Skip to content

Release train 2026-10 (8) #160

Closed
Closed
Release train 2026-10 (8)#160
Labels
traintrain:done

Description

@github-actions
github-actions
bot
opened on Oct 28, 2026

Release train 2026-10 over repos.yaml: finished.

Updated by train.yml (cmd/train, docs/train.md). Org owners can comment /skip <repo>, /retry <repo> or /abort. Don't edit the state comment at the end.

Stage Repo Status From Released PRs Detail
1 api released v0.21.1 v0.22.0 release api#512
1 gooci released v0.0.10 nothing to release
2 agent released v0.9.3 v0.9.4 bump agent#137, release agent#135
2 ui released v2.12.1 v2.13.0 release ui#360
3 agent-action released v0.0.3 v0.0.4 bump agent-action#13, release agent-action#12
3 plugin-apt-versions released v0.7.0 v0.7.1 bump plugin-apt-versions#37, release plugin-apt-versions#34
3 plugin-apt-versions-policies released v0.5.1 v0.5.2 bump plugin-apt-versions-policies#12, release plugin-apt-versions-policies#13
3 plugin-aws-acm released v0.1.1 v0.1.2 bump plugin-aws-acm#30, release plugin-aws-acm#26
3 plugin-aws-acm-certificate-policies released v0.1.1 v0.1.2 bump plugin-aws-acm-certificate-policies#11, release plugin-aws-acm-certificate-policies#12
3 plugin-aws-apigateway released v0.1.0 v0.1.1 bump plugin-aws-apigateway#20, release plugin-aws-apigateway#16
3 plugin-aws-apigateway-policies released v0.1.0 v0.1.1 bump plugin-aws-apigateway-policies#9, release plugin-aws-apigateway-policies#10
3 plugin-aws-cloudfront released v0.1.0 v0.1.1 bump plugin-aws-cloudfront#19, release plugin-aws-cloudfront#16
3 plugin-aws-cloudfront-policies released v0.1.0 v0.1.1 bump plugin-aws-cloudfront-policies#11, release plugin-aws-cloudfront-policies#8
3 plugin-aws-ec2 released v0.4.1 v0.4.2 bump plugin-aws-ec2#33, release plugin-aws-ec2#29
3 plugin-aws-ec2-policies released v0.4.0 v0.4.1 bump plugin-aws-ec2-policies#17, release plugin-aws-ec2-policies#18
3 plugin-aws-ecr released v0.1.1 v0.1.2 bump plugin-aws-ecr#27, release plugin-aws-ecr#22
3 plugin-aws-ecr-image-policies released v0.1.0 v0.1.1 bump plugin-aws-ecr-image-policies#9, release plugin-aws-ecr-image-policies#10
3 plugin-aws-ecr-registry-policies released v0.1.0 v0.1.1 bump plugin-aws-ecr-registry-policies#9, release plugin-aws-ecr-registry-policies#10
3 plugin-aws-ecr-repository-policies released v0.1.0 v0.1.1 bump plugin-aws-ecr-repository-policies#9, release plugin-aws-ecr-repository-policies#10
3 plugin-aws-eks released v0.1.2 v0.1.3 bump plugin-aws-eks#25, release plugin-aws-eks#23
3 plugin-aws-eks-addon-policies released v0.1.0 v0.1.1 bump plugin-aws-eks-addon-policies#8, release plugin-aws-eks-addon-policies#9
3 plugin-aws-eks-nodegroup-policies released v0.1.0 v0.1.1 bump plugin-aws-eks-nodegroup-policies#9, release plugin-aws-eks-nodegroup-policies#10
3 plugin-aws-eks-policies released v0.1.0 v0.1.1 bump plugin-aws-eks-policies#8, release plugin-aws-eks-policies#9
3 plugin-aws-elb released v0.1.1 v0.1.2 bump plugin-aws-elb#28, release plugin-aws-elb#22
3 plugin-aws-elb-listener-policies released v0.1.0 v0.1.1 bump plugin-aws-elb-listener-policies#7, release plugin-aws-elb-listener-policies#8
3 plugin-aws-elb-loadbalancer-policies released v0.1.0 v0.1.1 bump plugin-aws-elb-loadbalancer-policies#7, release plugin-aws-elb-loadbalancer-policies#8
3 plugin-aws-elb-targetgroup-policies released v0.1.0 v0.1.1 bump plugin-aws-elb-targetgroup-policies#7, release plugin-aws-elb-targetgroup-policies#9
3 plugin-aws-elb-targethealth-policies released v0.1.0 v0.1.1 bump plugin-aws-elb-targethealth-policies#7, release plugin-aws-elb-targethealth-policies#8
3 plugin-aws-rds-aurora-psql released v0.3.2 v0.3.3 bump plugin-aws-rds-aurora-psql#35, release plugin-aws-rds-aurora-psql#30
3 plugin-aws-rds-aurora-psql-policies released v0.3.0 v0.3.1 bump plugin-aws-rds-aurora-psql-policies#11, release plugin-aws-rds-aurora-psql-policies#12
3 plugin-aws-s3 released v0.1.1 v0.1.2 bump plugin-aws-s3#23, release plugin-aws-s3#20
3 plugin-aws-s3-policies released v0.1.0 v0.1.1 bump plugin-aws-s3-policies#8, release plugin-aws-s3-policies#9
3 plugin-aws-secretsmanager released v0.1.2 v0.1.3 bump plugin-aws-secretsmanager#24, release plugin-aws-secretsmanager#21
3 plugin-aws-secretsmanager-policies released v0.1.1 v0.1.2 release plugin-aws-secretsmanager-policies#11
3 plugin-aws-vpc released v0.3.1 v0.3.2 bump plugin-aws-vpc#37, release plugin-aws-vpc#31
3 plugin-aws-vpc-nacl-policies released v0.1.0 v0.1.1 bump plugin-aws-vpc-nacl-policies#7, release plugin-aws-vpc-nacl-policies#8
3 plugin-aws-vpc-policies released v0.1.0 v0.1.1 bump plugin-aws-vpc-policies#6, release plugin-aws-vpc-policies#7
3 plugin-aws-vpc-rt-policies released v0.1.0 v0.1.1 bump plugin-aws-vpc-rt-policies#7, release plugin-aws-vpc-rt-policies#8
3 plugin-aws-vpc-sg-policies released v0.3.0 v0.3.1 bump plugin-aws-vpc-sg-policies#14, release plugin-aws-vpc-sg-policies#15
3 plugin-aws-vpc-subnet-policies released v0.1.0 v0.1.1 bump plugin-aws-vpc-subnet-policies#7, release plugin-aws-vpc-subnet-policies#8
3 plugin-cloud-custodian released v0.3.0 v0.3.1 bump plugin-cloud-custodian#49, release plugin-cloud-custodian#47
3 plugin-cloud-custodian-policies released v0.2.2 v0.2.3 bump plugin-cloud-custodian-policies#12, release plugin-cloud-custodian-policies#13
3 plugin-dependabot released v0.8.0 v0.9.0 bump plugin-dependabot#34, release plugin-dependabot#31
3 plugin-dependabot-granular-policies released v0.2.0 v0.2.1 bump plugin-dependabot-granular-policies#9, release plugin-dependabot-granular-policies#10
3 plugin-dependabot-policies released v0.5.0 v0.5.1 bump plugin-dependabot-policies#13, release plugin-dependabot-policies#14
3 plugin-file-attestation released v0.2.1 v0.2.2 bump plugin-file-attestation#23, release plugin-file-attestation#20
3 plugin-file-attestation-ctrf-policies released v0.2.0 v0.2.1 bump plugin-file-attestation-ctrf-policies#7, release plugin-file-attestation-ctrf-policies#8
3 plugin-file-attestation-policies released v0.2.0 v0.2.1 bump plugin-file-attestation-policies#8, release plugin-file-attestation-policies#9
3 plugin-file-attestation-sarif-policies released v0.2.0 v0.2.1 bump plugin-file-attestation-sarif-policies#8, release plugin-file-attestation-sarif-policies#9
3 plugin-github-repositories released v0.10.0 v0.11.0 bump plugin-github-repositories#42, release plugin-github-repositories#38
3 plugin-github-repositories-custom-policies released v0.2.0 v0.2.1 bump plugin-github-repositories-custom-policies#8, release plugin-github-repositories-custom-policies#9
3 plugin-github-repositories-dependency-policies released v0.1.1 v0.1.2 bump plugin-github-repositories-dependency-policies#8, release plugin-github-repositories-dependency-policies#9
3 plugin-github-repositories-policies released v0.7.3 v0.7.4 bump plugin-github-repositories-policies#19, release plugin-github-repositories-policies#20
3 plugin-github-repositories-pr-policies released v0.2.0 v0.2.1 bump plugin-github-repositories-pr-policies#8, release plugin-github-repositories-pr-policies#9
3 plugin-github-settings released v0.6.0 v0.7.0 bump plugin-github-settings#32, release plugin-github-settings#29
3 plugin-github-settings-policies released v0.4.1 v0.4.2 bump plugin-github-settings-policies#18, release plugin-github-settings-policies#19
3 plugin-gitlab-repositories released v0.1.1 v0.1.2 bump plugin-gitlab-repositories#24, release plugin-gitlab-repositories#21
3 plugin-gitlab-repositories-policies released v0.1.0 v0.1.1 bump plugin-gitlab-repositories-policies#7, release plugin-gitlab-repositories-policies#8
3 plugin-http-collector released v0.2.0 v0.2.1 bump plugin-http-collector#21, release plugin-http-collector#19
3 plugin-http-collector-policies released v0.2.0 v0.2.1 bump plugin-http-collector-policies#7, release plugin-http-collector-policies#8
3 plugin-intruder released v0.2.0 v0.2.1 bump plugin-intruder#28, release plugin-intruder#27
3 plugin-intruder-policies released v0.1.0 v0.1.1 bump plugin-intruder-policies#6, release plugin-intruder-policies#7
3 plugin-jira released v0.2.3 v0.2.4 bump plugin-jira#26, release plugin-jira#24
3 plugin-jira-custom-policies released v0.2.0 v0.2.1 bump plugin-jira-custom-policies#7, release plugin-jira-custom-policies#8
3 plugin-jira-policies released v0.2.0 v0.2.1 bump plugin-jira-policies#8, release plugin-jira-policies#9
3 plugin-k8s released v0.2.1 v0.2.2 bump plugin-k8s#27, release plugin-k8s#24
3 plugin-k8s-opres-policies released v0.2.0 v0.2.1 bump plugin-k8s-opres-policies#10, release plugin-k8s-opres-policies#11
3 plugin-local-ssh released v0.5.0 v0.5.1 bump plugin-local-ssh#47, release plugin-local-ssh#46
3 plugin-local-ssh-policies released v0.3.1 v0.3.2 bump plugin-local-ssh-policies#17, release plugin-local-ssh-policies#18
4 helm-charts released ccf-agent v0.4.2, ccf-app v0.9.1 bump helm-charts#55 nothing to release
Gate Version Result Detail
plugin-apt-versions 0.7.1 passed
plugin-apt-versions-policies 0.5.2 passed
plugin-aws-acm 0.1.2 passed
plugin-aws-acm-certificate-policies 0.1.2 passed
plugin-aws-apigateway 0.1.1 passed
plugin-aws-apigateway-policies 0.1.1 passed
plugin-aws-cloudfront 0.1.1 passed
plugin-aws-cloudfront-policies 0.1.1 passed
plugin-aws-ec2 0.4.2 passed
plugin-aws-ec2-policies 0.4.1 passed
plugin-aws-ecr 0.1.2 passed
plugin-aws-ecr-image-policies 0.1.1 passed
plugin-aws-ecr-registry-policies 0.1.1 passed
plugin-aws-ecr-repository-policies 0.1.1 passed
plugin-aws-eks 0.1.3 passed
plugin-aws-eks-addon-policies 0.1.1 passed
plugin-aws-eks-nodegroup-policies 0.1.1 passed
plugin-aws-eks-policies 0.1.1 passed
plugin-aws-elb 0.1.2 passed
plugin-aws-elb-listener-policies 0.1.1 passed
plugin-aws-elb-loadbalancer-policies 0.1.1 passed
plugin-aws-elb-targetgroup-policies 0.1.1 passed
plugin-aws-elb-targethealth-policies 0.1.1 passed
plugin-aws-rds-aurora-psql 0.3.3 passed
plugin-aws-rds-aurora-psql-policies 0.3.1 passed
plugin-aws-s3 0.1.2 passed
plugin-aws-s3-policies 0.1.1 passed
plugin-aws-secretsmanager 0.1.3 passed
plugin-aws-secretsmanager-policies 0.1.2 passed
plugin-aws-vpc 0.3.2 passed
plugin-aws-vpc-nacl-policies 0.1.1 passed
plugin-aws-vpc-policies 0.1.1 passed
plugin-aws-vpc-rt-policies 0.1.1 passed
plugin-aws-vpc-sg-policies 0.3.1 passed
plugin-aws-vpc-subnet-policies 0.1.1 passed
plugin-cloud-custodian 0.3.1 passed
plugin-cloud-custodian-policies 0.2.3 passed
plugin-dependabot 0.9.0 passed
plugin-dependabot-granular-policies 0.2.1 passed
plugin-dependabot-policies 0.5.1 passed
plugin-file-attestation 0.2.2 passed
plugin-file-attestation-ctrf-policies 0.2.1 passed
plugin-file-attestation-policies 0.2.1 passed
plugin-file-attestation-sarif-policies 0.2.1 passed
plugin-github-repositories 0.11.0 passed
plugin-github-repositories-custom-policies 0.2.1 passed
plugin-github-repositories-dependency-policies 0.1.2 passed
plugin-github-repositories-policies 0.7.4 passed
plugin-github-repositories-pr-policies 0.2.1 passed
plugin-github-settings 0.7.0 passed
plugin-github-settings-policies 0.4.2 passed
plugin-gitlab-repositories 0.1.2 passed
plugin-gitlab-repositories-policies 0.1.1 passed
plugin-http-collector 0.2.1 passed
plugin-http-collector-policies 0.2.1 passed
plugin-intruder 0.2.1 passed
plugin-intruder-policies 0.1.1 passed
plugin-jira 0.2.4 passed
plugin-jira-custom-policies 0.2.1 passed
plugin-jira-policies 0.2.1 passed
plugin-k8s 0.2.2 passed
plugin-k8s-opres-policies 0.2.1 passed
plugin-local-ssh 0.5.1 passed
plugin-local-ssh-policies 0.3.2 passed
stack-smoke passed

Activity

  1. github-actions
    added
    train
    train:open
    on Oct 28, 2026

  2. gusfcarvalho commented on Oct 28, 2026

    @gusfcarvalho
    gusfcarvalho
    on Oct 28, 2026
    Contributor

    /retry gooci

  3. github-actions commented on Oct 28, 2026

    @github-actions
    github-actionsBot
    on Oct 28, 2026 – with GitHub Actions
    Author

    @gusfcarvalho /retry gooci: gooci is already released.

  4. gusfcarvalho commented on Oct 28, 2026

    @gusfcarvalho
    gusfcarvalho
    on Oct 28, 2026
    Contributor

    /retry plugin-aws-ecr

  5. github-actions commented on Oct 28, 2026

    @github-actions
    github-actionsBot
    on Oct 28, 2026 – with GitHub Actions
    Author

    @gusfcarvalho /retry plugin-aws-ecr: done.

  6. gusfcarvalho commented on Oct 28, 2026

    @gusfcarvalho
    gusfcarvalho
    on Oct 28, 2026
    Contributor

    /retry plugin-aws-ecr

  7. github-actions commented on Oct 28, 2026

    @github-actions
    github-actionsBot
    on Oct 28, 2026 – with GitHub Actions
    Author

    @gusfcarvalho /retry plugin-aws-ecr: done.

  8. gusfcarvalho commented on Oct 28, 2026

    @gusfcarvalho
    gusfcarvalho
    on Oct 28, 2026
    Contributor

    /retry plugin-aws-s3

  9. gusfcarvalho commented on Oct 28, 2026

    @gusfcarvalho
    gusfcarvalho
    on Oct 28, 2026
    Contributor

    /retry plugin-aws-eks-policies

  10. gusfcarvalho commented on Oct 28, 2026

    @gusfcarvalho
    gusfcarvalho
    on Oct 28, 2026
    Contributor

    /retry plugin-aws-elb-listener-policies

  11. gusfcarvalho commented on Oct 28, 2026

    @gusfcarvalho
    gusfcarvalho
    on Oct 28, 2026
    Contributor

    /retry plugin-aws-elb-loadbalancer-policies

  12. gusfcarvalho commented on Oct 28, 2026

    @gusfcarvalho
    gusfcarvalho
    on Oct 28, 2026
    Contributor

    /retry plugin-aws-elb-targethealth-policies

  13. github-actions commented on Oct 28, 2026

    @github-actions
    github-actionsBot
    on Oct 28, 2026 – with GitHub Actions
    Author

    @gusfcarvalho /retry plugin-aws-s3: done.

  14. gusfcarvalho commented on Oct 28, 2026

    @gusfcarvalho
    gusfcarvalho
    on Oct 28, 2026
    Contributor

    /retry plugin-aws-secretsmanager-policies

  15. 6 remaining items

  16. gusfcarvalho commented on Oct 28, 2026

    @gusfcarvalho
    gusfcarvalho
    on Oct 28, 2026
    Contributor

    /retry plugin-aws-ecr

  17. github-actions commented on Oct 28, 2026

    @github-actions
    github-actionsBot
    on Oct 28, 2026 – with GitHub Actions
    Author

    @gusfcarvalho /retry plugin-aws-ecr: done.

  18. gusfcarvalho
    added a commit that references this issue on Oct 28, 2026

    fix(release-please): let the release token tag commits behind a workf…

    416d3cd

  19. gusfcarvalho commented on Oct 28, 2026

    @gusfcarvalho
    gusfcarvalho
    on Oct 28, 2026
    Contributor

    /retry plugin-aws-eks-policies

  20. gusfcarvalho commented on Oct 28, 2026

    @gusfcarvalho
    gusfcarvalho
    on Oct 28, 2026
    Contributor

    /retry plugin-aws-elb-listener-policies

  21. gusfcarvalho commented on Oct 28, 2026

    @gusfcarvalho
    gusfcarvalho
    on Oct 28, 2026
    Contributor

    /retry plugin-aws-elb-loadbalancer-policies

  22. gusfcarvalho commented on Oct 28, 2026

    @gusfcarvalho
    gusfcarvalho
    on Oct 28, 2026
    Contributor

    /retry plugin-aws-elb-targethealth-policies

  23. github-actions commented on Oct 28, 2026

    @github-actions
    github-actionsBot
    on Oct 28, 2026 – with GitHub Actions
    Author

    @gusfcarvalho /retry plugin-aws-eks-policies: done.

  24. github-actions commented on Oct 28, 2026

    @github-actions
    github-actionsBot
    on Oct 28, 2026 – with GitHub Actions
    Author

    @gusfcarvalho /retry plugin-aws-elb-listener-policies: done.

  25. github-actions commented on Oct 28, 2026

    @github-actions
    github-actionsBot
    on Oct 28, 2026 – with GitHub Actions
    Author

    @gusfcarvalho /retry plugin-aws-elb-loadbalancer-policies: done.

  26. github-actions commented on Oct 28, 2026

    @github-actions
    github-actionsBot
    on Oct 28, 2026 – with GitHub Actions
    Author

    @gusfcarvalho /retry plugin-aws-elb-targethealth-policies: done.

  27. github-actions commented on Oct 28, 2026

    @github-actions
    github-actionsBot
    on Oct 28, 2026 – with GitHub Actions
    Author

    Release digest draft: 2026-10

    Draft for #ccf-release-digests; edit before posting.

    Repo Version From
    api v0.22.0 v0.21.1
    gooci no release v0.0.10
    agent v0.9.4 v0.9.3
    ui v2.13.0 v2.12.1
    agent-action v0.0.4 v0.0.3
    plugin-apt-versions v0.7.1 v0.7.0
    plugin-apt-versions-policies v0.5.2 v0.5.1
    plugin-aws-acm v0.1.2 v0.1.1
    plugin-aws-acm-certificate-policies v0.1.2 v0.1.1
    plugin-aws-apigateway v0.1.1 v0.1.0
    plugin-aws-apigateway-policies v0.1.1 v0.1.0
    plugin-aws-cloudfront v0.1.1 v0.1.0
    plugin-aws-cloudfront-policies v0.1.1 v0.1.0
    plugin-aws-ec2 v0.4.2 v0.4.1
    plugin-aws-ec2-policies v0.4.1 v0.4.0
    plugin-aws-ecr v0.1.2 v0.1.1
    plugin-aws-ecr-image-policies v0.1.1 v0.1.0
    plugin-aws-ecr-registry-policies v0.1.1 v0.1.0
    plugin-aws-ecr-repository-policies v0.1.1 v0.1.0
    plugin-aws-eks v0.1.3 v0.1.2
    plugin-aws-eks-addon-policies v0.1.1 v0.1.0
    plugin-aws-eks-nodegroup-policies v0.1.1 v0.1.0
    plugin-aws-eks-policies v0.1.1 v0.1.0
    plugin-aws-elb v0.1.2 v0.1.1
    plugin-aws-elb-listener-policies v0.1.1 v0.1.0
    plugin-aws-elb-loadbalancer-policies v0.1.1 v0.1.0
    plugin-aws-elb-targetgroup-policies v0.1.1 v0.1.0
    plugin-aws-elb-targethealth-policies v0.1.1 v0.1.0
    plugin-aws-rds-aurora-psql v0.3.3 v0.3.2
    plugin-aws-rds-aurora-psql-policies v0.3.1 v0.3.0
    plugin-aws-s3 v0.1.2 v0.1.1
    plugin-aws-s3-policies v0.1.1 v0.1.0
    plugin-aws-secretsmanager v0.1.3 v0.1.2
    plugin-aws-secretsmanager-policies v0.1.2 v0.1.1
    plugin-aws-vpc v0.3.2 v0.3.1
    plugin-aws-vpc-nacl-policies v0.1.1 v0.1.0
    plugin-aws-vpc-policies v0.1.1 v0.1.0
    plugin-aws-vpc-rt-policies v0.1.1 v0.1.0
    plugin-aws-vpc-sg-policies v0.3.1 v0.3.0
    plugin-aws-vpc-subnet-policies v0.1.1 v0.1.0
    plugin-cloud-custodian v0.3.1 v0.3.0
    plugin-cloud-custodian-policies v0.2.3 v0.2.2
    plugin-dependabot v0.9.0 v0.8.0
    plugin-dependabot-granular-policies v0.2.1 v0.2.0
    plugin-dependabot-policies v0.5.1 v0.5.0
    plugin-file-attestation v0.2.2 v0.2.1
    plugin-file-attestation-ctrf-policies v0.2.1 v0.2.0
    plugin-file-attestation-policies v0.2.1 v0.2.0
    plugin-file-attestation-sarif-policies v0.2.1 v0.2.0
    plugin-github-repositories v0.11.0 v0.10.0
    plugin-github-repositories-custom-policies v0.2.1 v0.2.0
    plugin-github-repositories-dependency-policies v0.1.2 v0.1.1
    plugin-github-repositories-policies v0.7.4 v0.7.3
    plugin-github-repositories-pr-policies v0.2.1 v0.2.0
    plugin-github-settings v0.7.0 v0.6.0
    plugin-github-settings-policies v0.4.2 v0.4.1
    plugin-gitlab-repositories v0.1.2 v0.1.1
    plugin-gitlab-repositories-policies v0.1.1 v0.1.0
    plugin-http-collector v0.2.1 v0.2.0
    plugin-http-collector-policies v0.2.1 v0.2.0
    plugin-intruder v0.2.1 v0.2.0
    plugin-intruder-policies v0.1.1 v0.1.0
    plugin-jira v0.2.4 v0.2.3
    plugin-jira-custom-policies v0.2.1 v0.2.0
    plugin-jira-policies v0.2.1 v0.2.0
    plugin-k8s v0.2.2 v0.2.1
    plugin-k8s-opres-policies v0.2.1 v0.2.0
    plugin-local-ssh v0.5.1 v0.5.0
    plugin-local-ssh-policies v0.3.2 v0.3.1
    helm-charts no release ccf-agent v0.4.2, ccf-app v0.9.1

    Features

    api v0.22.0

    • api: POST /evidence/batches and GET /evidence/batches/{id} (#505) (61ddb2c)
    • evidence: batch service for asynchronous evidence ingest (#504) (d1cb975)
    • evidence: prune evidence batches after a retention period (#509) (10d9c53)
    • sdk: CreateBatch, GetBatch and WaitForBatch for evidence batches (#506) (c0a622a)
    • ssp-scope: automatic per-policy filters (#520) (81b157d)
    • ssp-scope: filters that follow the SSP scope (#519) (9dba7b1)
    • ssp-scope: restrict filter-building inputs to the SSP scope (#518) (6feac53)
    • ssp-scope: scope models and sspscope service (#516) (bb0c476)
    • ssp-scope: scope routes and SSP-scoped evidence search (#517) (0ad30ed)
    • ssp-templates: discovery planner and preview route (#524) (9a875e3)
    • ssp-templates: discovery worker and periodic job (#525) (c7856f1)
    • ssp-templates: run, created SSPs and forget routes (#526) (75918b2)
    • ssp-templates: SSP template model and admin CRUD routes (#522) (b647d23)
    • worker: evidence batch chunk queue and worker (#503) (7a2be54)

    ui v2.13.0

    • evidence: split Evidence into This System and Global pages (#362) (e81b86d)
    • filters: build filters from in-scope evidence inside a scoped SSP (#363) (d62daf4)
    • filters: let filters follow their SSP's scope (#364) (0af3bdf)
    • nav: reorganise navigation into This System and Global (POC) (#357) (a1f47cb)
    • ssp-templates: admin list, routes, nav and types for SSP templates (#366) (f7e0cfc)
    • ssp-templates: create and edit SSP templates in a dialog form (#367) (3a8623f)
    • ssp-templates: preview, run and created SSPs on the template page (#368) (7240bf6)
    • ssp: add a Scope tab to edit an SSP's evidence scope (#361) (20aa42e)

    Bug Fixes

    api v0.22.0

    • deps: update all non-major dependencies (#531) (e7fa71c)
    • deps: update aws-sdk-go-v2 monorepo (#532) (2f0c91e)
    • deps: update module github.com/go-jose/go-jose/v3 to v4 [security] (#530) (95c08b2)
    • deps: update module github.com/open-policy-agent/opa to v1.21.3 (#533) (e49cede)
    • deps: update river monorepo to v0.49.0 (#534) (0d12d7c)
    • deps: update security fixes (gomod) [security] (#529) (dea901c)

    agent v0.9.4

    • deps: bump api to v0.22.0 (#137) (44d2f85)
    • deps: update all non-major dependencies (#134) (34a1cb9)
    • deps: update module github.com/defenseunicorns/go-oscal to v0.7.2 (#136) (ef7d3a3)

    ui v2.13.0

    agent-action v0.0.4

    • deps: bump agent to v0.9.3, workflows to v1.7.0 (#11) (26f4daa)
    • deps: bump agent to v0.9.4 (#13) (b6e33cd)

    plugin-apt-versions v0.7.1

    • deps: bump agent to v0.9.2 (#32) (b34609a)
    • deps: bump agent to v0.9.3, workflows to v1.7.0 (#35) (9a7ed63)
    • deps: bump agent to v0.9.4 (#37) (537528a)
    • deps: update all non-major dependencies (#36) (52ba578)
    • deps: update module google.golang.org/grpc to v1.83.2 [security] (#33) (4982e97)

    plugin-apt-versions-policies v0.5.2

    plugin-aws-acm v0.1.2

    • deps: bump agent to v0.9.3, workflows to v1.7.0 (#25) (e5ca480)
    • deps: bump agent to v0.9.4 (#30) (244238a)
    • deps: update module github.com/aws/aws-sdk-go-v2/service/acm to v1.50.5 (#27) (e7eeee5)
    • deps: update module github.com/hashicorp/go-plugin to v1.8.0 (#28) (145f81d)
    • deps: update module golang.org/x/net to v0.62.0 [security] (#29) (08e9e7b)

    plugin-aws-acm-certificate-policies v0.1.2

    plugin-aws-apigateway v0.1.1

    • deps: bump agent to v0.9.3, workflows to v1.7.0 (#15) (04d2141)
    • deps: bump agent to v0.9.4 (#20) (82a6f8a)
    • deps: update aws-sdk-go-v2 monorepo (#17) (5b48bbb)
    • deps: update module github.com/aws/aws-sdk-go-v2/service/apigateway to v1.52.2 (#18) (81d77a4)
    • deps: update module github.com/hashicorp/go-plugin to v1.8.0 (#19) (aef7134)

    plugin-aws-apigateway-policies v0.1.1

    plugin-aws-cloudfront v0.1.1

    • deps: bump agent to v0.9.3, workflows to v1.7.0 (#15) (63985d5)
    • deps: bump agent to v0.9.4 (#19) (d5e7528)
    • deps: update aws-sdk-go-v2 monorepo (#17) (e37300b)
    • deps: update module github.com/hashicorp/go-plugin to v1.8.0 (#18) (8dee96d)

    plugin-aws-cloudfront-policies v0.1.1

    • deps: bump opa to v1.21.3 (#11) (d84e555)
    • drop the unused approved_viewer_protocol_policies data key (#7) (dc13af5)

    plugin-aws-ec2 v0.4.2

    • deps: bump agent to v0.9.3, workflows to v1.7.0 (#30) (1d244ef)
    • deps: bump agent to v0.9.4 (#33) (1b500ef)
    • deps: update aws-sdk-go-v2 monorepo (#28) (52ca1b6)
    • deps: update module github.com/hashicorp/go-plugin to v1.8.0 (#31) (e08b792)
    • deps: update module golang.org/x/net to v0.62.0 [security] (#32) (eb0056a)

    plugin-aws-ec2-policies v0.4.1

    plugin-aws-ecr v0.1.2

    • deps: bump agent to v0.9.4 (#27) (24b06e5)
    • deps: update aws-sdk-go-v2 monorepo (#24) (707eb1b)
    • deps: update module github.com/aws/aws-sdk-go-v2/service/ecr to v1.66.5 (#25) (8335baa)
    • deps: update module github.com/hashicorp/go-plugin to v1.8.0 (#26) (5d589e4)
    • deps: update module google.golang.org/grpc to v1.83.2 [security] (#23) (e9701d1)
    • use the repo's module path (#21) (35eb28f)

    plugin-aws-ecr-image-policies v0.1.1

    plugin-aws-ecr-registry-policies v0.1.1

    plugin-aws-ecr-repository-policies v0.1.1

    plugin-aws-eks v0.1.3

    • deps: bump agent to v0.9.3, workflows to v1.7.0 (#22) (14947d9)
    • deps: bump agent to v0.9.4 (#25) (155190b)
    • deps: update aws-sdk-go-v2 monorepo (#24) (b5a94d6)

    plugin-aws-eks-addon-policies v0.1.1

    plugin-aws-eks-nodegroup-policies v0.1.1

    plugin-aws-eks-policies v0.1.1

    plugin-aws-elb v0.1.2

    • deps: bump agent to v0.9.2 (#20) (a041208)
    • deps: bump agent to v0.9.3, workflows to v1.7.0 (#23) (864288e)
    • deps: bump agent to v0.9.4 (#28) (b38522d)
    • deps: update aws-sdk-go-v2 monorepo (#24) (44223ec)
    • deps: update module github.com/aws/aws-sdk-go-v2/service/cloudtrail to v1.65.5 (#25) (37818b7)
    • deps: update module github.com/hashicorp/go-plugin to v1.8.0 (#26) (87cd8b2)
    • deps: update module golang.org/x/net to v0.62.0 [security] (#27) (82c6003)
    • deps: update module google.golang.org/grpc to v1.83.2 [security] (#21) (92c1ce9)

    plugin-aws-elb-listener-policies v0.1.1

    plugin-aws-elb-loadbalancer-policies v0.1.1

    plugin-aws-elb-targetgroup-policies v0.1.1

    • deps: bump opa to v1.21.3 (#7) (099bf1e)
    • deps: bump opa to v1.21.3, workflows to v1.8.0 (#8) (2c29a2b)

    plugin-aws-elb-targethealth-policies v0.1.1

    plugin-aws-rds-aurora-psql v0.3.3

    • deps: bump agent to v0.9.3, workflows to v1.7.0 (#29) (4674c36)
    • deps: bump agent to v0.9.4 (#35) (4508129)
    • deps: update all non-major dependencies (#31) (3f7a38f)
    • deps: update aws-sdk-go-v2 monorepo (#32) (b233f75)
    • deps: update aws-sdk-go-v2 monorepo (#34) (8dd4f1e)
    • deps: update module golang.org/x/net to v0.62.0 [security] (#33) (e4e84da)

    plugin-aws-rds-aurora-psql-policies v0.3.1

    plugin-aws-s3 v0.1.2

    • deps: bump agent to v0.9.3, workflows to v1.7.0 (#19) (5652e2f)
    • deps: bump agent to v0.9.4 (#23) (a71cdbb)
    • deps: update all non-major dependencies (#21) (acbca5f)
    • deps: update aws-sdk-go-v2 monorepo (#22) (c18242a)

    plugin-aws-s3-policies v0.1.1

    plugin-aws-secretsmanager v0.1.3

    • deps: bump agent to v0.9.3, workflows to v1.7.0 (#20) (b1d0fd8)
    • deps: bump agent to v0.9.4 (#24) (98e719b)
    • deps: update aws-sdk-go-v2 monorepo (#22) (f1718af)
    • deps: update module github.com/hashicorp/go-plugin to v1.8.0 (#23) (468995d)

    plugin-aws-secretsmanager-policies v0.1.2

    • deps: bump opa to v1.21.3, workflows to v1.8.0 (#10) (193176b)

    plugin-aws-vpc v0.3.2

    • deps: bump agent to v0.9.3, workflows to v1.7.0 (#34) (0b79aa4)
    • deps: bump agent to v0.9.4 (#37) (7bb3c42)
    • deps: update aws-sdk-go-v2 monorepo (#33) (e842d15)
    • deps: update module github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs to v1.90.0 (#35) (325e6ff)
    • deps: update module github.com/hashicorp/go-plugin to v1.8.0 (#36) (6fdc56c)
    • name the plugin plugin-aws-vpc in its evidence (#32) (572d1b7)
    • use the repo's module path (#30) (c6c74bb)

    plugin-aws-vpc-nacl-policies v0.1.1

    plugin-aws-vpc-policies v0.1.1

    plugin-aws-vpc-rt-policies v0.1.1

    plugin-aws-vpc-sg-policies v0.3.1

    plugin-aws-vpc-subnet-policies v0.1.1

    plugin-cloud-custodian v0.3.1

    • deps: bump agent to v0.9.3, workflows to v1.7.0 (#46) (927e8e2)
    • deps: bump agent to v0.9.4 (#49) (b44b79c)
    • deps: update all non-major dependencies (#48) (6e36239)

    plugin-cloud-custodian-policies v0.2.3

    plugin-dependabot v0.9.0

    • deps: bump agent to v0.9.3, workflows to v1.7.0 (#32) (5812704)
    • deps: bump agent to v0.9.4 (#34) (ec0c0c5)
    • deps: update all non-major dependencies (#30) (4083ed0)
    • deps: update module github.com/google/go-github/v71 to v93 (#33) (e936da1)

    plugin-dependabot-granular-policies v0.2.1

    plugin-dependabot-policies v0.5.1

    plugin-file-attestation v0.2.2

    • deps: bump agent to v0.9.3, workflows to v1.7.0 (#19) (6a32296)
    • deps: bump agent to v0.9.4 (#23) (84fbb31)
    • deps: update all non-major dependencies (#21) (3bd3f39)
    • deps: update module golang.org/x/net to v0.62.0 [security] (#22) (4d5ec77)

    plugin-file-attestation-ctrf-policies v0.2.1

    plugin-file-attestation-policies v0.2.1

    plugin-file-attestation-sarif-policies v0.2.1

    plugin-github-repositories v0.11.0

    • deps: bump agent to v0.9.3, workflows to v1.7.0 (#39) (b53f42f)
    • deps: bump agent to v0.9.4 (#42) (d3030e0)
    • deps: update all non-major dependencies (#37) (b3768fa)
    • deps: update module github.com/google/go-github/v71 to v93 (#40) (f471139)
    • deps: update module golang.org/x/net to v0.62.0 [security] (#41) (abf3b5a)

    plugin-github-repositories-custom-policies v0.2.1

    plugin-github-repositories-dependency-policies v0.1.2

    plugin-github-repositories-policies v0.7.4

    plugin-github-repositories-pr-policies v0.2.1

    plugin-github-settings v0.7.0

    • deps: bump agent to v0.9.3, workflows to v1.7.0 (#28) (ffc5683)
    • deps: bump agent to v0.9.4 (#32) (3550b30)
    • deps: update module github.com/google/go-github/v71 to v93 (#31) (f1fb43e)
    • deps: update module github.com/hashicorp/go-plugin to v1.8.0 (#30) (d6e9177)

    plugin-github-settings-policies v0.4.2

    plugin-gitlab-repositories v0.1.2

    • deps: bump agent to v0.9.3, workflows to v1.7.0 (#22) (d31aa9a)
    • deps: bump agent to v0.9.4 (#24) (954c517)
    • deps: update all non-major dependencies (#20) (cde77f5)
    • deps: update module gitlab.com/gitlab-org/api/client-go to v3 (#23) (e5bdd64)

    plugin-gitlab-repositories-policies v0.1.1

    plugin-http-collector v0.2.1

    • deps: bump agent to v0.9.3, workflows to v1.7.0 (#20) (e4cabda)
    • deps: bump agent to v0.9.4 (#21) (60f442e)
    • deps: update all non-major dependencies (#18) (9559710)

    plugin-http-collector-policies v0.2.1

    plugin-intruder v0.2.1

    • deps: bump agent to v0.9.4 (#28) (fd124ed)
    • deps: update all non-major dependencies (#26) (7aae3e0)

    plugin-intruder-policies v0.1.1

    plugin-jira v0.2.4

    • deps: bump agent to v0.9.4 (#26) (8ca0d33)
    • deps: update all non-major dependencies (#23) (a1b2f39)
    • deps: update module golang.org/x/net to v0.62.0 [security] (#25) (ef80619)

    plugin-jira-custom-policies v0.2.1

    plugin-jira-policies v0.2.1

    plugin-k8s v0.2.2

    • deps: bump agent to v0.9.4 (#27) (8ab18ba)
    • deps: update all non-major dependencies (#23) (70ea66f)
    • deps: update aws-sdk-go-v2 monorepo (#25) (9cd69f5)
    • deps: update kubernetes monorepo to v0.37.1 (#26) (fb8b5d7)

    plugin-k8s-opres-policies v0.2.1

    plugin-local-ssh v0.5.1

    • deps: bump agent to v0.9.4 (#47) (f19c96d)
    • deps: update module github.com/hashicorp/go-plugin to v1.8.0 (#45) (c52a1c9)

    plugin-local-ssh-policies v0.3.2

    Performance Improvements

    api v0.22.0

    • compliance: batch profile compliance and leverage posture evidence counts (#502) (673416e)
    • evidence: latest evidence per stream via skip scan, not DISTINCT ON (#511) (b484ffa)
    • evidence: match filter sets to evidence through the label index (#514) (ee0a710)
    • evidence: store evidence in 36 SQL statements instead of 65 (#510) (82bf122)
    • lineage: label index and shared engine cache for the Compliance Map (#513) (364388a)

    ⚠ BREAKING CHANGES

    plugin-dependabot v0.9.0

    • deps: UsersService.Unsuspend now takes an UnsuspendUserRequest body argument.
      • refactor!: Pass repository creation by value
        (#​4616)
        RepositoriesService.Create now requires a
        CreateRepositoryRequest value instead of a *Repository.
      • refactor!: Rename LockIssueOptions,
        PullRequestBranchUpdateOptions, and UserSuspendOptions to
        ...Request and pass them by value
        (#​4612)
        LockIssueOptions, PullRequestBranchUpdateOptions,
        and UserSuspendOptions are renamed to LockIssueRequest,
        UpdatePullRequestBranchRequest, and SuspendUserRequest and are
        passed by value to IssuesService.Lock,
        PullRequestsService.UpdateBranch, and UsersService.Suspend;
        LockIssueRequest.LockReason is now *string.
      • refactor!: Pass the Projects v2 item body types by value and rename
        them to ...Request
        (#​4609)
        AddProjectItemOptions and UpdateProjectItemOptions
        are renamed to AddProjectItemRequest and UpdateProjectItemRequest
        and passed by value; AddProjectItemRequest.Type is no longer a
        pointer; UpdateProjectItemOptions.Archived is removed.
      • refactor!: Rename RepositoryCreateForkOptions and
        RepositoryAddCollaboratorOptions to ...Request and pass them by
        value
        (#​4607)
        RepositoryCreateForkOptions and
        RepositoryAddCollaboratorOptions are renamed to CreateForkRequest
        and AddCollaboratorRequest; RepositoriesService.CreateFork and
        RepositoriesService.AddCollaborator now take them by value instead of
        by pointer; CreateForkRequest.Organization, CreateForkRequest.Name,
        CreateForkRequest.DefaultBranchOnly and
        AddCollaboratorRequest.Permission are now pointers.
      • refactor!: Pass the Teams body types by value and rename them to
        ...Request
        (#​4606)
        TeamAddTeamMembershipOptions,
        TeamAddTeamRepoOptions and TeamProjectOptions are renamed to
        AddTeamMembershipRequest, AddTeamRepoRequest and
        AddTeamProjectRequest; TeamsService.AddTeamMembershipByID,
        AddTeamMembershipBySlug, AddTeamRepoByID, AddTeamRepoBySlug,
        AddTeamProjectByID and AddTeamProjectBySlug now take them by value
        instead of by pointer; AddTeamMembershipRequest.Role and
        AddTeamRepoRequest.Permission are now *string.
      • refactor!: Pass the secret scanning body types by value and rename
        them to ...Request
        (#​4548)
        SecretScanningAlertUpdateOptions and
        SecretScanningPatternConfigsUpdateOptions are renamed to
        UpdateSecretScanningAlertRequest and
        UpdateSecretScanningPatternConfigsRequest;
        SecretScanningService.UpdateAlert, UpdatePatternConfigsForEnterprise
        and UpdatePatternConfigsForOrg now take them by value;
        UpdateSecretScanningAlertRequest.State is now *string.
      • fix!: Match request body fields to the OpenAPI schemas
        (#​4581)
        Many required request body fields are now passed by
        value.
      • fix!: Send credentials only to configured origins
        (#​4564)
        Credentials are sent only to a client's configured API
        and upload origins — every other destination, including a redirect hop,
        goes out unauthenticated. A request body aimed outside those origins is
        refused. BasicAuthTransport and UnauthenticatedRateLimitedTransport
        gained AllowedOrigins, which GitHub Enterprise users must set.
      • refactor!: Pass org invitation requests by value
        (#​4551)
        OrganizationsService.CreateOrgInvitation now takes
        CreateOrgInvitationRequest (by value);
        CreateOrgInvitationRequest.TeamID is now TeamIDs.

    plugin-github-repositories v0.11.0

    • deps: UsersService.Unsuspend now takes an UnsuspendUserRequest body argument.
      • refactor!: Pass repository creation by value
        (#​4616)
        RepositoriesService.Create now requires a
        CreateRepositoryRequest value instead of a *Repository.
      • refactor!: Rename LockIssueOptions,
        PullRequestBranchUpdateOptions, and UserSuspendOptions to
        ...Request and pass them by value
        (#​4612)
        LockIssueOptions, PullRequestBranchUpdateOptions,
        and UserSuspendOptions are renamed to LockIssueRequest,
        UpdatePullRequestBranchRequest, and SuspendUserRequest and are
        passed by value to IssuesService.Lock,
        PullRequestsService.UpdateBranch, and UsersService.Suspend;
        LockIssueRequest.LockReason is now *string.
      • refactor!: Pass the Projects v2 item body types by value and rename
        them to ...Request
        (#​4609)
        AddProjectItemOptions and UpdateProjectItemOptions
        are renamed to AddProjectItemRequest and UpdateProjectItemRequest
        and passed by value; AddProjectItemRequest.Type is no longer a
        pointer; UpdateProjectItemOptions.Archived is removed.
      • refactor!: Rename RepositoryCreateForkOptions and
        RepositoryAddCollaboratorOptions to ...Request and pass them by
        value
        (#​4607)
        RepositoryCreateForkOptions and
        RepositoryAddCollaboratorOptions are renamed to CreateForkRequest
        and AddCollaboratorRequest; RepositoriesService.CreateFork and
        RepositoriesService.AddCollaborator now take them by value instead of
        by pointer; CreateForkRequest.Organization, CreateForkRequest.Name,
        CreateForkRequest.DefaultBranchOnly and
        AddCollaboratorRequest.Permission are now pointers.
      • refactor!: Pass the Teams body types by value and rename them to
        ...Request
        (#​4606)
        TeamAddTeamMembershipOptions,
        TeamAddTeamRepoOptions and TeamProjectOptions are renamed to
        AddTeamMembershipRequest, AddTeamRepoRequest and
        AddTeamProjectRequest; TeamsService.AddTeamMembershipByID,
        AddTeamMembershipBySlug, AddTeamRepoByID, AddTeamRepoBySlug,
        AddTeamProjectByID and AddTeamProjectBySlug now take them by value
        instead of by pointer; AddTeamMembershipRequest.Role and
        AddTeamRepoRequest.Permission are now *string.
      • refactor!: Pass the secret scanning body types by value and rename
        them to ...Request
        (#​4548)
        SecretScanningAlertUpdateOptions and
        SecretScanningPatternConfigsUpdateOptions are renamed to
        UpdateSecretScanningAlertRequest and
        UpdateSecretScanningPatternConfigsRequest;
        SecretScanningService.UpdateAlert, UpdatePatternConfigsForEnterprise
        and UpdatePatternConfigsForOrg now take them by value;
        UpdateSecretScanningAlertRequest.State is now *string.
      • fix!: Match request body fields to the OpenAPI schemas
        (#​4581)
        Many required request body fields are now passed by
        value.
      • fix!: Send credentials only to configured origins
        (#​4564)
        Credentials are sent only to a client's configured API
        and upload origins — every other destination, including a redirect hop,
        goes out unauthenticated. A request body aimed outside those origins is
        refused. BasicAuthTransport and UnauthenticatedRateLimitedTransport
        gained AllowedOrigins, which GitHub Enterprise users must set.
      • refactor!: Pass org invitation requests by value
        (#​4551)
        OrganizationsService.CreateOrgInvitation now takes
        CreateOrgInvitationRequest (by value);
        CreateOrgInvitationRequest.TeamID is now TeamIDs.

    plugin-github-settings v0.7.0

    • deps: UsersService.Unsuspend now takes an UnsuspendUserRequest body argument.
      • refactor!: Pass repository creation by value
        (#​4616)
        RepositoriesService.Create now requires a
        CreateRepositoryRequest value instead of a *Repository.
      • refactor!: Rename LockIssueOptions,
        PullRequestBranchUpdateOptions, and UserSuspendOptions to
        ...Request and pass them by value
        (#​4612)
        LockIssueOptions, PullRequestBranchUpdateOptions,
        and UserSuspendOptions are renamed to LockIssueRequest,
        UpdatePullRequestBranchRequest, and SuspendUserRequest and are
        passed by value to IssuesService.Lock,
        PullRequestsService.UpdateBranch, and UsersService.Suspend;
        LockIssueRequest.LockReason is now *string.
      • refactor!: Pass the Projects v2 item body types by value and rename
        them to ...Request
        (#​4609)
        AddProjectItemOptions and UpdateProjectItemOptions
        are renamed to AddProjectItemRequest and UpdateProjectItemRequest
        and passed by value; AddProjectItemRequest.Type is no longer a
        pointer; UpdateProjectItemOptions.Archived is removed.
      • refactor!: Rename RepositoryCreateForkOptions and
        RepositoryAddCollaboratorOptions to ...Request and pass them by
        value
        (#​4607)
        RepositoryCreateForkOptions and
        RepositoryAddCollaboratorOptions are renamed to CreateForkRequest
        and AddCollaboratorRequest; RepositoriesService.CreateFork and
        RepositoriesService.AddCollaborator now take them by value instead of
        by pointer; CreateForkRequest.Organization, CreateForkRequest.Name,
        CreateForkRequest.DefaultBranchOnly and
        AddCollaboratorRequest.Permission are now pointers.
      • refactor!: Pass the Teams body types by value and rename them to
        ...Request
        (#​4606)
        TeamAddTeamMembershipOptions,
        TeamAddTeamRepoOptions and TeamProjectOptions are renamed to
        AddTeamMembershipRequest, AddTeamRepoRequest and
        AddTeamProjectRequest; TeamsService.AddTeamMembershipByID,
        AddTeamMembershipBySlug, AddTeamRepoByID, AddTeamRepoBySlug,
        AddTeamProjectByID and AddTeamProjectBySlug now take them by value
        instead of by pointer; AddTeamMembershipRequest.Role and
        AddTeamRepoRequest.Permission are now *string.
      • refactor!: Pass the secret scanning body types by value and rename
        them to ...Request
        (#​4548)
        SecretScanningAlertUpdateOptions and
        SecretScanningPatternConfigsUpdateOptions are renamed to
        UpdateSecretScanningAlertRequest and
        UpdateSecretScanningPatternConfigsRequest;
        SecretScanningService.UpdateAlert, UpdatePatternConfigsForEnterprise
        and UpdatePatternConfigsForOrg now take them by value;
        UpdateSecretScanningAlertRequest.State is now *string.
      • fix!: Match request body fields to the OpenAPI schemas
        (#​4581)
        Many required request body fields are now passed by
        value.
      • fix!: Send credentials only to configured origins
        (#​4564)
        Credentials are sent only to a client's configured API
        and upload origins — every other destination, including a redirect hop,
        goes out unauthenticated. A request body aimed outside those origins is
        refused. BasicAuthTransport and UnauthenticatedRateLimitedTransport
        gained AllowedOrigins, which GitHub Enterprise users must set.
      • refactor!: Pass org invitation requests by value
        (#​4551)
        OrganizationsService.CreateOrgInvitation now takes
        CreateOrgInvitationRequest (by value);
        CreateOrgInvitationRequest.TeamID is now TeamIDs.
  28. github-actions
    closed this as completedon Oct 28, 2026
  29. github-actions
    added
    train:done
    and removed
    train:open
    on Oct 28, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    traintrain:done

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions