fix(security): Dependabot/CodeQL, appsettings split, SemVer tag align - #24
Merged
Merged
Conversation
Keep topology, plugin shape, and defaults in appsettings.json; environment-specific hosts, limits, CORS, and logging only in appsettings.Development.json and appsettings.Production.json.
- pin KubernetesClient 17.0.14 (GHSA-w7r3-mgwf-4mqq via Aspire) - bump admin postcss to 8.5.23 (multiple GHSA) - sanitize request path/correlation/tenant before logging (cs/log-forging) - stop logging SendGrid from-address details (cs/exposure-of-sensitive-information)
Match version.json to existing v0.2.0, standardize annotated tag messages and GitHub Release titles, document valid/invalid tag names.
|
Seems you are using me but didn't get OPENAI_API_KEY seted in Variables/Secrets for this repo. you could follow readme for more information |
This was referenced Aug 30, 2026
Development no longer defaults ConnectionStrings:Redis to localhost. Integration workflow forces empty Redis; multiplexer uses AbortOnConnectFail=false when Redis is configured.
|
Seems you are using me but didn't get OPENAI_API_KEY seted in Variables/Secrets for this repo. you could follow readme for more information |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Why a new PR?
PR #23 was already merged; later commits were pushed to
ci/semver-versioningafter merge and did not appear on that PR.Changes
appsettings.json; env-specific only in Development/Productionv0.2.0; tag/release naming documentedTest plan