Back to the changelog

• Security

  Event log isolated per tenant

  Every raised event now records the tenant that generated it. On platform-wide (global) event definitions, a tenant sees **only its own** events in the log and detail view — before, payloads, outcomes and errors were potentially visible to other tenants too. The anti-duplicate protection (idempotency key) is now per-tenant as well: two tenants using the same key no longer "steal" each other's event. Automatic migration of historical data included.

• Security

  Update-proof dependency policy

  Security overrides and the allowlist of packages authorized to run build scripts now live where current package-manager versions actually read them; the package-manager version is pinned and aligned across local development, CI and Docker images. Before, an update could silently ignore the security overrides.