main
fix(rbac): coalesce concurrent permission cache misses (#127581)
RBAC: Add config option to clean up plugin permissions (#122005)
RBAC: Merge permissions from Zanzana (#125614)
Team: inject legacy database provider (#129491)
AccessControl: Remove deprecated scope split migration (#111071)
AccessControl: Invalidate scope resolver cache on datasource deletion (#118334)
Access Control: Fix registry race (#130103)
CI: Bump golangci-lint to 2.0.2 (#103572)
Access Control: Re-add OSS Seeding (#115858)
Auth: Improve /admin/authentication permission checks and include new SSO pages (#81183)
Optimize GroupScopesByActionContext for speed and memory (#116764)
IAM: Add read-only in-memory GlobalRole API for OSS (#122853)
Authlib: Use types package rather than claims (#99243)
auth: bump authlib with changes to BatchCheck (#116485)
Chore: Update authlib (foder as top level argument) (#111800)
AccessControl: Cache Zanzana current-user permissions (#127083)
RBAC: Don't additionally cache all users permissions (#105607)
[chore] Update go to v1.26.0, and the golangci-lint action to v9 (#118436)
Chore: Fix goimports grouping (#62426)
RBAC: Return bad request when header is malformed (#105448)
Zanzana: Evaluate access with Check request (server-side) (#96213)
RBAC: handle partially resolved scopes (#85323)
Access control: filter redundant managed dashboard/folder permissions (#117570)
Chore: Use range where possible (#123281)
chore : Deprecating `FeatureToggles.IsEnabledGlobally` (#112885)
Instrument tracing across accesscontrol (#91864)
Chore: Fix error handling in postDashboard, remove UserDisplayDTO, fix live redis client initialization (#87206)
RBAC: Add function to generate wildcards from prefix (#54275)
IAM: Set userId in context logs from ErrTokenNeedsRotation (#118066)
Zanzana: Remove usage from legacy access control (#98883)
AuthZ: Section-level settings authorization (#128741)
Extsvcacc: Split permission scope (#111491)
Authz: Feat: GlobalRoles Seeding in Mode-5 (#125126)
AuthZ: Introduce IAM client as a dependency to roles registrations (#119597)
AccessControl: Remove package lists for roles and grants (#47141)
Zanzana: Evaluate permissions alongside with RBAC engine (#90064)