v5.7.1

What's Changed

• feat(web): show linked Google Group on the group details page by @BK1031 in #95

Full Changelog: v5.7.0...v5.7.1

v5.7.0

What's Changed

• fix(discord/group-sync): use authoritative roles in full sweep by @BK1031 in #89
• feat(google): scaffold sentinel-google service by @BK1031 in #90
• feat(google): group→Google-Group binding model and CRUD API by @BK1031 in #91
• feat(google): Directory API client and reconcile engine by @BK1031 in #92
• feat(web): manage Google Group binding on the group edit page by @BK1031 in #93
• ci(deploy): include google in the release image bump by @BK1031 in #94

Full Changelog: v5.6.4...v5.7.0

v5.6.4

What's Changed

• feat(discord/onboarding): downgrade non-UCSB member signups to guest by @BK1031 in #87
• feat(oauth): per-client identity override for shared service accounts by @BK1031 in #88

Full Changelog: v5.6.3...v5.6.4

v5.6.3

What's Changed

• fix(discord/api): gate admin endpoints on sentinel:all by @BK1031 in #84
• fix(saml/api): bind /authorize to the bearer subject by @BK1031 in #85
• fix(core/api): gate public group reads and the create path by @BK1031 in #86

Full Changelog: v5.6.2...v5.6.3

v5.6.2

Full Changelog: v5.6.1...v5.6.2

v5.6.1

Full Changelog: v5.6.0...v5.6.1

v5.6.0

What's Changed

• feat(auth): Login with Discord by @BK1031 in #76
• feat(groups): conditional group bindings composed of other groups by @BK1031 in #77
• feat(service-accounts): user-managed SAs + API keys by @BK1031 in #78
• feat(s2s): bearer-auth every service-to-service call by @BK1031 in #79
• fix(core/api): gate token mint + revoke on sentinel:all by @BK1031 in #80
• fix(core/api): gate group + join-request + conditional-binding mutations by @BK1031 in #81
• fix(core/api): gate user + entity mutations by @BK1031 in #82
• fix(core/api): gate PII reads + enumeration endpoints by @BK1031 in #83

Full Changelog: v5.5.4...v5.6.0

v5.5.4

What's Changed

• fix(api): add missing /api prefix to inter-service routes by @BK1031 in #74
• feat(oauth): auto-skip consent for recent re-auth, drop prompt URL param by @BK1031 in #75

Full Changelog: v5.5.3...v5.5.4

v5.5.3

What's Changed

• fix(saml): emit assertion timestamps in UTC (Zulu) form by @BK1031 in #73

Full Changelog: v5.5.2...v5.5.3

v5.5.2

What's Changed

• fix(saml): nil-deref panic on assertion build (req.HTTPRequest) by @BK1031 in #72

Full Changelog: v5.5.1...v5.5.2