fix(plugin-security)!: evaluate the insert-side RLS check on the row that will be stored, after beforeInsert
#7211
os-trumppartof-closing-keyword-guard.yml
on: pull_request
Part-of PR must not also close its card
21s
Annotations
5 errors
|
Part-of PR must not also close its card
Process completed with exit code 1.
|
|
Part-of PR must not also close its card
commit `cd09d3b99` ("chore: record the new pinned doubles and drop the tracker id from a r…") carries `Refs #16608` in its message. This repo squash-merges, so every commit message on this PR is concatenated into the one message that lands on the default branch — a text no one writes and no one reviews, which carries every trailer its inputs carried and can contradict itself where its parts did not. The trailer is also live on its own. The contract is written down in the agent rules at .claude/agents/os-dev.md — 「PR 正文与 commit message 分开解析:卡片关系只在正文声明一次,commit ⛔ 不带卡片 trailer。」 (The PR body and the commit messages are parsed separately: the card relation is declared ONCE, in the body, and a commit carries no card trailer.) Remedy, while this branch is still UNPUSHED: reword this commit message so the relation is stated only in the PR body. ⛔ Do NOT amend, rebase or force-push to remove it — rewriting pushed history is forbidden here; on an already-pushed branch nothing removes it, and the summary below is what to do about that.
|
|
Part-of PR must not also close its card
commit `787e278b2` ("chore: satisfy the gate families the #16608 diff derives") carries `Refs #16608` in its message. This repo squash-merges, so every commit message on this PR is concatenated into the one message that lands on the default branch — a text no one writes and no one reviews, which carries every trailer its inputs carried and can contradict itself where its parts did not. The trailer is also live on its own. The contract is written down in the agent rules at .claude/agents/os-dev.md — 「PR 正文与 commit message 分开解析:卡片关系只在正文声明一次,commit ⛔ 不带卡片 trailer。」 (The PR body and the commit messages are parsed separately: the card relation is declared ONCE, in the body, and a commit carries no card trailer.) Remedy, while this branch is still UNPUSHED: reword this commit message so the relation is stated only in the PR body. ⛔ Do NOT amend, rebase or force-push to remove it — rewriting pushed history is forbidden here; on an already-pushed branch nothing removes it, and the summary below is what to do about that.
|
|
Part-of PR must not also close its card
commit `9f8402f64` ("test(plugin-security): engine doubles honour the insert post-image seam") carries `Refs #16608` in its message. This repo squash-merges, so every commit message on this PR is concatenated into the one message that lands on the default branch — a text no one writes and no one reviews, which carries every trailer its inputs carried and can contradict itself where its parts did not. The trailer is also live on its own. The contract is written down in the agent rules at .claude/agents/os-dev.md — 「PR 正文与 commit message 分开解析:卡片关系只在正文声明一次,commit ⛔ 不带卡片 trailer。」 (The PR body and the commit messages are parsed separately: the card relation is declared ONCE, in the body, and a commit carries no card trailer.) Remedy, while this branch is still UNPUSHED: reword this commit message so the relation is stated only in the PR body. ⛔ Do NOT amend, rebase or force-push to remove it — rewriting pushed history is forbidden here; on an already-pushed branch nothing removes it, and the summary below is what to do about that.
|
|
Part-of PR must not also close its card
commit `674914d0d` ("fix(plugin-security): evaluate the insert RLS check on the row that w…") carries `Refs #16608` in its message. This repo squash-merges, so every commit message on this PR is concatenated into the one message that lands on the default branch — a text no one writes and no one reviews, which carries every trailer its inputs carried and can contradict itself where its parts did not. The trailer is also live on its own. The contract is written down in the agent rules at .claude/agents/os-dev.md — 「PR 正文与 commit message 分开解析:卡片关系只在正文声明一次,commit ⛔ 不带卡片 trailer。」 (The PR body and the commit messages are parsed separately: the card relation is declared ONCE, in the body, and a commit carries no card trailer.) Remedy, while this branch is still UNPUSHED: reword this commit message so the relation is stated only in the PR body. ⛔ Do NOT amend, rebase or force-push to remove it — rewriting pushed history is forbidden here; on an already-pushed branch nothing removes it, and the summary below is what to do about that.
|