What shipped

JJoshYG-TheKey

The frontend now displays AI-generated answers with styled source links to knowledge documents, enabling users to see where KeyGPT found its information.

Rrobin-agent

Keystone's gRPC calls now have timeouts to prevent workers from hanging indefinitely on slow services, retries for transient failures, and the assignment cleanup moved off the blocking request path.

Ccpotey

Restored a missing academic year filter that wasn't appearing when viewing school organization pages in group workspaces.

Rrobin-agent

Enabled administrators to assign coming-soon training items in advance and fixed the My Training notification badge to exclude those items that aren't yet available.

TTheTomWard

Updated user-facing text on training records pages to provide clearer information to end users.

Rrobin-agent

Automatically deleted orphaned training assignments when a user account is permanently removed from the system to prevent data inconsistencies.

Llunky84

The frontend now includes a record ID in API requests for certificate retrieval, enabling the system to fetch certificates based on specific record identifiers.

Llunky84

User authentication now bypasses caching during password resets so that login immediately validates against the new password hash instead of stale cached credentials.

Aalex-wilson-the-key

Removed a temporary restriction on training assignment creation that is no longer needed.

Llunky84

Fixed certificate downloads to match what's actually displayed in the table by reusing existing download logic instead of re-querying the server with different filters, and cleaned up orphaned code.

Llunky84

Added a restriction to prevent training assignments from being created beyond the current academic year.

Llunky84

Unified certificate downloads across multiple apps by routing them through the orchestration service and consolidated duplicated code into shared utilities.

Ccpotey

Fixed CSS cascade ordering issues in Next.js by adding !important declarations to ensure styles apply correctly.

Ccpotey

Restored the ability for logged-out users to return to their original training link after login by preserving and passing through the return URL across the authentication flow.

Ccpotey

Ensured the local development database doesn't restore a stale deprecated validation URL when reset, preventing authentication issues during testing.

Ccpotey

Removed a stale redirect URL from the MYKEY application record that was causing login flows to hit a deprecated endpoint instead of returning users to their intended destination.

Rrobin-agent

The expired assignment feature is now enabled in production, allowing users to see assignments marked as expired at the end of the academic year instead of overdue.

Llunky84

Staff members with in-progress courses now appear in the course result table filter under their current academic year instead of being hidden when their completion date is missing.

Rrobin-agent

Admins assigning training courses now receive warnings when selecting courses being replaced, the extend assignment feature has been removed from the UI, and expiry messaging has been updated to reflect the new academic year-end expiration model.

Llunky84

An empty commit was created to resolve a technical pipeline issue unrelated to functionality.

Aalex-wilson-the-key

The training app was refactored to use a new orca service for handling certificates instead of the previous implementation.

Ccpotey

A timing fix prevents training data from being incorrectly recorded under the wrong organization when workspace switches fail.

Rrobin-agent

Fixed security vulnerabilities in lodash-es and fast-xml-parser by adding dependency overrides and upgrading packages to safer versions.

Ssarahcthekey

Updated the protobufjs library to patch 7 high-severity security vulnerabilities that were affecting multiple parts of the application through its dependencies.

Rrobin-agent

Additional vulnerable transitive dependencies in company-backend have been patched through pnpm overrides to address remaining security vulnerabilities like prototype pollution and HTTP response splitting issues.

Rrobin-agent

Seventy-one vulnerable transitive dependencies introduced by Strapi have been mitigated by pinning safe patched versions through pnpm overrides, addressing critical security issues while maintaining API compatibility.

OOwenTourlamain

The dashboard now groups overdue and expired assignments under a single 'Overdue' label while keeping separate visual indicators in tables, and fixes progress bars to show the combined proportion of overdue work in red and expired work in dark red.

Rrobin-agent

Socket.IO WebSocket connections from the browser to the assistant tunnel on rentabot are now proxied through the frontend domain to avoid being blocked by Cloudflare Access restrictions.