kolaente 03c1f0fc7f fix(mcp): gate users_search on scopes a token can actually hold ...

The users and projects_users_search groups don't exist; the routes collect
as other:users and projects:users_search, so PermissionsAreValid rejected
any real token and the tool was unreachable. Also strip emails on the
project-scoped search path.

2026-08-29 00:36:12 +02:00

..

auth

fix(openid): pin token endpoint auth method instead of probing (#3607)

2026-08-27 12:43:11 +00:00

avatar

fix: use caller's session in LoadFileMetaByID to prevent connection pool deadlock

2026-08-16 17:57:52 +02:00

background

fix(projects): sub-resource permission checks no longer get the un-archive exception

2026-08-20 11:58:06 +02:00

dump

…

humabridge

fix(api/v2): don't require read_one for autopatch's internal GET

2026-08-19 13:01:59 +02:00

keyvalue

feat(keyvalue): add PutWithTTL to the storage interface

2026-08-19 17:29:35 +02:00

mcp

fix(mcp): gate users_search on scopes a token can actually hold

2026-08-29 00:36:12 +02:00

migration

fix(deps): update module github.com/yuin/goldmark to v2 (#3627)

2026-08-27 20:34:29 +00:00