Skip to content

fix(spec)!: credential-shaped datasource config values are refused at write and redacted on every read door for drivers with no shipped contract #31047

fix(spec)!: credential-shaped datasource config values are refused at write and redacted on every read door for drivers with no shipped contract

fix(spec)!: credential-shaped datasource config values are refused at write and redacted on every read door for drivers with no shipped contract #31047

Triggered via pull request October 5, 2026 23:51
Status Success
Total duration 1m 7s
Artifacts –

pr-automation.yml

on: pull_request
Check PR Size
Check PR Size
Check Changeset
1m 3s
Check Changeset
Auto Label
0s
Auto Label
Fit to window
Zoom out
Zoom in

Annotations

2 notices
Check Changeset: .changeset/21840-contractless-datasource-credentials.md#L0
ADR-0087 exemption (no-migration-prescription): a refusal at publish of inline credential material in the config of a datasource whose driver ships no config contract. No authorable key, spelling, export or stored shape is retired or renamed: DatasourceSchema keeps parsing the same config shape, no stored row is read or rewritten by a conversion, and moving a credential into the bound secret is an operator act (the connection form's secret field), not a mechanical FROM to TO rewrite a ledger entry could perform; which key a plugin driver's factory reads its credential from is not knowable here. The new spec exports only widen the surface.
Check Changeset
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"