23a7611aac
revert to align center as we add an issue on edit mode. Fixed the inp… ( #16179 )
...
# Current Behavior
<img width="441" height="81" alt="image"
src="https://github.com/user-attachments/assets/cc3301b1-c92a-44c3-b452-49264ff5d323 "
/>
Revert behavior to align center
fixed input size (24px)
<img width="670" height="202" alt="CleanShot 2025-11-28 at 16 05 30@2x"
src="https://github.com/user-attachments/assets/5c7ca79f-53d7-45c1-a2a6-7c3b1b78524c "
/>
2025-11-28 18:01:06 +01:00
cd699cbda1
Fix message sync ( #16186 )
...
Follow up
https://twenty-v7.sentry.io/issues/7072565676/events/2068bcd0b5b642dca1215b015ac74cfd/?environment=prod&environment=prod-eu&project=4507072499810304&query=is%3Aunresolved%20%21issue.type%3A%5Bperformance_consecutive_db_queries%2Cperformance_consecutive_http%2Cperformance_file_io_main_thread%2Cperformance_db_main_thread%2Cperformance_n_plus_one_db_queries%2Cperformance_n_plus_one_api_calls%2Cperformance_p95_endpoint_regression%2Cperformance_slow_db_query%2Cperformance_render_blocking_asset_span%2Cperformance_uncompressed_assets%2Cperformance_http_overhead%2Cperformance_large_http_payload%5D%20timesSeen%3A%3E10&referrer=previous-event&sort=date
and
https://github.com/twentyhq/twenty/pull/16144/files#diff-3adef01a601936cd060128fd08874cf5938d477bfde39f306aa5070a068e07aa
2025-11-28 17:49:57 +01:00
4d7965c058
Augment chart limits and improve padding on bar chart ( #16184 )
...
- Maximum from 50 to 100
- Reduce padding
- Make inner padding dynamic
2025-11-28 17:40:44 +01:00
f2cdf8a6e1
message folder ui enhancement ( #16181 )
2025-11-28 17:25:21 +01:00
df20c52293
i18n - docs translations ( #16185 )
...
Created by Github action
---------
Co-authored-by: github-actions <github-actions@twenty.com >
2025-11-28 17:21:43 +01:00
5016c25daa
Remove viewGroup v1 implem ( #16178 )
...
# Introduction
Removing v1 implementation of view groups and both view group and view
field relicas front fetchers
Related https://github.com/twentyhq/core-team-issues/issues/1911
2025-11-28 16:36:28 +01:00
7bf68e5f31
fixed the horizontal padding on Navbar ( #16088 )
...
Was 12px. Changed it to 8px to match Figma
<img width="550" height="301" alt="CleanShot 2025-11-26 at 12 05 10"
src="https://github.com/user-attachments/assets/edec07bd-74ee-4dd7-b433-20a5bb636e6b "
/>
2025-11-28 15:12:02 +01:00
9387680020
Rollback standard id removal on relation object creation ( #16177 )
2025-11-28 15:11:45 +01:00
7620e1b0a6
Fix markdown link formatting in CONTRIBUTING.md ( #16176 )
...
CC: @FelixMalfait
Before:
<img width="1293" height="170" alt="image"
src="https://github.com/user-attachments/assets/dc02afea-2781-4a5b-885a-2617709d9e36 "
/>
After:
<img width="1293" height="170" alt="image"
src="https://github.com/user-attachments/assets/acbc5c0b-bb96-4cd7-8c02-892cc4745f70 "
/>
2025-11-28 13:53:45 +01:00
f2f1204af6
i18n - docs translations ( #16175 )
...
Created by Github action
Co-authored-by: github-actions <github-actions@twenty.com >
2025-11-28 13:23:00 +01:00
fc6b136c2f
fix: resolve GitHub Actions security vulnerabilities ( #16174 )
...
## 🔒 Security Fixes
This PR addresses security vulnerabilities identified by GitHub CodeQL
security scanning.
### Changes
#### 1. Fix Shell Command Injection (High Severity)
**File:** `.github/workflows/docs-i18n-pull.yaml`
**Issue:** Direct interpolation of `${{ github.head_ref }}` in shell
command was susceptible to command injection attacks.
**Fix:** Assign GitHub context variable to environment variable first:
```yaml
run: |
git push origin "HEAD:$HEAD_REF"
env:
HEAD_REF: ${{ github.head_ref }}
```
This prevents malicious input from being executed as shell commands.
#### 2. Add Missing Workflow Permissions (Medium Severity)
**File:** `.github/workflows/ci-test-docker-compose.yaml`
**Issue:** Workflow did not explicitly define GITHUB_TOKEN permissions,
running with overly broad defaults.
**Fix:** Added explicit minimal permissions:
```yaml
permissions:
contents: read
```
This applies to all 3 jobs in the workflow:
- `changed-files-check`
- `test`
- `ci-test-docker-compose-status-check`
### Security Impact
- ✅ Prevents potential shell injection attacks via pull request branch
names
- ✅ Follows principle of least privilege for GitHub Actions tokens
- ✅ Aligns with GitHub Actions security best practices
- ✅ Resolves all CodeQL security alerts for these workflows
### References
- [GitHub Actions: Security hardening for GitHub
Actions](https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions )
- [GitHub Actions: Permissions for the
GITHUB_TOKEN](https://docs.github.com/en/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token )
- Related attacks: 2025 Nx supply chain attack, 2024 ultralytics/actions
attack
2025-11-28 13:15:33 +01:00
470888a23a
Fix missing metadata version in legacy datasource ( #16173 )
2025-11-28 11:54:54 +00:00
5cea3d4358
i18n - translations ( #16172 )
...
Created by Github action
---------
Co-authored-by: github-actions <github-actions@twenty.com >
2025-11-28 12:01:06 +01:00
e712eb01fb
fix: update side panel header title to base font size with baseline alignment ( #16095 )
...
## Summary
1. Changed the side panel header title font size from small (0.92rem) to
base (1rem)
2. Added baseline alignment between the title and subtitle text while
keeping the icon centered
## Changes
- Updated `StyledPageInfoTitleContainer` font size from
`theme.font.size.sm` to `theme.font.size.md`
- Added `StyledPageInfoTextContainer` wrapper to baseline-align title
and subtitle independently from the icon
<img width="448" height="191" alt="image"
src="https://github.com/user-attachments/assets/b022a89c-a68f-4449-b01a-2ec029ce995b "
/>
2025-11-28 11:46:14 +01:00
f2d9400e22
increase chunk fro release ( #16169 )
...
1.12
2025-11-28 10:23:11 +00:00
4d223e3ad3
i18n - docs translations ( #16170 )
...
Created by Github action
Co-authored-by: github-actions <github-actions@twenty.com >
2025-11-28 11:21:17 +01:00
9bc58a4ef9
Release line chart and pie chart ( #16166 )
...
- Remove the feature flag for these two charts.
- Reorder the charts
- Hide gauge chart
2025-11-28 10:17:03 +00:00
eb362c6d5f
Update workspace entities to make all TEXT nullable ( #16144 )
...
Follow up on #15926
---------
Co-authored-by: Etienne <45695613+etiennejouan@users.noreply.github.com >
Co-authored-by: guillim <guigloo@msn.com >
2025-11-28 10:50:38 +01:00
9620a4b0ba
Optimize EntityMetadata caching in GlobalWorkspaceDataSource ( #16146 )
...
## Context
EntityMetadata was being rebuilt from scratch on every
findMetadata()/getMetadata() call (~20 times per request). This involved
running EntitySchemaTransformer.transform() and
EntityMetadataBuilder.build() repeatedly, causing unnecessary CPU
overhead.
## Implementation
Cache entityMetadatas in ORMWorkspaceContext: Build EntityMetadata once
during workspace context initialization instead of on every metadata
lookup
Remove redundant entitySchemas caching: Since flatMetadata is already
cached, the additional Redis cache for entitySchemaOptions was
unnecessary overhead
Remove WorkspaceEntitiesStorage: Replaced with direct lookup from
FlatObjectMetadataMap
Simplify getObjectMetadataFromEntityTarget: Now only accepts string
targets, using flat metadata maps directly
Also:
Removed unused injections in some services
2025-11-28 10:09:52 +01:00
fd9ea2f5ee
[groupBy] Fix order by nested date field ( #16135 )
...
Fixes https://github.com/twentyhq/core-team-issues/issues/1935
2025-11-28 09:02:06 +00:00
1e98e4da4d
i18n - translations ( #16163 )
...
Created by Github action
---------
Co-authored-by: github-actions <github-actions@twenty.com >
2025-11-28 10:01:52 +01:00
04b01170ed
Introduce a workspace member page. ( #16031 )
...
- Refactored workspace member details into a focused Infos-only page.
- Aligned the flow with SettingsProfile, including controlled name
inputs, debounced saves, and stable instance IDs.
- Added a dedicated member-picture upload flow. Introduced the
MemberPictureUploader, connected to the
uploadWorkspaceMemberProfilePicture mutation.
- Backend now includes a workspace-member resolver/module for
profile-picture uploads. The endpoint is permission-guarded, streams
files through FileUploadService, and returns the signed file without
modifying the member entity.
<!-- CURSOR_SUMMARY -->
---
> [!NOTE]
> Adds a workspace member detail page with picture/name management,
integrates a new avatar upload mutation, and updates list routing;
replaces the old profile picture uploader across profile and onboarding.
>
> - **Frontend**
> - **Settings Members**:
> - Add `pages/settings/members/SettingsWorkspaceMember` with
`MemberInfosTab`, `MemberNameFields`, and `MemberEmailField` for
viewing/editing member info.
> - Update routes in `SettingsRoutes` and add
`SettingsPath.WorkspaceMemberPage`.
> - Update `SettingsWorkspaceMembers` to navigate to member detail on
row click and simplify row actions (remove dropdown menu).
> - **Avatar Upload**:
> - Introduce `WorkspaceMemberPictureUploader` using
`uploadWorkspaceMemberProfilePicture` mutation.
> - Replace `ProfilePictureUploader` in `SettingsProfile` and
`onboarding/CreateProfile`.
> - **GraphQL (client)**:
> - Add `uploadWorkspaceMemberProfilePicture` mutation types/hooks in
`generated(-metadata)/graphql.ts`.
> - **Backend**
> - Add `UserWorkspaceResolver` with
`uploadWorkspaceMemberProfilePicture` mutation guarded by
`WorkspaceAuthGuard` and `SettingsPermissionGuard` (WORKSPACE_MEMBERS),
using `FileUploadService`.
> - Register resolver and `PermissionsModule` in `UserWorkspaceModule`.
>
> <sup>Written by [Cursor
Bugbot](https://cursor.com/dashboard?tab=bugbot ) for commit
359652f8c94d093a69469969874131e525d3dc6f. This will update automatically
on new commits. Configure
[here](https://cursor.com/dashboard?tab=bugbot ).</sup>
<!-- /CURSOR_SUMMARY -->
---------
Co-authored-by: Félix Malfait <felix@twenty.com >
2025-11-28 08:23:51 +00:00
e53e0d266d
Remove view filter v1 implem ( #16154 )
...
# Introduction
Removing view filter v1 implem
Related https://github.com/twentyhq/core-team-issues/issues/1911
2025-11-28 00:17:17 +01:00
b1ef395627
i18n - docs translations ( #16160 )
...
Created by Github action
Co-authored-by: github-actions <github-actions@twenty.com >
2025-11-27 23:20:41 +01:00
a77b9d4a95
i18n - translations ( #16159 )
...
Created by Github action
---------
Co-authored-by: github-actions <github-actions@twenty.com >
2025-11-27 23:01:00 +01:00
a343bc1aee
feat: workflow agent node permissions tab ( #16092 )
2025-11-28 02:57:33 +05:30
41a07006ef
i18n - docs translations ( #16158 )
...
Created by Github action
Co-authored-by: github-actions <github-actions@twenty.com >
2025-11-27 21:20:50 +01:00
f3dc81217e
i18n - translations ( #16157 )
...
Created by Github action
---------
Co-authored-by: github-actions <github-actions@twenty.com >
2025-11-27 21:01:04 +01:00
fa87603fd8
[Dashboards] Relation fields groupby ( #16093 )
2025-11-27 19:28:53 +00:00
f23aa632a7
i18n - docs translations ( #16156 )
...
Created by Github action
Co-authored-by: github-actions <github-actions@twenty.com >
2025-11-27 19:21:56 +01:00
d09cb7c66b
i18n - translations ( #16155 )
...
Created by Github action
Co-authored-by: github-actions <github-actions@twenty.com >
2025-11-27 19:01:53 +01:00
eaac569812
Fix variable usage in Search Record workflow action ( #16147 )
...
Closes https://github.com/twentyhq/twenty/issues/16141
---------
Co-authored-by: prastoin <paul@twenty.com >
2025-11-27 18:56:56 +01:00
2f25922f4c
[DASHBOARDS] Use aggregate for pie chart center metric ( #16153 )
...
## Description
The pie chart center metric wasn't implemented the right way.
It always calculated the sum of the values, but this only make sense for
additive aggregate operations (count, sum ...).
What we should do instead is calculate the right aggregate value.
This PR fixes this.
## Video QA
https://github.com/user-attachments/assets/2190da5a-e608-4732-86a2-478c9cf1477a
2025-11-27 17:26:14 +00:00
32a876bbd4
part 4 of filter/sort drilldown onChartDatum click ( #16142 )
2025-11-27 18:03:10 +01:00
d4b3a8978d
i18n - docs translations ( #16151 )
...
Created by Github action
Co-authored-by: github-actions <github-actions@twenty.com >
2025-11-27 17:21:45 +01:00
3b8db734a5
fix: glob CLI command injection via -c/--cmd executes matches with shell:true ( #16139 )
...
Resolves [Dependabot Alert
318](https://github.com/twentyhq/twenty/security/dependabot/318 ),
[Dependabot Alert
321](https://github.com/twentyhq/twenty/security/dependabot/321 ) and
[Dependabot Alert
322](https://github.com/twentyhq/twenty/security/dependabot/322 ).
<!-- CURSOR_SUMMARY -->
---
> [!NOTE]
> Bumps glob to 10.5.0 across packages and adds @types/node and
twenty-sdk to rollup-engine dependencies.
>
> - **Dependencies**:
> - Upgrade `glob` to `10.5.0` across multiple `yarn.lock` files.
> - In `packages/twenty-apps/community/rollup-engine`:
> - Add `@types/node@^24.7.2` (adds `undici-types`).
> - Add `twenty-sdk@0.0.3`.
>
> <sup>Written by [Cursor
Bugbot](https://cursor.com/dashboard?tab=bugbot ) for commit
0aee78e0fa90918320aa35bf38d89c3a4c801666. This will update automatically
on new commits. Configure
[here](https://cursor.com/dashboard?tab=bugbot ).</sup>
<!-- /CURSOR_SUMMARY -->
Co-authored-by: Félix Malfait <felix.malfait@gmail.com >
2025-11-27 16:36:36 +01:00
4fed51b7d8
i18n - translations ( #16145 )
...
Created by Github action
---------
Co-authored-by: github-actions <github-actions@twenty.com >
2025-11-27 16:21:06 +01:00
accd55d7cb
[DASHBOARDS] Add default order by and date granularity when choosing field ( #16143 )
...
## QA
https://github.com/user-attachments/assets/b512eea0-26d1-4e1c-b8b9-f993a5c0d0fb
https://github.com/user-attachments/assets/0222600b-8a9a-44dc-a992-2a234712c913
2025-11-27 16:13:06 +01:00
65480eb492
Currency input field - fix ( #16140 )
...
Currency field used to have default value, but default value on field is
not mandatory. Defaulf default value logic has been removed.
Also test all field type input when empty. ✅
2025-11-27 14:53:42 +00:00
ec53302ba8
Update chart limit error message ( #16133 )
...
## Description
- Display days, weeks, months or years instead of bars in the error
message
- Update the banner position
- Add translations on section titles
## Before
<img width="824" height="1378" alt="CleanShot 2025-11-27 at 14 51 40@2x"
src="https://github.com/user-attachments/assets/b2d7d1e6-e6d9-419b-8d7a-21f43e951898 "
/>
## After
<img width="832" height="1382" alt="CleanShot 2025-11-27 at 14 51 15@2x"
src="https://github.com/user-attachments/assets/fe66d202-71be-45dc-8dff-502946e33aac "
/>
2025-11-27 15:32:12 +01:00
d217767600
i18n - docs translations ( #16138 )
...
Created by Github action
Co-authored-by: github-actions <github-actions@twenty.com >
2025-11-27 15:20:54 +01:00
3590bf1e83
Null equivalence - fix on dashboard entity ( #16136 )
2025-11-27 14:18:43 +00:00
26ec6729c0
[Dashboards]: polish week on date granularity ( #16128 )
...
https://github.com/user-attachments/assets/2b7ef230-49e2-4882-9029-6df3d01f5f20
2025-11-27 15:04:44 +01:00
da626f70b7
optimize buildFieldMapsFromFlatObjectMetadata usages ( #16132 )
...
This newly introduced util can be a bit expensive especially when done
recursively.
This PR improves that
File | Pattern Fixed | Impact
-- | -- | --
format-result.util.ts | Recursive array/object processing | N array
items → 1 call
format-data.util.ts | Recursive array processing | N array items → 1
call
process-nested-relations-v2.helper.ts | Duplicate call in call chain | 2
calls → 1 call
common-result-getters.service.ts | Per-record processing in array | N
records → 1 call
compute-relation-connect-query-configs.util.ts | Nested loop (entities ×
connect fields) | N×M calls → 1 call
2025-11-27 15:01:51 +01:00
27547fd445
restore color on pie chart item and populate it on data transformation ( #16131 )
2025-11-27 13:41:30 +00:00
57ae12ff7c
Null equivalence - update filter ( #16123 )
2025-11-27 13:31:39 +00:00
76ed82b598
i18n - translations ( #16130 )
...
Created by Github action
---------
Co-authored-by: github-actions <github-actions@twenty.com >
2025-11-27 14:23:42 +01:00
ca5bd76c6a
Null equivalence - migration command ( #16018 )
...
Awaiting https://github.com/twentyhq/twenty/pull/15926 approval, before
un-drafting it
---------
Co-authored-by: prastoin <paul@twenty.com >
2025-11-27 13:18:56 +00:00
97a8beb3f9
on pie chart, slice should not be clickable when in edit mode ( #16129 )
2025-11-27 13:05:24 +00:00
46ce9eca3f
fix: node-forge is vulnerable to ASN.1 OID integer truncation ( #16124 )
...
Resolves [Dependabot Alert
328](https://github.com/twentyhq/twenty/security/dependabot/328 ).
Used `yarn up node-forge --recursive` to bump up the patch version from
1.3.1 to 1.3.2.
2025-11-27 17:49:10 +05:00
Thomas des Francs