This release ships the ghcr.io/tuist/tuist-xcresult-processor:0.21.0 image.
Security and auditability
- Operator access to customer projects is now per-access, reason-gated, and time-bound. Read access is self-serve with a logged reason; admin access requires Slack just-in-time approval. A valid grant also lets operators reach organizations that enforce SSO.
- Blanket operator allowlists are removed; the server verifies each grant offline.
Reliability
- Fixed a telemetry crash that could disable tracing after streaming HTTP requests, such as GitHub Actions log downloads. Finch/OpenTelemetry instrumentation now uses a maintained upstream package that handles streamed responses correctly.