Skip to content

fix(server): authorize upstream's server.checkSecretSource RPC (red main) - #68

Merged
nckrtl merged 1 commit into
mainfrom
fix/main-rpc-allowlist
Nov 13, 2026
Merged

nckrtl merged 1 commit into
mainfrom
fix/main-rpc-allowlist

Conversation

@nckrtl

@nckrtl nckrtl commented Nov 13, 2026

Copy link
Copy Markdown
Owner

Main is red since the nightly upstream sync 415dd48 (2026-11-13): apps/server/src/wsMountedRpc.test.ts failed because upstream added the RPC server.checkSecretSource (pingdotgg#31723, "check a secret reference before saving it") and the fork's snapshot authorizedUpstreamWsRpcTags.json did not list it. The other test in that file already accepts it as an official upstream RPC.

Fix: add server.checkSecretSource to the snapshot. The test passes locally (2/2).

Main's Test Server 8 also failed once on an upstream Kiro replay test that timed out after 240 s (KiroReplayFixtures.integration.test.ts, provider_thread_resume/kiro); this PR's CI shows whether that repeats.

🤖 Generated with Claude Code

…the 2026-11-13 sync

The nightly sync (415dd48) brought upstream's new server.checkSecretSource
(pingdotgg#31723). The fork's snapshot of authorized upstream RPCs lacked it, so
wsMountedRpc.test.ts failed on main.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
@github-actions github-actions Bot added vouch:trusted Author is trusted by repo permissions or the VOUCHED list. size:XS labels Nov 13, 2026
@nckrtl
nckrtl merged commit 078774b into main Nov 13, 2026
31 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size:XS vouch:trusted Author is trusted by repo permissions or the VOUCHED list.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant