fix(charts): limit ideal burndown tooltip precision

CODEOWNERS

@@ -5,4 +5,4 @@ apps/web/           @sriramveeraghanta
 apps/space/         @sriramveeraghanta
 apps/admin/         @sriramveeraghanta
 apps/live/          @saivallampati
-deployments/        @mguptahub
+deployments/        @pratapalakshmi

apps/admin/Dockerfile.admin

@@ -89,13 +89,15 @@ RUN XCADDY_SKIP_CLEANUP=1 xcaddy build \
 # x/net v0.60.0 requires x/crypto v0.57.0 and x/text v0.42.0, hence those floors.
 # grpc and otel move together: grpc >= v1.83.0 requires otel v1.44.0, so bump
 # the otel pair in lockstep or go walks grpc backwards to satisfy the older one.
+# go-jose v4 is also Caddy's own pin; CVE-2026-116587 is fixed in v4.1.6.
 RUN cd "$(find /tmp -maxdepth 1 -name 'buildenv_*' -type d | head -1)" && \
     go get golang.org/x/crypto@v0.57.0 && \
     go get golang.org/x/net@v0.60.0 && \
     go get golang.org/x/text@v0.42.0 && \
     go get google.golang.org/grpc@v1.83.2 && \
     go get go.opentelemetry.io/otel@v1.46.0 && \
     go get go.opentelemetry.io/otel/sdk@v1.46.0 && \
+    go get github.com/go-jose/go-jose/v4@v4.1.6 && \
     go mod tidy && \
     go build -o /usr/bin/caddy -ldflags "-w -s" -trimpath .
 
@@ -111,7 +113,7 @@ FROM caddy:2.11.4-alpine AS production
 # OS security updates too: --available forces reinstall from the current repos;
 # bump APK_SECURITY_PATCH to bust buildx's cached layer (keyed on this command
 # string), otherwise a rebuild silently re-ships the old packages.
-ARG APK_SECURITY_PATCH=2026-10-22
+ARG APK_SECURITY_PATCH=2026-10-26
 RUN echo "apk-security-patch ${APK_SECURITY_PATCH}" && apk update && apk upgrade --no-cache --available && apk add --no-cache curl && rm -rf /var/cache/apk/*
 
 COPY --from=caddy-builder /usr/bin/caddy /usr/bin/caddy

apps/admin/app/(all)/(dashboard)/ai/form.tsx

@@ -102,8 +102,8 @@ export function InstanceAIForm(props: IInstanceAIForm) {
     <div className="space-y-8">
       <div className="space-y-3">
         <div>
-          <div className="pb-1 text-18 font-medium text-primary">OpenAI</div>
-          <div className="text-13 font-regular text-tertiary">If you use ChatGPT, this is for you.</div>
+          <div className="pb-1 text-h6-medium text-primary">OpenAI</div>
+          <div className="text-body-sm-regular text-tertiary">If you use ChatGPT, this is for you.</div>
         </div>
         <div className="grid-col grid w-full grid-cols-1 items-center justify-between gap-x-12 gap-y-8 lg:grid-cols-3">
           {aiFormFields.map((field) => (

apps/admin/app/(all)/(dashboard)/ai/page.tsx

@@ -8,7 +8,7 @@ import { observer } from "mobx-react";
 import useSWR from "swr";
 // components
 import { PageWrapper } from "@/components/common/page-wrapper";
-import { Skeleton } from "@/components/common/skeleton";
+import { Skeleton } from "@plane/blocks/skeleton";
 // hooks
 import { useInstance } from "@/hooks/store";
 // types

apps/admin/app/(all)/(dashboard)/authentication/gitea/form.tsx

@@ -174,9 +174,9 @@ export function InstanceGiteaConfigForm(props: Props) {
         handleClose={() => setIsDiscardChangesModalOpen(false)}
       />
       <div className="flex flex-col gap-8">
-        <div className="grid w-full grid-cols-2 gap-x-12 gap-y-8">
+        <div className="grid w-full grid-cols-2 gap-x-8 gap-y-8">
           <div className="col-span-2 flex flex-col gap-y-4 pt-1 md:col-span-1">
-            <div className="pt-2.5 text-18 font-medium">Gitea-provided details for Plane</div>
+            <div className="text-h6-medium text-primary">Gitea-provided details for Plane</div>
             {GITEA_FORM_FIELDS.map((field) => (
               <ControllerInput
                 key={field.key}
@@ -192,7 +192,7 @@ export function InstanceGiteaConfigForm(props: Props) {
             ))}
             <ControllerSwitch control={control} field={GITEA_FORM_SWITCH_FIELD} />
             <div className="flex flex-col gap-1 pt-4">
-              <div className="flex items-center gap-4">
+              <div className="flex flex-wrap items-center gap-2">
                 <Button
                   variant="primary"
                   size="md"
@@ -213,9 +213,9 @@ export function InstanceGiteaConfigForm(props: Props) {
               </div>
             </div>
           </div>
-          <div className="col-span-2 md:col-span-1">
-            <div className="flex flex-col gap-y-4 rounded-lg bg-layer-1 px-6 pt-1.5 pb-4">
-              <div className="pt-2 text-18 font-medium">Plane-provided details for Gitea</div>
+          <div className="col-span-2 flex flex-col gap-y-6 md:col-span-1">
+            <div className="text-h6-medium text-primary">Plane-provided details for Gitea</div>
+            <div className="flex flex-col gap-y-4 rounded-lg bg-layer-1 px-6 py-4">
               {GITEA_SERVICE_FIELD.map((field) => (
                 <CopyField key={field.key} label={field.label} url={field.url} description={field.description} />
               ))}

apps/admin/app/(all)/(dashboard)/authentication/gitea/page.tsx

@@ -14,7 +14,7 @@ import giteaLogo from "@/app/assets/logos/gitea-logo.svg?url";
 // components
 import { AuthenticationMethodCard } from "@/components/authentication/authentication-method-card";
 import { PageWrapper } from "@/components/common/page-wrapper";
-import { Skeleton } from "@/components/common/skeleton";
+import { Skeleton } from "@plane/blocks/skeleton";
 import { setPromiseToast } from "@plane/blocks/toast";
 // hooks
 import { useInstance } from "@/hooks/store";

apps/admin/app/(all)/(dashboard)/authentication/github/form.tsx

@@ -195,9 +195,9 @@ export function InstanceGithubConfigForm(props: Props) {
         handleClose={() => setIsDiscardChangesModalOpen(false)}
       />
       <div className="flex flex-col gap-8">
-        <div className="grid w-full grid-cols-2 gap-x-12 gap-y-8">
+        <div className="grid w-full grid-cols-2 gap-x-8 gap-y-8">
           <div className="col-span-2 flex flex-col gap-y-4 pt-1 md:col-span-1">
-            <div className="pt-2.5 text-18 font-medium">GitHub-provided details for Plane</div>
+            <div className="text-h6-medium text-primary">GitHub-provided details for Plane</div>
             {GITHUB_FORM_FIELDS.map((field) => (
               <ControllerInput
                 key={field.key}
@@ -213,7 +213,7 @@ export function InstanceGithubConfigForm(props: Props) {
             ))}
             <ControllerSwitch control={control} field={GITHUB_FORM_SWITCH_FIELD} />
             <div className="flex flex-col gap-1 pt-4">
-              <div className="flex items-center gap-4">
+              <div className="flex flex-wrap items-center gap-2">
                 <Button
                   variant="primary"
                   size="md"
@@ -235,7 +235,7 @@ export function InstanceGithubConfigForm(props: Props) {
             </div>
           </div>
           <div className="col-span-2 flex flex-col gap-y-6 md:col-span-1">
-            <div className="pt-2 text-18 font-medium">Plane-provided details for GitHub</div>
+            <div className="text-h6-medium text-primary">Plane-provided details for GitHub</div>
 
             <div className="flex flex-col gap-y-4">
               {/* common service details */}
@@ -247,8 +247,8 @@ export function InstanceGithubConfigForm(props: Props) {
 
               {/* web service details */}
               <div className="flex flex-col overflow-hidden rounded-lg">
-                <div className="flex items-center gap-x-3 bg-layer-3 px-6 py-3 text-11 font-medium text-secondary uppercase">
-                  <MonitorOutline className="h-3 w-3" />
+                <div className="flex items-center gap-x-2 bg-layer-3 px-6 py-3 text-caption-sm-medium text-secondary uppercase">
+                  <MonitorOutline className="size-3.5" />
                   Web
                 </div>
                 <div className="flex flex-col gap-y-4 bg-layer-1 px-6 py-4">

apps/admin/app/(all)/(dashboard)/authentication/github/page.tsx

@@ -17,7 +17,7 @@ import githubDarkModeImage from "@/app/assets/logos/github-white.png?url";
 // components
 import { AuthenticationMethodCard } from "@/components/authentication/authentication-method-card";
 import { PageWrapper } from "@/components/common/page-wrapper";
-import { Skeleton } from "@/components/common/skeleton";
+import { Skeleton } from "@plane/blocks/skeleton";
 import { setPromiseToast } from "@plane/blocks/toast";
 // hooks
 import { useInstance } from "@/hooks/store";

apps/admin/app/(all)/(dashboard)/authentication/gitlab/form.tsx

@@ -177,9 +177,9 @@ export function InstanceGitlabConfigForm(props: Props) {
         handleClose={() => setIsDiscardChangesModalOpen(false)}
       />
       <div className="flex flex-col gap-8">
-        <div className="grid w-full grid-cols-2 gap-x-12 gap-y-8">
+        <div className="grid w-full grid-cols-2 gap-x-8 gap-y-8">
           <div className="col-span-2 flex flex-col gap-y-4 pt-1 md:col-span-1">
-            <div className="pt-2.5 text-18 font-medium">GitLab-provided details for Plane</div>
+            <div className="text-h6-medium text-primary">GitLab-provided details for Plane</div>
             {GITLAB_FORM_FIELDS.map((field) => (
               <ControllerInput
                 key={field.key}
@@ -195,7 +195,7 @@ export function InstanceGitlabConfigForm(props: Props) {
             ))}
             <ControllerSwitch control={control} field={GITLAB_FORM_SWITCH_FIELD} />
             <div className="flex flex-col gap-1 pt-4">
-              <div className="flex items-center gap-4">
+              <div className="flex flex-wrap items-center gap-2">
                 <Button
                   variant="primary"
                   size="md"
@@ -216,9 +216,9 @@ export function InstanceGitlabConfigForm(props: Props) {
               </div>
             </div>
           </div>
-          <div className="col-span-2 md:col-span-1">
-            <div className="flex flex-col gap-y-4 rounded-lg bg-layer-3 px-6 pt-1.5 pb-4">
-              <div className="pt-2 text-18 font-medium">Plane-provided details for GitLab</div>
+          <div className="col-span-2 flex flex-col gap-y-6 md:col-span-1">
+            <div className="text-h6-medium text-primary">Plane-provided details for GitLab</div>
+            <div className="flex flex-col gap-y-4 rounded-lg bg-layer-1 px-6 py-4">
               {GITLAB_SERVICE_FIELD.map((field) => (
                 <CopyField key={field.key} label={field.label} url={field.url} description={field.description} />
               ))}

apps/admin/app/(all)/(dashboard)/authentication/gitlab/page.tsx

@@ -13,7 +13,7 @@ import GitlabLogo from "@/app/assets/logos/gitlab-logo.svg?url";
 // components
 import { AuthenticationMethodCard } from "@/components/authentication/authentication-method-card";
 import { PageWrapper } from "@/components/common/page-wrapper";
-import { Skeleton } from "@/components/common/skeleton";
+import { Skeleton } from "@plane/blocks/skeleton";
 import { setPromiseToast } from "@plane/blocks/toast";
 // hooks
 import { useInstance } from "@/hooks/store";

apps/admin/app/(all)/(dashboard)/authentication/google/form.tsx

@@ -187,9 +187,9 @@ export function InstanceGoogleConfigForm(props: Props) {
         handleClose={() => setIsDiscardChangesModalOpen(false)}
       />
       <div className="flex flex-col gap-8">
-        <div className="grid w-full grid-cols-2 gap-x-12 gap-y-8">
+        <div className="grid w-full grid-cols-2 gap-x-8 gap-y-8">
           <div className="col-span-2 flex flex-col gap-y-4 pt-1 md:col-span-1">
-            <div className="pt-2.5 text-18 font-medium">Google-provided details for Plane</div>
+            <div className="text-h6-medium text-primary">Google-provided details for Plane</div>
             {GOOGLE_FORM_FIELDS.map((field) => (
               <ControllerInput
                 key={field.key}
@@ -205,7 +205,7 @@ export function InstanceGoogleConfigForm(props: Props) {
             ))}
             <ControllerSwitch control={control} field={GOOGLE_FORM_SWITCH_FIELD} />
             <div className="flex flex-col gap-1 pt-4">
-              <div className="flex items-center gap-4">
+              <div className="flex flex-wrap items-center gap-2">
                 <Button
                   variant="primary"
                   size="md"
@@ -227,7 +227,7 @@ export function InstanceGoogleConfigForm(props: Props) {
             </div>
           </div>
           <div className="col-span-2 flex flex-col gap-y-6 md:col-span-1">
-            <div className="pt-2 text-18 font-medium">Plane-provided details for Google</div>
+            <div className="text-h6-medium text-primary">Plane-provided details for Google</div>
 
             <div className="flex flex-col gap-y-4">
               {/* common service details */}
@@ -239,8 +239,8 @@ export function InstanceGoogleConfigForm(props: Props) {
 
               {/* web service details */}
               <div className="flex flex-col overflow-hidden rounded-lg">
-                <div className="flex items-center gap-x-3 bg-layer-3 px-6 py-3 text-11 font-medium text-secondary uppercase">
-                  <MonitorOutline className="h-3 w-3" />
+                <div className="flex items-center gap-x-2 bg-layer-3 px-6 py-3 text-caption-sm-medium text-secondary uppercase">
+                  <MonitorOutline className="size-3.5" />
                   Web
                 </div>
                 <div className="flex flex-col gap-y-4 bg-layer-1 px-6 py-4">

apps/admin/app/(all)/(dashboard)/authentication/google/page.tsx

@@ -13,7 +13,7 @@ import GoogleLogo from "@/app/assets/logos/google-logo.svg?url";
 // components
 import { AuthenticationMethodCard } from "@/components/authentication/authentication-method-card";
 import { PageWrapper } from "@/components/common/page-wrapper";
-import { Skeleton } from "@/components/common/skeleton";
+import { Skeleton } from "@plane/blocks/skeleton";
 import { setPromiseToast } from "@plane/blocks/toast";
 // hooks
 import { useInstance } from "@/hooks/store";

apps/admin/app/(all)/(dashboard)/authentication/page.tsx

@@ -15,7 +15,7 @@ import { cn, resolveGeneralTheme } from "@plane/utils";
 // components
 import { PageWrapper } from "@/components/common/page-wrapper";
 import { AuthenticationMethodCard } from "@/components/authentication/authentication-method-card";
-import { Skeleton } from "@/components/common/skeleton";
+import { Skeleton } from "@plane/blocks/skeleton";
 import { setPromiseToast, setToast } from "@plane/blocks/toast";
 // helpers
 import { canDisableAuthMethod } from "@/helpers/authentication";
@@ -120,16 +120,18 @@ const InstanceAuthenticationPage = observer(function InstanceAuthenticationPage(
     >
       {formattedConfig ? (
         <div className="space-y-3">
-          <div className={cn("flex w-full items-center gap-14 rounded-sm")}>
-            <div className="flex grow items-center gap-4">
-              <div className="grow">
-                <div className="pb-1 text-16 font-medium">Allow anyone to sign up even without an invite</div>
-                <div className={cn("text-11 leading-5 font-regular text-tertiary")}>
+          <div className="flex w-full items-start justify-between gap-4 rounded-lg border border-subtle bg-layer-2 px-4 py-3 md:items-center md:gap-8">
+            <div className="flex min-w-0 grow items-center gap-4">
+              <div className="min-w-0 grow">
+                <div className="pb-1 text-body-sm-medium text-primary">
+                  Allow anyone to sign up even without an invite
+                </div>
+                <div className="text-body-xs-regular leading-5 text-tertiary">
                   Toggling this off will only let users sign up when they are invited.
                 </div>
               </div>
             </div>
-            <div className={`shrink-0 pr-4 ${isSubmitting && "opacity-70"}`}>
+            <div className={cn("shrink-0", { "opacity-70": isSubmitting })}>
               <div className="flex items-center gap-4">
                 <Switch
                   aria-label="Allow anyone to sign up even without an invite"
@@ -147,7 +149,7 @@ const InstanceAuthenticationPage = observer(function InstanceAuthenticationPage(
               </div>
             </div>
           </div>
-          <div className="text-lg pt-6 font-medium">Available authentication modes</div>
+          <h3 className="pt-3 text-h6-medium text-primary">Available authentication modes</h3>
           {authenticationModes.map((method) => (
             <AuthenticationMethodCard
               key={method.key}

apps/admin/app/(all)/(dashboard)/email/email-config-form.tsx

@@ -4,7 +4,7 @@
  * See the LICENSE file for details.
  */
 
-import { useMemo, useState } from "react";
+import { useId, useMemo, useState } from "react";
 import { useForm } from "react-hook-form";
 // types
 import { Button } from "@makeplane/propel/components/button";
@@ -35,6 +35,7 @@ const EMAIL_SECURITY_OPTIONS: { [key in TEmailSecurityKeys]: string } = {
 
 export function InstanceEmailForm(props: IInstanceEmailForm) {
   const { config } = props;
+  const emailSecurityLabelId = useId();
   // states
   const [isSendTestEmailModalOpen, setIsSendTestEmailModalOpen] = useState(false);
   // store hooks
@@ -45,6 +46,7 @@ export function InstanceEmailForm(props: IInstanceEmailForm) {
     watch,
     setValue,
     control,
+    reset,
     formState: { errors, isValid, isDirty, isSubmitting },
   } = useForm<EmailFormValues>({
     defaultValues: {
@@ -109,15 +111,18 @@ export function InstanceEmailForm(props: IInstanceEmailForm) {
   const onSubmit = async (formData: EmailFormValues) => {
     const payload: Partial<EmailFormValues> = { ...formData, ENABLE_SMTP: "1" };
 
-    await updateInstanceConfigurations(payload)
-      .then(() =>
-        setToast({
-          type: "success",
-          title: "Success",
-          message: "Email Settings updated successfully",
-        })
-      )
-      .catch((err) => console.error(err));
+    try {
+      await updateInstanceConfigurations(payload);
+      // the saved values become the new baseline, so Save disables again until the next edit
+      reset(payload);
+      setToast({
+        type: "success",
+        title: "Success",
+        message: "Email Settings updated successfully",
+      });
+    } catch (err) {
+      console.error(err);
+    }
   };
 
   const useTLSValue = watch("EMAIL_USE_TLS");
@@ -130,16 +135,16 @@ export function InstanceEmailForm(props: IInstanceEmailForm) {
 
   const handleEmailSecurityChange = (key: TEmailSecurityKeys) => {
     if (key === "EMAIL_USE_SSL") {
-      setValue("EMAIL_USE_TLS", "0");
-      setValue("EMAIL_USE_SSL", "1");
+      setValue("EMAIL_USE_TLS", "0", { shouldDirty: true });
+      setValue("EMAIL_USE_SSL", "1", { shouldDirty: true });
     }
     if (key === "EMAIL_USE_TLS") {
-      setValue("EMAIL_USE_TLS", "1");
-      setValue("EMAIL_USE_SSL", "0");
+      setValue("EMAIL_USE_TLS", "1", { shouldDirty: true });
+      setValue("EMAIL_USE_SSL", "0", { shouldDirty: true });
     }
     if (key === "NONE") {
-      setValue("EMAIL_USE_TLS", "0");
-      setValue("EMAIL_USE_SSL", "0");
+      setValue("EMAIL_USE_TLS", "0", { shouldDirty: true });
+      setValue("EMAIL_USE_SSL", "0", { shouldDirty: true });
     }
   };
 
@@ -162,13 +167,20 @@ export function InstanceEmailForm(props: IInstanceEmailForm) {
             />
           ))}
           <div className="flex flex-col gap-1">
-            <h4 className="text-13 text-tertiary">Email security</h4>
+            <span id={emailSecurityLabelId} className="text-body-xs-medium text-primary">
+              Email security
+            </span>
             <Select
               items={EMAIL_SECURITY_OPTIONS}
               value={emailSecurityKey}
               onValueChange={(value) => handleEmailSecurityChange(value as TEmailSecurityKeys)}
             >
-              <SelectTrigger size="lg" placeholder="Select email security" />
+              <SelectTrigger
+                variant="secondary"
+                size="lg"
+                placeholder="Select email security"
+                aria-labelledby={emailSecurityLabelId}
+              />
               <SelectContent>
                 <SelectList>
                   {Object.entries(EMAIL_SECURITY_OPTIONS).map(([key, value]) => (
@@ -183,8 +195,8 @@ export function InstanceEmailForm(props: IInstanceEmailForm) {
           <div className="flex w-full max-w-xl flex-col gap-y-10 px-1">
             <div className="mr-8 flex items-center gap-10 pt-4">
               <div className="grow">
-                <div className="text-13 font-medium text-primary">Authentication</div>
-                <div className="text-11 font-regular text-tertiary">
+                <div className="text-body-xs-medium text-primary">Authentication</div>
+                <div className="text-caption-sm-regular text-tertiary">
                   This is optional, but we recommend setting up a username and a password for your SMTP server.
                 </div>
               </div>