Skip to content

chore(docs): update of OEL changelog#2532

Merged
adamwalach merged 2 commits into
masterfrom
oel-changelog-update
Apr 29, 2026
Merged

chore(docs): update of OEL changelog#2532
adamwalach merged 2 commits into
masterfrom
oel-changelog-update

Conversation

@ory-bot
Copy link
Copy Markdown
Collaborator

@ory-bot ory-bot commented Apr 28, 2026

Update OEL changelog

Summary by CodeRabbit

  • Bug Fixes
    • SSRF protection: Error messages across Keto, Kratos, and Oathkeeper no longer leak internal IP addresses when hostnames resolve to internal IPs.
    • CockroachDB: Resolved 409 Conflict errors on fresh installations during initial JWKS requests after migrations.
  • Performance Improvements
    • OAuth2: Added indexes on token tables to enhance consent session revocation efficiency.

@coderabbitai
Copy link
Copy Markdown

coderabbitai Bot commented Apr 28, 2026

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 43692c3e-8d36-48fe-a418-27ca6176443b

📥 Commits

Reviewing files that changed from the base of the PR and between 247b8a2 and e6b284f.

📒 Files selected for processing (6)
  • docs/self-hosted/oel/keto/changelog/v26.2.8.md
  • docs/self-hosted/oel/kratos/changelog/v26.2.8.md
  • docs/self-hosted/oel/oathkeeper/changelog/v26.2.8.md
  • docs/self-hosted/oel/oauth2/changelog/v26.2.7.md
  • docs/self-hosted/oel/oauth2/changelog/v26.2.8.md
  • docs/self-hosted/oel/polis/changelog/v26.2.8.md
✅ Files skipped from review due to trivial changes (6)
  • docs/self-hosted/oel/kratos/changelog/v26.2.8.md
  • docs/self-hosted/oel/oathkeeper/changelog/v26.2.8.md
  • docs/self-hosted/oel/polis/changelog/v26.2.8.md
  • docs/self-hosted/oel/keto/changelog/v26.2.8.md
  • docs/self-hosted/oel/oauth2/changelog/v26.2.8.md
  • docs/self-hosted/oel/oauth2/changelog/v26.2.7.md

📝 Walkthrough

Walkthrough

Documentation changelog entries added for v26.2.8 across multiple OEL projects (keto, kratos, oathkeeper, oauth2, polis) describing SSRF protection changes that stop IP disclosure in error messages; oauth2 also documents a CockroachDB migration fix. oauth2 v26.2.7 changelog was updated with composite index additions for Hydra token tables.

Changes

Cohort / File(s) Summary
SSRF Protection Changelog Updates
docs/self-hosted/oel/keto/changelog/v26.2.8.md, docs/self-hosted/oel/kratos/changelog/v26.2.8.md, docs/self-hosted/oel/oathkeeper/changelog/v26.2.8.md
Add v26.2.8 changelog entries: SSRF protection errors no longer reveal IP addresses when hostnames resolve to internal IPs.
OAuth2 Changelog (v26.2.8)
docs/self-hosted/oel/oauth2/changelog/v26.2.8.md
Add v26.2.8 changelog documenting two fixes: CockroachDB migration handling to avoid 409 Conflict on initial /.well-known/jwks.json by dropping phantom indexes; and SSRF error-message IP suppression.
Polis Changelog Placeholder
docs/self-hosted/oel/polis/changelog/v26.2.8.md
Add placeholder stating no changelog entries for polis/oel in v26.2.8.
OAuth2 Changelog (v26.2.7) Update
docs/self-hosted/oel/oauth2/changelog/v26.2.7.md
Replace placeholder with v26.2.7 changelog: add composite indexes on Hydra token tables (hydra_oauth2_access, hydra_oauth2_refresh) and note online index creation on CockroachDB/Postgres to avoid blocking token operations.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Suggested reviewers

  • vinckr
  • aeneasr
  • unatasha8
  • deepakprabhakara

Poem

🐰 I hopped through changelogs late at night,

Hid IPs from prying sight,
Cockroach ghosts gave up their tricks,
Tokens indexed with clever picks,
Version bumps make systems bright. ✨

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Title check ✅ Passed The title accurately describes the main change: updating OEL changelog files with v26.2.8 release documentation entries across multiple products.
Description check ✅ Passed The description is minimal but appropriate for a documentation-only change. It accurately conveys the purpose without being vague or misleading.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch oel-changelog-update

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share
Review rate limit: 0/1 reviews remaining, refill in 60 minutes.

Comment @coderabbitai help to get the list of available commands and usage tips.

Copy link
Copy Markdown

@coderabbitai coderabbitai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🧹 Nitpick comments (1)
docs/self-hosted/oel/oauth2/changelog/v26.2.8.md (1)

8-8: Minor phrasing polish on Line 8.

Consider changing “prevented OAuth token verification by relying parties” to “prevented OAuth token verification for relying parties” for clearer wording.

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@docs/self-hosted/oel/oauth2/changelog/v26.2.8.md` at line 8, Minor phrasing
issue: change the sentence fragment that currently reads "prevented OAuth token
verification by relying parties" to "prevented OAuth token verification for
relying parties" to improve clarity; locate the line containing the exact phrase
"prevented OAuth token verification by relying parties" and update it to use
"for" instead of "by" while preserving surrounding punctuation and
capitalization.
🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@docs/self-hosted/oel/polis/changelog/v26.2.8.md`:
- Line 1: Replace the plural "versions" with singular "version" in the exact
string "No changelog entries found for polis/oel in versions v26.2.8" so it
reads "No changelog entries found for polis/oel in version v26.2.8"; update that
literal in the changelog content to maintain grammatical consistency.

---

Nitpick comments:
In `@docs/self-hosted/oel/oauth2/changelog/v26.2.8.md`:
- Line 8: Minor phrasing issue: change the sentence fragment that currently
reads "prevented OAuth token verification by relying parties" to "prevented
OAuth token verification for relying parties" to improve clarity; locate the
line containing the exact phrase "prevented OAuth token verification by relying
parties" and update it to use "for" instead of "by" while preserving surrounding
punctuation and capitalization.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 7dcc1e6b-1f1a-4636-8796-c7f2e6caa2b8

📥 Commits

Reviewing files that changed from the base of the PR and between 8134465 and 247b8a2.

📒 Files selected for processing (5)
  • docs/self-hosted/oel/keto/changelog/v26.2.8.md
  • docs/self-hosted/oel/kratos/changelog/v26.2.8.md
  • docs/self-hosted/oel/oathkeeper/changelog/v26.2.8.md
  • docs/self-hosted/oel/oauth2/changelog/v26.2.8.md
  • docs/self-hosted/oel/polis/changelog/v26.2.8.md

Comment thread docs/self-hosted/oel/polis/changelog/v26.2.8.md
@adamwalach adamwalach enabled auto-merge (squash) April 29, 2026 12:17
@adamwalach adamwalach merged commit ff73b9a into master Apr 29, 2026
10 checks passed
@adamwalach adamwalach deleted the oel-changelog-update branch April 29, 2026 12:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants