Security
Security hardening round
Account lockout scoped to the individual account, session-only access to the credential vault, bounded planning ranges, and stricter input validation across write paths.
Changelog
Release notes should prove the system is alive: docs, planning, security, integrations, and quality work compounding into one operating platform.
Account lockout scoped to the individual account, session-only access to the credential vault, bounded planning ranges, and stricter input validation across write paths.
Opt-in browser notifications for assignments, approvals, and mentions. Interface language now follows the person across devices, with an organisation-wide default for new members.
Bring existing work in from CSV or Excel with column mapping, a full dry run before anything is written, per-row error reporting, and one-click undo. Turkish spreadsheet formats are detected automatically.
Start dates joined deadlines across every way work is created, and the timeline gained a Gantt mode with dependency-aware bars for work whose start is still open.
Files attach directly to tasks under the same visibility rules as the task itself. Sprints gained durable state, automatic status transitions, burndown, and structured close and rollover.
Permission-aware chat, model selection, workspace answers, and approval-gated write actions joined the workspace.
Collaborative documents, page trees, permissions, share links, and realtime draft sync shipped as a full workspace surface.
Visual sprint planning, allocation, velocity, and Gantt-style timeline views joined the workspace.
Cookie-only admin auth, expanded E2E coverage, visual regression infrastructure, and calendar date fixes strengthened reliability.
Two-way calendar sync, OAuth token refresh, admin control, and clean ownership model added schedule connectivity.