twenty/packages/twenty-server/src/engine/core-modules at 26b4d6caed1b24de0a19801a373bc947198643f2 - twenty - Gitea: Git with a cup of tea

houseassassin/twenty

Files

T

History

Abdullah. 26b4d6caed fix(security): bump form-data to 4.0.6 (CRLF injection) (#21808 )

Resolves [Dependabot Alert
#1473](https://github.com/twentyhq/twenty/security/dependabot/1473),
[#1475](https://github.com/twentyhq/twenty/security/dependabot/1475),
[#1477](https://github.com/twentyhq/twenty/security/dependabot/1477),
[#1478](https://github.com/twentyhq/twenty/security/dependabot/1478),
[#1480](https://github.com/twentyhq/twenty/security/dependabot/1480),
[#1482](https://github.com/twentyhq/twenty/security/dependabot/1482),
[#1484](https://github.com/twentyhq/twenty/security/dependabot/1484),
[#1486](https://github.com/twentyhq/twenty/security/dependabot/1486),
[#1488](https://github.com/twentyhq/twenty/security/dependabot/1488),
[#1490](https://github.com/twentyhq/twenty/security/dependabot/1490),
[#1492](https://github.com/twentyhq/twenty/security/dependabot/1492),
[#1494](https://github.com/twentyhq/twenty/security/dependabot/1494),
[#1495](https://github.com/twentyhq/twenty/security/dependabot/1495),
[#1497](https://github.com/twentyhq/twenty/security/dependabot/1497),
[#1499](https://github.com/twentyhq/twenty/security/dependabot/1499),
[#1501](https://github.com/twentyhq/twenty/security/dependabot/1501) and
[#1506](https://github.com/twentyhq/twenty/security/dependabot/1506).

2026-06-19 08:46:32 +02:00

..

isCustom deprecation for Objects and Fields (#21228 )

2026-06-09 13:57:19 +00:00

Fix latency spike on application lookup (#21042 )

2026-05-29 11:06:36 +02:00

feat(admin-panel) - add billing/usage section (#21672 )

2026-06-16 13:18:43 +00:00

chore(settings): address review comments from PR 21072 (#21121 )

2026-06-02 07:23:14 +02:00

security: upgrade @nestjs/graphql 12→13 + @ptc-org/nestjs-query 4→9 (+ @nestjs/config 4) (#21402 )

2026-06-10 15:55:15 +02:00

fix(security): bump form-data to 4.0.6 (CRLF injection) (#21808 )

2026-06-19 08:46:32 +02:00

approved-access-domain

[WIP] Feat/marketing emails (#21173 )

2026-06-13 18:37:39 +02:00

feat(auth): collect the workspace logo on the sign-up creation step (#21723 )

2026-06-18 17:56:14 +02:00

Add post-call recording ingestion and billing (#21758 )

2026-06-18 14:01:18 +05:30

billing-webhook

feat(billing) - facilitate top up in ai chat (#21645 )

2026-06-17 16:20:11 +00:00

fix(server): stop redundant lambda rebuilds causing build-lock acquisition failures (#21442 )

2026-06-11 13:26:38 +00:00

feat(onboarding): prefill the invite step with teammates from the connected calendar (#21640 )

2026-06-16 15:45:11 +00:00

feat(server): derive email/calendar timelines from object relations (#21684 )

2026-06-19 02:22:27 +02:00

…

[WIP] Feat/marketing emails (#21173 )

2026-06-13 18:37:39 +02:00

…

code-interpreter

feat(code-interpreter): reuse a warm sandbox per conversation (E2B) (#21664 )

2026-06-17 08:12:24 +00:00

fix: use canonical oxlint rule id in lint-disable directives (#21253 )

2026-06-05 13:52:32 +02:00

feat(server): unify workspace-event ingestion behind one EventSink pipeline (#21197 )

2026-06-06 10:32:56 +02:00

Let users pick their workspace subdomain during sign-up (#21641 )

2026-06-17 10:52:51 +02:00

…

email-verification

chore(server): temporary diagnostic logging for empty verification email body (#21628 )

2026-06-15 17:51:08 +02:00

emailing-domain

[WIP] Feat/marketing emails (#21173 )

2026-06-13 18:37:39 +02:00

feat(server): report enterprise instance metadata on license validation (#21793 )

2026-06-18 19:16:57 +00:00

…

event-emitter/utils

Rename isUIReadOnly to isUIEditable, add isUICreatable, expose both to app developers (#21504 )

2026-06-13 07:10:22 +02:00

feat(server): in-app server-level admin management (#19785 ) (#21321 )

2026-06-10 06:50:25 +02:00

exception-handler

fix(route-trigger): return 422 instead of 500 for logic function execution errors (#21656 )

2026-06-16 10:45:54 +00:00

Remove IS_WORKFLOW_RUN_STEP_LOGS_ENABLED feature flag (#21323 )

2026-06-08 15:08:20 +00:00

feat(auth): collect the workspace logo on the sign-up creation step (#21723 )

2026-06-18 17:56:14 +02:00

[AUDIT] Run knip over twenty-server (#21159 )

2026-06-04 10:05:22 +00:00

…

fix: reload stale clients on any older app version, not just major (#21011 )

2026-06-10 10:01:12 +00:00

…

…

security: strip Node dev headers from images + lingui 5.9.5 (drops vulnerable esbuild) (#21448 )

2026-06-11 15:11:29 +02:00

imap-smtp-caldav-connection

fix(messaging): honor IMAP/SMTP encryption setting instead of inferring it from the port (#21562 )

2026-06-16 18:09:04 +02:00

Centralize and standardize impersonation validation rules (#21717 )

2026-06-18 13:13:50 +02:00

fix: use canonical oxlint rule id in lint-disable directives (#21253 )

2026-06-05 13:52:32 +02:00

fix: use canonical oxlint rule id in lint-disable directives (#21253 )

2026-06-05 13:52:32 +02:00

…

fix(server): mitigate integration-test OOM flakiness (#21588 )

2026-06-15 15:54:51 +02:00

fix(logic-function): treat invoke timeout as a user-level error, not a platform error (#21779 )

2026-06-18 16:43:40 +02:00

perf(onboarding): compute invite suggestions on-demand (#21696 )

2026-06-16 21:25:02 +02:00

feat(server): derive email/calendar timelines from object relations (#21684 )

2026-06-19 02:22:27 +02:00

Tool execution metrics (#21587 )

2026-06-18 10:58:47 +02:00

feat(auth): collect the workspace logo on the sign-up creation step (#21723 )

2026-06-18 17:56:14 +02:00

…

feat(twenty-orm): introduce WorkspaceScopedRepository for core/metadata workspace-scoped entities (#20953 )

2026-05-27 18:52:53 +02:00

fix: enforce strict rules for currency value handling by ai chatbot (#21470 )

2026-06-18 10:31:13 +02:00

record-position

[AUDIT] Run knip over twenty-server (#21159 )

2026-06-04 10:05:22 +00:00

record-transformer

fix: use canonical oxlint rule id in lint-disable directives (#21253 )

2026-06-05 13:52:32 +02:00

…

related-person-ids

feat(server): derive email/calendar timelines from object relations (#21684 )

2026-06-19 02:22:27 +02:00

Refactor and centralize file mimeType integrity check and sanitization (#20889 )

2026-05-26 15:10:52 +00:00

Support morph relations in workflow record nodes (#21403 )

2026-06-15 12:56:17 +00:00

secret-encryption

Strictly type encryption rotation key site maps constants through entity type derivation (#21085 )

2026-06-01 15:25:58 +00:00

secure-http-client

…

…

session-storage

…

sql-sanitization/utils

…

fix: use canonical oxlint rule id in lint-disable directives (#21253 )

2026-06-05 13:52:32 +02:00

…

…

feat(workflow): use workspace member as variable sender for emails (#21582 )

2026-06-17 13:57:22 +00:00

Tool execution metrics (#21587 )

2026-06-18 10:58:47 +02:00

feat(code-interpreter): reuse a warm sandbox per conversation (E2B) (#21664 )

2026-06-17 08:12:24 +00:00

two-factor-authentication

feat(settings): discovery hero rollout + ephemeral playground token (#21072 )

2026-06-01 14:16:02 +02:00

feat(auth): collect the workspace logo on the sign-up creation step (#21723 )

2026-06-18 17:56:14 +02:00

Add post-call recording ingestion and billing (#21758 )

2026-06-18 14:01:18 +05:30

Keep synced messages and events when removing a workspace member (#21443 )

2026-06-13 15:52:13 +02:00

feat(auth): collect the workspace logo on the sign-up creation step (#21723 )

2026-06-18 17:56:14 +02:00

feat(workflow): expand manual-trigger runtime payload with payload + _metadata (#21676 )

2026-06-16 15:49:12 +00:00

feat(auth): collect the workspace logo on the sign-up creation step (#21723 )

2026-06-18 17:56:14 +02:00

workspace-invitation

…

core-engine.module.ts

feat(code-interpreter): reuse a warm sandbox per conversation (E2B) (#21664 )

2026-06-17 08:12:24 +00:00