Repository navigation
v0.1.129
·
7 commits
to main
since this release
Immutable
release. Only release title and notes can be modified.
This release limits what a run started by someone without write access can do. On a public repo, that includes any outsider.
Important
A run whose triggering user has read or no access to the repo can now write only to the issue or pull request it was started on. Runs started by collaborators (triage and above) and runs with no triggering user (autofix, dispatch) are unchanged.
Security
| Area | What changed |
|---|---|
| Writes to other threads | A reader-triggered run can comment, reply to review comments, review, resolve threads and update the PR body only on its own issue or PR. It can edit only Pullfrog's comments there. It can add labels only to its own issue, never a PR, and it can't remove labels, open issues or open pull requests |
@pullfrog in an outsider's issue, PR or review |
Only an author allowed by the repo's Mentions setting turns the body into the run's prompt, with its --model, --effort and --notimeout flags. Anyone else's text is context, and the repo's own instructions run |
| Fork pushes | A push to the fork head of a collaborator's PR is re-reviewed at the lower of the PR author's and the pusher's roles |
All three are in 791864e.
Full Changelog: v0.1.128...v0.1.129