Skip to content

accelerate-v0.6.127

accelerate-v0.6.127: [AI-1641] Plugin paths refuse a plugin beside Nessy (#1158)
@kanat kanat tagged this 22 Oct 20:45 
* fix(router): refuse a plugin named beside a sensitive connector

The deprecated plugin paths named a plugin on a config without the
sensitive-connector check that create, update, patch and sync run: a
client set with user, and the app's OAuth login of a catalog plugin
(store.AddConfigPlugin, reached only from the login callback). Both now
run sensitiveBindingsComplaint on the config as it would be stored and
answer the same 400. The callback refuses before exchanging the code, so
no token is stored, and marks the login failed.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* docs(changelog): plugin paths refuse a plugin beside a sensitive connector

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* docs(changelog): cite #1158

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* AI-1641: Drop the ledger path from plugins_test comments

The four control-probe comments cited a ledger file that is not in the repo.
The base sha and the observed statuses stay.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Assets 2
Loading