What’s new? v4.92 — Colors you can read, a security audit, and an up-to-date platform

We measured the interface’s contrast and introduced a palette of our own, audited security in depth and closed what we found, and the frontend moves to Next.js 15 with no visible difference.

v4.92.2 — Finishing what the audit started

4.92.1 closed the most urgent findings of the security audit. This release closes the rest of what matters: exporting another project’s plan, moving hours into a week their supervisor already approved, asking the chat of another salesperson’s opportunity, or unsubscribing someone from a campaign with an anonymous request. Each one needed little more than knowing an identifier, and none of them does any more.

Along the way we found something that wasn’t a security issue and had been broken for a while without anyone noticing: exporting tasks to a calendar failed on every instance because a library was missing from the production image. It works now.

The platform also caught up: the frontend moves to Next.js 15 and React 19 on Node 22, and the cryptography and document libraries to their current versions. You barely notice it from the outside, which is exactly the goal: we compared more than a hundred screens between the previous and the new version and found not a single difference.

And the AI agents a firm connects to its instance (Copilot, Claude) can now do what they could previously only attempt: go from a retrieved snippet to the full document, see what a case file contains, and search within a single matter.

v4.92.1 — An audit, and what it found

We reviewed the product’s security in depth and found several places where a permission wasn’t checked the way it should have been: some actions on documents, the creation of sharing links, saving from the document editor, and natural-language queries over all the data. None needed a sophisticated attack, so they were fixed as soon as they were confirmed, first on all instances and now in this release.

Two changes are visible. Natural-language queries that sweep the whole database are now limited to administrators: there is no way for them to respect which projects each person can see, and we preferred removing them to letting them show too much. And anyone who tries to open a document that isn’t theirs no longer gets “access denied” but “not found”: there is no need to confirm that it exists.

v4.92.0 — Colors you can read

A color that looks fine in a screenshot may not be readable on someone’s screen. We measured the contrast of the most-used elements and found three below the recommended minimum: the primary button, with white text on a blue that was too light; the outline of fields in dark mode, which almost vanished against the card; and priority, painted four different ways and with “Low” in green, the same green that everywhere else means “done”.

This release is the first step of a design system of our own: a named palette —surface, text, primary action, danger— instead of loose colors screen by screen. With it, the primary button, fields and statuses meet contrast in both themes, and priority looks the same everywhere: three bars that read even if you can’t tell the colors apart, with the word next to it.

design security platform AI agents release

← Back to the index