Skip to content
PR Automation

fix(metadata-protocol)!: refuse a $searchFields entry naming a secret / password field at the data door #39480

Sign in to view logs

fix(metadata-protocol)!: refuse a $searchFields entry naming a secret / password field at the data door

fix(metadata-protocol)!: refuse a $searchFields entry naming a secret / password field at the data door #39480

Triggered via pull request October 30, 2026 04:33
@objectstack-fleetobjectstack-fleet[bot]
opened #27936
claude/issue-27829-searchfields-credential-refused
Status Success
Total duration 1m 31s
Artifacts –

pr-automation.yml

on: pull_request
Check PR Size
24s
Check PR Size
Check Changeset
1m 28s
Check Changeset
Auto Label
18s
Auto Label
Fit to window
Zoom out
Zoom in

Annotations

4 notices
Check PR Size
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Auto Label
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Check Changeset: .changeset/27829-search-fields-credential-refused.md#L0
ADR-0087 exemption (no-migration-prescription): No key of any schema is added, removed, renamed or re-shaped, and no export or type changes: a query value naming a credential field is refused where the engine silently dropped it. The fix for a caller is to search another field, which the refusal says; there is nothing for a migration to rewrite and no tombstone.
Check Changeset
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"