What's Changed
- [WEB-10027] fix: reject legacy file-asset POST and strip query from asset id by @pablohashescobar in #10216
- [WEB-10025] fix: require active workspace members as project lead/assignee by @pablohashescobar in #10214
- [WEB-10024] fix: restrict project entity search to active project members by @pablohashescobar in #10213
- [WEB-10009] fix: check page access on every live collaboration socket by @pablohashescobar in #10207
- [WEB-10010] fix: block restricted guests from links and subscribers of others' issues by @pablohashescobar in #10205
- [WEB-10023] fix: make legacy FileAsset POST fields read-only by @pablohashescobar in #10212
- [WEB-9436] chore: migrations lockfile and label for migration PRs by @dheeru0198 in #10189
- fix: keep the preferences timezone select inside the settings modal by @anmolsinghbhatia in #10257
- [GIT-408] fix: keep workspace switcher actions visible while scrolling by @Rahulcheryala in #10258
- fix(aio): create supervisor log directories on boot by @RealBhupesh in #9818
- docs: document DATABASE_URL, PORT, and REDIS_URL in CONTRIBUTING.md by @pranav-afk in #9411
- [WEB-10020] fix: bind project cover uploads to URL workspace and admins by @pablohashescobar in #10256
- fix(api): count issues, not state groups, in public module counts by @Darshanpawar7 in #10259
- fix: block restricted guests from assets of issues hidden from them by @sriramveeraghanta in #10261
- chore: resolve open Dependabot alerts by @sriramveeraghanta in #10262
- docs: verify and refresh repo documentation against the code by @sriramveeraghanta in #10263
- fix: deployment script and test tooling bugs found in docs audit by @sriramveeraghanta in #10264
- [WEB-10019] fix: make DynamicBaseSerializer honor fields= allowlists by @pablohashescobar in #10211
- [GIT-409] fix(editor): skip upload status sync on a destroyed editor by @b-saikrishnakanth in #10267
New Contributors
- @pranav-afk made their first contribution in #9411
- @Darshanpawar7 made their first contribution in #10259
Full Changelog: v1.5.0-rc1...v1.5.0-rc2