Improved
Security hardening, faster failures, and a much stricter build
- ◆ Connections now belong to exactly one workspace at the database level, not just in the app. Three ways a request could have reached across workspaces were closed, and the checks that prove it run on every change we make.
- ◆ Connecting an app through sign-in (OAuth) is now tied to the workspace that started it, so a connection can only ever land where you began.
- ◆ Every connector request now gives up after 30 seconds instead of hanging. If an app stops responding you get a plain message naming it and the time limit, rather than a spinner that never resolves.
- ◆ We upgraded the framework Orbit runs on to pick up security fixes, and added an automatic scan so known vulnerabilities cannot quietly accumulate.