Skip to content

Beta branch integration and PR readiness - #912

Merged
Paul Lizer (paullizer) merged 127 commits into
Developmentfrom
beta
Jun 18, 2026
Merged

Paul Lizer (paullizer) merged 127 commits into
Developmentfrom
beta

Conversation

@paullizer

Copy link
Copy Markdown
Collaborator

Summary

  • Integrates the broad beta branch into Development, including workspace, chat, governance, workflow, agent/action, file sync, data management, documentation, and validation updates.
  • Adds final PR-readiness cleanup: whitespace hygiene, Admin Settings JSON rendering XSS cleanup, Semantic Kernel loader BOM removal, and reviewed BAC guardrail justifications for plugin authorization boundaries.
  • Bumps the app version to 0.242.065 and adds release/fix documentation for the readiness cleanup.

Validation

  • PASS: git diff --check origin/Development
  • PASS: Python compile for 539 changed Python files
  • PASS: Swagger route validation for 48 changed route files
  • PASS: targeted full-file BAC scan for edited plugin/loader files
  • PASS: changed Admin Settings appVersion XSS line scan
  • PASS: node --check for 74 changed first-party JavaScript files

Tests

  • PASS: functional_tests/test_xss_guardrails_checker.py
  • PASS: functional_tests/test_broken_access_control_guardrails_checker.py
  • PASS: functional_tests/test_broken_access_control_findings_fix.py
  • PASS: functional_tests/test_plugin_tool_agent_security_audit.py
  • PASS: functional_tests/test_msg_file_upload_support.py
  • PASS: functional_tests/test_agents_catalog_feature.py
  • PASS: functional_tests/test_governance_enforcement_logic.py
  • PASS: functional_tests/test_group_manage_settings_tab_visibility.py
  • PASS: functional_tests/test_privacy_logging_telemetry_audit.py
  • PASS: functional_tests/test_public_workspace_manage_asset_versioning.py
  • PASS: functional_tests/test_azd_managed_identity_preflight.py

Release Notes

  • Updated docs/explanation/release_notes.md under v0.242.065.
  • Added docs/explanation/fixes/PR_READINESS_GUARDRAIL_CLEANUP_FIX.md and linked it from the fixes index.

Security Notes

  • No changed .env, session-token, key/cert/db, node_modules, cache, or storage-state paths were found.
  • Route decorators, XSS guardrail spot validation, and targeted BAC validation passed.
  • Broad authenticated UI tests were not run locally; validation used syntax checks and focused functional coverage instead.

…fix public workspace bug, fix plugin payload bug, fix logging for high value info
… fix tts logging, fix model icon, fix docs on foundry rbac roles
@paullizer
Paul Lizer (paullizer) marked this pull request as ready for review June 17, 2026 21:18
@paullizer
Paul Lizer (paullizer) merged commit 3fab884 into Development Jun 18, 2026
7 checks passed
@paullizer
Paul Lizer (paullizer) deleted the beta branch July 4, 2026 01:14
Paul Lizer (paullizer) added a commit to paullizer/simplechat that referenced this pull request Sep 24, 2026
On the classic Manage group page, exporting statistics failed with "Failed to
export group stats." whenever Storage Usage was ticked, which it is by
default: exportGroupStats formats the storage rows with formatBytes, which
manage_group.js never defined or imported (both calls came in with microsoft#912).

manage_group.js now defines formatBytes beside its CSV helpers: "0 B", then
B to TB to two decimals, as the public workspace export writes them, capped
at TB. The sections, rows, file name and messages are unchanged.

A new functional test runs the real exportGroupStats and its CSV and window
helpers in Node, extracted from the module by name, with only the browser
stubbed. On the unfixed module it fails with the original message.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant