sync with master#7792

Merged

frknbasaran merged 459 commits into

flexfrom

Jul 3, 2026

This pull request is big! We're only showing the most recent 250 commits

Commits on Jun 8, 2026

Merge branch 'master' into fix/push-estimate-app-binding
ar2rsawseen
authored
Merge pull request #7679 from Countly/fix/push-estimate-app-binding
ar2rsawseen
authored
Merge branch 'master' into fix/dbviewer-event-scope
ar2rsawseen
authored
docs: add hooks custom-code effects to bounty exclusions

ar2rsawseen
and
claude
committed
Merge pull request #7676 from Countly/fix/dbviewer-event-scope
ar2rsawseen
authored
docs: exclude non-default-enabled plugins from bounty scope

ar2rsawseen
and
claude
committed
docs: let non-default plugins fall under the general exclusion clause

ar2rsawseen
and
claude
committed
docs: backtick isolated-vm and capitalize Hooks in exclusion 9

ar2rsawseen
and
claude
committed
Merge branch 'master' into docs/exclude-hooks-custom-code
ar2rsawseen
authored
Merge pull request #7684 from Countly/docs/exclude-hooks-custom-code
ar2rsawseen
authored
dbviewer: validate aggregation stages at every depth

ar2rsawseen
and
claude
committed
dbviewer: make nested-pipeline sanitization structural, not $facet-specific

ar2rsawseen
and
claude
committed
dbviewer: block aggregation joins into redacted collections (incl. for admins)

ar2rsawseen
and
claude
committed
dbviewer: harden query handling (projection, search term, document scope, write stages)

ar2rsawseen
and
claude
committed
dbviewer: place sensitive-collection redaction as the first aggregation stage

ar2rsawseen
and
claude
committed
dbviewer: require explicit true in aggregation allow/deny lookups

ar2rsawseen
and
claude
committed
Merge branch 'fix/dbviewer-recursive-agg-guard' into fix/dbviewer-query-hardening
ar2rsawseen
committed
dbviewer: require explicit true in write-stage lookup too

ar2rsawseen
and
claude
committed
dbviewer: normalize projection to object and restrict values to strict 0/1

ar2rsawseen
and
claude
committed
dbviewer: block server-side-JS operators in aggregation expressions

ar2rsawseen
and
claude
committed
dbviewer: cap result size and stop echoing raw db errors

ar2rsawseen
and
claude
committed

Commits on Jun 9, 2026

Commits on Jun 10, 2026

Commits on Jun 11, 2026

Commits on Jun 12, 2026

Commits on Jun 15, 2026

Commits on Jun 16, 2026

Commits on Jun 17, 2026

Commits on Jun 18, 2026

Commits on Jun 19, 2026

Commits on Jun 22, 2026

Commits on Jun 23, 2026

Commits on Jun 24, 2026

build(deps-dev): Bump cypress from 15.17.0 to 15.18.0 in /ui-tests
dependabot[bot]
authored

Commits on Jun 26, 2026

Commits on Jun 30, 2026

Merge pull request #7783 from Countly/Cookiezaurs-patch-8
Cookiezaurs
authored