Skip to content

fix(web-security): bump to 1.6.0 to unblock dev capability sync - #117

Merged
rdheekonda merged 1 commit into
mainfrom
fix/web-security-version-bump
Aug 12, 2026
Merged

fix(web-security): bump to 1.6.0 to unblock dev capability sync#117
rdheekonda merged 1 commit into
mainfrom
fix/web-security-version-bump

Conversation

@rdheekonda

Copy link
Copy Markdown
Contributor

What

Bump web-security capability version 1.5.0 -> 1.6.0.

Why

The Sync Capabilities workflow (run 31614567028) failed on the Sync to dev job:

✗ web-security: Client error '400 Bad Request' for url
  'https://dev.app.dreadnode.io/api/v1/dreadnode/web-security/manifests/1.5.0'
Synced 26: 1 uploaded, 24 skipped, 1 failed

Root cause: three content changes landed on web-security after the last version bump (d6919a6, which set 1.5.0) without bumping the version:

Dev already has an immutable 1.5.0 stored, so re-publishing 1.5.0 with different content is rejected (400). Staging/prod succeeded only because they hadn't stored 1.5.0 yet — leaving envs inconsistent.

Bumping to 1.6.0 publishes a fresh immutable version cleanly across dev/staging/prod. Minor bump because a new skill (feature) was added.

Test plan

  • Re-run Sync Capabilities on merge; web-security uploads to dev/staging/prod without 400
  • Create capability releases tags capability/web-security/v1.6.0

Three content changes landed on web-security since the 1.5.0 bump without a
version bump: response-queue-poisoning skill (#116), tool-agnostic preflight
guidance, and the pdtm preflight guard (CAP-1174). Re-publishing 1.5.0 with
changed content 400s against dev (which already has 1.5.0 stored), failing
the Sync Capabilities workflow. Bump to 1.6.0 so a fresh immutable version
publishes cleanly across dev/staging/prod.
@rdheekonda
rdheekonda merged commit d20fbdf into main Aug 12, 2026
5 checks passed
@rdheekonda
rdheekonda deleted the fix/web-security-version-bump branch August 12, 2026 16:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant