mirror of
https://github.com/fabro-sh/fabro.git
synced 2026-08-28 05:27:41 +00:00
84b75f29f1
- Add `additional_repositories` to the RunIntegrationsGithubSettings OpenAPI schema and reuse the canonical Rust settings types through `with_replacement`, with type-identity witnesses and JSON parity tests for populated and empty repository sets. - Regenerate the TypeScript API client. - Document the feature in the GitHub integration and run-configuration guides: exact layer replacement rules, single-token scope, gh/API support, App-versus-PAT scope, the same-owner/same-installation requirement, validation errors, supported Git URL forms, hard-failure semantics for declared repositories, GH_TOKEN precedence, and the security boundary (no second server-side repository intersection; contents = "write" lets any stage push to any declared repository). Correct the earlier claim that injecting GITHUB_TOKEN alone makes arbitrary additional private clones work. - Add a dated changelog entry and an opt-in live GitHub App e2e test that verifies a scoped multi-repository token reads every declared repository (and that a primary-only token cannot), with repositories supplied through the test environment. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| acknowledgements.mdx | ||
| architecture.mdx | ||
| cli.mdx | ||
| dot-language.mdx | ||
| run-directory.mdx | ||
| sdk.mdx | ||
| server-operations.mdx | ||
| shell-completions.mdx | ||
| user-configuration.mdx | ||
| verifying-releases.mdx | ||