From 5d3f80ecd41b8b74edd6f9647e50d6aaeb133f47 Mon Sep 17 00:00:00 2001 From: akostadinov-bot Date: Mon, 13 Jul 2026 20:51:44 +0000 Subject: [PATCH 1/2] Guard CircleCI behind manual approval [2.15] Add an approval gate to the build_and_test_docker workflow so CI does not auto-run on PRs from non-maintainers. A maintainer must click 'Approve' in CircleCI before jobs execute. Assisted-By: claude-opus-4-6 --- .circleci/config.yml | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/.circleci/config.yml b/.circleci/config.yml index 42f95f41..0a62c7c9 100644 --- a/.circleci/config.yml +++ b/.circleci/config.yml @@ -86,8 +86,14 @@ workflows: version: 2.1 build_and_test_docker: jobs: + - approve: + type: approval - build: + requires: + - approve matrix: parameters: postgresql_image: [ "circleci/postgres:10-alpine-ram", "cimg/postgres:12.15", "cimg/postgres:13.11" ] - - docker-build + - docker-build: + requires: + - approve From 509296d0bfae1d975ee76057e8794c1f181776cd Mon Sep 17 00:00:00 2001 From: akostadinov-bot Date: Fri, 10 Jul 2026 17:22:55 +0000 Subject: [PATCH 2/2] THREESCALE-14300 THREESCALE-12336 - Bump rack gem to 2.2.23 Bump rack from 2.2.8.1 to 2.2.23 to address multipart file handling and Rack::Directory path traversal issues. Assisted-By: claude-opus-4-6 --- Gemfile.lock | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Gemfile.lock b/Gemfile.lock index 1f96b437..1bbc67f8 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -241,7 +241,7 @@ GEM que (>= 1) sinatra racc (1.7.3) - rack (2.2.8.1) + rack (2.2.23) rack-protection (2.2.3) rack rack-test (2.1.0)