Repository navigation
Preserve completed access review history and release 0.20.6 - #90
Merged
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Completed provider access reviews became falsely incomplete after a provider retired or previously reviewed access was revoked. Keep the original committed review population and dated authorization, then separately check current scope, active access and required resolution proof.
The same assessment now serves readiness and recurring completion with shared history caching. It also covers disabled or departed identities, partial permission removal, changed authority or provider, supporting records committed separately, and Git-index recovery. New providers and grants, active orphan access, stale identity reviews, expired exceptions and invalid removal proof remain actionable.
Coordinated patch release: 0.20.6, with no model migration.
Validation: Node 24 full repository validation; 23 focused baseline tests; fresh consumer smoke test against the local package; both package dry runs; npm audit; private-source and secret-pattern scans; real-browser historical-completion and new-provider checks, with no browser errors. All checks passed.
PR validation passed all five required checks. Publication passed validation, package inspection, trusted publishing, both npm publishes and the installed README setup test. Both packages are npm latest at 0.20.6, and their SLSA provenance names the release tag and exact merged commit.
Release points to
60e412103453feeba0a23a61314254bbe069eac1; its Git tree matches the reviewed and locally validated PR head.