logo
Tuturuuu
PricingAboutContact
Plan & execute
CalendarAI auto-scheduling around your real priorities.TasksBoards, hierarchies, and a fast capture inbox.MeetFind a time that works for everyone, fast.WorkflowsAutomate the handoffs between your tools.TimekeepingStart a timer and see where the week actually went.FormsBuild a form, collect responses, read the results in place.
Create & share
DocumentsCollaborative docs that stay next to the work.DriveShared storage with workspace-level permissions.MailTeam inboxes wired into tasks and calendar.ChatChannels, direct messages, and files in the same workspace as your work.AIMira and the assistants powering every surface.QRCodes for links, events, menus, and payments.
Run the business
FinanceTrack spend, budgets, invoices, and wallets.CRMContacts, pipelines, and customer history.InventoryProducts, stock, suppliers, and warehouses.StorefrontA buyer-facing shop sitting on top of your inventory.AgentsA lab for swarm agents: build workflows, run simulations, study the results.LearningCourses, quizzes, and progress tracking.
Explore every Tuturuuu app
PortfolioProducts, engineering, and research collaboration.Tuturuuu early accessWindows, macOS, and Linux appsBlogRead our latest articles and updates.ChangelogStay up to date with our latest product updates and improvements.CareersJoin our team and help us build the future of Tuturuuu.PartnersExplore partnership opportunities with Tuturuuu.ContributorsMeet the people who make Tuturuuu possible.SecurityLearn about our security practices and commitments.Random GeneratorGenerate secure IDs, tokens, API keys, and passwords locally in your browser.BrandingGet Tuturuuu's branding assets and guidelines.UIBrowse the Tuturuuu UI component library.DocumentationFind detailed documentation and guides.
Platform Updates

What's New in Tuturuuu

Stay up to date with the latest features, improvements, and updates to make your workflow even better.

Browse releasesFollow on GitHub
500
Releases
80
Packages
2011
Features
4985
Fixes
01Latest release
Introducing Platform-wide Changelogs
New featureNovember 2025

Introducing Platform-wide Changelogs

We have launched Platform-wide Changelogs to keep you informed on every update. Stay in the loop with everything building at Tuturuuu!

November 30, 2025Read more
03Platform releases

Every release, filterable

Every published release, parsed from GitHub and refreshed hourly. Filter by package or change type, search the commit subjects, and sort however you need.

Type
Platform Updates

Never miss an update

Follow our GitHub repository to stay informed about the latest developments and contribute to the project.

Follow on GitHub

500 releases

Most recent releases only

learnv0.32.0October 24, 2026
Features1
  • satelliteshared account, profile and security settings in every app ([#6477](https://github.com/tutur3u/platform/issues/6477))2cd0879
Fixes5
  • authrepair account switching and notification access ([#6545](https://github.com/tutur3u/platform/issues/6545))9afff45
  • securityderive client IP from trusted proxy headerscf2caa9
  • securityderive client IP from trusted proxy headers ([#6554](https://github.com/tutur3u/platform/issues/6554))1af01f8
  • securityresolve code-scanning findings in shared packages and runtime logs ([#6531](https://github.com/tutur3u/platform/issues/6531))5690b3d
  • websecure notifications and account redirects8c597f4
storefrontv0.32.0October 24, 2026
Features1
  • satelliteshared account, profile and security settings in every app ([#6477](https://github.com/tutur3u/platform/issues/6477))2cd0879
Fixes2
  • authrepair account switching and notification access ([#6545](https://github.com/tutur3u/platform/issues/6545))
inventoryv0.37.0October 24, 2026
Features2
  • cron-controlport checkout expiry to a default-off Worker processor ([#6473](https://github.com/tutur3u/platform/issues/6473))aabb32b
  • satelliteshared account, profile and security settings in every app ([#6477](https://github.com/tutur3u/platform/issues/6477))2cd0879
infrav0.38.0October 24, 2026
Features2
  • devboxseparate runner trust pools and add an observable drain ([#6450](https://github.com/tutur3u/platform/issues/6450))64401ab
  • satelliteshared account, profile and security settings in every app ([#6477](https://github.com/tutur3u/platform/issues/6477))2cd0879
hivev0.26.2October 24, 2026
Fixes2
  • securityderive client IP from trusted proxy headerscf2caa9
  • securityderive client IP from trusted proxy headers ([#6554](https://github.com/tutur3u/platform/issues/6554))1af01f8
financev0.35.0October 24, 2026
Features1
  • satelliteshared account, profile and security settings in every app ([#6477](https://github.com/tutur3u/platform/issues/6477))2cd0879
Fixes7
  • authrepair account switching and notification access ([#6545](https://github.com/tutur3u/platform/issues/6545))
drivev0.33.0October 24, 2026
Features1
  • satelliteshared account, profile and security settings in every app ([#6477](https://github.com/tutur3u/platform/issues/6477))2cd0879
Fixes5
  • authrepair account switching and notification access ([#6545](https://github.com/tutur3u/platform/issues/6545))
databasev1.44.0October 24, 2026
Features3
  • cirestore CodeQL and add a security review cadence ([#6456](https://github.com/tutur3u/platform/issues/6456))10d839a
  • devboxseparate runner trust pools and add an observable drain ([#6450](https://github.com/tutur3u/platform/issues/6450))64401ab
cmsv0.38.0October 24, 2026
Features1
  • satelliteshared account, profile and security settings in every app ([#6477](https://github.com/tutur3u/platform/issues/6477))2cd0879
Fixes5
  • authrepair account switching and notification access ([#6545](https://github.com/tutur3u/platform/issues/6545))
chatv0.28.0October 24, 2026
Features1
  • satelliteshared account, profile and security settings in every app ([#6477](https://github.com/tutur3u/platform/issues/6477))2cd0879
Fixes2
  • authrepair account switching and notification access ([#6545](https://github.com/tutur3u/platform/issues/6545))
calendarv0.36.0October 24, 2026
Features1
  • satelliteshared account, profile and security settings in every app ([#6477](https://github.com/tutur3u/platform/issues/6477))2cd0879
Fixes17
  • authrepair account switching and notification access ([#6545](https://github.com/tutur3u/platform/issues/6545))
appsv0.25.1October 24, 2026
Fixes2
  • securityharden apps and offline file accessf41dd6c
  • securityharden apps and offline file access ([#6529](https://github.com/tutur3u/platform/issues/6529))1883927
ai-studiov0.19.0October 24, 2026
Features1
  • satelliteshared account, profile and security settings in every app ([#6477](https://github.com/tutur3u/platform/issues/6477))2cd0879
Fixes3
  • authrepair account switching and notification access ([#6545](https://github.com/tutur3u/platform/issues/6545))
platformv0.72.0October 24, 2026
Features56
  • agent-quotaadd local quota routing ([#6449](https://github.com/tutur3u/platform/issues/6449))ec634b5
  • agent-quotaadd shared-pool admission and safe recovery hooks ([#6498](https://github.com/tutur3u/platform/issues/6498))c29f74b
desktopv0.25.1-40023083826October 24, 2026

Changes: 0

desktopv0.25.1-40019213893October 23, 2026

Changes: 0

desktopv0.25.1-39842908223October 22, 2026

Changes: 0

utilsv0.38.0October 22, 2026
Features1
  • infrastructuresupport guarded managed profile edits ([603dee3](https://github.com/tutur3u/platform/commit/603dee3acf1c0240d90d797bb3d33bf2bf293cb6)) ([#6368](https://github.com/tutur3u/platform/issues/6368))1b6376a
uiv0.39.2October 22, 2026
Fixes1
  • financepreserve explicit subscription group selections ([6f5ad54](https://github.com/tutur3u/platform/commit/6f5ad541ed48abc27490774f03fdc693f4c2da4c)) ([#6369](https://github.com/tutur3u/platform/issues/6369))38efa79
typesv0.36.0October 22, 2026
Features1
  • infrastructuresupport guarded managed profile edits ([#6368](https://github.com/tutur3u/platform/issues/6368))1b6376a
PreviousPage 4 of 25Next
9afff45
  • websecure notifications and account redirects8c597f4
    • Fixes6
    • authrepair account switching and notification access ([#6545](https://github.com/tutur3u/platform/issues/6545))9afff45
    • cron-controlretain and fairly drain checkout invalidations416cda6
    • securityderive client IP from trusted proxy headerscf2caa9
    • securityderive client IP from trusted proxy headers ([#6554](https://github.com/tutur3u/platform/issues/6554))1af01f8
    • securityharden request-keyed records, push previews and key handoff ([#6521](https://github.com/tutur3u/platform/issues/6521))1c7dfb1
    1 more change
    • websecure notifications and account redirects8c597f4
    Fixes12
    • authrepair account switching and notification access ([#6545](https://github.com/tutur3u/platform/issues/6545))9afff45
    • securitydefer PKCS12 parser loading0de6fc2
    • securityderive client IP from trusted proxy headerscf2caa9
    • securityderive client IP from trusted proxy headers ([#6554](https://github.com/tutur3u/platform/issues/6554))1af01f8
    • securityharden guest and challenge password verification ([#6556](https://github.com/tutur3u/platform/issues/6556))81253df
    7 more changes
    • securitylimit password attempts and enforce challenge grantsa15d80f
    • securityreplace certificate parser dependency ([#6519](https://github.com/tutur3u/platform/issues/6519))2017955
    • securityreport certificate parser outagesf7db9e2
    • securityscope join budgets and refund verified attempts45166df
    9afff45
  • securityharden guest and challenge password verification ([#6556](https://github.com/tutur3u/platform/issues/6556))81253df
  • securityharden request-keyed records, push previews and key handoff ([#6521](https://github.com/tutur3u/platform/issues/6521))1c7dfb1
  • securitylimit password attempts and enforce challenge grantsa15d80f
  • securityscope join budgets and refund verified attempts45166df
    • 2 more changes
    • utilsreplace empty earlier duplicates in multi-value query parsingb0e6152
    • websecure notifications and account redirects8c597f4
    9afff45
  • securityharden guest and challenge password verification ([#6556](https://github.com/tutur3u/platform/issues/6556))81253df
  • securitylimit password attempts and enforce challenge grantsa15d80f
  • securityscope join budgets and refund verified attempts45166df
  • websecure notifications and account redirects8c597f4
  • sdkoffload saturated resource runs to trusted devbox runners ([#6454](https://github.com/tutur3u/platform/issues/6454))59bce45
    • Fixes31
    • authadd per-account MFA verification limits95205fe
    • authadd per-account MFA verification limits ([#6555](https://github.com/tutur3u/platform/issues/6555))b4d67f0
    • authgrant MFA hook caller schema usagec324497
    • authreserve MFA attempts atomically and restrict the hook0c945d5
    • calendarbind provider OAuth state to user and workspace ([#6520](https://github.com/tutur3u/platform/issues/6520))f1685c6
    26 more changes
    • calendarDB-backed single-use OAuth state and BASE_URL redirects4f203fe
    • cinever let a dispatch input select code in a privileged cache scopeff48a7a
    • databasedate calendar OAuth nonce migration in the past16e8f57
    • databaseenforce trusted definer search paths across exposed schemas04efff7
    9afff45
  • securityharden guest and challenge password verification ([#6556](https://github.com/tutur3u/platform/issues/6556))81253df
  • securitylimit password attempts and enforce challenge grantsa15d80f
  • securityscope join budgets and refund verified attempts45166df
  • websecure notifications and account redirects8c597f4
    • 9afff45
  • websecure notifications and account redirects8c597f4
    • 9afff45
  • calendarbind provider OAuth state to user and workspace ([#6520](https://github.com/tutur3u/platform/issues/6520))f1685c6
  • calendarDB-backed single-use OAuth state and BASE_URL redirects4f203fe
  • calendarfail closed on missing OAuth runtime config in productionc17943a
  • calendarpreserve native quota diagnostics and reuse verified actors88c464c
    • 12 more changes
    • calendarserve native timezone preferences from Webec94bc2
    • calendarserve native timezone preferences from Web ([#6573](https://github.com/tutur3u/platform/issues/6573))a1bcec6
    • calendarsingle-use OAuth state, Google PKCE, canonical redirectsea618ba
    • securityderive client IP from trusted proxy headerscf2caa9
    • securityderive client IP from trusted proxy headers ([#6554](https://github.com/tutur3u/platform/issues/6554))1af01f8
    • securityharden guest and challenge password verification ([#6556](https://github.com/tutur3u/platform/issues/6556))81253df
    • securitylimit password attempts and enforce challenge grantsa15d80f
    • securityresolve code-scanning findings in shared packages and runtime logs ([#6531](https://github.com/tutur3u/platform/issues/6531))5690b3d
    • securitysanitize caught-error logs and widen SAML entity ID schemesfe834f3
    • securityscope join budgets and refund verified attempts45166df
    • settingsopen settings dialog from bare settingsTab deep links ([#6466](https://github.com/tutur3u/platform/issues/6466))084040c
    • websecure notifications and account redirects8c597f4
    9afff45
  • securityharden request-keyed records, push previews and key handoff ([#6521](https://github.com/tutur3u/platform/issues/6521))1c7dfb1
  • websecure notifications and account redirects8c597f4
    • agent-quota
    include Antigravity, freshness and active reservations ([#6482](https://github.com/tutur3u/platform/issues/6482))
    1e83777
  • ciadd the trusted CodeQL, dependency-audit and secret-scan gates to main ([#6516](https://github.com/tutur3u/platform/issues/6516))a7f0e2d
  • cirestore CodeQL and add a security review cadence ([#6456](https://github.com/tutur3u/platform/issues/6456))10d839a
    • 51 more changes
    • cron-controlport checkout expiry to a default-off Worker processor ([#6473](https://github.com/tutur3u/platform/issues/6473))aabb32b
    • cron-controlschedule legacy cron jobs behind default-off flags ([#6472](https://github.com/tutur3u/platform/issues/6472))df4180a
    • devboxseparate runner trust pools and add an observable drain ([#6450](https://github.com/tutur3u/platform/issues/6450))64401ab
    • mobileadd core/ui design tokens, icons and componentse924582
    • mobileadd core/ui design tokens, icons and components ([#6577](https://github.com/tutur3u/platform/issues/6577))43bf1b8
    • mobileadd design foundation for consistent padding and responsive shell4c83120
    • mobileadd design foundation for consistent padding and responsive shell ([#6530](https://github.com/tutur3u/platform/issues/6530))aaac144
    • mobileadd unified sheet and dialog host with modal Back31e4712
    • mobileadd unified sheet and dialog host with modal Back ([#6578](https://github.com/tutur3u/platform/issues/6578))c3b280b
    • mobilecentralize app settings under Settings > Apps83fbfab
    • mobilecentralize app settings under Settings > Apps ([#6546](https://github.com/tutur3u/platform/issues/6546))8f59398
    • mobileconsolidate profile and account settings in Edit profile29ac9cd
    • mobileconsolidate profile settings in Edit profile ([#6548](https://github.com/tutur3u/platform/issues/6548))b50d7d7
    • mobilegenerate web-parity Lucide and Lucide Lab icon fontsd11306c
    • mobilegenerate web-parity Lucide and Lucide Lab icon fonts ([#6593](https://github.com/tutur3u/platform/issues/6593))4b00846
    • mobilemigrate apps, assistant, auth and account screens to page primitivesbd4b7f8
    • mobilemigrate apps, assistant, auth and account screens to page primitives ([#6539](https://github.com/tutur3u/platform/issues/6539))1477217
    • mobilemigrate drive, mail, meet, chat, notes and calendar screens to page primitivesb950947
    • mobilemigrate drive, mail, meet, chat, notes and calendar screens to page primitives ([#6538](https://github.com/tutur3u/platform/issues/6538))a80f5c8
    • mobilemigrate education, CMS and CRM screens to page primitives15af7b3
    • mobilemigrate education, CMS and CRM screens to page primitives ([#6537](https://github.com/tutur3u/platform/issues/6537))7e7fb10
    • mobilemigrate finance, inventory and storefront screens to page primitivesc3db770
    • mobilemigrate finance, inventory and storefront screens to page primitives ([#6536](https://github.com/tutur3u/platform/issues/6536))ef5292c
    • mobilemigrate task and time tracker screens to page primitivesbb1ccd0
    • mobilemigrate task and time tracker screens to page primitives ([#6535](https://github.com/tutur3u/platform/issues/6535))2385749
    • mobileopen the approval threshold editor from the Requests gearc5ed9d7
    • mobilepolish Edit profile rows and document the review follow-ups4c42b91
    • mobilerebuild timezone pickers on the sheet host3c968dd
    • mobilerebuild timezone pickers on the sheet host ([#6579](https://github.com/tutur3u/platform/issues/6579))07dcbc3
    • mobileredesign settings and add customizable appearance themes8c603fc
    • mobileredesign settings and add customizable appearance themes ([#6534](https://github.com/tutur3u/platform/issues/6534))613b517
    • mobileroute Timer gear actions to central Timer settings1d5ab36
    • mobileroute Timer gear actions to central Timer settings ([#6547](https://github.com/tutur3u/platform/issues/6547))0ffa154
    • satelliteshared account, profile and security settings in every app ([#6477](https://github.com/tutur3u/platform/issues/6477))2cd0879
    • sdkadd cross-project worker-token budgets to ttr resources9e7129d
    • sdkadd cross-project worker-token budgets to ttr resources ([#6558](https://github.com/tutur3u/platform/issues/6558))bb0b74f
    • sdkadd guarded global supplier rollout9256482
    • sdkadd trusted dev package channelf31cd78
    • sdkadd trusted dev packages and channel identity ([#6590](https://github.com/tutur3u/platform/issues/6590))62d7dfc
    • sdkadd ttr storage to analyze and safely reclaim machine disk ([#6476](https://github.com/tutur3u/platform/issues/6476))83523f0
    • sdkadd weighted multi-host admission to ttr resources ([#6503](https://github.com/tutur3u/platform/issues/6503))80e46a8
    • sdkautomate guarded global supplier rollout and recovery ([#6591](https://github.com/tutur3u/platform/issues/6591))fb1bd34
    • sdkautomatic, ownership-aware low-storage reclaim ([#6500](https://github.com/tutur3u/platform/issues/6500))3d067a5
    • sdkgate heavy work on disk headroom and skip low-disk runners ([#6480](https://github.com/tutur3u/platform/issues/6480))f0c936d
    • sdkhonour an operator host preference order in --hosts admission ([#6513](https://github.com/tutur3u/platform/issues/6513))2ea0e1c
    • sdkoffload saturated resource runs to trusted devbox runners ([#6454](https://github.com/tutur3u/platform/issues/6454))59bce45
    • sdkreport Turbo cache reuse after resource-managed runs ([#6479](https://github.com/tutur3u/platform/issues/6479))349990f
    • sdkrun an exact pushed commit on trusted devbox runners ([#6452](https://github.com/tutur3u/platform/issues/6452))bd19b4e
    • securityadd staged native integrity verificationb9155e4
    • securityadd staged native integrity verification ([#6575](https://github.com/tutur3u/platform/issues/6575))332368d
    • shortenermove the redirect runtime to Start on Void ([#6432](https://github.com/tutur3u/platform/issues/6432))b88be50
    Fixes226
    • agent-quotaalign usage parity and execution evidence91faf7f
    • agent-quotaalign usage parity and execution evidence ([#6559](https://github.com/tutur3u/platform/issues/6559))3855326
    • agent-quotaclose quota parity fail-open gapsd1fa232
    • agent-quotadecouple quarantine retentionb4bb020
    • agent-quotaharden state and usage ordering ([#6562](https://github.com/tutur3u/platform/issues/6562))b096e15
    221 more changes
    • agent-quotapreserve safe state and usage orderingad4306e
    • agent-quotapreserve scoped future quarantines ([#6525](https://github.com/tutur3u/platform/issues/6525))a93da99
    • agent-quotareject mismatched usage snapshots092a88e
    • agent-quotaretain expired imported reset windows440d197
    Performance5
    • ciselect mobile platform builds on pull requests157a950
    • ciselect mobile platform builds on pull requests ([#6584](https://github.com/tutur3u/platform/issues/6584))f1cea4b
    • ciskip Worker workflows for lockfile edits outside their closure ([#6499](https://github.com/tutur3u/platform/issues/6499))a8a9401
    • cisupersede stale Worker PR validation, serialize only deploys ([#6494](https://github.com/tutur3u/platform/issues/6494))0ddee00
    • turbostop global hash busts and hash result-changing env files ([#6475](https://github.com/tutur3u/platform/issues/6475))4ddfce7
  • storagepreserve legacy URL delimiter keys ([#6512](https://github.com/tutur3u/platform/issues/6512))3cccfcf
  • storagereject encoded traversal paths ([#6507](https://github.com/tutur3u/platform/issues/6507))b461f77
  • websecure notifications and account redirects8c597f4
  • databaseharden remaining legacy chat read policies497d419
  • databasenarrow notification cleanup and extend access tests9b223b5
  • databasepreserve atomic lifecycle metadata replacement94b5e42
  • databasepreserve server task access and exercise storage cataloge206f1d
  • databaserepair hardened file operation testsa457fda
  • databaserestrict internal definer functions and add caller checkscda8a16
  • databaserestrict internal definer functions and add caller checks ([#6557](https://github.com/tutur3u/platform/issues/6557))0c665ae
  • databasescope email helper to the current callercf7f104
  • databasescope email helper to the current caller ([#6550](https://github.com/tutur3u/platform/issues/6550))f261aa0
  • databasescope list-less tasks to their creatorbfb22e1
  • databasetighten notification email access4b4e13b
  • databasetighten notification email access ([#6552](https://github.com/tutur3u/platform/issues/6552))d9161cc
  • databaseverify final definer callers and server chat boundary7a6dcf6
  • devboxcancel lost offload creates by key and page logs by run cursoraace86b
  • devboxfence keyed creates and enforce the commit-run protocol server-sided0dd8c6
  • devboxroll out the run log cursor without a long table lock6b6b09e
  • securityfence temporary types and preserve managed definers83623b2
  • securityharden database file operations2d41f91
  • securityharden database file operations ([#6527](https://github.com/tutur3u/platform/issues/6527))521de7c
  • securityharden guest and challenge password verification ([#6556](https://github.com/tutur3u/platform/issues/6556))81253df
  • securitylimit password attempts and enforce challenge grantsa15d80f
  • securityreserve password attempts and close guest view grants7c1088c
  • agent-quotaretain expired imported reset windows ([#6606](https://github.com/tutur3u/platform/issues/6606))4546627
  • agent-quotavalidate bounded future quarantines1681459
  • authadd per-account MFA verification limits95205fe
  • authadd per-account MFA verification limits ([#6555](https://github.com/tutur3u/platform/issues/6555))b4d67f0
  • authgrant MFA hook caller schema usagec324497
  • authrepair account switching and notification accessab4b75e
  • authrepair account switching and notification access ([#6545](https://github.com/tutur3u/platform/issues/6545))9afff45
  • authreserve MFA attempts atomically and restrict the hook0c945d5
  • calendarbind provider OAuth state to user and workspace ([#6520](https://github.com/tutur3u/platform/issues/6520))f1685c6
  • calendarDB-backed single-use OAuth state and BASE_URL redirects4f203fe
  • calendarfail closed on missing OAuth runtime config in productionc17943a
  • calendarpreserve native quota diagnostics and reuse verified actors88c464c
  • calendarserve native timezone preferences from Webec94bc2
  • calendarserve native timezone preferences from Web ([#6573](https://github.com/tutur3u/platform/issues/6573))a1bcec6
  • calendarsingle-use OAuth state, Google PKCE, canonical redirectsea618ba
  • ciadmit security config filename classification referencesd0e7f79
  • cibound E2E cache seeding and expose config errors2fb0ca6
  • cibound E2E cache seeding and expose config errors ([#6570](https://github.com/tutur3u/platform/issues/6570))a3106fa
  • ciclassify *-auth modules and devbox libraries for security review0fe37f4
  • cicomplete cache budget safeguards15481fd
  • cicomplete cache budget safeguards ([#6567](https://github.com/tutur3u/platform/issues/6567))bd7367f
  • cidrop the node-forge risk acceptance in favour of removal0114f61
  • ciexempt PR screenshot images from security review74d8e81
  • ciexempt PR screenshot images from security review ([#6604](https://github.com/tutur3u/platform/issues/6604))dedb0c2
  • cifail the bun.lock guard on a missing file or git error326c22d
  • cifail Type Check when bun.lock is not canonicalc477a0d
  • cifail Type Check when bun.lock is not canonical ([#6542](https://github.com/tutur3u/platform/issues/6542))fd45bbf
  • ciguard heavyweight cache writes36901a4
  • ciguard heavyweight cache writes ([#6565](https://github.com/tutur3u/platform/issues/6565))70926a6
  • ciinclude qualification file dependencies27c237a
  • ciinstall WebKitGTK 4.1 for Linux Flutter builds4712f44
  • ciinstall WebKitGTK 4.1 for Linux Flutter builds ([#6603](https://github.com/tutur3u/platform/issues/6603))e23c307
  • cilet main CodeQL baselines finish instead of cancelling2c42b49
  • cilet main CodeQL baselines finish instead of cancelling ([#6610](https://github.com/tutur3u/platform/issues/6610))2d09208
  • cinever let a dispatch input select code in a privileged cache scopeff48a7a
  • cipair the Bun audit version with its release checksum16e53f6
  • ciqualify GHCR fallback for all Supabase seed images29644c4
  • ciqualify GHCR fallback for all Supabase seed images ([#6572](https://github.com/tutur3u/platform/issues/6572))f173576
  • cirecord staging markers for SHAs a descendant already migrated ([#6518](https://github.com/tutur3u/platform/issues/6518))3255e2d
  • cirecover trusted Supabase image seeds ([#6514](https://github.com/tutur3u/platform/issues/6514))675d244
  • cirequire a tracked bun.lock in the canonical-lockfile guard6aa8345
  • ciretain SDK drain errors and scope final-kill EPERM ([#6566](https://github.com/tutur3u/platform/issues/6566))cbd5d75
  • ciretain SDK drain errors and scope the final kill race048f9aa
  • cistabilize runtime cache and preserve E2E fallback0a15365
  • citighten SDK artifact verification ([#6533](https://github.com/tutur3u/platform/issues/6533))8ed8f75
  • citrust migration prerequisite tooling and identify CodeQL findingse8f76e0
  • civerify SDK publish artifact descriptors9794d63
  • ciwait through transient SDK group probe errorsfe29a20
  • ciwait through transient SDK process group probe errors ([#6564](https://github.com/tutur3u/platform/issues/6564))3b9d9b9
  • clifence DerivedData repository exemption against symlinks8eff147
  • cron-controlbound Worker processors by the lease and persist revalidationd61ece0
  • cron-controlcharge abandoned claims and honour ok:false outcomes0958d79
  • cron-controlpreserve unknown outcomes and settled accounting9956dce
  • cron-controlretain and fairly drain checkout invalidations416cda6
  • cron-controlstop typing the ledger with the retired wrangler envf7ca7df
  • databasedate calendar OAuth nonce migration in the past16e8f57
  • databaseenforce trusted definer search paths across exposed schemas04efff7
  • databaseharden remaining legacy chat read policies497d419
  • databasenarrow notification cleanup and extend access tests9b223b5
  • databasepreserve atomic lifecycle metadata replacement94b5e42
  • databasepreserve server task access and exercise storage cataloge206f1d
  • databaserepair hardened file operation testsa457fda
  • databaserestrict internal definer functions and add caller checkscda8a16
  • databaserestrict internal definer functions and add caller checks ([#6557](https://github.com/tutur3u/platform/issues/6557))0c665ae
  • databasescope email helper to the current callercf7f104
  • databasescope email helper to the current caller ([#6550](https://github.com/tutur3u/platform/issues/6550))f261aa0
  • databasescope list-less tasks to their creatorbfb22e1
  • databasetighten notification email access4b4e13b
  • databasetighten notification email access ([#6552](https://github.com/tutur3u/platform/issues/6552))d9161cc
  • databaseverify final definer callers and server chat boundary7a6dcf6
  • depspatch high-severity advisoriesf263ae6
  • depspatch high-severity advisories ([#6569](https://github.com/tutur3u/platform/issues/6569))a67ca56
  • depspatch Teams transitive MSAL security vulnerability9727bd0
  • depspatch Teams transitive MSAL security vulnerability ([#6582](https://github.com/tutur3u/platform/issues/6582))bb2b181
  • devbox-controlrequire a string heartbeat execution mode ([#6462](https://github.com/tutur3u/platform/issues/6462))2450643
  • devboxcancel lost offload creates by key and page logs by run cursoraace86b
  • devboxfence keyed creates and enforce the commit-run protocol server-sided0dd8c6
  • devboxoffload only to runners advertising the commit-run protocol72561cc
  • devboxrate limit keyed creates and stop-by-key per actored1882d
  • devboxroll out the run log cursor without a long table lock6b6b09e
  • discordlog reported errors through a module loggere603873
  • discordpass handled exceptions only as the error= keyworde53147b
  • discordreplace exception text in replies and logs with correlation IDs56e9489
  • discordship error_reporting in the Modal image and harden the exposure guard73f6cc0
  • discordstop echoing internal exception text in interaction replies623b1ac
  • discordstop echoing internal exception text in interaction replies ([#6532](https://github.com/tutur3u/platform/issues/6532))5d57151
  • gittranslate the shared account settings group in Git settings139b474
  • mobileaddress settings appearance review findings032cedd
  • mobileaddress settings appearance review r2fe4883e
  • mobileaddress settings appearance review r3c8c74e3
  • mobileapply Dart's leading-newline rule to directive URIs5585d39
  • mobileavoid repeating the offset on fixed-offset timezone rows04f0acc
  • mobilechoose chat panes from the body widthca4a13d
  • mobileclose shadcn ratchet bypasses and enforce shrink-only29b1a7d
  • mobiledecode Dart escapes in ratchet URIs and fail closed62ac2eb
  • mobilegate every serialized Lucide glyph and keep holes open2645e02
  • mobileharden sheet host Back, search placement and Android exit00605a7
  • mobilekeep codemod imports in the package import block782e16d
  • mobilekeep incoming constraints for tap-target visualsf073278
  • mobilekeep queued threshold saves visible and polish Settings > Appsb5a17db
  • mobilekeep shell body mounted across rail and dock switches946273b
  • mobilekeep the calendar month grid above the dockf00d1e9
  • mobilemove the portfolio project title and Back into the shell7ae91f4
  • mobilenest Lucide contours by the true curve and test what users see539df0a
  • mobilepad design-system buttons to 48dp tap targetsb5202ca
  • mobileprevent agenda crashes from native timezone aliases ([#6598](https://github.com/tutur3u/platform/issues/6598))ee8789b
  • mobilerefresh saved request threshold and reach far search jumpsea552e0
  • mobileresolve native timezone aliases with complete data5ca3926
  • mobilereuse shell test app within shadcn ratchet8762b2d
  • mobilereuse shell test app within shadcn ratchet ([#6600](https://github.com/tutur3u/platform/issues/6600))cfcaf87
  • mobileserialize Android exit Back and stop swallowing overlay Back92fc232
  • mobileshare complete timezone data across app consumers2e4b108
  • mobileshare complete timezone data across app consumers ([#6601](https://github.com/tutur3u/platform/issues/6601))c4aa21c
  • mobileshell chrome for project detail, body-width chat panes and month grid clearance ([#6544](https://github.com/tutur3u/platform/issues/6544))e3f67e2
  • mobileshow one friendly value line on Time zone rows178d2eb
  • mobileshow one friendly value line on Time zone rows ([#6589](https://github.com/tutur3u/platform/issues/6589))a2b7bb4
  • mobilestamp Android Back queries with a route generationc2b3624
  • mobiletokenize Dart directives and fail closed without a base167e9d9
  • mobilevalidate calendar timezone resolution0beebae
  • notificationsguard wildcard invite email filtersc9f8ac8
  • notificationsmatch unclaimed email invites0106ff5
  • resourcesfence workspace admission and preserve global upgrades ([#6568](https://github.com/tutur3u/platform/issues/6568))68f0638
  • resourcesfence workspace bins and preserve global upgrades2b2c631
  • resourcespreserve ownership through protocol upgrades25139cf
  • resourcesreject cache takeover and orphan CLI aliases89a0fc3
  • resourcestrust global CLI and fence cross-install setup8a4ef11
  • scriptsadd descriptor based filesystem helpers ([#6522](https://github.com/tutur3u/platform/issues/6522))749cdb1
  • scriptsaddress review integration regressionsa5f36bd
  • scriptsharden file operations and input checksa83a4ee
  • scriptsharden file operations and input checks ([#6523](https://github.com/tutur3u/platform/issues/6523))3f55222
  • scriptspreserve filesystem error contracts3a982cd
  • scriptsread translation inputs through descriptorsb6d5284
  • sdkadmit ambiguous Node resource invocationsf4c67b2
  • sdkadmit and cap config-driven Node testsdc13a70
  • sdkcap the public Playwright test CLI entrypoint2b81ea5
  • sdkcascade disk admission checks into auto reclaim8b55314
  • sdkcheck command-volume inodes at every local admissionee21382
  • sdkdrain oversized budget heads and reconcile rollbacke4f5989
  • sdkexclude shared test fixtures from the portable buildacf283d
  • sdkexclude shared test fixtures from the portable build ([#6586](https://github.com/tutur3u/platform/issues/6586))a240202
  • sdkfail toward admission for ambiguous Node option values83961be
  • sdkfence upgrades atomically and cap ambiguous test workers3058bca
  • sdkgive the rollout reclaim test a protocol-3 shimd85ed5b
  • sdkgive the rollout reclaim test a protocol-3 shim ([#6609](https://github.com/tutur3u/platform/issues/6609))7aa77f6
  • sdkharden rollout recovery and fleet outcome reportingbc98c9e
  • sdkharden ttr resources nested admission and trivial bypass ([#6492](https://github.com/tutur3u/platform/issues/6492))bb5ac64
  • sdkhoist regex test so CodeQL can parse portable-build8291a33
  • sdkhoist regex test so CodeQL can parse portable-build ([#6543](https://github.com/tutur3u/platform/issues/6543))8bfff65
  • sdkidentify Turbo summaries from owned process output8c3809f
  • sdkidentify unmanaged launchers before budget upgrade checksc61ad90
  • sdkisolate version probes and serialize dev publicationdde6fec
  • sdkmerge Node hardening and gate budget rollout94717f3
  • sdknever admit ttr through its own bun shim28d8d35
  • sdkpreserve holds and nested repositories during reclaim95bfa4e
  • sdkpreserve non-error process probe failuresd94b033
  • sdkpreserve version contracts and recover dev packing safely107e5fd
  • sdkprune only identified tmp scratch and pin npm cache cleaningc4f3058
  • sdkrecognise the shipped CLI admission boundaryae48013
  • sdkreconcile resource fixtures and portable qualificatione273523
  • sdkrefuse repositories inside the tmp scratch deleting walk3603d5c
  • sdkreserve reclaim capacity and enforce budget workers8e24af8
  • sdkretain the installed supplier archive43a59ec
  • sdkseparate rollout cleanup failures from rollback outcomes69d9dc9
  • sdkseparate rollout cleanup failures from rollback outcomes ([#6597](https://github.com/tutur3u/platform/issues/6597))a04b10b
  • sdksnapshot Turbo summaries at spawn without output pipesce24e2c
  • sdkuse template literals in budget rollout test7e4e85e
  • sdkuse template literals in budget rollout test ([#6607](https://github.com/tutur3u/platform/issues/6607))9045238
  • sdkvalidate trusted devbox executable input8319562
  • sdkvalidate trusted devbox executable input ([#6583](https://github.com/tutur3u/platform/issues/6583))52c7c3d
  • securitycorrect SDK atomic file typing87c7532
  • securitydefer PKCS12 parser loading0de6fc2
  • securityderive client IP from trusted proxy headerscf2caa9
  • securityderive client IP from trusted proxy headers ([#6554](https://github.com/tutur3u/platform/issues/6554))1af01f8
  • securityenforce API limits for unresolved client addresses0768eff
  • securityfence SDK fingerprint directory traversald651cbd
  • securityfence temporary types and preserve managed definers83623b2
  • securityharden apps and offline file accessf41dd6c
  • securityharden apps and offline file access ([#6529](https://github.com/tutur3u/platform/issues/6529))1883927
  • securityharden database file operations2d41f91
  • securityharden database file operations ([#6527](https://github.com/tutur3u/platform/issues/6527))521de7c
  • securityharden guest and challenge password verification6127e0d
  • securityharden guest and challenge password verification ([#6556](https://github.com/tutur3u/platform/issues/6556))81253df
  • securityharden request-keyed records, push previews and key handoff ([#6521](https://github.com/tutur3u/platform/issues/6521))1c7dfb1
  • securityharden SDK file and token handling1a91433
  • securityharden SDK file and token handling ([#6526](https://github.com/tutur3u/platform/issues/6526))a9e410b
  • securitylimit password attempts and enforce challenge grantsa15d80f
  • securityprevent native integrity fallback downgradesc1d5f41
  • securityread checked files through one descriptor1e42e32
  • securityread checked files through one descriptor ([#6608](https://github.com/tutur3u/platform/issues/6608))0c3657f
  • securityrepair native integrity CI and merge main667bfef
  • securityreplace certificate parser dependency ([#6519](https://github.com/tutur3u/platform/issues/6519))2017955
  • securityreport certificate parser outagesf7db9e2
  • securityreserve password attempts and close guest view grants7c1088c
  • securityresolve code-scanning findings in shared packages and runtime logs ([#6531](https://github.com/tutur3u/platform/issues/6531))5690b3d
  • securitysanitize caught-error logs and widen SAML entity ID schemesfe834f3
  • securityscope join budgets and refund verified attempts45166df
  • settingsopen settings dialog from bare settingsTab deep links ([#6466](https://github.com/tutur3u/platform/issues/6466))084040c
  • shortenersatisfy main's Wrangler, action-pin and build-info guardsf5f9469
  • shortenertrust only Cloudflare geolocation for clicks on Workers3f1e38a
  • storageapply UTF-8 decoding to the post-limit escape checkbef1b99
  • storagedecode percent-encoded storage paths as UTF-8b27a231
  • storageencode remaining client upload object keysc91d44f
  • storagepreserve legacy URL delimiter keys ([#6512](https://github.com/tutur3u/platform/issues/6512))3cccfcf
  • storagereject encoded traversal paths ([#6507](https://github.com/tutur3u/platform/issues/6507))b461f77
  • storagereturn logical keys from encoded uploads and encode once72dd73e
  • storagesign uploads and MarkItDown reads with the encoded key2730e27
  • toolingcanonicalise global installs and preserve test runners4fa8316
  • toolingcanonicalise global installs and preserve test runners ([#6574](https://github.com/tutur3u/platform/issues/6574))34640ef
  • toolingisolate checks and validate pushed branch refs053a5ed
  • toolingpreserve nested and active worktree artifactsf2f11e1
  • toolingrefuse broken global CLI installations29d4238
  • toolingroute changed tests to their owning runner0accb4e
  • uikeep markdown paste conversion from stalling on rejected list lines8dbd2c9
  • users-coreuse confirmed email for invite access042730e
  • utilsreplace empty earlier duplicates in multi-value query parsingb0e6152
  • websecure notifications and account redirects8c597f4
  • workersreject dangling Vite metadata symlinks and keep the manifest in artifacts0038b83