3.79.0 (2026-06-12)

Bug Fixes

• pentest: address review findings on finding-context flow (9bf3bb1)
• pentest: cap the composed additionalContext briefing at 20k chars (7485b03)
• pentest: reject whitespace-only provider target URLs in context upsert (1a45397)

Features

• pentest: append customer context appendix to report downloads (5f59df7)
• pentest: let customers add context to findings so retests are informed (4f0dfc5)

3.78.4 (2026-06-11)

Bug Fixes

• cloud-security: don't let a fully-failed GCP/Azure scan wipe good results (d893eb6)
• cloud-security: map SCC 404 NOT_FOUND to the actionable SCC_NOT_ACTIVATED error (d36d908)

3.78.3 (2026-06-11)

Bug Fixes

• trust-portal: use NDA-free copy in access-granted email when NDA is bypassed (9920760)

3.78.2 (2026-06-11)

Bug Fixes

• assistant-chat: scope chat to membership-verified org (2294c2e)

3.78.1 (2026-06-11)

Bug Fixes

• integration-platform: skip GCP projects whose service API is disabled instead of a false permission finding (e554269)

3.78.0 (2026-06-11)

Bug Fixes

• guard optimistic state sync and align picker page cap (cubic on #3095) (c39011f)
• integration-platform: isolate per-subscription wildcard scan + graceful subscription picker (62fd692)
• integration-platform: make multi-subscription scanning strictly opt-in (c1bce47)
• integration-platform: stamp account attribution on account-level AWS findings (1493c5c), closes #3086 #3065
• integration-platform: surface real read errors in azure/gcp checks (CS-534 part 1) (91135b2)
• integration-platform: surface real read errors in cloudtrail/kms/iam/ec2/rds checks (CS-533) (5d7e2a0), closes #3075
• integration-platform: surface the subscription scan cap as an explicit finding (e6dda8c)
• integrations: gate the Add-account CTA on integration:create RBAC (6c35625)
• resolve cubic findings from the production deploy review (#3087) (9f30138)
• trust-portal: resync custom-framework state + mark response fields nullable (ec5ba44)
• trust-portal: validate allowed-emails body with a DTO (06ed9bd)
• trust: gate certificate drag-and-drop behind the read-only permission (086bf7c)
• trust: reset the certificate file input on every selection, not only success (7d51e2c)
• trust: resolve 4 cubic findings from the production deploy review (c2b9122)
• trust: return 400 not 500 on malformed PUT /custom-frameworks body (bb30749)

Features

• integration-platform: scan all enabled Azure subscriptions (CS-534 part 2) (9912b9a)
• trust-portal: add per-email NDA-bypass allowlist (3e3ed70)
• trust-portal: display custom frameworks on the trust portal (e9ed93d)

3.77.0 (2026-06-10)

Bug Fixes

• evidence-forms: hide Account Types from the global Documents browse list (628b220)
• evidence-forms: mark Account Types optional so it doesn't change org scores (680e47d)
• framework-editor: default Controls tab to Name A-Z sort (CS-511) (2b30fa7)

Features

• evidence-forms: add Account Types document type (CS-513) (9b6e610)
• framework-editor: remove Control Family column from Controls tab (CS-512) (f60775c)

3.76.0 (2026-06-10)

Features

• framework-editor: multi-line editor for Requirement descriptions (CS-513) (750fa17), closes #3078

3.75.0 (2026-06-10)

Features

• framework-editor: multi-line editor for long control descriptions (4896365)

3.74.5 (2026-06-10)

Bug Fixes

• framework-editor: let "Add Existing Control" pick requirements instead of linking all (dde15af)
• framework-editor: treat null requirementIds as link-all, not a crash (7b24fb6)
• integration-platform: log degraded region routing when paginated ListBuckets is rejected (5f3e4f2)
• integration-platform: route S3 bucket reads to each bucket's own region (9f6e6f6)
• integration-platform: surface real S3 read errors instead of claiming missing permissions (8f2bb19)