Merge remote-tracking branch 'origin/main' into feat/dashboard-agent-flows

Author: kathiekiwi

.changeset/friendly-keys-batch-tokens.md

@@ -0,0 +1,6 @@
+---
+"@trigger.dev/core": patch
+"@trigger.dev/sdk": patch
+---
+
+Allow task-scoped environment API keys to run batch operations for their permitted tasks. The SDK declares the batch's task set before creation, and `@trigger.dev/core/v3/apiKeys` now exports the additional-key format helper.

.github/VOUCHED.td

@@ -24,4 +24,5 @@ jrossi
 ThullyoCunha
 ConProgramming
 saasjesus
-brentshulman-silkline
+brentshulman-silkline
+Leafgard

.server-changes/backpressure-hold-last-verdict.md

@@ -0,0 +1,6 @@
+---
+area: supervisor
+type: fix
+---
+
+When the capacity signal drops out, the last decision is held for a grace period rather than released.

.server-changes/light-theme.md

@@ -0,0 +1,6 @@
+---
+area: webapp
+type: feature
+---
+
+The dashboard gets a refreshed Dark theme as its new default look. On the account page you can switch to Light, System preference (follows your OS), or the original Classic look, and fine-tune the new themes with a contrast slider.

.server-changes/multi-task-scope-enforcement.md

@@ -0,0 +1,6 @@
+---
+area: webapp
+type: fix
+---
+
+Requests spanning multiple tasks now require permission for every requested task instead of accepting permission for only one task.

.server-changes/queue-metrics-remember-period.md

@@ -0,0 +1,6 @@
+---
+area: webapp
+type: improvement
+---
+
+The Queues pages now open on the last hour instead of the last day, and remember the time period you picked when you navigate between queues or reload the page.

.server-changes/queues-page-environment-wide-charts.md

@@ -0,0 +1,6 @@
+---
+area: webapp
+type: fix
+---
+
+The four charts at the top of the Queues page now always cover the whole environment, so paging through or re-sorting your queues no longer changes them. The scheduling delay chart also leaves a gap where no runs started, instead of dropping to zero.

.server-changes/report-messages-not-treeshaken.md

@@ -0,0 +1,6 @@
+---
+area: webapp
+type: fix
+---
+
+Fix the health report failing with an internal error when requested through the API.

.server-changes/scoped-environment-api-key-auth.md

@@ -0,0 +1,6 @@
+---
+area: webapp
+type: feature
+---
+
+Additional environment API keys can authenticate API requests using their configured permissions, with revoked and expired keys rejected. Batch responses use server-issued public access tokens so additional keys never need the environment signing secret.

.server-changes/supervisor-run-pod-tolerations.md

@@ -0,0 +1,6 @@
+---
+area: supervisor
+type: feature
+---
+
+Self-hosted Kubernetes deployments can now add tolerations to run pods, so runs are allowed onto tainted nodes. An invalid toleration now stops the supervisor at startup instead of failing every run pod, so check existing values before upgrading.