fix mcp list tools returns badly encoded jsonschema
Fix compliance page show unpblished document title
Fix compliace page show unpublished document

[0.131.1] - 2026-02-23

Fixed

Fix infinit redirect when NDA not configured

[0.131.0] - 2026-02-23

Added

Add SOA MCP tools
Electronic signature for compliace page NDA
Add vendor contacts to n8n
Add soa risk assement via document
Allow more permissive bracket validations

Fixed

Fix n8n get many organization 4xx errors
Fix auditor access to people
Fix no link button when list is empty
Fix obligation type not updated

[0.130.3] - 2026-02-20

Fixed

Add mcp bearer header

[0.130.2] - 2026-02-20

Fixed

Fix MCP authentication error

[0.130.1] - 2026-02-20

Fixed

CreateUser sets profile EmailAddress field
Invitation GraphQL type fix: remove organization & user fields

[0.130.0] - 2026-02-20

Added

Add processing activities to mcp

[0.129.3] - 2026-02-19

Fixed

Console org dropdown query

[0.129.2] - 2026-02-19

Added

Add access to SOA for auditor

[0.129.1] - 2026-02-19

Fixed

Do not display inactive profiles on iam home page
Fix profile update additional email addresses coalesce missing

[0.129.0] - 2026-02-19

Added

n8n operations for users (profiles)
MCP operations for users (profiles)
SCIM user title synchronization

Changed

Dropped minio in favor of seaweedFS
Profile data model linked to org and identity instead of membership
Moved state and source on profiles instead of memberships
Refactored invitations into account activations

[0.128.0] - 2026-02-17

Added

Add audit n8n nodes
Add delete measure to mcp

[0.127.1] - 2026-02-17

Changed

Remove deprecated SOA

[0.127.0] - 2026-02-17

Changed

Change single document owner to multiple approvers

[0.126.1] - 2026-02-16

Added

Add delete tasks to mcp

[0.126.0] - 2026-02-16

Fixed

Fix deployment

[0.125.0] - 2026-02-16

Added

Add delete risks to mcp
Add meetings to mcp

[0.124.3] - 2026-02-16

Fixed

Fix missing risk validations

[0.124.2] - 2026-02-16

Fixed

Display control description
Change download button text while loading in compliance page

[0.124.1] - 2026-02-16

Fixed

Fix control order in SOA
Fix saml subject not populated

[0.124.0] - 2026-02-13

Added

Add webhooks

[0.123.3] - 2026-02-13

Fixed

Fix missing name id format for idp initiated SAML request

[0.123.2] - 2026-02-13

Fixed

Fix SAML subject must not be updated
Fix SAML subject not set on first login

[0.123.1] - 2026-02-13

Fixed

Fix missing NameID format information in SAML metadata

[0.123.0] - 2026-02-12

Changed

Upgrade Postgres to 18.1
IAM: Migrate people into profiles

[0.122.0] - 2026-02-12

Added

Redirect to previous location on authentication or assumption needed

[0.121.1] - 2026-02-11

Fixed

Fix Google Workspace SCIM bridge does not set active state at creation
Fix compliance page access request was not active by default
Fix compliance page request access add non request file to the requested one

Security

Update javascript dependencies

[0.121.0] - 2026-02-10

Added

Add user exclusion management to the Google Workspace bridge

Changed

Improve compliance page access management UX

Fixed

Remove noisy error log from slack queue message

[0.120.0] - 2026-02-09

Added

Suport all vendors fields on mcp

Fixed

Fix duplicate assessments

[0.119.1] - 2026-02-09

Security

Upgrade go to 1.25.7

[0.119.0] - 2026-02-05

Added

Add member n8n actions

Fixed

Fix controls for CFR framework
Fix missing trace_id on resolver logs

[0.118.2] - 2026-02-05

Fixed

Noisy TLS errors are filtered from logs
Use s3 presigned URLs for email assets

Changed

Safer docker ubuntu image version with digest
Safer github actions versions with digest
Redirect already authenticated user on compliance page home when trying to log in

[0.118.1] - 2026-02-04

Fixed

Fix column reference "full_name" is ambiguous

[0.118.0] - 2026-02-04

Added

Add HDS framework
Add 21 CFR Part 11 framework

Changed

Serve email static assets from object store
Rework the UI of vendor row on compliance page
Update auth layout on console and compliance page to remove right panel

Fixed

Fix create organization node

Security

Fix npm vulnerabilities

[0.117.3] - 2026-02-03

Fixed

Fix n8n node cannot fetch many organizations.
Fix SCIM disable all non SCIM members.

[0.117.2] - 2026-02-02

Fixed

Missing logo
Static handler cache headers handling

[0.117.1] - 2026-02-02

Changed

Use svg for slack logo

Fixed

Missing google logo
Missing relay generated files

[0.117.0] - 2026-02-02

Added

Google Workspace to SCIM bridge
Compliance page logo branding

Fixed

Memberships page conditional display of search input

Security

Upgrade go dependencies

[0.116.15] - 2026-01-31

Fixed

Console slack connection placeholder display fix

[0.116.14] - 2026-01-30

Fixed

Slack compliance page access display name empty case
Compliance page API file access check fix + granular error handling

Security

Upgrade go to 1.25.6

[0.116.13] - 2026-01-30

Fixed

Misplaced dependabot.yaml file is making CI fail

[0.116.12] - 2026-01-29

Changed

Do not display trust center subprocessors tab when there are none
Remove query params from compliange page sidebar website displayed URLs
Refactor trust center pages to make them more maintainable
Rename Trust Center to Compliance Page on displayed wording
Compliance page vite dev server proxies graphQL API calls to go server port

Fixed

Add noreferrer noopener to compliance page open link from console

[0.116.11] - 2026-01-27

Added

CI Test analytics with junit results format
CI performance improvements with caching
Extend dependabot to all dependencies

Fixed

AWS path style s3 option for Docker image entrypoint
Console signatures counts
Console signatures requests notifications

[0.116.10] - 2026-01-23

Added

New up to date linting rules for TS codebase

Changed

Refactor SOA
Dropped prettier
Updated eslint related dependencies
Ignore new TLS errors in logs

Fixed

otel utf8 errors

[0.116.9] - 2026-01-21

Fixed

Document signing authentication is still done with token
SOA permissions handling + tenant scoping

[0.116.8] - 2026-01-20

Changed

Revert revert console graphql endpoint

[0.116.7] - 2026-01-20

Fixed

n8n app calls by reverting console graphql endpoint

[0.116.6] - 2026-01-20

Fixed

n8n http request options URL

[0.116.5] - 2026-01-20

Fixed

Console invitationResolver.Organization authorize check

[0.116.4] - 2026-01-19

Changed

Clean child sessions in IAM memberships migration

[0.116.3] - 2026-01-19

Fixed

IAM memberships migration for entity ID

[0.116.2] - 2026-01-19

Changed

Membership Profile authz done from membership in membershipResolver (it's a 1:1 association)
Match keycloak URL ports with default base URL one for local dev
Drop the authentication dialog in favor of a dedicated auth page for compliance page
Order memberships by organization name on console / and memberships dropdown
Update kit

Fixed

Missing console react-pdf dependency in package.json
On sign out, clear cookie along with the existing session expiration
Remove conditional rendering of org search input on console
Fix organizations page layout vertical alignment

[0.116.1] - 2026-01-18

Fixed

5xx on profile loading.

[0.116.0] - 2026-01-18

BREAKING CHANGES

API keys generated with previous versions are no longer compatible.

Added

Add SCIM provisioning support.
Add magic link authentication.
Add membership disable state.
Add ABAC policy.

Changed

Filter junk HTTP TLS server errors.
Change API token format.
Add session support to compliance page.

Fixed

Fix overly strict obligation validation.

[0.115.0] - 2026-01-15

Added

Add processing activity exports

[0.114.0] - 2026-01-15

Added

Add proxy protocol v2 support.

[0.113.0] - 2026-01-15

Added

Add right requests

[0.112.4] - 2026-01-12

Fixed

Fix people in mcp
Fix task display

[0.112.3] - 2026-01-05

Fixed

Fix code blocks in documents
Fix cancel signature permissions

[0.112.2] - 2025-12-31

Fixed

Fix people deletion

[0.112.1] - 2025-12-31

Changed

Change minutes max length

[0.112.0] - 2025-12-22

Added

Add new GDPR registries

Fixed

Create Slack notification when updating trust center access if no existing message found

[0.111.2] - 2025-12-19

Fixed

Fix trust center nil pointer dereference

[0.111.1] - 2025-12-19

Fixed

Console: framework logo import

[0.111.0] - 2025-12-18

Added

Add ISO 27701 (2025) framework.
Add ISO 42001 (2023) framework.
Add GDPR framework.
Add CCPA framework.
Add NIS2 framework.
Add DORA framework.

[0.110.2] - 2025-12-17

Fixed

Fix azure blob storage

[0.110.1] - 2025-12-17

Fixed

Frameworks logo SVG colors
Framework name displayed in trust center org sidebar

[0.110.0] - 2025-12-17

Added

Add risk vendor risk assesments to n8n

[0.109.0] - 2025-12-16

Added

Add organization filtering
Use in-house logos when importing framework

Fixed

Unblock ACME provision queue on error
GQLGen version handling with go tool
Fix GraphQL types

[0.108.0] - 2025-12-15

Added

Blacklist emails from trust requests

Fixed

ACME cert renewing

[0.107.1] - 2025-12-15

Fixed

Fix infinit loop when renew ACME TLS certificate.

[0.107.0] - 2025-12-15

Added

Add service to vendor on n8n

[0.106.0] - 2025-12-12

Added

Add auditor role

Fix

Fix the “no change” error display in documents bulk update
Update the front end after a document is published

[0.105.0] - 2025-12-11

Added

Update trust center access slack message on console actions

[0.104.0] - 2025-12-11

Added

Add risk management to N8N

[0.103.0] - 2025-12-11

Added

Reject/Revoke trust center document accesses via slack app or console

[0.102.0] - 2025-12-10

Added

New mime types for truct center files

[0.101.1] - 2025-12-10

Fix

Fix missing validation on relation existence
Fix permissions for trust center access

[0.101.0] - 2025-12-10

Added

Enable svg support for company logos

[0.100.0] - 2025-12-09

Changed

Allow non conformities without audit

Fix

Fix audit and framework deletion
Make employee role assignable

[0.99.0] - 2025-12-09

Added

Add employee page
Add people management to N8N

Fixed

Fix invations never deleted when organization is deleted.
Fix otel network error locally.

Security

Update kit.

[0.98.1] - 2025-12-04

Fixed

Missing organization_id on Report
ESLint issues

[0.98.0] - 2025-12-03

Added

Add n8n vendor operations.

Fixed

Fix n8n node always returns success.

Security

Upgrade golang to 1.25.5

[0.97.0] - 2025-12-02

Added

@probo/node-n8n-probo Meeting operations

Fixed

Console permissions initialisation
Probod dev config values

[0.96.1] - 2025-12-02

Fixed

Fix missing n8n placeholder.

[0.96.0] - 2025-12-02

Added

Add n8n-node package.

[0.95.0] - 2025-12-02

Added

New UI EditableTable component + implementation on assets page.

[0.94.2] - 2025-11-27

Fixed

Fix missing compliance page permission again.

[0.94.1] - 2025-11-27

Fixed

Fix missing compliance page permission.

[0.94.0] - 2025-11-26

Added

Add updatePeople MCP tool.
Add SMTP_USER and SMTP_PASSWORD to entrypoint.sh.

Fixed

MCP permission tools.

[0.93.0] - 2025-11-25

Added

Add document MCP tools.
Add document version MCP tools.
Add document version signature MCP tools.
Add MCP tools annotation hints.

[0.92.0] - 2025-11-24

Added

Add snapshot MCP tools.
Add task MCP tools.
Add control MCP tools.
Add control mapping MCP tools.

Fixed

Fix 5xx on vendor snapshot.

[0.91.0] - 2025-11-24

Added

Add audit MCP tools.

Fixed

Fix 5xx when create vendor snapshot.
Fix compliance page http to https redirect.
Fix cannot create continious improvment via MCP.

[0.90.1] - 2025-11-23

Fixed

Fix missing permission to delete custom domain.

[0.90.0] - 2025-11-23

Added

MCP tools for many new objects.

Fixed

HTTP to HTTPS redirect for trust center.

[0.89.1] - 2025-11-21

Fixed

MCP client always lost their session.

[0.89.0] - 2025-11-21

Added

New MCP tools.

[0.88.8] - 2025-11-20

Fix SAML entrypoint config.
Fix missing permission to verify SAML domain.

Changed

Update go dependencies

[0.88.7] - 2025-11-19

Fixed

Fix snapshot creation

[0.88.6] - 2025-11-18

Fixed

Fix asset permissions

[0.88.5] - 2025-11-17

Fixed

Fix invitation permissions

[0.88.4] - 2025-11-14

Fixed

Fix ca-cert-bundle entrypoint.sh

[0.88.3] - 2025-11-14

Fixed

Fix document permissions

[0.88.2] - 2025-11-14

Fixed

Fix missing healthcheck for postgres docker compose prod.
Fix missing AUTH_COOKIE_SECURE support in entrypoint.sh.

[0.88.1] - 2025-14-07

Fixed

Fix support PostgreSQL CA bundle in Helm charts with file path option

[0.88.0] - 2025-11-13

Added

Add role management.
Enable IdP-initiated SAML

Changed

API keys now have access to the organization they just created.

[0.87.0] - 2025-11-13

Added

Add beta MCP server.
Add official Kubernetes HEML chart.
Add SAML IDP initiated flow support.
Add meeting object.

Changed

SAML role is not mandatory anymore.

[0.86.4] - 2025-11-07

Fixed

Test a fix of the deletion freeze

[0.86.3] - 2025-11-07

Fixed

Fix document validations

[0.86.2] - 2025-11-06

Fixed

Fix vendor url validations

[0.86.1] - 2025-11-06

Fixed

Fix vendor validations

[0.86.0] - 2025-11-06

Added

Add field validation system

[0.85.0] - 2025-11-04

Changed

Make secure cookie configurable

[0.84.0] - 2025-11-04

Added

Update documentation

Fixed

Fix download button in pdf preview

[0.83.0] - 2025-10-31

Added

Add clearer error messages

Fixed

Fix organization creation
Fix organization display order

[0.82.0] - 2025-10-31

Added

Add SAML support
Add vendors to processing activities

[0.81.0] - 2025-10-29

Added

Add custom order ranking to trust center references

[0.80.2] - 2025-10-28

Fixed

Fix create report access query

[0.80.1] - 2025-10-28

Fixed

Fix report list in trust center update access modal

[0.80.0] - 2025-10-28

Changed

Change trust center console UX/UI

[0.79.0] - 2025-10-28

Added

Add trust center files

Fixed

Fix HTML entities displaying incorrectly in PDF exports (e.g., "&" showing as "&")

[0.78.0] - 2025-10-23

Added

Add slack integration for trust center access management

Changed

Markdown links now open in new tab with security attributes

[0.77.0] - 2025-10-23

Added

Add invitation filtering by multiple states (PENDING/ACCEPTED/EXPIRED)

Changed

Settings page now shows only pending and expired invitations (accepted invitations are hidden)

Fixed

Fix document classification not being passed when creating documents
Fix document classification changes not syncing to draft versions
Fix organization invitations filter not being applied at database level

[0.76.0] - 2025-10-22

Added

Add customizable document classification

[0.75.1] - 2025-10-22

Fixed

Invitation status not updated on the UI
Inconsistent updates of nullable values

[0.75.0] - 2025-10-21

Added

Add signature filtering by state (REQUESTED/SIGNED) on document signatures tab
Add HTTP to HTTPS redirect for custom domain 404 pages

Changed

Optimize document PDF export signature loading with single query instead of N+1 queries

[0.74.7] - 2025-10-20

Fixed

Fix compliance website wording

[0.74.6] - 2025-10-20

Fixed

Fix ordered list display in documents
Fix 5xx on risk measures resolver

[0.74.5] - 2025-10-16

Fixed

Broken document scroll when document list unfollded

[0.74.4] - 2025-10-15

Fixed

React pdf race condition

[0.74.3] - 2025-10-15

Changed

Increase signature link period from 7 days to 30 days

[0.74.2] - 2025-10-15

Fixed

Not all signature are visible

[0.74.1] - 2025-10-15

Changed

Use hosted png for logo in emails

[0.74.0] - 2025-10-15

Fixed

Fix audit update in trust center settings

Changed

New signatures page design
New emails design

[0.73.1] - 2025-10-15

Fixed

Fix organization logo update

[0.73.0] - 2025-10-14

Added

Add invitation management
Bootstrap role management

Changed

Refactor of authentication and authorization

[0.72.0] - 2025-10-14

Added

Add retry tracking for certificate provisioning and renewal.
Add automatic cleanup of stale provisioning attempts (4+ hours old)
Add max retry limit (3 attempts) before marking domains as failed
Add distinction between fatal and transient ACME errors

Changed

Silently reject TLS connections without SNI (health checks, scanners)

Fixed

Fix stale certificate provisioning attempts blocking the queue

[0.71.0] - 2025-10-14

Fixed

Fix SQL measure queries

Changed

Remove trust center slug config UI
Add EU as possible contry code for vendor

[0.70.0] - 2025-10-14

Added

Add horizontal logo to documents

Fixed

Fix file download Content-Disposition header format

[0.69.0] - 2025-10-13

Added

Add document version on document list
Add procedure document type
Allow to filter measures by state

Changed

Support ID-based trust center URLs with slug fallback
Show custom domain URL on trust center page when configured
Update framework icons

Removed

Remove verifiedAt field from CustomDomain
Remove criticity on assets

[0.68.3] - 2025-10-11

Fixed

Fix trust center design on custom domain
Send trust center invitation with custom domain when available
Fix evidence deletion
Fix dead ACME challenge

[0.68.2] - 2025-10-10

Added

Socket binding for trust center

[0.68.1] - 2025-10-09

Fixed

Fix filename content type regression
Add missing permission to binary in docker image

[0.68.0] - 2025-10-09

Added

Add custom domain to trust centers

[0.67.2] - 2025-10-09

Fixed

Fix vendor compliance reports files migration

[0.67.1] - 2025-10-09

Fixed

Fix evidence files migration

[0.67.0] - 2025-10-09

Changed

Store all file data in one table

Fixed

Display more measures and tasks

[0.66.1] - 2025-10-06

Fixed

Fix access to public documents for unauthenticated users

[0.66.0] - 2025-10-06

Added

Store id of accepted nda
Add public documents on trust centers

Changed

Allow missing NDA

Fixed

Fix trust center v2 design

[0.65.1] - 2025-10-03

Fixed

Restrict deletion of users who have assets

[0.65.0] - 2025-10-03

Added

Add access by document on trust center
Add ordering measures by name in the API

Fixed

Fix resetting state during measure editing
Handle document mapping conflict error

[0.64.1] - 2025-09-30

Fixed

Remove document description and footer in template

[0.64.0] - 2025-09-30

Added

Add trust center v2
Add optional watermark and signatures in pdf export

Changed

Remove description from pdf export

[0.63.1] - 2025-09-26

Fixed

Fix request document signature

[0.63.0] - 2025-09-25

Changed

Allow .csv file as evidences.
Remove section id from obligations
Change obligations status enum

Added

Add link between obligations and risks

[0.62.0] - 2025-09-24

Added

Add reference companies for trust center trusted by section

Fixed

Fix watermark display in trust center

[0.61.1] - 2025-09-23

Added

Display countries on trust centers

[0.61.0] - 2025-09-23

Added

Decouple users from people
Add more details to organization

[0.60.0] - 2025-09-18

Added

Add bulk export documents
Add bulk delete documents
Display risk description
Uniformize date diplay
Add risk order by owner full name

[0.59.1] - 2025-09-16

Fixed

Build trust center in the make file

[0.59.0] - 2025-09-16

Added

Add nda to trust centers
Add confidential watermark to trust center documents
Add countries to vendors

Fixed

Add category back to vendors

[0.58.4] - 2025-09-12

Fixed

Fix framework export email

[0.58.3] - 2025-09-12

Fixed

Fix release workflow

[0.58.2] - 2025-09-12

Added

Send framework export by email
Order organization by name

[0.58.1] - 2025-09-10

Chore

Rename registries

[0.58.0] - 2025-09-08

Added

Soft delete documents
Store sidebar state

[0.57.1] - 2025-09-04

Fixed

Fix framework export for evidence link

[0.57.0] - 2025-09-04

Added

Add framework exports

[0.56.0] - 2025-09-03

Added

Add risks snapshots

Fixed

Fix tabs counter
Fix password page redirection

[0.55.0] - 2025-09-01

Added

Add vendor snapshots

Fixed

Fix document deletion and update errors
Remove signature block from trust center documents
Fix non mandatory fields on vendor

[0.54.0] - 2025-09-01

Added

Add compliance registry snapshots
Add continual improvement snapshots
Add processing activity registry snapshots
Add assets snapshots

[0.53.0] - 2025-08-29

Added

Add processing activity registries
Add continual improvement registries
Add noncoformity registry snapshots

Fixed

Probo instance allow crawling bot to index.

[0.52.0] - 2025-08-27

Added

Add data snapshot

[0.51.1] - 2025-08-23

Fixed

Fix query loops in public trust center
Fix button display when disconected in public trust center

[0.51.0] - 2025-08-22

Added

Add trust center access requests

[0.50.1] - 2025-08-21

Fixed

Fix authentification token error

[0.50.0] - 2025-08-21

Added

Add compliance registries
Add vendor services

Chore

Replace mailhog

[0.49.0] - 2025-08-20

Added

Add nonconformity registries

Fixed

Fix trust center dark mode

[0.48.1] - 2025-08-14

Fixed

Fix display of download buttons in the public trust center

[0.48.0] - 2025-08-14

Added

Add baa to vendors
Add dpa to vendors
Add contacts to vendors
Add name to audits
Add audits to controls

[0.47.0] - 2025-08-13

Added

Add document draft deletion
People now have contract start and end dates in the UI and API.
Lists can filter out people whose contracts have ended.

Fixed

Fix closing of document deletion pop up
Fix creation of empty draft without save

[0.46.2] - 2025-08-10

Fixed

Fix various SQL queries failures due to trust center
Fix internal information leaking to API

[0.46.1] - 2025-08-10

Fixed

5xx on risk show page

[0.46.0] - 2025-08-08

Added

Add organization deletion
Add Probo by default

[0.45.1] - 2025-08-06

Fixed

Fix data page display

[0.45.0] - 2025-08-06

Added

Add trust center
Add edition of document fields

[0.44.0] - 2025-07-23

Fixed

Fix PDF tables
Fix display issue on control and framework
Fix control creation

[0.43.1] - 2025-07-22

Fixed

Fix document draft creation

[0.43.0] - 2025-07-21

Added

Add control exclusion

Fixed

Fix small issues on SOA

[0.42.1] - 2025-07-16

Fixed

Fix missing document download button

[0.42.0] - 2025-07-16

Fixed

Fix document version selector
Fix duplicate people

[0.41.0] - 2025-07-16

Changed

Revision of multiple UI elements

Added

Add document version selector on details page
Add document bulk publication
Add document bulk signature request
Add cancel signature request

[0.40.0] - 2025-07-11

Added

Add cancel request mutation
Add bulk publish document version mutation
Add bulk request signature mutation

[0.39.0] - 2025-06-03

Added

Add policy PDF export

Security

Update go dependencies
Update node dependencies

[0.38.1] - 2025-07-03

Fixed

Fix 5xx on document type order

[0.38.0] - 2025-07-03

Added

Allow to change doucment order in the UI

Change

Change default document sorting order

[0.37.5] - 2025-06-30

Fixed

Fix missing risk score on detail risk page
Fix matrix risk score color on risk matrix

[0.37.4] - 2025-06-30

Fixed

Fix SOA with risk

[0.37.3] - 2025-06-30

Fixed

Fix missing framework controls

[0.37.2] - 2025-06-30

Changed

Generate excel in memory instead of using fs

[0.37.1] - 2025-06-30

Added

Add updated at and created at order for vendor

Fixed

Fix SOA filename

[0.37.0] - 2025-06-30

Added

Add SOA generator
Show last assessment date

[0.36.0] - 2025-06-29

Added

Add URI evidence type
Add link dialog for measure evidences
Add default security header to API
Add support for extra header

Fixed

Fix tasks deadline
Fix order people by kind
Fix missing people role order

Security

Remove all data after logout
Enforce maximum password limit
Mitigate timing attack on signin

Changed

Use httplogger on GraphQL error
Returns internal error when error is known

[0.35.0] - 2025-06-20

Added

Add forgot password pages

[0.34.0] - 2025-06-17

Added

Pagination for people, vendors, documents, data and assets

Fixed

Fix 404 on email confirmation page
Fix 404 on invitation confirmation page
Fix login redirection
Fix form not reset after submit

[0.33.6] - 2025-06-15

Fixed

Fix filedrop upload too small file size

[0.33.5] - 2025-06-14

Fixed

Fix framework view too many queries
Fix image upload failed

[0.33.4] - 2025-06-13

Fix measure count

[0.33.3] - 2025-06-13

Fixed

Fix 5xx on document count for risk
Fix leaking pg connections

[0.33.2] - 2025-06-13

Fixed

Fix API path contain undefined

[0.33.1] - 2025-06-13

Fixed

Fix localhost enforce at build time

[0.33.0] - 2025-06-13

Added

Add backend fulltext search on controls, documents, risks and measures
Add totalCount field in Connection object
New console design

Fixed

Use new enum for data classification

[0.32.0] - 2025-06-07

Changed

Prevent publishing of document versions with no changes
Update AI prompt used for changelog generation

Added

Add deadline on tasks
Add controls manual create, update, and delete

[0.31.0] - 2025-06-04

Added

Add assets inventory
Add data inventory
Add title and owner id to document versions
Add automatic changelog

[0.30.1] - 2025-06-02

Added

Added sort key updated_at for vendors

Fixed

Fix 5xx on signature request
Fix sort key 5xx

[0.30.0] - 2025-05-31

Changed

Change policies to documents

Added

Add type to documents

Fixed

Fix HIPAA import

[0.29.0] - 2025-05-29

Added

HIPAA releated risks
Add framework import from json

Changed

New add vendor UI

Fixed

Add url input type for vendor assessement

[0.28.0] - 2025-05-29

Added

Add automatic vendor assessment
Add vendor category fields
Add vendor business associate agreement url and subprocessors list url

Fixed

Fix 5xx when create new vendor
Fix 5xx when update a vendor

[0.27.1] - 2025-05-25

Fixed

Fix missing position field migration

[0.27.0] - 2025-05-25

Changed

Rename severity into risk score
Add contract dates fields
Add people position field

Fixed

Fix conflict http header fields

[0.26.0] - 2025-05-20

Added

Add docker image security scan
Show latest risk updated date
Log error when GraphQL resolver failed

Security

Update Golang dependencies
Update to latest Ubuntu LTS
Update to latest Golang version

[0.25.0] - 2025-05-13

Changed

Allow data and text file for evidences

Fixed

Fix missing people when inviting user already in other organization
Fix cannot upload organization logo

[0.24.0] - 2025-05-06

Added

Task page list

Changed

Task is now linked to organization

Fixed

Fix cannot see vendor assessment note

Security

Add filetype validation for end-user upload

[0.23.1] - 2025-05-04

Fixed

Fix http cache etag
Fix cannot delete measure

[0.23.0] - 2025-05-04

Added

Add ISO 27001 document header
Add policy downlaod

Changed

Enable HTML support in Markdown renderer

[0.22.0] - 2025-05-04

Added

Show owner of the policy in list
Show number of singatures in the policy list

Changed

Link evidences to measure

[0.21.0] - 2025-05-01

Changed

Add markdown table support
Explicit risk score calcul

[0.20.1] - 2025-05-01

Changed

New vendors in the built-in lists

[0.20.0] - 2025-05-01

Added

Add end-user confirmation before sending policy sign notification
Add assessed at in the vendor list

Fixed

Fix not aligned button on policy list view

Removed

Remove start and end service date of vendor

[0.19.2] - 2025-05-01

Fixed

Fix 5xx when invite user in an organization

[0.19.1] - 2025-05-01

Fixed

Evidence URL not set

[0.19.0] - 2025-04-30

Changed

New vendors in the built-in lists

Security

Update javascript dependencies
Fix open redirect when the redirect url use //

[0.18.1] - 2025-04-30

Fixed

Fix typo mesure instead of measure

[0.18.0] - 2025-04-30

Added

Static files are served using GZip
Static fiels are served with ETag and Cache header fields

Fixed

Entrypoint JS/CSS has no chunk hash

[0.17.0] = 2025-04-29

Added

Add policy unlogged sign

[0.16.0] = 2025-04-29

Added

Policy history
Policy signature
New vendors in the built-in lists

Fixed

Fix cannot delete measure with linked risk

[0.15.1] - 2025-04-27

Fixed

Fix SQL syntax error

[0.15.0] - 2025-04-27

Added

Add delete measure in the UI and GraphQL API

Removed

Remove importance field from measure as it's not used anymore

Fixed

Fix delete evidence from task list does not work
Fix cannot load attached measure risks

[0.14.0] - 2025-04-24

Added

Risk can have note
Cache static assets

[0.13.2] - 2025-04-24

Fixed

Fix psql generated_gid returns padded base64
Fix user_id not set when create new organization
Fix additional_email_addresses not set when invite in organization

[0.13.0] - 2025-04-23

Added

New "Risk assessments" tab for vendors that allows you to:
- View all risk assessments for a vendor in one place
- Create new risk assessments with data sensitivity and business impact ratings
- Track assessment expiration dates
Automatic people record creation when accepting invitations
New vendors in the built-in lists
Introduced a connector framework enabling integration with external services:
- Add OAuth2 connector implementation

Changed

Completely redesigned vendor list page
Completely redesigned vendor detail page
Improved compliance reports table with better file size formatting and date display
People may be linked to user

[0.12.0] - 2025-04-20

Added

New vendors in the built-in lists

Changed

Update risk library with new risks

Security

Upgrade Golang dependencies
Upgrade Node dependencies

[0.11.1] - 2025-04-15

Changed

New vendors in the built-in vendors list

[0.11.0] - 2025-04-15

Added

New vendors in the built-in vendors list

Changed

More explicit scale, legend and score for risk matrix

[0.10.1] - 2025-04-14

Fixed

Fix grammar for "people" in the navigation bar
Fix editor change cursor position at each keystroke
Fix editor does not display list icon

[0.10.0] - 2025-04-14

Changed

Improve UI of the risk matrix
Rename "Mitigation" in "Mesure"

[0.9.0] - 2025-04-12

Added

Added business owner and security owner fields to vendors

Changed

Improved vendor detail page with organized sections
- Split information into logical sections (Basic Information, Ownership, Risk & Service, Documentation)
- Better visual organization of vendor information

[0.8.0] - 2025-04-12

Added

New risk treatment strategy options: Mitigate, Accept, Avoid, Transfer
Risk ownership functionality

[0.7.0] - 2025-04-12

Added

Enhanced risk management with inherent and residual risk assessment capabilities
- Added new fields to track both inherent and residual likelihood/impact values
- Introduced risk severity calculation as the product of likelihood and impact
- Added visual risk matrix to view risk distribution by severity
New risk-policy mapping functionality allowing risks to be linked to policies
New risk-control mapping functionality enabling risks to be linked to controls
Added edit functionality for risks with a new edit page
New popover components for mitigation information on the mitigations list view
Pre-populated risk templates from a JSON data source

Changed

Update vendors catalog.
Updated risk creation form to include both inherent and residual risk parameters
Improved risk list view with risk matrix visualization
Enhanced breadcrumb navigation for risk detail pages
Refactored risk-mitigation mapping to remove redundant probability/impact fields
Renamed probability field to likelihood for better alignment with risk management terminology

Fixed

Improved license file formatting in vendors and risks data directories
Fixed URL in attribution text (getprobo.com → www.getprobo.com)

[0.6.0] - 2025-04-10

Added

Added vendors.json data file under Creative Commons Attribution-ShareAlike 4.0 license`
New vendor data management system with comprehensive vendor information
Pre-populated vendor database with 12 common SaaS vendors and their certifications
Vendor details page with extended fields for improved vendor management:
- Legal name and headquarters address
- Website URL
- Certification tracking with tag-based interface
- Links to important vendor documents (SLA, DPA, security pages)
- Support for multiple compliance certifications per vendor

Fixed

Fix cannot create vendor when the name is too similar to suggested one
Fix UI showing double button to close evidence preview modal
Fix cannot delete vendor with compliance reports (added cascade delete constraint)

[0.5.0] - 2025-04-10

Added

Add vendor compliance reports UI
Controls can now be linked to policies, enabling better organization of compliance documentation and clearer traceability between policies and security controls
New UI for viewing and managing policies related to a specific control

[0.4.2] - 2025-04-09

Changed

Simplified policy data model by removing version field and optimistic concurrency
Refactored policy update flow to load-modify-save pattern

Fixed

Added user-friendly error messages when importing frameworks that already exist

[0.4.1] - 2025-04-09

Changed

Update ISO 27001 and SOC2 framework definition.

[0.4.0] - 2025-04-09

BREAKING CHANGES

BREAKING: Renamed GraphQL mutations for control-mitigation mappings:
- createControlMapping → createControlMitigationMapping
- deleteControlMapping → deleteControlMitigationMapping
- Input and payload types have been updated accordingly

Added

Add import control <> mitigation mapping.
Add mitigation tasks import.
Add auto-scroll to opened category.
Added support for mapping controls to policies:
- New GraphQL mutations createControlPolicyMapping and deleteControlPolicyMapping
- Controls can now be associated with both mitigations and policies
- New bidirectional relationships:
  - Control objects now expose a policies field to list associated policies
  - Policy objects now expose a controls field to list associated controls
Added vendor compliance reports:
- New GraphQL types VendorComplianceReport and related connection types
- New GraphQL mutations uploadVendorComplianceReport and deleteVendorComplianceReport
- New complianceReports field on the Vendor type
- Support for uploading, viewing, and managing vendor compliance documentation
Added pre-configured frameworks:
- Added ISO/IEC 27001:2022 and SOC 2 framework templates
- Improved framework import interface with dropdown menu for template selection
- Support for one-click import of standard compliance frameworks

Changed

Evidence can now be requested.

Fixed

Fix unfoldable mitigation category when open via the URI fragment.
Fix ctrl+click on mitigation does not open new tab.
Fix error handling in framework view when no controls are available.

[0.3.0] - 2025-04-01

Added

Add sidebar to show a task.
Add task estimate edition.
Add control+framework auditor views.
Add import mitigations support.
Add import framework support.
Add risk object management.
Add risk template.
Add mapping between control and risk.

Changed

Rename control in mitigation.
Home page is now mitigations page.

Fixed

Fix panic in GraphQL resolver are not reported.
Fix otal trace never started.
Fix React.lazy chunck error.
Fix login page show unauthorized error.
Fix cannot delete task with evidences.
Fix cannot download file with non-ASCII filename.

[0.2.0] - 2025-03-24

Added

Add forget password.
Allow evidence to be a link.
Add task import support.
Allow to create vendor when it not exist in the auto-complete.
Add service account people kind.

Changed

Make task time estimate optional.
Set invitation token to 12 hours.
Order people by fullname.
Order vendor by name.
Allow to edit control state without going to edit page.
Redirect on people list after people creation.
New UI for the framework overview page.

Fixed

Fix flickering on hover on categories.
Fix control order under a category.
Fix UI does not refresh after importing a framework.
Fix cannot create control.
Fix missing include cookie on confirmation invit.
Fix sign-in does not include cookie.
Fix missing version when create task.
Fix random order on framework overview.
Fix change task state not visible on UI.
Fix control card items alignement.
Fix cannot delete task.
Fix password managers misidentifying token fields as usernames in reset password and invitation confirmation forms.

[0.1.0] - 2025-03-14

Initial release.

49 KiB Raw Blame History

Changelog

Unreleased

[0.165.0] - 2026-04-09

Fixed

Changed

[0.164.0] - 2026-04-09

Fixed

Changed

[0.163.2] - 2026-04-08

Added

Changed

[0.163.1] - 2026-04-07

Fixed

[0.163.0] - 2026-04-07

Changed

[0.162.1] - 2026-04-07

Fixed

[0.162.0] - 2026-04-06

Added

Fixed

[0.161.2] - 2026-04-06

[0.161.1] - 2026-04-06

Fixed

[0.161.0] - 2026-04-03

Added

Changed

[0.160.2] - 2026-04-03

Fixed

[0.160.1] - 2026-04-03

Fixed

[0.160.0] - 2026-04-03

Added

Changed

[0.159.0] - 2026-04-02

Added

Fixed

[0.158.0] - 2026-04-02

Added

[0.157.0] - 2026-04-01

Added

Changed

Fixed

[0.156.1] - 2026-04-01

Fixed

[0.156.0] - 2026-03-31

Changed

Added

Fixed

[0.155.0] - 2026-03-31

Added

Fixed

[0.154.2] - 2026-03-30

Added

Fixed

[0.154.1] - 2026-03-30

Fixed

[0.154.0] - 2026-03-30

Added

Fixed

[0.153.2] - 2026-03-26

Fixed

[0.153.1] - 2026-03-26

Fixed

[0.153.0] - 2026-03-26

Added

Fixed

[0.152.0] - 2026-03-25

Added

Fixed

[0.151.0] - 2026-03-24

Added

Changed

[0.150.0] - 2026-03-23

Added

[0.149.0] - 2026-03-20

Changed

Fixed

[0.148.0] - 2026-03-20

Added

49 KiB

Raw Blame History