Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
60 commits
Select commit Hold shift + click to select a range
a40e064
chore(deps): bump postcss (#8931)
dependabot[bot] Apr 27, 2026
db1c5b9
fix: filter out soft-deleted states from API endpoints (#8840)
KanteshMurade Apr 28, 2026
a62fe8a
chore(deps): remove unused pnpm overrides (#8973)
sriramveeraghanta Apr 29, 2026
9491bdb
fix(api): scope cross-workspace resource lookups to prevent IDOR (#9008)
sriramveeraghanta May 4, 2026
ff21e53
fix(nginx): correct real_ip_header typo X-Forward-For → X-Forwarded-F…
MinitJain May 5, 2026
4c1bdd1
fix(api): use requester's workspace role for project member role upda…
sriramveeraghanta May 5, 2026
4225bc5
[GIT-175] fix: completed_at updation logic for work items (#9044)
sangeethailango May 12, 2026
7fd8e33
Merge branch 'canary' of github.com:makeplane/plane into preview
sriramveeraghanta May 14, 2026
65d6a94
refactor(i18n): migrate packages/i18n from MobX to react-i18next (#8898)
sriramveeraghanta May 14, 2026
50a7b47
fix(api): pass project_lead_id (not User instance) when creating Proj…
jamartineztelecoengineer84-dotcom May 14, 2026
208f359
[WEB-7181] fix: empty comment quick-actions menu in work item activit…
b-saikrishnakanth May 19, 2026
4ca6d6c
[WEB-7182] fix: remove profile preferences activity (#9025)
b-saikrishnakanth May 19, 2026
039d582
fix(aio): use JSON array double quotes in VOLUME instruction (#9099)
astarte75 May 21, 2026
fd613dc
fix(web): add requestIdleCallback fallback for Safari/iOS (#9094)
bubacho May 24, 2026
41b03bb
Merge commit from fork
sriramveeraghanta May 25, 2026
e71a8f5
[GIT-174]chore: set completed_at as read only field for work item (#9…
sangeethailango May 25, 2026
9f77ea5
fix: Add docker pytest runner and fix bugs the suite surfaced (#9138)
sriramveeraghanta May 25, 2026
13a3ea2
fix: security vulnerabilities for plane docker images (#9140)
pratapalakshmi May 26, 2026
310d2ed
chore: restructure .claude/skills into per-skill directories (#9146)
sriramveeraghanta May 26, 2026
edf2475
refactor: logging with retention + API token hardening (#9148)
sriramveeraghanta May 27, 2026
0acb32e
chore: bump turbo to 2.9.14, migrate pnpm config to workspace yaml (#…
sriramveeraghanta May 27, 2026
095b1aa
[WEB-7447] feat: migrate CE telemetry from OTLP traces to OTLP metric…
mguptahub May 28, 2026
f14451a
fix(web): add Safari fallback for requestIdleCallback (#9137)
KanteshMurade May 28, 2026
248f5d6
refactor(api): source API_KEY_RATE_LIMIT from settings, drop service …
sriramveeraghanta May 28, 2026
04622ce
fix: harden webhook/link/OAuth-avatar SSRF (advisory clusters A/B/C/E…
sriramveeraghanta May 30, 2026
3f57fef
chore: move all dependencies into pnpm catalog (#9153)
sriramveeraghanta May 31, 2026
011328c
[GIT-213] fix: return HTTP response from dispatch() exception handler…
sriramveeraghanta Jun 1, 2026
bd0d164
fix(GIT-235): add styles to onboarding tour close button for contrast…
Rahulcheryala Jun 1, 2026
e388cb9
fix: declare @tailwindcss/postcss in admin/space/web for Docker build…
sriramveeraghanta Jun 1, 2026
7ec8d49
fix: bump npm deps to resolve Dependabot advisories (#9191)
sriramveeraghanta Jun 1, 2026
b1c78fe
fix(api): rate-limit magic-code verify, bound per-token attempts (GHS…
sriramveeraghanta Jun 1, 2026
4280c4d
fix: handle error message for special characters in Identifier of Pro…
durgeshhhhhhh Jun 3, 2026
b6e47cc
fix: dropdown shadow on the work item more options (#9154)
karthiksuki Jun 3, 2026
9a30a07
fix(api): enforce workspace membership on GenericAssetEndpoint (#9212)
sriramveeraghanta Jun 4, 2026
0bbfe95
fix: bump react-router and vitest to resolve Dependabot advisories (#…
sriramveeraghanta Jun 4, 2026
a153531
chore: integrate react-doctor scanning (#9223)
sriramveeraghanta Jun 8, 2026
373f149
[GIT-238] refactor: migrate types from apps/web to @plane/types (#9203)
Rahulcheryala Jun 9, 2026
2f7941a
fix(api): sanitize XLSX export cells to prevent formula injection (#9…
sriramveeraghanta Jun 10, 2026
fd16d03
fix(api): reject API key auth for deactivated user accounts (#9225)
sriramveeraghanta Jun 10, 2026
498f857
fix: resolve esbuild advisory and bump turbo to 2.9.18 (#9236)
sriramveeraghanta Jun 15, 2026
f2feca6
feat(api): add workspace_slug to webhook delivery payload (#9232)
ch4og Jun 15, 2026
7db4d8e
chore(deps): bump pyjwt (#9241)
dependabot[bot] Jun 16, 2026
2541a8c
chore(deps): bump cryptography (#9243)
dependabot[bot] Jun 16, 2026
53a323d
chore(deps): bump the npm_and_yarn group across 1 directory with 3 up…
dependabot[bot] Jun 16, 2026
ad73ca3
[WEB-7730] fix(security): scope cascade deletes to workspace in BulkD…
mguptahub Jun 20, 2026
0f1f4d5
fix: Require at least one alphanumeric char in workspace name (#9263)
okxint Jun 20, 2026
81d9873
[WEB-7727] fix(security): scope issue ID validation to workspace/proj…
mguptahub Jun 20, 2026
ad32dc7
chore(deps): upgrade Storybook to v10 and fix security advisories (#9…
sriramveeraghanta Jun 20, 2026
7b0704d
fix(api): require at least one alphanumeric char in workspace name (#…
sriramveeraghanta Jun 20, 2026
64da8dc
fix: Use APP_DOMAIN env var for bot user email (#9262)
okxint Jun 20, 2026
4a0746b
fix: scope workspace user preference filter to current user (#9279)
sriramveeraghanta Jun 20, 2026
6220ba9
[WEB-7854] fix: prevent workspace invite token disclosure and invite …
mguptahub Jun 23, 2026
0d58adb
[WEB-7774] fix(security): sanitize comment_html and intake descriptio…
mguptahub Jun 23, 2026
971c2aa
[WEB-7769] fix(security): scope EstimatePoint create/destroy to works…
mguptahub Jun 23, 2026
1acc69e
[WEB-7805] fix: remove hardcoded SECRET_KEY from community deployment…
mguptahub Jun 23, 2026
cc3eb97
[WEB-7813] fix: prevent ORM order_by injection in issue and other end…
mguptahub Jun 23, 2026
6c9dbb5
[WEB-7787] fix(security): block deactivated user login and fix Worksp…
mguptahub Jun 23, 2026
1e8f363
[WEB-7787] fix(auth): restore activation flow and narrow deactivation…
mguptahub Jun 24, 2026
90ae845
[GIT-239 | GIT-240] refactor: hooks and constants consolidation to co…
Rahulcheryala Jun 26, 2026
e13e6e0
fix(spreadsheet): apply active sort order to sub-task rows
codewithsupra Jun 26, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
The table of contents is too big for display.
Diff view
Diff view
  •  
  •  
  •  
67 changes: 67 additions & 0 deletions .claude/skills/branch-name/SKILL.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,67 @@
---
name: branch-name
description: Use when starting a new branch or renaming an existing one — produces a branch name in the format `<type>/<work-item-id>-<short-description>` that's compatible with the create-pr skill's work item ID extraction.
user_invocable: true
---

# Branch Naming

Create branch names that follow the convention `<type>/<work-item-id>-<short-description>`, where the work item ID can be cleanly extracted later (e.g., by the create-pr skill).

## Format

```
<type>/<work-item-id>-<short-description>
```

- All lowercase, hyphen-separated
- Work item ID stays in its original form but lowercased (e.g., `SILO-1146` → `silo-1146`)
- Short description is 2–5 words in kebab-case, focused on the _what_, not the _how_

## Workflow

1. **Determine the type** based on the work being done:
- `feat` — new functionality
- `fix` — bug fix
- `chore` — tooling, deps, config, non-user-facing housekeeping
- `refactor` — restructuring without behavior change
- `docs` — documentation only
- `perf` — performance improvement

2. **Determine the work item ID**:
- If the user gives one, use it
- If they reference a Plane work item (e.g., a URL or title), extract the ID
- If none exists, ask the user — don't invent one

3. **Write the short description**:
- 2–5 words in kebab-case
- Describe the outcome, not the implementation (`add-app-tile-visibility`, not `update-tile-component`)
- Skip filler words (`the`, `a`, `for`)

4. **Assemble and create the branch**:

```
git checkout -b <type>/<work-item-id-lowercased>-<short-description>
```

5. **Return the branch name** to the user.

## Examples

```
fix/silo-1146-relative-config-urls
feat/web-1234-app-tile-visibility
chore/web-2201-bump-eslint
refactor/silo-980-extract-auth-middleware
docs/web-1500-pr-template-update
perf/silo-1310-cache-workspace-lookup
```

## Common Mistakes

- Putting the work item ID at the end instead of after the type (breaks extraction)
- Using underscores or camelCase instead of hyphens
- Uppercasing the work item ID inside the branch name (it should be lowercase here, uppercased only when used as the PR title prefix)
- Writing a long, narrative description — keep it scannable
- Omitting the work item ID when one exists in Plane
- Using a type that won't match the eventual PR type (pick the type you'd use in the PR title)
65 changes: 65 additions & 0 deletions .claude/skills/create-pull-request/SKILL.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,65 @@
---
name: create-pull-request
description: Use when creating a pull request for the current branch — gathers branch context, generates a PR description following the repo's pull_request_template.md, and creates the PR with a Plane work item ID prefix in the title.
user_invocable: true
---

# Create PR

Create a pull request using the repo's PR template, a Plane work item ID as the title prefix, and a fully filled-out description based on the actual diff.

## Workflow

1. **Determine the base branch**: Default to `preview` unless the user specifies otherwise.

2. **Gather context** (in parallel):
- `git status -s` — check for uncommitted changes
- `git diff <base>...HEAD --stat` — files changed
- `git log <base>...HEAD --oneline` — all commits on the branch
- `git diff <base>...HEAD --no-color` — full diff for understanding changes (if very large, focus on the most important files first)
- `git rev-parse --abbrev-ref --symbolic-full-name @{u}` — check if branch tracks a remote
- Read `.github/pull_request_template.md` from the repo root

3. **Determine work item ID**:
- Extract from branch name if it contains an identifier (e.g., `chore/silo-1146-foo` → `SILO-1146`, `feat/web-1234-x` → `WEB-1234`)
- If not found in branch name, ask the user

4. **Draft the PR** using the template from step 2:

**Title**: `[WORK-ITEM-ID] <type>: <concise summary>` (under 70 chars)
- Type reflects the change: `fix`, `feat`, `chore`, `refactor`, `docs`, `perf`, etc.

**Body**: Fill in every section from the PR template based on the actual diff:
- **Description** — Clear, concise summary of what the PR does and why. Focus on the "what" and "why", not line-by-line changes. Mention important implementation decisions.
- **Type of Change** — Check the appropriate box(es): Bug fix, Feature, Improvement, Code refactoring, Performance improvements, Documentation update.
- **Screenshots and Media** — Leave a placeholder: `<!-- Add screenshots here -->`
- **Test Scenarios** — Suggest concrete scenarios grounded in the actual changes (e.g., "Navigate to project settings and verify the new toggle works"), not generic ones.
- **References** — Include the work item ID, any linked issues the user mentions, and any Sentry issue links/IDs (e.g., `SENTRY-ABC123` or Sentry URLs) referenced earlier in the conversation.

Append a Claude Code session line at the bottom of the body.

5. **Push and create** (in parallel where possible):
- Push branch with `-u` if no upstream is set
- Create PR via `gh pr create` using a HEREDOC for the body

6. **Return the PR URL** to the user.

## Example Title

```
[SILO-1146] fix: allow relative URLs for configuration_url and improve app tile visibility
```

## Guidelines

- Keep the description concise but informative
- Use bullet points when listing multiple changes
- Focus on user-facing impact, not implementation details
- Don't fabricate test scenarios that aren't relevant to the actual changes

## Common Mistakes

- Summarizing only the latest commit instead of all commits on the branch
- Forgetting to check for an upstream before pushing
- Using a work item ID format that doesn't match the branch convention
- Wrapping the PR body in a code fence when passing it to `gh pr create`
58 changes: 0 additions & 58 deletions .claude/skills/pr-description.md

This file was deleted.

50 changes: 50 additions & 0 deletions .claude/skills/react-doctor/SKILL.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,50 @@
---
name: react-doctor
description: Use when finishing a feature, fixing a bug, before committing React code, or when the user types `/doctor`, asks to scan, triage, or clean up React diagnostics. Covers lint, accessibility, bundle size, architecture. Includes a regression check and a full local-triage workflow that fetches the canonical playbook.
version: "1.1.0"
---

# React Doctor

Scans React codebases for security, performance, correctness, and architecture issues. Outputs a 0–100 health score.

## After making React code changes:

Run `npx react-doctor@latest --verbose --diff` and check the score did not regress.

If the score dropped, fix the regressions before committing.

## For general cleanup or code improvement:

Run `npx react-doctor@latest --verbose` (without `--diff`) to scan the full codebase. Fix issues by severity — errors first, then warnings.

## /doctor — full local triage workflow

When the user types `/doctor`, says "run react doctor", or asks for a full triage / cleanup pass (not just a regression check), fetch the canonical local-triage playbook and follow every step in it:

```bash
curl --fail --silent --show-error \
--header 'Cache-Control: no-cache' \
https://www.react.doctor/prompts/react-doctor-agent.md
```

The playbook is the single source of truth — a scan → filter → triage → fix → validate loop that edits the working tree directly (never commits, never opens PRs). Updating the prompt at its source updates every agent on its next fetch — no skill reinstall needed.

Pair it with the matching per-rule prompts at `https://www.react.doctor/prompts/rules/<plugin>/<rule>.md` (fetched on demand inside the playbook) so each fix uses the canonical, reviewer-tested recipe.

## Configuring or explaining rules

When the user wants to understand a rule, disagrees with one, or wants to disable / tune which rules run (not fix code), use the `doctor-explain` skill (alias `/doctor-config`). Start with `npx react-doctor@latest rules explain <rule>`, then apply the narrowest control via `npx react-doctor@latest rules disable|set|category|ignore-tag …`, which edits your `doctor.config.*` (or `package.json#reactDoctor`).

## Command

```bash
npx react-doctor@latest --verbose --diff
```

| Flag | Purpose |
| ----------- | --------------------------------------------- |
| `.` | Scan current directory |
| `--verbose` | Show affected files and line numbers per rule |
| `--diff` | Only scan changed files vs base branch |
| `--score` | Output only the numeric score |
147 changes: 0 additions & 147 deletions .claude/skills/release-notes.md

This file was deleted.

Loading