Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
87 commits
Select commit Hold shift + click to select a range
ce69644
chore(deps): upgrade next themes package
sriramveeraghanta Dec 12, 2025
07f269e
chore: version bump
sriramveeraghanta Dec 12, 2025
81cea32
release: v1.2.1 #8322
sriramveeraghanta Dec 12, 2025
1548288
fix: IDOR Vulnerabilities in Asset & Attachment Endpoints (#8644)
sriramveeraghanta Feb 20, 2026
ec44b63
chore: pacakge version
sriramveeraghanta Feb 20, 2026
6c984e1
chore(deps): bump cryptography (#8625)
dependabot[bot] Feb 11, 2026
318c993
[SECUR-104] fix: Arbitrary Modification of API Token Rate Limits#8612
sangeethailango Feb 9, 2026
95d121c
chore(deps): upgrade django version
sriramveeraghanta Feb 9, 2026
b783f25
[SECUR-113] fix: ssrf for work item links (#8607)
sangeethailango Feb 5, 2026
a77af4e
Update apps/api/plane/app/views/issue/attachment.py
sriramveeraghanta Feb 20, 2026
8c23fdd
fix: Member Information Disclosure via Public Endpoint #8646
sriramveeraghanta Feb 20, 2026
2a978e3
release: v1.2.2 #8645
sriramveeraghanta Feb 23, 2026
9a7696a
chore: version upgrade
sriramveeraghanta Mar 5, 2026
7b1f5a4
[SECUR-116] fix: ssrf webhook url for ip address #8716
sriramveeraghanta Mar 5, 2026
7902805
release: v1.2.3 #8717
sriramveeraghanta Mar 5, 2026
2e429e5
[WIKI-874] refactor: description input component (#8544)
aaryan610 Mar 5, 2026
d7c12f9
chore(deps): bump python-json-logger from 3.3.0 to 4.0.0 in /apps/api…
dependabot[bot] Mar 7, 2026
6627282
chore(deps): bump pytest from 7.4.0 to 9.0.2 in /apps/api (#8693)
dependabot[bot] Mar 7, 2026
588dc29
[WEB-6599] feat: instance not ready ui revamp (#8755)
anmolsinghbhatia Mar 16, 2026
e972989
chore(deps): upgrade the undici and flatted versions
sriramveeraghanta Mar 17, 2026
428cb47
[WEB-6610] Fix work item drag handle hover gap (#8759)
iam-vipin Mar 17, 2026
72b6453
chore(deps): bump the actions group across 1 directory with 11 update…
dependabot[bot] Mar 17, 2026
1faf06c
chore: remove chat support component
sriramveeraghanta Mar 17, 2026
9d3b5d9
fix: added workspace member check in allow permission for creator #8778
NarayanBavisetti Mar 23, 2026
c3c7c72
fix: package updates
sriramveeraghanta Mar 24, 2026
d9695af
fix: remove unused imports and variables (part 1 — packages & non-web…
darkingtail Mar 24, 2026
04d4490
fix: remove unused imports and variables (part 2 — web/core non-issue…
darkingtail Mar 24, 2026
5a7d1eb
fix: remove unused imports and variables (part 3) (#8753)
darkingtail Mar 24, 2026
d91b5a2
fix: removed unused files
sriramveeraghanta Mar 24, 2026
f3c7c05
chore: remove service token endpoint which is unused (#8797)
sriramveeraghanta Mar 25, 2026
6e033f9
sync: master branch changes to preview
sriramveeraghanta Mar 25, 2026
54b80e9
fix: broken lockfile
sriramveeraghanta Mar 25, 2026
d94a269
fix: add model_activity.delay() to API issue update/create paths for …
ouchanip Mar 25, 2026
942d2b9
[WEB-6702] feat: redesign intake action buttons and use design tokens…
anmolsinghbhatia Mar 26, 2026
5396d43
Open [WEB-6739] fix: color inside of active projects of analytics ove…
b-saikrishnakanth Mar 26, 2026
ce401c7
[WEB-6734] fix: circular progress indicator stroke color#8802
b-saikrishnakanth Mar 26, 2026
113bba4
fix: migrate page navigation pane tabs from headless ui to propel (#8…
Palanikannan1437 Mar 26, 2026
130ba5e
chore(deps): bump requests (#8804)
dependabot[bot] Mar 26, 2026
97b4abd
fix: tsdown watch (#8813)
lifeiscontent Mar 27, 2026
c53968a
[WEB-6762] fix: missing profile icons for recent activities on "Your …
b-saikrishnakanth Mar 27, 2026
f0468a9
[WEB-6763] fix: date range dropdown clipped in sub-issues list #8809
b-saikrishnakanth Mar 27, 2026
5e23793
[WEB-6783] fix: crash when deleting work item from peek view in works…
anmolsinghbhatia Mar 30, 2026
9851fe0
chore(deps): bump cryptography (#8819)
dependabot[bot] Mar 30, 2026
d7c8088
[SILO-1087] feat: add IssueRelations external API (#8763)
Saurabhkmr98 Mar 30, 2026
9fa707b
[SILO-1026] feat: add estimates external API endpoints (#8664)
Saurabhkmr98 Mar 30, 2026
d8ed19f
[WEB-6794] fix: align profile cover update with correct unsplash and …
anmolsinghbhatia Mar 31, 2026
f0ec846
chore(deps): update dependency overrides (#8831)
sriramveeraghanta Mar 31, 2026
b73d634
chore(deps): replace dotenvx with dotenv and update overrides (#8832)
sriramveeraghanta Mar 31, 2026
00a51f5
chore: version bump
sriramveeraghanta Mar 31, 2026
a01b51f
fix: scope IssueBulkUpdateDateEndpoint query to workspace and project…
sriramveeraghanta Mar 31, 2026
799b9cb
chore: adding traget commit sha for the github release
sriramveeraghanta Mar 31, 2026
d83944c
[INFRA-346] chore: remove artifacts.plane.so references from communit…
akshat5302 Mar 31, 2026
5747dc6
chore: Intake snooze modal width
sriramveeraghanta Mar 31, 2026
febf98e
[INFRA-351] fix: correct directory and command for space program in s…
akshat5302 Mar 31, 2026
a18d90d
[WEB-6813] fix: module not associated when accepting intake work item…
anmolsinghbhatia Mar 31, 2026
587fe76
fix: prevent privilege escalation in project member role updates (GHS…
sriramveeraghanta Apr 6, 2026
63fac3b
fix: validate redirects in favicon fetching to prevent SSRF (#8858)
sriramveeraghanta Apr 6, 2026
bb128e3
chore: upgrade turbo from v2.8.12 to v2.9.4 (#8859)
sriramveeraghanta Apr 6, 2026
cf696d2
release: v1.3.0 #8835
sriramveeraghanta Apr 6, 2026
d1db13c
chore(deps): bump vite in the npm_and_yarn group across 1 directory (…
dependabot[bot] Apr 7, 2026
7c2fc2d
fix: update Twitter icon and links to X (#8785) (#8790)
nielskaspers Apr 7, 2026
8a2579c
fix: prevent ORM field injection via segment parameter in analytics (…
sriramveeraghanta Apr 7, 2026
77c4b9c
fix: strip whitespace and handle null values in instance configuratio…
okxint Apr 8, 2026
6023e8c
[WEB-6784] feat scrollbar in shortcuts modal (#8872)
b-saikrishnakanth Apr 9, 2026
e6b9d4c
[WEB-6785] fix: update border for project timezone (#8870)
b-saikrishnakanth Apr 9, 2026
c21d2c6
chore: remove Intercom integration and chat support components (#8875)
sriramveeraghanta Apr 9, 2026
39325d2
chore: update dependencies (Django, cryptography, axios, lodash) (#8880)
sriramveeraghanta Apr 9, 2026
db3c8f2
[WEB-6840] feat: skip role & use-case steps for self-hosted instances…
anmolsinghbhatia Apr 13, 2026
bbf14fb
chore(deps): bump pytest (#8891)
dependabot[bot] Apr 14, 2026
13db2f8
enhance sub-issue query performance with optimized annotations and su…
PhuongPN6689 Apr 14, 2026
ac11c3e
fix: enforce workspace membership on V2 asset endpoints (#8885)
sriramveeraghanta Apr 20, 2026
a8a16c8
fix: replace IS_SELF_MANAGED with WEBHOOK_ALLOWED_IPS allowlist (#8884)
sriramveeraghanta Apr 20, 2026
45b4fc8
[SILO-1158] chore: add context for project in relations API (#8860)
Saurabhkmr98 Apr 20, 2026
aea66f5
fix: sanitize filenames in upload paths to prevent path traversal (#8…
sriramveeraghanta Apr 20, 2026
da41f14
chore(ci): suppress CodeQL file coverage deprecation warning (#8916)
sriramveeraghanta Apr 20, 2026
62b2d1b
chore: update CODEOWNERS for apps and deployments (#8919)
sriramveeraghanta Apr 20, 2026
f1d567a
chore: add Claude Code skills for PR descriptions and release notes (…
sriramveeraghanta Apr 20, 2026
c62930e
chore: bump up the package version
sriramveeraghanta Apr 20, 2026
03a2be8
chore(deps): bump lxml (#8925)
dependabot[bot] Apr 22, 2026
32fb88a
chore(deps): bump axios, uuid and add security overrides (#8930)
sriramveeraghanta Apr 25, 2026
761c999
fix: add WEBHOOK_ALLOWED_HOSTS allowlist for internal webhook targets…
sriramveeraghanta May 14, 2026
1dabc63
fix: pnpm path for Docker builds (#9079)
sriramveeraghanta May 14, 2026
d0a4adc
release: v1.3.1 #8917
sriramveeraghanta May 14, 2026
8764a63
Merge tag 'v1.3.1' into foss-main
hunzlahmalik May 20, 2026
11826f7
Revert "Merge pull request #22 from Pressingly/fix/corepack-pin-pnpm-…
hunzlahmalik May 20, 2026
0e816ac
Revert "fix: pin pnpm@10.30.2 in admin, live, space Dockerfiles (#28)"
hunzlahmalik May 20, 2026
0a315be
Merge pull request #38 from Pressingly/revert/pnpm-pin-prs-22-28
hunzlahmalik May 20, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
The table of contents is too big for display.
Diff view
Diff view
  •  
  •  
  •  
58 changes: 58 additions & 0 deletions .claude/skills/pr-description.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,58 @@
---
name: pr-description
description: Generate a PR description following the project's GitHub PR template. Analyzes the current branch's changes against the base branch to produce a complete, filled-out PR description.
user_invocable: true
---

# PR Description Generator

Generate a pull request description based on the project's PR template at `.github/pull_request_template.md`.

## Steps

1. **Determine the base branch**: Prefer the PR's actual `baseRefName` (via `gh pr view <PR> --json baseRefName`) when a PR exists. Otherwise default by intent — feature PRs target `preview`, release PRs target `master`. If still ambiguous, ask the user.

2. **Analyze changes**: Run the following to understand what changed:
- `git log <base>...HEAD --oneline` to see all commits on this branch
- `git diff <base>...HEAD --stat` to see which files changed
- `git diff <base>...HEAD` to read the actual diff (use `--no-color`)
- If the diff is very large, focus on the most important files first

3. **Fill out the PR template** with the following sections:

### Description

Write a clear, concise summary of what the PR does and why. Focus on the "what" and "why", not line-by-line changes. Mention any important implementation decisions.

### Type of Change

Check the appropriate box(es) based on the changes:
- Bug fix (non-breaking change which fixes an issue)
- Feature (non-breaking change which adds functionality)
- Improvement (non-breaking change that improves existing functionality)
- Code refactoring
- Performance improvements
- Documentation update

### Screenshots and Media

Leave this section for the user to fill in, preserving the existing placeholder comment from `.github/pull_request_template.md` verbatim rather than introducing different text.

### Test Scenarios

Based on the code changes, suggest specific test scenarios that should be verified. Be concrete (e.g., "Navigate to project settings and verify the new toggle works") rather than generic.

### References
- If commit messages or branch name reference a work item identifier (e.g., `WEB-1234`), include it
- If the user provides a linked issue, include it
- If Sentry issue links or IDs (e.g., `SENTRY-ABC123`, Sentry URLs) were mentioned earlier in the conversation, include them as references

4. **Output format**: Print the filled-out markdown template so the user can copy it directly. Do NOT wrap it in a code fence — output the raw markdown.

## Guidelines

- Keep the description concise but informative
- Use bullet points for multiple changes
- Focus on user-facing impact, not implementation details
- If the branch has a Plane work item ID in its name (e.g., `WEB-1234`), reference it
- Don't fabricate test scenarios that aren't relevant to the actual changes
147 changes: 147 additions & 0 deletions .claude/skills/release-notes.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,147 @@
---
name: release-notes
description: "Generate release notes for a Plane release PR in `makeplane/plane` (semver, e.g. `release: vX.Y.Z`). Reads PR commits, filters out noise, categorizes by conventional-commit type, optionally enriches via Plane MCP, and writes the result as the PR description."
user_invocable: true
---

# Release Notes Generator

Generate structured release notes from a Plane release PR by parsing its commit list, then update the PR description.

## Versioning

Plane community uses **semver** (`vX.Y.Z`, major.minor.patch) for releases.

- PR title format: `release: vX.Y.Z`
- Source branch: `canary`
- Target branch: `master`

## When to Use

- User links/mentions a Plane release PR (e.g. `release: v1.3.0`) and asks for release notes
- User asks to "create release notes" / "update PR description" for a release PR in `makeplane/plane`
- The branch is named `canary` or `release/x.y.z` and the base is `master`

## Steps

### 1. Fetch commits

```bash
gh pr view <PR_NUM> --json title,body,baseRefName,headRefName,commits \
--jq '.commits[] | .messageHeadline + "\n---BODY---\n" + .messageBody + "\n===END==="'
```

For a quick scan first:

```bash
gh pr view <PR_NUM> --json commits \
--jq '.commits[] | {oid: .oid[0:10], message: .messageHeadline}'
```

### 2. Filter out noise

**Always exclude** these commits — mechanical, not user-facing:

| Pattern | Reason |
| -------------------------------------------- | -------------- |
| `fix: merge conflicts` | Merge artifact |
| `Merge branch '...' of github.com:...` | Merge artifact |
| `Revert "..."` (when immediately re-applied) | Internal churn |

### 3. Parse work item IDs

Most meaningful commits begin with a Plane work item identifier in brackets:

- `[WEB-XXXX]` — web/frontend product items
- `[SILO-XXXX]` — Silo (integrations: Slack, GitHub, GitLab, Jira/Linear)
- `[MOBILE-XXXX]`, `[API-XXXX]`, etc.

Always preserve these IDs in the release notes — they let readers click through to the source ticket.

### 4. (Optional) Enrich via Plane MCP

For larger features where the commit headline is terse, fetch the work item:

```text
mcp__plane__retrieve_work_item_by_identifier(project_identifier="WEB", issue_identifier=6874)
```

Use the returned `name` and `description_stripped` to flesh out the bullet. Skip this for routine fixes — commit body is usually enough. Don't enrich every item (slow + work item descriptions are often empty).

### 5. Categorize by conventional-commit type

| Commit prefix | Section |
| -------------------------------- | ------------------- |
| `feat:`, `feat(scope):` | ✨ New Features |
| `fix:`, `fix(scope):` | 🐛 Bug Fixes |
| `refactor:` | 🔧 Refactor & Chore |
| `chore:`, `chore(scope):` | 🔧 Refactor & Chore |
| `chore(deps):`, dependabot bumps | 📦 Dependencies |

### 6. Format

```markdown
# Release vX.Y.Z

## ✨ New Features

- **<Short title>** — [WEB-XXXX] (#PR_NUM)
Optional 1–2 sentence elaboration drawn from commit body.

## 🐛 Bug Fixes

- **<Short title>** — [WEB-XXXX] (#PR_NUM)

## 🔧 Refactor & Chore

- **<Short title>** — [WEB-XXXX] (#PR_NUM)

## 📦 Dependencies

- Bump `<package>` X.Y.Z → A.B.C (#PR_NUM)
```

Rules:

- Lead with a bold human-readable title (rewrite the commit subject if cryptic)
- Always include the work item ID in brackets and the merge PR number in parens
- Add a sub-line elaboration only when the commit body has substance worth surfacing (acceptance criteria, scope notes, gotchas like "behind feature flag", "requires migration", "requires Vercel setting")
- Drop empty sections

### 7. Update the PR description

```bash
gh pr edit <PR_NUM> --body "$(cat <<'EOF'
<release notes markdown>
EOF
)"
```

Always use a HEREDOC with single-quoted `'EOF'` so backticks/dollars in the notes are preserved.

## Quick Reference: end-to-end

```bash
PR=2498
gh pr view $PR --json commits --jq '.commits[] | .messageHeadline + "\n---\n" + .messageBody + "\n==="' > /tmp/commits.txt
# read /tmp/commits.txt, filter, categorize, draft notes
gh pr edit $PR --body "$(cat <<'EOF'
... release notes ...
EOF
)"
```

## Common Mistakes

- **Including `fix: merge conflicts`** — merge artifact, no functional content
- **Dropping the work item ID** — readers rely on `[WEB-XXXX]` to navigate to the ticket
- **Over-enriching with MCP lookups** — work item descriptions are often empty; commit body is usually richer
- **Missing the merge PR number** — always include `(#NNNN)` from the commit subject so reviewers can audit the source PR
- **Using `--body` without HEREDOC** — backticks/dollar signs get shell-interpreted and corrupt the notes
- **Editing the title** — release PR titles are version markers; only edit the body

## Plane-Specific Conventions

- Release PRs go from `canary` → `master`
- PR title format: `release: vX.Y.Z` semver (major.minor.patch)
- Commits coming from feature branches always carry a work item ID; commits without one are usually infra/chores
7 changes: 0 additions & 7 deletions .codespellrc

This file was deleted.

55 changes: 0 additions & 55 deletions .github/dependabot.yml

This file was deleted.

Loading
Loading