chore: sync upstream preview into main (105 commits) + reconcile custom features#60

Open

mguptahub wants to merge 109 commits into

mainfrom

chore/upgrade-preview-sync

Commits on Apr 13, 2026

[WEB-6840] feat: skip role & use-case steps for self-hosted instances (#8890)
anmolsinghbhatia
authored

Commits on Apr 14, 2026

chore(deps): bump pytest (#8891)
dependabot[bot]
authored
enhance sub-issue query performance with optimized annotations and subqueries (#8889)
PhuongPN6689
authored

Commits on Apr 20, 2026

fix: enforce workspace membership on V2 asset endpoints (#8885)
sriramveeraghanta
authored
fix: replace IS_SELF_MANAGED with WEBHOOK_ALLOWED_IPS allowlist (#8884)
sriramveeraghanta
authored
[SILO-1158] chore: add context for project in relations API (#8860)
Saurabhkmr98
authored
fix: sanitize filenames in upload paths to prevent path traversal (#8879)
sriramveeraghanta
authored
chore(ci): suppress CodeQL file coverage deprecation warning (#8916)

sriramveeraghanta
and
Copilot
authored
chore: update CODEOWNERS for apps and deployments (#8919)
sriramveeraghanta
authored
chore: add Claude Code skills for PR descriptions and release notes (#8920)
sriramveeraghanta
authored
chore: bump up the package version
sriramveeraghanta
committed

Commits on Apr 22, 2026

chore(deps): bump lxml (#8925)
dependabot[bot]
authored

Commits on Apr 25, 2026

chore(deps): bump axios, uuid and add security overrides (#8930)
sriramveeraghanta
authored

Commits on Apr 27, 2026

chore(deps): bump postcss (#8931)
dependabot[bot]
authored

Commits on Apr 28, 2026

fix: filter out soft-deleted states from API endpoints (#8840)
KanteshMurade
authored

Commits on Apr 29, 2026

chore(deps): remove unused pnpm overrides (#8973)
sriramveeraghanta
authored

Commits on May 4, 2026

fix(api): scope cross-workspace resource lookups to prevent IDOR (#9008)
sriramveeraghanta
authored

Commits on May 5, 2026

Commits on May 12, 2026

[GIT-175] fix: completed_at updation logic for work items (#9044)

authored

Commits on May 19, 2026

Commits on May 21, 2026

fix(aio): use JSON array double quotes in VOLUME instruction (#9099)
astarte75
authored

Commits on May 24, 2026

fix(web): add requestIdleCallback fallback for Safari/iOS (#9094)
bubacho
authored

Commits on May 25, 2026

Commits on May 26, 2026

Commits on May 27, 2026

Commits on May 28, 2026

Commits on May 30, 2026

fix: harden webhook/link/OAuth-avatar SSRF (advisory clusters A/B/C/E) (#9163)
sriramveeraghanta
authored

Commits on May 31, 2026

chore: move all dependencies into pnpm catalog (#9153)
sriramveeraghanta
authored

Commits on Jun 3, 2026

Commits on Jun 4, 2026

Commits on Jun 8, 2026

chore: integrate react-doctor scanning (#9223)
sriramveeraghanta
authored

Commits on Jun 9, 2026

[GIT-238] refactor: migrate types from apps/web to @plane/types (#9203)
Rahulcheryala
authored

Commits on Jun 10, 2026

Commits on Jun 15, 2026

Commits on Jun 16, 2026

Commits on Jun 20, 2026

Commits on Jun 23, 2026

Commits on Jun 24, 2026

[WEB-7787] fix(auth): restore activation flow and narrow deactivation guard (#9304)

mguptahub
and
Plane AI
authored

Commits on Jun 26, 2026

[GIT-239 | GIT-240] refactor: hooks and constants consolidation to core (#9204)
Rahulcheryala
authored

Commits on Jun 30, 2026

Commits on Jul 1, 2026

Commits on Jul 7, 2026

Commits on Jul 9, 2026

Commits on Jul 13, 2026

Commits on Jul 14, 2026

Commits on Jul 16, 2026

Commits on Jul 17, 2026

feat(api): add lite list endpoints for projects, members, cycles, and modules (#9410)
akhil-vamshi-konam
authored

Commits on Jul 21, 2026

chore(deps): resolve open Dependabot security alerts (#9456)
sriramveeraghanta
authored

Commits on Jul 22, 2026

Commits on Jul 23, 2026

chore(dev-stack): rename iw-dev dev stack to pp-dev

Surya
and
claude
committed
fix(dev-stack): remove stray token breaking Caddy proxy startup

Surya
and
claude
committed