@beacon-build/sdk 1.46.2 → 1.46.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +9 -0
- package/package.json +2 -2
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,14 @@
|
|
|
1
1
|
# @beacon-build/sdk Changelog
|
|
2
2
|
|
|
3
|
+
## 1.46.3
|
|
4
|
+
|
|
5
|
+
### Patch Changes
|
|
6
|
+
|
|
7
|
+
- b2d7d4a: B499: narrow the GitHub proxy mounts to vendor-only and refuse write verbs. Both /api/github/_ and /api/v1/github/_ forward under the server GitHub PAT with a caller-chosen path, so any portal admin of any org could drive that token against any reachable repository. The audience drops from admin+vendor to vendor, and the proxy now forwards read verbs (GET/HEAD) only — the SDK's proxy() method type is narrowed to match.
|
|
8
|
+
- Updated dependencies [c0cb4db]
|
|
9
|
+
- Updated dependencies [8fc450d]
|
|
10
|
+
- @beacon-build/core@1.46.3
|
|
11
|
+
|
|
3
12
|
## 1.46.2
|
|
4
13
|
|
|
5
14
|
### Patch Changes
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@beacon-build/sdk",
|
|
3
|
-
"version": "1.46.
|
|
3
|
+
"version": "1.46.3",
|
|
4
4
|
"type": "module",
|
|
5
5
|
"main": "dist/index.js",
|
|
6
6
|
"types": "dist/index.d.ts",
|
|
@@ -26,7 +26,7 @@
|
|
|
26
26
|
"@types/react": "^19.2.0",
|
|
27
27
|
"@types/react-dom": "^19.2.0",
|
|
28
28
|
"event-source-polyfill": "^1.0.31",
|
|
29
|
-
"@beacon-build/core": "1.46.
|
|
29
|
+
"@beacon-build/core": "1.46.3"
|
|
30
30
|
},
|
|
31
31
|
"devDependencies": {
|
|
32
32
|
"@testing-library/react": "^16.3.2",
|