Skip to content

2.8.8 Release - #2054

Merged
david-rocca merged 10 commits into
stagingfrom
dev
Oct 14, 2026
Merged

david-rocca merged 10 commits into
stagingfrom
dev

Conversation

@david-rocca

Copy link
Copy Markdown
Collaborator

No description provided.

David T Rocca and others added 10 commits October 5, 2026 14:54
Bumps [proxy-addr](https://github.com/jshttp/proxy-addr) from 2.0.7 to 2.0.8.
- [Release notes](https://github.com/jshttp/proxy-addr/releases)
- [Changelog](https://github.com/jshttp/proxy-addr/blob/master/HISTORY.md)
- [Commits](jshttp/proxy-addr@v2.0.7...v2.0.8)

---
updated-dependencies:
- dependency-name: proxy-addr
  dependency-version: 2.0.8
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Change advisory_locations from an array of strings to a single
free-text string in the organization model and registry request
and response schemas.

Add a migration that joins existing organization and review-object
arrays with newlines. Preserve existing strings, nulls, and absent
fields, and support repeated migration runs. Leave rollback as a
no-op because original array boundaries cannot be recovered safely.

Update Monday imports, seed data, and Postman request fixtures to
use string values. Remove advisory_locations from the repository's
empty-array defaults and adapt the CNA-list formatter to split
newline-separated locations into advisory entries.

Update existing tests and add integration coverage for migration
edge cases, free-text creation and updates, detail and list responses,
and rejection of array inputs. Include required CNA quotas in the
new fixtures and response bodies in status assertion failures.

Bump package, lockfile, Swagger, and OpenAPI versions to 2.8.8.
Support free-text advisory locations and bump version to 2.8.8
…y-addr-2.0.8

Bump proxy-addr from 2.0.7 to 2.0.8
Cleaning up some disabled flag issues
@david-rocca
david-rocca merged commit a1cf026 into staging Oct 14, 2026
12 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant