v4.13.2
Buzz reference app hardening
- Keep the feedback tables inaccessible by default and route browser access through authenticated functions.
- Add a dedicated admin function and require an explicit
feedback_roles.role = 'admin'grant before feedback status can be changed. - Disable caching on the admin-status route so authorization and state changes are always evaluated live.
SDK compatibility
- Accept the typed SDK's camelCase
requireRolefunction configuration when normalizing deploy manifests, while retaining support for the wire-formatrequire_rolefield. - Add regression coverage for typed manifests and the Buzz feedback application's normal-user and admin authorization boundaries.
Full changelog: v4.13.1...v4.13.2