v3.99.1

3.99.1 (2026-07-07)

Bug Fixes

• integrations: connect GitHub App via OAuth authorize URL, not install URL (CS-710) (#3371) (51ab7b1)

v3.99.0

3.99.0 (2026-07-07)

Bug Fixes

• integrations: don't persist unverified GitHub installation_id (#3370) (9c6f6fa)
• isms: lock before writing control links so edits serialize with approve (#3369) (a21f866)
• isms: production-deploy review follow-ups (CS-701) (#3365) (d756d4a), closes #3364
• isms: serialize approve against ALL register/content edits (central lock) (#3367) (5c88a3d)
• isms: serialize approve/decline to prevent concurrent double-publish (CS-701) (#3366) (b158bc9), closes #3364

Features

• integrations: add read-only GitHub App integration (CS-710) (#3363) (a5a9243)
• isms: document versioning and history (CS-701) (#3361) (d95dc2e)

v3.98.1

3.98.1 (2026-07-06)

Bug Fixes

• policies: keep PDF headings with their section (CS-704) (#3358) (5bac5c9)
• risk-treatment: rank tasks by exact in-process cosine, not filtered ANN (#3359) (6293aad)

v3.98.0

3.98.0 (2026-07-06)

Bug Fixes

• address follow-up (70c393c)
• api: add isActive filter to member query (545bc74)
• api: tie trust portal access link expiry to the grant duration (cc493f0)
• app: sort assignee list alphabetically in assignee dropdown (13aa3ef)
• cloud-security: exclude per-task runs from latest scan selection (c51b17c)
• risk-treatment: ensure live tasks filter before ranking in draft plan (98401f4)
• risk-treatment: harden orphan task-vector prune (CS-681 review) (eb3c097)
• trust-portal: derive public vendor badges from cert data (CS-688) (#3355) (dd2ea84), closes 3315/#3318
• trust-portal: restore soc3/pipeda/ccpa badge mappings (CS-688) (#3357) (e8cb123)
• trust: address cubic review on the questionnaire toggle (6e71c3f)

Features

• trust: add setting to show/hide the Security Questionnaire on the public trust portal (f89c323)

v3.97.0

3.97.0 (2026-07-06)

Bug Fixes

• people: polish the redesigned People tab (requirement columns, filters, per-employee 2FA) (#3347) (75758ec)

Features

• integrations: emit per-user rows from the Google Workspace employee-access check (#3352) (0b54252)
• people: access tab on member details, per connected integration (#3349) (83f188c), closes #2

v3.96.1

3.96.1 (2026-07-03)

Bug Fixes

• people: polish the redesigned People tab (requirement columns, filters, per-employee 2FA) (#3347) (#3348) (f0e837c)

v3.96.0

3.96.0 (2026-07-03)

Features

People tab redesign

• Requirements now shown as per-person status columns — Policies, Training, HIPAA, Device, Background check — with clear Done / Missing states, replacing the old combined progress bar
• Per-employee 2FA status: pick which connected integration (e.g. Google Workspace) reports 2FA, and every person gets a Done / Missing / Not provided status
• Toolbar reworked: filters behind a Filters button with removable active-filter chips; sync & 2FA sources configured from a new Sync settings popover
• Always-visible horizontal scrollbar on wide tables; improved responsiveness and screen-reader labels throughout

Bug Fixes

• people: consistent error handling on the 2FA source endpoints
• people: reliable dismissal for selects inside toolbar popovers

v3.95.2

3.95.2 (2026-07-02)

Bug Fixes

• github-integration: use concurrent mapping for branch protection checks (5b68642)
• todo: create a ticket in team cs "[feature request/ux] - policy de (2a6b892)

v3.95.1

3.95.1 (2026-07-01)

Bug Fixes

• evidence-export: raise trigger task duration ceiling to prevent timeout (5375032), closes hi#volume

v3.95.0

3.95.0 (2026-07-01)

Bug Fixes

• frameworks: reject null fields and empty payload on custom framework update (e5f847b)
• frameworks: reject whitespace-only custom framework name (8db8ac5)
• frameworks: trim custom framework name/description in update DTO (dcf3dc1)
• integrations: use catalog-defined field names for fivetran basic auth (6050902)
• tasks: bound sanitized inputs check to prevent timeout on manual run (070a964)

Features

• frameworks: allow editing custom framework name and description (4e3f9ac)