Skip to content

release: To Prod#1516

Merged
suisuss merged 2 commits into
prodfrom
staging
Jun 11, 2026
Merged

release: To Prod#1516
suisuss merged 2 commits into
prodfrom
staging

Conversation

@suisuss

@suisuss suisuss commented Jun 11, 2026

Copy link
Copy Markdown

No description provided.

suisuss added 2 commits June 11, 2026 20:09
Connection (integration) pickers and runtime credential fetches were not
consistently org-scoped, letting a workflow list, bind, and execute another
org's database connection, and silently rebinding a pinned connection when the
editor was opened.

- getIntegrations: constrain the no-org personal fallback to organizationId IS
  NULL and order deterministically, so the picker never lists cross-org
  connections and the first row is stable.
- integration-selector: only auto-select when no connection is set; warn
  instead of silently rebinding a connection that is missing from the list
  (which autosaved and could repoint a running workflow).
- credential-fetcher: require an org principal so every plugin step fails
  closed on a cross-org integration id; thread it through all plugin steps.
- store: surface autosave failures instead of swallowing them.
- add a read-only audit script that reports workflows bound to out-of-org
  connections.
…ow-connections

fix: org-scope workflow database connections
@suisuss suisuss merged commit 95d0786 into prod Jun 11, 2026
25 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant