Malik Glossop and Copybot
eb9d586bdb
Merge pull request #32968 from overleaf/worktree-labs-feature-preview
...
Add labs preview modal to editor
GitOrigin-RevId: 0df33135febc8e94129bcdfdfb5c4981326dfab0
2026-05-25 08:05:28 +00:00
Kate Crichton and Copybot
afaef6a1ef
Merge pull request #33499 from overleaf/kc-update-add-domain-modal-ux
...
[web] update domain verification modal ux
GitOrigin-RevId: e7abcb569e8c956e8f22f09c90dd8e9998fc6255
2026-05-22 08:06:30 +00:00
Domagoj Kriskovic and Copybot
bf1dd6986f
Record project notification timestamp in Redis on applyUpdate (reverted) ( #30814 )
...
* Revert "Revert "Record project notification timestamp in Redis on applyUpdate (#29509 )""
This reverts commit 31c88ee836fb5e1ab3950da590c28e24b1397edb.
GitOrigin-RevId: fc012324f6035156585fab468aca72b900a9710b
2026-05-22 08:06:26 +00:00
Mathias Jakobsen and Copybot
fc3dbc1aad
Merge pull request #33883 from overleaf/mj-command-palette-border
...
[web] Tweak border color of command palette
GitOrigin-RevId: 7b37b9c8503402da62e2fd2b334f28dc14760b75
2026-05-22 08:06:11 +00:00
Kristina and Copybot
88eb599d4e
[document-updater] increase scanStream COUNT for project notifications ( #33833 )
...
* increase scanStream COUNT for project notifications
* fix Bull queue.add delay option being ignored
* parse timestamp to number before adding to notification queue
* fix outdated comments in project_notifications script
GitOrigin-RevId: 98bb638228550b2f6f2de90280a06c47e022cf96
2026-05-22 08:06:03 +00:00
ilkin-overleaf and Copybot
192fd7c28c
Merge pull request #33542 from overleaf/ii-dropdown-flicker
...
Fix dropdown menu flicker on open
GitOrigin-RevId: ddf826b30fcac3322d86067e5950731e7dc1a2d4
2026-05-22 08:05:59 +00:00
Domagoj Kriskovic and Copybot
803ba735ca
Show toast when Python script saves output files to project
...
GitOrigin-RevId: 9ca5201645953f86c3ac8e83f545dfbcdac2b35c
2026-05-22 08:05:55 +00:00
Olzhas Askar and Copybot
014ac37704
Merge pull request #33814 from overleaf/oa-adjust-tooltip
...
[web] Adjust tooltip
GitOrigin-RevId: a180fb9872c9fc85b5ea7e3821e8e8c8393bab9d
2026-05-22 08:05:50 +00:00
Olzhas Askar and Copybot
793d5c79fb
Merge pull request #33775 from overleaf/oa-remove-addon-section
...
[web] Remove Add-ons section
GitOrigin-RevId: 82009dd6aeb3588f46cabacdb7313c01f3afc27e
2026-05-22 08:05:46 +00:00
Mathias Jakobsen and Copybot
9d79cc89ec
Merge pull request #33855 from overleaf/mj-command-palette-tweaks
...
[web] command palette tweaks
GitOrigin-RevId: 454d6916043d3317e60302379bcf9707fb8d4dcb
2026-05-21 08:07:12 +00:00
Mathias Jakobsen and Copybot
eddec90cb1
Merge pull request #33649 from overleaf/mj-command-palette
...
[web] Add command palette
GitOrigin-RevId: 5bf1903836810ca5f0e2bc7f6c00a4b1da797ea2
2026-05-21 08:07:04 +00:00
Simon Gardner and Copybot
5cfd7b6c6a
[migration] re-use paypal methods if billing agreement ids match ( #33720 )
...
GitOrigin-RevId: 4a324c1cdde84dabf620a2616a0aa27242cf041e
2026-05-21 08:06:38 +00:00
Olzhas Askar and Copybot
bb0dc07d22
Merge pull request #33741 from overleaf/lg-sanitize-html-upgrade
...
[Security upgrade] Upgrade sanitize-html to 2.17.4 (GHSA-rpr9-rxv7-x643)
GitOrigin-RevId: 40a11361eac35d44a6fd7069e0d0d7c02a6628ec
2026-05-21 08:06:33 +00:00
Miguel Serrano and Copybot
ad651a22fa
Revert "[web] Add SVG support to file-view panel ( #32155 )" ( #33832 )
...
This reverts commit e80c491a10db6f5757c568430e17d9cbb613c5b4.
GitOrigin-RevId: dbe0de698bc7349e5b8f9712d1d13998e41ab528
2026-05-21 08:06:28 +00:00
Miguel Serrano and Copybot
35681dd3b2
[web] Add SVG support to file-view panel ( #32155 )
...
* [web] Add SVG support to file-view panel
Adds support by reading the content of the downloaded SVG, then creating a blob and rendering it as native HTML.
GitOrigin-RevId: e80c491a10db6f5757c568430e17d9cbb613c5b4
2026-05-21 08:06:16 +00:00
Miguel Serrano and Copybot
f9c53fe147
[web] Added DEFAULT_LATEX_COMPILER env ( #32455 )
...
This is mainly intended to be used in CE/Server Pro
GitOrigin-RevId: 277f9afca389a1e7b00db2d987129432fb1707b5
2026-05-21 08:06:12 +00:00
Miguel Serrano and Copybot
107189cd5f
[web] Clear hardcoded password in external SP auth ( #33597 )
...
registerExternalAuthAdmin() now generates a random password on admin registration.
A migration clears the password for existing installs only in CE/SP
GitOrigin-RevId: 94a82d35dc8cd46915c31fb24f477c19367025eb
2026-05-21 08:06:07 +00:00
Liam O'Brien and Copybot
b4a76fee6d
[web] Implementing library search ( #33604 )
...
* Initial working version of library search
draft fetch allowing optional search param
draft debounce search
draft search bar
draft using for search
draft search params
draft data index creation
draft prefix-regex search
draft add fields only on search
draft index setup
draft search tests
draft search tests for extra params
draft using correct display value from bib entry for tokenization
* Library search handles diacritics
* Library styling and refreshing table data without
reloading table
* Updating mongo search query and creating migration
scripts for existing data
* Using Mongo query for sorting results
* Moving copied files into shared directory
* Addressing review comments
* Pulling changes from bibtex-search-token for consistency with migration
* Fixing lint
* Using mongo collation for handling case and diacritics in search queries
* Boosting citation keys with check for tokens
* Removing double foldLatinDigraphs call
* Matching figma designs for Library search component
* Adding cursor for paginated Library search results
* Re-fixing flash after searching library
* Unit test for cursor search
* Using same cursor object for search and get all results
* Data migration moved to manual script
GitOrigin-RevId: b7e6a1f07f775c8450dd97e7269cab3b68ca0eb3
2026-05-20 08:07:29 +00:00
Jessica Lawshe and Copybot
9acf3b8e7f
Merge pull request #33610 from overleaf/jel-hostname-capturedByGroup
...
[web] Check `capturedByGroup` when adding new email
GitOrigin-RevId: f9ef3d4cc7387dc0139a70aecd6cfcb20170abc6
2026-05-20 08:07:18 +00:00
2f08f6f6eb
Bump mongoose to 8.22.1 (GHSA-wpg9-53fq-2r8h) ( #33648 )
...
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
GitOrigin-RevId: f092e8d914ea5825e285fe4741bb42dd2c5d5fa3
2026-05-20 08:07:05 +00:00
Alf Eaton and Copybot
34d272afa9
Reapply "Wrap PDF setDocument in startViewTransition ( #33346 )" ( #33633 )
...
GitOrigin-RevId: 11dc65d8a8195c8cd6e6e2b58905a0f8b7b218f4
2026-05-20 08:06:53 +00:00
Alf Eaton and Copybot
1d959af16e
Process zip import entries in parallel ( #33176 )
...
GitOrigin-RevId: f77c2b08d4c085b51a8608d2621dd5bbe1134258
2026-05-20 08:06:48 +00:00
Alf Eaton and Copybot
7eed283b11
Ignore entries in __MACOSX folder when importing zip archive ( #33147 )
...
GitOrigin-RevId: e990d593d96085e13a209d4155823097b0814276
2026-05-20 08:06:40 +00:00
Alf Eaton and Copybot
efab968153
Treat qmd and rmd extensions as Markdown ( #33786 )
...
GitOrigin-RevId: 89d79e958ea08f3388bde8dc561b04f87a1b6549
2026-05-20 08:06:36 +00:00
Alf Eaton and Copybot
7c8e89923d
Add .qmd to editable file extensions ( #33785 )
...
GitOrigin-RevId: 868a96e66e8d408ceb2f5b29e59f0d1ee12992dd
2026-05-20 08:06:31 +00:00
d8c33cc34c
Allow multiple concurrent reference searches ( #33739 )
...
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
GitOrigin-RevId: 403d4f5900a8c4ccdc64032d365adb285a191b71
2026-05-20 08:06:23 +00:00
Alf Eaton and Copybot
c0acddbfaf
Use sharejs doc type in Storybook stories ( #33565 )
...
GitOrigin-RevId: a2bf64d3ce376dd05e740796e8f1ea74913ed8f0
2026-05-20 08:06:19 +00:00
30edd837e1
Use resolve.tsconfig ( #31639 )
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
GitOrigin-RevId: 1c7da49e14af5935f85f1927186a825b116bb4e9
2026-05-20 08:06:05 +00:00
Mathias Jakobsen and Copybot
ce6f9b8e8c
Merge pull request #33705 from overleaf/mj-clsi-cwd-for-conversions
...
[clsi] Add cwd argument to CommandRunner and use to simplify conversions
GitOrigin-RevId: 5333e3262a99e602ab5470ae1e23facb5b28a170
2026-05-19 08:04:51 +00:00
Jakob Ackermann and Copybot
1f8371e0a3
[document-updater] flush_all: log progress after every 1k projects ( #33757 )
...
GitOrigin-RevId: b5b68f6f53bece51234799fb626d0d6a2a5b590c
2026-05-19 08:04:41 +00:00
Jakob Ackermann and Copybot
293d89a4cb
[web] inline contacts service into web ( #33546 )
...
GitOrigin-RevId: d5e84d4f80f5ad4e951934d6dcdc332b0d26f3d0
2026-05-19 08:04:34 +00:00
Miguel Serrano and Copybot
b79d432deb
[web] Conditionally show items in insert figure toolbar ( #33721 )
...
Removes the options for inserting an image from another project or by downloading an external URL if the features are disabled.
GitOrigin-RevId: ffa64e5929e254d8a236c8e9aca4eb8210f444c9
2026-05-19 08:04:21 +00:00
Jakob Ackermann and Copybot
99148d5956
[web] silence customer.io integration when not configured in dev/CI ( #33731 )
...
GitOrigin-RevId: c9498f57f0dacb3d18cd7617388df11d5cf029de
2026-05-19 08:04:17 +00:00
Brian Gough and Copybot
60860aa202
Merge pull request #33576 from overleaf/bg-jpa-convert-document-to-file
...
Modify convertDocToFile to bypass docstore
GitOrigin-RevId: 3ec789034a369d39d223450462394c8f303caa07
2026-05-19 08:04:13 +00:00
Kristina and Copybot
2f5d838e0f
Merge pull request #33704 from overleaf/kh-add-reject-change-preference-check
...
[web] add reject tracked change preference check
GitOrigin-RevId: b55dba21b3d4f42e68528d2b5906862c57794cd1
2026-05-18 08:06:57 +00:00
Andrew Rumble and Copybot
e9aedce4ab
Merge pull request #33625 from overleaf/ar-update-vitest
...
[monorepo] bump vitest to 4.1.5
GitOrigin-RevId: 22ba2249ae384fd59347c9aa45c70f51ccdf8890
2026-05-18 08:06:49 +00:00
Eric Mc Sween and Copybot
2913e462ec
Merge pull request #33665 from overleaf/copilot/fix-error-logging-in-git-bridge
...
git-bridge: Log WrongBranchException and ForcedPushException at WARN instead of ERROR
GitOrigin-RevId: 7aaa934a0df614e336ce3c20b892af1af0cd070f
2026-05-18 08:06:29 +00:00
Eric Mc Sween and Copybot
a3682af6e4
Merge pull request #33710 from overleaf/em-tpds-config
...
Clean up tpdsworker config from web and third-party-datastore
GitOrigin-RevId: 3856126d9dc856fea4bc4133b11402c35b10630b
2026-05-18 08:06:25 +00:00
9e42d3a530
[web] Address design QA items on pricing page ( #33682 )
...
- pricing table: integration icons gap uses --spacing-06 (horizontal),
integrations content gap uses --spacing-04 (vertical)
- Student card no longer renders with the green stroke highlight
- Interstitial H1 wrapped in .main-heading-section so its spacing
matches the pricing page
Part of #33619 .
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
GitOrigin-RevId: 12ddd223f68c776c06a3d5dc5faa841819baae90
2026-05-18 08:06:17 +00:00
0089c0af08
[web] Space skip link from disclaimer on interstitial ( #33464 )
...
The "continue with free plan" skip link sat directly under the
disclaimer with no separation. Add spacing-08 margin-top to match
the disclaimer's own padding-top above the cards.
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
GitOrigin-RevId: ba7334785757a39ca0bdff309ded224e6cb8e3bf
2026-05-18 08:06:09 +00:00
Olzhas Askar and Copybot
868da835b6
Merge pull request #32434 from overleaf/oa-babelfish
...
[web] Project Babelfish
GitOrigin-RevId: da8c47c0831eaab3e2c74a9507892ae9571919e8
2026-05-18 08:05:57 +00:00
Olzhas Askar and Copybot
d388e48a99
Merge pull request #33679 from overleaf/oa-plan-names
...
[web] Get plan names from the settings
GitOrigin-RevId: 1e61975c3306c025f33e05686f9d2b57964b4f65
2026-05-18 08:05:52 +00:00
Olzhas Askar and Copybot
6c267e68d3
Merge pull request #33707 from overleaf/oa-learn-links
...
[web] Learn Overleaf links
GitOrigin-RevId: af9f72da008ad8b8c86e4c355268123eb6c40bcd
2026-05-18 08:05:48 +00:00
Mathias Jakobsen and Copybot
ac961f1d40
Merge pull request #33687 from overleaf/mj-temporary-tabs-fix
...
[web] Only consider real key presses to make tab permanent
GitOrigin-RevId: 50ab453445e111de2b317f50470f9f4eec39a66f
2026-05-15 08:08:28 +00:00
Mathias Jakobsen and Copybot
6538c00742
Merge pull request #33690 from overleaf/mj-prune-deleted-tabs
...
[web] Prune non-existent tabs when file tree changes
GitOrigin-RevId: 97e68a88a201acc2d1e582911ca64e1f72f9bfe1
2026-05-15 08:08:19 +00:00
3980b9e580
Fix IDOR in exports by adding token verification (Issue #31637 ) ( #32883 )
...
* Fix IDOR in exports by adding token verification
Implement jdleesmiller's suggested fix for Issue #31637 :
- V1: Return export token in create response
- V1: Verify token in get_export using secure_compare
- Web: Pass token through fetchExport and fetchDownload
- Web: Return token from exportProject to frontend
- Frontend: Pass token as query param on status/download requests
- Add tests for both services
Agent-Logs-Url: https://github.com/overleaf/internal/sessions/7ba5f535-fba2-49a8-91d4-c87bd332d3a0
Co-authored-by: briangough <7457354+briangough@users.noreply.github.com >
Fix window.location.pathname to .href to preserve query params
Code review correctly identified that window.location.pathname strips
query parameters. Switch to window.location.href so the token query
parameter is preserved in download URLs.
Agent-Logs-Url: https://github.com/overleaf/internal/sessions/7ba5f535-fba2-49a8-91d4-c87bd332d3a0
Co-authored-by: briangough <7457354+briangough@users.noreply.github.com >
Fix test mocks to include token in POST responses
Agent-Logs-Url: https://github.com/overleaf/internal/sessions/0350c6ef-0fff-4e98-8464-812cd92c523f
Co-authored-by: briangough <7457354+briangough@users.noreply.github.com >
fix formatting
Fix token assignment in initiateExport to use pollResponse token if available
Add requireExportToken config setting and tests for invalid/missing token cases
Agent-Logs-Url: https://github.com/overleaf/internal/sessions/059bdba2-4f7a-4407-a5a5-cfcffd888739
Co-authored-by: briangough <7457354+briangough@users.noreply.github.com >
fix formatting
Add tests for export status and token validation in ExportsController and MockV1Api
Co-authored-by: Copilot <copilot@github.com >
* Update services/v1/main/app/controllers/api/v1/overleaf/exports_controller.rb
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
* fix linting
* fix fetchString response handling in ExportsHandler tests
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: Copilot <copilot@github.com >
Co-authored-by: Brian Gough <briangough@users.noreply.github.com >
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
Co-authored-by: Brian Gough <brian.gough@overleaf.com >
GitOrigin-RevId: 399aef8eaa15ab3655f0905482f3a31fe94e2251
2026-05-15 08:08:04 +00:00
Miguel Serrano and Copybot
5a886aa9fb
[web] Add extra details to flexible license sales email ( #32929 )
...
* [web] Add extra details to flexible license sales email
GitOrigin-RevId: fbd41adae21c55c5e97f9531565100e1ae911808
2026-05-15 08:07:56 +00:00
Tim Down and Copybot
248e149701
Default interstitial to monthly plans ( #33706 )
...
* Default interstitial to monthly plans except for upgrade, which defaults to user's existing subscription period
* Add tests for interstitial page period toggle defaults
GitOrigin-RevId: fa0ac41e7d8a7bf858b53e0940287b28ef21253d
2026-05-15 08:07:49 +00:00
Eric Mc Sween and Copybot
529c332159
Merge pull request #33658 from overleaf/em-fix-docker-tag-length
...
build: truncate branch names to 96 chars for Docker image tags
GitOrigin-RevId: 9db313244e78a6d4e0aa5d8c08d25f1aac83318b
2026-05-14 08:06:45 +00:00
Davinder Singh and Copybot
a3a508d193
[WEB] Add analytics events for importing and exporting to different file types ( #33614 )
...
* adding events for success and failure for import and export from latex
* adding the operation property to capture the import/export keyword
GitOrigin-RevId: 2e5482b3c7517b402fc151966975ca8718729683
2026-05-14 08:06:30 +00:00