v1.6.36#189

Merged

roncodes merged 23 commits intomainfrom

Feb 27, 2026

Commits on Feb 11, 2026

feat: Include updated_at timestamp in UserCacheService cache key
Manus AI
committed

Commits on Feb 13, 2026

Commits on Feb 20, 2026

added KZT currency

kathrine
authored and
spanchenko
committed

Commits on Feb 24, 2026

fix: Set default status to 'pending' for verification codes
Manus AI
committed
Merge pull request #190 from spanchenko/feature/add-KZT-currency
roncodes
authored
Merge pull request #191 from fleetbase/fix/verification-code-default-status
roncodes
authored
fix: Verification email showing raw HTML code
Manus AI
committed
fix: Use build() method instead of content() for markdown mail compatibility
Manus AI
committed
Merge pull request #192 from fleetbase/fix/verification-email-html-rendering
roncodes
authored

Commits on Feb 25, 2026

security: patch GHSA-3wj9-hh56-7fw7 and related vulnerabilities
Fleetbase Security
committed
fix: restore authToken re-authentication with identity verification
Fleetbase Security
committed
security: fix systemic tenant isolation bypass (GHSA-3wj9-hh56-7fw7)
Fleetbase Security
committed

Commits on Feb 26, 2026

Commits on Feb 27, 2026

fix: prevent TypeError when user has null password in login()
Fleetbase Security
committed
fix: use correct layered privilege check in UserController::deactivate()
Fleetbase Security
committed
fix: scope deactivate/activate to CompanyUser only, not the User record
Fleetbase Security
committed
fix: restore User::activate() in activate() endpoint to update both user and companyUser status
Fleetbase Security
committed
ran linter
roncodes
committed
fix: prevent empty email/phone on user update via UpdateUserRequest
Fleetbase Security
committed
Merge pull request #195 from fleetbase/fix/prevent-empty-email-phone-on-user-update
roncodes
authored
ran linter added is_user filter param
roncodes
committed