mirror of
https://github.com/fabro-sh/fabro.git
synced 2026-10-08 03:10:26 +00:00
- Add `additional_repositories` to the RunIntegrationsGithubSettings OpenAPI schema and reuse the canonical Rust settings types through `with_replacement`, with type-identity witnesses and JSON parity tests for populated and empty repository sets. - Regenerate the TypeScript API client. - Document the feature in the GitHub integration and run-configuration guides: exact layer replacement rules, single-token scope, gh/API support, App-versus-PAT scope, the same-owner/same-installation requirement, validation errors, supported Git URL forms, hard-failure semantics for declared repositories, GH_TOKEN precedence, and the security boundary (no second server-side repository intersection; contents = "write" lets any stage push to any declared repository). Correct the earlier claim that injecting GITHUB_TOKEN alone makes arbitrary additional private clones work. - Add a dated changelog entry and an opt-in live GitHub App e2e test that verifies a scoped multi-repository token reads every declared repository (and that a primary-only token cannot), with repositories supplied through the test environment. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| build-support | ||
| fabro-api | ||
| fabro-auth | ||
| fabro-client | ||
| fabro-config | ||
| fabro-core | ||
| fabro-db | ||
| fabro-dev | ||
| fabro-http | ||
| fabro-macros | ||
| fabro-model | ||
| fabro-oauth | ||
| fabro-options-metadata | ||
| fabro-proc | ||
| fabro-redact | ||
| fabro-static | ||
| fabro-telemetry | ||
| fabro-template | ||
| fabro-test | ||
| fabro-types | ||
| fabro-util | ||
| fabro-vault | ||