Skip to content
PR Automation

fix(plugin-security)!: a package-declared position is refused at the data door, as the metadata door already refuses it #31750

Sign in to view logs

fix(plugin-security)!: a package-declared position is refused at the data door, as the metadata door already refuses it

fix(plugin-security)!: a package-declared position is refused at the data door, as the metadata door already refuses it #31750

Triggered via pull request October 9, 2026 01:37
@objectstack-fleetobjectstack-fleet[bot]
edited #22378
claude/issue-22360-declared-position-provenance
Status Success
Total duration 1m 11s
Artifacts –

pr-automation.yml

on: pull_request
Check PR Size
0s
Check PR Size
Check Changeset
1m 7s
Check Changeset
Auto Label
0s
Auto Label
Fit to window
Zoom out
Zoom in

Annotations

2 notices
Check Changeset: .changeset/22360-declared-position-package-provenance.md#L0
ADR-0087 exemption (no-migration-prescription): No metadata moves: no spec key, authorable spelling, export, type or stored shape is added, removed, renamed or re-shaped. What changes is one column the boot seeder writes on its own rows (sys_position.managed_by, now package for a position a code package declares) and, through the system-row write gate, a runtime write door: an admin-door update of such a row's definition columns, and its delete, are refused, while a patch of its row state (active, is_default) passes. No stored row is left for `objectstack migrate meta` to convert, because the seeder corrects the stamp itself at the next boot. The other categories are closed on facts: the package publishes (not unpublished); no ADR-0087 id is named or touched (not registered or already-registered); and no TypeScript declaration moves (not runtime-interface-only or type-surface-only).
Check Changeset
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"