Features
- feat(integrations): AWS SES, IAM Identity Center, and enhanced IAM/STS/CloudWatch/DynamoDB (#4245)
- feat(contact): add contact page, migrate help/demo forms to useMutation (#4242)
- feat(log): Add wrapper function for standardized logging (#4061)
- feat(jobs): Add data retention jobs (#4128)
- feat(ui): Add slack manifest generator (#4237)
Improvements
- improvement(contact): add Turnstile CAPTCHA, honeypot, and robustness fixes (#4248)
- improvement(access-control): migrate to workspace scope (#4244)
- improvement(landing): scope navbar/footer to (shell) route group, align scoped 404s with root (#4246)
- improvement(enterprise): slack wizard UI, enterprise docs, data retention updates (#4241)
- improvement(knowledge): show selector with saved option in connector edit modal (#4240)
- improvement(sso): fix provider lookup, migrate UI to emcn, add enterprise SSO docs (#4238)
- improvement(governance): workspace-org invitation system consolidation (#4230)
Bug Fixes
- fix(settings): hide data-retention nav item when user lacks enterprise plan (#4256)
- fix(deps): bump drizzle-orm 0.45.2 + adopt MCP SDK 1.25.3 native types (#4252)
- fix(aws): add validateAwsRegion to all AWS route schemas to prevent SSRF (#4250)
- fix(landing): resolve error-page crash on invalid /models and /integrations routes (#4243)
- fix(billing): close TOCTOU race in subscription transfer, centralize stripe test mocks (#4239)
- fix(security): enforce URL validation across connectors, providers, and auth flows (SSRF + open-redirect hardening) (#4236)
Other Changes
- seo(robots): disallow tag-filtered blog URLs from crawlers (#4247)