Skip to content

[comp] Production Deploy#2799

Merged
tofikwest merged 8 commits intoreleasefrom
main
May 8, 2026
Merged

[comp] Production Deploy#2799
tofikwest merged 8 commits intoreleasefrom
main

Conversation

@github-actions
Copy link
Copy Markdown
Contributor

@github-actions github-actions Bot commented May 8, 2026

This is an automated pull request to release the candidate branch into production, which will trigger a deployment.
It was created by the [Production PR] action.


Summary by cubic

Deploy the latest release to production, adding an optional Employee Portal invite email (checkbox defaults on and respects RBAC compliance), a new resend portal invite action in People (API + UI, compliant roles only), and a fix restoring visibility when re-inviting inactive/deactivated contractors plus a Contractor role filter (CS-376). Also fixes policy generation when adding frameworks by regenerating newly created policies to replace placeholders (CS-345), and includes a patch bump of @radix-ui/react-tabs to 1.1.13, dev bumps of prettier-plugin-tailwindcss to ^0.7.2 and @semantic-release/npm to ^13.1.5, and Node 22 setup in the release workflow.

Written for commit 8305166. Summary will update on new commits.

github-actions Bot and others added 2 commits May 8, 2026 09:21
* chore(deps): bump @radix-ui/react-tabs from 1.1.12 to 1.1.13

Bumps [@radix-ui/react-tabs](https://github.com/radix-ui/primitives) from 1.1.12 to 1.1.13.
- [Changelog](https://github.com/radix-ui/primitives/blob/main/release-process.md)
- [Commits](https://github.com/radix-ui/primitives/commits)

---
updated-dependencies:
- dependency-name: "@radix-ui/react-tabs"
  dependency-version: 1.1.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): update bun.lock for @radix-ui/react-tabs 1.1.13

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Mariano <marfuen98@gmail.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@vercel
Copy link
Copy Markdown

vercel Bot commented May 8, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
comp-framework-editor (staging) Ready Ready Preview, Comment May 8, 2026 3:31pm
2 Skipped Deployments
Project Deployment Actions Updated (UTC)
app (staging) Skipped Skipped May 8, 2026 3:31pm
portal (staging) Skipped Skipped May 8, 2026 3:31pm

Request Review

Copy link
Copy Markdown
Contributor

@cubic-dev-ai cubic-dev-ai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 2 files

Confidence score: 5/5

  • Automated review surfaced no issues in the provided summaries.
  • No files require special attention.

#2484)

* chore(deps-dev): bump prettier-plugin-tailwindcss from 0.6.14 to 0.7.2

Bumps [prettier-plugin-tailwindcss](https://github.com/tailwindlabs/prettier-plugin-tailwindcss) from 0.6.14 to 0.7.2.
- [Release notes](https://github.com/tailwindlabs/prettier-plugin-tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/prettier-plugin-tailwindcss/blob/main/CHANGELOG.md)
- [Commits](tailwindlabs/prettier-plugin-tailwindcss@v0.6.14...v0.7.2)

---
updated-dependencies:
- dependency-name: prettier-plugin-tailwindcss
  dependency-version: 0.7.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): update bun.lock for prettier-plugin-tailwindcss 0.7.2

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Mariano <marfuen98@gmail.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
)

* chore(deps-dev): bump @semantic-release/npm from 12.0.2 to 13.1.5

Bumps [@semantic-release/npm](https://github.com/semantic-release/npm) from 12.0.2 to 13.1.5.
- [Release notes](https://github.com/semantic-release/npm/releases)
- [Commits](semantic-release/npm@v12.0.2...v13.1.5)

---
updated-dependencies:
- dependency-name: "@semantic-release/npm"
  dependency-version: 13.1.5
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): update bun.lock for @semantic-release/npm 13.1.5

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* fix(ci): add Node.js 22 setup for @semantic-release/npm v13

@semantic-release/npm v13 requires Node ^22.14.0 || >= 24.10.0.
The release workflow only set up Bun, relying on whatever Node
the runner shipped with.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Mariano <marfuen98@gmail.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
* feat(people): add option to trigger employee portal emails

* feat(people): automatically trigger portal email if published policies exist

* fix(people): restrict automated portal email to strictly employee roles
…#2801)

addEmployeeWithoutInvite only set deactivated=false when reactivating,
leaving isActive=false — making the member invisible on the People page.
Also fix reactivateById to handle the isActive=false+deactivated=false
limbo state, and add missing Contractor option to role filter dropdown.

Closes CS-376

Co-authored-by: Mariano <marfuen98@gmail.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
…hoice (#2806)

* fix(people): default portal email checkbox to checked and respect user choice

Remove auto-send override based on published policies so the checkbox
reflects actual behavior. Guard resend endpoint to employee/contractor only.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* refactor(people): use RBAC obligations instead of hardcoded role checks

Check BUILT_IN_ROLE_OBLIGATIONS and custom role obligations from the DB
to determine compliance obligation, rather than hardcoding role name
lists. Also uses RESTRICTED_ROLES for the employee routing check.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
…ulled in, aren't regenerated to replace placeholders (#2807)

* fix(api): regenerate newly created policies when adding a framework

* fix(api): add error handling for failed policy trigger

---------

Co-authored-by: chasprowebdev <chasgarciaprowebdev@gmail.com>
@tofikwest
Copy link
Copy Markdown
Contributor

@cubic-dev-ai review it

@cubic-dev-ai
Copy link
Copy Markdown
Contributor

cubic-dev-ai Bot commented May 8, 2026

@cubic-dev-ai review it

@tofikwest I have started the AI code review. It will take a few minutes to complete.

Copy link
Copy Markdown
Contributor

@cubic-dev-ai cubic-dev-ai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 18 files

Confidence score: 5/5

  • Automated review surfaced no issues in the provided summaries.
  • No files require special attention.

@tofikwest tofikwest merged commit f350f6e into release May 8, 2026
14 checks passed
@claudfuen
Copy link
Copy Markdown
Contributor

🎉 This PR is included in version 3.48.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants