Changes in v2.3.26
🐛 Bug Fixes
- fix(fork_repository): return empty project_id as isError with Next: hint #1031
📝 Documentation
- docs: document execute_graphql allowlist refusal and split GHSA IDs #998
🔒 Security
- Harden
execute_graphqlmutation detection in modify mode against comma-separated and decorated operation headers. GraphQL documents that cannot be parsed are now rejected by the read-only and modify-mode guards. (GHSA-582m-wh92-4vhr)
Contributors
⚠️ Deprecation notice
Deprecated configuration options (e.g. GITLAB_READ_ONLY_MODE, USE_GITLAB_WIKI, and other legacy flags) still work during the grace period, but they will be removed in v3.0.0. Please migrate to the replacements described in the pinned issue #815.