Repository navigation
fix(security): the single-posture platform-admin grant is owned by the Default Organization, and every reader of platform standing reads it #34741
pr-automation.yml
on: pull_request
Check PR Size
0s
Check Changeset
1m 30s
Auto Label
0s
Annotations
2 notices
|
Check Changeset:
.changeset/11979-default-org-admin-grant.md#L0
ADR-0087 exemption (no-migration-prescription): No spec key, export, option, error code or stored shape is added, removed or renamed: the new resolver and guard helpers and the guard's organization standing-key list are module-private, and `bootstrapPlatformAdmin`'s `reason` was already a string. The only stored-shape move — an organization-less `admin_full_access` grant becoming the Default Organization's — is ADR-0131 D10's ceremony (`os migrate organization-ownership --apply`), so there is nothing for `objectstack migrate meta` to rewrite. The other categories are closed on facts: the packages publish (not unpublished); no ADR-0087 id is named or touched (not registered or already-registered); no Zod schema in packages/spec changes (not runtime-interface-only or type-surface-only in the spec sense); and nothing exported is removed (not runtime-export-retired).
|
|
Check Changeset
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
|