New features
- 👌 Add camera capture options to file uploads (#2560) [512c988]
- 👌 Add a separator label for date range answers (#2573) [6e6b0b2]
Fixed
- 🐛 Fix stored WhatsApp phone lookup fallback (#2531) [f00ccba]
- 🐛 Fix embed video overlay in preview (#2532) [9224f4f]
- 🐛 Fix S3 operations without full config (#2533) [248f751]
- 🐛 Improve expired data cleanup reliability (#2536) [b86864c]
- 🐛 Fix WhatsApp audio file upload URLs (#2539) [54e1fa1]
- 🐛 Fix miscellaneous errors (#2540) [c7ae1c1]
- 🐛 Restore automatic dev database sync (#2550) [9900fc7]
- 🐛 Fix Android camera for image extension uploads (#2558) [e7be877]
- 🐛 Fix export workflow startup status [5da37e4]
- 🐛 Fix transcripts with removed input answers [248433d]
- 🐛 Honor the DATABASE_URL schema parameter in the Prisma PostgreSQL adapter (#2582) [f9a57c4]
- 🐛 Fix sidebar block drag on Android touch devices (#2569) [6796f58]
- 🐛 Support BSUID-only WhatsApp webhooks [570d538]
- 🐛 Fix production workspace suspension [b14f756]
Security
- 🐛 Fix custom domain deletion ownership checks (#2541) [06575df]
- 🐛 Harden email login codes (#2542) [03c8dd9]
- 🐛 Secure Send Email attachment handling (#2543) [9c81300]
- 🐛 Secure deprecated file upload URLs (#2544) [ab72956]
- 🔒️ Upgrade vulnerable dependencies [70b4d5d]
- 🔒️ Fix TAC scan header findings (#2549) [d039794]
- 🐛 Stop guest invitation email abuse [390dddd]
- 🐛 Fix preview workspace credential binding (#2551) [33aa58d]
- 🐛 Prevent cross-workspace invitation takeover [7ad9ec1]
- 🐛 Prevent webhook credential leaks in logs [53f6461]
- 🐛 Protect Typebot collaborator identities [9b9d52d]
- 🐛 Sanitize embed bubble URLs [cc19553]
- 🐛 Protect AI provider base URLs from SSRF [4b63182]
- 🐛 Secure server-side HTTP request execution [5c7cd4c]
- 🐛 Fix free workspace creation race [a6bed8b]
- 🐛 Secure HTTP proxy destinations [63b1e2f]
- 🐛 Protect Dify endpoints against SSRF [cfb2e7a]
- 🐛 Prevent workspace seat limit races [eec8ac4]
- 🐛 Protect NocoDB and PostHog requests against SSRF [d87c171]
- 🐛 Restrict guest access to collaborative Typebots [0db8673]
Content
- 📝 Add June content batch [b647b3e]
- 📝 Fix blog canonical URLs [17fb696]
- 📝 Add July content part 1 (#2559) [a880e3a]
- 📝 Add July content part 2 [183be54]
- 📝 Fix chatbot guide links [6e9ab23]
Internal
- 🔧 Restore OpenAPI docs generation pipeline (#2553) [9d2d7ea]
- 🔧 Disable daily churn analysis cron [fa2e2e9]
- 🔧 Prepare Ask Assistant migration campaign [ef1b4c6]
- 🔧 Sync commit skill conventions [76df665]
- 🔧 Add Typebot suspension tooling [e791f1a]
- 🔧 Add guest invitation abuse telemetry [6ab5211]
- 🔧 Revert guest invitation abuse telemetry [cf83dd3]
- 🔧 Run in-depth analytics aggregations concurrently (#2572) [7fa9ab4]
- 🔧 Run operational scripts with production MySQL [5879d94]
- 🔧 Add T3 worktree setup [f795644]
- ♻️ Format in-depth analytics handler [aac5819]
- 🔧 Harden operational scripts for agents [56c1dbd]
- 🔧 Restore secret log regression test isolation [6c88346]