Changelog
c43bd44 Merge pull request 'Release v0.6.0' (#432) from release/v0.6.0 into main
dc4436f Release v0.6.0
2afc571 Merge pull request 'feat(seed): extend qa-seed with assets, KB, SLA, and appointments (PSA-55)' (#431) from feat/PSA-55-qa-seed-demo-gaps into main
10bb709 Merge remote-tracking branch 'origin/main' into feat/PSA-55-qa-seed-demo-gaps
9e27995 fix(e2e): tolerate bunyip 2FA auto-submit in the login helper
4b8d73d feat(seed): give the QA SLA policy a response/resolution target (PSA-55)
1568eec feat(seed): extend qa-seed with assets, KB, SLA, and appointments (PSA-55)
66d74f0 Merge pull request 'feat(seed): add richer showcase demo dataset with create/refresh' (#430) from feat/PMS-620-showcase-seed-dataset into main
0fbbf13 feat(seed): add richer showcase demo dataset with create/refresh
fd9c86e Merge pull request 'fix(email): set Message-ID header on every outbound message' (#428) from fix/PMS-624-outbound-message-id into main
10bfc58 fix(email): set Message-ID header on every outbound message
dc3c254 Merge pull request 'feat(e2e): exclude external-service flows from production E2E runs' (#427) from feat/PMS-608-exclude-external-from-prod-e2e into main
83a5963 feat(e2e): exclude external-service flows from production E2E runs
0424c83 Merge pull request 'fix(auth): enforce role ceiling on user update and fix OAuth callback XSS' (#426) from fix/PMS-625-auth-audit-privesc-xss into main
8fe83cd fix(auth): enforce role ceiling on user update and fix OAuth callback XSS
8d4b241 Merge pull request 'feat(auth): return 410 Gone (ACCOUNT_DELETED) for tombstoned users on the API surface' (#421) from feat/MAPPS-348-410-gone-account-deleted into main
a01c616 Merge pull request 'test(e2e): un-fixme form-validation now that MAPPS-347 SPA fix has merged' (#422) from test/MAPPS-347-unfixme-form-validation into main
05fdfc7 feat(auth): return 410 Gone (ACCOUNT_DELETED) for tombstoned users on the API surface
c1b50fd test(e2e): un-fixme form-validation now that MAPPS-347 SPA fix has merged
58cd083 Merge pull request 'docs(webhook): describe BUNYIP_WEBHOOK_SECRET as service-wide, not per-Application' (#424) from docs/BUNYIP-332-correct-webhook-secret-comment into main
629c4e7 ci: retrigger against rebased tip (post-BUNYIP-331 e2e fix)
6a8037a docs(webhook): describe BUNYIP_WEBHOOK_SECRET as service-wide, not per-Application
59aa239 Merge pull request 'test(e2e): make fillTotpStep + setInputValue aware of the BUNYIP-331 auto-submit' (#425) from test/BUNYIP-331-autosubmit-aware-fillTotpStep into main
da283a6 test(e2e): make fillTotpStep + setInputValue aware of the BUNYIP-331 auto-submit
bb55f38 Merge pull request 'feat(auth): receive Bunyip account_deleted webhook and soft-delete the mokosh user' (#416) from feat/PMS-591-bunyip-account-deleted-receiver into main
0a29847 test(e2e): fixme form-validation spec on MAPPS-347 SPA regression
a86d8e2 Merge pull request 'feat(sla): validate schedule/holiday JSON on write (reject malformed, 422)' (#420) from feat/PMS-604-sla-json-validation into main
774cc38 test(sla): cover accept/reject cases for schedule and holiday JSON
f6c3ad8 feat(sla): reject malformed holiday-calendar JSON on write (422)
838306c feat(sla): reject malformed business-hours schedule JSON on write (422)
e66e7b0 refactor(sla): expose clock weekday/time parsers to the module
1741855 Merge remote-tracking branch 'origin/main' into feat/PMS-591-bunyip-account-deleted-receiver
6c2c6ca test(auth): match synthetic-name expectations to titlecased output
d0ec426 feat(auth): receive Bunyip account_deleted webhook and soft-delete the mokosh user
David released this