Webhook Automation Service v0.10.3
This patch release makes the Receiver schema reflect the authenticated project's actual write permissions. Owners and members retain create/delete capabilities; restricted and read-only roles receive read-only Receiver methods, matching the existing API enforcement. Schema responses are private and non-cacheable so a writable capability response cannot be reused for another role.
The change covers both /v1-webhooks/schemas and /v1-webhooks/schemas/receiver without changing Receiver data, credentials, routes, or project isolation. Regression tests check both endpoints, mixed roles, and concurrent requests against a shared schema.
Merged source: fbcc0ca.
Linux archive SHA-256: 6babbc18cee9a192009cfadcd143e6b9a5f2b550c4dc419781f3e3657caa022a.
Security release gate passed on the merged commit, including deterministic packaging, race/integration tests, binary vulnerability analysis, and source/artifact scans. Server 8080 UI acceptance is a separate integration gate.