Olzhas Askar
dd48dfa093
Merge pull request #35158 from overleaf/oa-compile-timeout-final
...
[web] Compile timeout CTA
GitOrigin-RevId: f64c651332a32c293da1f3256cf9443413878d63
2026-09-17 11:16:42 +00:00
Lucie Germain
a897780ca7
[Security upgrade] bump tmp to 0.2.7 in root yarn.lock ( #34641 )
...
GitOrigin-RevId: cc473f209393f9f44a1ef5ed6be1f840f22d6f07
2026-09-17 11:16:38 +00:00
Copilot
c15352a9d9
Silence "Request aborted" errors from multer when client disconnects mid-upload ( #33662 )
...
GitOrigin-RevId: 378358db1ef45746c1c7bfc08277e01d4a0720c6
2026-09-17 11:16:35 +00:00
Anna Claire Fields
bdcb79c6fe
third party code inventory changes ( #34732 )
...
GitOrigin-RevId: dc691ec60ade749b2fa9a14fac857840589d34ea
2026-09-17 11:16:31 +00:00
Mathias Jakobsen
68d540c2fa
Merge pull request #35118 from overleaf/mj-survey-beta-options
...
[web] Add beta filtering to survey configuration
GitOrigin-RevId: b1d8f5266b48278ee775208bcaa68bb960be3250
2026-09-17 11:16:25 +00:00
Chris Dryden
5778239fe2
Merge pull request #34953 from overleaf/cd-migrate-tpds-to-esm
...
Migrate `third-party-datastore` service from CommonJS to ESM syntax
GitOrigin-RevId: 5f1bbe827a0fd21c5ddb0be0e2cddce7d4f59a83
2026-09-17 11:16:19 +00:00
John Lees-Miller
aa97f5794c
[git-bridge] fix symlink handling ( #35133 )
...
GitOrigin-RevId: 282823db63f64bfae950b00e77a6cdc2a048b0ce
2026-09-17 11:16:15 +00:00
David
de429e18d8
Merge pull request #35115 from overleaf/dp-library-no-results-state
...
Library: "No results" state
GitOrigin-RevId: 9c6e8d88abfa7372ca70826101ecd4e7b8fb0ae5
2026-09-17 11:16:09 +00:00
Tim Down
3f26afcb8b
Merge pull request #35124 from overleaf/td-dropbox-logo-rename
...
Rename Dropbox icon file to refresh cache in staging and production
GitOrigin-RevId: 4538892d8db227af3861e88da8e021936db0447d
2026-09-17 11:15:56 +00:00
Tim Down
f7ab3d2b1f
Merge pull request #34888 from overleaf/td-onboarding-split-test
...
Implement onboarding split test
GitOrigin-RevId: bf3675437d7fbbffc9374ffb7c0ba95bbb5ec3b8
2026-09-17 11:15:48 +00:00
5dccf3b62c
[Security upgrade] bump socket.io-client fork to ws@^8.21.0 ( #35060 )
...
* bump socket.io-client to overleaf fork 0.9.17-overleaf-6
Fixes GHSA-96hv-2xvq-fx4p (ws memory exhaustion DoS) by bumping the
overleaf/socket.io-client fork to a version that declares ws@^8.21.0
instead of ws@^1.1.5. The existing ws@npm:^8 resolution pins it to
8.21.0, removing ws@1.1.5 from yarn.lock entirely.
Depends on overleaf/socket.io-client#6 .
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
* use 0.9.17-overleaf-6 tag for socket.io-client
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
* use the socket.io-client-0.9.17-overleaf-6 release
* provide ws module for real-time acceptance tests
---------
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
Co-authored-by: Brian Gough <briangough@users.noreply.github.com >
Co-authored-by: Brian Gough <brian.gough@overleaf.com >
GitOrigin-RevId: 2d9a42f90bcf95a3a8f053df4c0092c4fbc26422
2026-09-17 11:15:42 +00:00
Jakob Ackermann
b6208ee52f
[real-time] gracefully handle undefined meta.tc ( #35049 )
...
GitOrigin-RevId: c375373585e4cb2405eac778bbe2dd987c342a19
2026-09-17 11:15:38 +00:00
Jakob Ackermann
9f1a2e058a
[web] avoid sending empty sharejs op ( #35066 )
...
* [web] add frontend tests for sharejs transform
* [web] extend tests for sharejs transform to flush eventually
* [web] full coverage for sharejs transform
* [web] add tests for sharejs events
* [web] add tests for sharejs callbacks
* [web] avoid sending empty sharejs op
* [web] add tests for resending after reconnecting
* [web] avoid resending of empty sharejs op after reconnecting
GitOrigin-RevId: 226fe47a7069cb877fd5a60454f86cc5855d9a0e
2026-09-17 11:15:33 +00:00
Mathias Jakobsen
3c3dd0fb37
Merge pull request #35037 from overleaf/mj-themed-modals-again
...
[web] Add support for dark mode modals
GitOrigin-RevId: 34770a6f91d6a331cfaccf86c7dc1a5d151ad25b
2026-09-17 11:15:24 +00:00
Mathias Jakobsen
ef8fce67f1
Merge pull request #35033 from overleaf/mj-drop-dark-mode-components-opt-in
...
[web] Remove explicit dark mode component opt-in
GitOrigin-RevId: b28603a9989bd046039c247ee2cf9f740c9feac0
2026-09-17 11:15:18 +00:00
Mathias Jakobsen
e9127933e6
Merge pull request #35079 from overleaf/mj-select-portal-container
...
[web] Pass container ref for writefull model select component
GitOrigin-RevId: 51a685a0f53df5b1be51dfcbebb144f413dee15e
2026-09-17 11:15:15 +00:00
Lucie Germain
210ced0d31
Merge pull request #33361 from overleaf/copilot/remove-direct-use-of-body-parser
...
Remove direct use of body-parser in favour of express built-ins
GitOrigin-RevId: 656c5f216daf68e86d53ae07d272e080bd5ab27f
2026-09-17 11:14:46 +00:00
Andrew Rumble
6be5db7667
Merge pull request #34926 from overleaf/lg-otel-root-security
...
[Security upgrade] bump @opentelemetry/core to 2.8.0 (OTEL family)
GitOrigin-RevId: dd45fba9999de03b44ef6bd38ed4dedba0900a50
2026-09-17 11:14:42 +00:00
Andrew Rumble
834730d011
Merge pull request #34580 from overleaf/lg-security-grpc-grpc-js
...
[Security upgrade] bump @grpc/grpc-js from 1.14.3 to 1.14.4
GitOrigin-RevId: bda9e568e55f6e536cfd6d28a9453726aca2c39c
2026-09-17 11:14:37 +00:00
Brian Gough
efaeb90e39
Merge pull request #34924 from overleaf/lg-tar-root-security
...
[Security upgrade] bump tar to 7.5.16 in root workspace
GitOrigin-RevId: 73ac951792ce3d8ac8e9c01508bd467932621f49
2026-09-17 11:14:33 +00:00
Mathias Jakobsen
60051a1c9f
Merge pull request #34920 from overleaf/lg-form-data-security-upgrade-v2
...
[Security upgrade] bump form-data to patched versions in root workspace
GitOrigin-RevId: 77aa4482bee6c84ea71255817263b26023d8943f
2026-09-17 11:14:27 +00:00
Jakob Ackermann
b51275ca2d
[real-time] add strict validation for incoming applyOtUpdate messages ( #35045 )
...
GitOrigin-RevId: 13156762e320db9c177c3cf82195baff42f68141
2026-09-17 11:14:16 +00:00
Jakob Ackermann
7932c99cfc
[saas-e2e] add tests for reviewer role ( #35024 )
...
* [real-time] update tests for more realistic applyOtUpdate messages
* [saas-e2e] add tests for reviewer role
GitOrigin-RevId: f0a5307230beb00be3a1387129e06eb5b2106c09
2026-09-17 11:14:09 +00:00
roo hutton
e5c815129b
Merge pull request #34976 from overleaf/rh-cio-beta-program
...
Expose beta program participation to Customer.io
GitOrigin-RevId: e28d9b41afb2e50e62b7e06c94482f4240c6becc
2026-09-17 11:14:06 +00:00
Mathias Jakobsen
d74ecc0f2c
Merge pull request #34993 from overleaf/mj-compose-associativity-tests
...
[overleaf-editor-core] Ignore timestamps in associativity tests
GitOrigin-RevId: eed120881fc66fd804759f25565a2e5664f3776c
2026-09-17 11:13:49 +00:00
Mathias Jakobsen
8282519406
Merge pull request #35022 from overleaf/mj-review-styles-fix
...
[web] Fix review panel styles
GitOrigin-RevId: ceb252e494adfbeef770be2f7e55510a96c93377
2026-09-17 11:13:44 +00:00
Mathias Jakobsen
cfb92c3b8f
Merge pull request #34938 from overleaf/mj-icon-type-from-name
...
[web] Tidy iconTypeFromName
GitOrigin-RevId: e597e2ac6cdc8a6c82a3849dbcfcffb659310c45
2026-09-17 11:13:40 +00:00
Andrew Rumble
25d625d4ee
Merge pull request #34918 from overleaf/lg-dev-tooling-security
...
[Security upgrade] bump webpack-dev-server, http-proxy-middleware, launch-editor (dev tooling)
GitOrigin-RevId: 50f2ffcf575beaf35d243f7059c82cb5210afbf8
2026-09-17 11:13:32 +00:00
Mathias Jakobsen
3a3adf5e5a
Merge pull request #34980 from overleaf/mj-ide-settings-feature
...
[web] Consolidate ide settings in `features/ide-settings`
GitOrigin-RevId: cbf0ff069399f418d8cb0d8165628df190046ea9
2026-09-17 11:13:11 +00:00
Jakob Ackermann
8e2edc4d8d
[web] remove limit when fetching split-tests ( #35010 )
...
GitOrigin-RevId: aa166d28359da83385b632ba2077a85384d08c36
2026-09-17 11:13:03 +00:00
Kristina
4622848a19
[web] optimize process notifications and add monitoring metrics ( #34699 )
...
GitOrigin-RevId: 411355cbdbb25d871b9cfb2afbb0ad235041337f
2026-09-17 11:12:59 +00:00
Kristina
28ad3b03b7
[web] add email notifications dry run split test ( #34653 )
...
GitOrigin-RevId: 62f73ce3850b994bf2a4a054edd6fa62134213a9
2026-06-26 08:08:18 +00:00
Alexandre Bourdin
33b8f27097
Merge pull request #34489 from overleaf/ab-keydown-event-logging
...
[web] Trigger full project search / focus mode on lowercase key matching for keyboard shortcuts
GitOrigin-RevId: a1786050c205ed46229b939c6325a3130c6fbcd3
2026-06-26 08:08:14 +00:00
Jakob Ackermann
a6c98365d9
[web] use client-side filtering for split tests in admin panel ( #34975 )
...
* [web] use client-side filtering for split tests in admin panel
Filtering on non-indexed fields is not allowed with notablescan.
* [web] add initial value for DEFAULT_FILTERS.active
* [web] unset error before fetching split tests
GitOrigin-RevId: 0813873c5a90d57c4fdbfd0043fcc325f00408aa
2026-06-26 08:08:10 +00:00
Jakob Ackermann
1b553c0455
[migrations] only apply non-blocking migrations in CI ( #34665 )
...
* [migrations] only apply non-blocking migrations in CI
* [migrations] use "yarn run migrations" instead of "npm run migrations"
GitOrigin-RevId: d9f96db398adf2febcd82333295fb8d5eab741bb
2026-06-26 08:08:05 +00:00
Jakob Ackermann
9fd0d644cf
[agents] refine guidance for running tests ( #34977 )
...
* [monorepo] fix handling of quoted MOCHA_GREP
* [agents] refine guidance for running tests
- nudge it towards scoped module targets
- nudge it to really run e2e tests when changed
- nudge it towards a11y cypress matchers
- recommend quoting for MOCHA_GREP
* [web] fix forwarding of mocha args from module Makefile
* [monorepo] use BRANCH_NAME_TAG_SAFE for building the ci image name
* [web] also make BRANCH_NAME_TAG_SAFE available in module Makefile
(It's not really needed, but will make copilot happy.)
GitOrigin-RevId: bfda3c8fe2b4f857ef111ac63f94b35a82ad75f8
2026-06-26 08:07:37 +00:00
Eric Mc Sween
c645215afc
Merge pull request #34907 from overleaf/em-promisify-github-sync
...
Promisify github-sync
GitOrigin-RevId: ac68f3f18ad211e204631d80bd5d4354ea23aaff
2026-06-26 08:07:30 +00:00
Eric Mc Sween
2c54574377
Merge pull request #34922 from overleaf/lg-vite-security-upgrade-v2
...
[Security upgrade] bump vite to 7.3.5 in root workspace
GitOrigin-RevId: 278475d98e23f0679ec45993e2a6816e9b93eb64
2026-06-26 08:07:25 +00:00
Eric Mc Sween
4fb8608908
Merge pull request #34884 from overleaf/em-already-in-your-library
...
Library import: flag entries that are already in the user's library
GitOrigin-RevId: f3c92fb59283631e1a9e78d2e08a3a365981df45
2026-06-26 08:07:21 +00:00
Mathias Jakobsen
75f7f82a3f
Merge pull request #34923 from overleaf/mj-left-menu-field
...
[web] Clean up "left menu" concepts in new editor
GitOrigin-RevId: 9597c1c53af15f3a1587e62176bca36cd7c9069c
2026-06-26 08:07:10 +00:00
Mathias Jakobsen
5dd2c425ac
Merge pull request #34912 from overleaf/mj-file-tree-style-cleanup
...
[web] Clean up file tree scss post editor redesign
GitOrigin-RevId: de2c5f3bd2979600897ffbbdcaead7ef72fa6ae1
2026-06-26 08:07:05 +00:00
Kate Crichton
9034e81c9b
Merge pull request #34508 from overleaf/kc-email-admin-domain-reverification-failed
...
[web] email group admin when domain reverification failed
GitOrigin-RevId: d885f26b1b39184c25133f70024a72af66fa2d69
2026-06-26 08:07:01 +00:00
Kate Crichton
907f5a969a
Merge pull request #34841 from overleaf/kc-grace-period-failedat-anchor
...
[web] Anchor domain-capture grace period on failedAt
GitOrigin-RevId: 5a31e5189512b22952c387722c7ad67f5c6397e3
2026-06-26 08:06:57 +00:00
Andrew Rumble
bbf5586935
Merge pull request #34919 from overleaf/lg-undici-security-upgrade
...
[Security upgrade] bump undici to 7.28.0 in root workspace
GitOrigin-RevId: 39a6fb92235c6453fbd6106c05af66fb1d089607
2026-06-26 08:06:49 +00:00
Maria Florencia Besteiro Gonzalez
1e03046d68
Merge pull request #34587 from overleaf/lg-security-netty-codec-http2
...
[Security upgrade] bump io.netty:netty-codec-http2 to 4.1.135.Final in services/git-bridge
GitOrigin-RevId: e6b6b110bd4ce9c70c91f701cc3cb4f0868f870a
2026-06-25 08:06:26 +00:00
Jessica Lawshe
6c9b4aa498
Merge pull request #34768 from overleaf/jel-email-when-domain-verified
...
[web] Email group admin when domain is verified
GitOrigin-RevId: 5f8bc6187c561067d16863d3586a94ef498f3bdf
2026-06-25 08:06:22 +00:00
Jessica Lawshe
02d9c344f2
Merge pull request #34821 from overleaf/jel-clear-domain-notifications
...
[web] Make domain notifications dismissible
GitOrigin-RevId: fa1648efd0aa73213e5352b347a1b0f4c07dfc04
2026-06-25 08:06:18 +00:00
Jessica Lawshe
4a635d7599
Merge pull request #34819 from overleaf/jel-domain-table-spacing
...
[web] Update spacing in groups domain table
GitOrigin-RevId: 6e908b79e45212cf060068271ec56c3146fe20d7
2026-06-25 08:06:13 +00:00
Mathias Jakobsen
a038e4b3a2
Merge pull request #34903 from overleaf/mj-settings-tabs-hover
...
[web] Add hover states to settings tabs
GitOrigin-RevId: c41c200231d0308267fc346d2949ef659a1950bc
2026-06-25 08:05:59 +00:00
Tim Down
3e29ce839f
Merge pull request #34602 from overleaf/td-stripe-3ds1-redirect
...
Fix for Stripe redirecting to incorrect page
GitOrigin-RevId: ac90b2e501c4bf5f2738d61866ea72ba861e5539
2026-06-25 08:05:54 +00:00