Skip to content

fix(service-settings,cli): pick the data key file that opens the stored secrets, or refuse in production #42495

fix(service-settings,cli): pick the data key file that opens the stored secrets, or refuse in production

fix(service-settings,cli): pick the data key file that opens the stored secrets, or refuse in production #42495

Triggered via pull request November 4, 2026 12:55
Status Success
Total duration 1m 37s
Artifacts –

pr-automation.yml

on: pull_request
Fit to window
Zoom out
Zoom in

Annotations

4 notices
Check PR Size
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Auto Label
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Check Changeset: .changeset/30042-boot-picks-the-key-file-that-opens-its-secrets.md#L0
ADR-0087 exemption (no-migration-prescription): No key of any schema, export or stored row changes shape: the refusal is a boot posture over which key file opens existing ciphertext. No ciphertext is rewritten, so there is nothing at rest for a migration to move.
Check Changeset
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"