Skip to content

Conversation

@stainless-app
Copy link
Contributor

@stainless-app stainless-app bot commented Aug 22, 2025

Automated Release PR

5.0.0 (2025-11-06)

Full Changelog: v4.3.1...v5.0.0

Features

  • chore(abuse): rename path parameter (dd0b6fb)
  • docs: WC-4152 Expose subdomain delete for workers (fd04baa)
  • docs(zero_trust_gateway_policy): add /rules/tenants endpoint to Gateway API docs (3c18fd3)
  • feat: add connectivity directory service APIs to openapi.stainless.yml (fc06837)
  • feat: Add token validation to stainless config (a1ddf7e)
  • feat: SDKs for Organizations and OrganizationsProfile (3c3adc5)
  • feat(abuse_reports): Expose new abuse report endpoints. GET and LIST. (b0fc29f)
  • feat(api): add mcp portals endpoints (70e068e)
  • feat(iam): Add SSO Connectors resource to SDKs (77960c9)
  • feat(mcp_portals): enable sdks generation (6965762)
  • feat(radar): add new group by dimension endpoints; deprecate to_markdown endpoint (845fba2)
  • fix: Correctly reflect schema validation model <-> openapi mapping (01fb118)
  • fix: move wvpc (c357dad)
  • fix(ai_controls): incorrect use of standalone_api (ebcb1d6)
  • fix(content_scanning): content scanning terraform resource (16983e5)

Chores

  • api: update composite API spec (7e1d8b7)
  • api: update composite API spec (2cc2a3f)
  • api: update composite API spec (2cb9ef9)
  • api: update composite API spec (7199aa3)
  • api: update composite API spec (46ce19f)
  • api: update composite API spec (4900594)
  • api: update composite API spec (a009bd0)
  • api: update composite API spec (b07f0d6)
  • api: update composite API spec (353e11e)
  • api: update composite API spec (b7c4b43)
  • api: update composite API spec (b8d1c66)
  • api: update composite API spec (93e3971)
  • api: update composite API spec (3d5d0e0)
  • api: update composite API spec (35670b1)
  • api: update composite API spec (5fdf07b)
  • api: update composite API spec (2319591)
  • api: update composite API spec (3b70a95)
  • api: update composite API spec (ea49058)
  • api: update composite API spec (6734e9b)
  • api: update composite API spec (5f5caef)
  • api: update composite API spec (5d19869)
  • api: update composite API spec (541c9fb)
  • api: update composite API spec (ba5b5fc)
  • api: update composite API spec (7baa51c)
  • api: update composite API spec (53d59f4)
  • api: update composite API spec (25d603f)
  • api: update composite API spec (9fd6645)
  • api: update composite API spec (19d1d96)
  • api: update composite API spec (f9160a4)
  • api: update composite API spec (c686a51)
  • api: update composite API spec (412ed20)
  • api: update composite API spec (119f889)
  • api: update composite API spec (65382bf)
  • api: update composite API spec (b3a3cf6)
  • api: update composite API spec (c78ef5e)
  • api: update composite API spec (71a023c)
  • api: update composite API spec (3805db3)
  • api: update composite API spec (c882cba)
  • api: update composite API spec (06eb2a6)
  • api: update composite API spec (10c56f8)
  • api: update composite API spec (e0335d9)
  • api: update composite API spec (1cf726b)

This pull request is managed by Stainless's GitHub App.

The semver version number is based on included commit messages. Alternatively, you can manually set the version number in the title of this pull request.

For a better experience, it is recommended to use either rebase-merge or squash-merge when merging this pull request.

🔗 Stainless website
📚 Read the docs
🙋 Reach out for help or questions

Comment on lines +10 to +42
runs-on: 'ubuntu-latest'
name: detect-breaking-changes
if: github.repository == 'cloudflare/cloudflare-python'
steps:
- name: Calculate fetch-depth
run: |
echo "FETCH_DEPTH=$(expr ${{ github.event.pull_request.commits }} + 1)" >> $GITHUB_ENV

- uses: actions/checkout@v4
with:
# Ensure we can check out the pull request base in the script below.
fetch-depth: ${{ env.FETCH_DEPTH }}

- name: Install Rye
run: |
curl -sSf https://rye.astral.sh/get | bash
echo "$HOME/.rye/shims" >> $GITHUB_PATH
env:
RYE_VERSION: '0.44.0'
RYE_INSTALL_OPTION: '--yes'
- name: Install dependencies
run: |
rye sync --all-features
- name: Detect removed symbols
run: |
rye run python scripts/detect-breaking-changes.py "${{ github.event.pull_request.base.sha }}"

- name: Detect breaking changes
run: |
# Try to check out previous versions of the breaking change detection script. This ensures that
# we still detect breaking changes when entire files and their tests are removed.
git checkout "${{ github.event.pull_request.base.sha }}" -- ./scripts/detect-breaking-changes 2>/dev/null || true
./scripts/detect-breaking-changes ${{ github.event.pull_request.base.sha }} No newline at end of file

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}

Copilot Autofix

AI 3 months ago

To fix this issue, we should explicitly set minimal required permissions for the workflow/job by adding a permissions block. The simplest and safest starting point is to set contents: read at the workflow level, as the steps only clone/checkout code and do not perform any write operations on issues, deployments, etc. This should be placed at the top level of the YAML file (directly below the name: or on: block) so all jobs inherit these permissions, unless overridden. No additional functionality is added or changed; this only restricts the escalated permissions that the workflow's GitHub token might inherit.


Suggested changeset 1
.github/workflows/detect-breaking-changes.yml

Autofix patch

Autofix patch
Run the following command in your local git repository to apply this patch
cat << 'EOF' | git apply
diff --git a/.github/workflows/detect-breaking-changes.yml b/.github/workflows/detect-breaking-changes.yml
--- a/.github/workflows/detect-breaking-changes.yml
+++ b/.github/workflows/detect-breaking-changes.yml
@@ -1,3 +1,5 @@
+permissions:
+  contents: read
 name: CI
 on:
   pull_request:
EOF
@@ -1,3 +1,5 @@
permissions:
contents: read
name: CI
on:
pull_request:
Copilot is powered by AI and may make mistakes. Always verify output.
@stainless-app stainless-app bot force-pushed the release-please--branches--main--changes--next branch 28 times, most recently from 614af0d to 80f56db Compare August 26, 2025 11:28
@stainless-app stainless-app bot force-pushed the release-please--branches--main--changes--next branch from a6fc0c6 to 3a0a9f6 Compare November 5, 2025 18:13
@stainless-app stainless-app bot force-pushed the release-please--branches--main--changes--next branch from 3a0a9f6 to 609c319 Compare November 5, 2025 18:40
@stainless-app stainless-app bot force-pushed the release-please--branches--main--changes--next branch from 609c319 to 734e153 Compare November 5, 2025 18:54
@stainless-app stainless-app bot force-pushed the release-please--branches--main--changes--next branch from 734e153 to 0813774 Compare November 5, 2025 19:40
@stainless-app stainless-app bot force-pushed the release-please--branches--main--changes--next branch from 0813774 to b132e92 Compare November 5, 2025 19:59
@stainless-app stainless-app bot force-pushed the release-please--branches--main--changes--next branch from b132e92 to 86b351f Compare November 5, 2025 20:07
@stainless-app stainless-app bot force-pushed the release-please--branches--main--changes--next branch from 86b351f to b4f9469 Compare November 5, 2025 20:50
@stainless-app stainless-app bot force-pushed the release-please--branches--main--changes--next branch from b4f9469 to ffa5498 Compare November 5, 2025 21:01
@stainless-app stainless-app bot force-pushed the release-please--branches--main--changes--next branch from ffa5498 to 739cbd2 Compare November 5, 2025 21:47
@stainless-app stainless-app bot force-pushed the release-please--branches--main--changes--next branch from 739cbd2 to c929886 Compare November 5, 2025 21:57
@stainless-app stainless-app bot force-pushed the release-please--branches--main--changes--next branch from c929886 to b42cd17 Compare November 5, 2025 22:48
@stainless-app stainless-app bot force-pushed the release-please--branches--main--changes--next branch from b42cd17 to 1acd0b5 Compare November 5, 2025 22:59
@stainless-app stainless-app bot force-pushed the release-please--branches--main--changes--next branch from 1acd0b5 to 380430c Compare November 5, 2025 23:58
@stainless-app stainless-app bot force-pushed the release-please--branches--main--changes--next branch from 380430c to 8192067 Compare November 6, 2025 02:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants