Skip to content

v1.6.6 — Hotfix: SeedRunner converters version bump

Choose a tag to compare

@clem-field clem-field released this 19 May 23:40

v1.6.6 — Hotfix: SeedRunner converters version bump

Two-line hotfix for a deploy-time bug introduced in v1.6.5 (#495).

🐛 Fix

v1.6.5 deploys did not create the new aws_config_to_nist Converter.

db/seeds.rb wraps each seed section in SeedRunner.run_section(name), which compares the requested version against seed_sections.version for that name and skips on match. v1.6.5 extended db/seeds/converters.rb with two new sections (aws_config_to_nist + the refactored aws_security_hub_to_nist) but did not bump SeedRunner::CURRENT_VERSIONS["converters"]. Production deploys that ran v1.6.4 had seed_sections.converters = 1.2.0/completed, so v1.6.5 skipped the entire converters section. The new aws_config_to_nist Converter never appeared in /converters and the AwsLabsCdefImportService two-hop chain had nothing to chain to.

Fix:

  • lib/seed_runner.rbconverters 1.2.01.3.0
  • app/models/sparc_config.rbVERSION 1.6.51.6.6

Next deploy, SeedRunner detects the version mismatch and re-runs the converters section. The seed loader is idempotent (find_or_create_by + converter_entries.none? skip path), so the existing aws_security_hub_to_nist Converter is untouched.

Upgrade Notes

No env-var changes. No migrations. On deploy:

  1. bin/rails db:seed (runs automatically via bin/docker-entrypoint on web container start)
  2. After deploy, /converters shows both AWS Security Hub → NIST SP 800-53 rev5 and the new AWS Config Rule → NIST SP 800-53
  3. Refresh buttons on each converter's show page work as documented in v1.6.5

Testing

  • Full suite: 2 290 / 0 / 2 pending (unchanged from v1.6.5)
  • Verified end-to-end against dev DB by simulating the v1.6.5 prod state:
    • Before: seed_sections.converters = 1.2.0/completed
    • After bump + re-run: seed_sections.converters = 1.3.0/completed
    • aws_config_to_nist exists, aws_security_hub_to_nist exists

Full Changelog: v1.6.5...v1.6.6