v3.42.0

3.42.0 (2026-05-01)

Bug Fixes

• billing: handle allowance edge cases (78ce9c6)
• billing: handle subscription edge cases (c8cfb04)
• billing: harden billing idempotency and redirects (daf0eed)
• billing: harden stripe flows (7697765)
• billing: harden subscription and credit edge cases (a3e5ebc)
• billing: harden subscription sync retries (1740e05)
• billing: preserve legacy background check drafts (f655f37)
• billing: update layout of BillingInvoicesTable component (9acb95e)

Features

• billing: add billing add-ons functionality and trial eligibility (519bebb)
• billing: add tests for background check billing customer and URL validation (11efc56)
• billing: enhance billing services and subscription management (f7e5e9f)
• billing: implement admin billing actions and controller (be9027b)
• billing: implement background check billing customer and invoice management (f316c50)
• billing: implement billing audit logging and improve event handling (4db12d5)
• billing: integrate billing module and enhance background check services (435c235)

v3.41.0

3.41.0 (2026-05-01)

Bug Fixes

• allow cx to bypass background checks for orgs (a1a6586)
• app: add SOC 3 to Trust portal frameworks list (dbea43c)

Features

• add soc 2 type 1 badge (6bd2147)

v3.40.1

3.40.1 (2026-05-01)

Bug Fixes

• cloud-tests: scope to aws/gcp/azure and remove hardcoded copy (17c7b76)

v3.40.0

3.40.0 (2026-04-30)

Bug Fixes

• app: able to click 'Edit Roles' button in People page (0212cf3)
• frameworks: repair sync drift for controls and tasks (665306b)

Features

• background-checks: enhance billing service to include usage metrics and update UI components (30b2f22)

v3.39.1

3.39.1 (2026-04-30)

Bug Fixes

• integrations: gate startOAuth with SessionOnlyGuard (210a4f7)
• integrations: source OAuth initiator userId from auth context (b561f2c), closes #2712

v3.39.0

3.39.0 (2026-04-30)

Bug Fixes

• api: correct fileData max-length to 100MB and allow localhost in URL validation (6d56a2d)
• api: correct type casting for rawBody in main.ts (7e624d4)
• app: remove product app marketing pixels (#2716) (26d75be)
• background-checks: fix 13 bugs across billing, webhooks, custom uploads, and UI (d5df5db)
• background-checks: remove employee PII from sessionStorage (ea082b3), closes #133
• background-checks: security hardening across payment flow, validation, and logging (8b3b39b)
• pentest: bump split-view breakpoint from md to xl for tablet support (efd1c85)

Features

• background-checks: add employee background checks (0456df6)

v3.38.1

3.38.1 (2026-04-29)

Bug Fixes

• security: admin escalation, secrets RBAC, oauth session check (#2712) (5627b12)

v3.38.0

3.38.0 (2026-04-29)

Bug Fixes

• sentry: gate includeLocalVariables and drop sendDefaultPii (#2710) (e985b8b), closes #2709

Features

• observability: integrate Sentry into app and portal (#2705) (0aa2417)

v3.37.0

3.37.0 (2026-04-29)

Bug Fixes

• pentest: include running/failed scans in Recent activity list (6ae7ea3)
• pentest: mirror mobile back-bar in detail/create loading skeletons (aea5f1a)
• pentest: mirror split-view shell in loading.tsx to prevent layout shift (f69854e)
• pentest: surface in-progress scans on overview when no completed runs (c009ae8)

Features

• pentest: mobile-friendly split-view + per-route loading skeletons (84ae91a)

v3.36.1

3.36.1 (2026-04-29)

Bug Fixes

• app: bubble up artifact-based progress through control/requirement/framework views (CS-316) (33a7b90), closes #2695