build(deps): bump github/codeql-action from 3 to 4#3
Open
dependabot[bot] wants to merge 1 commit into
Open
Conversation
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3 to 4. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@v3...v4) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
podheitor
pushed a commit
that referenced
this pull request
May 30, 2026
First phase of internal user-to-user sharing (roadmap #2/#3). Adds the ACL capability + management surface WITHOUT yet changing read scoping, so it lands safely in isolation; flipping list/get/download to honor grants follows in later phases. Migration 20260908000000 (up+down): drive_file_acl (file_id × grantee_id × privilege READ/WRITE/ADMIN, RLS FORCE), mirroring calendar_acl but on drive_files so it covers files and folders alike. domain/acl.rs: AclRepo with access_level (OWNER for the node owner, the grant privilege for a grantee, None otherwise — mirrors calendar's access_level), grant (idempotent upsert), revoke (404 when absent), list. api/acl.rs: GET/POST /api/v1/drive/files/:id/acl + DELETE .../:grantee_id, all gated by require_admin (caller must be OWNER or hold ADMIN); granting to self is rejected. Verified on the build host: fmt --check clean, clippy -D warnings = 0, drive 459/0 (2 new). Note: drive is bin-only, so tests run --bins (--lib errors 'no library targets').
podheitor
pushed a commit
that referenced
this pull request
May 31, 2026
The iCal ATTACH property (RFC 5545 §3.8.1.1) was preserved in ical_raw on roundtrip but never indexed, so a client couldn't list an event's attachments without re-parsing the blob. Index the metadata and expose it: - ical parser: collect all ATTACH lines into ParsedEvent.attachments, capturing uri (external ref) / fmttype / is_inline. Inline base64 binaries keep is_inline and store NO uri — the bytes stay in ical_raw, never copied into the index. - migration calendar_event_attachments (+down): child table FK to calendar_events ON DELETE CASCADE, tenant-scoped like sibling alarm/history tables. EventRepo re-syncs it (delete-then-insert in-tx) on create/update/ replace_by_uid, so the index always mirrors the current ical_raw. patch leaves it untouched (patch keeps ical_raw stale by design). - api: GET /api/v1/calendars/:cal_id/events/:id/attachments returns the indexed entries, tenant/calendar 404-guarded. Closes roadmap #8. 557 calendar lib tests pass (incl. 5 new ATTACH parser tests).
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps github/codeql-action from 3 to 4.
Release notes
Sourced from github/codeql-action's releases.
... (truncated)
Changelog
Sourced from github/codeql-action's changelog.
... (truncated)
Commits
8442bc0Release process: Automatically rebuild PRs26a1e57Merge pull request #3913 from github/henrymercer/downgrade-ava9b6438eTweak workflowb5b50d6Merge branch 'main' into henrymercer/repo-size-diff-check9665bc2Downgrade ava to version 6.4.15a80681Address review commentsDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)