chore(release): promote next to production (2026-06-01)#528

Closed

hello-happy-puppy wants to merge 12 commits into

mainfrom

release/next-to-main-20260601-185159

Commits on May 28, 2026

feat(slack-oauth-backend): expand OAuth scope requests to match app manifest (#517)

wkoutre
authored and
hello-happy-puppy
committed
fix(slack-oauth-backend): drop incoming-webhook bot scope (#518)

wkoutre
authored and
hello-happy-puppy
committed
chore(sync): [skip ci] sync next with main
hello-happy-puppy
committed
chore(slack-oauth-backend): log OAuth request and Slack-granted scopes (#520)

wkoutre
authored and
hello-happy-puppy
committed
chore(sync): [skip ci] sync next with main
hello-happy-puppy
committed
chore(sync): [skip ci] sync next with main
hello-happy-puppy
committed
fix(workflows): replace sed-with-pipe-delimiter with python str.replace (#513)

dgilmanuni
and
claude
authored
fix(claude-task-worker): harden against prompt injection (#514)

dgilmanuni
and
claude
authored
fix(workflows): set BUN_CONFIG_FILE=/dev/null in remaining workflows (#511)

dgilmanuni
and
claude
authored
fix(workflows): allowlist toolkit_ref to block fork-branch RCE (#510)

dgilmanuni
and
claude
authored
fix(workflows): tighten bullfrog allowlists per workflow (#516)

dgilmanuni
and
claude
authored

Commits on May 29, 2026

fix(slack-oauth-backend): use fresh bot token, drop SLACK_BOT_TOKEN (#523)
wkoutre
authored