From 05222029c1de4312cd546f0510d1602c0736a118 Mon Sep 17 00:00:00 2001 From: SBrandeis <33657802+SBrandeis@users.noreply.github.com> Date: Mon, 15 Jun 2026 12:22:32 +0200 Subject: [PATCH 1/3] Document granular org.settings.* audit log events The single org.update_settings audit-log event was split into granular org.settings.* events. Document the new event types and note that they replace org.update_settings for filtering/parsing integrations. Co-Authored-By: Claude Fable 5 --- docs/hub/audit-logs.md | 18 ++++++++++++++++-- 1 file changed, 16 insertions(+), 2 deletions(-) diff --git a/docs/hub/audit-logs.md b/docs/hub/audit-logs.md index 78932fc65e..7f0853226f 100644 --- a/docs/hub/audit-logs.md +++ b/docs/hub/audit-logs.md @@ -36,8 +36,22 @@ Each action has an **event name** in `scope.action` format (e.g. `repo.create`, ### Organization Management & Security -- **Core organization changes** — Creation, deletion, restoration, renaming, and profile/settings updates. - - **Events:** `org.create`, `org.delete`, `org.restore`, `org.rename`, `org.update_settings` +- **Core organization changes** — Creation, deletion, restoration, and renaming. + - **Events:** `org.create`, `org.delete`, `org.restore`, `org.rename` +- **Settings changes** — Updates to organization settings are recorded as granular `org.settings.*` events, so you can pinpoint exactly which setting changed. + - General settings — Profile, storage regions, resource groups, and publisher gating. + - **Events:** `org.settings.profile`, `org.settings.regions`, `org.settings.resource_groups`, `org.settings.publisher_gating` + - Inference providers — Provider configuration, API key add/remove, and usage settings. + - **Events:** `org.settings.inference_providers`, `org.settings.inference_providers.keys.add`, `org.settings.inference_providers.keys.remove`, `org.settings.inference_providers.usage` + - SSO — SSO configuration updates, and enabling or disabling SSO. + - **Events:** `org.settings.sso`, `org.settings.sso.enable`, `org.settings.sso.disable` + - Security — Default repository visibility, and enabling or disabling 2FA enforcement, automatic join, and member privacy. + - **Events:** `org.settings.security.repo_visibility`, `org.settings.security.2fa.enable`, `org.settings.security.2fa.disable`, `org.settings.security.auto_join.enable`, `org.settings.security.auto_join.disable`, `org.settings.security.members_privacy.enable`, `org.settings.security.members_privacy.disable` + - Network — Network configuration updates, and enabling or disabling IP access restriction and authentication enforcement. + - **Events:** `org.settings.network`, `org.settings.network.ip_restriction.enable`, `org.settings.network.ip_restriction.disable`, `org.settings.network.auth_enforcement.enable`, `org.settings.network.auth_enforcement.disable` + + > [!TIP] + > These granular events replace the previous single `org.update_settings` event. Historical `org.update_settings` entries already in your logs are unchanged and remain readable, so update any integration that filters or parses the event `type` field to handle the new `org.settings.*` types. - **Security management** - Organization API token rotation. - **Event:** `org.rotate_token` From 1ea2416d7db97b0fbf62233a2fe105e1efbaa521 Mon Sep 17 00:00:00 2001 From: SBrandeis <33657802+SBrandeis@users.noreply.github.com> Date: Mon, 15 Jun 2026 12:24:31 +0200 Subject: [PATCH 2/3] move tip --- docs/hub/audit-logs.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/docs/hub/audit-logs.md b/docs/hub/audit-logs.md index 7f0853226f..876d0d58f3 100644 --- a/docs/hub/audit-logs.md +++ b/docs/hub/audit-logs.md @@ -36,6 +36,9 @@ Each action has an **event name** in `scope.action` format (e.g. `repo.create`, ### Organization Management & Security + > [!TIP] + > These granular events replace the previous single `org.update_settings` event. Historical `org.update_settings` entries already in your logs are unchanged and remain readable, so update any integration that filters or parses the event `type` field to handle the new `org.settings.*` types. + - **Core organization changes** — Creation, deletion, restoration, and renaming. - **Events:** `org.create`, `org.delete`, `org.restore`, `org.rename` - **Settings changes** — Updates to organization settings are recorded as granular `org.settings.*` events, so you can pinpoint exactly which setting changed. @@ -50,8 +53,7 @@ Each action has an **event name** in `scope.action` format (e.g. `repo.create`, - Network — Network configuration updates, and enabling or disabling IP access restriction and authentication enforcement. - **Events:** `org.settings.network`, `org.settings.network.ip_restriction.enable`, `org.settings.network.ip_restriction.disable`, `org.settings.network.auth_enforcement.enable`, `org.settings.network.auth_enforcement.disable` - > [!TIP] - > These granular events replace the previous single `org.update_settings` event. Historical `org.update_settings` entries already in your logs are unchanged and remain readable, so update any integration that filters or parses the event `type` field to handle the new `org.settings.*` types. + - **Security management** - Organization API token rotation. - **Event:** `org.rotate_token` From 38db1efc9bd9f9236677b9ae1986fadbed46bd8d Mon Sep 17 00:00:00 2001 From: SBrandeis <33657802+SBrandeis@users.noreply.github.com> Date: Tue, 16 Jun 2026 15:38:16 +0200 Subject: [PATCH 3/3] comments from code review --- docs/hub/audit-logs.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/hub/audit-logs.md b/docs/hub/audit-logs.md index 876d0d58f3..08be6bcc10 100644 --- a/docs/hub/audit-logs.md +++ b/docs/hub/audit-logs.md @@ -37,7 +37,7 @@ Each action has an **event name** in `scope.action` format (e.g. `repo.create`, ### Organization Management & Security > [!TIP] - > These granular events replace the previous single `org.update_settings` event. Historical `org.update_settings` entries already in your logs are unchanged and remain readable, so update any integration that filters or parses the event `type` field to handle the new `org.settings.*` types. + > The **Settings changes** events below are only available for actions taken after June 16th, 2026. Events before that date use a unique `org.update_settings` event type. Any integration that filters or parses the event `type` field for orgs created before June 16th, 2026, should handle both. - **Core organization changes** — Creation, deletion, restoration, and renaming. - **Events:** `org.create`, `org.delete`, `org.restore`, `org.rename`