Repository navigation

[pull] main from appwrite:main - #270

Merged

pull[bot] merged 36 commits into

djacidfx:mainfrom

appwrite:main

Sep 29, 2026

Commits on Sep 28, 2026
- feat: custom user avatar upload and delete
  imtia33
  committed
  4c0a169
Commits on Sep 29, 2026
- refactor: rename avatars collection to photos and simplify photo actions
  
  Meldiron
  and
  claude
  committed
  edb6b0d
- fix: serialise photo changes per user and harden uploads
  
  Meldiron
  and
  claude
  committed
  f65874b
- refactor: resolve the user's photo through a subquery
  
  Meldiron
  and
  claude
  committed
  8bd99bf
- refactor: make the user photo subquery a single document
  
  Meldiron
  and
  claude
  committed
  ff15868
- refactor: accept photos as a single request of at most 5MB
  
  Meldiron
  and
  claude
  committed
  aab4e5a
- fix(executions): narrow listings to the requested createdAt window before aggregating
  levivannoort
  committed
  cdee57f
- refactor: store the user photo on the user document
  
  Meldiron
  and
  claude
  committed
  1874807
- refactor: keep the custom photo provider a plain adapter
  
  Meldiron
  and
  claude
  committed
  0163de4
- refactor: build photo paths inline from a folder constant
  
  Meldiron
  and
  claude
  committed
  255e46c
- test(executions): cover createdAt windows through the API
  levivannoort
  committed
  5e03bc4
- fix: lock photo changes per user and return the account
  
  Meldiron
  and
  claude
  committed
  a05bd3b
- test(executions): wait for both executions to be stored before listing windows
  levivannoort
  committed
  2d63016
- fix: keep a live photo when the lock fails after the update
  
  Meldiron
  and
  claude
  committed
  d38173e
- refactor: drop the per-user photo lock
  
  Meldiron
  and
  claude
  committed
  91f39ae
- test(executions): describe the executions when the window count is off
  levivannoort
  committed
  1a279f1
- test(executions): compare createdAt values in one format
  levivannoort
  committed
  cebf10c
- Merge pull request #13982 from appwrite/fix/execution-store-createdat-pushdown
  levivannoort
  authored
  d3cd0db
- feat: add current param to deleteSessions endpoint
  jaysomani
  committed
  66242cf
- fix: send a boundary with the empty photo upload test
  
  Meldiron
  and
  claude
  committed
  c69b5d3
- fix: only change the photo the request read
  
  Meldiron
  and
  claude
  committed
  8fe5de2
- fix: cap photo update retries on conflicts
  
  Meldiron
  and
  claude
  committed
  eb740be
- review comments
  jaysomani
  committed
  2067f0b
- Merge pull request #13949 from imtia33/feat/custom-avatar
  Meldiron
  authored
  60c9743
- Merge pull request #13990 from jaysomani/feat/delete-sessions-current-param-fresh
  Meldiron
  authored
  acb4a47
- test(users): user JWTs only authenticate in the project that minted them
  
  loks0n
  and
  claude
  committed
  a4bbe5c
- fix(auth): bind user JWTs to their project
  
  loks0n
  and
  claude
  committed
  fb39f39
- fix(console): resolve the organization header on organization routes only
  
  Meldiron
  and
  claude
  committed
  d3acf4b
- fix(console): key the organization header on the organization group
  
  Meldiron
  and
  claude
  committed
  c3cd75f
- Merge pull request #13992 from appwrite/fix/jwt-project-binding
  loks0n
  authored
  96da5a3
- Merge pull request #13993 from appwrite/fix/console-organization-header
  Meldiron
  authored
  06de6e4
- fix(avatars): validate remote URLs with a public URL param validator
  
  eldadfux
  and
  cursoragent
  committed
  393255e
- fix(deployments): validate x-appwrite-id to prevent path traversal
  ChiragAgg5k
  committed
  9d13bab
- Merge pull request #13996 from ChiragAgg5k/fix/deployment-id-path-traversal
  ChiragAgg5k
  authored
  6bfa0d9
- fix(avatars): force the browser container onto public DNS
  
  eldadfux
  and
  cursoragent
  committed
  6ed53a3
- Merge pull request #13995 from appwrite/fix-avatars-public-url
  eldadfux
  authored
  bce8ac2

Commits

Commits on Sep 28, 2026

Commits on Sep 29, 2026