[email protected]

Major Changes

• #6231
  b7e4052
  Thanks @n1ru4l! - New permission system for organization member
  roles.

  The existing scopes assigned to organization members have been replaced with a permissions-based
  system, enabling more granular access control and role-based access control (RBAC) in Hive.

  Breaking Changes

  • Viewer Role Adjustments – Members with the default Viewer role can no longer create targets
    or projects.
  • Restricted Role Management – Permissions for inviting, removing, and assigning roles have
    been revoked. An admin must manually reassign these permissions where needed.
  • Expanded Role Assignment Capabilities – Members with permissions to manage invites, remove
    members, or modify roles can now grant additional permissions without restrictions. Caution is
    advised when assigning these rights, as they should be reserved for "Admin" roles.

  These changes enhance security and provide greater flexibility in managing user permissions across
  organizations.

Minor Changes

• #6378
  f14daa8
  Thanks @jasonkuhrt! - You can now set HTTP headers in your
  Laboratory Preflight Script.
  Every time you run a request from Laboratory, your preflight headers, if any, will be merged into
  the request before it is sent.

  You achieve this by interacting with the
  Headers instance newly available at
  lab.request.headers. For example, this script would would add a foo header with the value
  bar to every Laboratory request.

  lab.request.headers.set('foo', 'bar')

  A few notes about how headers are merged:

  1. Unlike static headers, preflight headers do not receive environment variable substitutions on
     their values.
  2. Preflight headers take precedence, overwriting any same-named headers already in the Laboratory
     request.

  Documentation for this new feature is available at
  https://the-guild.dev/graphql/hive/docs/dashboard/laboratory/preflight-scripts#http-headers.

• #6123
  abfd1b1
  Thanks @Intellicode! - encode postgres variables and introduce
  optional password

• #6412
  f352bba
  Thanks @Intellicode! - Added a new environment variable
  PROMETHEUS_METRICS_PORT to control the promethus port of the policy service. The default value
  is 10254 (no action needed).

Patch Changes

• #6398
  0e4be14
  Thanks @kamilkisiela! - Remove the db leftovers related to
  activities (no longer a thing)

• #6433
  a902d8b
  Thanks @kamilkisiela! - Improves validation for operation
  durations and error totals. Prevents processing of invalid usage report data.

• #6374
  393ece7
  Thanks @kamilkisiela! - Adjust the Kafka message size
  estimation only when Kafka gives back MESSAGE_TOO_LARGE error

• #6358
  ab06518
  Thanks @jdolle! - Use sum instead of max of top request counts for
  breaking changes calculation