Skip to content

Webhook Automation Service v0.10.2

Choose a tag to compare

View all tags
@chen21019 chen21019 released this 27 Sep 04:36
v0.10.2
7e8bdcd
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Webhook Automation Service v0.10.2

This release closes project and object-type authorization gaps in webhook receiver management and execution:

  • A project-scoped management request must carry the matching trusted control-plane project header.
  • Read-only roles are enforced when the trusted role header contains multiple roles.
  • Receiver list, lookup, delete, name checks, and key or signed-JWT execution accept only webhookReceiver objects.
  • Regression tests cover cross-project access, unrelated generic-object kinds, and valid receiver execution.

The release was built from merged commit 7e8bdcd4b6b9456116a4b2e2c9c40e501b456366. The Linux security-release gate completed successfully, including unit and integration tests, deterministic packaging, vulnerability analysis, and artifact scans. This component release alone does not claim Server 8080 deployment or browser acceptance; those are separate Server integration gates.

Assets 6
Loading