2 Commits

Include renames

Author	SHA1	Message	Date
Andras Bacsai	c75e7078b7	fix(access): restrict preview changes, rollbacks, and repo URL updates ... - Require the write permission and update policy to open a preview or change its pull request URL, git type, or docker tag via the API; deploy-only tokens can only redeploy an existing preview - Reject rollbacks to commits that are neither a listed rollback image nor a successful production deployment (GetRollbackImages::allows) - Validate git_repository with ValidGitRepositoryUrl when it changes on application update - Add RejectPublishedAppKey global middleware - Show a "still starting" message when the root setup window is pending - Document the new 403 responses and constraints in the OpenAPI spec - Add tests for the new checks	2026-11-08 17:26:34 +01:00
4 people	033f0c84da	v4.7 (#12478) ... Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com> Co-authored-by: peaklabs-dev <122374094+peaklabs-dev@users.noreply.github.com> Co-authored-by: Aditya Tripathi <aditya@climactic.co>	2026-11-06 14:25:02 +01:00