raystack / frontier

42%

main: 45%

LAST BUILD ON BRANCH fix/policy-delete-symmetric-rolebinding-cleanup

branch: fix/policy-delete-symmetric-rolebinding-cleanup

CHANGE BRANCH

x

Reset

Sync Branches

• fix/policy-delete-symmetric-rolebinding-cleanup
• CLD-1566
• CLD-1567
• CLD-1569
• CLD-1571
• CLD-1629
• CLD-1630
• CLD-1983
• CLD-1984
• CLD-2046
• CLD-2206-validate-full-name-field
• CLD-2341
• CLD-2541
• ID-505-subscription-status
• IDE-196-case-sensitive
• IDE-291-proration
• IDE-321-audit-events
• IDE-321-group-removal-webhook
• IDE-322-list-transactions
• IDE-360-default-payment-method
• IDE-364-project-error-handling
• IDE-384-plan-configs-documentation
• IDE-385-frontier-webhook
• IDE-386-readability-enhancements
• IDE-390-credit-unit-tests
• IDE-406-add-users-ro-project
• IDE-406-create-policy-for-projects
• IDE-528-org-tests
• IDE-535-group-tests
• IDE-536-permission-tests
• IDE-539
• IDE-542-test
• IDE-573-detailed-plan-list
• add-org-name-in-audit-record
• add-postpaid-banner
• add-pr-template
• add-preference-authz
• add-session-id-in-auth-token
• add-tokens-dialog
• add_inviteid_mail_template
• add_project_access_modal
• admin-org-add-tokens
• admin-org-api-tab
• admin-org-billing
• admin-org-invite-user
• admin-org-security
• admin-pat
• admin-sdk-docs
• adminui
• allow-trail-on-default-plan
• api-credit-entitlement
• api-tests
• audit-log-types
• audit-service-updates
• audit_log_context
• authenticate-principal-tests
• authz-check
• ba-infer-v1
• ba-offline
• base-setup-and-org-crud-audit
• batch-check-permission
• batch-invite-userids
• batchcheck
• billing-checkout-sync-optimizations
• billing-customer-state-fix
• billing-docs
• billing-refresh-interval
• billing-sub-docs
• billing-usage-authzlevel
• billing-v1
• billing_id_simplification_subscription
• billing_id_simplification_subscription_ui
• billing_simplification_checkout
• billing_simplification_checkout_ui
• billing_simplification_entitlement_usage
• billing_simplification_transactions
• billing_simplification_transactions_ui
• billingui
• buf_connect
• buf_connect_admin_list_all_users
• build-docs
• bulk_org_kyc_list
• cancel-after-trial
• cancel-fix
• cancelled_errors
• cascade-delete-user-role
• change-role-titles
• change-subscription
• change-subscription-docs
• changelog
• check-admin
• check-fix
• checkout-fixes
• checkout-product-quantity
• checkoutid-successurl
• chore-export-use-preferences
• chore-fix-plans
• chore-remove-dead-fetch-code
• chore-sdk-changes
• chore-update-apsara
• chore/add-principal-type-in-log
• chore/admin-webhook-group-member-events
• chore/client-demo-apsara-rc6
• chore/deprecate-amount-frontier
• chore/publish-commit-tag
• chore/remove-deprecated-billing-fields
• chore/remove-deprecated-path
• chore/remove-extra-toast-provider
• chore/remove-sdk-build
• chore/remove-serviceuser-user-relation
• chore/remove-unused-debounce
• chore/rename-lib-to-sdk
• chore/sdk-admin-apsara-v1
• chore/skip-proto-from-coderabbit
• chore/tokens-side-panel-coin-icon
• chore/update-proton-gen-code
• chore/update-proton-proto
• chore/update-proton-remove-deprecated-fields
• chore/update-version
• chore/upgrade-apsara-v0.30.2
• chore/upgrade-go-version-to-1.24
• chore/v0.30.1
• chore/v0.32.1
• chore/v0.32.3
• chore/ver-bump-apsara
• chore_add_callback_url
• chore_add_coderabbit_yaml
• chore_add_customer_id_sync_log
• chore_add_plan_id_error_message
• chore_add_subscription_metadata
• chore_admin_remove_policies_api
• chore_admin_ui_apsara_update
• chore_admin_ui_apsara_v0.43.0
• chore_admin_ui_apsara_v1_migration
• chore_admin_ui_new_invoices_page
• chore_admin_ui_org_url_rename
• chore_admin_ui_remove_old_org_files
• chore_chronicle_docs
• chore_cleanup_rest_client
• chore_coderabbit_config
• chore_docs_node_22
• chore_frontier_admin_proxy
• chore_getprincipal_debug_logs
• chore_group_features_by_title
• chore_return_bad_request_for_invalid_otp
• chore_sdk_apsara_v0.25.0
• chore_sdk_cleanup_billing_address_update_modal
• chore_sdk_cleanup_rest_client
• chore_sdk_data_test_id_plans_screen
• chore_sdk_datatable_apsara_v1
• chore_sdk_export_proton_query_client
• chore_sdk_format_currency_amount
• chore_sdk_hide_billing_address_button
• chore_sdk_migrate_plans_api_connect_rpc
• chore_sdk_move_apsara_peer_dependency
• chore_sdk_otp_verify_message
• chore_sdk_plan_list_sort_features
• chore_sdk_proto_bump_0.9.2
• chore_sdk_proton_js_export_files
• chore_sdk_serivceusers_api
• chore_sdk_sidebar_data_test_id
• chore_sdk_update_apsara_0.17.1
• chore_sdk_update_apsara_v0.15.0
• chore_sdk_update_client_0.13.0
• chroe/increase-version
• ci_goreleaser_changes
• ci_setup_sdk_lint
• ci_use_goreleaser_v1
• cicd
• code-cleanup-remove-ListGroupRelations
• connectrpc_admin_authorization_rpc
• connectrpc_admin_billing_rpc
• connectrpc_admin_export_rpc
• connectrpc_admin_mixed_rpc
• connectrpc_admin_org
• connectrpc_admin_org_export_apis
• connectrpc_admin_org_kyc
• connectrpc_admin_preferences_rpc
• connectrpc_admin_prospect_rpc
• connectrpc_admin_user_rpc
• connectrpc_admin_webhook_rpc
• connectrpc_billing_account_migration
• connectrpc_billing_subs_migration
• connectrpc_enrichment
• connectrpc_frontier_org_migration
• connectrpc_migration
• connectrpc_migration_mixed
• connectrpc_observability
• connectrpc_projects_migration
• connectrpc_relation_migration
• connectrpc_snake_case
• connectrpc_ui_migration_org_edit
• cookie-domain-config
• correct-typo
• cors
• cors-config
• coverage
• create-audit-record
• create-audit-record-kyc-event
• create-audit-record-multi-repository
• create-audit-record-role-invitation
• create-audits-schema
• create-feature-api
• create-invoice-for-zero-overdraft
• create-invoice-on-product-purchase
• create-user-preference-for-newsletters
• css-module
• current-user-org-state
• custom-auth-callback
• customer-credit-limit
• customer-paymentmethod
• customer-syncback
• db-error-wrap
• debug_authn_fail_logs
• dedup-create-invitations
• default-active-plan
• default-billing-account
• default-plan
• default-plan-docs
• default-plan-v2
• delegated-checkout-coupon
• dependabot/go_modules/examples/authn/github.com/gin-gonic/gin-1.9.1
• dependabot/go_modules/examples/authn/github.com/lestrrat-go/jwx/v2-2.0.11
• dependabot/go_modules/examples/authn/github.com/lestrrat-go/jwx/v2-2.0.18
• dependabot/go_modules/examples/authn/github.com/lestrrat-go/jwx/v2-2.0.19
• dependabot/go_modules/examples/authn/github.com/lestrrat-go/jwx/v2-2.0.21
• dependabot/go_modules/examples/authn/golang.org/x/crypto-0.17.0
• dependabot/go_modules/examples/authn/golang.org/x/crypto-0.31.0
• dependabot/go_modules/examples/authn/golang.org/x/crypto-0.35.0
• dependabot/go_modules/examples/authn/golang.org/x/crypto-0.45.0
• dependabot/go_modules/examples/authn/golang.org/x/net-0.17.0
• dependabot/go_modules/examples/authn/golang.org/x/net-0.23.0
• dependabot/go_modules/examples/authn/golang.org/x/net-0.38.0
• dependabot/go_modules/examples/authn/golang.org/x/net-0.55.0
• dependabot/go_modules/examples/authn/google.golang.org/protobuf-1.33.0
• dependabot/go_modules/filippo.io/edwards25519-1.1.1
• dependabot/go_modules/github.com/authzed/spicedb-1.27.0
• dependabot/go_modules/github.com/authzed/spicedb-1.30.1
• dependabot/go_modules/github.com/authzed/spicedb-1.33.1
• dependabot/go_modules/github.com/authzed/spicedb-1.35.3
• dependabot/go_modules/github.com/docker/cli-29.2.0incompatible
• dependabot/go_modules/github.com/docker/docker-24.0.7incompatible
• dependabot/go_modules/github.com/docker/docker-24.0.9incompatible
• dependabot/go_modules/github.com/docker/docker-25.0.5incompatible
• dependabot/go_modules/github.com/docker/docker-25.0.6incompatible
• dependabot/go_modules/github.com/docker/docker-26.1.4incompatible
• dependabot/go_modules/github.com/go-jose/go-jose/v3-3.0.1
• dependabot/go_modules/github.com/go-jose/go-jose/v3-3.0.3
• dependabot/go_modules/github.com/go-jose/go-jose/v3-3.0.4
• dependabot/go_modules/github.com/go-jose/go-jose/v3-3.0.5
• dependabot/go_modules/github.com/golang-jwt/jwt/v5-5.2.2
• dependabot/go_modules/github.com/jackc/pgx/v4-4.18.2
• dependabot/go_modules/github.com/lestrrat-go/jwx/v2-2.0.11
• dependabot/go_modules/github.com/lestrrat-go/jwx/v2-2.0.19
• dependabot/go_modules/github.com/lestrrat-go/jwx/v2-2.0.21
• dependabot/go_modules/github.com/opencontainers/runc-1.1.12
• dependabot/go_modules/github.com/opencontainers/runc-1.1.14
• dependabot/go_modules/github.com/opencontainers/runc-1.2.8
• dependabot/go_modules/github.com/opencontainers/runc-1.3.6
• dependabot/go_modules/go.opentelemetry.io/otel-1.41.0
• dependabot/go_modules/go.opentelemetry.io/otel/sdk-1.40.0
• dependabot/go_modules/golang.org/x/crypto-0.17.0
• dependabot/go_modules/golang.org/x/crypto-0.31.0
• dependabot/go_modules/golang.org/x/net-0.17.0
• dependabot/go_modules/golang.org/x/net-0.23.0
• dependabot/go_modules/golang.org/x/net-0.33.0
• dependabot/go_modules/golang.org/x/net-0.55.0
• dependabot/go_modules/golang.org/x/oauth2-0.27.0
• dependabot/go_modules/google.golang.org/grpc-1.56.3
• dependabot/go_modules/google.golang.org/grpc-1.79.3
• dependabot/go_modules/google.golang.org/protobuf-1.33.0
• dependabot/npm_and_yarn/docs/algoliasearch-helper-3.26.0
• dependabot/npm_and_yarn/docs/babel/helpers-7.26.10
• dependabot/npm_and_yarn/docs/babel/traverse-7.23.2
• dependabot/npm_and_yarn/docs/braces-3.0.3
• dependabot/npm_and_yarn/docs/browserify-sign-4.2.2
• dependabot/npm_and_yarn/docs/cipher-base-1.0.6
• dependabot/npm_and_yarn/docs/cipher-base-1.0.7
• dependabot/npm_and_yarn/docs/cross-spawn-7.0.6
• dependabot/npm_and_yarn/docs/crypto-js-4.2.0
• dependabot/npm_and_yarn/docs/diff-5.2.2
• dependabot/npm_and_yarn/docs/elliptic-6.5.7
• dependabot/npm_and_yarn/docs/elliptic-6.6.0
• dependabot/npm_and_yarn/docs/elliptic-6.6.1
• dependabot/npm_and_yarn/docs/express-4.19.2
• dependabot/npm_and_yarn/docs/express-4.21.0
• dependabot/npm_and_yarn/docs/express-4.22.0
• dependabot/npm_and_yarn/docs/follow-redirects-1.15.4
• dependabot/npm_and_yarn/docs/follow-redirects-1.15.6
• dependabot/npm_and_yarn/docs/http-cache-semantics-4.1.1
• dependabot/npm_and_yarn/docs/http-proxy-middleware-2.0.7
• dependabot/npm_and_yarn/docs/http-proxy-middleware-2.0.9
• dependabot/npm_and_yarn/docs/json5-2.2.3
• dependabot/npm_and_yarn/docs/lodash-es-4.17.23
• dependabot/npm_and_yarn/docs/mermaid-10.9.3
• dependabot/npm_and_yarn/docs/micromatch-4.0.8
• dependabot/npm_and_yarn/docs/multi-0659e683fb
• dependabot/npm_and_yarn/docs/multi-06b72911b5
• dependabot/npm_and_yarn/docs/multi-5d8090d256
• dependabot/npm_and_yarn/docs/multi-6a602c6908
• dependabot/npm_and_yarn/docs/multi-6c6fbfc072
• dependabot/npm_and_yarn/docs/multi-96c788614a
• dependabot/npm_and_yarn/docs/multi-a07fd7252a
• dependabot/npm_and_yarn/docs/multi-c22e25d29b
• dependabot/npm_and_yarn/docs/multi-c8afcbbcd8
• dependabot/npm_and_yarn/docs/multi-dc18080850
• dependabot/npm_and_yarn/docs/multi-e126d77b41
• dependabot/npm_and_yarn/docs/nanoid-3.3.8
• dependabot/npm_and_yarn/docs/node-forge-1.3.2
• dependabot/npm_and_yarn/docs/pbkdf2-3.1.3
• dependabot/npm_and_yarn/docs/pbkdf2-3.1.5
• dependabot/npm_and_yarn/docs/prismjs-1.30.0
• dependabot/npm_and_yarn/docs/semver-5.7.2
• dependabot/npm_and_yarn/docs/serialize-javascript-6.0.2
• dependabot/npm_and_yarn/docs/sha.js-2.4.12
• dependabot/npm_and_yarn/docs/sideway/formula-3.0.1
• dependabot/npm_and_yarn/docs/ua-parser-js-0.7.35
• dependabot/npm_and_yarn/docs/webpack-5.105.0
• dependabot/npm_and_yarn/docs/webpack-5.94.0
• dependabot/npm_and_yarn/docs/webpack-dev-middleware-5.3.4
• dependabot/npm_and_yarn/docs/ws-7.5.10
• dependabot/npm_and_yarn/sdks/js/axios-1.6.0
• dependabot/npm_and_yarn/sdks/js/axios-1.8.2
• dependabot/npm_and_yarn/sdks/js/lodash-4.17.23
• dependabot/npm_and_yarn/sdks/js/next-13.5.1
• dependabot/npm_and_yarn/sdks/js/next-14.1.1
• dependabot/npm_and_yarn/sdks/js/next-14.2.15
• dependabot/npm_and_yarn/sdks/js/next-14.2.25
• dependabot/npm_and_yarn/sdks/js/next-14.2.32
• dependabot/npm_and_yarn/sdks/js/next-14.2.35
• dependabot/npm_and_yarn/sdks/js/next-15.2.4
• dependabot/npm_and_yarn/sdks/js/packages/sdk-demo/next-14.2.10
• dependabot/npm_and_yarn/sdks/js/packages/sdk-demo/next-14.2.21
• dependabot/npm_and_yarn/sdks/js/validator-13.15.22
• dependabot/npm_and_yarn/sdks/js/vite-7.0.7
• dependabot/npm_and_yarn/sdks/js/vite-7.0.8
• dependabot/npm_and_yarn/ui/axios-1.11.0
• dependabot/npm_and_yarn/ui/axios-1.12.2
• dependabot/npm_and_yarn/ui/axios-1.13.1
• dependabot/npm_and_yarn/ui/axios-1.7.4
• dependabot/npm_and_yarn/ui/brace-expansion-1.1.12
• dependabot/npm_and_yarn/ui/braces-3.0.3
• dependabot/npm_and_yarn/ui/follow-redirects-1.15.6
• dependabot/npm_and_yarn/ui/form-data-4.0.4
• dependabot/npm_and_yarn/ui/ip-1.1.9
• dependabot/npm_and_yarn/ui/js-yaml-4.1.1
• dependabot/npm_and_yarn/ui/multi-5c7f151553
• dependabot/npm_and_yarn/ui/multi-6d8364d0d8
• dependabot/npm_and_yarn/ui/multi-dcb5c27ca1
• dependabot/npm_and_yarn/ui/nanoid-3.3.8
• dependabot/npm_and_yarn/ui/postcss-8.4.31
• dependabot/npm_and_yarn/ui/rollup-3.29.5
• dependabot/npm_and_yarn/ui/validator-13.15.20
• dependabot/npm_and_yarn/ui/validator-13.15.23
• dependabot/npm_and_yarn/ui/validator-13.15.26
• dependabot/npm_and_yarn/ui/vite-4.2.3
• dependabot/npm_and_yarn/ui/vite-4.5.10
• dependabot/npm_and_yarn/ui/vite-4.5.13
• dependabot/npm_and_yarn/ui/vite-4.5.14
• dependabot/npm_and_yarn/ui/vite-4.5.2
• dependabot/npm_and_yarn/ui/vite-4.5.3
• dependabot/npm_and_yarn/ui/vite-4.5.5
• dependabot/npm_and_yarn/ui/vite-4.5.9
• dependabot/npm_and_yarn/ui/zod-3.22.3
• dependabot/npm_and_yarn/web/apps/admin/axios-1.13.5
• dependabot/npm_and_yarn/web/apps/admin/js-yaml-4.1.1
• dependabot/npm_and_yarn/web/apps/admin/lodash-4.17.23
• dependabot/npm_and_yarn/web/apps/admin/multi-5c7f151553
• dependabot/npm_and_yarn/web/apps/admin/multi-dcb5c27ca1
• dependabot/npm_and_yarn/web/apps/admin/validator-13.15.26
• dependabot/npm_and_yarn/web/apps/admin/vite-5.4.21
• dependabot/npm_and_yarn/web/axios-1.13.5
• dependabot/npm_and_yarn/web/axios-1.15.0
• dependabot/npm_and_yarn/web/axios-1.15.2
• dependabot/npm_and_yarn/web/axios-1.16.0
• dependabot/npm_and_yarn/web/eslint-9.26.0
• dependabot/npm_and_yarn/web/lodash-4.18.1
• dependabot/npm_and_yarn/web/next-15.5.14
• dependabot/npm_and_yarn/web/next-15.5.15
• dependabot/npm_and_yarn/web/next-15.5.18
• dependabot/npm_and_yarn/web/next-16.1.5
• dependabot/npm_and_yarn/web/next-16.1.7
• dependabot/npm_and_yarn/web/turbo-2.9.14
• dependabot/npm_and_yarn/web/uuid-14.0.0
• dependabot/npm_and_yarn/web/vite-5.4.21
• dependabot/npm_and_yarn/web/vite-6.4.2
• dependabot/npm_and_yarn/web/vite-6.4.3
• disable-address-update-kyc-completed
• disable-org-oncreate-authz
• disable-syncer
• disable-update-details
• disabled-billing-accounts
• doc-enhancement
• docker-compose-update
• dockerfile-go1.22.3
• docs
• docs-custom-resource-authz
• docs-disable-vs-delete-semantics
• docs-fix
• docs/web-getting-started
• docs_sdk_add_installation_docs
• docs_update_v2
• domain-authz-fix
• domain-authz-fix-v2
• enable-profilers
• enrich-context-with-more-info
• enrich-session-info-in-create-audit-rpc
• entitlement-list-fix
• entitlement-utests
• expand-api
• feat-actor-name-audit-ui
• feat-admin-new-workspace
• feat-admin-users
• feat-audit-log-sidebar
• feat-audit-log-ui
• feat-audit-ui-improvements
• feat-billing-revamp
• feat-disable-prop-service-account
• feat-general-revamp
• feat-members-revamp
• feat-migrate-invoice-list
• feat-migrate-roles-list
• feat-plans-revamp
• feat-profile-revamp
• feat-profilw-revamp
• feat-projects-revamp
• feat-security-revamp
• feat-service-accounts-revamp
• feat-sessions-revamp
• feat-sidebar-csr-nav
• feat-teams-revamp
• feat-tokens-revamp
• feat-update-apsara
• feat-update-pat-terminology
• feat-use-debounce
• feat/ID-532-list-org-pagination
• feat/IDE-449/add-member-api
• feat/add-audit-record-actor-title
• feat/add-pat-principal-check
• feat/add-pat-recreated-at
• feat/add-session-delete-cron
• feat/add-sorting-and-pagination-invoices
• feat/add-sorting-and-pagination-tokens
• feat/add-theme-toggle
• feat/admin-billing-portal-link
• feat/admin-page-header-icon-and-height
• feat/admin-react-19
• feat/admin-refresh-billing-on-portal-return
• feat/admin-revoke-session
• feat/admin-search-org-pats
• feat/admin-session-page
• feat/admin-settings-api
• feat/admin-terminology-customization
• feat/audit-billing-portal-session
• feat/audit-record-for-billing-subscription-change
• feat/audit-record-for-billing-subscription-create
• feat/audit-record-policy-crud
• feat/audit-record-session-revoke
• feat/audit-set-org-member-role
• feat/authoritative-superuser-reconciliation
• feat/avatar
• feat/avatar-validation
• feat/check-pat-title-availability
• feat/client-billing-portal-new-tab
• feat/client-demo-org-invites
• feat/copy-to-clipboard-for-verify
• feat/create-pat-rpc
• feat/customise-invite-email
• feat/delete-current-user-pat-rpc-implementation
• feat/disable-org-on-creation
• feat/domain-whitelists
• feat/enforce-credential-assertions
• feat/export-admins-page
• feat/export-audit-logs-page
• feat/export-invoices-page
• feat/export-organisations-page
• feat/export-plans-page
• feat/export-preferences-page
• feat/export-products-page
• feat/export-users-page
• feat/export-webhooks-page
• feat/faster-linux-amd64-release
• feat/gen-organisation-gen
• feat/get-pat-by-current-user
• feat/gitops-platform-users
• feat/group-membership-package
• feat/image-upload-clear-button
• feat/importable-admin-pages
• feat/list-pat-by-current-user
• feat/list-roles-for-pat-rpc
• feat/list-sessions-admin
• feat/member-remove-confirm-dialog
• feat/member-role-project-create
• feat/membership-accept-pat-principal
• feat/membership-handler
• feat/membership-list-resources-by-principal
• feat/membership-package
• feat/membership-service
• feat/membership-serviceuser-support
• feat/membership-set-org-member-role
• feat/migrate-sdk-service-account-to-project-member-api
• feat/migrate-serviceuser-apis-to-connect-rpc
• feat/migrate-user-apis-to-connect-rpc
• feat/pat-client-assertion
• feat/pat-expiry-email-alerts
• feat/pat-in-jwt
• feat/pat-scope-listbyuser
• feat/pat-scope-policies
• feat/pat-scopes-restructure
• feat/platform-user-correctness
• feat/preference-custom-traits-config
• feat/preference-input-hints-object
• feat/preference-scope-filter
• feat/preference-scope-migration
• feat/preference-select-validator
• feat/preference-service-scope
• feat/project-member-mutations-to-membership
• feat/reconcile-export
• feat/reconcile-roles-permissions
• feat/regenerate-current-user-pat
• feat/remove-add-org-users-rpc
• feat/remove-organization-member
• feat/remove-organization-member-ui
• feat/remove-project-member
• feat/rename-custom-traits-to-additional-traits
• feat/revoke-sessions-on-user-disable
• feat/salt-upgrade-0.6.2
• feat/sdk-project-member-management
• feat/sdk-use-set-organization-member-role
• feat/search-org-by-name
• feat/search-org-invoices-rql
• feat/serviceuser-membership-migration
• feat/session
• feat/session-add-fields
• feat/session-interceptor-create
• feat/session-location
• feat/sessions-page-sdk
• feat/set-organization-member-role
• feat/set-project-member-role
• feat/subscribe-latest
• feat/subscribe-open-page
• feat/two-check-authz-for-pat
• feat/update-current-user-pat
• feat/userpat-route-via-membership
• feat/validate-pat-project-org
• feat/webhook-bridge-http-handler
• feat_add_customer_portal_url
• feat_add_email_to_otp_mail_body
• feat_add_list_all_service_users_api
• feat_add_metadata_org_create_webhook
• feat_add_service_user_relation
• feat_add_subscription_phase_reason
• feat_add_test_login
• feat_admin_sdk_add_logout
• feat_admin_ui_add_project_members
• feat_admin_ui_add_token
• feat_admin_ui_api_list
• feat_admin_ui_config
• feat_admin_ui_connect_setup
• feat_admin_ui_delegated_checkout
• feat_admin_ui_edit_billing_details
• feat_admin_ui_edit_kyc
• feat_admin_ui_edit_org
• feat_admin_ui_export_api_connect_rpc
• feat_admin_ui_export_token_invoices
• feat_admin_ui_export_users_api_connect_rpc
• feat_admin_ui_invite_member
• feat_admin_ui_invite_users
• feat_admin_ui_invoice_list
• feat_admin_ui_invoice_listing
• feat_admin_ui_kyc_webhook
• feat_admin_ui_list_loader
• feat_admin_ui_list_svc_users_keys
• feat_admin_ui_make_svc_user_as_platform_user
• feat_admin_ui_migrate_authn_connect
• feat_admin_ui_migrate_connect_admin_apis
• feat_admin_ui_migrate_org_search_connect_apis
• feat_admin_ui_migrate_price_list_table
• feat_admin_ui_migrate_users_api_connect
• feat_admin_ui_migrate_webhooks_api_connect
• feat_admin_ui_new_org_list_table
• feat_admin_ui_org_actions
• feat_admin_ui_org_details_page
• feat_admin_ui_org_exports
• feat_admin_ui_org_members_page
• feat_admin_ui_org_metadata
• feat_admin_ui_org_projects_list
• feat_admin_ui_org_projects_members_list
• feat_admin_ui_org_security_page
• feat_admin_ui_org_tokens_list
• feat_admin_ui_postpaid_fields
• feat_admin_ui_preferences_pages
• feat_admin_ui_products_create-edit
• feat_admin_ui_products_page
• feat_admin_ui_rename_project
• feat_admin_ui_service_account_list_page
• feat_admin_ui_service_user_create
• feat_admin_ui_service_user_creds_generate
• feat_admin_ui_service_user_search_api
• feat_admin_ui_show_users_org
• feat_admin_ui_sidebar_update
• feat_admin_ui_token_checkout_qty
• feat_admin_ui_update_member_role
• feat_admin_ui_update_user_role
• feat_admin_ui_virtual_table
• feat_admin_ui_webhooks_page
• feat_cancel_sub_after_trial
• feat_checkout_address_check
• feat_chronicle_version_v0.6.0
• feat_counties_api
• feat_frontier_admin_self_api
• feat_increase_buckets_for_api_latency
• feat_list_service_user_projects_api
• feat_list_user_org_api_state_filter
• feat_listen_async_payment_succeeded_event
• feat_sdk_add_billing_permission_check
• feat_sdk_add_customization_provider_update_terminology
• feat_sdk_add_default_theme
• feat_sdk_add_demo_app_for_development
• feat_sdk_add_more_columns_to_txn_table
• feat_sdk_add_option_to_pass_fetch
• feat_sdk_add_payment_method_update_btn
• feat_sdk_add_polling_hook
• feat_sdk_add_tokens_screen
• feat_sdk_add_tokens_txn_table
• feat_sdk_add_trial_checks
• feat_sdk_add_trial_plan_in_props
• feat_sdk_api_screen
• feat_sdk_auto_generate_team_project_slug
• feat_sdk_avatar_upload
• feat_sdk_basic_api_token
• feat_sdk_billing_details_screen
• feat_sdk_cancel_plan_change
• feat_sdk_create_list_service_accounts
• feat_sdk_create_service_accounts_page
• feat_sdk_custom_headers
• feat_sdk_custom_plan_change_message_support
• feat_sdk_custom_screens
• feat_sdk_default_payment_method
• feat_sdk_delete_acknowledge_checkbox
• feat_sdk_diabled_actions
• feat_sdk_downgrade_banner
• feat_sdk_downgrade_modal
• feat_sdk_integrate_plan_change_api
• feat_sdk_invoice_list
• feat_sdk_loader_styles
• feat_sdk_member_list_roles
• feat_sdk_migrate_api_tokens_screen
• feat_sdk_migrate_billing_connect_rpc
• feat_sdk_migrate_connect_rpc
• feat_sdk_plan_checkout
• feat_sdk_plan_interval_toggle
• feat_sdk_plan_list_downgrade_banner
• feat_sdk_plans_screen
• feat_sdk_remove_project_member
• feat_sdk_remove_project_name
• feat_sdk_service_accounts_delete_pages
• feat_sdk_service_accounts_keys_page
• feat_sdk_service_user_project_management
• feat_sdk_setup_connect_query
• feat_sdk_setup_connect_rpc
• feat_sdk_show_billing_email_address
• feat_sdk_show_cycle_end_date_in_downgrade
• feat_sdk_show_feature_metadata_based_on_plan
• feat_sdk_show_interval_with_plan_name
• feat_sdk_show_per_month_price
• feat_sdk_show_plan_upgrade_downgrade
• feat_sdk_show_toolip_negative_balance
• feat_sdk_show_user_preferences
• feat_sdk_sort_plan_features
• feat_sdk_token_checkout
• feat_sdk_token_txn_user
• feat_sdk_trail_intergration
• feat_sdk_upcoming_invoice
• feat_sdk_update_router
• feat_sdk_upgrade_plan_modal
• feat_sdk_zero_value_base_plan
• feat_skip_sending_mail_for_test_users
• feat_soft_delete_sessions
• feat_ui_profile_dropdown
• feat_ui_table_filter
• feat_ui_webhooks_update
• feature/add-filters-and-groups-in-prospects-list-api
• feature/add-pagination-admin-list-invoices-api
• feature/cld-1611-frontier-audience-api
• feature/cld-1670-add-unit-tests-for-prospects
• feature/cld-2216-duplicate-success-notifications-after-multiple-submit-button
• feature/cld-2262-migrate-frontier-rpc-groups
• feature/cld-2266-migrate-frontier-rpc-policy
• feature/cld-2275-migrate-frontier-rpc-billing-products
• feature/cld-2277-migrate-frontier-rpc-billing-plans
• feature/cld-2278-migrate-frontier-rpc-billing-checkout
• feature/cld-2279-migrate-frontier-rpc-billing-flow-invoice
• feature/create-new-context-for-background-syncers
• feature/fix-authz-gaps
• feature/ide-530-paginationadmin-list-organizations-api
• feature/ide-622-create-model-method-for-iszeroamount-on-plans-model
• feature/ide-760-add-pagination-to-selfprojects-list-api-of-frontier
• feature/invoice-webhook-event
• feature/migrate-frontier-rpc-audit
• feature/migrate-frontier-rpc-metaschemas
• feature/migrate-frontier-rpc-preferences
• feature/migrate-frontier-rpc-resource
• feature/migrate-frontier-rpc-roles
• feature/migrate-frontier-rpc-session
• feature/orglistbyuser-migrate-callers-to-membership-and-delete
• feature/update-documentation-for-prospects
• fetch-non-zero-invoices
• filter-zero-invoice
• fix-NaN-token-submit
• fix-admin-bug
• fix-admin-issues
• fix-admin-single-role
• fix-admin-ui-user-list-page-size
• fix-audit-target-info
• fix-auth-scheme-strict-parsing
• fix-billing-authz-check
• fix-billing-pages
• fix-build-issue
• fix-cross-cuting
• fix-docker-compose
• fix-edit-project-failing
• fix-frontier-bugs
• fix-frontier-more-bugs
• fix-get-billing-acc
• fix-iam-design
• fix-kyc-check-customer-portal
• fix-mailotp-randomness
• fix-member-count-discrepancy
• fix-member-issues
• fix-member-update-role
• fix-org-admin-auth
• fix-org-transactions-default-sort
• fix-org-user-deletion
• fix-pat-icon
• fix-pat-project-logic
• fix-policies-filter
• fix-policies-list
• fix-preferences-theme
• fix-service-account
• fix-session-cookie-connect
• fix-superadmin-delete-orphaned-policy
• fix-team-members-count
• fix-title
• fix-update-preferences-styles
• fix/ID-561/package.json-missing-dist
• fix/IDE-520
• fix/add-header-flag-in-cli-subcommands
• fix/add-mapstructure-tags-to-frontier-config
• fix/add-user-agent-config
• fix/admin-drawer-mount-animation
• fix/admin-favicon
• fix/admin-org-sidepanel-avatar
• fix/admin-org-size-non-negative
• fix/admin-query-client-and-proton-version
• fix/admin-surface-server-error-toast
• fix/admin-tables-alignment
• fix/admin-ui-scroll
• fix/admin-vite-env-leak
• fix/api-page-table-non-scrollable
• fix/api-sdk-layout
• fix/assign-role-error-message
• fix/assign-role-radio
• fix/audit-preserve-old-values-on-update
• fix/back-button-org-page
• fix/billing-checkout-url-template-injection
• fix/billing-response-codes
• fix/billing-syncjob-race-conditions
• fix/blank-org-pages
• fix/block-pat-cross-org-endpoints
• fix/block-section-font
• fix/bug-org-security-loading-state-ui
• fix/capture-session-context-for-all-users
• fix/cascade-pat-cleanup-on-user-delete
• fix/change-ip-header-key
• fix/ci-docker-version
• fix/ci-failing
• fix/ci-ts-issues
• fix/cld-1721-add-validation-for-user-preference-value
• fix/cleanup-project-policies-on-project-deletion
• fix/context-path
• fix/copy-changes
• fix/copy-suggestions-empty-state
• fix/credit-overdraft-duplicate-invoices
• fix/credit-overdraft-invoice-window
• fix/credit-overdraft-start-range
• fix/datatable-text
• fix/delete-confirm-input
• fix/deleter-serviceuser-cleanup
• fix/docker-run-as-nonroot
• fix/dockerfile-dev-pnpm-install
• fix/duplicate-logger-attrs
• fix/enforce-case-insensitive-PAT-title-uniqueness
• fix/env-prefix-collision
• fix/error-logging-and-billing-response-codes
• fix/error-sanitizer-interceptor
• fix/ide-499-users-are-able-to-accept-expired-invitations
• fix/identify-duplicate-API-calls
• fix/immutable-project-org
• fix/invitation-relation-cleanup
• fix/invite-success-message
• fix/invite-user-flow/org-name-mismatch
• fix/invite-user-org-select-missing-skeleton
• fix/invite-users-text-area
• fix/invoice-list-param
• fix/join-org-from-domain
• fix/lint-fixes
• fix/listpolicies-permission-error-project-viewer
• fix/make-api-response-for-transactions-with-same-usage-id-as-4xx
• fix/migrate-roles-reconcile
• fix/module-error
• fix/navbar-search-ui-shift
• fix/null-org-name-list-audit-records
• fix/null-payment-mode-handling
• fix/operator-case-sensitive
• fix/org-api-pagination-page-size
• fix/org-disabled-error-code
• fix/org-search-payment-mode
• fix/org-users-filter-by-name
• fix/page-load-errors
• fix/pat-and-view-fixes
• fix/pat-creategroup-orphan-group-row
• fix/pat-regenerate-expiry-reminder
• fix/permision-check-for-createauditrecord
• fix/permission-delete-cascade
• fix/pnpm-not-found
• fix/preference-typo-will
• fix/preference-update-flow
• fix/preferences-api-proto-update
• fix/preserve-session-metadata-in-auth-token
• fix/prevent-service-user-authentication-for-disabled-org
• fix/products-create-url-redirect
• fix/project-listing-handlers-access-pairs-and-invalid-input
• fix/prospect-rql-error-classification
• fix/redirect-from-login
• fix/remove-billing-id-from-checkout-tests
• fix/replace-searchusers-with-getuser
• fix/resize-handle-visible
• fix/resolve-pat-to-user
• fix/resource-update-reconcile
• fix/role-delete-cascade-policies
• fix/router-reference-in-apps
• fix/rql-groupby-quote-identifiers
• fix/sanitize-internal-error-responses
• fix/sdk-api-overflow
• fix/search-org-tokens-authz
• fix/security-add-domain-tooltip
• fix/serviceuser-delete-identity-link-cleanup
• fix/serviceuser-org-policy-backfill
• fix/session-header-ip-parsing
• fix/session-hr-height
• fix/session-location-config
• fix/set-user-name-or-title
• fix/skip-redundant-role-set
• fix/sql-prepared-mode
• fix/stop-sending-orgid-project-update
• fix/table-height-style
• fix/table-tooltip
• fix/test-ci
• fix/textarea-out-of-bounds
• fix/toctou-last-owner-guard
• fix/tokens-fallback
• fix/tokens-formatting
• fix/type-use-plans
• fix/update-email-validation-message
• fix/update-security-page-copy
• fix/updated-at-for-org-block
• fix/upgrade-deprecated-jwt-jose-deps
• fix/upgrade-go-1.26.4
• fix/use-org-title-consistently
• fix/use-paramatersised-queries
• fix/user-profile-name-validation
• fix/v1-migration-fixes
• fix/validate-uuid-in-user-state-change
• fix/vite-config
• fix/webhook-drawer-form-issues
• fix/webhook-form-fields
• fix/webhook-secret-rotation-validation
• fix_add_ListOrganizationAdmins_to_authz
• fix_add_title_to_plan
• fix_admin_pref_trait_key_check
• fix_admin_search_issue
• fix_admin_sort_key_name
• fix_admin_ui_apsara_table_typescript_mismatch
• fix_admin_ui_build
• fix_admin_ui_build_1
• fix_admin_ui_build_2
• fix_admin_ui_build_ci_issue
• fix_admin_ui_build_issue
• fix_admin_ui_build_issue_1
• fix_admin_ui_build_ts_issues
• fix_admin_ui_datatable_filter_dropdown
• fix_admin_ui_dev_build_issue
• fix_admin_ui_import_file_name
• fix_admin_ui_kyc_rerender_issue
• fix_admin_ui_npm_install
• fix_admin_ui_org_type
• fix_admin_ui_outlet
• fix_admin_ui_postpaid_min_value
• fix_admin_ui_sdk_0.8.41
• fix_admin_ui_select_fields
• fix_admin_ui_service_account_link
• fix_admin_ui_typescript_issue
• fix_auth_token_context_cancelled_error
• fix_backend_email_validation
• fix_build_admin_ui_migrate_authn_connect
• fix_build_issue_admin_ui
• fix_cancel_trial_on_checkout
• fix_check_auth_callback_fields
• fix_check_payement_status_async_checkout
• fix_check_permission_404_resource_not_exist
• fix_check_stripeSchedule_phase_reason
• fix_chronicle_version_v0.5.4
• fix_ci_bump_package_version_with_git
• fix_ci_sdk_paths
• fix_customer_address_update_kyc
• fix_delegated_checkout_trial_cancel
• fix_domain_table_auth_check
• fix_export_org_docs
• fix_frontier_webhook_url_path
• fix_group_create_policy_check
• fix_handle_upcoming_invoice_offline_customer
• fix_invalid_otp_internal_error
• fix_invitations_and_batchcheck_401_issue
• fix_members_table_invitations_permission
• fix_memory_leak_issue
• fix_minor_sdk_issues
• fix_minor_sdk_ui_issues
• fix_no_upcoming_invoice_issue
• fix_org_data_table_style_issues
• fix_org_delete_provider_id_check
• fix_pass_prom_provider_as_middleware
• fix_remove_plan_id_in_cancel_subscription
• fix_sdk_add_billing_permission_check
• fix_sdk_add_name_validation
• fix_sdk_all_projects_api
• fix_sdk_all_projects_list_filter_permission_check
• fix_sdk_api_token_copy_icon
• fix_sdk_api_tokens_create_btn
• fix_sdk_app_name_serivce_users
• fix_sdk_apsara_peer_dependency
• fix_sdk_apsara_v1_button_props
• fix_sdk_avatar_table_header_overlaping
• fix_sdk_billing_account_loading
• fix_sdk_billing_account_org_rerender
• fix_sdk_call_preference_if_user_available
• fix_sdk_captialize_loading_text
• fix_sdk_checkout_if_not_payment_method
• fix_sdk_connect_cookies
• fix_sdk_connect_rpc_onerror
• fix_sdk_disable_update_address_btn
• fix_sdk_docker_build
• fix_sdk_domain_validation
• fix_sdk_email_validation
• fix_sdk_empty_invoice_url
• fix_sdk_filter_old_phases
• fix_sdk_free_trial_issues
• fix_sdk_frontier_auth_email_validation_response
• fix_sdk_get_current_user_retry
• fix_sdk_get_org_kyc_url
• fix_sdk_handle_expire_subs
• fix_sdk_hide_undefined_base_plan
• fix_sdk_hooks_release
• fix_sdk_invite_modal_crash
• fix_sdk_invite_style_issues
• fix_sdk_invoice_invalid_date
• fix_sdk_kyc_plans_api
• fix_sdk_load_active_plan_in_confirm_modal
• fix_sdk_loader_colors
• fix_sdk_login_email_sanitization
• fix_sdk_member_invite_role_modal
• fix_sdk_member_list_pending_invite
• fix_sdk_member_search
• fix_sdk_org_name_url
• fix_sdk_org_teminology_template_variable
• fix_sdk_org_terminology
• fix_sdk_ping_without_user
• fix_sdk_project_invite_team
• fix_sdk_project_name_conflict_error
• fix_sdk_project_team_list_screen
• fix_sdk_react_crop_build
• fix_sdk_remove_invitation_actions
• fix_sdk_reset_billing_subscription
• fix_sdk_row_clickable
• fix_sdk_service_user_project_admin
• fix_sdk_show_per_month_base_plan_price
• fix_sdk_similar_plans_interval_in_switch
• fix_sdk_styling_and_rerendring_issues
• fix_sdk_table_header_padding
• fix_sdk_table_loading_issue
• fix_sdk_theme_provider
• fix_sdk_theme_switcher
• fix_sdk_transform_connect_org_struct
• fix_sdk_typo_in_invite_modal
• fix_sdk_ui_invite_role_filters
• fix_sdk_undefined_plan_name
• fix_sdk_unset_active_plan_when_no_subscription
• fix_sdk_upcoming_invoice_date
• fix_sdk_update_action_text_as_screen
• fix_sdk_update_billing_details
• fix_sdk_upgrade_plan_change_api
• fix_sdk_useQuery_select_rerender
• fix_sdk_use_redirect_uri_from_props
• fix_sdk_verify_subscription_cancel
• fix_sdk_wrong_plan_change_date
• fix_service_org_disabled_org
• fix_service_user_org_id
• fix_set_empty_phase_plan_id_cancel
• fix_show_sdk_table_title
• fix_smtp_secure_mode
• fix_ui_build_ts_ignore
• fix_update_project_sets_title_to_empty
• fixes
• frontier
• frontier-endpoint-get-billing-details
• frontier-preferences-v3
• get-address-on-checkout
• get-checkout-api
• group-delete-user-webhook
• group-user-access
• group-users-listing
• handle-provider-id-creation
• implement-ExportAuditRecords-rpc
• implement-ListAuditRecords-rpc
• improve-pat-org-role
• invitation-list
• invite-already-user-err
• invoice
• invoice-duedate
• invoice-sync-hostedurl
• invoice_sync_fix
• invoices_search
• js-client
• js_sdk_projects_context
• js_sdk_tanstack_router
• jwt-serviceuser
• jwt-with-project-id
• kyc-default-record
• lazy-load-admin-routes
• lib-security-patches
• list-billing-accounts
• list-features
• list-my-projects
• list-my-projects-v2
• list-my-projects-v3
• list-org-user-role-filter
• listgroups
• logging_improvement
• logging_improvement_01
• magiclink
• mail-link-authn
• mailotp-compare
• main
• make-sending-test-coverage-optional
• member-count
• member-count-fix
• membership-cleanup-follow-ups
• metaschema-perms
• metrics-disable
• metrics-histogram-buckets
• metrics-histogram-buckets-v2
• migrate-admin-org-kyc-connectrpc
• migrate-admin-org-sidebar-connectrpc
• migrate-admin-ui-to-connectrpc
• migrate-app-context-to-connectrpc
• migrate-group-listbyuser-to-membership
• migrate-org-details-to-connectrpc
• migrate-org-list-to-connectrpc
• migrate-org-navbar-to-connectrpc
• migrate-plan-list-to-connect-rpc
• migrate-preferences-list-to-connect-rpc
• migrate-product-create-edit-to-connect-rpc
• migrate-product-list-to-connect-rpc
• migrate-project-listbyuser-to-membership
• migrate-sdk-api-tokens
• migrate-superadmin-list-to-connect-rpc
• migrate-webhook-delete-to-connect-rpc
• migrate/sdk-domains-page
• migrate/sdk-general-page-api
• migrate/sdk-member-page
• migrate/sdk-member-page-api
• migrate/sdk-organization-teams
• migrate/sdk-projects-page-api
• migrate/sdk-teams-page
• migrate/sdk-user-tokens
• migrate/sdk-user-updates-page
• migrate/security-page-sdk
• migrate/subscribe-api-connect
• mocks_upgrade
• move-sdk-api
• move-sdk-billing
• move-sdk-general
• move-sdk-plans
• move-sdk-projects
• move-sdk-sessions
• move-sdk-tokens
• multi-reversal
• multi-reversal-test-fix
• new-audit-logs
• next-plan-id-empty
• oidc_google_logo
• org-delete-audit-event
• org-due-date
• org-member-add-event
• org-member-list
• org-proj-slug-lower
• org-user-remove-test-v1
• org-users-list
• org_admin_api_fix
• org_administration
• org_billig_export
• org_billing_search_uuid_fix
• org_create_by_superadmin
• org_edit_by_superadmin
• org_invoices_search
• org_kyc
• org_listing_filter_fix
• org_project_export_fix
• org_projects_export
• org_projects_search
• org_service_accounts_search
• org_tokens
• org_tokens_search_rebased
• org_users_export
• org_users_fix
• org_users_list
• org_users_search_api_fix
• organization-user-roles
• organization-user-roles-v2
• orgmanager
• otel-metrics
• overdraft-invoice-default-30
• passkey
• pat-sdk-fixes
• pat-sdk-fixes-2
• patch-1
• payment-methods
• perf/goreleaser-parallelism
• perf/optimize-release-caching
• perseat
• perseat-limit
• phase-cancel
• phase-tax-enabling
• pk/added_hide_toast_prop
• pk/apsara-import-update
• pk/design_qa_changes
• pk/export_billing_permission_hook
• pk/use-tokens-refetch
• pk/use_tokens
• plan-configs
• plantrials
• policy-docs
• policy-list
• preferences-v1
• preferences-v2
• price_fix
• product-behaviour-validation
• product-quantity
• product-seat-limit-fix
• product-service-test
• proj-service-test
• project-groups
• project-permission-list
• project-resource-delete
• project-svusers-nonsu
• project_users
• prom-metrics-db-spicedb
• proton-update
• proton_pr
• refactor
• refactor-2/migrate-text-headline
• refactor-audience-apis-to-prospects
• refactor-entity-types
• refactor-features
• refactor/addgroupusers-via-membership
• refactor/admin-ui
• refactor/admin-ui-child
• refactor/audit-record-create
• refactor/batch-joinable-orgs-fetch
• refactor/checkbox-v1-migration
• refactor/cleanup-grpc-deps-and-config
• refactor/custom-page-header
• refactor/data-table-changes
• refactor/group-create-via-membership
• refactor/group-delete-via-membership
• refactor/group-rpcs
• refactor/membership-list-principals-by-resource
• refactor/migrate-avatar-v1
• refactor/migrate-box-v1
• refactor/migrate-button-v1
• refactor/migrate-cli-to-connectrpc
• refactor/migrate-color-vars
• refactor/migrate-dialog-v1
• refactor/migrate-e2e-to-connectrpc
• refactor/migrate-emptystate-v1
• refactor/migrate-flex-v1
• refactor/migrate-image-v1
• refactor/migrate-input-textfield-v1
• refactor/migrate-label-v1
• refactor/migrate-link-1
• refactor/migrate-logging-to-slog
• refactor/migrate-popover-v1
• refactor/migrate-separator-v1
• refactor/migrate-sidebar-v1
• refactor/migrate-skeleton
• refactor/migrate-tabs-v1
• refactor/migrate-text-v1
• refactor/migrate-toast-v1
• refactor/migrate-togglegroup-v1
• refactor/migrate-tooltip-v1
• refactor/pass-real-errors-in-code-internal
• refactor/pat-handler-common-helpers
• refactor/policy-filter-role-permissions
• refactor/remove-add-group-users-handler
• refactor/remove-deprecated-audit-handlers
• refactor/remove-grpc-handlers-and-server
• refactor/removegroupuser-via-membership
• refactor/rename-core
• refactor/rename-list-to-search-pat
• refactor/rename-pat-last_used_at
• refactor/rename-sdks-folder
• refactor/sdk-addgroupusers-via-setgroupmemberrole
• refactor/sdk-headers-design
• refactor/sdk-remove-member-dialog-cleanup
• refactor/search-org-invoices-to-frontier-service
• refactor/search-org-tokens-to-frontier-service
• refactor/segregate-client
• refactor/setgroupmemberrole-upsert
• refactor/switch-v1-migration
• refactor/update-proton-remove-gateway-annotations
• refactor_admin_ui_rql_hook
• refactor_sdk_use_list_members_count
• removal-cascade-consolidation
• remove-org-member-relation
• remove-platform-useraccess
• remove-proxy
• remove-service-page
• remove-unused-app-pat-relations
• replace-policy
• replace-prom-metric
• request-id-header-logger
• requestid-middleware
• resource-custom-id
• resource-role-access-test
• resource-title-fix
• revert-1141-fix-session-cookie-connect
• revert-1157-revert-1141-fix-session-cookie-connect
• revert-1398-chore/rename-lib-to-sdk
• revert-694-fix_remove_plan_id_in_cancel_subscription
• revert-api-using-project
• revert-credit-error
• revert-usage
• revert-usage-already-applied-err
• revert-usage-docs
• role-assignment
• role-list-fix
• rql_prepeared_statements
• rsakey-base64
• schema-membership-policy-driven
• scope-use-preferences
• sdb-token
• sdk-profile-session-changes
• sdk_i18n_setup
• sdk_my_projects_list_filter
• sdk_v0.0.5
• sdk_v0.0.7
• search-aggregates-document-divergence
• search_user_like_op
• seed-changes
• serviceuser-restpath
• session-management-docs
• skip-migrating-existing-roles
• skip_authn_fix
• spicedb-v1.29.2
• stripe-checkout-latency
• stripe-lib-v79
• stripe-payment-ifrequired
• stripe-subscription-fix
• stripe-testclock
• stripe-webhooks
• subscription-multi-phase
• subscription-multi-phase-v2
• subscription-multi-phase-v3
• subscription-srv-utest
• svcuser-secret-list
• svcuser-secret-list-fix
• svcuser-token
• svuser-create-project-e2e
• sync-fix
• test-coverage
• test/add-pat-search-and-list-tests
• test/billing-unit-tests-for-customer-service
• test/disable-user-session-rejection
• test/pat-curd-e2e
• test/unit-tests-for-authenticate-service
• token-events
• token-invoice
• token-org-ids
• token-page-filters
• tooling-fixes
• transaction-isolation-level
• tx-userid
• ui
• ui-docker
• unit-tests
• upcoming-invoice
• update-audit-log-schema
• update-audit-record-schema
• update-auth-pages
• update-billing-customer
• update-current-user
• update-forntier-js-sdk
• update-get-billing-account
• update-page-desc
• update-product-title
• update-proto-security-defination
• update-proton
• update-role-permission-refresh
• update-role-permissions
• update-sample-config
• update-sdk-to-apsara-latest
• update-search-bar-placeholders
• update_gitignore
• user-id-awarded-tokens
• user_org_membership_search
• user_org_project_membership
• user_search
• user_search_email_filter
• useremail-claim
• usersvc-utest
• v1beta1_cleanup
• webhooks
• workspace
• worktree-feat-pat-tokens

Build # 26089607399

Build Type

Pull #1624

github

Committed by whoAbhishekSah

Commit Message

fix(authz): symmetric SpiceDB cleanup on policy delete

policy.AssignRole writes three tuples per policy but policy.Delete and
DeleteWithMinRoleGuard only swept the two where the rolebinding is the
Object (role_bearer, role). The resource-grant tuple — where the
rolebinding is the Subject — leaked on every per-member removal,
ownership swap, or cross-resource principal cleanup.

Add a second relation.Delete keyed by Subject on both delete paths via
a shared helper. The Subject-side delete tolerates relation.ErrNotExist
so resource-level wildcard sweeps in group.DeleteModel /
project.DeleteModel (which currently paper over the bug at full-resource
teardown) don't cause failures during the overlap period; those sweeps
become redundant for this tuple and can be removed in a follow-up.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Pull Request Pull Request #1624: fix(authz): symmetric SpiceDB cleanup on policy delete

Coverage Stats

16 of 16 new or added lines in 1 file covered. (100.0%)

15987 of 37724 relevant lines covered (42.38%)

11.9 hits per line