David Nguyen
f38c151b1b
fix: trim out of bound contents when pdf is replaced
2026-10-01 17:02:12 +10:00
David Nguyen
656d1347b9
fix: remove contents from public envelope create route
2026-10-01 15:39:21 +10:00
David Nguyen
110f307d36
fix: audit logs
2026-10-01 13:24:58 +10:00
David Nguyen
ba480ac7a1
fix: change content embed variable
2026-10-01 11:55:01 +10:00
David Nguyen
62f1a811dd
fix: correctly order envelope item updates
2026-10-01 11:41:20 +10:00
David Nguyen
3cf00345d2
fix: tests
2026-09-30 15:08:40 +10:00
David Nguyen
724f5f62c5
Merge branch 'main' into feat/add-content-fields
2026-09-29 17:03:35 +10:00
David Nguyen
58b5e6b5d3
fix: embed z-index
2026-09-29 16:53:28 +10:00
David Nguyen
573c928a0e
feat: add recipient grouping ( #3319 )
2026-09-29 16:52:43 +10:00
David Nguyen
d87ac2b552
feat: add embed content support
2026-09-29 16:21:48 +10:00
David Nguyen
b90aa86e24
fix: test
2026-09-27 22:04:46 +10:00
David Nguyen
3c84d25d5a
fix: various improvements
2026-09-27 20:08:47 +10:00
David Nguyen
941f4a1e4c
fix: auto show and hide editor action bar
2026-09-26 16:33:03 +10:00
Lucas Smith
a1d4bec143
fix: accept owner-password protected pdfs ( #3396 )
...
Strip encryption from PDFs that open with an empty user password via
libpdf's ignorePermissions, still rejecting user-password PDFs.
Upgrade @libpdf/core to 0.5.1, which also keeps overlapping and layered
text intact during text extraction.
Resolves #3303
2026-09-26 11:23:33 +10:00
David Nguyen
94793c7cce
feat: add content fields
2026-09-25 12:02:52 +10:00
Lucas Smith
39ae85483a
fix: add date-fns to packages/ui ( #3388 )
2026-09-24 10:29:26 +10:00
Ephraim Duncan
638e92d534
feat: add team document analytics dashboard ( #3355 )
2026-09-24 09:50:35 +10:00
Zonaib Bokhari
1164d9578e
Respect hidden sender details in document invite emails ( #3061 )
2026-09-21 09:20:39 +03:00
David Nguyen
e658cc5818
feat: add inbox filters ( #3372 )
2026-09-17 17:21:34 +10:00
Ephraim Duncan
cf326f825d
feat: replace template view tabs with a filter pill ( #3148 )
2026-09-17 10:24:19 +10:00
Ephraim Duncan
da934c01a6
feat: allow signing reason override ( #2848 )
2026-09-16 14:41:55 +10:00
Ephraim Duncan
2618d4d4be
chore(embedding): remove unregistered multi-sign mutation ( #3339 )
2026-09-16 14:07:04 +10:00
Ephraim Duncan
132c4b08c5
fix(trpc): v2 field position updates silently dropped; rewrite fields API docs ( #3136 )
2026-09-16 13:59:40 +10:00
Ephraim Duncan
9542512ce9
refactor(lib): reuse the http url validator ( #3346 )
2026-09-16 13:54:52 +10:00
Ephraim Duncan
0f71a8b67d
chore(prisma): remove unregistered middleware ( #3345 )
2026-09-16 13:53:19 +10:00
Ephraim Duncan
b795883fc7
chore(lib): remove unused timezone labels ( #3342 )
2026-09-16 13:48:03 +10:00
Catalin Pit
a20e8a2376
feat: add document naming options when using templates ( #3086 )
2026-09-16 01:00:40 +10:00
Lucas Smith
e73450dd08
chore: upgrade deps ( #3367 )
2026-09-14 16:14:44 +10:00
Christopher Ryan
5603a9e59d
fix: preserve base path in email asset URLs ( #3327 )
2026-09-11 20:44:05 +10:00
Durgesh Shekhawat
20ae849a1a
fix: use nuqs prevent infinite re-render loop ( #2868 )
2026-09-11 20:29:24 +10:00
Lucas Smith
6a99b40cba
fix: improve action auth flow for passwordless users ( #3358 )
...
Selecting password auth failed with a generic "Unauthorized" for users
who signed up via OAuth or passkey, with no way to set one.
Detect the missing password and email the existing reset link from the
signing dialog and security settings. Require a 2FA code and rate limit
update-password.
2026-09-11 14:17:34 +10:00
Catalin Pit
b97c22a607
fix: pass csp nonce to @hello-pangea/dnd style elements ( #3354 )
2026-09-10 15:29:41 +10:00
Ephraim Duncan
c5acba538e
chore(auth): remove commented account creation code ( #3344 )
2026-09-09 11:04:15 +10:00
Ephraim Duncan
3b20c2f960
chore(ui): remove unused text fitting component ( #3337 )
2026-09-09 10:51:35 +10:00
David Nguyen
6a8bb4be04
fix: improve invalid bulk template upload error handling ( #3326 )
2026-09-08 21:03:02 +10:00
Martin Glaser
2cac63a000
fix: block SSRF via IPv4-mapped IPv6 webhook URLs ( #2901 ) ( #3166 )
2026-09-04 15:42:39 +10:00
Catalin Pit
4aa3583e89
fix: temporary fix for British to US spelling ( #3329 )
2026-09-04 15:41:11 +10:00
Lucas Smith
30a6b19b47
chore: upgrade to node 24 lts and clean up docker image ( #3332 )
...
Upgrade to Node 24 LTS, using the alpine 3.23 tag to handle issues with
streaming zip files on 24.16 which hangs npm ci.
Pin npm to 11.19.1 for min-release-age-exclude support.
Slim the runner image by dropping dev deps, the react-email CLI, and
esbuild,
none of which run in production.
Install turbo from the lockfile version instead of a hardcoded one.
2026-09-04 12:29:02 +10:00
Nathan Delhaye
dabb7b7a0d
fix: increase signature placeholder size when a timestamp authority is configured ( #3328 )
2026-09-04 12:26:01 +10:00
Catalin Pit
cbb1cf7bef
fix: default unset signing transport to local ( #3309 )
...
`/api/health` and `/api/certificate-status` reported the cert as
available when `NEXT_PRIVATE_SIGNING_TRANSPORT` was unset, even though
sealing defaults to the local P12 and fails if it is missing,
unreadable, or expired.
2026-09-04 08:17:42 +10:00
David Nguyen
eba71d9be4
fix: prevent dialogs from closing on blur ( #3314 )
2026-09-01 13:17:48 +10:00
Konrad
5082b475a0
chore: update Polish translation ( #3316 )
2026-08-28 17:08:53 +10:00
Lucas Smith
ae4b56dd88
feat: optimise posthog usage and add error tracking ( #3301 )
...
Disable autocapture and person profiles for anonymous users, and
redact signing tokens from captured URLs.
Manually wire exception capture into the signing, editor and embed
flows with recipient/envelope context for debugging recipient-reported
issues.
Track activation events (webhooks, api tokens, direct links, embed
sessions) server-side with org attribution, and drop client events
already tracked in-app.
2026-08-27 11:11:51 +10:00
Arunendra Tripathi
ee8360585b
fix: render adjacent email template variables correctly ( #3153 )
2026-08-26 11:57:35 +10:00
David Nguyen
9dc83bdb06
fix: allow zooming and dragging uploaded signatures ( #3173 )
2026-08-26 11:21:40 +10:00
github-actions[bot]
e532843aa6
chore: extract translations ( #3171 )
2026-08-25 21:37:33 +10:00
Ephraim Duncan
dd08da7ea7
refactor(trpc): use ts-pattern for envelope document-data resolution ( #3222 )
2026-08-25 18:29:24 +10:00
Catalin Pit
10f2b80025
feat: last used column for api tokens ( #3230 )
2026-08-25 18:07:31 +10:00
David Nguyen
73d58bdf31
feat: allow admin recipient search ( #3277 )
2026-08-25 11:20:11 +10:00
water
1de57a9e43
fix(emails): remove trailing period from document pending email subject ( #3213 )
2026-08-24 17:05:43 +10:00